last executing test programs: 41.936096699s ago: executing program 2 (id=1932): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0xa888, 0x0, 0x5000000}}]}}]}, 0x48}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x40000000, @private2={0xfc, 0x2, '\x00', 0xff}, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r3}, 0x38) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000680)={'wg2\x00', &(0x7f0000000640)=@ethtool_rxfh={0x47, 0x7, 0xbd47, 0x4, 0x1, "88a5bb", 0x7, [0x7]}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 38.53855521s ago: executing program 2 (id=1937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x18244, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback}, &(0x7f0000000140)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x5, 0xff, 0x2, 0xdb, @private0, @private1, 0x7860, 0x20, 0xcdc, 0x7}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000240)={@private, @remote, 0x0}, &(0x7f0000000280)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@broadcast, @empty, 0x0}, &(0x7f0000000300)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @broadcast, @local}, &(0x7f0000000380)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x3, 0xa, 0x0, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7800, 0x700, 0x0, 0x81}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x4, 0x86, 0x8, 0x9, 0x3f, @empty, @local, 0x40, 0x7, 0x7, 0xd}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x7, 0x3, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x6c88d7c80e59711c, 0x1, 0x6, 0x7f}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'gre0\x00', &(0x7f00000006c0)={'tunl0\x00', 0x0, 0x8000, 0x90, 0x4, 0xffff, {{0xb, 0x4, 0x3, 0x10, 0x2c, 0x65, 0x0, 0x9b, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x18, 0x5e, 0x0, 0xb, [0x100, 0x0, 0x4, 0xf, 0x9]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x4, 0x46, 0x9, 0x5, 0x88, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x700, 0x101, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000880)={'ip6tnl0\x00', 0x0, 0x2f, 0xd1, 0x1, 0x0, 0x8, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x7, 0xdd7, 0x7}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000bc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000940)={0x224, r2, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x6}, 0x40080) r18 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000d00)={0x0, 0x64, &(0x7f0000000c80)=[@in6={0xa, 0x4e22, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, @in6={0xa, 0x4e21, 0x3cd, @private0, 0x7b29}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e21, 0x2, @remote, 0x5}]}, &(0x7f0000000d40)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r18, 0x84, 0xe, &(0x7f0000000d80)={r19, 0x1, 0x2, 0x9, 0xff29, 0xfff, 0xe6, 0x4, {r20, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x9, 0x40, 0xe, 0x8, 0xf}}, &(0x7f0000000e40)=0xb0) r21 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x7, 0x9, 0x1, 0x2400, r0, 0x7, '\x00', r3, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000010c0)={r21, &(0x7f0000000f00)="a562621acbb44464612b32e85e2d3b57030d7f88364dfd18569dd0624a54be00e58fce19567afa9ffd7c8cc539df0bcfcbad9907932b8aee7149cefd84e54f7b92c1d8c3cec03de7c6bcc8ba0a77cf8e55c57751a8eed0c521a928463a6566131a942253b24f88600cc155341b84bdb1da636eda0930f90893d5ce9d19a3446e1119fee72809ce18f6ecfdf7a1efbfb81e3b7d33649f32701352ed7a4de7f3b7ec42a42fa78032a102972c7a", &(0x7f0000000fc0)=""/248}, 0x20) r22 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r22, &(0x7f0000001640)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x460, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_DESC={0x3e4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xc6}, @NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0x148, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd99}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x34d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffd4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9af}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb9}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x950}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe038}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x771e}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_CONCAT={0xd8, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd45}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x718a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xada9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x34}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5869}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3c97}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_CONCAT={0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8628}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1e0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf29}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x380}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x93}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}]}, @NFTA_SET_DESC_SIZE={0x8}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}, @NFTA_SET_EXPR={0x50, 0x11, 0x0, 0x1, @osf={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_OSF_TTL={0x5}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_OSF_FLAGS={0x8}]}}}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x4a8}, 0x1, 0x0, 0x0, 0x40}, 0x800) r23 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001680)='blkio.bfq.io_queued\x00', 0x0, 0x0) accept4$alg(r23, 0x0, 0x0, 0x800) 38.246975812s ago: executing program 2 (id=1940): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002d00)=""/4096, 0x1000}], 0x1}, 0x9}], 0x1, 0x1832b, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000001400)="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", 0x5c6, 0x6d91fb6102dc910c, 0x0, 0x1267bd6a23834406) sendmmsg$inet6(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="5422d5c3df2fdbe87e7f54d9efa3100768e6dd03", 0x14}, {&(0x7f0000000080)="01b1331bbf7e28a331b9ea2c35b0fe46bf38c21c2996ff67f3ef6fb25b367f0e1d0bc1e91820504299e6a3ce5653c2786cbfa16cbb76a0402bd6e9834ca1796ab4ec20c6b9e4b0c8248b3c4351884d516055b6b9838fe93ff695d2088e2a5e39b3589d4557e991fade29e8529677e79540a04f5ec0eaecd2882b304c776573449744ceb0bb0daf5bdbd45e4aa040a370cb0e3f34e1fbcbeb8f65febca41309e5cb4e4ebada32d60aed0a7768f2cbe2eb1f8529cf5f39ddc794428b6ef5fcb3a673e4ec119e3c81b1dc1b", 0xca}, {&(0x7f0000000180)="7744ba3c584f4d81271c50dc9ccfc85989a1b0cade59be45377833a952aa526058a7a80710121cf027537bedb52306cd2f346291247d160645039d15bde6b1ded9fb3cfb51fee8f25c0eec37cc4d94de628b55757eb0a4df14d1acef21410ec518e4cb44836776f8e44cf14e8cceaf3b452c42ff8eae86d7ade2fcb075d6649e59f716ed6d978d9421209c2e1b548ad2b4b01cad579c08088a62a07f5106aa4c4ba284096b1bcb537542644e37b2ad9f99d649271ab181a1742264df661cbd03", 0xc0}, {&(0x7f0000000280)="d20ea293ed8cdf2ce9d805a84af1f2a1d64fc81b814f57cdcf9e1ee93bde5303de3d6e429e4489ecb7075eab59b15c5d40aa7c", 0x33}, {&(0x7f00000002c0)="96d7a9735567ef166baed3e609b1dcc18a21241b267b5b2e7b3f71dea21006278b745fb4f25c2dd92dd2262703", 0x2d}, {&(0x7f0000000300)="eadcf6ad89fc13b594b84941df0c2dcd3eb7f93feb0620aac38435ea9a9fb50bece79e49226fe56514b66aa62c361d0985bb79751fb528812c9b3b95179e1a3c0bbd9f29a208c40a510fac141e00e3e2b460457062918f6b2114c07ee288767abeea649652daf42e23f8c72088570cbdc5525519488a3bd1fb6f557073c69e07f1568fee0462e1cb59bf90cb5433eba4b7dc4bf206090161114309c8876cf741b54d3ac8e9695f7c7fa920f3d45b789e5504b7251b5731984352f78d094caa6a8e4e63a1a6ad149a17065c7c82c62b2f3f68159f5af52241479cfd90093cad95001f03dac0cccc625b03f3a196c4be8c1d66f68366c7bcff9f", 0xf9}, {&(0x7f0000000400)="12840cd1121bd95e70966f37bff92075e1ded2af04d8e66d157cc7f6a0b33d73113e460a95d3fa85aee103d450366922fc39dc36bdc9027024e3e72a20510fb9f3ad5e39596257493e793fc932f67a95535dd6926fb40f4a7b03606cb2591fbe310e28375ea11669772fc0c3cdb2393d95e9cd7918d3a74b4831b3ef6b1f4ac6097bb31ba9fd1ea3ad26ecc62670ee051452db70b3e177d0fdc97ac5979e43f7414d173795056919a1414f2da311d1b84e", 0xb1}, {&(0x7f00000004c0)="3d65c3112d87c256926d16b881697d983a83200bb0ed0be2b5f1a9949511d60d0b0d9f694bf3f8b71e21727747d53b6e948d9fc84df98ef98a6eb7ae11aab1cff9e0851f98c4e2c2962e11953584519eb8073efb2bb1b9aea1769616cd93d3639fe2b9f848ac75c33a9d368fb87f225b9bbbe045196e2e2353e05eb936ba6bdce23f474fed9df86e83231c72d3d8fb6758e2e429eb80116269922fb2cafad5eaadb91649a56b526c9b591e7d342c57c06f666199468fb8f424fc9bffca5edc66ee58e1026f97da8448029dd3dd4af5ba60b71dcaba2e96c8a6d5", 0xda}], 0x8, &(0x7f0000000640)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffffb}}, @dstopts_2292={{0x100, 0x29, 0x4, {0x89, 0x1d, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x40}}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0xcd}, @generic={0x7, 0xc5, "d9d8c4a2fb16eb21b6e64f5a8e9f108e2642ea909c6896ebbe06510a611c5a3419c7649afca3cb2cbf5277aeecc6ab3379f24bdf7fa5d14e5aa03c94373f1b09ec661d33a96f89f740616bb721e6f1ad22a6a26f2c59525d49fc009803a06278fe61b2028360a55d468dca961ab855e3af62c4b15b3a3a3cb075c0517167f6e34f6cfbe519081cba00537176c5b337916518cd4e654af1a77fb1a9b7434136d6cbe705871887e015a31266bccf005b06dc5b9955d477160d8558a8626fac3d1069723ae9de"}, @enc_lim={0x4, 0x1, 0x7f}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x1d, 0x0, '\x00', [@ra={0x5, 0x2, 0x8}]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@ra, @jumbo={0xc2, 0x4, 0x200}, @jumbo={0xc2, 0x4, 0x1000}, @ra={0x5, 0x2, 0x1}]}}}, @rthdr={{0x88, 0x29, 0x39, {0x33, 0xe, 0x0, 0x0, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @private1, @remote, @empty, @loopback, @private2]}}}], 0x1f0}}], 0x1, 0x800) 37.621412426s ago: executing program 2 (id=1946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)={0x34, 0x9, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x85}, [@IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) (fail_nth: 3) 37.35428437s ago: executing program 2 (id=1948): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) socket$inet6_udp(0xa, 0x2, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x70002008}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003050000", @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e000004000280080005", @ANYRES32=r4, @ANYBLOB='\b\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10, &(0x7f0000000300), 0x0, &(0x7f0000001780)=ANY=[@ANYRES8=r5, @ANYRES32=r0, @ANYBLOB="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"], 0xc0}, 0x8005) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000500)={r3}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002100050100000000000000000200000000000000010001003297a662ea6fabecb6e7edba7fa68e94b2e9a3361af694143484a934cd0361c18eaf3926aae99e4628661a4e1f5d91b3852d7cc4002060e2555068a7d47aa16a72763bcca39309fda6309aab5ba9c65c5415568c2d67c31d987338bfb4b7a893d64f8aaea1b5b27fdc8bdec0d937e607631c520232bde6477f42fb343727c08e0578c2640dc5ca8cfb62f98d5c1281b43359773f66474b669ac70cdddb14d4906df28b81d82946943430d6fa7c74aae0ad84"], 0x1c}}, 0x8001) socket$alg(0x26, 0x5, 0x0) connect$bt_rfcomm(r6, &(0x7f0000000540)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xa) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000340)=r4) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a00034002c3000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044884) 36.24654132s ago: executing program 2 (id=1960): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={r3, 0x1, 0x10, 0xfff, 0x55b}, &(0x7f00000000c0)=0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x9, [@float={0x7, 0x0, 0x0, 0x10, 0x4}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x1, 0x5}, {0xe, 0x3}, {0x3, 0x3}, {0x2, 0x5}, {0x1, 0x3}, {0x2, 0x5}, {0xc, 0x4}, {0x2, 0x2}]}]}, {0x0, [0x30, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x30]}}, &(0x7f00000001c0)=""/189, 0x79, 0xbd, 0x0, 0x1}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x5, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000a40)='syzkaller\x00', 0x8, 0x85, &(0x7f0000000a80)=""/133, 0x41100, 0x65, '\x00', r4, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x2, 0x1, 0xe, 0x3}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xfffffffb}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000f40)={0x8, 0x0, {0x4ac4, @struct={0x9}, 0x0, 0x1, 0x4, 0xa, 0x7, 0x1, 0x10, @struct={0x9e9, 0xfffffffd}, 0x80000000, 0x2, [0x1, 0x9d, 0xfffffffffffffff9, 0x0, 0x8cce, 0x3]}, {0x9, @usage=0xaa42, 0x0, 0x1, 0x4, 0xfffffffffffffff8, 0x1, 0x7f7, 0x480, @struct={0xc02}, 0xa, 0x1, [0x7, 0x7, 0xe, 0xffffffffffffffff, 0x1, 0xff8]}, {0x3, @struct={0x7, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x5ffb4a53, 0x1, 0x44e, @struct={0xe4, 0xd}, 0x8, 0x1, [0x40, 0x5cda, 0x0, 0x6, 0x7]}, {0x1000, 0x0, 0x5}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f0000001340)={r8, 0xe98, 0x9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7, 0x0, 0x4}, 0x18) unshare(0x2a020400) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r9}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x1df3, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) writev(0xffffffffffffffff, &(0x7f0000003500)=[{0x0}, {0x0}, {0x0}], 0x3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, 0x0, &(0x7f0000000580)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0x30, 0x0, 0x1, 0x0, 0x25dfdbfc, {{}, {0x0, 0x6}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc4000) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x4048000) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r11, 0x9c3fa077fa966179, 0x70bd29, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) 34.428452182s ago: executing program 0 (id=1970): socket$unix(0x1, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000480)=""/4088, 0xff8}, {&(0x7f0000001480)=""/83, 0x53}, {&(0x7f0000001580)=""/60, 0x3c}, {&(0x7f0000001980)=""/231, 0xe7}, {&(0x7f00000018c0)=""/182, 0xb6}], 0x6}}], 0x1, 0x40010122, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450000600000000000019078ac1e0001ac1414aa030990780040000441060004006700050567598fac1414aaac1414aa94040100442cd631e00000020000bedeac1414aa0000b0e97f00000100000004eb0000010000000ffffffffffffffffa"], 0x0) socket$inet6_sctp(0xa, 0x2, 0x84) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0xc51e000) socket$inet_sctp(0x2, 0x5, 0x84) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[@ANYBLOB="4cfa99800000000000000076accc1f47d9e610f222c8d7641422ac7583afdf5645b473704fc17da57d4d", @ANYRES16=r5, @ANYBLOB="070000000000000001000200000038000680080003000a01010108000700", @ANYRES32=0x0, @ANYBLOB="060001000a00000014000400ff0100000000000000000000000000010600010002000000"], 0x4c}}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="30000000ecfc886035b9f9e2e8bdbc821ed6d3433ce572f11c1d666cab3c042e70cc0131e271759373586a382fcf8fa8c98623981befa12889461e928f3c45de2b53fe86d9796aa4a71d417589f82b6cb317cc9964a2dae310db71e85ff5e5042f365239d4a212725432ed643fce8bbbeb03572169f03be7be97d6f8ef828fae921a90c4c298ad75672fb822539ab2d2e74d754e93fb4523df370adb8e5cc66aef7f500a0f76361ef8b146e74ca22f6b8e503642e800bdaebd6e37469abc6dbb1f7803995f190b46cd9adc3d955cc4794f46740ae86589bb23482effba5a485a08c6dce16a53e6abab7dc8e3196d00"/248, @ANYRES16=r7, @ANYBLOB="01002cbd700000000000010000001c000180060001000200000008000300ac14141c0800060003000000"], 0x30}, 0x1, 0xff07}, 0x2000000) 33.223764009s ago: executing program 3 (id=1977): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) 32.465111394s ago: executing program 0 (id=1982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r1 = socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x9, 0x6, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x14044007}, 0x240008c4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00004007060108000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x4800) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 32.28893703s ago: executing program 3 (id=1983): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x7fff}, &(0x7f00000001c0)=0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003}, 0x18) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x200, 0x0}, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x17, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1690, 0x94, &(0x7f0000000200)=""/148, 0x40f00, 0xa, '\x00', r3, @fallback=0x11, r4, 0x8, &(0x7f0000000300)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xa, 0x2, 0xffffffff}, 0x10, r5, r6, 0x0, &(0x7f0000000440)=[r8], 0x0, 0x10, 0x7}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x400480c0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007911b80000000a000500004000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 32.052878238s ago: executing program 0 (id=1984): socket$inet(0x2, 0x3, 0x7) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) accept$alg(r1, 0x0, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha512-avx2)\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@updpolicy={0xd0, 0x19, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in=@rand_addr=0x2, 0x4e23, 0x0, 0x4e26, 0x0, 0xa}, {0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {0xfffffffffffffffc}, 0x101}, [@mark={0xc, 0x15, {0x350759, 0xce4}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x20004800) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf25140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000098fd0b008700000006001100040000000800150009000800000044f5dcbb2d73f57fdee15c9e3c1bc28e79114c78d8692c6281d54bbe17fb07a9261416c8082815bb202f5c89e93d9e3c1c849b7420830a8f2b02e1d641548f7496"], 0x54}, 0x1, 0x0, 0x0, 0x4004808}, 0x20008000) recvmmsg(r2, &(0x7f0000006100), 0x49f, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) socket$alg(0x26, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfb, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000000, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x2000) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'ip_vti0\x00', 0x1000}) close(0x4) 31.926374055s ago: executing program 4 (id=1985): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c000180"], 0x44}, 0x1, 0x0, 0x0, 0x200440e5}, 0xc000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a000d0e25bd7000fcdb4c0f000000040000000008000a"], 0x20}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r7) bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@generic={0x0, 0x33}, 0x18) sendmsg$NLBL_MGMT_C_ADDDEF(r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r8}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r10}) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x64, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004401}, 0x4040800) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 31.569786399s ago: executing program 1 (id=1986): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x6f) 31.402361663s ago: executing program 3 (id=1987): r0 = socket(0x840000000002, 0x3, 0xff) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) (async) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000000c0)=0x80, 0x4) (async) sendto$inet6(r4, &(0x7f0000000040)="00d8", 0x10b0c, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8fffdffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) (async) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x2c, 0x19, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x8004) (async) sendmmsg$inet(r0, &(0x7f0000001dc0)=[{{&(0x7f00000001c0)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000003c0)="a9050000fb00746400010000000000462bfbdf41009f3f699c9c78616e591ed0c6b856f9", 0x24}, {0x0}], 0x2}}], 0x1, 0x20044044) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') 31.2142333s ago: executing program 1 (id=1988): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x20040004, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002b00)=[{{&(0x7f0000000880)=@sco, 0x80, &(0x7f0000001c40), 0x0, &(0x7f0000001cc0)=""/210, 0xd2}, 0xc}, {{&(0x7f0000001dc0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x1}, {{&(0x7f0000002640)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000027c0)=[{0x0}], 0x1}, 0x4}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002900)=""/159, 0x9f}, {&(0x7f00000029c0)=""/163, 0xa3}], 0x2, &(0x7f0000002ac0)=""/15, 0xf}, 0xacf}], 0x4, 0x2001, 0x0) (async) recvmmsg(r0, &(0x7f0000002b00)=[{{&(0x7f0000000880)=@sco, 0x80, &(0x7f0000001c40), 0x0, &(0x7f0000001cc0)=""/210, 0xd2}, 0xc}, {{&(0x7f0000001dc0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x1}, {{&(0x7f0000002640)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000027c0)=[{0x0}], 0x1}, 0x4}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002900)=""/159, 0x9f}, {&(0x7f00000029c0)=""/163, 0xa3}], 0x2, &(0x7f0000002ac0)=""/15, 0xf}, 0xacf}], 0x4, 0x2001, 0x0) 30.918453726s ago: executing program 1 (id=1989): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2c020400) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001000000596d1ad978fa", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x48) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r2, 0x913e0000) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000400000020001000000000000000a18ff00000005000500000000000a"], 0x70}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0x3000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000833000/0x13000)=nil, 0x13000, 0x300000c, 0x12, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r7, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@algo_auth={0x48, 0x1, {{'sha224-avx2\x00'}}}]}, 0x138}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x1000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) 30.5489147s ago: executing program 3 (id=1990): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000fcffffff00fbffffff0001009500000000000069"], &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000000)={0x1, 0x1, 0xa, 0x5, 0x8, 0x81}) r3 = accept4(r2, &(0x7f0000000340)=@qipcrtr, &(0x7f0000000200)=0x80, 0x81000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES8=r2, @ANYRES16=r3, @ANYBLOB="e85b4587a31ba53f816d4491e9a0251688f8b6e07c4f1a09"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$alg(0x26, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r6, @ANYRES8=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x2, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000880)={0x0, 0xe73cd31f5aa3ee1d, &(0x7f0000000840)={&(0x7f00000002c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40c4020}, 0x20002884) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e22, 0x2, @loopback, 0x7}}, [0x6, 0x5, 0x95, 0x6, 0x8000000000004, 0xf4db, 0xe, 0x9, 0x80, 0x8, 0x9, 0x4, 0x4, 0x2, 0x1]}, &(0x7f00000001c0)=0x100) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r10, 0x0, 0x0, 0x102, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9], 0x90}}, 0x0) 30.429096319s ago: executing program 0 (id=1991): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$inet(0x2, 0x4000000000000001, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xffe0}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x40}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054) 30.229413491s ago: executing program 4 (id=1992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x20010, r3, 0x97f94000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000006c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000008c0)={{r0}, r6, 0x14, @unused=[0x9, 0x6, 0x400, 0x4], @name="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"}) 30.039777511s ago: executing program 1 (id=1993): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 29.935051413s ago: executing program 4 (id=1994): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e690100000001000000b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x0) unshare(0x6020400) (async) unshare(0x6020400) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000001000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000001000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000600)='mm_page_alloc\x00', r5, 0x0, 0x4}, 0x18) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x20000084) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x20000084) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x80}, 0xc) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0x7d, &(0x7f0000000340)={0x8, 0x77, 0x6, 0x10, 0x39c1, 0x4, 0x4}, &(0x7f0000000840)=0x20) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e23, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c) socket(0x11, 0x80a, 0x0) (async) r11 = socket(0x11, 0x80a, 0x0) getsockname$packet(r11, 0x0, &(0x7f0000000040)) (async) getsockname$packet(r11, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0x7, &(0x7f0000000000)={0x40000000, 0x1, 0x1, 0x3}, 0x10) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) 29.808590837s ago: executing program 0 (id=1995): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xffffffff}, 0x50) (async) r1 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1}, 0x24}}, 0x0) (async) unshare(0x22020600) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xc6}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x200}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x1, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x0, 0x4, 0x4, 0x7, 0x30, 0x8}], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) (async) r6 = socket$inet6(0x10, 0x2, 0x6) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r7, &(0x7f0000000a40)="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", &(0x7f0000000500)=""/56}, 0x20) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) (async) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1d, 0x0, 0x0, 0x8000, 0x24}, 0x48) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@setlink={0x30, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200, 0x21a2}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}]}, 0x30}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) (async) sendmmsg$alg(r7, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)="6c7b3f2dd49ec4014f301f93a7cd678bf86831da1134ae78a3efd96bdaf7b4f9884128af9d766f1c569aa593ca3c526567dbe37d6f4ce8fc237a67b011fd2fc7b96130faa9e2722be9ad12ec2c8cfcc51dfbf354bb111e37dba6ff321c0e4f2e3db767e0be1b0cf863a94dbd291f11ec951b46f6e3d945ac084223601135b90a9b80192d4a65d3e0ec671e2b65472b7ce2b5bc6a18f36c2976a95ccdb564e9b7f8ad4c2f152a986cce9be5cd92e2f6fdd2a349d30c0307f4f359e9b44f9bb5d5100409a0086484de094f46603c830b88b220429d5e03fcdd83b227ebc8d9004d42dd690d79b7dd8ef13475", 0xeb}, {&(0x7f00000003c0)="03809da15257a693d764169576f64ef83ab281c4b9a776e767b16afd0624261cdcd53b475a12be7a521fc874339a8ecef490c09a25a204563b94416d00db7b3837c48ef1fb09e1a0acc8fcbda70fcbae51f0797196454f84ae4c05de7102b03d208337297e6eb2ac2b046bda5db6c48cf2fa3fcd7577ed37c03b597c23a86b7f85d0014c37b583572371a1411dfcef956939358e14df921e3fe86fa720da9417eb748e58214059781daf04efc43a466ca625a76ab95c1e2903989d050e8176c96f4b5a5aada92de28dae20670543434a59a3badd25051d279c4efc9b48cea31bb69a", 0xe2}, {&(0x7f00000001c0)="89459f6a91577a1514be757bd7737ccb5e31f659c6cb8ebf1e543c64b439c14c0e6bb4a526e3a981", 0x28}], 0x3, 0x0, 0x0, 0x4800}], 0x1, 0x40) (async) getsockopt$sock_buf(r6, 0x1, 0x4a, 0x0, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000fb45ec7000000000000000002000062", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000005609010000000000270000000000000018010000696c6c2500000000002020207b1af8ff00000000bda100000000000037010000f8ffffffb702000008000000b70300004000000025000000060000009c23000000000000b5030000010000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0xe, '\x00', r11, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 29.679258471s ago: executing program 1 (id=1996): r0 = socket$netlink(0x10, 0x3, 0x4) (async) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write(r0, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001c0000000000043a7200000072000000050000000c000000000000010000000043007903070000000000000b020000000b0000000200000f0200000001000000070000000000000002000000f2ffffff910000000b450b0000000200000509000000010000000400000009000000070000000200000032a40000080000000000001201000000000000305f3000"], &(0x7f0000000280)=""/6, 0x91, 0x6, 0x1, 0xb71, 0x10000}, 0x28) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x10}, 0x18) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0xff01, 0x0) (async) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e22, 0x7, @loopback, 0x9}, {0xa, 0x4e21, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd0f2}, 0x1, {[0x4, 0x8bd52, 0x1000, 0x6, 0x9, 0x1, 0x0, 0x378daea3]}}, 0x5c) (async, rerun: 64) r9 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) bind$inet(r9, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) (async, rerun: 32) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (rerun: 32) connect$inet(r9, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r9, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x20000890) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) (async) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0x23f3}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r8, 0xffffffffffffffff}, 0x4) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000072009fb3000000000000000007"], 0x20}}, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="00000000000000000000ffffffffffffffe00000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r14}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2, 0x1}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000140)='syzkaller\x00', 0x1ff, 0x13, &(0x7f0000000180)=""/19, 0x41100, 0x20, '\x00', r3, 0x1a, r4, 0x8, &(0x7f0000000380)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xd, 0xfffffff7, 0xfffffffd}, 0x10, 0x7be0, r5, 0x6, &(0x7f0000000680)=[r6, r8, r10, r11, 0xffffffffffffffff, r12, r14], &(0x7f00000006c0)=[{0x3, 0x3, 0xd, 0x2}, {0x4, 0x3, 0x0, 0xb}, {0x0, 0x1, 0xb, 0x5}, {0x4, 0x2, 0xd, 0xc}, {0x1, 0x5, 0x7, 0x6}, {0x1, 0x3, 0x9}], 0x10, 0x1}, 0x94) (async) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) bind$packet(r2, &(0x7f0000000040)={0x11, 0x5, r15, 0x1, 0x6, 0x6, @local}, 0x14) (async) sendmmsg$sock(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004874) 29.538320023s ago: executing program 3 (id=1997): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x35}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @private, @multicast2}, &(0x7f0000000400)=0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000440)={r0, 0x3, 0xfffffffffffffffa, 0x8}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000240)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0x5, 0xed, &(0x7f00000002c0)=""/237, 0x41100, 0x28, '\x00', r1, 0x18, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x0, 0x9, 0x1000, 0x10001}, 0x10, 0x2ad6b, r0, 0x8, 0x0, &(0x7f00000004c0)=[{0x5, 0x5, 0x4, 0x9}, {0x0, 0x5, 0x3, 0xc}, {0x4, 0x5, 0x0, 0x4}, {0x3, 0x1, 0x7}, {0x3, 0x1, 0x6, 0x8}, {0x3, 0x4, 0x7, 0x4}, {0x1, 0x1, 0xf, 0x6}, {0x0, 0x5, 0xb, 0x8}], 0x10, 0x7}, 0x94) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000200)={&(0x7f0000000080)=""/190, 0xbe, 0x8, 0x4}) 29.48594224s ago: executing program 4 (id=1998): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="09000000000000002c0012800e000100697036677265746170000006"], 0x58}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000080)) openat$cgroup_ro(r2, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={@local, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6, 0x9, 0x9, 0x100, 0x7, 0x80}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000000000000900000000000000000500030005000000110004006163746936656261000000000370584b04ba6ce8e92b95c90de673961d19573126fa54c7c55cb3486cb9343441d342164de17471089c9a315b953928c36795772a1fc558032012be4e0d621c2b9483d6e39778963b5039"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000180)={r2, 0x0, 0x6, 0x5927b5e9}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r9, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="dfd349f69c687fd707e44cfbf4", @ANYRES16=0x0, @ANYBLOB="00082dbd7000fddbdf250800000008003a000e000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x55) 29.279054902s ago: executing program 1 (id=1999): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x20044080) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xb0}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x30b, 0x5, 0x8, 0x7, 0x2e, @broadcast}, 0x10) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="2f0000000820000004000000", @ANYRES32, @ANYBLOB="ae556f0f6428154a12197317f04771dd97daa83dc9a952943cef7c741828f84666fe983640d15a7b5e3ed566bf5628f0", @ANYRES64=0x0], 0x20) 29.278758398s ago: executing program 0 (id=2000): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000100001002abd70000020000000000000", @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e300000000000006c000000001400140076657468305f6d617000000014001680100001800c0009000100008001df5063661ba44c"], 0x5c}}, 0x0) socket$key(0xf, 0x3, 0x2) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000280)="32780f64398323756224d03ac5cb3838e854cf6fe7e38c09daa0e76828c158699b396cff6b5ef9b454e678333fb7c00be87d5eab09b340b5a265014d86abb6ae50065e67b7cdc5362589f9b4127fe218ba5f79aa58f7446a6ab30cf9b1be46718b1193d8900973a5ea1f22bcf947456685261ebd7416ad7c9a3949ffd1d2fda2dd", 0x81, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000000040)="913932453057bd24a2b9d4910c5b42fb00d648f49bc11961bae8cf730dbab634ea47a937d5fa943159062a29", 0x2c, 0x40000, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084060004000000000001"], 0x0, 0x42}, 0x20) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r3, 0x0, 0xf69}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) socket$alg(0x26, 0x5, 0x0) 28.937662442s ago: executing program 3 (id=2001): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0xa8, 0x30, 0xb, 0x5, 0x0, {}, [{0x94, 0x1, [@m_ct={0x90, 0x1, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket(0x2a, 0x2, 0x0) getpeername$packet(r3, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227ffe0001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x15482, 0x35288}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MTU={0x8}]}, 0x48}}, 0x0) 27.803860149s ago: executing program 4 (id=2002): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x1, 0x4}, 0x50) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000040)=0x5, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 18.521446868s ago: executing program 32 (id=1960): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={r3, 0x1, 0x10, 0xfff, 0x55b}, &(0x7f00000000c0)=0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x9, [@float={0x7, 0x0, 0x0, 0x10, 0x4}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x1, 0x5}, {0xe, 0x3}, {0x3, 0x3}, {0x2, 0x5}, {0x1, 0x3}, {0x2, 0x5}, {0xc, 0x4}, {0x2, 0x2}]}]}, {0x0, [0x30, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x30]}}, &(0x7f00000001c0)=""/189, 0x79, 0xbd, 0x0, 0x1}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x5, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000a40)='syzkaller\x00', 0x8, 0x85, &(0x7f0000000a80)=""/133, 0x41100, 0x65, '\x00', r4, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x2, 0x1, 0xe, 0x3}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xfffffffb}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000f40)={0x8, 0x0, {0x4ac4, @struct={0x9}, 0x0, 0x1, 0x4, 0xa, 0x7, 0x1, 0x10, @struct={0x9e9, 0xfffffffd}, 0x80000000, 0x2, [0x1, 0x9d, 0xfffffffffffffff9, 0x0, 0x8cce, 0x3]}, {0x9, @usage=0xaa42, 0x0, 0x1, 0x4, 0xfffffffffffffff8, 0x1, 0x7f7, 0x480, @struct={0xc02}, 0xa, 0x1, [0x7, 0x7, 0xe, 0xffffffffffffffff, 0x1, 0xff8]}, {0x3, @struct={0x7, 0x3}, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x5ffb4a53, 0x1, 0x44e, @struct={0xe4, 0xd}, 0x8, 0x1, [0x40, 0x5cda, 0x0, 0x6, 0x7]}, {0x1000, 0x0, 0x5}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f0000001340)={r8, 0xe98, 0x9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7, 0x0, 0x4}, 0x18) unshare(0x2a020400) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r9}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x1df3, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) writev(0xffffffffffffffff, &(0x7f0000003500)=[{0x0}, {0x0}, {0x0}], 0x3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, 0x0, &(0x7f0000000580)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0x30, 0x0, 0x1, 0x0, 0x25dfdbfc, {{}, {0x0, 0x6}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc4000) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x4048000) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r11, 0x9c3fa077fa966179, 0x70bd29, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) 17.645464015s ago: executing program 4 (id=2004): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x62040000) r0 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x61e0, 0x0) 9.057103583s ago: executing program 33 (id=2000): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000100001002abd70000020000000000000", @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e300000000000006c000000001400140076657468305f6d617000000014001680100001800c0009000100008001df5063661ba44c"], 0x5c}}, 0x0) socket$key(0xf, 0x3, 0x2) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000280)="32780f64398323756224d03ac5cb3838e854cf6fe7e38c09daa0e76828c158699b396cff6b5ef9b454e678333fb7c00be87d5eab09b340b5a265014d86abb6ae50065e67b7cdc5362589f9b4127fe218ba5f79aa58f7446a6ab30cf9b1be46718b1193d8900973a5ea1f22bcf947456685261ebd7416ad7c9a3949ffd1d2fda2dd", 0x81, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000000040)="913932453057bd24a2b9d4910c5b42fb00d648f49bc11961bae8cf730dbab634ea47a937d5fa943159062a29", 0x2c, 0x40000, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084060004000000000001"], 0x0, 0x42}, 0x20) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r3, 0x0, 0xf69}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) socket$alg(0x26, 0x5, 0x0) 7.236895128s ago: executing program 34 (id=1999): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f1ea3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b2213fdc2881e1a6ec9d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232f0485a2ca9f37fc9c3d2688efcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdcdeb2af1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f925f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5c49209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378ad8f6afb0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3826ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x20044080) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4509c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a900d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a3c0db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848022e8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0000000000000000000000000001545f0ec539c3b58facd2f62dc3307a6c91d6b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xb0}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x30b, 0x5, 0x8, 0x7, 0x2e, @broadcast}, 0x10) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="2f0000000820000004000000", @ANYRES32, @ANYBLOB="ae556f0f6428154a12197317f04771dd97daa83dc9a952943cef7c741828f84666fe983640d15a7b5e3ed566bf5628f0", @ANYRES64=0x0], 0x20) 6.240849026s ago: executing program 35 (id=2001): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0xa8, 0x30, 0xb, 0x5, 0x0, {}, [{0x94, 0x1, [@m_ct={0x90, 0x1, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket(0x2a, 0x2, 0x0) getpeername$packet(r3, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227ffe0001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x15482, 0x35288}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MTU={0x8}]}, 0x48}}, 0x0) 0s ago: executing program 36 (id=2004): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x62040000) r0 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x61e0, 0x0) kernel console output (not intermixed with test programs): netlink: 8 bytes leftover after parsing attributes in process `syz.4.407'. [ 142.978399][ T7685] netlink: 248 bytes leftover after parsing attributes in process `syz.1.408'. [ 143.640954][ T7720] netlink: 'syz.0.416': attribute type 39 has an invalid length. [ 143.855473][ T5910] tipc: Node number set to 46722173 [ 144.170106][ T7741] netlink: 'syz.1.419': attribute type 16 has an invalid length. [ 144.178509][ T7741] netlink: 'syz.1.419': attribute type 17 has an invalid length. [ 144.290676][ T7749] IPv6: NLM_F_REPLACE set, but no existing node found! [ 144.710617][ T7763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.423'. [ 145.895151][ T7746] __nla_validate_parse: 1 callbacks suppressed [ 145.895171][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.419'. [ 146.008678][ T7763] bridge0: port 4(vlan2) entered blocking state [ 146.025690][ T7763] bridge0: port 4(vlan2) entered disabled state [ 146.032317][ T7763] vlan2: entered allmulticast mode [ 146.037814][ T7763] bridge0: entered allmulticast mode [ 146.046294][ T7763] vlan2: left allmulticast mode [ 146.051329][ T7763] bridge0: left allmulticast mode [ 146.082260][ T7768] tipc: Enabling of bearer rejected, failed to enable media [ 146.093995][ T7769] syzkaller0: entered promiscuous mode [ 146.099716][ T7769] syzkaller0: entered allmulticast mode [ 146.540565][ T7797] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.428'. [ 146.581276][ T7797] ipvlan3: entered promiscuous mode [ 146.601312][ T7797] ipvlan3: entered allmulticast mode [ 146.626203][ T7797] batadv0: entered allmulticast mode [ 146.651414][ T7797] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 146.695209][ T7811] netlink: 'syz.3.429': attribute type 21 has an invalid length. [ 146.695463][ T7808] netlink: 'syz.3.429': attribute type 21 has an invalid length. [ 146.749420][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.430'. [ 146.829334][ T7811] netlink: 132 bytes leftover after parsing attributes in process `syz.3.429'. [ 146.839170][ T7814] netlink: 16 bytes leftover after parsing attributes in process `syz.0.431'. [ 146.870732][ T7808] netlink: 132 bytes leftover after parsing attributes in process `syz.3.429'. [ 147.011952][ T7820] bond1: (slave bond2): Releasing backup interface [ 147.056570][ T7820] bond4: (slave bridge2): Releasing active interface [ 147.071418][ T7820] bridge2: left promiscuous mode [ 147.084604][ T7820] bridge2: left allmulticast mode [ 147.118135][ T7828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.431'. [ 147.208721][ T7814] tipc: Enabled bearer , priority 0 [ 147.378216][ T7838] tc_dump_action: action bad kind [ 147.401519][ T7838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.434'. [ 147.956787][ T7863] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 148.176857][ T7865] netlink: 340 bytes leftover after parsing attributes in process `syz.1.437'. [ 148.338306][ T5839] tipc: Node number set to 3121967294 [ 149.049336][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 149.164285][ T7901] tipc: Enabled bearer , priority 0 [ 149.200973][ T7896] syzkaller0: entered promiscuous mode [ 149.236754][ T7896] syzkaller0: entered allmulticast mode [ 149.385698][ T7911] syz_tun: entered allmulticast mode [ 149.417930][ T7911] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 149.543679][ T7901] tipc: Resetting bearer [ 149.584886][ T7901] tipc: Disabling bearer [ 149.613827][ T7920] batman_adv: batadv0: Removing interface: dummy0 [ 149.633232][ T7920] bridge_slave_0: left allmulticast mode [ 149.648652][ T7920] bridge_slave_0: left promiscuous mode [ 149.655201][ T7920] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.698053][ T7920] bridge_slave_1: left allmulticast mode [ 149.715734][ T7920] bridge_slave_1: left promiscuous mode [ 149.733034][ T7920] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.763156][ T7920] bond0: (slave bond_slave_0): Releasing backup interface [ 149.771238][ T7920] bond_slave_0: left allmulticast mode [ 149.783898][ T7920] bond0: (slave bond_slave_1): Releasing backup interface [ 149.794118][ T7920] bond_slave_1: left allmulticast mode [ 149.808609][ T7920] team0: Port device team_slave_0 removed [ 149.822302][ T7920] team0: Port device team_slave_1 removed [ 149.829597][ T7920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.838750][ T7920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.856296][ T7920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.864235][ T7920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.955063][ T7923] team0: Mode changed to "broadcast" [ 150.151560][ T7934] syzkaller0: entered promiscuous mode [ 150.157818][ T7934] syzkaller0: entered allmulticast mode [ 151.414823][ T7932] tipc: Enabled bearer , priority 0 [ 151.449022][ T7952] __nla_validate_parse: 3 callbacks suppressed [ 151.449040][ T7952] netlink: 64 bytes leftover after parsing attributes in process `syz.0.451'. [ 151.518538][ T7951] netlink: 64 bytes leftover after parsing attributes in process `syz.0.451'. [ 152.068455][ T7981] bridge_slave_0: entered promiscuous mode [ 152.400129][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.459'. [ 152.436250][ T7999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.462'. [ 152.525642][ T5839] tipc: Node number set to 4079455381 [ 152.550360][ T7999] tipc: Resetting bearer [ 152.644740][ T8006] netlink: 24 bytes leftover after parsing attributes in process `syz.4.463'. [ 152.698582][ T8009] netlink: 28 bytes leftover after parsing attributes in process `syz.0.462'. [ 152.732413][ T8004] team0: Mode changed to "broadcast" [ 152.778456][ T7999] tipc: Enabling of bearer rejected, already enabled [ 152.991563][ T8015] syzkaller1: entered promiscuous mode [ 153.002388][ T8015] syzkaller1: entered allmulticast mode [ 153.037981][ T8022] netlink: 'syz.2.466': attribute type 15 has an invalid length. [ 153.100573][ T8025] netlink: 'syz.3.469': attribute type 35 has an invalid length. [ 154.011581][ T8054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.474'. [ 154.196861][ T8062] sctp: [Deprecated]: syz.2.473 (pid 8062) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.196861][ T8062] Use struct sctp_sack_info instead [ 154.214224][ T8059] : entered promiscuous mode [ 154.241426][ T8065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.477'. [ 154.305582][ T8065] team0: Unable to change to the same mode the team is in [ 154.315101][ T8065] tipc: Enabling of bearer rejected, already enabled [ 155.108096][ T8096] tipc: Enabling of bearer rejected, failed to enable media [ 155.195691][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 155.281739][ T8101] netlink: 'syz.2.485': attribute type 12 has an invalid length. [ 155.340034][ T8103] tipc: Enabling of bearer rejected, failed to enable media [ 155.368685][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 156.008315][ T8128] bond0: (slave team0): Releasing backup interface [ 156.022979][ T8128] dummy0: left allmulticast mode [ 156.037353][ T8128] dummy0: left promiscuous mode [ 156.042568][ T8128] bridge0: port 3(dummy0) entered disabled state [ 156.075200][ T8128] bridge_slave_0: left allmulticast mode [ 156.092073][ T8128] bridge_slave_0: left promiscuous mode [ 156.122142][ T8128] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.154835][ T8128] bridge_slave_1: left allmulticast mode [ 156.162516][ T8128] bridge_slave_1: left promiscuous mode [ 156.172824][ T8128] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.193460][ T8128] bond0: (slave bond_slave_0): Releasing backup interface [ 156.211057][ T8128] bond0: (slave bond_slave_1): Releasing backup interface [ 156.223984][ T8128] team0: Port device team_slave_0 removed [ 156.234116][ T8128] team0: Port device team_slave_1 removed [ 156.241188][ T8134] team0: Mode changed to "broadcast" [ 156.300808][ T8137] tipc: Started in network mode [ 156.313184][ T8137] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 156.321591][ T8137] tipc: Enabled bearer , priority 0 [ 156.411994][ T8146] @ÿ: renamed from bond_slave_0 [ 156.549456][ T8148] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 156.966590][ T8170] syzkaller1: entered promiscuous mode [ 156.998878][ T8170] syzkaller1: entered allmulticast mode [ 157.115656][ T8182] __nla_validate_parse: 3 callbacks suppressed [ 157.115675][ T8182] netlink: 96 bytes leftover after parsing attributes in process `syz.4.506'. [ 157.151747][ T8181] netlink: 96 bytes leftover after parsing attributes in process `syz.4.506'. [ 157.414209][ T8193] netlink: 16 bytes leftover after parsing attributes in process `syz.2.509'. [ 157.437851][ T44] tipc: Node number set to 11578026 [ 157.515968][ T8193] tipc: Resetting bearer [ 157.564178][ T8193] bond0: (slave wlan1): Releasing backup interface [ 157.611476][ T8193] bond1: (slave batadv1): Releasing active interface [ 157.656271][ T8196] team0: Unable to change to the same mode the team is in [ 157.683327][ T8198] tipc: Enabling of bearer rejected, already enabled [ 157.841515][ T8203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.511'. [ 157.867063][ T8203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.511'. [ 157.926959][ T8207] netlink: 'syz.4.512': attribute type 2 has an invalid length. [ 157.934657][ T8207] netlink: 132 bytes leftover after parsing attributes in process `syz.4.512'. [ 157.980672][ T8206] netlink: 'syz.4.512': attribute type 2 has an invalid length. [ 158.009436][ T8206] netlink: 132 bytes leftover after parsing attributes in process `syz.4.512'. [ 158.220720][ T8217] netlink: 24 bytes leftover after parsing attributes in process `syz.2.515'. [ 158.654141][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 158.950460][ T8247] netlink: 16 bytes leftover after parsing attributes in process `syz.0.521'. [ 159.033957][ T8247] tipc: Resetting bearer [ 159.120614][ T8248] team0: Unable to change to the same mode the team is in [ 159.194193][ T8247] tipc: Enabling of bearer rejected, already enabled [ 159.487516][ T8267] netlink: 'syz.2.528': attribute type 10 has an invalid length. [ 159.538051][ T8267] dummy0: entered promiscuous mode [ 159.562908][ T8267] bridge0: port 1(dummy0) entered blocking state [ 159.617349][ T8267] bridge0: port 1(dummy0) entered disabled state [ 159.685682][ T8267] dummy0: entered allmulticast mode [ 159.731253][ T8267] dummy0: left allmulticast mode [ 159.741288][ T8267] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 159.839842][ T8287] veth1_macvtap: left promiscuous mode [ 159.846134][ T8287] macsec0: entered promiscuous mode [ 159.873630][ T8289] veth1_macvtap: entered promiscuous mode [ 159.920765][ T8289] macsec0: left promiscuous mode [ 160.468247][ T8311] netlink: 'syz.4.536': attribute type 5 has an invalid length. [ 160.712025][ T8317] team0: Unable to change to the same mode the team is in [ 160.751194][ T8317] vlan0: entered promiscuous mode [ 160.773555][ T8317] tipc: Enabling of bearer rejected, already enabled [ 160.932422][ T8322] vxcan1 speed is unknown, defaulting to 1000 [ 160.949396][ T8322] vxcan1 speed is unknown, defaulting to 1000 [ 160.968374][ T8322] vxcan1 speed is unknown, defaulting to 1000 [ 161.680406][ T8357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.784896][ T8357] macvlan2: entered allmulticast mode [ 161.826665][ T8357] hsr0: entered allmulticast mode [ 161.839587][ T8357] hsr_slave_0: entered allmulticast mode [ 161.862980][ T8357] hsr_slave_1: entered allmulticast mode [ 161.888435][ T8357] hsr0: left allmulticast mode [ 161.907497][ T8357] hsr_slave_0: left allmulticast mode [ 161.915328][ T8357] hsr_slave_1: left allmulticast mode [ 161.977664][ T8322] infiniband syz2: set active [ 161.982415][ T8322] infiniband syz2: added vxcan1 [ 161.996116][ T8322] syz2: rxe_create_cq: returned err = -12 [ 162.002110][ T8322] infiniband syz2: Couldn't create ib_mad CQ [ 162.014911][ T8322] infiniband syz2: Couldn't open port 1 [ 162.039885][ T24] vxcan1 speed is unknown, defaulting to 1000 [ 162.163450][ T8322] RDS/IB: syz2: added [ 162.203575][ T8322] smc: adding ib device syz2 with port count 1 [ 162.213733][ T8371] __nla_validate_parse: 42 callbacks suppressed [ 162.213752][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'. [ 162.317565][ T8322] smc: ib device syz2 port 1 has pnetid [ 162.324868][ T24] vxcan1 speed is unknown, defaulting to 1000 [ 162.340186][ T8322] vxcan1 speed is unknown, defaulting to 1000 [ 162.376092][ T8372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.551'. [ 162.408404][ T8372] team0: Unable to change to the same mode the team is in [ 162.426738][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 162.455719][ T8372] vlan0: entered promiscuous mode [ 162.548777][ T8377] netlink: 14 bytes leftover after parsing attributes in process `syz.2.552'. [ 162.599571][ T8376] tipc: Enabling of bearer rejected, already enabled [ 162.752953][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.553'. [ 162.804146][ T8388] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 162.812613][ T8388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.984701][ T8377] bond0 (unregistering): Released all slaves [ 163.038777][ T8379] macsec0: entered promiscuous mode [ 163.124397][ T8322] vxcan1 speed is unknown, defaulting to 1000 [ 163.212535][ T8401] netlink: 64 bytes leftover after parsing attributes in process `syz.4.557'. [ 163.354812][ T8411] netlink: 'syz.1.560': attribute type 3 has an invalid length. [ 163.681260][ T8424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.562'. [ 163.771221][ T8322] vxcan1 speed is unknown, defaulting to 1000 [ 164.139031][ T8322] vxcan1 speed is unknown, defaulting to 1000 [ 164.460228][ T8445] netlink: 'syz.3.567': attribute type 1 has an invalid length. [ 164.485693][ T8445] netlink: 236 bytes leftover after parsing attributes in process `syz.3.567'. [ 164.536312][ T8445] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 164.839314][ T8322] vxcan1 speed is unknown, defaulting to 1000 [ 164.963526][ T8464] netlink: 28 bytes leftover after parsing attributes in process `syz.3.572'. [ 165.257988][ T8322] vxcan1 speed is unknown, defaulting to 1000 [ 165.533895][ T8322] vxcan1 speed is unknown, defaulting to 1000 [ 165.794637][ T8481] netlink: 'syz.3.577': attribute type 13 has an invalid length. [ 165.802730][ T8481] netlink: 'syz.3.577': attribute type 17 has an invalid length. [ 165.823653][ T8481] gretap0: refused to change device tx_queue_len [ 165.830505][ T8481] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 166.026666][ T8476] lo speed is unknown, defaulting to 1000 [ 166.053844][ T8476] lo speed is unknown, defaulting to 1000 [ 166.140365][ T8476] lo speed is unknown, defaulting to 1000 [ 166.195800][ T8487] netlink: 'syz.0.579': attribute type 3 has an invalid length. [ 166.203501][ T8487] netlink: 666 bytes leftover after parsing attributes in process `syz.0.579'. [ 166.795546][ T8511] netlink: 'syz.0.584': attribute type 29 has an invalid length. [ 166.803966][ T8511] netlink: 'syz.0.584': attribute type 29 has an invalid length. [ 166.820349][ T8511] openvswitch: netlink: Message has 4 unknown bytes. [ 166.829872][ T8511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.916627][ T8484] vxcan1 speed is unknown, defaulting to 1000 [ 167.229767][ T8476] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 167.273039][ T8476] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 167.393703][ T8476] lo speed is unknown, defaulting to 1000 [ 167.444628][ T8476] lo speed is unknown, defaulting to 1000 [ 167.631922][ T8476] lo speed is unknown, defaulting to 1000 [ 167.640493][ T8476] lo speed is unknown, defaulting to 1000 [ 167.687391][ T8476] lo speed is unknown, defaulting to 1000 [ 167.726546][ T8476] lo speed is unknown, defaulting to 1000 [ 167.740495][ T8476] lo speed is unknown, defaulting to 1000 [ 168.415915][ T8546] IPv6: NLM_F_REPLACE set, but no existing node found! [ 168.474393][ T8548] netlink: 'syz.2.594': attribute type 10 has an invalid length. [ 168.513197][ T8548] dummy0: left promiscuous mode [ 168.534141][ T8548] team0: Device dummy0 is up. Set it down before adding it as a team port [ 168.577998][ T8548] netlink: 'syz.2.594': attribute type 10 has an invalid length. [ 168.604832][ T8548] team0: Device dummy0 is up. Set it down before adding it as a team port [ 168.633127][ T8548] netlink: 'syz.2.594': attribute type 10 has an invalid length. [ 168.667675][ T8548] team0: Device dummy0 is up. Set it down before adding it as a team port [ 168.698719][ T8548] netlink: 'syz.2.594': attribute type 10 has an invalid length. [ 168.749885][ T8548] team0: Device dummy0 is up. Set it down before adding it as a team port [ 168.797046][ T8548] netlink: 'syz.2.594': attribute type 10 has an invalid length. [ 168.870292][ T8548] team0: Device dummy0 is up. Set it down before adding it as a team port [ 168.881351][ T8548] team0: Device dummy0 is up. Set it down before adding it as a team port [ 168.905812][ T8548] team0: Device dummy0 is up. Set it down before adding it as a team port [ 168.940188][ T8548] team0: Device dummy0 is up. Set it down before adding it as a team port [ 169.034873][ T8548] team0: Device dummy0 is up. Set it down before adding it as a team port [ 169.069956][ T8548] team0: Device dummy0 is up. Set it down before adding it as a team port [ 169.088806][ T8548] team0: Device dummy0 is up. Set it down before adding it as a team port [ 169.115941][ T8548] team0: Device dummy0 is up. Set it down before adding it as a team port [ 169.174096][ T8548] team0: Device dummy0 is up. Set it down before adding it as a team port [ 169.205861][ T8548] team0: Device dummy0 is up. Set it down before adding it as a team port [ 169.255547][ T8548] team0: Device dummy0 is up. Set it down before adding it as a team port [ 169.472891][ T8563] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 169.629083][ T8572] __nla_validate_parse: 1 callbacks suppressed [ 169.629103][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.602'. [ 169.773411][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.604'. [ 169.951324][ T8588] vxcan1: entered allmulticast mode [ 169.971454][ T8588] vxcan1: left allmulticast mode [ 170.072593][ T8588] raw_sendmsg: syz.2.605 forgot to set AF_INET. Fix it! [ 170.279934][ T8599] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.356518][ T8599] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.447988][ T8606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.609'. [ 170.489663][ T8605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.610'. [ 170.529059][ T8599] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.660788][ T8599] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.684680][ T8614] batadv_slave_1: entered promiscuous mode [ 170.699011][ T8618] pimreg3: entered allmulticast mode [ 170.746254][ T8618] netlink: 32 bytes leftover after parsing attributes in process `syz.0.612'. [ 170.809195][ T7168] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.872787][ T7168] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.943563][ T8626] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.617'. [ 170.955787][ T7168] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.018816][ T8631] netlink: 1496 bytes leftover after parsing attributes in process `syz.4.618'. [ 171.035774][ T7168] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.368726][ T8642] netlink: 40 bytes leftover after parsing attributes in process `syz.2.621'. [ 172.004347][ T8659] IPv6: NLM_F_REPLACE set, but no existing node found! [ 172.244889][ T8668] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.434748][ T8668] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.648540][ T8689] validate_nla: 11 callbacks suppressed [ 172.648560][ T8689] netlink: 'syz.1.634': attribute type 1 has an invalid length. [ 172.666383][ T8668] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.827742][ T8690] bond0: (slave bridge7): making interface the new active one [ 172.838709][ T8690] bond0: (slave bridge7): Enslaving as an active interface with an up link [ 172.889814][ T8668] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.544583][ T8730] netlink: 'syz.0.643': attribute type 1 has an invalid length. [ 173.653429][ T8737] netlink: 'syz.4.646': attribute type 8 has an invalid length. [ 173.888218][ T8749] tipc: Enabled bearer , priority 0 [ 173.912160][ T8749] syzkaller0: entered promiscuous mode [ 173.935630][ T8749] syzkaller0: entered allmulticast mode [ 173.997429][ T8749] tipc: Resetting bearer [ 174.022745][ T8748] tipc: Resetting bearer [ 174.049996][ T8748] tipc: Disabling bearer [ 174.103287][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 174.113903][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 174.646074][ T64] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.699401][ T64] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.744668][ T8785] netlink: 40 bytes leftover after parsing attributes in process `syz.3.660'. [ 174.753281][ T7168] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.792263][ T7168] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.489857][ T8803] netlink: 260 bytes leftover after parsing attributes in process `syz.2.667'. [ 175.526892][ T8809] netlink: 16 bytes leftover after parsing attributes in process `syz.4.669'. [ 175.576623][ T8809] tipc: Resetting bearer [ 175.629602][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'. [ 175.630792][ T5910] lo speed is unknown, defaulting to 1000 [ 175.642698][ T8810] team0: Unable to change to the same mode the team is in [ 175.695165][ T8809] vlan0: entered promiscuous mode [ 175.723148][ T8809] tipc: Enabling of bearer rejected, already enabled [ 175.843618][ T8821] sctp: [Deprecated]: syz.1.674 (pid 8821) Use of int in maxseg socket option. [ 175.843618][ T8821] Use struct sctp_assoc_value instead [ 175.863193][ T8822] netlink: 88 bytes leftover after parsing attributes in process `syz.4.673'. [ 176.411877][ T8847] bridge_slave_0: entered promiscuous mode [ 176.425643][ T8847] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 176.736262][ T8857] netlink: 152 bytes leftover after parsing attributes in process `syz.4.683'. [ 176.928837][ T8871] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 177.358823][ T8885] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.689'. [ 177.912646][ T8860] vxcan1 speed is unknown, defaulting to 1000 [ 178.136380][ T8914] netlink: 'syz.4.697': attribute type 4 has an invalid length. [ 178.172236][ T5910] lo speed is unknown, defaulting to 1000 [ 178.180614][ T5910] syz1: Port: 1 Link DOWN [ 178.193477][ T8914] netlink: 'syz.4.697': attribute type 4 has an invalid length. [ 178.207888][ T5910] lo speed is unknown, defaulting to 1000 [ 178.222091][ T5910] syz1: Port: 1 Link ACTIVE [ 178.287524][ T8860] lo speed is unknown, defaulting to 1000 [ 178.392541][ T8891] vxcan1 speed is unknown, defaulting to 1000 [ 178.647064][ T8891] lo speed is unknown, defaulting to 1000 [ 179.221486][ T8930] vlan0: left promiscuous mode [ 179.482211][ T8927] syz.4.701 (8927) used greatest stack depth: 17456 bytes left [ 180.456931][ T8950] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 180.464209][ T8950] IPv6: NLM_F_CREATE should be set when creating new route [ 180.471794][ T8950] IPv6: NLM_F_CREATE should be set when creating new route [ 180.479089][ T8950] IPv6: NLM_F_CREATE should be set when creating new route [ 180.509522][ T8950] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 180.660711][ T8954] netlink: 'syz.1.709': attribute type 11 has an invalid length. [ 180.689845][ T8954] netlink: 56 bytes leftover after parsing attributes in process `syz.1.709'. [ 180.790633][ T8959] tipc: Enabled bearer , priority 0 [ 180.833270][ T8937] vxcan1 speed is unknown, defaulting to 1000 [ 180.851843][ T8956] syzkaller0: entered promiscuous mode [ 180.887966][ T8956] syzkaller0: entered allmulticast mode [ 180.951259][ T8942] syzkaller0: entered allmulticast mode [ 181.019070][ T8966] netlink: 'syz.1.712': attribute type 10 has an invalid length. [ 181.042536][ T8959] tipc: Resetting bearer [ 181.129994][ T8959] tipc: Disabling bearer [ 181.494040][ T8951] vxcan1 speed is unknown, defaulting to 1000 [ 181.501716][ T8937] lo speed is unknown, defaulting to 1000 [ 181.602631][ T8969] IPv6: addrconf: prefix option has invalid lifetime [ 181.743636][ T8971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.714'. [ 181.994885][ T8983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.716'. [ 182.045449][ T8983] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 182.221500][ T8951] lo speed is unknown, defaulting to 1000 [ 182.231328][ T8993] netlink: 'syz.1.720': attribute type 1 has an invalid length. [ 182.240029][ T8993] netlink: 224 bytes leftover after parsing attributes in process `syz.1.720'. [ 182.932251][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.725'. [ 183.136741][ T9020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.726'. [ 183.146105][ T9020] openvswitch: netlink: Flow actions attr not present in new flow. [ 183.363474][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'. [ 183.398463][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'. [ 183.960562][ T9045] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 183.991607][ T9045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.733'. [ 184.000748][ T9045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.733'. [ 184.323431][ T9023] vxcan1 speed is unknown, defaulting to 1000 [ 184.643410][ T9061] netlink: 'syz.3.737': attribute type 21 has an invalid length. [ 184.672979][ T9061] netlink: 'syz.3.737': attribute type 22 has an invalid length. [ 184.693844][ T9061] netlink: 'syz.3.737': attribute type 23 has an invalid length. [ 184.713915][ T9061] netlink: 'syz.3.737': attribute type 25 has an invalid length. [ 184.757576][ T9061] netlink: 'syz.3.737': attribute type 26 has an invalid length. [ 184.784300][ T9067] geneve3: entered promiscuous mode [ 185.009909][ T9023] lo speed is unknown, defaulting to 1000 [ 186.091795][ T9100] __nla_validate_parse: 2 callbacks suppressed [ 186.091815][ T9100] netlink: 64 bytes leftover after parsing attributes in process `syz.2.749'. [ 186.098210][ T5852] Bluetooth: hci2: command 0x0401 tx timeout [ 186.115308][ T5166] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 186.262921][ T9105] netlink: 'syz.2.751': attribute type 1 has an invalid length. [ 186.299680][ T9105] bond0: entered promiscuous mode [ 186.305033][ T9105] bond0: entered allmulticast mode [ 186.328272][ T9103] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 186.338817][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'. [ 186.442478][ T9107] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 186.482044][ T9107] bond0: (slave bridge2): making interface the new active one [ 186.499520][ T9107] bridge2: entered promiscuous mode [ 186.523090][ T9107] bridge2: entered allmulticast mode [ 186.566849][ T9107] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 186.603217][ T9110] netlink: 200 bytes leftover after parsing attributes in process `syz.2.751'. [ 186.786575][ T9133] syzkaller1: entered promiscuous mode [ 186.792209][ T9133] syzkaller1: entered allmulticast mode [ 186.918564][ T9135] netlink: 'syz.0.760': attribute type 12 has an invalid length. [ 186.933295][ T9135] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.760'. [ 187.050688][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.763'. [ 187.053542][ T9145] netlink: 'syz.0.763': attribute type 1 has an invalid length. [ 187.071609][ T9145] netlink: 224 bytes leftover after parsing attributes in process `syz.0.763'. [ 187.179318][ T9149] netlink: 16 bytes leftover after parsing attributes in process `syz.0.764'. [ 187.451659][ T9154] netlink: 56 bytes leftover after parsing attributes in process `syz.0.766'. [ 187.593720][ T9157] netlink: 'syz.0.767': attribute type 10 has an invalid length. [ 187.601763][ T9156] netlink: 'syz.0.767': attribute type 10 has an invalid length. [ 187.635527][ T9156] team0: Device ipvlan1 failed to enter team mode [ 187.642024][ T9156] team0: Device ipvlan1 failed to enter team mode [ 187.662626][ T9157] team0: Device ipvlan1 failed to enter team mode [ 187.669383][ T9157] team0: Device ipvlan1 failed to enter team mode [ 187.822262][ T9163] netlink: 16 bytes leftover after parsing attributes in process `syz.0.770'. [ 187.848680][ T9163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.770'. [ 187.979238][ T9171] erspan0: Device is already in use. [ 188.106939][ T9175] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.126796][ T9175] bond3: (slave dummy0): making interface the new active one [ 188.137072][ T9175] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 194.259650][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.697935][ T5862] Bluetooth: hci1: command 0x0406 tx timeout [ 211.698708][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 211.704098][ T5862] Bluetooth: hci3: command 0x0406 tx timeout [ 248.751944][ T9197] __nla_validate_parse: 2 callbacks suppressed [ 248.751963][ T9197] netlink: 212924 bytes leftover after parsing attributes in process `syz.2.781'. [ 248.842825][ T9199] netlink: 28 bytes leftover after parsing attributes in process `syz.0.782'. [ 248.969620][ T9202] netlink: 16 bytes leftover after parsing attributes in process `syz.1.783'. [ 248.993477][ T9206] netlink: 16 bytes leftover after parsing attributes in process `syz.4.784'. [ 249.323482][ T9214] netlink: 'syz.1.786': attribute type 11 has an invalid length. [ 249.353137][ T9214] netlink: 224 bytes leftover after parsing attributes in process `syz.1.786'. [ 249.373759][ T9215] validate_nla: 1 callbacks suppressed [ 249.373778][ T9215] netlink: 'syz.4.785': attribute type 1 has an invalid length. [ 249.426348][ T9215] netlink: 224 bytes leftover after parsing attributes in process `syz.4.785'. [ 249.891410][ T9222] netlink: 20 bytes leftover after parsing attributes in process `syz.4.787'. [ 250.080676][ T9199] vxcan1 speed is unknown, defaulting to 1000 [ 250.501367][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.791'. [ 250.534404][ T9234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.791'. [ 250.648650][ T9208] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 251.015145][ T9199] lo speed is unknown, defaulting to 1000 [ 251.036023][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'. [ 251.299760][ T9261] tipc: Resetting bearer [ 251.532645][ T9261] team0: Unable to change to the same mode the team is in [ 251.568550][ T9267] vlan0: entered promiscuous mode [ 251.619437][ T9267] team0: Port device vlan0 added [ 251.646518][ T9271] tipc: Enabling of bearer rejected, already enabled [ 251.958261][ T9284] netlink: 'syz.1.806': attribute type 1 has an invalid length. [ 251.991201][ T9284] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 253.019740][ T9321] rdma_rxe: rxe_newlink: failed to add lo [ 253.081624][ T9323] netlink: 'syz.4.817': attribute type 1 has an invalid length. [ 253.120175][ T9320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.473067][ T9327] openvswitch: netlink: Message has 4 unknown bytes. [ 254.290786][ T9354] vxcan1 speed is unknown, defaulting to 1000 [ 254.414806][ T9357] netlink: 'syz.2.826': attribute type 13 has an invalid length. [ 254.799360][ T9357] tipc: Resetting bearer [ 254.809202][ T9357] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.871220][ T9379] netlink: 'syz.1.830': attribute type 1 has an invalid length. [ 254.892063][ T9379] __nla_validate_parse: 6 callbacks suppressed [ 254.892084][ T9379] netlink: 236 bytes leftover after parsing attributes in process `syz.1.830'. [ 255.314331][ T9350] vxcan1 speed is unknown, defaulting to 1000 [ 255.326515][ T9354] lo speed is unknown, defaulting to 1000 [ 255.631781][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'. [ 255.702222][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.913971][ T9406] netlink: 52 bytes leftover after parsing attributes in process `syz.1.839'. [ 255.952056][ T9407] netlink: 52 bytes leftover after parsing attributes in process `syz.1.839'. [ 255.990499][ T9382] vxcan1 speed is unknown, defaulting to 1000 [ 256.409326][ T9350] lo speed is unknown, defaulting to 1000 [ 256.457167][ T9382] lo speed is unknown, defaulting to 1000 [ 256.986485][ T9436] netlink: 16 bytes leftover after parsing attributes in process `syz.0.847'. [ 257.085692][ T9437] netlink: 28 bytes leftover after parsing attributes in process `syz.0.847'. [ 257.117279][ T9437] netlink: 'syz.0.847': attribute type 7 has an invalid length. [ 257.133902][ T9437] netlink: 'syz.0.847': attribute type 8 has an invalid length. [ 257.166217][ T9437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.847'. [ 257.630961][ T9429] tipc: Resetting bearer [ 257.839637][ T9429] bridge_slave_0: left promiscuous mode [ 258.358757][ T9429] vlan0: left promiscuous mode [ 258.396656][ T9429] gretap1: left promiscuous mode [ 258.483482][ T9429] geneve2: left promiscuous mode [ 258.492982][ T9429] macsec0: left promiscuous mode [ 258.499188][ T9429] bond1: left promiscuous mode [ 258.507623][ T9429] batadv1: left promiscuous mode [ 258.512744][ T9429] batadv1: left allmulticast mode [ 258.523950][ T9429] geneve3: left promiscuous mode [ 258.531625][ T9429] bond0: left promiscuous mode [ 258.537620][ T9429] bridge2: left promiscuous mode [ 258.542762][ T9429] bond0: left allmulticast mode [ 258.552682][ T9429] bridge2: left allmulticast mode [ 258.570984][ T9436] tipc: Resetting bearer [ 258.707682][ T9437] dummy0: entered promiscuous mode [ 258.725088][ T9437] team0: entered promiscuous mode [ 258.768015][ T9437] dummy0: left promiscuous mode [ 258.804697][ T9437] team0: left promiscuous mode [ 258.882643][ T9461] netlink: 'syz.2.851': attribute type 1 has an invalid length. [ 258.891061][ T9461] netlink: 236 bytes leftover after parsing attributes in process `syz.2.851'. [ 258.929790][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.852'. [ 258.939633][ T9443] ip6erspan0: entered allmulticast mode [ 258.943320][ T9463] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 258.983393][ T9463] Bluetooth: MGMT ver 1.23 [ 259.027433][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.852'. [ 259.055367][ T7166] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.072144][ T7166] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.098188][ T5910] vxcan1 speed is unknown, defaulting to 1000 [ 259.149474][ T9464] geneve2: entered promiscuous mode [ 259.159747][ T7166] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.198388][ T7166] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.294116][ T9471] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 259.305148][ T9471] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.405609][ T9473] netlink: 'syz.0.855': attribute type 33 has an invalid length. [ 259.426272][ T9473] tipc: Resetting bearer [ 259.444719][ T9473] netlink: 'syz.0.855': attribute type 10 has an invalid length. [ 259.520313][ T9473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.548344][ T9473] team0: Port device bond0 added [ 259.973679][ T9492] netlink: 'syz.4.863': attribute type 1 has an invalid length. [ 259.982366][ T9492] __nla_validate_parse: 3 callbacks suppressed [ 259.982384][ T9492] netlink: 236 bytes leftover after parsing attributes in process `syz.4.863'. [ 260.063977][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.864'. [ 260.154654][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 260.163836][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 260.179820][ T9509] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 260.198733][ T9509] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 260.209240][ T9509] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 260.227566][ T9512] netlink: 32 bytes leftover after parsing attributes in process `syz.1.868'. [ 260.446215][ T9526] netlink: 'syz.1.870': attribute type 1 has an invalid length. [ 261.027454][ T9550] netlink: 24 bytes leftover after parsing attributes in process `syz.4.876'. [ 261.038676][ T9550] netlink: 24 bytes leftover after parsing attributes in process `syz.4.876'. [ 261.368546][ T9573] netlink: 'syz.1.881': attribute type 11 has an invalid length. [ 261.580046][ T9588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.886'. [ 261.612383][ T9588] bond3: (slave dummy0): Releasing active interface [ 261.700389][ T9589] team0: Unable to change to the same mode the team is in [ 261.713419][ T9564] vxcan1 speed is unknown, defaulting to 1000 [ 261.837455][ T9588] tipc: Enabling of bearer rejected, already enabled [ 262.402752][ T9617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.895'. [ 262.411932][ T9617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.895'. [ 262.640124][ T9624] netlink: 'syz.4.898': attribute type 1 has an invalid length. [ 262.706880][ T9558] vxcan1 speed is unknown, defaulting to 1000 [ 262.707064][ T9564] lo speed is unknown, defaulting to 1000 [ 263.217954][ T9583] vxcan1 speed is unknown, defaulting to 1000 [ 263.377064][ T7181] af_packet: tpacket_rcv: packet too big, clamped from 176 to 4294967272. macoff=96 [ 263.568695][ T9583] lo speed is unknown, defaulting to 1000 [ 263.603878][ T9584] vxcan1 speed is unknown, defaulting to 1000 [ 263.611862][ T9558] lo speed is unknown, defaulting to 1000 [ 263.680763][ T9648] netlink: 'syz.0.904': attribute type 1 has an invalid length. [ 263.706372][ T9647] netlink: 'syz.0.904': attribute type 1 has an invalid length. [ 263.758552][ T9650] openvswitch: netlink: Flow actions attr not present in new flow. [ 263.792619][ T9647] 8021q: adding VLAN 0 to HW filter on device bond5 [ 263.967824][ T9648] bond5: (slave veth5): Enslaving as an active interface with a down link [ 264.093255][ T9653] bond5: (slave veth7): Enslaving as an active interface with a down link [ 264.144269][ T9653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.423023][ T9675] netlink: 'syz.0.910': attribute type 1 has an invalid length. [ 264.428297][ T9584] lo speed is unknown, defaulting to 1000 [ 264.766576][ T9682] Unsupported ieee802154 address type: 0 [ 264.850958][ T9684] netlink: 'syz.4.914': attribute type 11 has an invalid length. [ 265.230894][ T9695] __nla_validate_parse: 4 callbacks suppressed [ 265.230913][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.916'. [ 265.626756][ T9707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.919'. [ 265.736116][ T9705] netlink: 184 bytes leftover after parsing attributes in process `syz.3.918'. [ 265.770927][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.919'. [ 266.071859][ T9723] netlink: 'syz.3.923': attribute type 1 has an invalid length. [ 266.079603][ T9723] netlink: 236 bytes leftover after parsing attributes in process `syz.3.923'. [ 266.533895][ T9743] veth0: mtu less than device minimum [ 266.557703][ T9744] veth0: mtu less than device minimum [ 266.620668][ T9746] netlink: 600 bytes leftover after parsing attributes in process `syz.2.929'. [ 266.759109][ T9750] tipc: Enabled bearer , priority 0 [ 266.775040][ T9750] syzkaller0: entered promiscuous mode [ 266.793538][ T9750] syzkaller0: entered allmulticast mode [ 266.821124][ T9750] sit0: mtu less than device minimum [ 266.841709][ T9748] tipc: Resetting bearer [ 266.878250][ T9748] tipc: Disabling bearer [ 266.893763][ T9753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.932'. [ 267.027618][ T9759] "syz.2.933" (9759) uses obsolete ecb(arc4) skcipher [ 267.734038][ T9789] netlink: 244 bytes leftover after parsing attributes in process `syz.3.941'. [ 267.828551][ T9791] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 267.876140][ T9795] tipc: Enabling of bearer rejected, failed to enable media [ 268.176412][ T9771] vxcan1 speed is unknown, defaulting to 1000 [ 268.255723][ T5852] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 268.389279][ T9814] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.404957][ T9829] netlink: 'syz.0.950': attribute type 72 has an invalid length. [ 268.412800][ T9829] netlink: 1016 bytes leftover after parsing attributes in process `syz.0.950'. [ 268.620815][ T9771] lo speed is unknown, defaulting to 1000 [ 268.680589][ T9837] netlink: 'syz.3.953': attribute type 1 has an invalid length. [ 268.700133][ T9837] netlink: 236 bytes leftover after parsing attributes in process `syz.3.953'. [ 268.923686][ T9847] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 269.822680][ T9884] netlink: 'syz.0.966': attribute type 11 has an invalid length. [ 270.390912][ T9901] netlink: 'syz.2.971': attribute type 3 has an invalid length. [ 270.403199][ T9903] __nla_validate_parse: 5 callbacks suppressed [ 270.403217][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.972'. [ 271.281994][ T9925] netlink: 'syz.4.975': attribute type 1 has an invalid length. [ 271.322891][ T9925] netlink: 180 bytes leftover after parsing attributes in process `syz.4.975'. [ 271.384781][ T9925] netlink: 'syz.4.975': attribute type 1 has an invalid length. [ 271.426784][ T9925] netlink: 224 bytes leftover after parsing attributes in process `syz.4.975'. [ 271.639089][ T9939] netlink: 'syz.0.983': attribute type 10 has an invalid length. [ 271.671374][ T9939] netlink: 40 bytes leftover after parsing attributes in process `syz.0.983'. [ 271.705541][ T9939] dummy0: entered promiscuous mode [ 271.718609][ T9946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.985'. [ 271.724770][ T9939] dummy0: entered allmulticast mode [ 271.751743][ T9939] bridge0: port 1(dummy0) entered blocking state [ 271.755010][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.984'. [ 271.758477][ T9939] bridge0: port 1(dummy0) entered disabled state [ 271.762091][ T9939] bridge0: port 1(dummy0) entered blocking state [ 271.780488][ T9939] bridge0: port 1(dummy0) entered forwarding state [ 271.800028][ T9945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.984'. [ 271.905554][ T9953] team0: Unable to change to the same mode the team is in [ 271.921917][ T9946] tipc: Enabling of bearer rejected, already enabled [ 271.952894][ T9959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.987'. [ 271.968286][ T9959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.987'. [ 272.224099][ T9968] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.376507][ T9975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.995'. [ 272.431476][ T9975] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0 [ 272.452488][ T9975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.589339][ T9985] team0: Unable to change to the same mode the team is in [ 272.600275][ T9985] tipc: Enabling of bearer rejected, already enabled [ 272.630091][ T9983] syzkaller0: entered promiscuous mode [ 272.635904][ T9983] syzkaller0: entered allmulticast mode [ 272.650295][ T9983] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 272.761274][ T9991] netlink: 'syz.1.1001': attribute type 7 has an invalid length. [ 272.818946][ T9999] GUP no longer grows the stack in syz.3.1003 (9999): 200000006000-20000000a000 (200000005000) [ 272.842271][ T9999] CPU: 0 UID: 0 PID: 9999 Comm: syz.3.1003 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 272.842319][ T9999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 272.842348][ T9999] Call Trace: [ 272.842359][ T9999] [ 272.842368][ T9999] dump_stack_lvl+0x189/0x250 [ 272.842400][ T9999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.842422][ T9999] ? __pfx__printk+0x10/0x10 [ 272.842444][ T9999] ? find_vma+0xe7/0x160 [ 272.842482][ T9999] __get_user_pages+0x2a60/0x30b0 [ 272.842540][ T9999] ? __pfx___get_user_pages+0x10/0x10 [ 272.842561][ T9999] ? __gup_longterm_locked+0xbf7/0x15b0 [ 272.842583][ T9999] ? down_read_killable+0x1d1/0x350 [ 272.842604][ T9999] ? try_get_folio+0x633/0x660 [ 272.842635][ T9999] __gup_longterm_locked+0xd66/0x15b0 [ 272.842667][ T9999] ? try_grab_folio_fast+0x1be/0x4f0 [ 272.842706][ T9999] ? gup_fast_fallback+0x1afc/0x2260 [ 272.842736][ T9999] gup_fast_fallback+0x1cd4/0x2260 [ 272.842803][ T9999] ? __pfx_gup_fast_fallback+0x10/0x10 [ 272.842826][ T9999] ? trace_contention_end+0x39/0x120 [ 272.842854][ T9999] ? __mutex_lock+0x330/0xe80 [ 272.842882][ T9999] ? is_valid_gup_args+0x11f/0x200 [ 272.842918][ T9999] ? get_user_pages_fast+0x4d/0xb0 [ 272.842946][ T9999] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 272.842985][ T9999] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 272.843015][ T9999] ? wait_for_space+0x24d/0x2d0 [ 272.843048][ T9999] iov_iter_get_pages2+0x5e/0xa0 [ 272.843081][ T9999] __se_sys_vmsplice+0x548/0x10d0 [ 272.843134][ T9999] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 272.843165][ T9999] ? __pfx_futex_wait+0x10/0x10 [ 272.843212][ T9999] ? __lock_acquire+0xab9/0xd20 [ 272.843281][ T9999] ? rcu_is_watching+0x15/0xb0 [ 272.843311][ T9999] ? do_syscall_64+0xbe/0x3b0 [ 272.843338][ T9999] do_syscall_64+0xfa/0x3b0 [ 272.843358][ T9999] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.843378][ T9999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.843399][ T9999] ? clear_bhb_loop+0x60/0xb0 [ 272.843438][ T9999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.843457][ T9999] RIP: 0033:0x7f189d38e9a9 [ 272.843481][ T9999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.843497][ T9999] RSP: 002b:00007f189e176038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 272.843524][ T9999] RAX: ffffffffffffffda RBX: 00007f189d5b5fa0 RCX: 00007f189d38e9a9 [ 272.843538][ T9999] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009 [ 272.843550][ T9999] RBP: 00007f189d410d69 R08: 0000000000000000 R09: 0000000000000000 [ 272.843561][ T9999] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 272.843572][ T9999] R13: 0000000000000000 R14: 00007f189d5b5fa0 R15: 00007fff683d2de8 [ 272.843601][ T9999] [ 273.197713][T10004] syzkaller1: entered promiscuous mode [ 273.203235][T10004] syzkaller1: entered allmulticast mode [ 273.798802][T10027] netlink: zone id is out of range [ 273.814989][T10027] netlink: zone id is out of range [ 273.852359][T10027] netlink: zone id is out of range [ 273.867748][T10027] netlink: zone id is out of range [ 273.893556][T10027] netlink: zone id is out of range [ 273.911927][T10027] netlink: zone id is out of range [ 273.930173][T10027] netlink: zone id is out of range [ 274.136870][T10042] syzkaller1: entered promiscuous mode [ 274.152705][T10042] syzkaller1: entered allmulticast mode [ 274.171784][T10042] syzkaller1: left promiscuous mode [ 274.178591][T10042] syzkaller1: left allmulticast mode [ 274.531400][T10047] can: request_module (can-proto-3) failed. [ 274.591490][T10049] IPv6: syztnl1: Disabled Multicast RS [ 274.648256][T10023] vxcan1 speed is unknown, defaulting to 1000 [ 274.882131][T10066] nbd: couldn't find device at index 536870912 [ 275.094132][ T7168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.124460][ T7168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.340952][T10080] team0: Unable to change to the same mode the team is in [ 275.370082][T10080] tipc: Enabling of bearer rejected, already enabled [ 275.409029][T10023] lo speed is unknown, defaulting to 1000 [ 275.409276][T10045] vxcan1 speed is unknown, defaulting to 1000 [ 275.462156][ T5166] Bluetooth: hci4: command 0x0405 tx timeout [ 275.864154][T10096] __nla_validate_parse: 16 callbacks suppressed [ 275.864174][T10096] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1028'. [ 275.994661][T10098] bond0: (slave bridge7): Releasing active interface [ 276.038173][T10045] lo speed is unknown, defaulting to 1000 [ 276.054379][T10103] netlink: 'syz.2.1031': attribute type 1 has an invalid length. [ 276.103048][T10103] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1031'. [ 276.443586][T10115] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 277.208998][T10144] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1042'. [ 277.262734][T10144] bond0: (slave bridge2): Releasing active interface [ 277.367116][T10146] team0: Unable to change to the same mode the team is in [ 277.399917][T10144] vlan0: entered promiscuous mode [ 277.454561][T10148] tipc: Enabling of bearer rejected, already enabled [ 277.794918][T10166] IPVS: Error connecting to the multicast addr [ 277.806162][T10166] netlink: 'syz.2.1046': attribute type 16 has an invalid length. [ 277.814171][T10166] netlink: 'syz.2.1046': attribute type 17 has an invalid length. [ 277.914100][T10170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1046'. [ 278.083624][T10166] IPv6: NLM_F_REPLACE set, but no existing node found! [ 278.864154][T10198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1055'. [ 278.904214][T10198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1055'. [ 279.154649][T10206] netlink: 'syz.3.1056': attribute type 8 has an invalid length. [ 279.728675][T10227] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1061'. [ 280.079997][T10199] vxcan1 speed is unknown, defaulting to 1000 [ 280.141415][T10245] netlink: 'syz.0.1064': attribute type 1 has an invalid length. [ 280.319544][T10245] 8021q: adding VLAN 0 to HW filter on device bond7 [ 280.382620][T10247] 8021q: adding VLAN 0 to HW filter on device bond7 [ 280.401336][T10247] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 280.424184][T10247] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 280.611598][T10248] veth9: entered promiscuous mode [ 280.629500][T10248] bond7: (slave veth9): Enslaving as an active interface with a down link [ 280.659172][T10255] netlink: 'syz.1.1066': attribute type 9 has an invalid length. [ 280.685447][ T7160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.686786][T10255] netlink: 'syz.1.1066': attribute type 6 has an invalid length. [ 280.725962][ T7160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.880144][T10242] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1063'. [ 280.886889][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1067'. [ 280.978856][T10199] lo speed is unknown, defaulting to 1000 [ 280.981658][T10234] vxcan1 speed is unknown, defaulting to 1000 [ 280.990906][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1068'. [ 281.440492][T10271] vlan2: entered promiscuous mode [ 282.303958][T10231] vxcan1 speed is unknown, defaulting to 1000 [ 282.311431][T10234] lo speed is unknown, defaulting to 1000 [ 282.395570][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1072'. [ 282.644730][T10289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1073'. [ 283.211028][T10238] vxcan1 speed is unknown, defaulting to 1000 [ 283.421010][T10231] lo speed is unknown, defaulting to 1000 [ 283.470835][T10238] lo speed is unknown, defaulting to 1000 [ 287.609333][T10321] netlink: 'syz.0.1084': attribute type 1 has an invalid length. [ 287.760971][T10321] 8021q: adding VLAN 0 to HW filter on device bond8 [ 287.948652][T10324] 8021q: adding VLAN 0 to HW filter on device bond8 [ 288.013290][T10324] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 288.041972][T10324] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 288.585369][T10343] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) ! [ 288.603779][T10345] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) ! [ 288.660574][T10344] syzkaller1: entered promiscuous mode [ 288.672685][T10344] syzkaller1: entered allmulticast mode [ 288.764317][T10349] netlink: 404 bytes leftover after parsing attributes in process `syz.4.1092'. [ 288.796720][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1091'. [ 288.959654][T10359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 289.055072][T10359] netlink: 'syz.1.1095': attribute type 14 has an invalid length. [ 289.180259][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1098'. [ 289.201980][T10374] netlink: 'syz.2.1100': attribute type 2 has an invalid length. [ 289.210015][T10374] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1100'. [ 289.221460][T10375] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1099'. [ 289.672546][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'. [ 289.725928][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1105'. [ 289.854915][T10394] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1106'. [ 289.876864][T10392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1105'. [ 289.910227][T10380] vxcan1 speed is unknown, defaulting to 1000 [ 289.953753][T10394] netlink: 'syz.1.1106': attribute type 1 has an invalid length. [ 290.225432][T10379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.324908][T10406] netlink: 'syz.3.1109': attribute type 1 has an invalid length. [ 290.490633][T10380] lo speed is unknown, defaulting to 1000 [ 290.725810][T10414] net_ratelimit: 7 callbacks suppressed [ 290.725830][T10414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.980557][T10431] sctp: [Deprecated]: syz.1.1120 (pid 10431) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.980557][T10431] Use struct sctp_sack_info instead [ 291.122751][T10427] bridge_slave_0: invalid flags given to default FDB implementation [ 291.173327][T10433] tipc: Enabled bearer , priority 0 [ 291.287417][T10433] syzkaller0: entered promiscuous mode [ 291.292961][T10433] syzkaller0: entered allmulticast mode [ 291.687783][T10444] bond0 (unregistering): Released all slaves [ 291.792987][T10433] syzkaller0: mtu less than device minimum [ 291.857688][T10432] tipc: Resetting bearer [ 291.940244][T10455] netlink: 'syz.2.1125': attribute type 1 has an invalid length. [ 293.697228][T10432] tipc: Disabling bearer [ 293.708333][T10442] vxcan1 speed is unknown, defaulting to 1000 [ 294.470448][T10497] netlink: 'syz.0.1137': attribute type 3 has an invalid length. [ 294.544854][T10497] __nla_validate_parse: 12 callbacks suppressed [ 294.544877][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1137'. [ 294.682531][T10492] netlink: 'syz.4.1136': attribute type 1 has an invalid length. [ 294.822498][T10492] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1136'. [ 296.048915][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1139'. [ 296.133570][T10508] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1139'. [ 296.381407][T10442] lo speed is unknown, defaulting to 1000 [ 298.052114][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 298.723098][T10493] vxcan1 speed is unknown, defaulting to 1000 [ 298.760002][T10521] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 298.962715][T10525] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 300.203400][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1148'. [ 300.281719][T10531] sctp: [Deprecated]: syz.3.1146 (pid 10531) Use of int in max_burst socket option deprecated. [ 300.281719][T10531] Use struct sctp_assoc_value instead [ 300.331073][T10533] netlink: 'syz.1.1148': attribute type 21 has an invalid length. [ 300.702072][T10531] sctp: [Deprecated]: syz.3.1146 (pid 10531) Use of struct sctp_assoc_value in delayed_ack socket option. [ 300.702072][T10531] Use struct sctp_sack_info instead [ 300.741813][T10493] lo speed is unknown, defaulting to 1000 [ 301.102737][T10538] netlink: zone id is out of range [ 301.324781][T10538] netlink: zone id is out of range [ 301.571515][T10538] netlink: zone id is out of range [ 301.663477][T10538] netlink: zone id is out of range [ 301.802837][T10538] netlink: zone id is out of range [ 301.872490][T10538] netlink: zone id is out of range [ 302.054987][T10538] netlink: zone id is out of range [ 302.108401][T10538] netlink: zone id is out of range [ 305.520192][T10556] wg1: entered promiscuous mode [ 305.633857][T10556] wg1: entered allmulticast mode [ 307.470712][T10564] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1154'. [ 307.686783][T10564] unsupported nlmsg_type 40 [ 308.151049][T10565] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1155'. [ 308.753484][T10565] nbd: socks must be embedded in a SOCK_ITEM attr [ 308.853027][T10574] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1156'. [ 308.928294][T10574] team0: Unable to change to the same mode the team is in [ 308.939498][T10574] tipc: Enabling of bearer rejected, already enabled [ 308.964807][T10536] vxcan1 speed is unknown, defaulting to 1000 [ 309.021668][ T7166] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 309.022430][T10576] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.170271][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1159'. [ 309.180846][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1159'. [ 309.323219][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1161'. [ 309.342167][T10591] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 309.504536][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1162'. [ 309.649695][T10536] lo speed is unknown, defaulting to 1000 [ 309.783074][T10548] vxcan1 speed is unknown, defaulting to 1000 [ 309.930556][T10613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1168'. [ 310.151815][T10616] team0: Unable to change to the same mode the team is in [ 310.181970][T10618] tipc: Enabling of bearer rejected, already enabled [ 310.224173][T10548] lo speed is unknown, defaulting to 1000 [ 310.229895][T10620] net_ratelimit: 6 callbacks suppressed [ 310.229921][T10620] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 310.358374][T10622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1170'. [ 310.490695][T10626] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1172'. [ 310.905789][T10640] netlink: 'syz.2.1173': attribute type 13 has an invalid length. [ 311.279471][T10640] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.295804][T10640] tipc: Resetting bearer [ 311.315416][T10640] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 311.352074][T10645] netlink: 'syz.3.1176': attribute type 1 has an invalid length. [ 311.561346][T10629] vxcan1 speed is unknown, defaulting to 1000 [ 311.845767][T10658] netlink: 'syz.0.1180': attribute type 1 has an invalid length. [ 311.978856][T10658] 8021q: adding VLAN 0 to HW filter on device bond9 [ 312.115645][T10660] team0: Port device vlan0 removed [ 312.179497][T10663] team0: Unable to change to the same mode the team is in [ 312.235781][T10669] tipc: Enabling of bearer rejected, already enabled [ 312.274115][T10670] netlink: 'syz.0.1180': attribute type 11 has an invalid length. [ 312.336352][T10662] 8021q: adding VLAN 0 to HW filter on device bond9 [ 312.373953][T10662] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 312.391449][T10662] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 312.415440][T10673] netlink: 'syz.3.1182': attribute type 2 has an invalid length. [ 312.538432][T10658] veth11: entered promiscuous mode [ 312.559161][T10658] bond9: (slave veth11): Enslaving as an active interface with a down link [ 312.579172][T10665] team0: Port device vlan0 added [ 312.597062][T10666] erspan0: entered allmulticast mode [ 312.688424][T10629] lo speed is unknown, defaulting to 1000 [ 312.979031][T10682] netlink: 'syz.1.1183': attribute type 11 has an invalid length. [ 313.014672][T10682] __nla_validate_parse: 4 callbacks suppressed [ 313.014691][T10682] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1183'. [ 313.153539][T10692] netlink: 'syz.3.1188': attribute type 1 has an invalid length. [ 313.174406][T10691] bpq0: entered promiscuous mode [ 313.185588][T10691] bpq0: entered allmulticast mode [ 313.377720][T10692] bond7: entered promiscuous mode [ 313.396499][T10692] 8021q: adding VLAN 0 to HW filter on device bond7 [ 313.853135][T10717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1193'. [ 313.889661][T10720] xfrm0: entered promiscuous mode [ 313.918052][T10720] xfrm0: entered allmulticast mode [ 314.053205][T10720] veth13: entered promiscuous mode [ 314.108225][T10728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1196'. [ 314.146491][T10728] team0: Unable to change to the same mode the team is in [ 314.168366][T10728] tipc: Enabling of bearer rejected, already enabled [ 314.421333][T10738] tipc: Enabled bearer , priority 0 [ 314.528168][T10737] tipc: Disabling bearer [ 314.723290][T10762] netlink: 'syz.4.1205': attribute type 4 has an invalid length. [ 314.733012][T10762] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1205'. [ 315.024641][T10755] tipc: Resetting bearer [ 315.253489][T10772] veth1_to_bond: entered allmulticast mode [ 315.261972][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1207'. [ 315.324375][T10772] veth1_to_bond (unregistering): left allmulticast mode [ 315.362900][T10773] tipc: Enabled bearer , priority 0 [ 315.382307][T10775] syzkaller0: entered promiscuous mode [ 315.415714][T10775] syzkaller0: entered allmulticast mode [ 315.517386][T10773] tipc: Resetting bearer [ 315.551364][T10779] !: renamed from dummy0 [ 315.871777][T10784] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 316.051076][T10768] tipc: Resetting bearer [ 316.134447][T10768] tipc: Disabling bearer [ 316.163661][T10795] netlink: 1360 bytes leftover after parsing attributes in process `syz.1.1215'. [ 316.197306][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 316.230875][T10795] netlink: 1360 bytes leftover after parsing attributes in process `syz.1.1215'. [ 316.249040][T10796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1206'. [ 316.261190][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 316.348415][T10773] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 316.519374][T10802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.541555][T10774] vxcan1 speed is unknown, defaulting to 1000 [ 316.612761][ T9455] IPVS: starting estimator thread 0... [ 316.706051][T10807] IPVS: using max 27 ests per chain, 64800 per kthread [ 317.095539][T10774] lo speed is unknown, defaulting to 1000 [ 317.145680][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.249381][ T30] audit: type=1800 audit(1753624521.374:4): pid=10826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1225" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1455 res=0 errno=0 [ 317.464374][T10839] netlink: 'syz.1.1227': attribute type 1 has an invalid length. [ 317.537189][ T5166] Bluetooth: hci4: command 0x0405 tx timeout [ 317.541451][T10839] 8021q: adding VLAN 0 to HW filter on device bond3 [ 317.735787][T10843] bond3: (slave veth7): Enslaving as an active interface with a down link [ 317.751859][T10834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.139323][T10862] netlink: 'syz.3.1233': attribute type 29 has an invalid length. [ 318.172215][T10862] netlink: 'syz.3.1233': attribute type 29 has an invalid length. [ 318.480685][T10872] openvswitch: netlink: Missing key (keys=40, expected=80) [ 318.543776][T10876] IPVS: length: 130 != 8 [ 318.617767][T10856] vxcan1 speed is unknown, defaulting to 1000 [ 318.789896][T10891] IPv6: <: Disabled Multicast RS [ 318.962577][T10895] netlink: 'syz.0.1242': attribute type 39 has an invalid length. [ 319.257163][T10858] vxcan1 speed is unknown, defaulting to 1000 [ 319.278122][T10856] lo speed is unknown, defaulting to 1000 [ 319.354520][T10902] netlink: 'syz.3.1244': attribute type 1 has an invalid length. [ 319.379085][T10902] __nla_validate_parse: 64 callbacks suppressed [ 319.379105][T10902] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1244'. [ 319.901071][T10858] lo speed is unknown, defaulting to 1000 [ 320.207981][T10929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1249'. [ 320.263412][T10929] openvswitch: netlink: Flow actions attr not present in new flow. [ 320.563701][T10937] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 320.615898][T10937] netlink: 5684 bytes leftover after parsing attributes in process `syz.3.1251'. [ 321.138183][T10951] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1256'. [ 321.558203][T10969] netlink: 'syz.3.1261': attribute type 1 has an invalid length. [ 321.566121][T10969] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1261'. [ 321.672262][T10971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1262'. [ 321.722165][T10971] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1262'. [ 321.864626][T10982] netlink: 1360 bytes leftover after parsing attributes in process `syz.0.1263'. [ 321.896840][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1263'. [ 321.970975][T10988] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1267'. [ 321.987227][T10990] netlink: 'syz.4.1268': attribute type 28 has an invalid length. [ 322.074085][ T7160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.088168][ T7160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.655782][T11021] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) ! [ 322.728631][T11022] netlink: 'syz.2.1277': attribute type 1 has an invalid length. [ 322.783737][T11027] team0: Unable to change to the same mode the team is in [ 322.795091][T11027] tipc: Enabling of bearer rejected, already enabled [ 323.048095][T11042] 8021q: VLANs not supported on caif0 [ 323.292486][T11048] tipc: Enabled bearer , priority 0 [ 323.306085][T11049] syzkaller0: entered promiscuous mode [ 323.311604][T11049] syzkaller0: entered allmulticast mode [ 323.354812][T11048] tipc: Resetting bearer [ 323.373176][T11047] tipc: Resetting bearer [ 323.436545][T11047] tipc: Disabling bearer [ 323.709986][T11062] team0: Port device bond0 removed [ 323.719578][T11062] bond0 (unregistering): Released all slaves [ 323.744411][T11070] team0: Unable to change to the same mode the team is in [ 323.781997][T11064] tipc: Enabling of bearer rejected, already enabled [ 323.991991][T11082] netlink: 'syz.4.1291': attribute type 1 has an invalid length. [ 324.480477][T11067] vxcan1 speed is unknown, defaulting to 1000 [ 324.844187][T11083] sctp: [Deprecated]: syz.2.1292 (pid 11083) Use of int in max_burst socket option. [ 324.844187][T11083] Use struct sctp_assoc_value instead [ 324.932103][T11104] netlink: 'syz.0.1298': attribute type 1 has an invalid length. [ 324.941053][T11104] __nla_validate_parse: 14 callbacks suppressed [ 324.941072][T11104] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1298'. [ 324.976800][T11104] netlink: 'syz.0.1298': attribute type 1 has an invalid length. [ 324.990259][T11104] netlink: 'syz.0.1298': attribute type 2 has an invalid length. [ 325.212781][T11067] lo speed is unknown, defaulting to 1000 [ 325.383496][T11077] vxcan1 speed is unknown, defaulting to 1000 [ 325.702075][T11077] lo speed is unknown, defaulting to 1000 [ 325.742142][T11083] vxcan1 speed is unknown, defaulting to 1000 [ 326.012405][T11120] tipc: Enabled bearer , priority 0 [ 326.026254][T11117] syzkaller0: entered promiscuous mode [ 326.043532][T11117] syzkaller0: entered allmulticast mode [ 326.117001][T11124] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1304'. [ 326.207181][T11116] tipc: Resetting bearer [ 326.249751][T11116] tipc: Disabling bearer [ 326.293773][T11124] tipc: Resetting bearer [ 326.300745][T11124] bridge0: port 1(dummy0) entered disabled state [ 326.399912][T11124] bond5: (slave veth5): Releasing active interface [ 326.412573][T11124] bond5: (slave veth5): the permanent HWaddr of slave - 22:dc:18:82:bb:42 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 326.436011][T11134] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 326.462240][T11124] bond5: (slave veth7): Releasing active interface [ 326.527146][T11124] bond7: (slave veth9): Releasing active interface [ 326.587248][T11124] bond9: (slave veth11): Releasing active interface [ 326.607140][T11128] team0: Unable to change to the same mode the team is in [ 326.653502][T11130] team0: Port device vlan0 added [ 326.660714][T11083] lo speed is unknown, defaulting to 1000 [ 326.707363][T11134] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 326.733356][T11131] tipc: Enabling of bearer rejected, already enabled [ 326.989931][T11143] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1309'. [ 327.194830][T11154] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 327.208759][ C0] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 327.596965][T11161] netlink: 'syz.4.1311': attribute type 1 has an invalid length. [ 327.629214][T11161] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1311'. [ 327.786097][T11165] netlink: 'syz.1.1312': attribute type 1 has an invalid length. [ 328.191808][T11177] netlink: 'syz.4.1315': attribute type 39 has an invalid length. [ 328.198086][T11145] vxcan1 speed is unknown, defaulting to 1000 [ 328.719213][T11150] vxcan1 speed is unknown, defaulting to 1000 [ 328.719700][T11145] lo speed is unknown, defaulting to 1000 [ 328.957563][T11188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1317'. [ 329.129127][T11188] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1317'. [ 329.391410][T11164] vxcan1 speed is unknown, defaulting to 1000 [ 329.683867][T11193] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1319'. [ 329.732545][T11164] lo speed is unknown, defaulting to 1000 [ 329.800438][T11150] lo speed is unknown, defaulting to 1000 [ 329.807185][T11193] tipc: Enabling of bearer rejected, failed to enable media [ 329.880244][T11193] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1319'. [ 330.355054][T11200] IPv6: Can't replace route, no match found [ 331.017381][T11211] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1322'. [ 331.036503][T11212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1322'. [ 331.056229][T11211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1322'. [ 331.178569][T11212] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 331.203766][T11212] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 331.269233][T11211] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 331.299285][T11211] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 331.725629][T11220] tap0: tun_chr_ioctl cmd 1074025677 [ 331.731283][T11220] tap0: linktype set to 802 [ 331.832640][T11223] netlink: 'syz.3.1324': attribute type 7 has an invalid length. [ 332.048291][T11234] netlink: 'syz.2.1327': attribute type 9 has an invalid length. [ 332.075409][T11235] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1329'. [ 332.094947][T11234] netlink: 'syz.2.1327': attribute type 6 has an invalid length. [ 332.105630][T11235] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1329'. [ 332.384325][T11243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'. [ 332.425422][T11243] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1332'. [ 332.457362][T11243] geneve3: entered promiscuous mode [ 332.462746][T11243] geneve3: entered allmulticast mode [ 333.127835][T11265] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 333.597301][T11284] tipc: Enabled bearer , priority 0 [ 333.623113][T11284] syzkaller0: entered promiscuous mode [ 333.645929][T11284] syzkaller0: entered allmulticast mode [ 333.720445][T11284] tipc: Resetting bearer [ 333.751186][T11288] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 333.787541][T11283] tipc: Resetting bearer [ 333.823749][T11283] tipc: Disabling bearer [ 333.959005][T11295] netlink: 'syz.1.1344': attribute type 1 has an invalid length. [ 333.970583][T11295] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1344'. [ 333.978105][T11299] !: renamed from dummy0 [ 334.582540][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1350'. [ 334.673851][T11317] erspan0: left allmulticast mode [ 335.102774][T11317] tipc: Resetting bearer [ 335.164347][T11317] dummy0: left promiscuous mode [ 335.188030][T11317] dummy0: left allmulticast mode [ 335.758479][T11317] xfrm0: left promiscuous mode [ 335.763328][T11317] xfrm0: left allmulticast mode [ 336.177817][T11317] vlan0: left promiscuous mode [ 336.449945][T11317] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 336.473944][T11317] bond4: left promiscuous mode [ 336.492500][T11317] bond4: left allmulticast mode [ 336.541002][T11317] geneve2: left promiscuous mode [ 336.574204][T11317] veth9: left promiscuous mode [ 336.586928][T11317] veth11: left promiscuous mode [ 336.592293][T11317] veth13: left promiscuous mode [ 336.599321][T11317] geneve3: left promiscuous mode [ 336.604434][T11317] geneve3: left allmulticast mode [ 336.623819][T11301] vxcan1 speed is unknown, defaulting to 1000 [ 336.709179][T11333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1351'. [ 336.720436][ T7173] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.734140][ T7173] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.754294][ T890] vxcan1 speed is unknown, defaulting to 1000 [ 336.763108][ T7173] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.771746][ T890] syz2: Port: 1 Link DOWN [ 336.784995][ T9450] vxcan1 speed is unknown, defaulting to 1000 [ 336.789418][ T7173] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.036542][T11301] lo speed is unknown, defaulting to 1000 [ 337.178432][T11351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.444436][T11362] netlink: 'syz.3.1359': attribute type 1 has an invalid length. [ 337.457213][T11362] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1359'. [ 337.534104][T11364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1361'. [ 337.556705][T11364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1361'. [ 337.700720][T11371] unsupported nla_type 52263 [ 337.722396][T11371] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1363'. [ 337.791130][T11375] tipc: Enabled bearer , priority 0 [ 337.876161][T11375] tipc: Disabling bearer [ 337.933359][T11382] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1366'. [ 338.198513][T11393] syzkaller0: entered promiscuous mode [ 338.204260][T11393] syzkaller0: entered allmulticast mode [ 338.534113][T11409] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1375'. [ 338.709041][T11430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.722227][T11431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1378'. [ 338.779939][T11431] nbd: socks must be embedded in a SOCK_ITEM attr [ 339.001560][T11440] netlink: 'syz.0.1380': attribute type 1 has an invalid length. [ 339.053757][T11440] bond0 (unregistering): Released all slaves [ 339.130051][T11446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1380'. [ 339.254897][T11451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1384'. [ 339.282452][ T7157] smc: removing ib device syz2 [ 340.037577][T11477] nbd: socks must be embedded in a SOCK_ITEM attr [ 340.667656][T11491] team0: Unable to change to the same mode the team is in [ 340.850585][T11493] netlink: 'syz.1.1397': attribute type 13 has an invalid length. [ 340.865022][T11493] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 341.072759][T11462] lo speed is unknown, defaulting to 1000 [ 341.910006][T11523] __nla_validate_parse: 5 callbacks suppressed [ 341.910027][T11523] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1404'. [ 342.009721][T11523] nbd: socks must be embedded in a SOCK_ITEM attr [ 342.341358][T11533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.102147][T11572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1414'. [ 343.156422][T11572] netlink: 'syz.3.1414': attribute type 1 has an invalid length. [ 343.164722][T11572] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.1414'. [ 343.320832][T11579] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 343.477736][T11585] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1420'. [ 343.931098][T11604] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1425'. [ 343.943452][T11604] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 344.024949][T11565] lo speed is unknown, defaulting to 1000 [ 344.479978][T11613] netlink: 'syz.1.1428': attribute type 21 has an invalid length. [ 344.705178][T11622] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1432'. [ 344.858666][T11624] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 344.872319][T11624] bond0: (slave gre0): Error -95 calling set_mac_address [ 344.973310][T11631] netlink: 'syz.3.1435': attribute type 8 has an invalid length. [ 344.983201][T11631] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1435'. [ 345.002031][T11631] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1435'. [ 345.099361][T11635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1437'. [ 345.110287][T11635] openvswitch: netlink: Flow actions attr not present in new flow. [ 345.496797][T11660] netlink: 'syz.3.1443': attribute type 1 has an invalid length. [ 345.601524][T11664] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1444'. [ 345.911384][T11680] nbd: socks must be embedded in a SOCK_ITEM attr [ 346.471724][T11708] netlink: 'syz.4.1456': attribute type 12 has an invalid length. [ 346.823507][T11730] nbd: socks must be embedded in a SOCK_ITEM attr [ 346.860389][T11726] netlink: 'syz.1.1461': attribute type 1 has an invalid length. [ 347.831209][T11775] __nla_validate_parse: 7 callbacks suppressed [ 347.831228][T11775] netlink: 4340 bytes leftover after parsing attributes in process `syz.1.1474'. [ 347.853527][T11775] openvswitch: netlink: Flow key attr not present in new flow. [ 347.870817][T11777] netlink: 'syz.4.1475': attribute type 13 has an invalid length. [ 347.880747][T11746] lo speed is unknown, defaulting to 1000 [ 347.987913][T11777] tipc: Resetting bearer [ 348.031749][T11782] netlink: 'syz.1.1476': attribute type 1 has an invalid length. [ 348.042339][T11782] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1476'. [ 348.274763][ T9] lo speed is unknown, defaulting to 1000 [ 348.282131][ T9] syz1: Port: 1 Link DOWN [ 348.361309][ T7152] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.372903][T11785] netlink: 212148 bytes leftover after parsing attributes in process `syz.4.1477'. [ 348.405974][ T7152] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 348.488444][ T7152] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.516144][ T7152] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 348.535480][ T7152] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.544574][ T7152] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 348.568259][ T7152] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.602617][ T7152] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 349.031426][T11808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1484'. [ 349.147348][T11812] tipc: Enabled bearer , priority 0 [ 349.155079][T11812] syzkaller0: entered promiscuous mode [ 349.161099][T11812] syzkaller0: entered allmulticast mode [ 349.213999][T11812] tipc: Resetting bearer [ 349.261299][T11811] tipc: Resetting bearer [ 349.323635][T11811] tipc: Disabling bearer [ 349.538130][T11830] netlink: 'syz.4.1491': attribute type 1 has an invalid length. [ 349.546131][T11830] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1491'. [ 349.850918][T11845] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 350.159537][T11861] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 ! [ 350.551961][T11886] netlink: 'syz.4.1502': attribute type 39 has an invalid length. [ 350.562906][T11884] netlink: 'syz.1.1503': attribute type 21 has an invalid length. [ 350.571743][T11884] ieee802154 phy1 wpan1: encryption failed: -22 [ 351.440894][T11928] netlink: 'syz.0.1509': attribute type 1 has an invalid length. [ 351.522891][T11928] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1509'. [ 351.624117][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1513'. [ 351.819501][T11942] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 352.076665][T11926] lo speed is unknown, defaulting to 1000 [ 352.273543][T11958] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1520'. [ 353.106100][T11982] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1529'. [ 353.158879][T11980] netlink: 'syz.1.1526': attribute type 1 has an invalid length. [ 353.167067][T11980] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1526'. [ 353.289822][T11988] netlink: 'syz.2.1527': attribute type 1 has an invalid length. [ 353.589562][T11988] bond4 (unregistering): Released all slaves [ 354.017897][T12019] netlink: 'syz.1.1538': attribute type 10 has an invalid length. [ 354.173500][T12025] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1540'. [ 354.254318][T12025] nbd: socks must be embedded in a SOCK_ITEM attr [ 354.270219][T12033] netlink: 'syz.1.1541': attribute type 1 has an invalid length. [ 354.278210][T12033] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1541'. [ 354.305704][T12023] netlink: 'syz.0.1539': attribute type 12 has an invalid length. [ 354.322482][T12023] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1539'. [ 354.730280][T12054] syzkaller1: entered promiscuous mode [ 354.757160][T12054] syzkaller1: entered allmulticast mode [ 354.799860][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1551'. [ 354.888207][T12065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1552'. [ 355.052816][T12071] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1555'. [ 355.189598][T12069] netlink: 'syz.4.1554': attribute type 1 has an invalid length. [ 355.245950][T12069] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1554'. [ 355.310863][T12079] netlink: 844 bytes leftover after parsing attributes in process `syz.3.1556'. [ 355.656548][T12057] lo speed is unknown, defaulting to 1000 [ 356.202372][T12096] nbd: socks must be embedded in a SOCK_ITEM attr [ 356.344623][T12108] netlink: 'syz.0.1566': attribute type 5 has an invalid length. [ 356.374933][T12109] netlink: 'syz.0.1566': attribute type 5 has an invalid length. [ 356.391632][T12077] lo speed is unknown, defaulting to 1000 [ 357.013357][T12134] nbd: socks must be embedded in a SOCK_ITEM attr [ 357.434654][T12103] lo speed is unknown, defaulting to 1000 [ 357.802009][T12157] bridge_slave_0: invalid flags given to default FDB implementation [ 358.068509][T12170] nbd: socks must be embedded in a SOCK_ITEM attr [ 358.680017][T12186] unknown channel width for channel at 909000KHz? [ 358.687734][T12186] __nla_validate_parse: 5 callbacks suppressed [ 358.687756][T12186] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1583'. [ 358.823806][T12192] netlink: 'syz.4.1586': attribute type 21 has an invalid length. [ 358.838704][T12192] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1586'. [ 358.980426][T12201] netlink: 'syz.3.1587': attribute type 1 has an invalid length. [ 359.023365][T12201] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1587'. [ 359.088935][T12197] netlink: 'syz.0.1582': attribute type 13 has an invalid length. [ 359.097164][T12197] netlink: 'syz.0.1582': attribute type 17 has an invalid length. [ 359.157388][T12216] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1592'. [ 359.319866][T12226] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1592'. [ 359.349576][T12226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1592'. [ 359.380917][T12226] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1592'. [ 359.476528][T12197] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.483869][T12197] tipc: Resetting bearer [ 359.502386][T12197] tipc: Resetting bearer [ 359.521827][T12197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 359.576209][T12234] macvtap0: entered allmulticast mode [ 359.581644][T12234] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 359.610147][T12234] batman_adv: batadv0: Adding interface: macvtap0 [ 359.619803][T12234] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.647282][T12234] batman_adv: batadv0: Interface activated: macvtap0 [ 359.823507][T12242] netlink: 'syz.3.1600': attribute type 10 has an invalid length. [ 359.879019][T12242] team0: Port device 0! added [ 359.985238][T12255] netlink: 'syz.1.1604': attribute type 1 has an invalid length. [ 359.993222][T12255] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1604'. [ 360.062241][T12258] netlink: 'syz.1.1607': attribute type 1 has an invalid length. [ 360.071331][T12258] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1607'. [ 360.282649][T12266] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1608'. [ 360.356088][ T7170] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 360.371031][ T7170] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 360.396716][ T7170] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 360.414124][ T7170] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 360.965765][T12288] netlink: 'syz.4.1617': attribute type 1 has an invalid length. [ 361.039075][T12299] netlink: 'syz.3.1620': attribute type 10 has an invalid length. [ 361.306207][T12313] vlan2: entered promiscuous mode [ 361.335557][T12313] gretap0: entered promiscuous mode [ 361.367985][T12310] nbd: socks must be embedded in a SOCK_ITEM attr [ 361.658902][T12343] netlink: 'syz.0.1632': attribute type 13 has an invalid length. [ 361.675621][T12343] netlink: 'syz.0.1632': attribute type 17 has an invalid length. [ 361.689094][T12343] tipc: Resetting bearer [ 361.708337][T12343] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 362.175376][ T5166] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 362.298876][T12330] lo speed is unknown, defaulting to 1000 [ 362.733054][T12386] nbd: socks must be embedded in a SOCK_ITEM attr [ 363.183859][T12342] lo speed is unknown, defaulting to 1000 [ 363.362883][T12417] bridge0: port 1(gretap0) entered blocking state [ 363.396013][T12417] bridge0: port 1(gretap0) entered disabled state [ 363.416456][T12417] gretap0: entered allmulticast mode [ 363.439827][T12417] gretap0: left allmulticast mode [ 363.916996][T12433] __nla_validate_parse: 12 callbacks suppressed [ 363.917016][T12433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1654'. [ 363.966006][T12433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1654'. [ 364.286166][T12441] netlink: 'syz.3.1658': attribute type 33 has an invalid length. [ 364.294179][T12441] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1658'. [ 364.311948][T12443] netlink: 'syz.4.1657': attribute type 1 has an invalid length. [ 364.320088][T12443] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1657'. [ 364.391707][T12441] netlink: 'syz.3.1658': attribute type 10 has an invalid length. [ 364.442055][T12441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.502101][T12441] team0: Port device bond0 added [ 365.404764][T12478] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 365.467355][T12478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 365.486047][T12480] netlink: 'syz.0.1669': attribute type 1 has an invalid length. [ 365.494034][T12480] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1669'. [ 365.568934][T12487] tipc: Enabling of bearer rejected, failed to enable media [ 365.662612][T12489] netlink: 'syz.0.1672': attribute type 5 has an invalid length. [ 365.673236][T12489] netlink: 'syz.0.1672': attribute type 7 has an invalid length. [ 365.697875][T12489] : entered promiscuous mode [ 366.383245][T12524] netlink: 'syz.4.1681': attribute type 1 has an invalid length. [ 366.406506][T12524] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1681'. [ 366.629904][T12529] netlink: 'syz.4.1685': attribute type 4 has an invalid length. [ 367.089005][T12548] netlink: 788 bytes leftover after parsing attributes in process `syz.3.1690'. [ 367.143482][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 367.234308][T12556] netlink: 'syz.2.1692': attribute type 2 has an invalid length. [ 368.040510][T12592] netlink: 'syz.3.1704': attribute type 32 has an invalid length. [ 368.269687][T12605] netlink: 'syz.2.1705': attribute type 1 has an invalid length. [ 368.310729][T12605] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1705'. [ 368.327512][T12601] netlink: 'syz.3.1707': attribute type 39 has an invalid length. [ 368.337681][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1709'. [ 368.382279][T12605] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1705'. [ 368.407407][T12605] nbd: must specify at least one socket [ 368.523471][T12615] veth5: entered allmulticast mode [ 368.681046][T12619] syzkaller0: entered promiscuous mode [ 368.706748][T12619] syzkaller0: entered allmulticast mode [ 368.859981][T12630] netlink: 'syz.1.1713': attribute type 1 has an invalid length. [ 368.939707][T12635] __nla_validate_parse: 3 callbacks suppressed [ 368.939729][T12635] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1715'. [ 368.964172][T12635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.301705][T12651] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1722'. [ 369.319315][T12655] netlink: 'syz.1.1723': attribute type 1 has an invalid length. [ 369.352590][T12658] netlink: 'syz.3.1724': attribute type 1 has an invalid length. [ 369.496236][T12667] netlink: 'syz.0.1726': attribute type 32 has an invalid length. [ 369.544013][T12654] 8021q: adding VLAN 0 to HW filter on device bond11 [ 369.561728][T12669] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1727'. [ 369.573558][T12654] bond10: (slave bond11): making interface the new active one [ 369.582132][T12654] bond10: (slave bond11): Enslaving as an active interface with an up link [ 369.623745][T12656] bond10: (slave gretap2): Enslaving as a backup interface with an up link [ 369.669548][T12669] tipc: Resetting bearer [ 369.697719][T12669] team0: Port device vlan0 removed [ 369.704359][T12673] team0: Unable to change to the same mode the team is in [ 369.722127][T12672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1728'. [ 369.740760][T12669] vlan0: entered promiscuous mode [ 369.758635][T12669] tipc: Enabling of bearer rejected, already enabled [ 369.841709][T12683] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1731'. [ 369.851278][T12683] 0ªX¹¦À: renamed from caif0 [ 369.869553][T12683] 0ªX¹¦À: entered allmulticast mode [ 369.885046][T12683] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 369.960269][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1733'. [ 370.380216][T12712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1743'. [ 370.499891][T12715] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1744'. [ 370.561393][T12719] tc_dump_action: action bad kind [ 370.651519][ T7157] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.701213][ T7157] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.722396][ T7157] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.748176][ T7157] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.960465][T12747] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1753'. [ 370.978289][T12748] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1754'. [ 371.012548][T12747] tipc: Resetting bearer [ 371.110187][T12752] tipc: Enabled bearer , priority 0 [ 371.122904][T12755] syzkaller0: entered promiscuous mode [ 371.129604][T12755] syzkaller0: entered allmulticast mode [ 371.184625][T12755] tipc: Resetting bearer [ 371.243701][T12755] tipc: Disabling bearer [ 371.323152][T12749] 8021q: adding VLAN 0 to HW filter on device bond11 [ 371.570376][T12785] validate_nla: 38 callbacks suppressed [ 371.570397][T12785] netlink: 'syz.3.1763': attribute type 10 has an invalid length. [ 371.578189][T12781] netlink: 'syz.0.1765': attribute type 1 has an invalid length. [ 371.596929][T12785] team0: Port device 0! removed [ 371.682125][T12781] pim6reg1: entered promiscuous mode [ 371.692067][T12781] pim6reg1: entered allmulticast mode [ 371.758887][T12791] bond12: (slave geneve3): Enslaving as an active interface with an up link [ 371.774222][T12799] netlink: 'syz.2.1767': attribute type 15 has an invalid length. [ 371.831530][ T64] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 371.860184][ T64] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 371.951617][ T64] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 371.978467][ T64] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 372.243582][T12824] netlink: 'syz.0.1776': attribute type 1 has an invalid length. [ 372.378691][T12830] bond11: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 372.422349][T12838] netlink: 'syz.1.1780': attribute type 10 has an invalid length. [ 372.441108][T12839] netlink: 'syz.2.1778': attribute type 1 has an invalid length. [ 372.486654][T12824] 8021q: adding VLAN 0 to HW filter on device bond11 [ 372.497080][ T64] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 372.521837][T12833] delete_channel: no stack [ 372.627394][ T36] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 372.858361][T12858] sctp: [Deprecated]: syz.1.1787 (pid 12858) Use of struct sctp_assoc_value in delayed_ack socket option. [ 372.858361][T12858] Use struct sctp_sack_info instead [ 372.883887][T12858] netlink: 'syz.1.1787': attribute type 1 has an invalid length. [ 372.920758][T12858] bond13: entered promiscuous mode [ 372.928694][T12858] 8021q: adding VLAN 0 to HW filter on device bond13 [ 372.950378][T12858] batadv1: entered promiscuous mode [ 372.956478][T12858] batadv1: entered allmulticast mode [ 372.963921][T12858] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 372.974151][T12858] bond13: (slave batadv1): making interface the new active one [ 372.983901][T12858] bond13: (slave batadv1): Enslaving as an active interface with an up link [ 373.122305][T12866] batman_adv: batadv0: Interface deactivated: macvtap0 [ 373.158798][T12866] batman_adv: batadv0: Removing interface: macvtap0 [ 373.194020][T12871] team0: Unable to change to the same mode the team is in [ 373.227156][T12866] tipc: Enabling of bearer rejected, already enabled [ 373.824982][T12898] tipc: Resetting bearer [ 373.888981][T12898] bond11: (slave ip6gretap1): Removing an active aggregator [ 373.906300][T12898] bond11: (slave ip6gretap1): Releasing backup interface [ 373.950550][T12909] hsr0: mtu greater than device maximum [ 374.213596][T12888] lo speed is unknown, defaulting to 1000 [ 374.616388][T12936] netlink: 'syz.2.1808': attribute type 1 has an invalid length. [ 374.729783][T12936] __nla_validate_parse: 12 callbacks suppressed [ 374.729803][T12936] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1808'. [ 374.787467][T12945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1812'. [ 375.714782][T12981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1823'. [ 375.951175][T12985] netlink: 'syz.3.1824': attribute type 1 has an invalid length. [ 376.005524][T12985] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1824'. [ 376.073162][T12995] netlink: 'syz.1.1827': attribute type 10 has an invalid length. [ 376.144237][T12995] team0: Port device 0! added [ 376.424342][T13018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'. [ 376.488383][T13016] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1836'. [ 376.529510][T13021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.733309][T13026] vti0: entered promiscuous mode [ 376.769232][T13026] vti0: entered allmulticast mode [ 376.941799][T13038] pim6reg1: entered promiscuous mode [ 376.952799][T13040] netlink: 'syz.1.1843': attribute type 1 has an invalid length. [ 376.961419][T13040] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1843'. [ 376.996417][T13038] pim6reg1: entered allmulticast mode [ 377.004788][T13007] lo speed is unknown, defaulting to 1000 [ 377.232506][T13042] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1842'. [ 377.401035][T13042] 8021q: adding VLAN 0 to HW filter on device bond12 [ 377.479174][T13042] team0: Port device bond12 added [ 377.558061][T13018] lo speed is unknown, defaulting to 1000 [ 378.119429][T13072] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1850'. [ 378.133590][T13072] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1850'. [ 378.231212][T13074] netlink: 'syz.0.1851': attribute type 39 has an invalid length. [ 378.587540][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.650245][T13091] netlink: 'syz.4.1854': attribute type 1 has an invalid length. [ 378.861338][T13094] netlink: 'syz.4.1856': attribute type 1 has an invalid length. [ 379.132571][T13077] lo speed is unknown, defaulting to 1000 [ 379.164021][T13111] netlink: 'syz.4.1862': attribute type 6 has an invalid length. [ 379.354328][T13121] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.571125][T13123] netlink: 'syz.1.1866': attribute type 1 has an invalid length. [ 379.883826][T13140] __nla_validate_parse: 6 callbacks suppressed [ 379.883872][T13140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1870'. [ 379.991226][T13148] netlink: 'syz.4.1872': attribute type 1 has an invalid length. [ 380.036889][T13148] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1872'. [ 380.037096][T13147] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1872'. [ 380.433563][T13169] veth7: entered promiscuous mode [ 380.474037][T13171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1879'. [ 380.484776][T13171] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1879'. [ 380.507235][T13171] bridge0: port 1(vlan2) entered blocking state [ 380.514055][T13171] bridge0: port 1(vlan2) entered disabled state [ 380.524479][T13171] vlan2: entered allmulticast mode [ 380.532602][T13171] bridge0: entered allmulticast mode [ 380.541459][T13171] vlan2: left allmulticast mode [ 380.547739][T13171] bridge0: left allmulticast mode [ 380.642415][T13177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1882'. [ 380.843918][T13184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1884'. [ 381.008892][T13199] tipc: Enabled bearer , priority 0 [ 381.029905][T13199] syzkaller0: entered promiscuous mode [ 381.039324][T13199] syzkaller0: entered allmulticast mode [ 381.082358][T13199] tipc: Resetting bearer [ 381.105969][T13197] tipc: Resetting bearer [ 381.154483][T13197] tipc: Disabling bearer [ 381.235858][T13212] netlink: 'syz.1.1891': attribute type 6 has an invalid length. [ 381.429206][T13225] pimreg: entered allmulticast mode [ 381.431116][T13226] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1896'. [ 381.455725][T13218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.465907][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1895'. [ 381.540812][T13233] netlink: 'syz.1.1897': attribute type 2 has an invalid length. [ 381.557326][T13234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1896'. [ 381.572906][T13233] k›*·]‘: entered promiscuous mode [ 381.600386][T13233] veth0_to_team: entered promiscuous mode [ 381.607319][T13233] veth0_to_team: entered allmulticast mode [ 381.702600][ T30] audit: type=1800 audit(1753624585.824:5): pid=13234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1896" name="memory.events" dev="tmpfs" ino=1866 res=0 errno=0 [ 382.078868][T13260] dvmrp0: entered allmulticast mode [ 382.297212][T13276] tipc: Enabling of bearer rejected, failed to enable media [ 382.496380][ T5852] Bluetooth: hci2: command 0x0401 tx timeout [ 382.512436][ T5166] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 382.654343][T13288] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 382.715354][T13291] netlink: 'syz.2.1911': attribute type 11 has an invalid length. [ 382.795841][T13286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.125941][ T9450] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 383.185426][ T9450] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 383.457908][T13309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.737173][ T7152] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 383.859300][ T7152] wlan0: Trigger new scan to find an IBSS to join [ 385.184499][T13347] __nla_validate_parse: 6 callbacks suppressed [ 385.184521][T13347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1929'. [ 385.328488][T13350] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.474038][T13352] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1931'. [ 385.707645][T13356] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1932'. [ 388.614675][ T7157] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 388.623771][ T7157] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 388.817209][ T890] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 388.826491][ T36] wlan0: Trigger new scan to find an IBSS to join [ 388.970038][T13374] netlink: 'syz.4.1936': attribute type 1 has an invalid length. [ 389.023868][T13374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1936'. [ 389.211102][T13383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1939'. [ 389.926719][ T7157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.976466][T13402] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1945'. [ 390.085602][T13402] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1945'. [ 390.242559][ T5166] Bluetooth: hci4: link tx timeout [ 390.248500][ T5166] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 390.291945][T13412] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1948'. [ 390.369527][T13412] netlink: 'syz.2.1948': attribute type 4 has an invalid length. [ 390.391790][T13414] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 390.425310][T13412] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1948'. [ 390.470627][T13418] netlink: 'syz.3.1950': attribute type 1 has an invalid length. [ 390.540386][T13418] netlink: 'syz.3.1950': attribute type 4 has an invalid length. [ 390.568939][T13418] netlink: 15610 bytes leftover after parsing attributes in process `syz.3.1950'. [ 391.291598][T13446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.476799][T13455] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1959'. [ 391.643583][T13464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1961'. [ 391.952255][T13455] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1959'. [ 392.081274][T13455] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1959'. [ 392.115661][T13476] FAULT_INJECTION: forcing a failure. [ 392.115661][T13476] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 392.222135][T13476] CPU: 1 UID: 0 PID: 13476 Comm: syz.1.1964 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 392.222185][T13476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 392.222214][T13476] Call Trace: [ 392.222226][T13476] [ 392.222237][T13476] dump_stack_lvl+0x189/0x250 [ 392.222269][T13476] ? __pfx____ratelimit+0x10/0x10 [ 392.222305][T13476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.222330][T13476] ? __pfx__printk+0x10/0x10 [ 392.222373][T13476] should_fail_ex+0x414/0x560 [ 392.222417][T13476] _copy_to_user+0x31/0xb0 [ 392.222451][T13476] simple_read_from_buffer+0xe1/0x170 [ 392.222486][T13476] proc_fail_nth_read+0x1df/0x250 [ 392.222525][T13476] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 392.222563][T13476] ? rw_verify_area+0x258/0x650 [ 392.222588][T13476] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 392.222625][T13476] vfs_read+0x200/0x980 [ 392.222659][T13476] ? __pfx___mutex_lock+0x10/0x10 [ 392.222682][T13476] ? __pfx_vfs_read+0x10/0x10 [ 392.222711][T13476] ? __fget_files+0x2a/0x420 [ 392.222748][T13476] ? __fget_files+0x3a0/0x420 [ 392.222778][T13476] ? __fget_files+0x2a/0x420 [ 392.222820][T13476] ksys_read+0x145/0x250 [ 392.222862][T13476] ? __pfx_ksys_read+0x10/0x10 [ 392.222886][T13476] ? rcu_is_watching+0x15/0xb0 [ 392.222917][T13476] ? do_syscall_64+0xbe/0x3b0 [ 392.222945][T13476] do_syscall_64+0xfa/0x3b0 [ 392.222965][T13476] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.222986][T13476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.223008][T13476] ? clear_bhb_loop+0x60/0xb0 [ 392.223035][T13476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.223056][T13476] RIP: 0033:0x7fa51c78d3bc [ 392.223077][T13476] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 392.223096][T13476] RSP: 002b:00007fa51d632030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 392.223119][T13476] RAX: ffffffffffffffda RBX: 00007fa51c9b5fa0 RCX: 00007fa51c78d3bc [ 392.223135][T13476] RDX: 000000000000000f RSI: 00007fa51d6320a0 RDI: 0000000000000004 [ 392.223149][T13476] RBP: 00007fa51d632090 R08: 0000000000000000 R09: 0000000000000000 [ 392.223162][T13476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.223175][T13476] R13: 0000000000000000 R14: 00007fa51c9b5fa0 R15: 00007fff35ac90c8 [ 392.223211][T13476] [ 392.575099][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 392.735628][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 393.169639][T13491] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1969'. [ 393.308057][T13491] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1969'. [ 393.648933][T13511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1973'. [ 393.686725][T13508] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 393.723578][T13508] macsec1: entered allmulticast mode [ 393.746244][T13508] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 393.811480][T13508] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 393.826795][T13508] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 394.802924][T13534] 8021q: VLANs not supported on ip_vti0 [ 395.816940][T13551] team0: Port device vlan0 removed [ 396.866659][T13551] team0: Port device bond12 removed [ 396.934172][ T890] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 396.953172][T13559] team0: Mode changed to "activebackup" [ 397.176315][T13581] __nla_validate_parse: 2 callbacks suppressed [ 397.176338][T13581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1990'. [ 397.262315][T13581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1990'. [ 397.712581][ T9450] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 397.937116][T13597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1995'. [ 398.075314][T13601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1998'. [ 398.105854][T13601] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1998'. [ 398.311227][T13608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2000'. [ 398.352554][T13601] team0: Mode "acti6eba" not found [ 399.214793][T13611] pimreg: left allmulticast mode [ 400.975359][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 409.095144][ C0] sched: DL replenish lagged too much [ 416.347435][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 422.136159][ T64] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 435.776387][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 435.846739][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 435.863891][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 435.924741][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 436.167017][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 439.202112][ T5858] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 439.374204][ T5862] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 439.392618][ T5862] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 439.420204][ T5862] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 439.439537][ T5862] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 439.461818][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 439.597926][ T5862] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 439.616292][ T5862] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 439.624444][ T5862] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 439.828616][ T5862] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 440.740089][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.714670][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 443.773816][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 443.792144][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 443.810955][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 443.831613][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 444.453121][ T51] Bluetooth: hci6: command tx timeout [ 444.468925][ T51] Bluetooth: hci5: command tx timeout [ 444.603946][ T5852] Bluetooth: hci7: command tx timeout [ 445.998956][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 446.019194][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 446.104776][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 446.124643][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 446.142271][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 446.291918][ T51] Bluetooth: hci2: command tx timeout [ 446.590279][ T51] Bluetooth: hci5: command tx timeout [ 446.606440][ T51] Bluetooth: hci6: command tx timeout [ 446.812514][ T5852] Bluetooth: hci7: command tx timeout [ 447.700492][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 448.450349][ T51] Bluetooth: hci2: command tx timeout [ 448.859362][ T5852] Bluetooth: hci6: command tx timeout [ 448.864834][ T5852] Bluetooth: hci5: command tx timeout [ 448.910799][ T5852] Bluetooth: hci7: command tx timeout [ 449.256558][ T5852] Bluetooth: hci8: command tx timeout [ 450.691829][ T5852] Bluetooth: hci2: command tx timeout [ 450.955929][ T51] Bluetooth: hci6: command tx timeout [ 451.120935][ T5852] Bluetooth: hci7: command tx timeout [ 451.135961][ T5852] Bluetooth: hci5: command tx timeout [ 451.326296][ T51] Bluetooth: hci8: command tx timeout [ 452.765383][ T51] Bluetooth: hci2: command tx timeout [ 453.401788][ T51] Bluetooth: hci8: command tx timeout [ 455.408081][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 455.517758][ T51] Bluetooth: hci8: command tx timeout [ 474.820687][ T7166] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 475.501688][T13626] lo speed is unknown, defaulting to 1000 [ 485.260733][ T7166] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 488.042801][ T7157] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 494.963904][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 495.057960][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 495.107109][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 495.159218][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 495.176814][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 497.820694][ T5852] Bluetooth: hci1: command tx timeout [ 498.231175][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 499.233087][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 499.333004][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 499.351251][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 499.369221][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 499.933278][ T51] Bluetooth: hci1: command tx timeout [ 500.009817][ T5166] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 500.049893][ T5166] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 500.077913][ T5166] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 500.321490][ T5166] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 500.342020][ T5166] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 501.590314][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.621066][ T5852] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 501.681879][ T5852] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 501.703682][ T5852] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 501.721603][ T5852] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 501.759937][ T5852] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 502.029845][ T5166] Bluetooth: hci1: command tx timeout [ 502.053900][ T5166] Bluetooth: hci4: command tx timeout [ 502.665910][ T5852] Bluetooth: hci9: command tx timeout [ 504.338672][ T5166] Bluetooth: hci4: command tx timeout [ 504.344138][ T5166] Bluetooth: hci1: command tx timeout [ 504.749247][ T51] Bluetooth: hci9: command tx timeout [ 504.961241][T13635] lo speed is unknown, defaulting to 1000 [ 505.790343][ T5852] Bluetooth: hci10: command tx timeout [ 506.430601][ T51] Bluetooth: hci4: command tx timeout [ 506.562015][ T51] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 506.582025][ T51] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 506.709408][ T51] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 506.728414][ T51] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 506.781585][ T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 506.866537][ T5852] Bluetooth: hci9: command tx timeout [ 507.882699][ T51] Bluetooth: hci10: command tx timeout [ 508.648473][ T51] Bluetooth: hci4: command tx timeout [ 508.948835][ T5852] Bluetooth: hci9: command tx timeout [ 509.452293][ T5852] Bluetooth: hci11: command tx timeout [ 509.945391][ T5852] Bluetooth: hci10: command tx timeout [ 511.696426][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 511.701145][ T5852] Bluetooth: hci11: command tx timeout [ 512.037612][ T5852] Bluetooth: hci10: command tx timeout [ 513.783588][ T5852] Bluetooth: hci11: command tx timeout [ 515.863664][ T5852] Bluetooth: hci11: command tx timeout [ 536.045778][ T64] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 536.429118][ T7166] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 537.812269][T13631] lo speed is unknown, defaulting to 1000 [ 548.485009][ T7166] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 558.816544][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 558.853419][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 558.874470][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 558.892760][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 558.910696][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 563.918014][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.887028][ T5862] Bluetooth: hci6: command 0x0406 tx timeout [ 565.893120][ T5862] Bluetooth: hci7: command 0x0406 tx timeout [ 566.222578][T13666] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 566.240891][T13666] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 566.272234][T13666] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 566.291177][T13666] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 566.309499][T13666] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 566.341850][T13666] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 566.383082][T13670] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 566.399659][T13666] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 566.442206][T13666] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 566.470881][T13670] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 567.008103][T13666] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 567.124649][T13666] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 567.142838][T13666] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 567.161136][T13666] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 567.179313][T13666] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 568.182547][T13675] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 568.201675][T13675] Bluetooth: hci5: command tx timeout [ 568.243462][T13677] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 568.275923][T13676] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 568.284641][T13676] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 568.302084][T13676] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 569.307787][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 570.364801][T13666] Bluetooth: hci2: command 0x0406 tx timeout [ 570.447501][T13666] Bluetooth: hci8: command 0x0406 tx timeout [ 586.963368][T13676] Bluetooth: hci15: command tx timeout [ 588.981081][T13671] Bluetooth: hci13: command tx timeout [ 588.995937][T13675] Bluetooth: hci14: command tx timeout [ 589.311606][T13675] Bluetooth: hci15: command tx timeout [ 589.461104][T13671] Bluetooth: hci3: command tx timeout [ 589.544108][T13671] Bluetooth: hci12: command tx timeout [ 591.070992][T13671] Bluetooth: hci14: command tx timeout [ 591.402891][T13671] Bluetooth: hci13: command tx timeout [ 591.417954][T13675] Bluetooth: hci15: command tx timeout [ 591.662253][T13671] Bluetooth: hci3: command tx timeout [ 591.677119][T13671] Bluetooth: hci12: command tx timeout [ 593.162584][T13671] Bluetooth: hci14: command tx timeout [ 593.467752][T13675] Bluetooth: hci15: command tx timeout [ 593.473323][T13671] Bluetooth: hci13: command tx timeout [ 593.822041][T13671] Bluetooth: hci3: command tx timeout [ 593.836996][T13671] Bluetooth: hci12: command tx timeout [ 596.222358][T13675] Bluetooth: hci14: command tx timeout [ 596.262187][T13675] Bluetooth: hci13: command tx timeout [ 596.277423][T13675] Bluetooth: hci3: command tx timeout [ 596.282864][T13675] Bluetooth: hci12: command tx timeout [ 611.438520][T13633] lo speed is unknown, defaulting to 1000 [ 616.665722][ T31] INFO: task syz-executor:13637 blocked for more than 144 seconds. [ 616.673680][ T31] Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 [ 617.306519][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 617.396189][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 617.404913][ T31] task:syz-executor state:D stack:23912 pid:13637 tgid:13637 ppid:1 task_flags:0x400140 flags:0x00004006 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 618.824361][ T31] Call Trace: [ 618.836170][ T31] [ 618.839153][ T31] __schedule+0x16fd/0x4cf0 [ 618.843784][ T31] ? __kasan_slab_free+0x62/0x70 [ 619.433334][ T31] ? rdma_nl_net_init+0xcc/0x180 [ 619.446769][ T31] ? rdma_dev_init_net+0x95/0x270 [ 619.451872][ T31] ? __lock_acquire+0xab9/0xd20 [ 620.484762][ T31] ? schedule+0x165/0x360 [ 620.497844][ T31] ? __pfx___schedule+0x10/0x10 [ 620.502780][ T31] ? schedule+0x91/0x360 [ 621.041439][ T31] schedule+0x165/0x360 [ 621.424756][ T31] schedule_preempt_disabled+0x13/0x30 [ 621.616247][ T31] __mutex_lock+0x724/0xe80 [ 621.620838][ T31] ? __mutex_lock+0x51b/0xe80 [ 622.391534][ T31] ? add_one_compat_dev+0xee/0x5c0 [ 622.569878][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 622.574996][ T31] ? rdma_dev_init_net+0x1d2/0x270 [ 623.047586][ T31] add_one_compat_dev+0xee/0x5c0 [ 623.052635][ T31] rdma_dev_init_net+0x1dd/0x270 [ 623.494940][ T31] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 623.509670][ T31] ops_init+0x359/0x5c0 [ 623.513902][ T31] setup_net+0x10c/0x320 [ 623.782700][T13675] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 623.974705][T13675] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 623.993667][ T31] ? __pfx_setup_net+0x10/0x10 [ 624.077358][T13675] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 624.256879][ T31] ? copy_net_ns+0x304/0x4d0 [ 624.261549][ T31] ? down_read_killable+0x1d1/0x350 [ 624.314276][T13675] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 624.333259][T13675] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 624.507977][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.114309][ T31] copy_net_ns+0x31b/0x4d0 [ 626.127359][ T31] create_new_namespaces+0x3f3/0x720 [ 626.132793][ T31] ? security_capable+0x7e/0x2e0