last executing test programs: 7.304340124s ago: executing program 0 (id=739): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e0000000000000005000000ef00000004000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@ipv4_newnexthop={0x90, 0x68, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x4}, [@NHA_RES_GROUP={0x34, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x3}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x5}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x3}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x5}]}, @NHA_FDB={0x4}, @NHA_GROUP={0xc, 0x2, [{0x2, 0x9}]}, @NHA_OIF={0x8}, @NHA_GROUP={0x2c, 0x2, [{0x2, 0x5}, {0x1, 0x87}, {0x0, 0xde}, {0x1, 0x3}, {0x2, 0x71}]}]}, 0x90}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xfff}, 0x8) sendto$inet6(r2, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa}, 0x1c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, &(0x7f0000000200)) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) recvfrom$ax25(r5, &(0x7f0000000140)=""/29, 0x1d, 0x10000, &(0x7f00000001c0)={{0x3, @bcast, 0x1}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000007380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x200080d0}, 0x8050) sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYRES64=r8, @ANYRES16=r11, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r7, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x4e21, 0xf14, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c) 6.147449504s ago: executing program 0 (id=743): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x17, &(0x7f0000000000), 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b04000000000000000002000000580004802400076e3cc2186cc67f636b65740001140002800800024000000003080001400000000230000180080001006e61740024000280084eba424e4a4ffa8700024000000002080001400000000108000740000000580900010073797a30cc396dbc4b64efd9000000000900020073797a3200000000140000001100010000000000000000000000000acc36a6601dd484fe33115b445015e6e6508e9d43746918e6e809000000000000006743e6"], 0xac}}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000000000)={0x8, &(0x7f0000000300)=[{}, {}, {@fixed}, {@none}, {}, {}, {@fixed}, {@fixed}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x4c, r9, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x32}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '@{/.-\x00'}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x8040) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="100000000d14040029bd0100fcefdf56a9533429841e5897fe0fd389941225"], 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'veth0_to_bridge\x00', @multicast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) r11 = socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @empty, @val={@void}, {@ipv4={0x6000, @tipc={{0x5, 0x4, 0x0, 0x1, 0x40, 0x68, 0x0, 0x0, 0x6, 0x0, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x1, 0xb}, 0x0, 0x2}}}}}}}}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80001, {0x0, 0x0, 0x0, r13, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x703}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) 5.805992058s ago: executing program 3 (id=745): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) close(0x4) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r6, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 5.664067964s ago: executing program 0 (id=747): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x2}, 0x66) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0x4e, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, 0x0, 0x40800) socket$netlink(0x10, 0x3, 0xb) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000008c0)={r2, 0x10, "83cd73d913625563f3877450d9e218b0"}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000580)={r3, 0xb1, "f3663f226195d6a79015bb7b7734e7b5cd0fc5ae73f19549a5265d3f7c2a59f3fb838ee4d0db19a76405a931228efc4b93af18c6e336e5a45f297f041dd5ede1bdfe7bc61efad3ea56471ee3dad245d2d70ee8205fc9d7f6587693b9feac0f83e9d3fd5512fdb2fe2946983477dc88dcc14f570e427ecdf20f78715deb4abf1f0a99766f9cc11615a9eabcb77f2c56270cae48f1f9ab9b4bc26c1d1e1db331e246a97c555caf9d90a9d4c53d954970d39b"}, &(0x7f0000000000)=0xb9) 4.804618475s ago: executing program 3 (id=751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x843}, 0x44040) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000cbfdd5fd9f3a98756fba587524d3"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r1}, &(0x7f0000001780)=0x4, &(0x7f00000017c0)='%pS \x00'}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000005007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003000000000009500000000000000db74589d4b38cc306ac390649f8edea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475be393b1f1e4aba75a0750472719cc516eec8b02df8ef39db6e67fa14b769e7f385ba72c64242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba7000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb1, &(0x7f000000cf3d)=""/173, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x53) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x204, r8, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xfff4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xe36d}, {0x6, 0x11, 0xe5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6f00}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffff7fff}, {0x6, 0x11, 0xe}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x58a2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xac}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xd}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0x5}}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0xfdff) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x1128}}, 0x20000000) r9 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r9, 0x6180, 0x0) sendmmsg$inet6(r9, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000033c0)=[{0x0}], 0x1}}], 0x1, 0xc0000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x1ff, 0x8}, &(0x7f0000000280)=0x8) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x124, 0x3, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x5, 0x1, 0x80000001]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_TUPLE_REPLY={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}, @CTA_NAT_DST={0x4c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x19}}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x8}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}, @CTA_TUPLE_MASTER={0x20, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_LABELS_MASK={0xc, 0x17, [0x1, 0x8]}]}, 0x124}, 0x1, 0x0, 0x0, 0x800}, 0x20080000) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xbc, 0x21, 0x1, 0x70bd2a, 0x4, {{@in6=@private1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffff}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in6=@empty, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e24, 0x4e23, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0xbc}}, 0x0) 3.330029806s ago: executing program 3 (id=755): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/3222], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffec2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80400) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="185ea4ae00000000000000000700"/30], &(0x7f0000000000)='syzkaller\x00'}, 0x90) socket(0x11, 0x800000003, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="b7eb0100000000180000f8ffffff0200000066fbe212aa7b5a1a"], 0x0, 0x1a, 0x0, 0x0, 0xfc5b, 0x10000}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r8}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r8}, 0x38) 3.329457091s ago: executing program 4 (id=756): getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20044080) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710423000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xf34) recvfrom(r1, &(0x7f00000004c0)=""/95, 0x5f, 0x40000000, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf09000000000000b6090400000000006500060009000000180100002020702500000000002020207b9af8ff000000002d9a000000000000340900f4f8ffffffb702000008000000b7030000ffffffff15000000060000003d93000000000000b5030000020000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r4, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff004) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010800000000000000000b000000080003008c7b57c267bb546a9cd860ca9c53eac84677f24bf39a36d39e6979b5b55aefbc07b8d20f10139173e169fc1a43b7be2ca94e09e1a4", @ANYRES32=0x0, @ANYBLOB="04005080"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x5502000000000000}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) 3.287632201s ago: executing program 1 (id=757): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x3}, &(0x7f0000000140)=0x4, 0x0, 0x2, 0x3ff, 0x7, 0x8000000000000000, 0x8, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfffffff4, 0x5}, 0x0, 0x0, 0x1c4f, 0x5, 0x8, 0x8, 0x13}}], 0xb0}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="84010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000fffe00080009000000000008000a000000000008000a00000002"], 0x184}}, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0xb0, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0xb0}}, 0x20000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203b}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x30b, 0x5, 0x8, 0x7, 0x2e, @broadcast}, 0x10) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="2f0000000820000004000000", @ANYRES32, @ANYBLOB="ae556f0f6428154a12197317f04771dd97daa83dc9a952943cef7c741828f84666fe983640d15a7b5e3ed566bf5628f0", @ANYRES64=0x0], 0x20) 3.084831025s ago: executing program 2 (id=758): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000054}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)}}], 0x1, 0x4000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000005000080050011802efff2"], 0x20}], 0x1}, 0x300) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="00000000000007000001000000000000000000001294200c8d8a2ef2eb0831614ff8bf4afa37724e7ec462c046576ad80265177e5e4e429ebe422ffc3c94fb48959e3779871a3fb0"], 0x14}, 0x1, 0x0, 0x0, 0x20040815}, 0x800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x20000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}], 0x1c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r5}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b05, &(0x7f0000000000)={'wlan1\x00'}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000100)={r7, r7, 0xfffe, 0x0, 0x0, 0xc2, 0x85, 0x15c2, 0x5886, 0x6, 0x0, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 2.745187722s ago: executing program 1 (id=759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x8000) r1 = socket$kcm(0x10, 0x2, 0x4) getsockopt(r1, 0x1, 0x2, &(0x7f0000000640)=""/134, &(0x7f0000000140)=0x86) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b51f69853362a", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000080), 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r3, 0x0, 0x4000080) socket$inet(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) recvmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x28}}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') 2.643970395s ago: executing program 2 (id=760): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) close(r6) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r4, 0x0, 0x1100000000f336, 0x0) listen(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0xffffffffeffffffe, 0x0, 0x0, 0x401, 0xfffffffffffffffe, 0x8, 0xffffffffffffffff}, &(0x7f0000000000)={0x18, 0x20000000000}, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, 0x0, 0x20008010) 2.270346206s ago: executing program 0 (id=761): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getuid() setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000580)=0x3, 0x4) sendmsg$nl_generic(r1, 0x0, 0x801) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="2300000001", 0x5) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) sendmmsg(r0, &(0x7f000000ca40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000000c0)}, {&(0x7f0000000940)="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", 0x4c4}], 0x2}}], 0x1, 0x40) 2.268144424s ago: executing program 4 (id=762): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) r2 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003a40)=@newchain={0x44, 0x64, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xfff1}, {0xc, 0xe}}, [@f_rsvp6={{0xa}, {0x14, 0x2, [@TCA_RSVP_POLICE={0xc, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}, @TCA_RSVP_ACT={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40881) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x16, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x1, 0x4000000, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) recvmmsg$unix(r4, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000005c0)=""/183, 0xb7}, {&(0x7f0000000680)=""/139, 0x8b}], 0x2}}], 0x1, 0x10000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x5, @loopback}, 0x5d) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "1b12075058950092", "b9e80696ca5655afe8b79f0112e45a00", "2b174271", "762d67efd1ac456b"}, 0x28) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2) 2.181595422s ago: executing program 3 (id=763): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000400000071106d"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x121342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='rcu_utilization\x00', r3}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000200000000000020"], 0x48) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14, &(0x7f0000000180)={&(0x7f0000000100)="866ac6839ca725a49d658addbe191d3645a79b79e71c930373ac62a02768f61b8fd2b7a2c15c93c990cb4e3bd431f4b2af02e2380becf3ceb569a63885ff987593d121615bb99cd43abb4ebaefa27517edf7b731c16275975b", 0x59}, 0x1, 0x0, 0x0, 0x4000}, 0x20000801) shutdown(r0, 0x1) 2.017625185s ago: executing program 4 (id=764): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x4e21, @multicast2}, {0x6, @multicast}, 0x28, {0x2, 0x4e23, @empty}, 'caif0\x00'}) sendto$inet(r0, &(0x7f0000000040)="0e00", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x27, 0x36, 0x0, &(0x7f0000000880)="f8ad1dcc02cb29dcc8003200810066a286ddc6617f503e7457188353133a3d4070574ac945c1be1c9b296e268bd0fabb3a4ba7534035", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008060006080006040001"], 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)={0x44, 0x0, 0x214, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}]]}, 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x98) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x8, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$kcm(0x29, 0x2, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000000000b4000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d24001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000010c0009800800014000008fce47000d"], 0xfc}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x4010) 1.793149865s ago: executing program 4 (id=765): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0800d907000000000000", 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 1.681497552s ago: executing program 1 (id=766): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) recvfrom(r1, 0x0, 0x0, 0x40002000, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000000)=0x8, 0x4) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@deltclass={0x78, 0x29, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x8, 0xb}, {0x2, 0xa}, {0xfff2, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x1}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0xf}}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x4, 0x6, 0x3ff}}]}}]}, 0x78}}, 0x20040089) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001000)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0xc}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x4000880) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x2, 0x1, 0x4, 0x4}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) sendto$inet6(r3, 0x0, 0x0, 0x884, &(0x7f0000000300)={0xa, 0x4e21, 0x9, @empty, 0x3}, 0x1c) setsockopt$inet6_group_source_req(r2, 0x29, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r9 = socket$unix(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x20, 0x0, 0x0, 0x4000, 0x3}, 0x0, 0x0) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) 1.608512246s ago: executing program 0 (id=767): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) socket$inet(0xa, 0x801, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x6, 0x0}, 0x8) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x4, &(0x7f00000002c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f0000000300)='syzkaller\x00', 0x7, 0xf5, &(0x7f0000000640)=""/245, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x0, 0x4, 0x5}, 0x10, r5, 0x0, 0x0, &(0x7f0000000880)=[r3, r3, r3, r6], 0x0, 0x10, 0x80}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x5c, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x3, 0x7, 0x40000000000009}) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x6c, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}]}}, @filter_kind_options=@f_flow={{0x9}, {0x6c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5317}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8e5af3a2eb153b3b}, 0x48010) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.604668561s ago: executing program 2 (id=768): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x3}, &(0x7f0000000140)=0x4, 0x0, 0x2, 0x3ff, 0x7, 0x8000000000000000, 0x8, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfffffff4, 0x5}, 0x0, 0x0, 0x1c4f, 0x5, 0x8, 0x8, 0x13}}], 0xb0}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000fffe00080009000000000008000a000000000008000a00000002"], 0x184}}, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0xb0, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0xb0}}, 0x20000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203b}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x30b, 0x5, 0x8, 0x7, 0x2e, @broadcast}, 0x10) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="2f0000000820000004000000", @ANYRES32, @ANYBLOB="ae556f0f6428154a12197317f04771dd97daa83dc9a952943cef7c741828f84666fe983640d15a7b5e3ed566bf5628f0", @ANYRES64=0x0], 0x20) 1.442391037s ago: executing program 2 (id=769): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x3}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0xfff}]}}}]}, 0x4c}}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x25, 0x0, 0x0, 0x0, 0x1}, @initr0, @exit, @alu={0x7, 0x0, 0xa, 0x3}]}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100)=0x82) close(r7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r8}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, 0x4100}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r9}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}]}, 0x34}}, 0x4008000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="09052cbd7000fbdbdf250300000003000000000000000a000000e0b829330b0f458c63bc5fca4a013f104cec37b5fa42c361a6a1587db19aff1e89d67463c8eff962992819f9120aecebcacd6d7e8714a5a391a6"], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x40080d0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000180)=@raw=[@ldst={0x1, 0x2, 0x0, 0x1, 0xb, 0xfffffffffffffff4, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x32, 0x1, 0x8, 0x6, 0xa35}], &(0x7f00000001c0)='syzkaller\x00', 0xa3e, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x9}, 0x94) r13 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440), 0x2, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x4c0}, {r10, 0x8229}, {r12, 0x200}, {r13, 0x9785}], 0x4, &(0x7f00000004c0)={0x0, 0x989680}, &(0x7f0000000500)={[0x7fffffff]}, 0x8) r14 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r16, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r17, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc000008000900050000000800070098010000200001"], 0x234}}, 0x0) 1.251306142s ago: executing program 3 (id=770): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xd8e0}) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [0xb09a], "7f49"}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x1, {{}, 0x2, {0x0, 0xfffd}}}}}}}}, 0x0) pwritev(r2, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r1, 0x100000000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) close(r2) unshare(0x6a040000) r5 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6020400) socket$inet_sctp(0x2, 0x1, 0x84) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000040)=""/1, 0x1}, {&(0x7f00000000c0)=""/4, 0x4}, {&(0x7f0000000540)=""/207, 0xcf}, {0x0}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x5) syz_open_procfs$namespace(0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000001700)={0x0, @in6={{0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x30}, 0x6}}}, &(0x7f0000000380)=0x84) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000d41f5298caf6212994d51eee45f33f4b42e915ca9b04d31f30dd975ebd98c12f20efa07f0dc7acfad559", @ANYRES16=0x0, @ANYBLOB="ed4d040000000000000031000000080001000a00000008000300", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r2, @ANYBLOB], 0x2c}}, 0x800) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 1.188366449s ago: executing program 2 (id=771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2004890) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) write$tun(r1, &(0x7f0000000540)={@void, @val={0x6, 0x1, 0xd, 0x4, 0x6, 0x4f4}, @ipv4=@generic={{0xa, 0x4, 0x1, 0x7, 0x69, 0x67, 0x0, 0x7, 0x33, 0x0, @local, @broadcast, {[@timestamp={0x44, 0x10, 0xc0, 0x0, 0x7, [0x1ff, 0x9, 0xc]}, @ra={0x94, 0x4, 0x1}]}}, "77adf1db1c1960691567b0c66d8a01cdccd8d85aa628c369996896dd24f61732410a9115410c3824696fd97af41bab889ba66bb5da3da0cf3bf546796a9f580056"}}, 0x73) socket$nl_generic(0x10, 0x3, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.064223149s ago: executing program 2 (id=772): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x2}, 0x66) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0x4e, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, 0x0, 0x40800) socket$netlink(0x10, 0x3, 0xb) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000008c0)={r2, 0x10, "83cd73d913625563f3877450d9e218b0"}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000580)={r3, 0xb1, "f3663f226195d6a79015bb7b7734e7b5cd0fc5ae73f19549a5265d3f7c2a59f3fb838ee4d0db19a76405a931228efc4b93af18c6e336e5a45f297f041dd5ede1bdfe7bc61efad3ea56471ee3dad245d2d70ee8205fc9d7f6587693b9feac0f83e9d3fd5512fdb2fe2946983477dc88dcc14f570e427ecdf20f78715deb4abf1f0a99766f9cc11615a9eabcb77f2c56270cae48f1f9ab9b4bc26c1d1e1db331e246a97c555caf9d90a9d4c53d954970d39b"}, &(0x7f0000000000)=0xb9) 881.313339ms ago: executing program 4 (id=773): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2}, 0x6) write(r0, &(0x7f00000002c0)="03feba85", 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="25030000000000000000160000001400018001006574683a76657468305f74000000000019000000"], 0x5f}}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000196c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x190}, 0x1, 0x0, 0x0, 0x20040851}, 0x50) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) r5 = socket$unix(0x1, 0x5, 0x0) shutdown(r5, 0x0) bind$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) listen(r5, 0x7) connect$unix(r5, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400", "c14ec98dcd2ad89f"}, 0x28) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket(0x40000000015, 0x805, 0x0) getsockopt(r6, 0x114, 0x271b, &(0x7f0000000440)=""/102400, &(0x7f0000000000)=0x19000) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendto$inet6(r1, &(0x7f0000000140)="b9", 0x1, 0x8000, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000fd0900008400000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r8, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYRES32=r8], 0x28}}, 0x802) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x8, 0x2000000000032, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000000240)="c6", 0x1, 0xc0, 0x0, 0x0) 704.043952ms ago: executing program 1 (id=774): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) r2 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003a40)=@newchain={0x44, 0x64, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xfff1}, {0xc, 0xe}}, [@f_rsvp6={{0xa}, {0x14, 0x2, [@TCA_RSVP_POLICE={0xc, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}, @TCA_RSVP_ACT={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40881) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x16, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x1, 0x4000000, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) recvmmsg$unix(r4, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000005c0)=""/183, 0xb7}, {&(0x7f0000000680)=""/139, 0x8b}], 0x2}}], 0x1, 0x10000, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x5, @loopback}, 0x5d) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "1b12075058950092", "b9e80696ca5655afe8b79f0112e45a00", "2b174271", "762d67efd1ac456b"}, 0x28) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2) 593.073018ms ago: executing program 4 (id=775): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r6, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 537.076998ms ago: executing program 0 (id=776): unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000002020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x4000000) r8 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, 0x0, 0x0) setsockopt$packet_int(r8, 0x107, 0xb, &(0x7f0000000140)=0x4, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x34}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}, {0x0}], 0x2}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)={0x44, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11}, 0x10) 384.536451ms ago: executing program 1 (id=777): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000017c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001e40)={0x2c, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54014840}, 0x20000000) r2 = socket$key(0xf, 0x3, 0x2) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f00000000c0)={@local, @empty, @local}, &(0x7f0000000240)=0xc) sendmsg$key(r2, &(0x7f00000058c0)={0x0, 0x0, &(0x7f0000005880)={&(0x7f0000004800)={0x2, 0x8, 0xf8, 0x7, 0x7, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_address={0x5, 0x5, 0x2b, 0xa0, 0x0, @in6={0xa, 0x4e21, 0x8001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8001}}]}, 0x38}}, 0x20000080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x20000805}, 0x40000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a0002", 0x43) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0xffffffffffff8000, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x48000) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, 0x0, 0x0) close(0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r8) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) 295.500495ms ago: executing program 3 (id=778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x8000) r1 = socket$kcm(0x10, 0x2, 0x4) getsockopt(r1, 0x1, 0x2, &(0x7f0000000640)=""/134, &(0x7f0000000140)=0x86) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b51f69853362a", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000080), 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r3, 0x0, 0x4000080) socket$inet(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) recvmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x28}}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') 0s ago: executing program 1 (id=779): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xd8e0}) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [0xb09a], "7f49"}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x1, {{}, 0x2, {0x0, 0xfffd}}}}}}}}, 0x0) pwritev(r2, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r1, 0x100000000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) close(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') unshare(0x6a040000) unshare(0x6020400) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_buf(r1, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000040)=""/1, 0x1}, {&(0x7f00000000c0)=""/4, 0x4}, {&(0x7f0000000540)=""/207, 0xcf}, {0x0}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x5) syz_open_procfs$namespace(0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000001700)={0x0, @in6={{0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x30}, 0x6}}}, &(0x7f0000000380)=0x84) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000d41f5298caf6212994d51eee45f33f4b42e915ca9b04d31f30dd975ebd98c12f20efa07f0dc7acfad559", @ANYRES16=0x0, @ANYBLOB="ed4d040000000000000031000000080001000a00000008000300", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r2, @ANYBLOB], 0x2c}}, 0x800) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.28' (ED25519) to the list of known hosts. [ 66.835338][ T5849] cgroup: Unknown subsys name 'net' [ 66.959285][ T5849] cgroup: Unknown subsys name 'cpuset' [ 66.967620][ T5849] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.331302][ T5849] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.379152][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.385508][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.372997][ T5873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.383023][ T5875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.391098][ T5875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.401198][ T5875] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.410687][ T5875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.418517][ T5875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.427055][ T5875] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.434775][ T5875] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.444094][ T5870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.451880][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.471563][ T5877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.484090][ T5879] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.493699][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.500924][ T5879] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.504851][ T5875] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.509682][ T5879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.515555][ T5875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.523855][ T5879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.531191][ T5875] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.537862][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.544503][ T5875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.553048][ T5879] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.567792][ T5866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.571640][ T5879] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.586027][ T5879] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.193960][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 73.205347][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 73.337857][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 73.464785][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 73.503605][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 73.542062][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.550109][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.557438][ T5868] bridge_slave_0: entered allmulticast mode [ 73.564572][ T5868] bridge_slave_0: entered promiscuous mode [ 73.585403][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.592579][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.599985][ T5861] bridge_slave_0: entered allmulticast mode [ 73.608076][ T5861] bridge_slave_0: entered promiscuous mode [ 73.621831][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.629097][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.636688][ T5868] bridge_slave_1: entered allmulticast mode [ 73.643651][ T5868] bridge_slave_1: entered promiscuous mode [ 73.678270][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.685403][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.693029][ T5861] bridge_slave_1: entered allmulticast mode [ 73.700272][ T5861] bridge_slave_1: entered promiscuous mode [ 73.788051][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.814963][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.822228][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.829539][ T5859] bridge_slave_0: entered allmulticast mode [ 73.836898][ T5859] bridge_slave_0: entered promiscuous mode [ 73.852240][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.884060][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.895396][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.902711][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.911008][ T5859] bridge_slave_1: entered allmulticast mode [ 73.918352][ T5859] bridge_slave_1: entered promiscuous mode [ 73.957906][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.024191][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.031771][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.039192][ T5860] bridge_slave_0: entered allmulticast mode [ 74.046270][ T5860] bridge_slave_0: entered promiscuous mode [ 74.065224][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.078226][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.101612][ T5861] team0: Port device team_slave_0 added [ 74.108559][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.115696][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.123006][ T5860] bridge_slave_1: entered allmulticast mode [ 74.130107][ T5860] bridge_slave_1: entered promiscuous mode [ 74.152309][ T5868] team0: Port device team_slave_0 added [ 74.170387][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.177811][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.184954][ T5862] bridge_slave_0: entered allmulticast mode [ 74.194372][ T5862] bridge_slave_0: entered promiscuous mode [ 74.208160][ T5861] team0: Port device team_slave_1 added [ 74.234951][ T5868] team0: Port device team_slave_1 added [ 74.265008][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.272684][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.280321][ T5862] bridge_slave_1: entered allmulticast mode [ 74.287930][ T5862] bridge_slave_1: entered promiscuous mode [ 74.309005][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.322592][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.347257][ T5859] team0: Port device team_slave_0 added [ 74.366613][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.373567][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.399909][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.414382][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.421467][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.447611][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.471105][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.478366][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.504445][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.517977][ T5859] team0: Port device team_slave_1 added [ 74.524472][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.531626][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.558157][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.620349][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.649445][ T5860] team0: Port device team_slave_0 added [ 74.656873][ T5879] Bluetooth: hci4: command tx timeout [ 74.662565][ T5879] Bluetooth: hci2: command tx timeout [ 74.668583][ T5873] Bluetooth: hci1: command tx timeout [ 74.668617][ T51] Bluetooth: hci3: command tx timeout [ 74.678970][ T5183] Bluetooth: hci0: command tx timeout [ 74.691101][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.714516][ T5860] team0: Port device team_slave_1 added [ 74.721152][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.728797][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.755574][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.768155][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.775113][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.801583][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.837093][ T5861] hsr_slave_0: entered promiscuous mode [ 74.843409][ T5861] hsr_slave_1: entered promiscuous mode [ 74.916708][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.923681][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.950309][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.978246][ T5868] hsr_slave_0: entered promiscuous mode [ 74.984629][ T5868] hsr_slave_1: entered promiscuous mode [ 74.991392][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 74.997223][ T5868] Cannot create hsr debugfs directory [ 75.021280][ T5862] team0: Port device team_slave_0 added [ 75.044888][ T5859] hsr_slave_0: entered promiscuous mode [ 75.051777][ T5859] hsr_slave_1: entered promiscuous mode [ 75.058490][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 75.064224][ T5859] Cannot create hsr debugfs directory [ 75.070778][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.078314][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.104463][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.140945][ T5862] team0: Port device team_slave_1 added [ 75.200362][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.208146][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.235457][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.295310][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.302493][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.329022][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.417915][ T5860] hsr_slave_0: entered promiscuous mode [ 75.424503][ T5860] hsr_slave_1: entered promiscuous mode [ 75.430866][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 75.436947][ T5860] Cannot create hsr debugfs directory [ 75.523574][ T5862] hsr_slave_0: entered promiscuous mode [ 75.530873][ T5862] hsr_slave_1: entered promiscuous mode [ 75.538154][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 75.543888][ T5862] Cannot create hsr debugfs directory [ 75.938092][ T5861] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.953115][ T5861] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.983542][ T5861] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.008072][ T5861] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.071036][ T5859] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.089745][ T5859] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.112537][ T5859] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.132862][ T5859] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.212115][ T5868] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.249920][ T5868] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.259969][ T5868] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.272815][ T5868] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.331104][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.362317][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.374162][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.390451][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.465325][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.491299][ T5862] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.509305][ T5862] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.519985][ T5862] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.544512][ T5862] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.609381][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.667902][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.675157][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.699570][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.724018][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.731197][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.739412][ T5183] Bluetooth: hci0: command tx timeout [ 76.739429][ T51] Bluetooth: hci2: command tx timeout [ 76.744853][ T5183] Bluetooth: hci1: command tx timeout [ 76.756000][ T51] Bluetooth: hci4: command tx timeout [ 76.759397][ T5879] Bluetooth: hci3: command tx timeout [ 76.771349][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.824889][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.865652][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.892407][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.905804][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.912942][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.929415][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.936572][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.966828][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.973932][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.983042][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.990133][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.015405][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.050186][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.057381][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.114204][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.145723][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.152898][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.231050][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.280003][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.287184][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.392833][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.400029][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.484519][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.817629][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.919119][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.019380][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.029582][ T5868] veth0_vlan: entered promiscuous mode [ 78.112571][ T5859] veth0_vlan: entered promiscuous mode [ 78.127351][ T5868] veth1_vlan: entered promiscuous mode [ 78.179921][ T5859] veth1_vlan: entered promiscuous mode [ 78.210405][ T5860] veth0_vlan: entered promiscuous mode [ 78.220578][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.255130][ T5868] veth0_macvtap: entered promiscuous mode [ 78.269920][ T5860] veth1_vlan: entered promiscuous mode [ 78.295874][ T5868] veth1_macvtap: entered promiscuous mode [ 78.355545][ T5859] veth0_macvtap: entered promiscuous mode [ 78.371371][ T5861] veth0_vlan: entered promiscuous mode [ 78.382488][ T5862] veth0_vlan: entered promiscuous mode [ 78.394110][ T5859] veth1_macvtap: entered promiscuous mode [ 78.410146][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.443420][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.465540][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.474769][ T5861] veth1_vlan: entered promiscuous mode [ 78.491531][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.505629][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.521617][ T5862] veth1_vlan: entered promiscuous mode [ 78.536092][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.573079][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.583054][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.595885][ T5860] veth0_macvtap: entered promiscuous mode [ 78.614936][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.644607][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.662441][ T5860] veth1_macvtap: entered promiscuous mode [ 78.683739][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.699239][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.769489][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.772716][ T5862] veth0_macvtap: entered promiscuous mode [ 78.785862][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.790466][ T5861] veth0_macvtap: entered promiscuous mode [ 78.809638][ T5862] veth1_macvtap: entered promiscuous mode [ 78.816444][ T5879] Bluetooth: hci3: command tx timeout [ 78.817013][ T5866] Bluetooth: hci0: command tx timeout [ 78.821848][ T5879] Bluetooth: hci4: command tx timeout [ 78.827675][ T51] Bluetooth: hci2: command tx timeout [ 78.833388][ T5183] Bluetooth: hci1: command tx timeout [ 78.853296][ T5861] veth1_macvtap: entered promiscuous mode [ 78.863228][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.875135][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.919469][ T1338] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.928666][ T1338] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.939356][ T1338] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.949048][ T1338] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.972567][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.993025][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.034994][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.050726][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.072876][ T5970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.083664][ T5970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.089355][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.129853][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.140136][ T1093] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.149556][ T1093] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.187792][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.195627][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.233544][ T1338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.235007][ T1093] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.254148][ T1338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.279107][ T5868] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.304120][ T5970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.314740][ T1093] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.316217][ T5970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.357315][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.374719][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.430147][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.445322][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.745556][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.817073][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.164683][ T5953] IPVS: starting estimator thread 0... [ 80.199022][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.207185][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.286855][ T6005] IPVS: using max 30 ests per chain, 72000 per kthread [ 80.896587][ T5879] Bluetooth: hci4: command tx timeout [ 80.902959][ T5183] Bluetooth: hci1: command tx timeout [ 80.908645][ T5873] Bluetooth: hci2: command tx timeout [ 80.908673][ T51] Bluetooth: hci0: command tx timeout [ 80.914157][ T5183] Bluetooth: hci3: command tx timeout [ 81.016684][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.075878][ T5993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.777977][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.785698][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.468141][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.517415][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.034368][ T1093] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.060107][ T1093] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.091118][ T1093] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.127026][ T6012] syzkaller0: entered promiscuous mode [ 83.132795][ T6012] syzkaller0: entered allmulticast mode [ 83.150764][ T1093] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.156369][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.171433][ T1093] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.193305][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.223779][ T1093] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.285475][ T1093] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.372042][ T1093] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.427625][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.450819][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.662502][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.693509][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.038399][ T6043] Zero length message leads to an empty skb [ 84.188159][ T6042] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.527711][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 84.731993][ T6042] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.029877][ T6042] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.181042][ T6064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.181332][ T1157] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 85.228072][ T6042] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.265216][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 85.364025][ T6072] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.456639][ T6064] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 85.543352][ T6064] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 85.593241][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 85.631026][ T6072] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.652247][ T6082] geneve2: entered promiscuous mode [ 85.660575][ T6082] geneve2: entered allmulticast mode [ 85.717670][ T6072] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.770235][ T5970] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.803594][ T6072] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.832706][ T5970] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.883661][ T1157] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.047272][ T6086] netlink: 128 bytes leftover after parsing attributes in process `syz.1.17'. [ 86.079813][ T6086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'. [ 86.130116][ T5970] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.140646][ T6088] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.166404][ T6089] netlink: 'syz.1.17': attribute type 10 has an invalid length. [ 86.208817][ T6089] team0: Device ipvlan1 failed to register rx_handler [ 86.263955][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.335015][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.389988][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.430889][ T6095] netlink: 36 bytes leftover after parsing attributes in process `syz.3.19'. [ 86.483486][ T1338] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.621801][ T6099] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21'. [ 86.751225][ T982] cfg80211: failed to load regulatory.db [ 87.317034][ T24] IPVS: starting estimator thread 0... [ 87.372916][ T6118] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 87.420139][ T6119] IPVS: using max 32 ests per chain, 76800 per kthread [ 87.436292][ T6115] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 87.884527][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'. [ 87.926869][ T6129] geneve2: entered promiscuous mode [ 87.934593][ T6129] geneve2: entered allmulticast mode [ 87.960669][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.993234][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.033899][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.070343][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.893490][ T30] audit: type=1800 audit(1756762986.590:2): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.32" name="memory.events" dev="tmpfs" ino=34 res=0 errno=0 [ 89.287694][ T6157] netlink: 256 bytes leftover after parsing attributes in process `syz.4.33'. [ 89.348813][ T6157] netlink: 48 bytes leftover after parsing attributes in process `syz.4.33'. [ 89.622859][ T6157] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 89.651358][ T6134] netlink: 20 bytes leftover after parsing attributes in process `syz.1.38'. [ 89.672425][ T6134] netlink: 'syz.1.38': attribute type 13 has an invalid length. [ 89.688128][ T6134] netlink: 'syz.1.38': attribute type 17 has an invalid length. [ 89.903523][ T6134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.028706][ T6176] tipc: Can't bind to reserved service type 0 [ 90.084646][ T6176] tipc: Failed to remove unknown binding: 66,2,2/0:3905971521/3905971523 [ 90.122436][ T6176] tipc: Failed to remove unknown binding: 66,2,2/0:3905971521/3905971523 [ 90.369859][ T6184] netlink: 36 bytes leftover after parsing attributes in process `syz.1.37'. [ 90.757942][ T6200] bridge_slave_0: left allmulticast mode [ 90.780221][ T6200] bridge_slave_0: left promiscuous mode [ 90.799579][ T6200] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.137112][ T6200] bridge_slave_1: left allmulticast mode [ 91.155117][ T6200] bridge_slave_1: left promiscuous mode [ 91.169496][ T6200] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.182613][ T6200] bond0: (slave bond_slave_0): Releasing backup interface [ 91.199355][ T6200] bond0: (slave bond_slave_1): Releasing backup interface [ 91.212006][ T6193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.41'. [ 91.249484][ T6200] team0: Port device team_slave_0 removed [ 91.306999][ T6200] team0: Port device team_slave_1 removed [ 91.313250][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.337204][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.403900][ T6201] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.699757][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.43'. [ 91.731754][ T6201] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.813627][ T6211] geneve2: entered promiscuous mode [ 91.855076][ T6211] geneve2: entered allmulticast mode [ 91.910585][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 91.932680][ T6201] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.951093][ T6214] netlink: 168 bytes leftover after parsing attributes in process `syz.0.44'. [ 92.006788][ T6216] warning: `syz.1.45' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.074716][ T6201] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.140763][ T60] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 92.271084][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.462450][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.470199][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.965646][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 93.134861][ T6231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.180684][ T6231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.327652][ T6231] geneve2: left promiscuous mode [ 93.332698][ T6231] geneve2: left allmulticast mode [ 93.379596][ T36] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.395365][ T36] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.412835][ T36] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.422204][ T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.512259][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.536838][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.576249][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.739285][ T49] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 93.759308][ T6261] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.023728][ T6261] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.435448][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.57'. [ 94.508101][ T6293] macvtap1: entered promiscuous mode [ 94.546835][ T6293] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 94.580350][ T6299] netlink: 256 bytes leftover after parsing attributes in process `syz.1.58'. [ 94.597512][ T6299] netlink: 48 bytes leftover after parsing attributes in process `syz.1.58'. [ 94.630014][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.57'. [ 94.641238][ T6261] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.787987][ T6261] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.100759][ T6310] netlink: 'syz.3.62': attribute type 1 has an invalid length. [ 95.108672][ T6310] netlink: 208 bytes leftover after parsing attributes in process `syz.3.62'. [ 95.249376][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.373812][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.458623][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.496564][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.613691][ T6319] netlink: 128 bytes leftover after parsing attributes in process `syz.2.65'. [ 95.633536][ T6321] tipc: Started in network mode [ 95.638793][ T6321] tipc: Node identity 4af121327e76, cluster identity 4711 [ 95.649618][ T6324] netlink: 'syz.3.64': attribute type 13 has an invalid length. [ 95.657899][ T6324] netlink: 'syz.3.64': attribute type 17 has an invalid length. [ 95.666956][ T6321] tipc: Enabled bearer , priority 0 [ 95.798036][ T6331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.65'. [ 95.871796][ T6324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.891014][ T6324] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.905625][ T6334] netlink: 'syz.2.65': attribute type 10 has an invalid length. [ 95.925811][ T6324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.948406][ T6326] syzkaller0: entered promiscuous mode [ 95.954940][ T6326] syzkaller0: entered allmulticast mode [ 95.968922][ T6335] tipc: Resetting bearer [ 95.985522][ T6334] team0: Device ipvlan1 failed to register rx_handler [ 96.019146][ T5970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.041888][ T5970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.054193][ T6320] tipc: Resetting bearer [ 96.090744][ T6320] tipc: Disabling bearer [ 96.117373][ T6331] syz.2.65 (6331) used greatest stack depth: 17864 bytes left [ 96.296381][ T6340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.69'. [ 96.330515][ T6340] syzkaller1: entered promiscuous mode [ 96.350184][ T6340] syzkaller1: entered allmulticast mode [ 96.398096][ T6345] syz.4.68 uses obsolete (PF_INET,SOCK_PACKET) [ 96.661369][ T56] IPVS: starting estimator thread 0... [ 96.786275][ T6352] IPVS: using max 38 ests per chain, 91200 per kthread [ 97.200305][ T6363] bridge_slave_0: left allmulticast mode [ 97.206567][ T6363] bridge_slave_0: left promiscuous mode [ 97.212486][ T6363] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.224816][ T6363] bridge_slave_1: left allmulticast mode [ 97.231791][ T6363] bridge_slave_1: left promiscuous mode [ 97.239308][ T6363] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.241841][ T6368] rdma_op ffff8880593a99f0 conn xmit_rdma 0000000000000000 [ 97.268822][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'. [ 97.270707][ T6368] netlink: 'syz.1.74': attribute type 10 has an invalid length. [ 97.289396][ T6363] bond0: (slave bond_slave_0): Releasing backup interface [ 97.300386][ T6363] bond0: (slave bond_slave_1): Releasing backup interface [ 97.315474][ T6363] team0: Port device team_slave_0 removed [ 97.338488][ T6363] team0: Port device team_slave_1 removed [ 97.345100][ T6363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.354217][ T6363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.363728][ T6363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.372088][ T6363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.434951][ T6369] hsr_slave_0: left promiscuous mode [ 97.471509][ T6369] hsr_slave_1: left promiscuous mode [ 97.535330][ T6368] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 97.684489][ T6376] netlink: 256 bytes leftover after parsing attributes in process `syz.0.77'. [ 97.726267][ T6376] netlink: 48 bytes leftover after parsing attributes in process `syz.0.77'. [ 97.770275][ T6376] lo speed is unknown, defaulting to 1000 [ 97.789127][ T6376] lo speed is unknown, defaulting to 1000 [ 97.802950][ T6376] lo speed is unknown, defaulting to 1000 [ 97.931307][ T6382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.942174][ T6382] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.965441][ T6382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.325817][ T6391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.80'. [ 98.335707][ T6385] netlink: 10 bytes leftover after parsing attributes in process `syz.3.78'. [ 98.444297][ T6376] infiniband syz0: set active [ 98.450921][ T982] lo speed is unknown, defaulting to 1000 [ 98.457887][ T6376] infiniband syz0: added lo [ 98.466339][ T982] syz0: Port: 1 Link ACTIVE [ 98.470135][ T6391] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.80'. [ 98.518801][ T6376] RDS/IB: syz0: added [ 98.524320][ T6376] smc: adding ib device syz0 with port count 1 [ 98.532869][ T6376] smc: ib device syz0 port 1 has pnetid [ 98.540731][ T982] lo speed is unknown, defaulting to 1000 [ 98.555900][ T6376] lo speed is unknown, defaulting to 1000 [ 98.561743][ T6391] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.682076][ T6396] netlink: 'syz.3.81': attribute type 2 has an invalid length. [ 99.218952][ T6376] lo speed is unknown, defaulting to 1000 [ 99.978508][ T6376] lo speed is unknown, defaulting to 1000 [ 100.086045][ T6410] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 100.805504][ T6422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.87'. [ 101.112450][ T6433] netlink: 224 bytes leftover after parsing attributes in process `syz.3.89'. [ 101.231711][ T6434] netlink: 'syz.3.89': attribute type 1 has an invalid length. [ 101.371111][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.89'. [ 101.376485][ T5183] Bluetooth: hci0: command 0x080f tx timeout [ 101.525347][ T6426] geneve2: left promiscuous mode [ 101.530805][ T6426] geneve2: left allmulticast mode [ 101.600454][ T6376] lo speed is unknown, defaulting to 1000 [ 101.633588][ T6436] macsec1: entered promiscuous mode [ 101.639163][ T6436] bond0: entered promiscuous mode [ 101.644198][ T6436] bond_slave_0: entered promiscuous mode [ 101.652199][ T6436] bond_slave_1: entered promiscuous mode [ 101.666524][ T6436] bond0: left promiscuous mode [ 101.673990][ T6436] bond_slave_0: left promiscuous mode [ 101.682687][ T6436] bond_slave_1: left promiscuous mode [ 101.712003][ T60] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.737282][ T60] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.759155][ T60] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.778677][ T60] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.815455][ T30] audit: type=1800 audit(1756762999.510:3): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.91" name="memory.events" dev="tmpfs" ino=121 res=0 errno=0 [ 102.028242][ T6453] netlink: 48 bytes leftover after parsing attributes in process `syz.1.92'. [ 102.072224][ T6448] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.202209][ T6448] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.332350][ T6376] lo speed is unknown, defaulting to 1000 [ 102.344534][ T6448] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.360459][ T6465] netlink: 20 bytes leftover after parsing attributes in process `syz.3.98'. [ 102.426415][ T6448] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.464810][ T6465] nbd: socks must be embedded in a SOCK_ITEM attr [ 102.655166][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.718515][ T1157] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.829995][ T5925] udevd[5925]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 102.872236][ T1157] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.895786][ T1157] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.720373][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'. [ 104.085386][ T6505] netlink: 'syz.0.109': attribute type 4 has an invalid length. [ 104.093769][ T6505] netlink: 17 bytes leftover after parsing attributes in process `syz.0.109'. [ 104.421619][ T6513] lo speed is unknown, defaulting to 1000 [ 105.293213][ T6512] lo speed is unknown, defaulting to 1000 [ 105.448964][ T6545] netlink: 292 bytes leftover after parsing attributes in process `syz.2.117'. [ 105.905716][ T6540] lo speed is unknown, defaulting to 1000 [ 106.250255][ T6553] lo speed is unknown, defaulting to 1000 [ 107.075768][ T6563] netlink: 32 bytes leftover after parsing attributes in process `syz.0.120'. [ 107.166573][ T6565] netlink: 256 bytes leftover after parsing attributes in process `syz.4.121'. [ 107.170727][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'. [ 107.175539][ T6565] netlink: 48 bytes leftover after parsing attributes in process `syz.4.121'. [ 107.423255][ T6573] netlink: 48 bytes leftover after parsing attributes in process `syz.4.122'. [ 107.434183][ T6573] netlink: 48 bytes leftover after parsing attributes in process `syz.4.122'. [ 107.446763][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.122'. [ 107.489149][ T6573] batadv0: entered promiscuous mode [ 107.494677][ T6573] macsec1: entered promiscuous mode [ 107.504668][ T6573] batadv0: left promiscuous mode [ 107.666594][ T6574] lo speed is unknown, defaulting to 1000 [ 108.747352][ T6619] netlink: 256 bytes leftover after parsing attributes in process `syz.1.132'. [ 108.757372][ T6619] netlink: 48 bytes leftover after parsing attributes in process `syz.1.132'. [ 109.815708][ T6638] netlink: 256 bytes leftover after parsing attributes in process `syz.0.137'. [ 109.843264][ T6638] syz0: rxe_newlink: already configured on lo [ 109.863526][ T6638] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.971983][ T982] lo speed is unknown, defaulting to 1000 [ 110.133782][ T6643] syzkaller0: entered allmulticast mode [ 110.347413][ T6641] syzkaller0 (unregistering): left allmulticast mode [ 111.227947][ T6677] tipc: Started in network mode [ 111.234207][ T6677] tipc: Node identity 1e160b7a83b4, cluster identity 4711 [ 111.258986][ T6677] tipc: Enabled bearer , priority 0 [ 111.334513][ T6680] syzkaller0: entered promiscuous mode [ 111.350447][ T6680] syzkaller0: entered allmulticast mode [ 111.393778][ T6677] tipc: Resetting bearer [ 111.401645][ T6675] tipc: Resetting bearer [ 111.442977][ T6675] tipc: Disabling bearer [ 111.575098][ T6684] lo speed is unknown, defaulting to 1000 [ 111.884568][ T6694] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.990654][ T6679] lo speed is unknown, defaulting to 1000 [ 112.001424][ T6696] syz0: rxe_newlink: already configured on lo [ 112.062896][ T6696] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.358223][ T6691] rdma_rxe: rxe_newlink: failed to add lo [ 112.596799][ T30] audit: type=1800 audit(1756763010.300:4): pid=6706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.152" name="memory.events" dev="tmpfs" ino=184 res=0 errno=0 [ 112.770755][ T6704] lo speed is unknown, defaulting to 1000 [ 113.063451][ T6721] __nla_validate_parse: 5 callbacks suppressed [ 113.063468][ T6721] netlink: 452 bytes leftover after parsing attributes in process `syz.3.158'. [ 113.620059][ T6723] lo speed is unknown, defaulting to 1000 [ 114.168408][ T6733] tipc: Enabled bearer , priority 0 [ 114.186386][ T6733] syzkaller0: entered promiscuous mode [ 114.192002][ T6733] syzkaller0: entered allmulticast mode [ 114.251392][ T6733] tipc: Resetting bearer [ 114.294755][ T6732] tipc: Resetting bearer [ 114.315242][ T6732] tipc: Disabling bearer [ 115.032402][ T6754] rdma_rxe: rxe_newlink: failed to add lo [ 115.738922][ T6748] netlink: 256 bytes leftover after parsing attributes in process `syz.2.164'. [ 115.761444][ T6779] netlink: 'syz.3.167': attribute type 13 has an invalid length. [ 115.788386][ T6748] netlink: 48 bytes leftover after parsing attributes in process `syz.2.164'. [ 115.805067][ T6779] netlink: 'syz.3.167': attribute type 17 has an invalid length. [ 115.956543][ T6779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.161067][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'. [ 116.429471][ T6793] Driver unsupported XDP return value 0 on prog (id 96) dev N/A, expect packet loss! [ 116.487895][ T6779] lo speed is unknown, defaulting to 1000 [ 116.748198][ T6808] tipc: Enabled bearer , priority 0 [ 116.775165][ T6808] syzkaller0: entered promiscuous mode [ 116.785330][ T6808] syzkaller0: entered allmulticast mode [ 116.807017][ T6808] tipc: Resetting bearer [ 116.814859][ T6807] tipc: Resetting bearer [ 116.867979][ T6807] tipc: Disabling bearer [ 117.153534][ T6815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.173'. [ 118.073657][ T6841] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 118.081337][ T6847] netlink: 224 bytes leftover after parsing attributes in process `syz.0.178'. [ 118.205348][ T6847] netlink: 'syz.0.178': attribute type 1 has an invalid length. [ 118.342686][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.178'. [ 118.364030][ T6847] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.431811][ T6856] bond1: (slave gretap1): making interface the new active one [ 118.464142][ T6856] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 118.624300][ T6858] macsec1: entered promiscuous mode [ 118.655317][ T6858] bond0: entered promiscuous mode [ 118.712250][ T6858] bond0: left promiscuous mode [ 119.022836][ T6883] netlink: 'syz.2.182': attribute type 13 has an invalid length. [ 119.069940][ T6883] netlink: 'syz.2.182': attribute type 17 has an invalid length. [ 119.613574][ T6883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.634065][ T6883] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.666607][ T6883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.782907][ T6910] tipc: Started in network mode [ 119.799939][ T6910] tipc: Node identity 1a3544b33c15, cluster identity 4711 [ 119.825629][ T6910] tipc: Enabled bearer , priority 0 [ 119.866503][ T6912] syzkaller0: entered promiscuous mode [ 119.885604][ T6912] syzkaller0: entered allmulticast mode [ 119.923408][ T6916] netlink: 256 bytes leftover after parsing attributes in process `syz.1.189'. [ 119.934755][ T6916] netlink: 48 bytes leftover after parsing attributes in process `syz.1.189'. [ 119.959060][ T6910] tipc: Resetting bearer [ 120.041037][ T6909] tipc: Resetting bearer [ 120.123626][ T6909] tipc: Disabling bearer [ 120.581640][ T6942] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.692297][ T6943] netlink: 40 bytes leftover after parsing attributes in process `syz.4.194'. [ 120.755003][ T6945] netlink: 'syz.3.197': attribute type 1 has an invalid length. [ 120.979558][ T6942] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.016604][ T6947] netlink: 16 bytes leftover after parsing attributes in process `syz.4.194'. [ 121.243171][ T6942] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.462454][ T6942] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.511880][ T6962] netlink: 'syz.4.199': attribute type 13 has an invalid length. [ 121.535345][ T6962] netlink: 'syz.4.199': attribute type 17 has an invalid length. [ 121.703291][ T6962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.191172][ T6971] tipc: Enabled bearer , priority 0 [ 122.200935][ T6967] syzkaller0: entered promiscuous mode [ 122.232390][ T6967] syzkaller0: entered allmulticast mode [ 122.303853][ T6984] lo speed is unknown, defaulting to 1000 [ 122.338338][ T6989] tipc: Resetting bearer [ 122.416479][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.519904][ T6965] tipc: Resetting bearer [ 122.563430][ T6965] tipc: Disabling bearer [ 122.599884][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.674267][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.841338][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.312428][ T7023] netlink: 224 bytes leftover after parsing attributes in process `syz.4.210'. [ 123.468470][ T7029] netlink: 'syz.4.210': attribute type 1 has an invalid length. [ 123.492934][ T7030] netlink: 256 bytes leftover after parsing attributes in process `syz.1.209'. [ 123.524211][ T7030] netlink: 48 bytes leftover after parsing attributes in process `syz.1.209'. [ 123.590635][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.210'. [ 123.626605][ T7037] netlink: 'syz.0.213': attribute type 13 has an invalid length. [ 123.636036][ T7037] netlink: 'syz.0.213': attribute type 17 has an invalid length. [ 123.657802][ T7029] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.819811][ T7023] bond_slave_0: entered promiscuous mode [ 123.825749][ T7023] bond_slave_1: entered promiscuous mode [ 123.849123][ T7023] macsec1: entered promiscuous mode [ 123.879737][ T7023] bond0: entered promiscuous mode [ 123.916923][ T7023] bond0: left promiscuous mode [ 123.922354][ T7023] bond_slave_0: left promiscuous mode [ 123.927931][ T7023] bond_slave_1: left promiscuous mode [ 124.155371][ T7037] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.606389][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.217'. [ 125.103099][ T7071] syzkaller0: entered promiscuous mode [ 125.134225][ T7071] syzkaller0: entered allmulticast mode [ 125.386888][ T7088] tipc: Enabled bearer , priority 0 [ 125.596133][ T7096] netlink: 'syz.3.222': attribute type 13 has an invalid length. [ 125.612813][ T7096] netlink: 'syz.3.222': attribute type 17 has an invalid length. [ 125.641288][ T30] audit: type=1800 audit(1756763023.340:5): pid=7095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.223" name="memory.events" dev="tmpfs" ino=253 res=0 errno=0 [ 125.864334][ T30] audit: type=1800 audit(1756763023.560:6): pid=7100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.224" name="memory.events" dev="tmpfs" ino=214 res=0 errno=0 [ 126.528498][ T24] tipc: Node number set to 881271090 [ 126.891239][ T7096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.942558][ T7081] tipc: Disabling bearer [ 127.017558][ T7098] lo speed is unknown, defaulting to 1000 [ 127.536508][ T7091] lo speed is unknown, defaulting to 1000 [ 127.700340][ T7112] netlink: 'syz.0.227': attribute type 303 has an invalid length. [ 127.756321][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.227'. [ 127.789003][ T7116] tipc: Started in network mode [ 127.793903][ T7116] tipc: Node identity 629840a4ef2c, cluster identity 4711 [ 127.839751][ T7116] tipc: Enabled bearer , priority 0 [ 127.857298][ T7116] syzkaller0: entered promiscuous mode [ 127.863058][ T7116] syzkaller0: entered allmulticast mode [ 127.931090][ T7116] tipc: Resetting bearer [ 127.939292][ T7115] tipc: Resetting bearer [ 127.972077][ T7115] tipc: Disabling bearer [ 127.996748][ T7118] tipc: Enabled bearer , priority 0 [ 128.005193][ T7118] syzkaller0: entered promiscuous mode [ 128.014412][ T7118] syzkaller0: entered allmulticast mode [ 128.083300][ T7118] tipc: Resetting bearer [ 128.104899][ T7117] tipc: Resetting bearer [ 128.169566][ T7117] tipc: Disabling bearer [ 128.203319][ T30] audit: type=1800 audit(1756763025.900:7): pid=7125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.231" name="memory.events" dev="tmpfs" ino=279 res=0 errno=0 [ 128.436547][ T7123] lo speed is unknown, defaulting to 1000 [ 128.948338][ T7139] netlink: 'syz.3.236': attribute type 13 has an invalid length. [ 128.961554][ T7139] netlink: 'syz.3.236': attribute type 17 has an invalid length. [ 129.005126][ T7139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.212400][ T7144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.237'. [ 129.314228][ T7138] lo speed is unknown, defaulting to 1000 [ 129.724319][ T7149] netlink: 32 bytes leftover after parsing attributes in process `syz.0.238'. [ 129.781914][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'. [ 130.330288][ T7155] lo speed is unknown, defaulting to 1000 [ 130.355517][ T7163] netlink: 48 bytes leftover after parsing attributes in process `syz.0.242'. [ 130.901008][ T7165] netlink: 'syz.3.241': attribute type 1 has an invalid length. [ 130.926120][ T7165] netlink: 'syz.3.241': attribute type 1 has an invalid length. [ 130.946035][ T7165] netlink: 216 bytes leftover after parsing attributes in process `syz.3.241'. [ 131.157541][ T7169] netlink: 128 bytes leftover after parsing attributes in process `syz.2.244'. [ 131.280429][ T7170] tipc: Enabled bearer , priority 0 [ 131.305815][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.244'. [ 131.310408][ T7170] syzkaller0: entered promiscuous mode [ 131.346017][ T7170] syzkaller0: entered allmulticast mode [ 131.357351][ T7171] netlink: 'syz.2.244': attribute type 10 has an invalid length. [ 131.376928][ T7174] netlink: 32 bytes leftover after parsing attributes in process `syz.3.245'. [ 131.388157][ T7171] team0: Device ipvlan1 failed to register rx_handler [ 131.515805][ T7172] tipc: Resetting bearer [ 131.548101][ T7167] tipc: Resetting bearer [ 131.610041][ T7167] tipc: Disabling bearer [ 131.613265][ T7178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.246'. [ 131.783162][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'. [ 131.969106][ T7187] netlink: 'syz.3.247': attribute type 13 has an invalid length. [ 132.023878][ T7187] netlink: 'syz.3.247': attribute type 17 has an invalid length. [ 132.196640][ T7187] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.314490][ T7185] lo speed is unknown, defaulting to 1000 [ 132.835187][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.890218][ T5953] IPVS: starting estimator thread 0... [ 132.986117][ T7206] IPVS: using max 32 ests per chain, 76800 per kthread [ 133.115554][ T7200] lo speed is unknown, defaulting to 1000 [ 133.531016][ T30] audit: type=1800 audit(1756763031.220:8): pid=7225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.256" name="memory.events" dev="tmpfs" ino=316 res=0 errno=0 [ 133.583648][ T7221] lo speed is unknown, defaulting to 1000 [ 133.621870][ T7227] tipc: Enabled bearer , priority 0 [ 133.634391][ T7227] syzkaller0: entered promiscuous mode [ 133.646468][ T7227] syzkaller0: entered allmulticast mode [ 133.857910][ T7228] tipc: Resetting bearer [ 133.882394][ T7226] tipc: Resetting bearer [ 133.907314][ T7226] tipc: Disabling bearer [ 134.230519][ T7236] __nla_validate_parse: 4 callbacks suppressed [ 134.230536][ T7236] netlink: 28 bytes leftover after parsing attributes in process `syz.4.261'. [ 134.673754][ T7245] tipc: Enabling of bearer rejected, failed to enable media [ 134.952505][ T7247] lo speed is unknown, defaulting to 1000 [ 134.963507][ T7250] netlink: 24 bytes leftover after parsing attributes in process `syz.1.265'. [ 135.260096][ T7253] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 135.347585][ T7254] bond0: (slave gretap0): Opening slave failed [ 135.427637][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.435486][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.732243][ T7256] netlink: 'syz.4.267': attribute type 303 has an invalid length. [ 135.778542][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.267'. [ 136.195426][ T7266] netlink: 24 bytes leftover after parsing attributes in process `syz.4.271'. [ 136.527103][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.271'. [ 137.832650][ T7280] netlink: 'syz.1.272': attribute type 1 has an invalid length. [ 138.515085][ T7281] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 138.527644][ T7281] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 138.558236][ T7282] gretap1: entered promiscuous mode [ 138.566862][ T7282] bond1: (slave gretap1): making interface the new active one [ 138.574927][ T7282] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 138.590419][ T7269] lo speed is unknown, defaulting to 1000 [ 138.895370][ T7301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'. [ 139.307006][ T7313] lo speed is unknown, defaulting to 1000 [ 141.064626][ T7324] netlink: 268 bytes leftover after parsing attributes in process `syz.2.279'. [ 141.309122][ T7334] lo speed is unknown, defaulting to 1000 [ 141.894994][ T7341] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 141.944576][ T7341] syzkaller0: entered promiscuous mode [ 141.950542][ T7341] syzkaller0: entered allmulticast mode [ 142.783012][ T7353] trusted_key: syz.2.286 sent an empty control message without MSG_MORE. [ 143.144302][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'. [ 143.391581][ T7361] lo speed is unknown, defaulting to 1000 [ 143.646203][ T7366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.288'. [ 143.964554][ T7365] lo speed is unknown, defaulting to 1000 [ 144.271955][ T7370] netlink: 'syz.1.290': attribute type 4 has an invalid length. [ 144.505078][ T7371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.290'. [ 144.724261][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'. [ 144.887395][ T7376] siw: device registration error -23 [ 145.311399][ T7385] netlink: 48 bytes leftover after parsing attributes in process `syz.0.294'. [ 145.438835][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.296'. [ 145.460763][ T7290] Set syz1 is full, maxelem 65536 reached [ 145.469440][ T7384] tipc: Enabling of bearer rejected, failed to enable media [ 145.523862][ T7384] syzkaller0: entered promiscuous mode [ 145.555591][ T7384] syzkaller0: entered allmulticast mode [ 146.359760][ T5183] Bluetooth: hci4: link tx timeout [ 146.376430][ T5183] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.127184][ T5953] lo speed is unknown, defaulting to 1000 [ 147.132957][ T5953] syz0: Port: 1 Link DOWN [ 147.167437][ T5953] lo speed is unknown, defaulting to 1000 [ 147.467136][ T7435] syzkaller0: entered allmulticast mode [ 147.552489][ T7434] syzkaller0 (unregistering): left allmulticast mode [ 148.292762][ T7447] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 148.335414][ T7447] tipc: Enabling of bearer rejected, failed to enable media [ 148.349158][ T7447] syzkaller0: entered promiscuous mode [ 148.363302][ T5873] Bluetooth: hci4: link tx timeout [ 148.368642][ T5873] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.409099][ T7447] syzkaller0: entered allmulticast mode [ 148.419182][ T5873] Bluetooth: hci4: command 0x0406 tx timeout [ 148.489350][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.311'. [ 148.503405][ T10] IPVS: starting estimator thread 0... [ 148.606099][ T7466] netlink: 48 bytes leftover after parsing attributes in process `syz.3.310'. [ 148.606132][ T7463] IPVS: using max 32 ests per chain, 76800 per kthread [ 148.723695][ T7471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.313'. [ 148.945027][ T7481] rdma_rxe: rxe_newlink: failed to add lo [ 148.971240][ T7481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.262176][ T7487] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 149.288329][ T7487] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 149.301695][ T7487] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 149.377952][ T7490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.320'. [ 149.404009][ T7490] netlink: 104 bytes leftover after parsing attributes in process `syz.3.320'. [ 149.663733][ T7500] netlink: 224 bytes leftover after parsing attributes in process `syz.2.321'. [ 149.705407][ T7498] netlink: 28 bytes leftover after parsing attributes in process `syz.2.321'. [ 149.722621][ T7498] netlink: 28 bytes leftover after parsing attributes in process `syz.2.321'. [ 149.732122][ T7498] netlink: 'syz.2.321': attribute type 4 has an invalid length. [ 150.092357][ T7509] syz0: rxe_newlink: already configured on lo [ 150.293167][ T7518] netlink: 'syz.2.325': attribute type 3 has an invalid length. [ 150.821215][ T5873] Bluetooth: hci4: command 0x0406 tx timeout [ 151.620533][ T7509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.630009][ T7509] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.644084][ T7509] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.708427][ T5946] lo speed is unknown, defaulting to 1000 [ 151.714196][ T5946] syz0: Port: 1 Link ACTIVE [ 151.719134][ T7501] lo speed is unknown, defaulting to 1000 [ 151.743049][ T5946] lo speed is unknown, defaulting to 1000 [ 151.833989][ T7526] netlink: 128 bytes leftover after parsing attributes in process `syz.2.328'. [ 151.935400][ T7533] lo: entered allmulticast mode [ 151.978598][ T7533] dvmrp8: entered allmulticast mode [ 152.046464][ T7536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.328'. [ 152.073680][ T5970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.083741][ T5970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.123064][ T7526] netlink: 'syz.2.328': attribute type 10 has an invalid length. [ 152.125177][ T7537] netlink: 'syz.0.330': attribute type 23 has an invalid length. [ 152.182289][ T7526] team0: Device ipvlan1 failed to register rx_handler [ 152.405588][ T7540] ip6tnl1: entered promiscuous mode [ 152.411687][ T7540] ip6tnl1: entered allmulticast mode [ 152.422159][ T7540] team0: Device ip6tnl1 is of different type [ 152.445689][ T7533] lo speed is unknown, defaulting to 1000 [ 152.683932][ T7545] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 152.718770][ T7545] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 152.763548][ T7545] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 152.962858][ T7531] lo: left allmulticast mode [ 152.979480][ T7531] dvmrp8: left allmulticast mode [ 153.067986][ T7542] lo speed is unknown, defaulting to 1000 [ 153.263396][ T7555] nbd: socks must be embedded in a SOCK_ITEM attr [ 153.490082][ T5925] udevd[5925]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 154.412750][ T7570] __nla_validate_parse: 1 callbacks suppressed [ 154.412768][ T7570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.334'. [ 154.705705][ T7570] bridge_slave_1: left allmulticast mode [ 154.711550][ T7570] bridge_slave_1: left promiscuous mode [ 154.718077][ T7570] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.729532][ T7570] bridge_slave_0: left allmulticast mode [ 154.735255][ T7570] bridge_slave_0: left promiscuous mode [ 154.747575][ T7570] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.892548][ T7576] rdma_rxe: rxe_newlink: failed to add lo [ 154.964728][ T7576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.998254][ T7576] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.025451][ T7576] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.229377][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.341'. [ 155.229645][ T7587] netlink: 24 bytes leftover after parsing attributes in process `syz.0.339'. [ 155.477300][ T7581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'. [ 155.643182][ T7600] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 155.690498][ T7600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.344'. [ 155.692368][ T7603] lo speed is unknown, defaulting to 1000 [ 155.728555][ T7600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.344'. [ 155.784846][ T7607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.346'. [ 155.921881][ T7607] netlink: 56 bytes leftover after parsing attributes in process `syz.0.346'. [ 156.780876][ T7634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.352'. [ 157.486163][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.353'. [ 157.568635][ T7643] sctp: [Deprecated]: syz.2.353 (pid 7643) Use of int in max_burst socket option deprecated. [ 157.568635][ T7643] Use struct sctp_assoc_value instead [ 157.983204][ T30] audit: type=1800 audit(1756763055.670:9): pid=7651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.354" name="memory.events" dev="tmpfs" ino=369 res=0 errno=0 [ 158.114001][ T7649] lo speed is unknown, defaulting to 1000 [ 158.914954][ T7682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.213149][ T7678] rdma_rxe: rxe_newlink: failed to add lo [ 159.395805][ T7688] nbd: socks must be embedded in a SOCK_ITEM attr [ 159.480841][ T5925] block nbd64: NBD_DISCONNECT [ 159.914479][ T5925] udevd[5925]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 160.031090][ T7720] __nla_validate_parse: 6 callbacks suppressed [ 160.031152][ T7720] netlink: 844 bytes leftover after parsing attributes in process `syz.1.365'. [ 160.237224][ T7720] netlink: 20 bytes leftover after parsing attributes in process `syz.1.365'. [ 162.791552][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.369'. [ 162.810369][ T7747] lo speed is unknown, defaulting to 1000 [ 163.012643][ T7774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.371'. [ 163.188255][ T7774] nbd: socks must be embedded in a SOCK_ITEM attr [ 163.368084][ T7778] raw_sendmsg: syz.4.380 forgot to set AF_INET. Fix it! [ 163.603376][ T5925] udevd[5925]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 163.645907][ T7776] lo speed is unknown, defaulting to 1000 [ 164.111809][ T7802] !: renamed from dummy0 (while UP) [ 164.604635][ T7806] lo speed is unknown, defaulting to 1000 [ 165.161419][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'. [ 165.175211][ T7824] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 165.201786][ T7824] tipc: Enabling of bearer rejected, failed to enable media [ 165.246476][ T7824] syzkaller0: entered promiscuous mode [ 165.256236][ T7824] syzkaller0: entered allmulticast mode [ 165.691162][ T7840] netlink: 32 bytes leftover after parsing attributes in process `syz.3.385'. [ 166.071088][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.385'. [ 166.159921][ T7835] gretap1: left promiscuous mode [ 166.383003][ T7855] lo speed is unknown, defaulting to 1000 [ 167.278977][ T7884] lo speed is unknown, defaulting to 1000 [ 167.535745][ T7889] tipc: Started in network mode [ 167.555409][ T7889] tipc: Node identity 06df899efe14, cluster identity 4711 [ 167.563535][ T7889] tipc: Enabled bearer , priority 0 [ 167.596438][ T7887] syzkaller0: entered promiscuous mode [ 167.601942][ T7887] syzkaller0: entered allmulticast mode [ 167.622068][ T7887] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 167.673814][ T7887] tipc: Resetting bearer [ 167.699753][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.395'. [ 167.709284][ T7886] tipc: Resetting bearer [ 167.737981][ T7886] tipc: Disabling bearer [ 167.899538][ T7896] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 167.936780][ T7896] syzkaller0: entered promiscuous mode [ 167.966484][ T7896] syzkaller0: entered allmulticast mode [ 168.348313][ T60] nci: nci_rx_work: unknown MT 0x1 [ 168.397908][ T7900] lo speed is unknown, defaulting to 1000 [ 169.342360][ T7933] netlink: 'syz.0.404': attribute type 6 has an invalid length. [ 170.079148][ T7946] syz0: rxe_newlink: already configured on lo [ 170.114979][ T7946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.183352][ T7953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.409'. [ 170.241456][ T7954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.408'. [ 170.368998][ T7953] netlink: 40 bytes leftover after parsing attributes in process `syz.3.409'. [ 170.640802][ T10] lo speed is unknown, defaulting to 1000 [ 170.647101][ T10] syz0: Port: 1 Link DOWN [ 170.660959][ T10] lo speed is unknown, defaulting to 1000 [ 170.843048][ T60] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 170.929067][ T7973] netlink: 20 bytes leftover after parsing attributes in process `syz.4.413'. [ 171.564288][ T7998] lo speed is unknown, defaulting to 1000 [ 171.867460][ T8006] netlink: 'syz.3.420': attribute type 1 has an invalid length. [ 171.997629][ T8006] bond1 (unregistering): Released all slaves [ 172.265014][ T8017] netlink: 48 bytes leftover after parsing attributes in process `syz.2.421'. [ 172.516277][ T8020] lo speed is unknown, defaulting to 1000 [ 172.615224][ T5867] hid-generic 0005:16C0:0009.0001: unknown main item tag 0x0 [ 172.664484][ T5867] hid-generic 0005:16C0:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 172.939324][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.426'. [ 173.047371][ T8044] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.158070][ T8044] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.356185][ T8044] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.504325][ T8044] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.538095][ T8046] lo speed is unknown, defaulting to 1000 [ 173.749654][ T60] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.803664][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.828138][ T8054] tipc: Enabled bearer , priority 0 [ 173.861958][ T8054] syzkaller0: entered promiscuous mode [ 173.869399][ T8054] syzkaller0: entered allmulticast mode [ 173.880349][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.890884][ T8054] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 173.921036][ T8054] tipc: Resetting bearer [ 173.932848][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.942991][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.430'. [ 173.953874][ T8053] tipc: Resetting bearer [ 173.992458][ T8053] tipc: Disabling bearer [ 174.399727][ T8079] netlink: 256 bytes leftover after parsing attributes in process `syz.2.435'. [ 174.933247][ T8093] !: renamed from dummy0 [ 176.083060][ T8102] Bluetooth: MGMT ver 1.23 [ 176.124401][ T8102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.439'. [ 176.178847][ T8105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.442'. [ 176.193400][ T8103] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 176.221065][ T8103] syzkaller0: entered promiscuous mode [ 176.226659][ T8103] syzkaller0: entered allmulticast mode [ 176.458397][ T8115] Bluetooth: MGMT ver 1.23 [ 176.594110][ T8100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.620392][ T8100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.740841][ T36] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.783822][ T36] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.804124][ T36] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.855276][ T36] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.020187][ T8120] netlink: 788 bytes leftover after parsing attributes in process `syz.0.446'. [ 177.087429][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'. [ 177.249236][ T8129] syz_tun: entered allmulticast mode [ 177.253435][ T8133] nbd: must specify at least one socket [ 177.267595][ T8129] dvmrp8: entered allmulticast mode [ 177.324793][ T8134] netlink: 'syz.1.448': attribute type 13 has an invalid length. [ 177.347923][ T8134] netlink: 'syz.1.448': attribute type 17 has an invalid length. [ 177.398627][ T8129] lo speed is unknown, defaulting to 1000 [ 177.466242][ T8136] netlink: 'syz.4.449': attribute type 23 has an invalid length. [ 177.689971][ T8134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.730623][ T8143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.798700][ T8134] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.840633][ T8134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.061427][ T8144] lo speed is unknown, defaulting to 1000 [ 178.178855][ T8128] syz_tun: left allmulticast mode [ 178.196550][ T8132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.215619][ T8128] dvmrp8: left allmulticast mode [ 178.480394][ T8138] lo speed is unknown, defaulting to 1000 [ 178.799951][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'. [ 179.033216][ T8137] lo speed is unknown, defaulting to 1000 [ 179.038948][ T5970] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.039387][ T5970] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.040082][ T5970] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.081499][ T5970] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.711382][ T8173] netlink: 48 bytes leftover after parsing attributes in process `syz.0.458'. [ 179.866231][ T8174] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 180.277900][ T30] audit: type=1800 audit(1756763077.960:10): pid=8184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.460" name="memory.events" dev="tmpfs" ino=438 res=0 errno=0 [ 180.418208][ T8191] netlink: 128 bytes leftover after parsing attributes in process `syz.3.461'. [ 180.512283][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.461'. [ 180.571111][ T8193] netlink: 'syz.3.461': attribute type 10 has an invalid length. [ 180.594025][ T8180] lo speed is unknown, defaulting to 1000 [ 180.632501][ T8193] team0: Device ipvlan1 failed to register rx_handler [ 180.757203][ T8195] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 180.837495][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'. [ 181.033271][ T8204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.466'. [ 181.330654][ T8201] lo speed is unknown, defaulting to 1000 [ 181.351003][ T8204] netlink: 56 bytes leftover after parsing attributes in process `syz.2.466'. [ 181.444795][ T8213] netlink: 152 bytes leftover after parsing attributes in process `syz.1.467'. [ 181.556161][ T8213] netlink: 16 bytes leftover after parsing attributes in process `syz.1.467'. [ 181.637882][ T8218] netlink: 20 bytes leftover after parsing attributes in process `syz.2.468'. [ 182.156966][ T8226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.469'. [ 182.372993][ T8224] lo speed is unknown, defaulting to 1000 [ 182.586926][ T60] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 183.062517][ T8244] lo speed is unknown, defaulting to 1000 [ 183.146489][ T8252] netlink: 'syz.1.475': attribute type 6 has an invalid length. [ 183.178282][ T8252] netlink: 'syz.1.475': attribute type 12 has an invalid length. [ 183.209652][ T8252] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.475'. [ 183.654046][ T8249] lo speed is unknown, defaulting to 1000 [ 184.053372][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'. [ 184.631621][ T30] audit: type=1800 audit(1756763082.330:11): pid=8283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.482" name="memory.events" dev="tmpfs" ino=574 res=0 errno=0 [ 184.903252][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'. [ 184.930116][ T8281] lo speed is unknown, defaulting to 1000 [ 185.146638][ T8288] tipc: Enabled bearer , priority 0 [ 185.155831][ T8288] tipc: Resetting bearer [ 185.310392][ T8287] tipc: Disabling bearer [ 185.861899][ T8304] tun0: tun_chr_ioctl cmd 2147767520 [ 186.037696][ T8307] netlink: 24 bytes leftover after parsing attributes in process `syz.0.490'. [ 186.254860][ T8307] netlink: 40 bytes leftover after parsing attributes in process `syz.0.490'. [ 186.454851][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.494'. [ 186.467986][ T8318] netlink: 256 bytes leftover after parsing attributes in process `syz.1.492'. [ 186.478287][ T8318] netlink: 48 bytes leftover after parsing attributes in process `syz.1.492'. [ 186.514849][ T8318] rdma_rxe: rxe_newlink: failed to add lo [ 186.582046][ T8318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.622946][ T8321] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 186.640157][ T8321] tipc: Enabled bearer , priority 0 [ 186.654052][ T8321] tipc: Resetting bearer [ 186.720123][ T8320] tipc: Disabling bearer [ 186.892831][ T8334] lo speed is unknown, defaulting to 1000 [ 187.083948][ T8341] netlink: zone id is out of range [ 187.090611][ T8343] netlink: 24 bytes leftover after parsing attributes in process `syz.2.501'. [ 187.107175][ T8341] netlink: zone id is out of range [ 187.114831][ T8341] netlink: zone id is out of range [ 187.130454][ T8341] netlink: zone id is out of range [ 187.166848][ T8341] netlink: zone id is out of range [ 187.189617][ T8341] netlink: zone id is out of range [ 187.240209][ T8341] netlink: zone id is out of range [ 187.283400][ T8341] netlink: zone id is out of range [ 187.300793][ T8341] netlink: zone id is out of range [ 187.350333][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'. [ 187.685724][ T8354] tipc: Enabled bearer , priority 0 [ 187.720494][ T8354] syzkaller0: entered promiscuous mode [ 187.747016][ T8354] syzkaller0: entered allmulticast mode [ 187.906615][ T8354] tipc: Resetting bearer [ 187.928158][ T8357] lo speed is unknown, defaulting to 1000 [ 187.940990][ T8353] tipc: Resetting bearer [ 188.165494][ T8353] tipc: Disabling bearer [ 188.310677][ T8359] lo speed is unknown, defaulting to 1000 [ 188.371849][ T8368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.505'. [ 188.960070][ T30] audit: type=1800 audit(1756763086.660:12): pid=8382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.509" name="memory.events" dev="tmpfs" ino=530 res=0 errno=0 [ 189.581446][ T8382] lo speed is unknown, defaulting to 1000 [ 189.789660][ T8392] syzkaller0: entered promiscuous mode [ 189.805902][ T8392] syzkaller0: entered allmulticast mode [ 191.176193][ T8411] lo speed is unknown, defaulting to 1000 [ 191.648552][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'. [ 191.721604][ T8406] lo speed is unknown, defaulting to 1000 [ 191.733511][ T8422] bridge_slave_1: left allmulticast mode [ 191.752994][ T8422] bridge_slave_1: left promiscuous mode [ 191.760028][ T8422] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.774360][ T8422] bridge_slave_0: left allmulticast mode [ 191.780365][ T8422] bridge_slave_0: left promiscuous mode [ 191.790845][ T8422] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.235837][ T30] audit: type=1800 audit(1756763089.930:13): pid=8427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.518" name="memory.events" dev="tmpfs" ino=536 res=0 errno=0 [ 192.405630][ T8427] lo speed is unknown, defaulting to 1000 [ 192.510819][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.519'. [ 192.917763][ T8444] netlink: 'syz.0.521': attribute type 13 has an invalid length. [ 192.925548][ T8444] netlink: 'syz.0.521': attribute type 17 has an invalid length. [ 193.127588][ T8450] netlink: 'syz.4.522': attribute type 13 has an invalid length. [ 193.129273][ T8444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.143546][ T8450] netlink: 'syz.4.522': attribute type 17 has an invalid length. [ 193.182805][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 193.207106][ T8444] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.260248][ T8444] net_ratelimit: 12 callbacks suppressed [ 193.260258][ T8444] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.328795][ T8436] lo speed is unknown, defaulting to 1000 [ 193.484582][ T8450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.493387][ T8450] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.512044][ T8450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.568514][ T8458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.586866][ T5867] lo speed is unknown, defaulting to 1000 [ 193.587595][ T8462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.592626][ T5867] syz0: Port: 1 Link ACTIVE [ 193.592727][ T5867] lo speed is unknown, defaulting to 1000 [ 193.958007][ T8448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.078186][ T8439] lo speed is unknown, defaulting to 1000 [ 194.087522][ T8496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.524'. [ 194.260292][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.335122][ T8446] lo speed is unknown, defaulting to 1000 [ 194.563590][ T8457] lo speed is unknown, defaulting to 1000 [ 195.572122][ T8502] lo speed is unknown, defaulting to 1000 [ 196.183862][ T30] audit: type=1800 audit(1756763093.880:14): pid=8524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.528" name="memory.events" dev="tmpfs" ino=624 res=0 errno=0 [ 196.341262][ T5866] Bluetooth: hci3: command 0x0406 tx timeout [ 196.346208][ T5879] Bluetooth: hci2: command 0x0406 tx timeout [ 196.348845][ T5866] Bluetooth: hci1: command 0x0406 tx timeout [ 196.396764][ T8519] lo speed is unknown, defaulting to 1000 [ 196.414806][ T8528] netlink: 24 bytes leftover after parsing attributes in process `syz.3.529'. [ 196.521628][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 197.084690][ T8538] netlink: 72 bytes leftover after parsing attributes in process `syz.4.532'. [ 197.102077][ T8537] netlink: 452 bytes leftover after parsing attributes in process `syz.0.531'. [ 197.486384][ T8544] netlink: 'syz.4.533': attribute type 11 has an invalid length. [ 197.494160][ T8544] netlink: 44 bytes leftover after parsing attributes in process `syz.4.533'. [ 198.307678][ T8569] netlink: 'syz.0.538': attribute type 13 has an invalid length. [ 198.346422][ T8569] netlink: 'syz.0.538': attribute type 17 has an invalid length. [ 198.414373][ T8569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.497350][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.539'. [ 198.642028][ T8571] lo speed is unknown, defaulting to 1000 [ 198.849770][ T8569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.490917][ T8573] lo speed is unknown, defaulting to 1000 [ 200.424900][ T8615] !: renamed from dummy0 (while UP) [ 200.919280][ T8622] lo speed is unknown, defaulting to 1000 [ 202.583278][ T8628] lo speed is unknown, defaulting to 1000 [ 203.193466][ T8630] lo speed is unknown, defaulting to 1000 [ 203.485636][ T8684] netlink: 44 bytes leftover after parsing attributes in process `syz.4.558'. [ 203.503068][ T8684] netlink: 43 bytes leftover after parsing attributes in process `syz.4.558'. [ 203.514864][ T8684] netlink: 'syz.4.558': attribute type 5 has an invalid length. [ 203.523088][ T8684] netlink: 43 bytes leftover after parsing attributes in process `syz.4.558'. [ 203.566625][ T8651] rdma_rxe: rxe_newlink: failed to add batadv_slave_0 [ 203.635045][ T8684] lo speed is unknown, defaulting to 1000 [ 203.649308][ T8686] netlink: 192 bytes leftover after parsing attributes in process `syz.4.558'. [ 203.852115][ T8689] netlink: 'syz.0.559': attribute type 13 has an invalid length. [ 203.871838][ T8689] netlink: 'syz.0.559': attribute type 17 has an invalid length. [ 203.905046][ T8689] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.805348][ T8696] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 204.845385][ T8696] syzkaller0: entered promiscuous mode [ 204.862675][ T8696] syzkaller0: entered allmulticast mode [ 205.354069][ T8703] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.564'. [ 205.950497][ T30] audit: type=1800 audit(1756763103.650:15): pid=8723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.568" name="memory.events" dev="tmpfs" ino=667 res=0 errno=0 [ 205.988301][ T8721] lo speed is unknown, defaulting to 1000 [ 207.189760][ T8736] lo speed is unknown, defaulting to 1000 [ 207.782976][ T8738] lo speed is unknown, defaulting to 1000 [ 207.904388][ T8755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.576'. [ 208.286932][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'. [ 208.331541][ T8755] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 208.770714][ T30] audit: type=1800 audit(1756763106.470:16): pid=8773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.579" name="memory.events" dev="tmpfs" ino=689 res=0 errno=0 [ 208.815764][ T8767] lo speed is unknown, defaulting to 1000 [ 209.585232][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.580'. [ 209.604849][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.580'. [ 209.822979][ T8770] lo speed is unknown, defaulting to 1000 [ 210.299078][ T30] audit: type=1800 audit(1756763108.000:17): pid=8785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.582" name="memory.events" dev="tmpfs" ino=644 res=0 errno=0 [ 210.653003][ T8781] lo speed is unknown, defaulting to 1000 [ 211.416685][ T1338] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 211.445680][ T8783] lo speed is unknown, defaulting to 1000 [ 211.917109][ T8811] netlink: 'syz.3.585': attribute type 1 has an invalid length. [ 211.925091][ T8811] netlink: 140 bytes leftover after parsing attributes in process `syz.3.585'. [ 211.934645][ T8811] netlink: 96 bytes leftover after parsing attributes in process `syz.3.585'. [ 212.537599][ T8824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.589'. [ 212.694853][ T8817] lo speed is unknown, defaulting to 1000 [ 212.717633][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.589'. [ 212.857655][ T8827] netlink: 256 bytes leftover after parsing attributes in process `syz.3.590'. [ 212.890710][ T8827] netlink: 48 bytes leftover after parsing attributes in process `syz.3.590'. [ 213.041819][ T8831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.272679][ T8827] rdma_rxe: rxe_newlink: failed to add lo [ 213.499595][ T8837] bond0: (slave wlan1): Releasing backup interface [ 213.573937][ T8837] bond1: (slave gretap1): Releasing active interface [ 213.657195][ T8847] netlink: 'syz.1.592': attribute type 10 has an invalid length. [ 213.778054][ T8847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.810073][ T8847] bond0: (slave wlan1): Opening slave failed [ 214.237410][ T8855] rdma_rxe: rxe_newlink: failed to add lo [ 214.264807][ T8855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.273458][ T8855] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.354728][ T8859] netlink: 'syz.1.599': attribute type 1 has an invalid length. [ 214.415643][ T8859] 8021q: adding VLAN 0 to HW filter on device bond2 [ 214.510843][ T8865] netlink: 24 bytes leftover after parsing attributes in process `syz.4.601'. [ 214.536182][ T8863] 8021q: adding VLAN 0 to HW filter on device bond2 [ 214.573039][ T8863] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 214.592192][ T8863] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 214.625277][ T8859] veth3: entered promiscuous mode [ 214.633385][ T8859] bond2: (slave veth3): Enslaving as an active interface with a down link [ 214.644719][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.601'. [ 214.698071][ T8872] netlink: 48 bytes leftover after parsing attributes in process `syz.3.602'. [ 214.824597][ T8877] netlink: 256 bytes leftover after parsing attributes in process `syz.0.604'. [ 214.861601][ T8877] netlink: 48 bytes leftover after parsing attributes in process `syz.0.604'. [ 214.895626][ T8877] syz0: rxe_newlink: already configured on lo [ 214.955354][ T8877] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.015868][ T8881] lo speed is unknown, defaulting to 1000 [ 215.076745][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.607'. [ 215.155324][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.607'. [ 215.320960][ T30] audit: type=1800 audit(1756763113.020:18): pid=8892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.609" name="memory.events" dev="tmpfs" ino=695 res=0 errno=0 [ 215.534389][ T8898] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 215.573986][ T8898] tipc: Enabled bearer , priority 0 [ 215.589841][ T8898] syzkaller0: entered promiscuous mode [ 215.602645][ T8898] syzkaller0: entered allmulticast mode [ 215.642870][ T8896] tipc: Resetting bearer [ 215.738635][ T8896] tipc: Disabling bearer [ 216.030756][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.614'. [ 216.065427][ T8889] lo speed is unknown, defaulting to 1000 [ 216.396388][ T8912] veth3: left promiscuous mode [ 216.419468][ T8914] netlink: 'syz.4.616': attribute type 4 has an invalid length. [ 216.449645][ T8914] netlink: 152 bytes leftover after parsing attributes in process `syz.4.616'. [ 216.459308][ T8914] block nbd0: not configured, cannot reconfigure [ 216.510827][ T8900] lo speed is unknown, defaulting to 1000 [ 216.570537][ T8916] netlink: 24 bytes leftover after parsing attributes in process `syz.4.616'. [ 217.133664][ T1338] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 217.610036][ T8929] lo speed is unknown, defaulting to 1000 [ 217.661450][ T8938] Bluetooth: MGMT ver 1.23 [ 217.698440][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.620'. [ 217.954750][ T8942] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 218.049179][ T8942] bridge0: entered promiscuous mode [ 218.054427][ T8942] bridge0: entered allmulticast mode [ 218.084836][ T8942] team0: Port device bridge0 added [ 219.154718][ T8955] lo speed is unknown, defaulting to 1000 [ 220.368140][ T8987] bond1: (slave gretap1): Releasing active interface [ 220.424582][ T8988] netlink: 'syz.2.631': attribute type 1 has an invalid length. [ 220.603372][ T8995] netlink: 'syz.0.630': attribute type 10 has an invalid length. [ 220.760652][ T8997] IPVS: Scheduler module ip_vs_sip not found [ 220.775804][ T8995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.789716][ T8995] bond0: (slave wlan1): Opening slave failed [ 221.013105][ T9013] __nla_validate_parse: 2 callbacks suppressed [ 221.013121][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.638'. [ 221.035193][ T9006] lo speed is unknown, defaulting to 1000 [ 221.194688][ T9010] netlink: 36 bytes leftover after parsing attributes in process `syz.1.638'. [ 221.325510][ T9018] netlink: 40 bytes leftover after parsing attributes in process `syz.1.638'. [ 221.403839][ T9010] 8021q: VLANs not supported on ipvlan1 [ 221.434170][ T9020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.639'. [ 221.535029][ T9020] vlan2: entered allmulticast mode [ 221.540402][ T9020] bridge0: entered allmulticast mode [ 221.550643][ T9020] bridge0: port 1(vlan2) entered blocking state [ 221.571839][ T9020] bridge0: port 1(vlan2) entered disabled state [ 221.633456][ T9024] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 221.693783][ T9027] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004 [ 221.807242][ T9027] nbd0: detected capacity change from 0 to 127 [ 221.837384][ T51] block nbd0: Receive control failed (result -32) [ 221.848940][ T6027] block nbd0: Dead connection, failed to find a fallback [ 221.858695][ T6027] block nbd0: shutting down sockets [ 221.865142][ T6027] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.875577][ T6027] Buffer I/O error on dev nbd0, logical block 0, async page read [ 221.884517][ T6027] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.896060][ T6027] Buffer I/O error on dev nbd0, logical block 1, async page read [ 221.904027][ T6027] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.914456][ T6027] Buffer I/O error on dev nbd0, logical block 2, async page read [ 221.922536][ T6027] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.932501][ T6027] Buffer I/O error on dev nbd0, logical block 3, async page read [ 221.941010][ T6027] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.952115][ T6027] Buffer I/O error on dev nbd0, logical block 0, async page read [ 221.960264][ T6027] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.973195][ T6027] Buffer I/O error on dev nbd0, logical block 1, async page read [ 221.984016][ T6027] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.004887][ T6027] Buffer I/O error on dev nbd0, logical block 2, async page read [ 222.017186][ T6027] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.027018][ T6027] Buffer I/O error on dev nbd0, logical block 3, async page read [ 222.035137][ T6027] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.045236][ T6027] Buffer I/O error on dev nbd0, logical block 0, async page read [ 222.053699][ T6027] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 222.079272][ T6027] Buffer I/O error on dev nbd0, logical block 1, async page read [ 222.101417][ T6027] ldm_validate_partition_table(): Disk read failed. [ 222.110938][ T6027] Dev nbd0: unable to read RDB block 0 [ 222.125289][ T6027] nbd0: unable to read partition table [ 222.140735][ T6027] ldm_validate_partition_table(): Disk read failed. [ 222.149756][ T6027] Dev nbd0: unable to read RDB block 0 [ 222.160587][ T6027] nbd0: unable to read partition table [ 222.360813][ T9029] lo speed is unknown, defaulting to 1000 [ 223.339242][ T9058] macsec0: entered promiscuous mode [ 223.356460][ T9058] macsec0: entered allmulticast mode [ 223.372371][ T9058] veth1_macvtap: entered allmulticast mode [ 223.398605][ T9058] macsec0: left promiscuous mode [ 223.419683][ T9058] macsec0: left allmulticast mode [ 223.436453][ T9058] veth1_macvtap: left allmulticast mode [ 223.479506][ T9059] netlink: 'syz.3.648': attribute type 1 has an invalid length. [ 223.487511][ T9059] netlink: 224 bytes leftover after parsing attributes in process `syz.3.648'. [ 223.671578][ T9057] lo speed is unknown, defaulting to 1000 [ 223.860578][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.650'. [ 224.022774][ T9070] netlink: 'syz.1.651': attribute type 13 has an invalid length. [ 224.039123][ T9070] netlink: 'syz.1.651': attribute type 17 has an invalid length. [ 224.238649][ T9070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.255516][ T9070] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.268944][ T9070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.443964][ T9070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.455266][ T9074] lo speed is unknown, defaulting to 1000 [ 224.564773][ T9070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.599875][ T9085] netlink: 44 bytes leftover after parsing attributes in process `syz.3.654'. [ 224.612672][ T9085] netlink: 43 bytes leftover after parsing attributes in process `syz.3.654'. [ 224.622604][ T9085] netlink: 'syz.3.654': attribute type 5 has an invalid length. [ 224.633800][ T9085] netlink: 43 bytes leftover after parsing attributes in process `syz.3.654'. [ 224.640933][ T9081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.068661][ T9087] lo speed is unknown, defaulting to 1000 [ 225.287728][ T9093] netlink: 'syz.4.655': attribute type 1 has an invalid length. [ 225.295461][ T9093] netlink: 140 bytes leftover after parsing attributes in process `syz.4.655'. [ 225.821695][ T9103] netlink: 'syz.2.657': attribute type 13 has an invalid length. [ 225.835806][ T9103] netlink: 'syz.2.657': attribute type 17 has an invalid length. [ 226.044617][ T9103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.053397][ T9106] __nla_validate_parse: 1 callbacks suppressed [ 226.053413][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.658'. [ 226.060255][ T9103] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.083639][ T9103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 226.235250][ T9104] lo speed is unknown, defaulting to 1000 [ 226.333202][ T9112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.659'. [ 226.641982][ T9118] pim6reg: entered allmulticast mode [ 226.678989][ T9121] pim6reg: left allmulticast mode [ 227.190718][ T9126] lo speed is unknown, defaulting to 1000 [ 227.415527][ T9135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.662'. [ 227.607119][ T9141] netlink: 'syz.0.664': attribute type 13 has an invalid length. [ 227.627360][ T9141] netlink: 'syz.0.664': attribute type 17 has an invalid length. [ 227.729457][ T9141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.757609][ T9141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.148158][ T9152] lo speed is unknown, defaulting to 1000 [ 228.513973][ T9157] netlink: 44 bytes leftover after parsing attributes in process `syz.0.669'. [ 228.543996][ T9157] netlink: 43 bytes leftover after parsing attributes in process `syz.0.669'. [ 228.616080][ T9157] netlink: 43 bytes leftover after parsing attributes in process `syz.0.669'. [ 229.232518][ T9169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.670'. [ 229.283024][ T9172] netlink: 14 bytes leftover after parsing attributes in process `syz.3.672'. [ 229.329762][ T9175] netlink: 44 bytes leftover after parsing attributes in process `syz.2.673'. [ 229.340577][ T9175] netlink: 43 bytes leftover after parsing attributes in process `syz.2.673'. [ 229.354856][ T9175] netlink: 'syz.2.673': attribute type 5 has an invalid length. [ 229.363316][ T9169] IPVS: Unknown mcast interface: bridGe_slave0 [ 229.669029][ T9172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.682572][ T9172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.743901][ T9172] bond0 (unregistering): Released all slaves [ 229.965398][ T9180] lo speed is unknown, defaulting to 1000 [ 230.904984][ T9187] lo speed is unknown, defaulting to 1000 [ 231.507703][ T9223] __nla_validate_parse: 8 callbacks suppressed [ 231.507720][ T9223] netlink: 20824 bytes leftover after parsing attributes in process `syz.1.684'. [ 231.524921][ T9224] netlink: 'syz.4.683': attribute type 9 has an invalid length. [ 231.555569][ T9224] netlink: 'syz.4.683': attribute type 6 has an invalid length. [ 231.736137][ T9222] netlink: 'syz.1.684': attribute type 10 has an invalid length. [ 231.795397][ T9222] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 232.467716][ T9225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.850568][ T9236] pim6reg1: entered promiscuous mode [ 232.856658][ T9236] pim6reg1: entered allmulticast mode [ 233.005838][ T9239] netlink: 32 bytes leftover after parsing attributes in process `syz.1.686'. [ 233.102951][ T9239] 8021q: adding VLAN 0 to HW filter on device bond3 [ 233.111757][ T9239] team0: Port device bond3 added [ 233.375054][ T9248] netlink: 44 bytes leftover after parsing attributes in process `syz.1.691'. [ 233.384288][ T9248] netlink: 43 bytes leftover after parsing attributes in process `syz.1.691'. [ 233.396008][ T9248] netlink: 43 bytes leftover after parsing attributes in process `syz.1.691'. [ 233.588961][ T9249] lo speed is unknown, defaulting to 1000 [ 233.968018][ T9261] netlink: 'syz.1.694': attribute type 13 has an invalid length. [ 233.975782][ T9261] netlink: 'syz.1.694': attribute type 17 has an invalid length. [ 234.177059][ T9261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.332799][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'. [ 234.400664][ T1338] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 234.440638][ T9265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.555433][ T9262] lo speed is unknown, defaulting to 1000 [ 235.248955][ T9283] lo speed is unknown, defaulting to 1000 [ 235.332513][ T9285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.472193][ T9287] !: renamed from dummy0 (while UP) [ 236.406712][ T30] audit: type=1800 audit(1756763134.080:19): pid=9300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.702" name="memory.events" dev="tmpfs" ino=726 res=0 errno=0 [ 236.807456][ T9296] lo speed is unknown, defaulting to 1000 [ 237.416542][ T30] audit: type=1800 audit(1756763135.110:20): pid=9322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.704" name="memory.events" dev="tmpfs" ino=732 res=0 errno=0 [ 237.650376][ T9327] syzkaller1: entered promiscuous mode [ 237.666049][ T9327] syzkaller1: entered allmulticast mode [ 238.117948][ T9322] lo speed is unknown, defaulting to 1000 [ 238.781077][ T9328] lo speed is unknown, defaulting to 1000 [ 239.389245][ T9342] lo speed is unknown, defaulting to 1000 [ 241.151331][ T9394] macvlan2: entered allmulticast mode [ 241.173454][ T9394] veth1_vlan: entered allmulticast mode [ 241.205409][ T9394] veth1_vlan: left allmulticast mode [ 241.538186][ T9399] netlink: 'syz.3.719': attribute type 1 has an invalid length. [ 241.545873][ T9399] netlink: 224 bytes leftover after parsing attributes in process `syz.3.719'. [ 241.632004][ T9399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 241.727720][ T9407] netlink: 24 bytes leftover after parsing attributes in process `syz.3.719'. [ 241.740063][ T9408] netlink: 'syz.1.721': attribute type 10 has an invalid length. [ 241.798647][ T9412] netlink: 'syz.1.721': attribute type 10 has an invalid length. [ 241.892934][ T9408] bond0: (slave 0!): Releasing backup interface [ 241.963802][ T9408] team0: Port device 0! added [ 241.992472][ T9412] team0: Port device 0! removed [ 242.020879][ T9412] bond0: (slave 0!): Enslaving as an active interface with an up link [ 242.169313][ T9428] netlink: 'syz.2.724': attribute type 4 has an invalid length. [ 242.242724][ T9428] netlink: 'syz.2.724': attribute type 4 has an invalid length. [ 242.382316][ T9433] netlink: 'syz.2.726': attribute type 4 has an invalid length. [ 242.438710][ T9433] netlink: 'syz.2.726': attribute type 4 has an invalid length. [ 242.447412][ T9435] lo speed is unknown, defaulting to 1000 [ 242.638051][ T9437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'. [ 242.907708][ T9441] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.039700][ T30] audit: type=1800 audit(1756763140.740:21): pid=9442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.728" name="memory.events" dev="tmpfs" ino=764 res=0 errno=0 [ 243.042386][ T9433] lo speed is unknown, defaulting to 1000 [ 243.431708][ T9442] lo speed is unknown, defaulting to 1000 [ 243.840128][ T9439] rdma_rxe: rxe_newlink: failed to add lo [ 244.014276][ T9455] netlink: 256 bytes leftover after parsing attributes in process `syz.1.731'. [ 244.060796][ T9455] netlink: 48 bytes leftover after parsing attributes in process `syz.1.731'. [ 244.186905][ T9455] rdma_rxe: rxe_newlink: failed to add lo [ 244.236645][ T9455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.336438][ T9464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.372808][ T9466] tipc: Failed to remove unknown binding: 66,1,1/881271090:2386582497/2386582499 [ 244.434383][ T9464] tipc: Failed to remove unknown binding: 66,1,1/881271090:2386582497/2386582499 [ 244.451344][ T9464] tipc: Failed to remove unknown binding: 66,1,1/881271090:2386582497/2386582499 [ 244.465755][ T9464] netlink: 788 bytes leftover after parsing attributes in process `syz.0.733'. [ 244.555737][ T30] audit: type=1800 audit(1756763142.250:22): pid=9470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.734" name="memory.events" dev="tmpfs" ino=844 res=0 errno=0 [ 244.570094][ T9458] lo speed is unknown, defaulting to 1000 [ 244.930253][ T9465] netlink: 'syz.2.732': attribute type 6 has an invalid length. [ 244.940437][ T9474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.735'. [ 245.361031][ T9479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.736'. [ 245.444685][ T9470] lo speed is unknown, defaulting to 1000 [ 246.286644][ T9493] netlink: 'syz.0.739': attribute type 10 has an invalid length. [ 246.331330][ T9493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.344822][ T9493] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 246.365090][ T56] syz1: Port: 1 Link ACTIVE [ 246.435383][ T9495] lo speed is unknown, defaulting to 1000 [ 246.447481][ T9495] lo speed is unknown, defaulting to 1000 [ 246.450779][ T9500] netlink: 'syz.4.741': attribute type 1 has an invalid length. [ 246.460331][ T9495] lo speed is unknown, defaulting to 1000 [ 246.496899][ T9498] netlink: 32 bytes leftover after parsing attributes in process `syz.3.740'. [ 246.504184][ T9500] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.540306][ T9495] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 246.593271][ T9502] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.600651][ T9502] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 246.613605][ T9502] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 246.667516][ T9500] veth3: entered promiscuous mode [ 246.684747][ T9500] bond2: (slave veth3): Enslaving as an active interface with a down link [ 246.695010][ T9495] lo speed is unknown, defaulting to 1000 [ 246.706519][ T9503] tipc: Enabled bearer , priority 0 [ 246.723937][ T8485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.732411][ T9495] lo speed is unknown, defaulting to 1000 [ 246.774027][ T8485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.804380][ T9506] veth0_to_bridge: entered promiscuous mode [ 246.822123][ T9506] veth0_to_bridge: entered allmulticast mode [ 246.874223][ T9495] lo speed is unknown, defaulting to 1000 [ 246.919077][ T9495] lo speed is unknown, defaulting to 1000 [ 246.930936][ T9495] lo speed is unknown, defaulting to 1000 [ 246.958565][ T9495] lo speed is unknown, defaulting to 1000 [ 247.060528][ T9511] siw: device registration error -23 [ 247.080568][ T9511] __nla_validate_parse: 1 callbacks suppressed [ 247.080583][ T9511] netlink: 32 bytes leftover after parsing attributes in process `syz.0.743'. [ 247.119372][ T9511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.743'. [ 247.132044][ T9509] netlink: 256 bytes leftover after parsing attributes in process `syz.2.742'. [ 247.158718][ T9509] netlink: 48 bytes leftover after parsing attributes in process `syz.2.742'. [ 247.183411][ T9494] tipc: Disabling bearer [ 247.241599][ T9511] tipc: Enabled bearer , priority 0 [ 247.249724][ T9512] veth0_to_bridge: entered promiscuous mode [ 247.263792][ T9512] veth0_to_bridge: entered allmulticast mode [ 247.309290][ T9510] tipc: Disabling bearer [ 247.531226][ T9520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.746'. [ 247.533064][ T9514] lo speed is unknown, defaulting to 1000 [ 248.320000][ T9527] lo speed is unknown, defaulting to 1000 [ 248.340128][ T9514] lo speed is unknown, defaulting to 1000 [ 248.900534][ T9554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.751'. [ 249.062019][ T9560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.754'. [ 249.150729][ T9559] netlink: 'syz.1.753': attribute type 1 has an invalid length. [ 249.158523][ T9559] netlink: 140 bytes leftover after parsing attributes in process `syz.1.753'. [ 249.167688][ T9559] netlink: 96 bytes leftover after parsing attributes in process `syz.1.753'. [ 249.212083][ T9527] lo speed is unknown, defaulting to 1000 [ 249.988478][ T9569] netlink: 256 bytes leftover after parsing attributes in process `syz.1.757'. [ 250.009954][ T9567] netlink: 'syz.3.755': attribute type 1 has an invalid length. [ 250.029812][ T9569] rdma_rxe: rxe_newlink: failed to add lo [ 250.139362][ T9567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.155394][ T9569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.243990][ T9572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.263822][ T9572] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 250.289671][ T9572] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 250.448699][ T9575] veth7: entered promiscuous mode [ 250.475884][ T9575] bond0: (slave veth7): Enslaving as an active interface with a down link [ 251.066613][ T51] Bluetooth: hci4: link tx timeout [ 251.071778][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 251.188218][ T9605] tipc: Enabled bearer , priority 0 [ 251.199970][ T9605] syzkaller0: entered promiscuous mode [ 251.205576][ T9605] syzkaller0: entered allmulticast mode [ 251.242106][ T9605] tipc: Resetting bearer [ 251.264630][ T9604] tipc: Resetting bearer [ 251.288204][ T9604] tipc: Disabling bearer [ 251.445612][ T9608] netlink: 'syz.4.765': attribute type 13 has an invalid length. [ 251.465173][ T9608] netlink: 'syz.4.765': attribute type 17 has an invalid length. [ 251.504652][ T9608] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.649044][ T9614] rdma_rxe: rxe_newlink: failed to add lo [ 251.668727][ T9614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.742234][ T9619] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 251.847478][ T9620] netlink: 'syz.0.767': attribute type 1 has an invalid length. [ 251.864679][ T9619] batadv_slave_0: entered promiscuous mode [ 252.089505][ T30] audit: type=1800 audit(1756763149.790:23): pid=9624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.770" name="memory.events" dev="tmpfs" ino=751 res=0 errno=0 [ 252.154262][ T9628] lo speed is unknown, defaulting to 1000 [ 252.320004][ T9635] __nla_validate_parse: 10 callbacks suppressed [ 252.320022][ T9635] netlink: 16 bytes leftover after parsing attributes in process `syz.4.773'. [ 252.530864][ T9628] lo speed is unknown, defaulting to 1000 [ 252.531796][ T9632] lo speed is unknown, defaulting to 1000 [ 252.972054][ T9652] netlink: 'syz.0.776': attribute type 1 has an invalid length. [ 253.010038][ T9652] netlink: 224 bytes leftover after parsing attributes in process `syz.0.776'. [ 253.136598][ T5183] Bluetooth: hci4: command 0x0406 tx timeout [ 253.249563][ T51] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 253.261495][ T51] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 253.270021][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 253.279312][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 253.289464][ T51] Workqueue: hci4 hci_cmd_sync_work [ 253.294706][ T51] RIP: 0010:klist_remove+0x14a/0x340 [ 253.300009][ T51] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 b3 b2 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a b3 b2 f6 49 8b 44 24 58 48 89 44 24 08 [ 253.319633][ T51] RSP: 0018:ffffc90000bb76c0 EFLAGS: 00010202 [ 253.325732][ T51] RAX: 000000000000000b RBX: ffff88801a5a9e00 RCX: 0000000000000000 [ 253.333718][ T51] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 253.341699][ T51] RBP: ffffc90000bb77c0 R08: ffffffff8f8a05e3 R09: 1ffffffff1f140bc [ 253.349678][ T51] R10: dffffc0000000000 R11: fffffbfff1f140bd R12: 0000000000000000 [ 253.357646][ T51] R13: 1ffff1100ad10b8c R14: ffff888056885c60 R15: dffffc0000000000 [ 253.365660][ T51] FS: 0000000000000000(0000) GS:ffff888125d16000(0000) knlGS:0000000000000000 [ 253.374613][ T51] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.381184][ T51] CR2: 0000001b33121ff8 CR3: 0000000079234000 CR4: 00000000003526f0 [ 253.389150][ T51] Call Trace: [ 253.392417][ T51] [ 253.395339][ T51] ? __pfx_klist_remove+0x10/0x10 [ 253.400357][ T51] ? __pfx_kobject_move+0x10/0x10 [ 253.405461][ T51] ? do_raw_spin_unlock+0x122/0x240 [ 253.410656][ T51] ? get_device_parent+0x366/0x3a0 [ 253.415764][ T51] device_move+0x193/0x700 [ 253.420171][ T51] hci_conn_del_sysfs+0xb8/0x170 [ 253.425098][ T51] hci_conn_del+0xc33/0x11b0 [ 253.429680][ T51] ? hci_abort_conn_sync+0x24e/0xe30 [ 253.434948][ T51] hci_abort_conn_sync+0x658/0xe30 [ 253.440044][ T51] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 253.445662][ T51] ? hci_conn_valid+0x21/0x230 [ 253.450409][ T51] ? hci_conn_valid+0x21/0x230 [ 253.455159][ T51] ? hci_conn_valid+0x21/0x230 [ 253.459967][ T51] ? hci_conn_valid+0x211/0x230 [ 253.464804][ T51] ? __pfx_abort_conn_sync+0x10/0x10 [ 253.470075][ T51] hci_cmd_sync_work+0x210/0x3a0 [ 253.475008][ T51] ? process_scheduled_works+0x9ef/0x17b0 [ 253.480714][ T51] process_scheduled_works+0xae1/0x17b0 [ 253.486284][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 253.492260][ T51] worker_thread+0x8a0/0xda0 [ 253.496853][ T51] kthread+0x70e/0x8a0 [ 253.500916][ T51] ? __pfx_worker_thread+0x10/0x10 [ 253.506022][ T51] ? __pfx_kthread+0x10/0x10 [ 253.510608][ T51] ? _raw_spin_unlock_irq+0x23/0x50 [ 253.515977][ T51] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.521168][ T51] ? __pfx_kthread+0x10/0x10 [ 253.525743][ T51] ret_from_fork+0x3f9/0x770 [ 253.530321][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 253.535419][ T51] ? __switch_to_asm+0x39/0x70 [ 253.540172][ T51] ? __switch_to_asm+0x33/0x70 [ 253.544943][ T51] ? __pfx_kthread+0x10/0x10 [ 253.549520][ T51] ret_from_fork_asm+0x1a/0x30 [ 253.554278][ T51] [ 253.557282][ T51] Modules linked in: [ 253.561659][ T51] ---[ end trace 0000000000000000 ]--- [ 253.567494][ T51] RIP: 0010:klist_remove+0x14a/0x340 [ 253.572804][ T51] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 b3 b2 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a b3 b2 f6 49 8b 44 24 58 48 89 44 24 08 [ 253.592590][ T51] RSP: 0018:ffffc90000bb76c0 EFLAGS: 00010202 [ 253.598714][ T51] RAX: 000000000000000b RBX: ffff88801a5a9e00 RCX: 0000000000000000 [ 253.607120][ T51] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 253.615115][ T51] RBP: ffffc90000bb77c0 R08: ffffffff8f8a05e3 R09: 1ffffffff1f140bc [ 253.623281][ T51] R10: dffffc0000000000 R11: fffffbfff1f140bd R12: 0000000000000000 [ 253.631371][ T51] R13: 1ffff1100ad10b8c R14: ffff888056885c60 R15: dffffc0000000000 [ 253.639573][ T51] FS: 0000000000000000(0000) GS:ffff888125d16000(0000) knlGS:0000000000000000 [ 253.648743][ T51] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.655408][ T51] CR2: 0000001b33121ff8 CR3: 0000000067e26000 CR4: 00000000003526f0 [ 253.663436][ T51] Kernel panic - not syncing: Fatal exception [ 253.669761][ T51] Kernel Offset: disabled [ 253.674071][ T51] Rebooting in 86400 seconds..