last executing test programs: 3.248738354s ago: executing program 2 (id=1978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64) close(r2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 32) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r6, &(0x7f0000000080)=ANY=[@ANYBLOB='b '], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r5, 0x0, r8, 0x0, 0x8, 0x0) (async, rerun: 64) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (rerun: 64) close(r9) (async) r10 = socket$unix(0x1, 0x1, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0x120, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0xff000000, 'netpci0\x00', 'geneve1\x00', {0xff}, {}, 0x32, 0x1, 0x28}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{}, {0x2, 0x7}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x6, 0x2, 0x4, 0x2, 0x4, 0x2], 0x5, 0x4}, {0x0, [0x5, 0x4, 0x0, 0x1, 0x4, 0x1], 0x3, 0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xff000000, 0x80, 'vxcan1\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x8, 0x2, 0x52}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x0, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x52, 0x8, [0x4, 0x3b, 0x35, 0x18, 0x33, 0x27, 0x1c, 0x38, 0x2, 0x38, 0x16, 0x34, 0x2b, 0x39, 0x3f, 0x21], 0x2, 0xffffffff, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x36c) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r12, 0x20, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000002780)=""/55, 0x37}}, 0x10) (async, rerun: 64) r13 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x20, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xfffc, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r14, {}, {0x2, 0xb}, {0x1, 0x5}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x22000004}, 0x4008000) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async, rerun: 64) r15 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000800)={0x78, r15, 0x1, 0x200000, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x50, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d1a7a362248e2681129ab8efee89ea377ce6bf0f2739d083d42f86a58a26aa78"}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 2.901818637s ago: executing program 2 (id=1982): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x10}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r2, 0x1, 0x3e, &(0x7f0000000000)={0xfffff000}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/454], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x79c0}, 0x94) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000017c0)=ANY=[@ANYBLOB="020300020f0000000000000000000000050017003c0000000a004e2100000009fe8000000000000000000014000000bb02000000000076d62a0000030006000000000002000000ac14140000000000000000000200010000000000000000000000002003000500000000000200"/120], 0x78}, 0x1, 0x7}, 0x0) syz_emit_ethernet(0xfffffc69, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa2402544aadcccaba772be1cd1e6d43aa0308060000003c0000000003019078ac1e0001ac1e010144140a01ac1414f1cd8f7e620bb29b68cf5e1bf8bc5d0000000000e0000002000000000d00907800"/103], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r3], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) getuid() r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000002060102000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65852c706f7274000000"], 0x4c}}, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000000000003c8d381de696", @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8008000100", @ANYRES32=r4, @ANYBLOB="080003000300000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="37d92ffcb92554620ac47b7e09918d211b54c0db44330d2d0dc500c456e457182fe5f1e564ff9e775b3a12daa61fe365b7068433a33012cbaf5e0de58c54f63fccf28bbce8bd51b9535164ffede7446f301d9900be35198d291bb1c076a50e0580cd3929e774a65e1bb316a2b98eae0676324c887a2f5b94dd5222271a60a312a7c6a581adae683a0c62eebb2505919f36bf6556482fc94f9048f03f7ffffba33740861a543c131a2c54c01f261434d0e6858869cbb748cdcf6ce05eefd6cb5972eee4980debc506638e6303ef1a32cc281b74be25c800dd6ae66790e87280b43919235a14dd5c886559"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = socket(0x10, 0x803, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000001840)=@ethtool_flash={0x33, 0x531f41b0, './file0\x00'}}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x9303, 0x30, 0x7, 0x4}, &(0x7f0000000500)=0x18) socket$kcm(0xf, 0x0, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0x9, 0x4, 0x7, 0x4ae, 0x1, 0xf, 0x4, 0x6, 0xff, 0x7f, 0x7fffffffffffffff, 0xffffffffffff8001, 0x5}}) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x7, {{0xa, 0x4e21, 0x0, @mcast2, 0x10}}, {{0xa, 0x4e23, 0x2400000, @dev={0xfe, 0x80, '\x00', 0x33}}}}, 0x108) 2.547144092s ago: executing program 2 (id=1988): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x5, 0x0) sendmsg$inet(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket(0x1, 0x2, 0x0) unshare(0x22020400) unshare(0x24020400) sendmmsg$unix(r5, &(0x7f0000000980)=[{{&(0x7f0000000600)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x800}}], 0x1, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r7 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"/307, @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="9abc"], 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="c0", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r8, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f00000004c0)={0x9, 0xff, 0x204, 0x5, 0xb7b, 0x2, 0x2, 0x2}, 0x20) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f0000001500)={r10}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f00000000c0)={r10, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}, [0xdb77, 0x4, 0x81, 0x5, 0x3, 0x0, 0x7, 0x475, 0x8, 0x9, 0xf, 0x22b, 0x7, 0x4, 0x10]}, &(0x7f0000000040)=0x100) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010803b0c29bd70000000000000000000", @ANYRES64=r0, @ANYBLOB="0000000000000000200012800b00010065727370616e00001000028004001200060010004e230000"], 0x40}}, 0x0) 2.321624084s ago: executing program 1 (id=1992): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000004000080050011802efff20004001d"], 0x20}], 0x1}, 0x300) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7c", 0x3c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc4", 0x94}], 0x2}], 0x1, 0x40800) recvmsg(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000240)=""/4, 0x4}, {&(0x7f0000000900)=""/220, 0xdc}], 0x2}, 0x0) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r6}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2, 0x0, 0x0, 0x4018086}, 0x20040051) 2.320903442s ago: executing program 3 (id=1993): r0 = socket$inet(0x2, 0x80000, 0x5) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0x4) (async) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) (async) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000380)="00214717a70700000000030600710a5eeb9d0471200000000500000000000000ffff0342844d50e77d0dc450de49c204a803166580ac899c081cb49f1930e7d07fbdf3d8134e72158357ee37fdae", 0x4e}], 0x1, 0xee, 0x1) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x811}, 0x40080) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x4a, &(0x7f0000000640), 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0189436, &(0x7f0000000140)=0x40000) 2.183686691s ago: executing program 0 (id=1994): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x7, &(0x7f0000000040)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x24}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x7, &(0x7f0000000040)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x24}, 0x94) (async) 2.086137736s ago: executing program 0 (id=1995): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@ipv4_newroute={0x4c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x1, {0x89}}, [@mcast1]}}}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@ipv4_newroute={0x4c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x1, {0x89}}, [@mcast1]}}}]}, 0x4c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001800010029bd7000fedbdf251d01050008000e00", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="1500040071d87600f2979dbbfbf0e1d6b30e764b807b43dd95182618893670b10ff27309a4ea8406f447943e66caacb25470163f56662108ef65ebbb7fb6ed7a2bf9e63ac8ba09cb7e56a18934d33c1cb6cd685d88300ae7dc21d1b19bd823064c1465117e5fc630cdcee5852cd7c1e566a927bd1733f86c820e53ffd8be723fdf785b8e7e806ce28b060e55771ee4080aef85490fb19f5861534818cdb1e8c88b371654c69895d545cb8d4417c53cc05c8e0face346", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getpeername$packet(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xa0000003}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xa0000003}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff0002000000000000000000000600000004"], 0xfc}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000a80)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @local, 0x9}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000780)="c2", 0x1}], 0x1}}], 0x1, 0x24000801) shutdown(r6, 0x1) (async) shutdown(r6, 0x1) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)=ANY=[@ANYRES64=r1], 0x114}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.085821026s ago: executing program 3 (id=1996): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x8814) socket$netlink(0x10, 0x3, 0x8000000004) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={0x0, @default, @netrom={'nr', 0x0}, 0x3, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x8, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x1, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, r5, 0x8013, 0x1d6ab}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r5}, @IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x44}, 0x1, 0x2000000, 0x0, 0x40080}, 0x4000) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r8, 0x6f6) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r10, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 2.029433101s ago: executing program 2 (id=1997): recvmmsg(0xffffffffffffffff, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000d80)=""/190, 0xbe}, {0x0}], 0x2}, 0x3}], 0x1, 0x40010001, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @empty, 0x10001}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c000140"], 0x92fc}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002c0000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x40041}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r4, 0x300, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @remote, 0x40}, 0x1c) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r7, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$kcm(0x2, 0x200000000000001, 0x106) select(0x40, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3}, 0x0, 0x0, 0x0) shutdown(r7, 0x1) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 1.951317136s ago: executing program 1 (id=1999): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002d00)={0x9, {{0xa, 0x4e23, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4620, 0x0, @local}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x2) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r6, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0x84, r9, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) clock_gettime(0x0, &(0x7f0000000200)) ppoll(&(0x7f00000001c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 1.885141092s ago: executing program 0 (id=2000): unshare(0x6a040000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000100)=0x80, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x9) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a440000000b0a01030000000000000000020000090c00104000000000000000020800064000000000080004400000000308000640000000000900010073797a300000000020000000180a000000000000000000000a0000040c0005400000000000000004cc000000050a010400000000000000000a00000641000c0024e20e328f714eb94821d8f0ed7710fb6496e4099349eb9c9c517565096f18c880475159401e1cf6a514dd89e1bd64efcecbfea02d9e38ea80fb0e000000000008000b4000000004640004801400030076657468305f746f5f62617461647600080002406453b531140003007866726d3000000000000000000000000800014000000002080002404f23c5d2080002407f39b539080002405a1b90bc080001400000000208000240ffff7fff08000540fffffffb20000000120a05000000000000000000070000050900010073797a30000000001c000000090a0407000000000000000007000007080003400000000220000000120a01040000000000000000070000070900010073797a31000000004c000000180a01080000000000000000010000050900020073797a3200000000280003801800038014000100626f6e645f736c6176655f310000000008000240fffffffc0400038004000380140000001100010000000000000000000100000abd"], 0x200}}, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6003000000462f00fc000000000000000000000000000000ff0200000200000000000001042081000000892f"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) 1.781634979s ago: executing program 4 (id=2001): sendmmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="c16a22213bc73b5c37696b90ad0f0000004193fc04574d3ca94f95bdef8a6701633b8bd1cfecb4c0bbc0c62d3e3b7d4578bd360ea718afacbfd6c7559a0363ec0d3e901cf5eb094e044c36a7e312576131d3c2de4c159d29ab0c76798f3c75cf5d68d137fe86e1d0b8baa2f8d1b3c6f655cc668f8e164b1d89f4fe898cad99f500a0eedd85d90fb3afcbcc4468ce6684df82010000000000000075d0f7bedf3104a2dd27723e23aa1627b6e1dbfdeb89d42bcaddb41d301768f9f3a3dd3e8f9e199dfbaf050d98cec2903f478cb38eb1a7fbdc2d28d3ebb00609f68e2fe5ba9f341ea7e8f5d921c1a4c381", 0xeb}], 0x1, 0x0, 0x0, 0x44000}], 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x33}]}, 0x24}}, 0x48850) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c000000180001002bbd700000000000020000000200000900000000060015000600000018001680"], 0x3c}}, 0x44890) 1.7050365s ago: executing program 4 (id=2002): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1f6fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f906", 0x8f}, {&(0x7f0000000140)="3a1b30e16e00000000f853b797aad193e69fdde0bc8a0ead95", 0x19}], 0x2, 0x0, 0x0, 0x2004c801}, 0x4000000) close(r1) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000180)=0x8) 1.549749885s ago: executing program 4 (id=2003): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x7}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x2}]}}}]}, 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r6, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r5}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x24, r7, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r9}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r10, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x101, 0xd}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x15}, 0x2004c088) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001b80)={'veth1_macvtap\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705e, 0x3}, {0x200}]}}) 1.313727446s ago: executing program 4 (id=2004): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001640), 0x400000000000043, 0x40000022, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x3e, 0x0, &(0x7f0000000080)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3, 0x0, 0x0, @void, @value=0xff070000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) recvmmsg(r3, &(0x7f0000001640), 0x400000000000043, 0x40000022, 0x0) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) (async) openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) getsockopt$inet6_int(r4, 0x29, 0x3e, 0x0, &(0x7f0000000080)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3, 0x0, 0x0, @void, @value=0xff070000}, 0x48) (async) 1.298989814s ago: executing program 3 (id=2005): r0 = socket(0x2000000015, 0x80005, 0xfffffffd) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x88802, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x20000400) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x4, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x1, 0x1, @loopback, 0xfffffffd}, 0x1c) 1.153215363s ago: executing program 3 (id=2006): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r4, 0x104, 0x7, 0x0, &(0x7f0000000040)=0xfffffffffffffe3b) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) connect(r2, &(0x7f00000002c0)=@can={0x1d, r5}, 0x80) syz_init_net_socket$rose(0xb, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x44b, 0x1000, 0x40, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}]}}}]}, 0x44}}, 0x0) 1.105704416s ago: executing program 4 (id=2007): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x20001, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendto$inet(r0, 0x0, 0x0, 0x20000010, &(0x7f00000006c0)={0x2, 0x4e20, @remote}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0xffffffef}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2003f}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r4}, 0x10, &(0x7f0000000100)={0x0, 0x43}, 0x2}, 0x0) r5 = accept4$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14, 0x80000) connect$packet(r5, &(0x7f0000000500)={0x11, 0x2, r4, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="05000000dd80bd8870fb444e69ed76eabc3a", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r9, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030008ac0f0005"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r11 = accept$alg(r10, 0x0, 0x0) sendmmsg$alg(r11, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="9f1ac09f155c1291fc8baa01adb9b575263c1a877ef8644bccc1143c6da61222f05eacf50665f3905cc2fd3e4e8100a13e7fcca4310085ea82993babea06255779d0dfa66f589f9511a2f87ee914c9e0894139310b5457cfe7ca3ae9dade5d7a11f0f2bbdec62e2df3daf9875c79c6763fdcb88306000000bd7c5c71ab8fffc299f6aea8ae05a727e64cbf8c3de5c36604fa3a7f43c2d51832aa29a52a9dd409823bc89a7cc268e91fff716052173384c4e76c9921c2accb039cbf2cfb99a47371db803c3dce71aa0555a2c0fdb6c8e812ac6974d7b3d749bbc7f90a00", 0xdd}, {&(0x7f00000012c0)="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", 0xf23}, {&(0x7f0000000100)="ecf19571", 0x4}], 0x3, 0x0, 0x0, 0x80}], 0x1, 0x844) pipe(&(0x7f0000000280)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) accept4$phonet_pipe(r12, &(0x7f0000000340), &(0x7f0000000380)=0x10, 0x80800) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=@can={{0x3, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "b1539964a5336b72"}, 0x10}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000008f00000000000000da41000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf09000000000000550901008004000095000000000000008500ea4d84a175d83e78fcdae12a05994e000094000000bf91000000000000b70200000300000085000000ae000000b7"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1.105216881s ago: executing program 2 (id=2008): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000eda482"], 0x24}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) close(r2) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000925cdf13079341ec00"/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f40)={r3, &(0x7f0000000200), 0x0}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xffffffff, 0x20}, 0xc) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000280)={'macvtap0\x00'}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x40800) 978.693033ms ago: executing program 1 (id=2009): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000001200)=[{0x0}, {&(0x7f00000000c0)="08001497733f5d3e", 0x2a}], 0x2}}], 0x1, 0x20000000) syz_emit_ethernet(0x2ae, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0xb8, 0x0, 0xfffffffe, 0x24, @ipv4={'\x00', '\xff\xff', @multicast1}, @private0, 0x1, 0x50, 0x5, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x2f, 0xa, 0xb, 0x3c0000, 0x20, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x7, 0x74f65deb}}) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r1, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4048895) socket$inet(0x2, 0x2, 0x1) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000001200)=[{0x0}, {&(0x7f00000000c0)="08001497733f5d3e", 0x2a}], 0x2}}], 0x1, 0x20000000) (async) syz_emit_ethernet(0x2ae, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0xb8, 0x0, 0xfffffffe, 0x24, @ipv4={'\x00', '\xff\xff', @multicast1}, @private0, 0x1, 0x50, 0x5, 0x9}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x2f, 0xa, 0xb, 0x3c0000, 0x20, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x7, 0x74f65deb}}) (async) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r1, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4048895) (async) 917.874559ms ago: executing program 0 (id=2010): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000100)={@nfc={0x27, r0, 0x0, 0x4}, {&(0x7f0000000040)=""/72, 0x48}, &(0x7f00000000c0)}, 0xa0) r1 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x800) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000200)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x3, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast]}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000280)={0x6, 'ipvlan1\x00', {0x3}, 0x1}) r2 = accept$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000300)=0x1c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x7800, 0x1, 0x10001, 0x7867, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x65, 0x0, 0xe, 0x2f, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xc}, {[@ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000003c0)={@local, 0x32, r3}) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff, 0x26, 0x0, @val=@uprobe_multi={&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=[0x94e, 0x767150da, 0x7], 0x0, 0x7, 0x3, 0x1, 0xffffffffffffffff}}, 0x40) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4010, r1}, 0x18) poll(&(0x7f0000000540)=[{r4, 0x4010}, {r2, 0x8024}, {r1, 0x3000}, {r5, 0x20}], 0x4, 0x9) ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, &(0x7f0000000580)) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0)={r4}, 0x8) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000001600)={r4}, 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001680)={r6, &(0x7f0000000600)="e34b8381611471f462e091401672b7e109a1111e05e4a60750f1c0cad75245945ccd3a9ba2a38fe834c93c7430f2e274f848804edf51655fe4ba293a3df6b5206f4ac505fb53f03fa890212acd5b8c4ae8738bfea414aa6dee29ffa24862c0f6186311975ea5c8807bfae5847cd8d778e20fc3d9a51b67f199398ff92382a2991bd93dcf22d2f9893ee82ac3de9551c94e478ca5380cf8dc257c1db05d61e0a3d4f4961a6c9a94ac92fa974136cb7152fdcc70aa1a0ebf9541b703f00ee2af4d0cf1756624a273c00cd0e4a609fe99af0cc1070e5f073e3714fe333d6a0710832bda4b77223d5d0fba3f0495192afe97dfdbeaaec7618acf80646588e0e8a4f7d4989c61a0a396b16b1823e07ae0d48d0db6c5b667c7c34689a850a8a8af5262a028546cdd3d7ccb6b49de1a8793d78ee6c5bb2b596a29a0f4e3c95c82eaa79a0665c83498a0aebb2641d2257c2191113922d3962b00d0798f77c0de914d4ba5d95ccc5b59621706ec7e8f383f2200cbf3af65f769909e0e41b8e7a0f069baa00851beaeeec1738b1ae6469f458d5ad6419a5f7d0e439ecd1fec2ff9f80c99115c43e83ec0b502a4958a12520b0a65101821b20117a970bf3a2e67709ba7e6ad910a5f84d94d523a427ba20eafa67e654903ca883da631550de473ad53142956fc8b7e0d43c6fbb2a8a9e8aa01026fcff1dcdbf8b786dfc53fbf1fb6eab3602ce3b27b2e151482daf703ae4c787a4ee919c01a0cbbe79a96e4dfc2de31acab75bbb14091d8866ba9ca8edcf8adce1df958633271d6705d76355b18ee0e2a6820458c8548695204a94c10313b0d03fa6c3a420ae9bff82bb09d90e9d5ef41ec745dbda334aa9df4335a20b8d651492e5547eb7bd240006967f7ac49678a85b75d982d4a079bf878d3d87d2d1792d2deb3e9889f9e005320584543208496fbaeca21079f5ad0fe82465d4017fc5484568184e8428d536b23f1cd942c5bb5cb007e7329b910a7e029ebb91fb3e348721fc8bd55e3049f413fec73d275c591523f9a3e86d3ed5a3630703d38a85142a4de789e8831b7193ba3212ec659460be1a543c488f747924c3372c0d60056825b065ef8535c963cd5aac491faf4bc2e27c85adb8f263fae2fa8a666c985cbdccb5bb836c2bf9f9916bd80a7fecb47ffbe5149d3a3db55ae347f17b639f131180dc247fb2f3a4ca9f422850db1981124b1fbce05d6a4aa8c55aa97c8c07164b5c3cff92b22730bfb6de37edbaac96086a4abcf7d9c57580fbccbd5b0d6c6d1fa62139d225458a372c4996db6a1dab0023a6de419b1bd383eaf0f479a18699da5270ce7edf49dcb5ba17812be1e1fa94aa02a30de50449bef6a7110705dcd6c7db596f42dd82122a046ee6aa4a0c0a34d031328197c04d1c613cc59d2ba72ba52eb2881359d04e130f904505d6d31a05edcb63abc86c7f16c1ce038ab4018645171f1bd64768a0ef1030b6da027479cfe6809986858d835e38e0fec3f3408a362ad8c115ea51763e6e084b68ad976d9e006215743b5cf036695c9652990a8cd496e8d4325ae9b92dc8ef9bfd7d6efdbe57839a5f9765d50612cce1989bbfe118b739b158e20e2609226eb8e768a9ea21061388aab6bb44c916716ae0cb7a2762fa39d0333b00d2ec86d320030c9c4d5fc6282582aa79dc2f6776de67de7dde8b3fda6a827239b7c306a5facd883ee58df929c6aa4912848694fd4d23277f471f379f5721c5a22849b58d269bcbac458f134122f2277e0bc1b1919c6e8d1b853762bb7fcb0b91a0525e66b129df33e09b501b54a89d5f8d5e0b340629174698625b45d3b22fe131a5d900dadcdd89bce3052ef65e61d8732ef1beec58d530a8f0e1e31c6ed4b5c7876227a83bfb5f99af5a248cb983293729a1651c2ee322bb97dbe7fc0e0746ce93f09b7f72b83d6b4aeefb251cb1df62edf1000b995d82c7136ecd631f9550c99250bf160137d782d3953cd76a4b55f918f3bcd5157fc567b6e6b196e4d6b0b4d634fe7beacd8ffa23480ec71a70e05bc624885e93921fbdce2beaa7d8865f446b618fc7a9716f8029aafccac7ecbce27d1da01286c49e8a41bae8cc78c189c24b54ccdaf7dfbd87b159e48730e74b33240672d8340838bbfba04d235837a1b5280b586d068c381bb8de310d0ad6df158b4342e052b0691e430c2e8a23e27a0537658c5ff80b11eb42650e53c8b67990385cfa17d0a9a451984c7461c3d07402779dd8592654df6589321464a42f21c228b437c4d3d316f4c851e247d699c13c36b9e67ae2f1fd3899533f83b47a766d9051f42633844e72725a0ac17c8562ce731ea7da1e0dc742bd940843e89d18bf02834f831941c20dbdac6642c1cbc19457114f1572aced5368290c35d231d6e72e32cb4114e55a54911c2c3121f43a1e14a5b075cbf29fde1551b64a4f4e6b55573843186369628837535c55acc602b604ebc6977b30becf9055339383341652e8bccfada671f72071eb3a27c231ca27ca073675e4c045887223c5dfcdc203c11c9ed9b04b746ab35b8338c37f349ea22c214e10689195e7077cd2c8d33676f0aa34b2af8767522112d1bc20296aeeb355b57385d37cff2364e97f668941ec35b4192a46e641ea06c834a1ef7045df74109f75519407c3b254e3b68ad526171f477ac00f82299a6f83ef36e1b395ac1c46912cd0f3cd412187a150593344f881b0220b00bf4eb6c83490b067289e6490113a3b7b7e68eb6167d2292fc5eaf2eb45cc2d6df89558852f50250a3d19006ae7b9a24e09425095438c3148f2f167180f14b149d35ec9a33cd2c4d5df90080da6065e44504aec362d743ac69102bf1bb9c1b0ec17309875a641ec287a33f8ec87d738aa7b366c2a7870b244a8a28d804c4255ca18048e13b46ccbae662d167f329c668331bb04845e484df0a03c271bbfdc33c4e4f71bd7a1f0495b9a6d08b255670fba8f44ef037b0758fd17649e12c9c89db78e1c38ead3b20cc79e3af704410c8630c31e6d92e50941acc65f5b5ac7637fd801fd1616ce836dea6d5f3b5e84d3dab81a9404dcc482330fa82d35d47930a90d8a981ed97dfc032429b757701f988b31659eb43ffa590564964a609d5448ff0f5e956db3c34a2a0fb9872739a53c37106ff5cdf1e86ee3e974a38690ccdbdfd5c247c4d2ef4e4dadce55bfea36b6fedf57aaa177473516bd72f85f1a80f5896796224899e283b6fc8262a7063cf8d73398f48400aeb287be6a412b171f43285d8fc58afd3694b1d448d2c0a235fcc821bca7d293756aa71aecc1727db775b4d9ec94334bd7ba9dfab6a2f22bf78663bef5a3c6ac3ce583cc9fa0bfe16f1514a63c866560feb53f1b2ed18c581a003e7287d3a4ab0ea991da99a20c13a31abcc1a53dd1b9261dccb0e154f1778c0573d869a7e42d83915c4120d44fd5834783522f6cc527ae80a25c7a96e09b99ecc68c7a79cb73b2ed529c6605ed0b8949df71734fa58c74ac3875aa65ce712cd9aa83171247c29789c4ff25c0a66ea4754bc939fa5551d12f50a78f20cfcd21f9acd3a313794c744f9780f2c6d7701c31b7be1e1e62d617f7ac4f4bd7986044cc7107c07183b07c1bb38cd7754decd26a66dfc8e189b360c3bcb4d76aac02d0c191219fd05ade8977eda4d5afeacfb6f7469b70865b1f763a3076aaf4cf288405ca1514d8da50b002713f0d75ceabfdb8627aff9e196cfe290dfdf0889d37c8a7bf9fdc98a0ddd1a0f9d7cdbc61c8aa7fca568705f75917da47f7f7b0113eb019adee7ca9b22001641e7cfd0860b143cfda68df858f861dccece6ae2996a54c82f202970e70402f077dc9c118b9aa54379444a8a354af35cfa4f0c76d1a2e180f7aa28fd0e28a95b658fed4f5c095e4aca1bc703d2906460564324e512f2b428f2d566d4ec729d4042f08c4b50538fddaf7276bb1fcf7487763c1384a36e708a7631d4cd25e6d3f1d5c4299bc64ecb933cbcf9d3e2556fa961b6d140eaef319197ac6d596e3622244ad31685dfb78eeb0a7637964a34a1cd725abfa959a2186b5c6ae4621fd92449ce7a37f0a0f502e1d6d50376d72cce4770ef391a48c0ba4c4ebfb7f83aeb81f75e7784f2b9fbc8ae0f54f556795e772937532aa8e5e97c5729186fe59a96cb3bee524b97a2dd8b474e39a82bff589daaf6ed51fef346837b78ec00c9631bc6ba1897c975e1b05ba61392e890c6f6ef55e129c9b4d70d3aa92aa2c284d5e6348c7aa4e92d370cd48d4d12fd0519a08a862773a53c67d5cab58851b54645aaca7924695069e26a262c5e14cc3226675aa866099afa5509f25b46771a13735bfd49b13c9d72555b030e818e66ce25ed3196792f6a8583d91c663c6e2d1e4f0ccd0bf95413dba7d536854d2b4b12af8b48182ec2c62282b2d629b844a76e2b12789b4582872d205a6534e63e4cca8f81599f0dc338b077a441c9f153dc1cb1deee897f3e678ef815e660ba4b4ecf9470f8bdc3abed2fb3e707e1c02952fb0461f6f50385ae2955e159f1c0e120d49691f96f435901978a2a1de7e8a08635d10a59c4bde6c5aee9b22209a227e6e16033fd579af8a053485d3ad79f115c729ea410fef25e058fd161b4374e931221f96664d80bfa1feb40230e6f6c34dd982819b6cc6df7442c477c12c75c154a0d3ea78799488e4ce9d33633564c8885b3362857d284021a2595fa4c6ca090014f5d66b7f899beb36f1536dcfab8aa8c74f7ce489626667fc78fe123e7810372ffafb36c244f1e3925ce5bfe295bb30038854ccc8a09bb0e16761190859c2f00c63d9f99efd758062a9b91e4dc66bb0c71b163722f63365effff42387e85eb26bf7220885040517e527e2aa67e0c27a5bc06b6954291d931cde641d21257f7bf9d2fa52e6950c32e07cb6e4cb65ca54340aebbdac8ea7a49a28d8c0bf4bcec165e629f51c9b4f7000d6ea3ff70c85a1f20cde22b5cce1eea5a4e110c492b9468d5d115ce48511d07ea794db8de50be78acb7c5a2522b5691c1c8cb6a5da81460dcf1c6c3adbabff53872caf78ab35cdfad2905629f3012042d992fdd47e835184ca9257e39fc4eb7f133cfa4770e6214d73691f2319c82ebeb7beac4290db6afa51481547009cca3e79d5997ac39364ab8aa792d908d9f881c90f5875c3d27e5269fdff53294a3b66420686cd6fcb64373213be84b2c74cb5c869e9f656bcc89315ee2f9ec5fcebce2d91ba874ecb30a75cc3f2c81a4532c2528b4b0f3aa583a54474ecfc30557fcb380bc6b8b57ff66eaafa84074ebd7f04f6131a232f5a870d3c1085ae88b232ac046ce55fd479909c73c5029d1071b86f9225503babc172ab391c69fee08bc4d9e4156f3cc737d906c37c70bd1cd00465ccbd33f79c070930e3eb135e5ac2dee1bece6b352fd2f4a31e64b8a80937f6ddfeb94d49ab19a3e3fe1275cfc98d1654d8bd4067c5945a8b6f1ba23709701dd8853e707f30a21840e3e9a6afd2bbb6e2c0e8a59305eea4fd8becb4ec2684ef8ea63af20f3c18344885f3112761fd9895c53c34bd4e4c3db1b4ff6b27a35afc94b5e6dd40d67fe06a0d9d9338109dfe3e0936299580ff7408100a7792052de964bc3fc0229785eb2b92938637ba0de78fb8126de0ba7aa91bfa113d9d87f146e72c5104207ba57c6a489499718ccf2018be0460d08ed011a21363437bd1eea2229037f4cdbe96d597be8c5a06922866d0423c9d410e161d3306a260831c8398933df13684bc4321bc01266305b94fb0712ca17899b1e04b141c919792060f5cf", &(0x7f0000001640)=@tcp=r7}, 0x20) r8 = openat$cgroup_ro(r7, &(0x7f00000016c0)='memory.swap.current\x00', 0x0, 0x0) writev(r4, &(0x7f0000001b00)=[{&(0x7f0000001700)="57b183cd3bd4e0ed9554bd7d37f878e80144bec6409e817808815d866ab55b39d450a0316e8dc1d143882307238b300b3409fd0f8541cd30aec8eda0fc1b03e5e36f7cd63c32cb0bd004f4cb5fca578ba60ebf9c5403551882ecf5c633a55ba83c60c2175d3256c9f11b28fb09f009821b338dd1309f97466e7c35788eda32e73fbdfdcae8e07294c38c974e872a80ab78d4773378043020968cdbccfb45acf3398ef3e325bb144745bc4fac95b9d3bd7e691cb61a7f3ae90e88c4ed09f04a9ec04a2b1dca68", 0xc6}, {&(0x7f0000001800)="33844b69436d4a7e448ed77249240105438ab61649fdf5210948dbca", 0x1c}, {&(0x7f0000001840)="1c5afe8daf3286a4c1b3", 0xa}, {&(0x7f0000001880)="d2c1fb8be668216c0a516491afa12e5241d891cf75d4fbb72b158686c844910ced09c699c243d8691dabcbe5318eefad8b29020c87ee3c71ff89f5eb6e8ee01295eabe6a14ee7093f892ad", 0x4b}, {&(0x7f0000001900)="b3013f653ec7afa675f4e422f6ef04f38a15d79dc9378c7320d9ea2387e9915d985b20511780d1e5e029e2c54e6abfa54b768f45cde9cba5844ecd3bdd67df0fa9212751117c1d4681d7fcaf3f4e3ec49ea3c114f49da37078e1e9c4d8bb7015f933207d517375222790f848d66b9741ac0c5d1f90e723354b2dbb97df6429fadb572e59136923f636b21a3252591710d0a713006ba70e34102caf5175387f5eb00ea781e220f066b4ba9596d8de8f62c4", 0xb1}, {&(0x7f00000019c0)="632da2c702b17906968622874fef71dbf2c4c5709c0180739c29c4ca6141b8723425cb7de6c6cfb4b1a58a79865b256729278f92be8061f71b0bf9be3bc0e6a0687ba113cbbf5c0426eabc299b021f1914d8ed3fa2cf2b16c4be26942b80c041dacc669bfe4b00aa79a773d22f5ef6c5321df409aa1852d225cca7579e36dd995998de574f95841c999f0bf113d8386088550cd2c9107fd86fe764ef94", 0x9d}, {&(0x7f0000001a80)="ffd969be429cdbe193afca1501d16fcde4f9926ecf4239756be67b0d6afc8938003e693b55cceba184362eaf9edf632710ac101e3e3b363eb312f1fa2b7aee74c78f9e9c8511e501721056e1f8b11aa7c4f73f5cbc3bac", 0x57}], 0x7) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001b80)={r8, 0xffffffffffffffff}, 0x4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x11, 0x2c, &(0x7f0000001d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x545}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_val={0x18, 0x7, 0x2, 0x0, r8}, @generic={0x1, 0x5, 0x9, 0x7, 0x6}, @generic={0x6, 0xb, 0x7, 0x7, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001ec0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x10, '\x00', r3, 0x0, r7, 0x8, &(0x7f0000001f00)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001f40)={0x4, 0x6, 0xfff, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001f80)=[r6, r6], &(0x7f0000001fc0)=[{0x4, 0x4, 0x4, 0xd}, {0x0, 0x2, 0x6, 0xb}, {0x3, 0x3, 0x3, 0xc}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x20, 0x14, &(0x7f0000001bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x775f, 0x0, 0x0, 0x0, 0x401}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f0000001c80)='GPL\x00', 0x3, 0x33, &(0x7f0000001cc0)=""/51, 0x1f00, 0x62, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000001d00)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, &(0x7f00000020c0)}, 0x94) writev(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000021c0)="1735f0525e8fac861dae1aa5ede4e7fb0a81b6850aabcbd95aa318bb4f6254d41ac5d5c6f587aa07d7d637f9771b6b6c9147caa5703033cea5cae6ef39fcc6722316485de20daf15cf259504b25806768da926f81f44f0cc63aaf7d14b9532aecf2cf1d7a3508ff779f958f7eff045f402662b99b05c69d0431a346066c66ebe081c0f9772f0b93f9baee737657389dc2ac103295b423230681de66a5c4c54a50f4dd38b2a336df421f3b4b25c3b11075f1fa842e12bf0fe95343029cc2dd9047c879ecf13dc878ad576b84f20261a206e07a636b13e66d311c7", 0xda}, {&(0x7f00000022c0)="217fda4ab86331f202277a9be89da78c3b037b654948ef1cddfc96b8c7eedf8fb844e2e79e580caa26c987c1b2f2c2ff635d340804389915555a49ca9a14db471a21d09422718ad438ca7b593a56407b2134eb7770f0ae342e8c1b748a1ef25f387a67b0a5b054f311e905f2ef", 0x6d}], 0x2) connect$pppl2tp(r8, &(0x7f0000002380)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x3, 0x4, 0x3, 0x0, {0xa, 0x4e21, 0x1, @private1, 0x8}}}, 0x3a) sendmsg$AUDIT_SIGNAL_INFO(r8, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x10, 0x3f2, 0x8, 0x70bd2b, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x400c111}, 0x4004880) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002500), r8) sendmsg$MPTCP_PM_CMD_REMOVE(r8, &(0x7f0000002600)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x70, r11, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) writev(r7, &(0x7f00000027c0)=[{&(0x7f0000002640)="91409ce1fda0111842656aeb9af9ce105ca994cc8e0c7acce521e604e9d4273972fa8f2a87de4098fc14b767065d9b3437e26b9f9b2d92a85f729696fc88bc68ddd9d8c486f194cfb29885ee265833020ad0e939ed9779367e", 0x59}, {&(0x7f00000026c0)="fcd56efa96a7c7dfdf1a8b7964ad57204e01e2f079735e7e974d09205efc57883464ad3d306537290c07a39ac2c036d9af4655c73388503cb18aad24c779ce39637ef145162f00c19e3a40ed486b3c4d846be671c3cdac1f149e991d42210d332028cd7dd1e1562478d803f05f7863d64f5d519ba632562a8cda8208ef0b51cad0fbb98f10d2bc709907bfd5c0612ef7ec8989e895ca913d777244cf3d05012cf166d7169473647b28266691217258e277cce3a4572ad9c5a67765304e1707ec0a148b3ef63e2c587e3aa92b61dc81173de9cb9c3ff24e3b77aaab8130f4761dcf96ff3ef00c4af23b91636e581e08fac1fd13867715b080", 0xf8}], 0x2) socket$netlink(0x10, 0x3, 0x15) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000002800)) 837.6955ms ago: executing program 1 (id=2011): syz_init_net_socket$ax25(0x3, 0x2, 0xcb) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) unshare(0x6a040000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, 0x0, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, 0x0, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, 0x0, 0x40014) connect$bt_rfcomm(r4, 0x0, 0x0) shutdown(r3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) r7 = socket(0x28, 0x1, 0x0) getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 835.271543ms ago: executing program 3 (id=2012): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x90, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xac0}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0xf93b}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x7e7}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f5}]}, 0x90}, 0x1, 0x0, 0x0, 0x42005}, 0x40) sendmmsg$inet6(r1, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)='(', 0x1}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000002900000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}], 0x1, 0x931766f6319eed40) shutdown(r1, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="38f7ffff1f000100ffffffff000000000200200000050000000000000800100005000000080002000a0101010c000c400000e00000000007"], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80080020}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x1c, r4, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000080000000600000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r6, 0x0, 0x1}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 711.411738ms ago: executing program 0 (id=2013): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000008cb4a75450c0fa3a8ea81a6e8c398453abbbedeca02132fe36bb66aa387d0c3a3ac670f2b6c2068c856cd60e9e720ad279aa93c9fbf7564eeae8b20b6c268b2cad63", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x9}, &(0x7f0000000340)=0x8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="00000000080000004608ebff76000090347d7b6c1cc4937b6d721500bf980000000085000000000000f9b60000000000000095008100000000000000000000000000000000e4e0fb0e95be8c086cd32a8c2d526ffa8378c8e7b219704e315018967378607c61167e79bcce161edbbb367458a1"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="ebb8e3", 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x4c880) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000080)={0xfffffff7}, 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r4, 0x94ebd000) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xe}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffe]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xffffffffffffff1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x88c0) 657.383028ms ago: executing program 3 (id=2014): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000"], 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="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", 0x275}], 0x2}, 0x5) (async) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673c", 0x275}], 0x2}, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203060910"], 0x80}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) socket$unix(0x1, 0x2, 0x0) (async) r3 = socket$unix(0x1, 0x2, 0x0) getsockname$unix(r3, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e) (async) getsockname$unix(r3, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00'}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c000140"], 0x92fc}}, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000002d000100000000000000000004000080040012"], 0x18}], 0x1, 0x0, 0x0, 0x24000810}, 0x4000084) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYBLOB="c80042000103010100000000000000000300000ab2000a00344ec21c3be83557df2f97ec1fdc28dbb5d090ad123da9448895c8203ef5d1bb962f980046c9679706000000de83122bea1d917c1000b708e36d4144281c1468963da3deb8ab4a78dd4a94be9fe20ef1cb5642a0df1390475399c86714aa96520e25c2f8519f0df4b005d8c31868692b8bf00f7ae016bcfa15ab9f08ff378ba8427dca4f6e9cfd2cddc63faf9f98ab6b4cde580403999d509c81ca063c9f19bb0000"], 0xc8}, 0x1, 0x0, 0x0, 0x810}, 0x4041) (async) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYBLOB="c80042000103010100000000000000000300000ab2000a00344ec21c3be83557df2f97ec1fdc28dbb5d090ad123da9448895c8203ef5d1bb962f980046c9679706000000de83122bea1d917c1000b708e36d4144281c1468963da3deb8ab4a78dd4a94be9fe20ef1cb5642a0df1390475399c86714aa96520e25c2f8519f0df4b005d8c31868692b8bf00f7ae016bcfa15ab9f08ff378ba8427dca4f6e9cfd2cddc63faf9f98ab6b4cde580403999d509c81ca063c9f19bb0000"], 0xc8}, 0x1, 0x0, 0x0, 0x810}, 0x4041) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x700, 0x1, 0x9, 0x802, {{0xd, 0x4, 0x1, 0x22, 0x34, 0x65, 0x0, 0x6, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xf}, {[@timestamp_addr={0x44, 0x4, 0xf3, 0x1, 0x8}, @noop, @end, @rr={0x7, 0xf, 0xe0, [@private=0xa010102, @local, @empty]}, @rr={0x7, 0x3, 0x46}, @noop, @noop, @end, @noop, @timestamp={0x44, 0x4, 0xa7}]}}}}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x1c, r8, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) openat$cgroup_type(r7, &(0x7f0000000040), 0x2, 0x0) (async) r9 = openat$cgroup_type(r7, &(0x7f0000000040), 0x2, 0x0) sendfile(0xffffffffffffffff, r9, &(0x7f0000000240)=0x6, 0x9) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200), 0xffffffc1) 465.886275ms ago: executing program 2 (id=2015): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000700)=@ethtool_sset_info={0x37, 0xfc, 0xfffffffffffffffa}}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0xfc, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) close(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r2, 0x10c, 0x4, &(0x7f0000000000)=0x7, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="f0010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1f0}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x8000, 0x8, 0x2, 0x30, {{0x18, 0x4, 0x0, 0x37, 0x60, 0x65, 0x0, 0x34, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x32}, {[@generic={0xdb, 0x8, "ddd4e1e841c0"}, @generic={0x88, 0xc, "c21d262f7da1f01e4f18"}, @timestamp_prespec={0x44, 0xc, 0x6c, 0x3, 0x9, [{@local, 0x3}]}, @timestamp_prespec={0x44, 0x2c, 0x8f, 0x3, 0x4, [{@loopback, 0x5}, {@rand_addr=0x64010102, 0x7}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@remote, 0x1}]}]}}}}}) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x11000000}, 0xffffffffffffff90, &(0x7f00000002c0)={&(0x7f00000001c0)=@getqdisc={0x38, 0x26, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x3, 0xfff2}, {0x2, 0x3}, {0x7, 0xb}}, [{0x4}, {0x4}, {0xfffffffffffffdb0}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40d4}, 0x4000) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r2, &(0x7f0000000740)="9c811858f5d9a398b7aebbe005624bc3e37095944c5d49e58331ba28ed349b418ad0b9d56aeb3d8d04f3954556c7a59f54beb5a9fa7681f91c3e8c1fd54513a7ccf5a6d3eeaf90cbb4eb59e8946436c081dd485bc92c52630994ac0daa586afc2ba54ab6779f044e4745743bf2e677645a980ccaa3bb192f58ef468b2e6b3f27a18792653c1b095938330cda448bacee548e5b5cdf8db789a681fa007c2460f1e0835a83c42e18e20d8b8fb8c6bcbee0d274aefadc9df5eec37837b30b11f7723e7258588005fb5859fcf9b0022322b078a03ea97d87ce", &(0x7f0000000300)=""/6}, 0x20) sendto$llc(0xffffffffffffffff, &(0x7f0000000900)="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", 0x148, 0x20040040, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r7, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000b40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x84, r8, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xec, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x22, 0x2}}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x3f, 0xbe, "02e2bb70e8de4932893ec87b794e69af0cc53cd1b2ca2515d161f643275ce011c37a5e317caf2df6f68a837927ce06516b44b115a28af8ebccf417"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="01000000", @ANYRES32=0x1, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f00000005c0)={'gretap0\x00', r5, 0x20, 0x7800, 0x26, 0x8, {{0x29, 0x4, 0x0, 0x2c, 0xa4, 0x65, 0x0, 0xa, 0x29, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0x27, 0xf6, [@local, @dev={0xac, 0x14, 0x14, 0x33}, @dev={0xac, 0x14, 0x14, 0xc}, @remote, @multicast2, @empty, @multicast2, @rand_addr=0x64010101, @private=0xa010101]}, @cipso={0x86, 0x33, 0x2, [{0x7, 0x5, "0e69ab"}, {0x4, 0x12, "4f517b7b4e6ecfbd9752b34bdb9d1a9a"}, {0x1, 0x11, "ce285d82f043559b1fe860cec6246f"}, {0x0, 0x5, "afc1b2"}]}, @timestamp_prespec={0x44, 0x34, 0xde, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x9}, {@remote, 0x4}, {@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x9}, {@remote}, {@remote, 0x3}]}]}}}}}) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @loopback}}}, @ip_retopts={{0x10}}], 0x30}}], 0x1, 0x0) socket(0x15, 0x80000, 0x7fff) 375.522773ms ago: executing program 0 (id=2016): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'pimreg\x00', &(0x7f0000000340)=@ethtool_drvinfo={0x3, "bf1b4087edfe5c4e7dbc31ec412ad7e146e549d45ef8ffffffffffffff00", "0b427558163b547e4025a26d22b39efd15a79bf13a99cfb77cc869a43447e49f", "87a906824296668daf4ebd4e96f95ec6d39d32a7238872c45dc65a18f8bf52af", "d8f28fdc3ec20b8facef9aa9d6f53dd7527511d9bb717ba90adf6ac47453a1f1", "53b30ad0a21007c3cb8fe4f81000946b00", "6ef390e675e608f371455a4e", 0x400003, 0x2aca, 0x7e0, 0x87d42, 0x9e}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x9, 0x6, [0x2006, 0x6, 0xd, 0xad1, 0x2, 0xc]}, &(0x7f0000000100)=0x14) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x1000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00'], 0x50}}, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0xc000, @remote}, 0x10) 212.9107ms ago: executing program 1 (id=2017): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000180)="ca", 0x1}], 0x2}}], 0x1, 0x4404c880) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x403, 0x70bd29, 0x2, {}, [@IFLA_MTU={0x8}]}, 0x28}}, 0x0) 1.363811ms ago: executing program 1 (id=2018): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000c40)={0xaf1, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0xa}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000680)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29b0700000000000000484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000a40)="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", 0x1d2}], 0x2}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x5d) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@local, @in=@loopback}}, {{@in6=@mcast1}, 0x0, @in=@private}}, &(0x7f0000000200)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="040000801400030102000000010000000000000101"], 0x30}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030400000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0100000020010000140012800b0001006d290e00006300000400028008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB], 0x44}}, 0x8000) 0s ago: executing program 4 (id=2019): unshare(0x2020400) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50) (rerun: 64) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x16c5, r0, 0x20}, 0x38) (async) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x8, 0x2000000000032, 0xffffffffffffffff, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) (async) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) unshare(0x800) (async) unshare(0x400) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r2, 0x0) ppoll(&(0x7f0000000100)=[{r2, 0x8}], 0x1, 0x0, 0x0, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (async, rerun: 32) r4 = socket$kcm(0x10, 0x2, 0x4) (rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r7, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c000380080001000200000034000380080001"], 0x6c}, 0x1, 0x0, 0x0, 0x20040814}, 0x4880) (async) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) kernel console output (not intermixed with test programs): : Receive control failed (result -32) [ 149.437998][ T6284] block nbd0: Dead connection, failed to find a fallback [ 149.504479][ T6284] block nbd0: shutting down sockets [ 149.534513][ T6284] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.549010][ T6284] Buffer I/O error on dev nbd0, logical block 0, async page read [ 149.558501][ T6284] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.580102][ T6284] Buffer I/O error on dev nbd0, logical block 1, async page read [ 149.620349][ T6284] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.650891][ T6284] Buffer I/O error on dev nbd0, logical block 2, async page read [ 149.675849][ T6284] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.696653][ T6284] Buffer I/O error on dev nbd0, logical block 3, async page read [ 149.728800][ T6284] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.759875][ T6284] Buffer I/O error on dev nbd0, logical block 0, async page read [ 149.787062][ T6284] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.810417][ T6284] Buffer I/O error on dev nbd0, logical block 1, async page read [ 149.826288][ T6284] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.835973][ T6284] Buffer I/O error on dev nbd0, logical block 2, async page read [ 149.849264][ T6284] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.859069][ T6284] Buffer I/O error on dev nbd0, logical block 3, async page read [ 149.882335][ T6284] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.908679][ T6324] netlink: 36 bytes leftover after parsing attributes in process `syz.3.70'. [ 149.929908][ T6284] Buffer I/O error on dev nbd0, logical block 0, async page read [ 149.945567][ T6284] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.978930][ T6284] Buffer I/O error on dev nbd0, logical block 1, async page read [ 149.985184][ T6325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.70'. [ 150.007462][ T6284] ldm_validate_partition_table(): Disk read failed. [ 150.040034][ T6284] Dev nbd0: unable to read RDB block 0 [ 150.079885][ T6284] nbd0: unable to read partition table [ 150.139629][ T6325] vlan2: entered promiscuous mode [ 150.145075][ T6284] ldm_validate_partition_table(): Disk read failed. [ 150.174916][ T6325] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 150.189932][ T6284] Dev nbd0: unable to read RDB block 0 [ 150.241346][ T6284] nbd0: unable to read partition table [ 150.976514][ T6359] netlink: 28 bytes leftover after parsing attributes in process `syz.3.79'. [ 151.215240][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 151.246493][ T6364] netlink: 24 bytes leftover after parsing attributes in process `syz.2.81'. [ 152.345722][ T6414] tipc: Started in network mode [ 152.372362][ T6414] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 152.409333][ T6414] tipc: Enabling of bearer rejected, failed to enable media [ 152.771801][ T6427] tipc: Enabled bearer , priority 0 [ 152.977109][ T6427] syzkaller0: entered promiscuous mode [ 152.996892][ T6427] syzkaller0: entered allmulticast mode [ 153.007765][ T6427] tipc: Resetting bearer [ 153.062042][ T6426] tipc: Resetting bearer [ 153.776278][ T44] tipc: Node number set to 4278255617 [ 154.758702][ T6426] tipc: Disabling bearer [ 154.777647][ T6454] bond0: entered promiscuous mode [ 154.782975][ T6454] bond_slave_0: entered promiscuous mode [ 154.791475][ T6454] bond_slave_1: entered promiscuous mode [ 154.803315][ T6423] __nla_validate_parse: 58 callbacks suppressed [ 154.803335][ T6423] netlink: 16170 bytes leftover after parsing attributes in process `syz.1.95'. [ 154.971517][ T6476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.102'. [ 155.018640][ T6478] syz_tun: entered allmulticast mode [ 155.019736][ T6476] netlink: 20 bytes leftover after parsing attributes in process `syz.4.102'. [ 155.026236][ T6478] netlink: 60 bytes leftover after parsing attributes in process `syz.0.103'. [ 155.063221][ T6478] unsupported nlmsg_type 40 [ 155.083445][ T6477] syz_tun: left allmulticast mode [ 155.135538][ T6482] netlink: 'syz.2.105': attribute type 1 has an invalid length. [ 155.143494][ T6482] netlink: 'syz.2.105': attribute type 1 has an invalid length. [ 155.503182][ T6500] netlink: 'syz.0.110': attribute type 1 has an invalid length. [ 155.653602][ T6508] netlink: 100 bytes leftover after parsing attributes in process `syz.2.113'. [ 155.680360][ T6510] openvswitch: netlink: Duplicate or invalid key (type 0). [ 155.689439][ T6510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.709324][ T6508] bridge0: entered promiscuous mode [ 155.720261][ T6512] netlink: 52 bytes leftover after parsing attributes in process `syz.0.115'. [ 155.729008][ T6508] netlink: 100 bytes leftover after parsing attributes in process `syz.2.113'. [ 155.734426][ T6510] netlink: 'syz.3.114': attribute type 1 has an invalid length. [ 155.954191][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.117'. [ 156.001330][ T6520] sch_fq: defrate 128 ignored. [ 156.050018][ T6522] netlink: 28 bytes leftover after parsing attributes in process `syz.3.118'. [ 156.156213][ T6528] netlink: 'syz.0.120': attribute type 9 has an invalid length. [ 156.235059][ T6530] netlink: 220 bytes leftover after parsing attributes in process `syz.4.119'. [ 157.632523][ T6593] Bluetooth: MGMT ver 1.23 [ 157.909277][ T5904] IPVS: starting estimator thread 0... [ 158.008170][ T6606] IPVS: using max 25 ests per chain, 60000 per kthread [ 158.168096][ T6610] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 158.185517][ T6610] Illegal XDP return value 16128 on prog (id 41) dev syz_tun, expect packet loss! [ 158.333676][ T6622] netlink: 'syz.0.138': attribute type 13 has an invalid length. [ 158.358196][ T6622] netlink: 'syz.0.138': attribute type 17 has an invalid length. [ 158.390566][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.398466][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.684303][ T6622] bond0: left promiscuous mode [ 158.701672][ T6622] bond_slave_0: left promiscuous mode [ 158.710521][ T6636] Unsupported ieee802154 address type: 0 [ 158.721504][ T6622] bond_slave_1: left promiscuous mode [ 158.762764][ T6622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.824872][ T6622] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.095945][ T6654] netlink: 'syz.0.152': attribute type 23 has an invalid length. [ 159.342186][ T6659] syzkaller1: entered promiscuous mode [ 159.347964][ T6659] syzkaller1: entered allmulticast mode [ 159.714794][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 159.721697][ T5851] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 160.252859][ T6681] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 160.305820][ T6681] macsec1: entered promiscuous mode [ 160.318964][ T6681] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 160.833751][ T6703] __nla_validate_parse: 13 callbacks suppressed [ 160.833773][ T6703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.161'. [ 161.397271][ T6713] netlink: 96 bytes leftover after parsing attributes in process `syz.2.164'. [ 161.462362][ T6719] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.516816][ T6713] netlink: 96 bytes leftover after parsing attributes in process `syz.2.164'. [ 161.758662][ T6728] hsr0: entered promiscuous mode [ 161.766551][ T6732] block nbd1: Unsupported socket: should be TCP or UNIX. [ 161.847178][ T6728] hsr0: left promiscuous mode [ 161.947055][ T6737] netlink: 'syz.1.170': attribute type 142 has an invalid length. [ 162.302299][ T6746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.169'. [ 162.368622][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.169'. [ 162.992911][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.176'. [ 163.031683][ T6767] veth0: entered promiscuous mode [ 163.178214][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.177'. [ 163.238441][ T6767] veth0: left promiscuous mode [ 163.506868][ T6787] netlink: 32 bytes leftover after parsing attributes in process `syz.3.179'. [ 163.629097][ T6787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.179'. [ 164.126757][ T6802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.183'. [ 164.517088][ T6819] netlink: 'syz.2.184': attribute type 13 has an invalid length. [ 164.587164][ T6819] netlink: 'syz.2.184': attribute type 17 has an invalid length. [ 164.704521][ T6817] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.848928][ T6819] gre0: left promiscuous mode [ 164.861671][ T6819] gre0: left allmulticast mode [ 165.008670][ T6819] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.075085][ T6817] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.124691][ T6830] tap0: tun_chr_ioctl cmd 1074025676 [ 165.131861][ T6830] tap0: owner set to 0 [ 165.238688][ T6817] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.651752][ T6817] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.907757][ T6853] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 165.923851][ T6853] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 166.078414][ T6861] trusted_key: syz.4.195 sent an empty control message without MSG_MORE. [ 166.341764][ T6864] __nla_validate_parse: 4 callbacks suppressed [ 166.341784][ T6864] netlink: 40 bytes leftover after parsing attributes in process `syz.2.196'. [ 166.425938][ T1163] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.434317][ T1163] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.479339][ T1163] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.515393][ T1163] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.078513][ T6891] netlink: 'syz.0.200': attribute type 3 has an invalid length. [ 167.158270][ T6895] netlink: 256 bytes leftover after parsing attributes in process `syz.4.201'. [ 167.751835][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'. [ 167.798228][ C1] vcan0: j1939_session_tx_dat: 0xffff888030348800: queue data error: -100 [ 168.191241][ T6927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.207'. [ 168.450747][ T6938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.846010][ T6948] netlink: 64 bytes leftover after parsing attributes in process `syz.4.212'. [ 168.863992][ T6946] netlink: 16 bytes leftover after parsing attributes in process `syz.4.212'. [ 168.892875][ T6946] netlink: 64 bytes leftover after parsing attributes in process `syz.4.212'. [ 168.925573][ T6946] tipc: Invalid UDP bearer configuration [ 168.925737][ T6946] tipc: Enabling of bearer rejected, failed to enable media [ 169.261168][ T6959] raw_sendmsg: syz.0.214 forgot to set AF_INET. Fix it! [ 169.334929][ T6961] netlink: 'syz.1.215': attribute type 10 has an invalid length. [ 169.398551][ T6961] netlink: 40 bytes leftover after parsing attributes in process `syz.1.215'. [ 169.573210][ T6961] batman_adv: batadv0: Adding interface: virt_wifi0 [ 169.591018][ T6961] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.617821][ T6968] netlink: 76 bytes leftover after parsing attributes in process `syz.4.218'. [ 169.627048][ T6968] netlink: 76 bytes leftover after parsing attributes in process `syz.4.218'. [ 169.653316][ T6961] batman_adv: batadv0: Interface activated: virt_wifi0 [ 169.685395][ T6965] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.777798][ T6965] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.059065][ T6965] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.268722][ T6965] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.380469][ T6989] netlink: 'syz.1.222': attribute type 30 has an invalid length. [ 170.429223][ T6989] netlink: 'syz.1.222': attribute type 30 has an invalid length. [ 170.440654][ T66] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.475314][ T66] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.491452][ T66] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.540226][ T66] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.621768][ T66] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.678554][ T3480] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.717079][ T66] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.800428][ T3480] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.173635][ T7051] netlink: 'syz.0.231': attribute type 1 has an invalid length. [ 172.336183][ T7055] pim6reg1: entered allmulticast mode [ 172.385811][ T7055] __nla_validate_parse: 6 callbacks suppressed [ 172.385830][ T7055] netlink: 64 bytes leftover after parsing attributes in process `syz.1.232'. [ 173.012483][ T7072] netlink: 'syz.2.235': attribute type 1 has an invalid length. [ 173.041768][ T7072] netlink: 'syz.2.235': attribute type 61 has an invalid length. [ 173.108157][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 173.120120][ T7072] tipc: Enabled bearer , priority 0 [ 173.132202][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.238'. [ 173.136534][ T7072] syzkaller0: entered promiscuous mode [ 173.151424][ T7072] syzkaller0: entered allmulticast mode [ 173.166968][ T7081] netlink: 16 bytes leftover after parsing attributes in process `syz.1.238'. [ 173.357712][ T7071] tipc: Resetting bearer [ 173.447505][ T7071] tipc: Disabling bearer [ 173.517597][ T7092] netlink: 256 bytes leftover after parsing attributes in process `syz.4.237'. [ 173.564921][ T7092] netlink: 48 bytes leftover after parsing attributes in process `syz.4.237'. [ 173.660014][ T7077] syz.4.237 (7077) used greatest stack depth: 17864 bytes left [ 173.807601][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'. [ 173.813310][ T7097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.240'. [ 173.838518][ T7103] bridge_slave_1: left allmulticast mode [ 173.844244][ T7103] bridge_slave_1: left promiscuous mode [ 173.847014][ T7097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.876926][ T7103] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.988158][ T7103] bridge_slave_0: left allmulticast mode [ 174.007990][ T7103] bridge_slave_0: left promiscuous mode [ 174.014786][ T7103] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.041029][ T7143] sctp: [Deprecated]: syz.2.251 (pid 7143) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.041029][ T7143] Use struct sctp_sack_info instead [ 175.488291][ T7154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.254'. [ 175.821287][ T7160] gretap1: entered promiscuous mode [ 175.833087][ T7160] gretap1: entered allmulticast mode [ 175.973888][ T7167] gretap1: entered promiscuous mode [ 176.056124][ T7178] netlink: 'syz.1.257': attribute type 1 has an invalid length. [ 176.519294][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.261'. [ 176.608044][ T7202] netlink: 'syz.1.262': attribute type 8 has an invalid length. [ 176.707423][ T7205] netlink: 'syz.3.264': attribute type 1 has an invalid length. [ 176.754121][ T7198] tipc: Started in network mode [ 176.765798][ T7198] tipc: Node identity 621e8d74d1b2, cluster identity 4711 [ 176.801020][ T7198] tipc: Enabled bearer , priority 0 [ 176.938999][ T7205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.977015][ T7202] syzkaller0: entered promiscuous mode [ 176.982792][ T7202] syzkaller0: entered allmulticast mode [ 177.032716][ T7222] tipc: Resetting bearer [ 177.049006][ T7219] batadv_slave_1: entered promiscuous mode [ 177.113055][ T7196] tipc: Resetting bearer [ 177.158139][ T7196] tipc: Disabling bearer [ 177.180566][ T7215] batadv_slave_1: left promiscuous mode [ 177.456250][ T7234] __nla_validate_parse: 4 callbacks suppressed [ 177.456269][ T7234] netlink: 36 bytes leftover after parsing attributes in process `syz.0.269'. [ 177.457020][ T7231] wg1 speed is unknown, defaulting to 1000 [ 177.738111][ T5851] Bluetooth: hci4: link tx timeout [ 177.744092][ T5851] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.796945][ T7231] wg1 speed is unknown, defaulting to 1000 [ 177.831140][ T7231] wg1 speed is unknown, defaulting to 1000 [ 177.893429][ T7231] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 177.970509][ T7231] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 178.182834][ T7231] wg1 speed is unknown, defaulting to 1000 [ 178.328481][ T7231] wg1 speed is unknown, defaulting to 1000 [ 178.349395][ T7231] wg1 speed is unknown, defaulting to 1000 [ 178.393030][ T7231] wg1 speed is unknown, defaulting to 1000 [ 178.408050][ T7231] wg1 speed is unknown, defaulting to 1000 [ 178.871778][ T7310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.279'. [ 179.124279][ T7310] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.182645][ T7319] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 179.200043][ T7319] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 179.364905][ T7321] tc_dump_action: action bad kind [ 179.795368][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 180.585540][ T7378] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 180.607778][ T7378] bond1 (unregistering): Released all slaves [ 180.702666][ T7383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.296'. [ 180.840610][ T7385] wg1 speed is unknown, defaulting to 1000 [ 181.119316][ T7402] wg1: entered promiscuous mode [ 181.135798][ T7402] wg1: entered allmulticast mode [ 181.222224][ T7402] dummy0: entered promiscuous mode [ 181.259108][ T7402] vlan2: entered promiscuous mode [ 181.442272][ T7401] wg1 speed is unknown, defaulting to 1000 [ 182.033609][ T7425] wg1 speed is unknown, defaulting to 1000 [ 182.214196][ T7431] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 182.688760][ T7456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.312'. [ 182.944211][ T7459] netlink: 40 bytes leftover after parsing attributes in process `syz.0.313'. [ 183.072210][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.315'. [ 183.142222][ T6098] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.170306][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.315'. [ 183.182755][ T6098] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.216054][ T6098] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.230967][ T6098] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.249774][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.316'. [ 183.651101][ T7493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.141813][ T7527] netlink: 'syz.2.324': attribute type 1 has an invalid length. [ 184.222438][ T7527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.239524][ T7527] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 184.249760][ T7527] bond1: (slave wlan0): Opening slave failed [ 184.460316][ T7535] netlink: 20 bytes leftover after parsing attributes in process `syz.3.330'. [ 184.590395][ T7542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.332'. [ 184.670707][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'. [ 184.771175][ T6284] udevd[6284]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 184.852900][ T6284] udevd[6284]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 184.870661][ T7558] netlink: 100 bytes leftover after parsing attributes in process `syz.2.331'. [ 185.097336][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.338'. [ 185.199058][ T7567] macsec1: entered allmulticast mode [ 185.207545][ T7573] netlink: 'syz.4.339': attribute type 1 has an invalid length. [ 185.216225][ T7567] bridge0: entered allmulticast mode [ 185.237416][ T7567] bridge0: port 3(macsec1) entered blocking state [ 185.257066][ T7567] bridge0: port 3(macsec1) entered disabled state [ 185.292904][ T7567] bridge0: left allmulticast mode [ 185.500028][ T7582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.159809][ T7607] tipc: Enabling of bearer rejected, failed to enable media [ 186.341005][ T7612] netlink: 'syz.1.350': attribute type 1 has an invalid length. [ 186.408257][ T5935] IPVS: starting estimator thread 0... [ 186.470472][ T7612] 8021q: adding VLAN 0 to HW filter on device bond3 [ 186.480038][ T7616] IPVS: Scheduler module ip_vs_sip not found [ 186.540254][ T7620] bond3: (slave ip6gretap1): making interface the new active one [ 186.551944][ T7620] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 186.594789][ T7625] IPVS: using max 26 ests per chain, 62400 per kthread [ 186.936763][ T7650] netlink: 'syz.0.355': attribute type 5 has an invalid length. [ 187.040377][ T7622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.072579][ T7622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.092832][ T7622] bond0 (unregistering): Released all slaves [ 187.168491][ T7644] syzkaller1: entered promiscuous mode [ 187.174346][ T7644] syzkaller1: entered allmulticast mode [ 187.836678][ T7684] wg1 speed is unknown, defaulting to 1000 [ 188.198095][ T7698] netlink: 'syz.3.363': attribute type 16 has an invalid length. [ 188.206487][ T7698] netlink: 'syz.3.363': attribute type 17 has an invalid length. [ 188.507531][ T7709] netlink: 'syz.1.367': attribute type 2 has an invalid length. [ 188.560961][ T7712] __nla_validate_parse: 6 callbacks suppressed [ 188.560982][ T7712] netlink: 36 bytes leftover after parsing attributes in process `syz.4.365'. [ 188.590333][ T7698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.609570][ T7698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.785816][ T5903] wg1 speed is unknown, defaulting to 1000 [ 188.792784][ T5903] syz0: Port: 1 Link DOWN [ 188.831496][ T7703] netlink: 'syz.4.365': attribute type 29 has an invalid length. [ 188.882810][ T7717] netlink: 44 bytes leftover after parsing attributes in process `syz.1.369'. [ 188.935981][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.973163][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.009879][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.046223][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.182669][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.372'. [ 189.278045][ T7741] netlink: 20 bytes leftover after parsing attributes in process `syz.0.373'. [ 189.731619][ T7767] wg1 speed is unknown, defaulting to 1000 [ 189.912891][ T7776] ieee802154 phy0 wpan0: encryption failed: -22 [ 190.163774][ T7785] tipc: Enabling of bearer rejected, failed to enable media [ 190.279894][ T7786] syzkaller1: entered promiscuous mode [ 190.285966][ T7786] syzkaller1: entered allmulticast mode [ 190.293683][ T7786] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 190.312417][ T7786] block nbd2: NBD_DISCONNECT [ 190.575567][ T7799] netlink: 576 bytes leftover after parsing attributes in process `syz.1.389'. [ 190.750756][ T7807] pimreg: entered allmulticast mode [ 190.792270][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.391'. [ 190.805794][ T7803] wg1 speed is unknown, defaulting to 1000 [ 190.840465][ T7812] netlink: 56 bytes leftover after parsing attributes in process `syz.2.394'. [ 190.863425][ T7805] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.013910][ T7805] bridge_slave_1 (unregistering): left allmulticast mode [ 191.057436][ T7805] bridge_slave_1 (unregistering): left promiscuous mode [ 191.064576][ T7805] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.183382][ T7822] : renamed from bond_slave_0 (while UP) [ 191.258854][ T7814] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 191.282900][ T7814] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 191.318468][ T7820] wg1 speed is unknown, defaulting to 1000 [ 192.122779][ T7833] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.318693][ T7833] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.355968][ T7852] netlink: 24 bytes leftover after parsing attributes in process `syz.0.400'. [ 192.592977][ T7833] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.606087][ T7855] netlink: 48 bytes leftover after parsing attributes in process `syz.0.400'. [ 192.757363][ T7833] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.803460][ T7861] netlink: 64 bytes leftover after parsing attributes in process `syz.1.402'. [ 192.928919][ T6098] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.965598][ T1163] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.016634][ T1163] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.092342][ T6092] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.415121][ T7879] netlink: 'syz.0.408': attribute type 4 has an invalid length. [ 193.448002][ T7878] bond1: Removing last ns target with arp_interval on [ 193.496734][ T6284] udevd[6284]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 193.578752][ T7883] __nla_validate_parse: 8 callbacks suppressed [ 193.578776][ T7883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.409'. [ 193.654547][ T7883] 8021q: VLANs not supported on caif0 [ 193.766983][ T7891] IPVS: set_ctl: invalid protocol: 38 127.0.0.1:20001 [ 193.961907][ T7901] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.996574][ T7901] bond_slave_0: entered promiscuous mode [ 194.003098][ T7901] bond_slave_1: entered promiscuous mode [ 194.010658][ T7901] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 194.027334][ T7901] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 194.383859][ T7917] veth0_to_bridge: entered promiscuous mode [ 194.454989][ T7915] veth0_to_bridge: left promiscuous mode [ 194.562178][ T7924] netlink: 'syz.4.420': attribute type 1 has an invalid length. [ 194.601311][ T7924] netlink: 224 bytes leftover after parsing attributes in process `syz.4.420'. [ 194.770664][ T7933] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.422'. [ 194.864015][ T7939] team_slave_0: entered promiscuous mode [ 194.870016][ T7939] team_slave_1: entered promiscuous mode [ 194.908636][ T7939] macsec1: entered promiscuous mode [ 194.914173][ T7939] team0: entered promiscuous mode [ 194.942556][ T7939] team0: Device macsec1 is already an upper device of the team interface [ 194.987993][ T7939] team0: left promiscuous mode [ 195.006939][ T7939] team_slave_0: left promiscuous mode [ 195.012750][ T7939] team_slave_1: left promiscuous mode [ 195.408410][ T7954] wg1 speed is unknown, defaulting to 1000 [ 195.449056][ T7955] macsec0: entered promiscuous mode [ 195.459977][ T7955] macsec0: entered allmulticast mode [ 195.560398][ T7958] veth1_macvtap: entered allmulticast mode [ 195.570288][ T7958] macsec0: left promiscuous mode [ 195.571368][ T7960] netlink: 24 bytes leftover after parsing attributes in process `syz.4.430'. [ 195.586035][ T7958] macsec0: left allmulticast mode [ 195.599099][ T7958] veth1_macvtap: left allmulticast mode [ 195.626810][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.430'. [ 195.998319][ T7978] netlink: 16 bytes leftover after parsing attributes in process `syz.4.434'. [ 196.063976][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.435'. [ 196.083574][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 196.123877][ T7983] bond3: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 196.168628][ T7983] bond3 (unregistering): Released all slaves [ 196.280988][ T7991] syzkaller0: entered promiscuous mode [ 196.286745][ T7991] syzkaller0: entered allmulticast mode [ 196.313851][ T7989] tipc: Started in network mode [ 196.326781][ T7989] tipc: Node identity 4ec357c19c0a, cluster identity 4711 [ 196.356201][ T7989] tipc: Enabled bearer , priority 0 [ 196.458739][ T7986] tipc: Resetting bearer [ 196.483459][ T7977] tipc: Resetting bearer [ 196.523110][ T7977] tipc: Disabling bearer [ 196.776535][ T8004] wg1 speed is unknown, defaulting to 1000 [ 196.821334][ T5903] hid-generic 0005:0007:0008.0001: unknown main item tag 0x0 [ 196.873360][ T5903] hid-generic 0005:0007:0008.0001: item fetching failed at offset 1/2 [ 196.886222][ T8013] netlink: 24 bytes leftover after parsing attributes in process `syz.1.441'. [ 196.922941][ T5903] hid-generic 0005:0007:0008.0001: probe with driver hid-generic failed with error -22 [ 197.087402][ T8022] Bluetooth: MGMT ver 1.23 [ 197.190108][ T8025] netlink: 20 bytes leftover after parsing attributes in process `syz.1.445'. [ 197.701454][ T8042] syzkaller1: entered promiscuous mode [ 197.720394][ T8042] syzkaller1: entered allmulticast mode [ 198.300134][ T8069] wg1 speed is unknown, defaulting to 1000 [ 198.545995][ T8078] pim6reg1: entered promiscuous mode [ 198.554148][ T8078] pim6reg1: entered allmulticast mode [ 198.835281][ T5851] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 198.835613][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 199.062334][ T8108] bond4: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 199.078829][ T8108] bond4: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 199.294727][ T8128] __nla_validate_parse: 5 callbacks suppressed [ 199.294749][ T8128] netlink: 16 bytes leftover after parsing attributes in process `syz.4.473'. [ 199.328263][ T8133] netlink: 'syz.3.478': attribute type 1 has an invalid length. [ 199.412363][ T8134] vlan2: entered allmulticast mode [ 199.807954][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.887716][ T8166] tipc: Started in network mode [ 199.904815][ T8166] tipc: Node identity ac14140f, cluster identity 4711 [ 199.925311][ T8166] tipc: New replicast peer: 255.255.255.255 [ 199.933658][ T8166] tipc: Enabled bearer , priority 10 [ 200.233304][ T8153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.387663][ T8178] netlink: 80 bytes leftover after parsing attributes in process `syz.4.488'. [ 200.477835][ T8180] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.534772][ T8180] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.772217][ T8180] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.804780][ T8180] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.840178][ T8186] netlink: 168 bytes leftover after parsing attributes in process `syz.4.491'. [ 200.946104][ T8194] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 201.087687][ T8180] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.123613][ T8180] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.186461][ T8203] netlink: 'syz.3.495': attribute type 1 has an invalid length. [ 201.212517][ T8203] netlink: 224 bytes leftover after parsing attributes in process `syz.3.495'. [ 201.214784][ T5924] tipc: Node number set to 2886997007 [ 201.392983][ T8180] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.464746][ T8180] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.670991][ T8224] netlink: 20 bytes leftover after parsing attributes in process `syz.4.499'. [ 201.680170][ T8224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.499'. [ 201.888373][ T8224] bond3: entered promiscuous mode [ 201.893489][ T8224] bond3: entered allmulticast mode [ 201.899217][ T8224] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.123174][ T8232] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.192213][ T36] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.200726][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.239069][ T8227] wg1 speed is unknown, defaulting to 1000 [ 202.248283][ T8232] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.370379][ T8232] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.439271][ T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.464461][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.527383][ T6094] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.551070][ T6094] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.572663][ T8232] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.771367][ T6094] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.804716][ T6094] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.908255][ T66] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.963823][ T66] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.993141][ T8255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.507'. [ 203.092755][ T6098] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.151779][ T6094] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.645800][ T8277] netlink: 'syz.3.513': attribute type 1 has an invalid length. [ 203.848879][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.515'. [ 204.187575][ T8294] netlink: 'syz.0.521': attribute type 13 has an invalid length. [ 204.235600][ T8294] netlink: 'syz.0.521': attribute type 17 has an invalid length. [ 204.407566][ T8294] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.581965][ T8294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.630076][ T8300] wg1 speed is unknown, defaulting to 1000 [ 205.276956][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.525'. [ 205.314862][ T8319] netlink: 20 bytes leftover after parsing attributes in process `syz.3.525'. [ 205.447609][ T8325] netlink: 24 bytes leftover after parsing attributes in process `syz.3.528'. [ 205.533437][ T8324] dvmrp0: entered allmulticast mode [ 205.920682][ T8337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.530'. [ 206.786646][ T8349] netlink: 32 bytes leftover after parsing attributes in process `syz.0.535'. [ 207.332115][ T8383] netlink: 'syz.2.544': attribute type 29 has an invalid length. [ 207.390241][ T8386] netlink: 'syz.2.544': attribute type 29 has an invalid length. [ 207.399849][ T8387] netlink: 'syz.4.539': attribute type 13 has an invalid length. [ 207.408830][ T8383] netlink: 508 bytes leftover after parsing attributes in process `syz.2.544'. [ 207.733967][ T5904] IPVS: starting estimator thread 0... [ 207.742786][ T8387] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.763186][ T8387] bond_slave_0: left promiscuous mode [ 207.769421][ T8387] bond_slave_1: left promiscuous mode [ 207.834816][ T8399] IPVS: using max 26 ests per chain, 62400 per kthread [ 207.999441][ T8387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.041310][ T8387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.276116][ T36] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.294844][ T36] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.318999][ T36] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.348054][ T36] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.439489][ T8408] netlink: 'syz.2.548': attribute type 13 has an invalid length. [ 208.455479][ T8408] netlink: 'syz.2.548': attribute type 17 has an invalid length. [ 208.487061][ T8408] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.777241][ T8418] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.551'. [ 208.846421][ T8420] netlink: 'syz.0.552': attribute type 64 has an invalid length. [ 209.169439][ T8434] ip6tnl1: entered promiscuous mode [ 209.175181][ T8434] ip6tnl1: entered allmulticast mode [ 209.181962][ T8434] team0: Device ip6tnl1 is of different type [ 209.218371][ T8437] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.228769][ T8437] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.266822][ T8431] syzkaller0: entered promiscuous mode [ 209.273237][ T8431] syzkaller0: entered allmulticast mode [ 209.313902][ T8431] syzkaller0: left allmulticast mode [ 209.346475][ T8437] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.363171][ T8437] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.455408][ T8437] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.503174][ T8437] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.535914][ T8452] atomic_op ffff8880439a1998 conn xmit_atomic 0000000000000000 [ 209.638070][ T8437] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.652024][ T8437] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.657644][ T8460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.566'. [ 209.671513][ T8460] netlink: 48 bytes leftover after parsing attributes in process `syz.0.566'. [ 209.775400][ T8465] netlink: 44 bytes leftover after parsing attributes in process `syz.3.567'. [ 209.810487][ T36] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.828966][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.899164][ T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.907798][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.183192][ T36] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.191670][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.269573][ T6098] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.286188][ T6098] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.472072][ T8488] wg1 speed is unknown, defaulting to 1000 [ 211.478332][ T8494] __nla_validate_parse: 2 callbacks suppressed [ 211.478353][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.575'. [ 211.478384][ T8494] netlink: 'syz.4.575': attribute type 5 has an invalid length. [ 211.478412][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.575'. [ 211.684277][ T8507] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 211.724244][ T8507] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 211.754904][ T8507] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 212.047915][ T8514] wg1 speed is unknown, defaulting to 1000 [ 212.089457][ T8521] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 212.117902][ T5854] Bluetooth: hci2: command 0x0401 tx timeout [ 212.124058][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 212.124070][ T5157] Bluetooth: hci3: command 0x0406 tx timeout [ 212.354425][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.585'. [ 212.932992][ T66] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 213.094882][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.597'. [ 213.176177][ T8572] syzkaller0: entered promiscuous mode [ 213.188432][ T8572] syzkaller0: entered allmulticast mode [ 213.197321][ T8584] netlink: 32 bytes leftover after parsing attributes in process `syz.1.598'. [ 213.400402][ T8590] dvmrp8: entered allmulticast mode [ 213.434200][ T8593] netlink: 16 bytes leftover after parsing attributes in process `syz.3.603'. [ 213.444036][ T8593] netlink: 16 bytes leftover after parsing attributes in process `syz.3.603'. [ 213.454523][ T8590] wg1 speed is unknown, defaulting to 1000 [ 213.746009][ T8614] netlink: 146780 bytes leftover after parsing attributes in process `syz.2.606'. [ 213.755786][ T8614] netlink: zone id is out of range [ 214.871152][ T8589] dvmrp8: left allmulticast mode [ 214.919809][ T8614] validate_nla: 32 callbacks suppressed [ 214.919835][ T8614] netlink: 'syz.2.606': attribute type 9 has an invalid length. [ 215.108681][ T8622] netlink: 'syz.4.609': attribute type 12 has an invalid length. [ 215.125207][ T8622] netlink: 132 bytes leftover after parsing attributes in process `syz.4.609'. [ 215.316716][ T8630] vxcan3: entered allmulticast mode [ 216.037301][ T8642] netlink: 68 bytes leftover after parsing attributes in process `syz.4.614'. [ 216.192022][ T8642] wg1 speed is unknown, defaulting to 1000 [ 217.175629][ T8671] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 218.123771][ T8707] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 218.278767][ T8716] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 219.206431][ T8767] netlink: 60 bytes leftover after parsing attributes in process `syz.3.647'. [ 219.218638][ T8767] netlink: 'syz.3.647': attribute type 30 has an invalid length. [ 219.318250][ T8770] netlink: 68 bytes leftover after parsing attributes in process `syz.4.648'. [ 221.047499][ T8767] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 221.050022][ T8764] wg1 speed is unknown, defaulting to 1000 [ 221.474146][ T8808] netlink: 256 bytes leftover after parsing attributes in process `syz.3.657'. [ 221.520424][ T8808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.657'. [ 221.817176][ T8823] wg1 speed is unknown, defaulting to 1000 [ 221.836893][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.662'. [ 221.852636][ T8832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.663'. [ 222.504399][ T8858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.667'. [ 222.603349][ T8861] netlink: 'syz.4.668': attribute type 21 has an invalid length. [ 222.644743][ T8861] netlink: 'syz.4.668': attribute type 1 has an invalid length. [ 222.652452][ T8861] netlink: 144 bytes leftover after parsing attributes in process `syz.4.668'. [ 223.048442][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.671'. [ 223.151202][ T8890] tipc: Started in network mode [ 223.180172][ T8890] tipc: Node identity fc000000000000000000000000000001, cluster identity 4711 [ 223.223095][ T8890] tipc: Enabling of bearer rejected, failed to enable media [ 223.955044][ T8923] netlink: 'syz.0.682': attribute type 13 has an invalid length. [ 224.148942][ T8923] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.156659][ T8923] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.380458][ T8923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.398165][ T8923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.451113][ T8941] xt_policy: too many policy elements [ 224.496557][ T8943] netlink: 'syz.2.686': attribute type 3 has an invalid length. [ 224.504571][ T8943] netlink: 224 bytes leftover after parsing attributes in process `syz.2.686'. [ 224.663165][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.682'. [ 224.780338][ T1163] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.789402][ T1163] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.859349][ T1163] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.884814][ T1163] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.988194][ T8964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.691'. [ 225.002528][ T8959] wg1 speed is unknown, defaulting to 1000 [ 225.056775][ T8960] wg1 speed is unknown, defaulting to 1000 [ 225.293591][ T8970] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 225.315175][ T8970] bond4 (unregistering): Released all slaves [ 225.675267][ T8987] bond2: option updelay: invalid value (18446744072065443590) [ 225.683019][ T8987] bond2: option updelay: allowed values 0 - 2147483647 [ 225.717539][ T8987] bond2 (unregistering): Released all slaves [ 225.886196][ T9005] netlink: 'syz.3.704': attribute type 1 has an invalid length. [ 226.147036][ T9009] nbd: must specify a size in bytes for the device [ 226.346735][ T9018] wg1 speed is unknown, defaulting to 1000 [ 226.791975][ T9026] netlink: 'syz.0.708': attribute type 1 has an invalid length. [ 227.148361][ T9038] netlink: 'syz.0.712': attribute type 10 has an invalid length. [ 227.182136][ T9038] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 227.495465][ T9053] netlink: 16 bytes leftover after parsing attributes in process `syz.0.716'. [ 227.772015][ T9056] team0: Port device team_slave_0 removed [ 227.971352][ T9070] netlink: 144 bytes leftover after parsing attributes in process `syz.3.720'. [ 228.010363][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'. [ 228.781980][ T9096] netlink: 'syz.1.726': attribute type 13 has an invalid length. [ 228.791392][ T9096] netlink: 'syz.1.726': attribute type 17 has an invalid length. [ 229.009836][ T9104] batadv1: entered promiscuous mode [ 229.018527][ T9104] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 229.139954][ T9110] netlink: 236 bytes leftover after parsing attributes in process `syz.4.729'. [ 229.162022][ T9110] netlink: 52 bytes leftover after parsing attributes in process `syz.4.729'. [ 229.834413][ T9150] netlink: 16 bytes leftover after parsing attributes in process `syz.3.742'. [ 229.926730][ T9140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.739'. [ 230.074195][ T9154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.743'. [ 230.236762][ T9159] gre1: entered promiscuous mode [ 230.242656][ T9159] gre1: entered allmulticast mode [ 230.279833][ T9163] netlink: 24 bytes leftover after parsing attributes in process `syz.4.746'. [ 230.295325][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.746'. [ 230.437567][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.749'. [ 230.576759][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.751'. [ 230.586298][ T9177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.753'. [ 231.686849][ T9223] netlink: 24 bytes leftover after parsing attributes in process `syz.2.767'. [ 231.733087][ T9229] can: request_module (can-proto-0) failed. [ 231.976668][ T9245] veth0_to_bridge: entered promiscuous mode [ 232.473340][ T9262] !: renamed from dummy0 [ 232.531263][ T9262] wg1 speed is unknown, defaulting to 1000 [ 232.681045][ T9272] netlink: 34 bytes leftover after parsing attributes in process `syz.3.780'. [ 232.787257][ T9244] veth0_to_bridge: left promiscuous mode [ 233.649794][ T9319] macsec1: entered promiscuous mode [ 233.655944][ T9319] team0: entered promiscuous mode [ 233.661125][ T9319] team_slave_0: entered promiscuous mode [ 233.668525][ T9319] team_slave_1: entered promiscuous mode [ 233.680344][ T9319] team0: Device macsec1 is already an upper device of the team interface [ 233.695052][ T9319] team0: left promiscuous mode [ 233.700121][ T9319] team_slave_0: left promiscuous mode [ 233.706650][ T9319] team_slave_1: left promiscuous mode [ 233.989058][ T9332] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 234.001958][ T9332] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 234.035441][ T9332] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 234.127863][ T9338] netlink: 'syz.4.797': attribute type 21 has an invalid length. [ 234.480832][ T9360] bridge_slave_1: left allmulticast mode [ 234.494339][ T9360] bridge_slave_1: left promiscuous mode [ 234.516239][ T9360] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.576243][ T9360] bridge_slave_0: left allmulticast mode [ 234.591701][ T9360] bridge_slave_0: left promiscuous mode [ 234.635196][ T9360] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.793148][ T9371] wg1 speed is unknown, defaulting to 1000 [ 234.814193][ T44] IPVS: starting estimator thread 0... [ 234.835959][ T9379] __nla_validate_parse: 5 callbacks suppressed [ 234.835980][ T9379] netlink: 13 bytes leftover after parsing attributes in process `syz.2.810'. [ 234.925005][ T9376] IPVS: using max 23 ests per chain, 55200 per kthread [ 235.025034][ T9389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.812'. [ 235.210215][ T9401] netlink: 56 bytes leftover after parsing attributes in process `syz.1.814'. [ 235.695894][ T9431] netlink: 108 bytes leftover after parsing attributes in process `syz.1.820'. [ 235.925790][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.823'. [ 235.952888][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.823'. [ 235.988896][ T9445] netlink: 'syz.1.823': attribute type 5 has an invalid length. [ 236.001037][ T9445] netlink: 'syz.1.823': attribute type 6 has an invalid length. [ 236.293089][ T9470] netlink: 40 bytes leftover after parsing attributes in process `syz.3.828'. [ 236.502735][ T9481] netlink: 24 bytes leftover after parsing attributes in process `syz.1.830'. [ 237.013882][ T9512] netlink: 64 bytes leftover after parsing attributes in process `syz.4.840'. [ 237.155018][ T9522] Bluetooth: MGMT ver 1.23 [ 237.216233][ T9527] macsec1: entered promiscuous mode [ 237.221989][ T9527] macsec1: entered allmulticast mode [ 238.127930][ T9551] netlink: 'syz.1.849': attribute type 10 has an invalid length. [ 238.294178][ T9531] wg1 speed is unknown, defaulting to 1000 [ 239.277279][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.860'. [ 239.430442][ T9596] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 239.490302][ T9596] bond6 (unregistering): Released all slaves [ 239.738266][ T9603] tipc: New replicast peer: 255.255.255.255 [ 239.757860][ T9603] tipc: Enabled bearer , priority 10 [ 240.201041][ T9629] wg1 speed is unknown, defaulting to 1000 [ 240.228023][ T9632] openvswitch: netlink: Message has 4 unknown bytes. [ 240.519813][ T9640] can: request_module (can-proto-0) failed. [ 240.663932][ T9658] __nla_validate_parse: 3 callbacks suppressed [ 240.663952][ T9658] netlink: 80 bytes leftover after parsing attributes in process `syz.2.874'. [ 240.877491][ T44] tipc: Node number set to 4227858433 [ 241.138336][ T9687] netlink: 'syz.4.879': attribute type 1 has an invalid length. [ 241.165596][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.879'. [ 241.371336][ T9694] IPVS: fo: FWM 3 0x00000003 - no destination available [ 241.457584][ T9702] tipc: Enabled bearer , priority 0 [ 241.465596][ T9702] syzkaller0: entered promiscuous mode [ 241.471315][ T9702] syzkaller0: entered allmulticast mode [ 241.490026][ T9701] tipc: Resetting bearer [ 241.518520][ T9701] tipc: Disabling bearer [ 241.544561][ T9704] team0: Device gtp1 is of different type [ 241.769738][ T9712] 8021q: VLANs not supported on caif0 [ 242.053228][ T9425] hid-generic 0005:0007:0008.0002: unknown main item tag 0x0 [ 242.067156][ T9425] hid-generic 0005:0007:0008.0002: item fetching failed at offset 1/2 [ 242.099708][ T9729] macsec1: entered promiscuous mode [ 242.101005][ T9425] hid-generic 0005:0007:0008.0002: probe with driver hid-generic failed with error -22 [ 242.116638][ T9729] macsec1: entered allmulticast mode [ 242.262340][ T9720] netlink: 96 bytes leftover after parsing attributes in process `syz.4.891'. [ 242.303333][ T9740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.897'. [ 242.334163][ T9740] netlink: 'syz.1.897': attribute type 11 has an invalid length. [ 242.452532][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.895'. [ 242.523770][ T9750] netlink: 44 bytes leftover after parsing attributes in process `syz.4.898'. [ 242.595272][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 242.636699][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'. [ 242.763789][ T9754] lo speed is unknown, defaulting to 1000 [ 242.781830][ T9754] lo speed is unknown, defaulting to 1000 [ 242.797250][ T9754] lo speed is unknown, defaulting to 1000 [ 242.880597][ T9754] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 242.882763][ T9762] netlink: 'syz.1.901': attribute type 2 has an invalid length. [ 242.926158][ T9762] netlink: 51 bytes leftover after parsing attributes in process `syz.1.901'. [ 242.990138][ T9764] wg1 speed is unknown, defaulting to 1000 [ 243.011613][ T9764] lo speed is unknown, defaulting to 1000 [ 243.115323][ T9754] lo speed is unknown, defaulting to 1000 [ 243.200678][ T9754] lo speed is unknown, defaulting to 1000 [ 243.303926][ T9754] lo speed is unknown, defaulting to 1000 [ 243.311982][ T9770] netlink: 'syz.4.905': attribute type 3 has an invalid length. [ 243.328726][ T9770] netlink: 'syz.4.905': attribute type 3 has an invalid length. [ 243.570752][ T9754] lo speed is unknown, defaulting to 1000 [ 243.651551][ T9754] lo speed is unknown, defaulting to 1000 [ 243.695447][ T9783] netlink: 28 bytes leftover after parsing attributes in process `syz.4.909'. [ 243.789034][ T9784] 8021q: VLANs not supported on syzkaller1 [ 243.819628][ T9788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.909'. [ 243.992763][ T9797] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 244.001230][ T9804] netlink: 'syz.1.914': attribute type 1 has an invalid length. [ 244.009288][ T9797] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 244.201771][ T9820] netlink: 'syz.3.920': attribute type 1 has an invalid length. [ 244.211963][ T9815] tipc: Enabled bearer , priority 0 [ 244.219438][ T9818] netlink: 'syz.3.920': attribute type 1 has an invalid length. [ 244.226201][ T9815] syzkaller0: entered promiscuous mode [ 244.239508][ T9815] syzkaller0: entered allmulticast mode [ 244.254086][ T9818] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 244.258104][ T9820] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 244.320709][ T9815] tipc: Resetting bearer [ 244.338661][ T9813] tipc: Resetting bearer [ 244.365007][ T9813] tipc: Disabling bearer [ 244.475763][ T9833] wg1 speed is unknown, defaulting to 1000 [ 244.483732][ T9835] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 244.499289][ T9840] netlink: 'syz.4.925': attribute type 4 has an invalid length. [ 244.573294][ T9833] lo speed is unknown, defaulting to 1000 [ 244.841172][ T9849] wg1 speed is unknown, defaulting to 1000 [ 244.960512][ T9849] lo speed is unknown, defaulting to 1000 [ 245.344239][ T9870] ieee802154 phy1 wpan1: encryption failed: -22 [ 245.376687][ T9867] ip6gretap0: entered allmulticast mode [ 245.906673][ T9893] __nla_validate_parse: 4 callbacks suppressed [ 245.906698][ T9893] netlink: 32 bytes leftover after parsing attributes in process `syz.3.935'. [ 245.942434][ T9893] netlink: 'syz.3.935': attribute type 32 has an invalid length. [ 246.025305][ T9893] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 246.060926][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.939'. [ 246.104740][ T9890] wg1 speed is unknown, defaulting to 1000 [ 246.135762][ T9903] netlink: 27 bytes leftover after parsing attributes in process `syz.0.940'. [ 246.164237][ T9898] batman_adv: batadv0: Removing interface: virt_wifi0 [ 246.196310][ T9890] lo speed is unknown, defaulting to 1000 [ 246.461377][ T9913] validate_nla: 1 callbacks suppressed [ 246.461417][ T9913] netlink: 'syz.2.942': attribute type 12 has an invalid length. [ 246.478308][ T9917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.944'. [ 246.518786][ T9919] netlink: 'syz.0.945': attribute type 13 has an invalid length. [ 246.559440][ T9919] netlink: 'syz.0.945': attribute type 17 has an invalid length. [ 246.652538][ T9917] 8021q: adding VLAN 0 to HW filter on device bond5 [ 246.669685][ T9918] bond5: entered promiscuous mode [ 246.812086][ T9919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.824556][ T9919] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.837903][ T9919] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.902471][ T9927] tipc: Enabled bearer , priority 0 [ 246.910452][ T9424] lo speed is unknown, defaulting to 1000 [ 246.923723][ T9424] syz2: Port: 1 Link ACTIVE [ 246.941406][ T9921] wg1 speed is unknown, defaulting to 1000 [ 246.983241][ T9921] lo speed is unknown, defaulting to 1000 [ 247.000483][ T9927] tipc: Disabling bearer [ 247.313065][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.953'. [ 247.325508][ T9952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.953'. [ 247.334343][ T9952] netlink: 'syz.3.953': attribute type 5 has an invalid length. [ 247.342847][ T9952] netlink: 'syz.3.953': attribute type 6 has an invalid length. [ 247.514237][ T9967] netlink: 256 bytes leftover after parsing attributes in process `syz.0.956'. [ 247.569518][ T9960] wg1 speed is unknown, defaulting to 1000 [ 247.578946][ T9969] bond0: entered promiscuous mode [ 247.584452][ T9969] bond_slave_0: entered promiscuous mode [ 247.608606][ T9969] bond_slave_1: entered promiscuous mode [ 247.638619][ T9971] netlink: 'syz.3.959': attribute type 1 has an invalid length. [ 247.700106][ T9960] lo speed is unknown, defaulting to 1000 [ 247.734240][ T9965] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1438992235/1438992237 [ 247.762723][ T9965] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1438992235/1438992237 [ 247.777265][ T9971] bond6: entered promiscuous mode [ 247.783324][ T9971] 8021q: adding VLAN 0 to HW filter on device bond6 [ 247.832310][ T9987] netlink: 64 bytes leftover after parsing attributes in process `syz.1.961'. [ 247.849260][ T9988] netlink: 64 bytes leftover after parsing attributes in process `syz.1.961'. [ 248.362792][T10014] netlink: 48 bytes leftover after parsing attributes in process `syz.4.967'. [ 248.415650][T10011] gretap1: entered promiscuous mode [ 248.439747][T10014] netlink: 'syz.4.967': attribute type 10 has an invalid length. [ 248.476505][T10014] veth1_vlan: entered allmulticast mode [ 248.482620][T10014] veth1_vlan: left promiscuous mode [ 248.496690][ T51] block nbd1: Receive control failed (result -32) [ 248.510544][T10014] team0: Device veth1_vlan failed to register rx_handler [ 248.766982][T10032] bridge: RTM_NEWNEIGH with invalid ether address [ 248.965409][T10043] wg1 speed is unknown, defaulting to 1000 [ 248.973166][T10043] lo speed is unknown, defaulting to 1000 [ 249.683838][T10080] wg1 speed is unknown, defaulting to 1000 [ 249.740936][T10080] lo speed is unknown, defaulting to 1000 [ 250.268443][ T9427] hid-generic 0005:0007:0008.0003: unknown main item tag 0x0 [ 250.276397][ T9427] hid-generic 0005:0007:0008.0003: item fetching failed at offset 1/2 [ 250.290261][ T9427] hid-generic 0005:0007:0008.0003: probe with driver hid-generic failed with error -22 [ 250.573565][T10100] ip6gre1: entered allmulticast mode [ 250.748431][T10113] wg1 speed is unknown, defaulting to 1000 [ 250.910857][T10113] lo speed is unknown, defaulting to 1000 [ 251.022785][T10114] wg1 speed is unknown, defaulting to 1000 [ 251.046712][T10114] lo speed is unknown, defaulting to 1000 [ 251.055972][T10127] __nla_validate_parse: 6 callbacks suppressed [ 251.055991][T10127] netlink: 56 bytes leftover after parsing attributes in process `syz.3.991'. [ 251.326474][T10136] wg1 speed is unknown, defaulting to 1000 [ 251.479351][T10136] lo speed is unknown, defaulting to 1000 [ 252.011049][T10163] wg1 speed is unknown, defaulting to 1000 [ 252.020950][T10163] lo speed is unknown, defaulting to 1000 [ 252.228825][T10166] syzkaller0: entered promiscuous mode [ 252.236054][T10166] syzkaller0: entered allmulticast mode [ 252.401053][T10174] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.440379][T10173] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.613590][T10174] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.658158][T10179] bridge_slave_0: left allmulticast mode [ 252.668294][T10179] bridge_slave_0: left promiscuous mode [ 252.676377][T10179] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.704347][T10179] bridge_slave_1: left allmulticast mode [ 252.713537][T10179] bridge_slave_1: left promiscuous mode [ 252.721484][T10179] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.742136][T10179] bond0: (slave 30): Releasing backup interface [ 252.763391][T10179] bond0: (slave bond_slave_1): Releasing backup interface [ 252.798220][T10179] team0: Port device team_slave_1 removed [ 252.807733][T10179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.823445][T10179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.845045][T10179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.853775][T10179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.868471][T10179] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 252.928166][T10198] tipc: Enabled bearer , priority 0 [ 253.016374][T10201] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1008'. [ 253.043747][T10201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1008'. [ 253.058216][T10201] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1008'. [ 253.070893][T10194] syzkaller0: entered promiscuous mode [ 253.077974][T10194] syzkaller0: entered allmulticast mode [ 253.085519][T10201] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1008'. [ 253.100597][T10206] netlink: 'syz.4.1010': attribute type 1 has an invalid length. [ 253.130816][T10202] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1008'. [ 253.150656][T10202] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1008'. [ 253.166439][T10202] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1008'. [ 253.177640][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1009'. [ 253.242183][T10206] 8021q: adding VLAN 0 to HW filter on device bond4 [ 253.253489][T10216] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1011'. [ 253.444041][T10222] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 253.452750][T10207] 8021q: adding VLAN 0 to HW filter on device bond4 [ 253.463650][T10207] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 253.478197][T10207] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 253.588819][T10211] wg1 speed is unknown, defaulting to 1000 [ 253.595685][T10189] tipc: Resetting bearer [ 253.679563][T10189] tipc: Disabling bearer [ 253.729027][T10211] lo speed is unknown, defaulting to 1000 [ 254.022427][T10245] netlink: 'syz.4.1019': attribute type 4 has an invalid length. [ 254.384342][T10269] netlink: 'syz.4.1025': attribute type 1 has an invalid length. [ 254.435993][T10269] bond5: (slave geneve2): Opening slave failed [ 255.242783][T10311] netlink: 'syz.0.1038': attribute type 13 has an invalid length. [ 255.255608][T10311] netlink: 'syz.0.1038': attribute type 17 has an invalid length. [ 255.339668][T10311] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.368849][T10313] xfrm0: entered promiscuous mode [ 255.383480][T10313] xfrm0: entered allmulticast mode [ 255.418450][T10317] tipc: Enabled bearer , priority 0 [ 255.445734][T10316] syzkaller0: entered promiscuous mode [ 255.464916][T10316] syzkaller0: entered allmulticast mode [ 255.639792][T10326] netlink: 'syz.1.1043': attribute type 1 has an invalid length. [ 255.668472][T10326] bond6: entered promiscuous mode [ 255.673996][T10326] 8021q: adding VLAN 0 to HW filter on device bond6 [ 255.681956][T10314] tipc: Resetting bearer [ 255.713260][T10314] tipc: Disabling bearer [ 255.746681][T10333] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 255.754437][T10333] IPv6: NLM_F_CREATE should be set when creating new route [ 255.761796][T10333] IPv6: NLM_F_CREATE should be set when creating new route [ 255.771208][T10326] 8021q: adding VLAN 0 to HW filter on device bond6 [ 255.783584][T10333] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 255.788766][T10326] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 255.861231][T10326] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 255.891695][T10326] bond6: (slave wireguard0): making interface the new active one [ 255.901137][T10326] wireguard0: entered promiscuous mode [ 255.911761][T10326] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 255.949672][T10333] bond6: (slave wireguard1): The slave device specified does not support setting the MAC address [ 255.973318][T10333] bond6: (slave wireguard1): Enslaving as a backup interface with an up link [ 256.000285][T10345] netlink: 'syz.2.1045': attribute type 6 has an invalid length. [ 256.037231][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 256.077046][T10339] __nla_validate_parse: 7 callbacks suppressed [ 256.077066][T10339] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1045'. [ 256.143451][T10348] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 256.149110][T10351] netlink: 'syz.1.1048': attribute type 13 has an invalid length. [ 256.162326][T10351] netlink: 'syz.1.1048': attribute type 17 has an invalid length. [ 256.190434][T10351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 256.686101][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1056'. [ 256.695432][T10378] netlink: 'syz.3.1056': attribute type 20 has an invalid length. [ 256.703286][T10378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1056'. [ 256.868372][T10391] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1057'. [ 257.180778][T10415] geneve2: entered promiscuous mode [ 257.338340][T10411] dvmrp0: entered allmulticast mode [ 257.482114][T10432] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1070'. [ 257.564567][T10432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1070'. [ 257.736194][T10434] 8021q: adding VLAN 0 to HW filter on device bond7 [ 257.743747][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1072'. [ 258.205883][T10447] "syz.2.1074" (10447) uses obsolete ecb(arc4) skcipher [ 258.476610][T10478] wg1 speed is unknown, defaulting to 1000 [ 258.486659][T10478] lo speed is unknown, defaulting to 1000 [ 258.800584][T10490] netlink: 'syz.3.1086': attribute type 13 has an invalid length. [ 258.831845][T10490] netlink: 'syz.3.1086': attribute type 17 has an invalid length. [ 259.070040][T10482] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1084'. [ 259.197605][T10490] ip6gretap0: left allmulticast mode [ 259.218430][T10490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.229492][T10490] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.250768][T10490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.451976][T10511] wg1 speed is unknown, defaulting to 1000 [ 259.466028][T10511] lo speed is unknown, defaulting to 1000 [ 259.580711][T10516] netlink: 'syz.1.1093': attribute type 3 has an invalid length. [ 259.692331][T10516] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 259.921793][T10526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1096'. [ 260.006953][T10526] 8021q: adding VLAN 0 to HW filter on device bond2 [ 260.045012][T10528] dvmrp0: entered allmulticast mode [ 260.054424][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1097'. [ 260.124750][T10533] xfrm0: entered promiscuous mode [ 260.129845][T10533] xfrm0: entered allmulticast mode [ 260.468212][T10533] wg1 speed is unknown, defaulting to 1000 [ 260.594676][T10533] lo speed is unknown, defaulting to 1000 [ 260.833229][T10566] tipc: Enabling of bearer rejected, media not registered [ 260.947500][T10566] syzkaller0: entered promiscuous mode [ 260.953132][T10566] syzkaller0: entered allmulticast mode [ 261.102846][T10570] __nla_validate_parse: 1 callbacks suppressed [ 261.102867][T10570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1105'. [ 261.240198][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.246174][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1112'. [ 261.354387][T10599] wg1 speed is unknown, defaulting to 1000 [ 261.362497][T10599] lo speed is unknown, defaulting to 1000 [ 261.979292][T10614] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 262.025517][T10614] bond2 (unregistering): Released all slaves [ 262.117920][T10630] Bluetooth: MGMT ver 1.23 [ 262.155084][T10634] netlink: 'syz.3.1121': attribute type 1 has an invalid length. [ 262.159882][T10630] geneve2: entered promiscuous mode [ 262.174063][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1119'. [ 262.185498][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1117'. [ 262.214676][T10634] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1121'. [ 262.687914][T10646] bond2: (slave bond_slave_1): Device is not bonding slave [ 262.699326][T10646] bond2: option active_slave: invalid value (bond_slave_1) [ 262.727668][T10646] bond2 (unregistering): Released all slaves [ 262.783525][ T6096] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.792285][ T6096] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.906152][T10656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1126'. [ 262.929104][ T6096] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.961140][ T6096] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.968014][T10658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1126'. [ 263.068898][T10656] 8021q: adding VLAN 0 to HW filter on device bond8 [ 263.112392][ T51] Bluetooth: hci4: link tx timeout [ 263.122028][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 263.153827][T10658] macsec1: entered promiscuous mode [ 263.160050][T10658] bond8: entered promiscuous mode [ 263.177291][T10658] macsec1: entered allmulticast mode [ 263.188654][T10658] bond8: entered allmulticast mode [ 263.196830][T10658] bond8: left allmulticast mode [ 263.201819][T10658] bond8: left promiscuous mode [ 263.225107][T10653] syzkaller1: entered promiscuous mode [ 263.230884][T10653] syzkaller1: entered allmulticast mode [ 263.414150][T10677] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1132'. [ 263.536535][T10681] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 263.593241][T10685] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1135'. [ 264.315039][T10718] 8021q: VLANs not supported on nlmon0 [ 264.528311][T10730] netlink: 'syz.0.1147': attribute type 3 has an invalid length. [ 264.707016][T10739] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1148'. [ 264.837160][T10747] wg1 speed is unknown, defaulting to 1000 [ 264.907877][T10747] lo speed is unknown, defaulting to 1000 [ 264.933320][T10749] netlink: 'syz.3.1152': attribute type 1 has an invalid length. [ 265.154840][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 265.795701][T10771] syzkaller1: entered promiscuous mode [ 265.810683][T10771] syzkaller1: entered allmulticast mode [ 265.875676][T10785] netlink: zone id is out of range [ 265.884761][T10785] netlink: zone id is out of range [ 265.889980][T10785] netlink: get zone limit has 8 unknown bytes [ 266.087923][T10793] wg1 speed is unknown, defaulting to 1000 [ 266.117607][T10793] lo speed is unknown, defaulting to 1000 [ 266.276243][T10808] IPv4: Oversized IP packet from 127.202.26.0 [ 266.296486][T10812] __nla_validate_parse: 4 callbacks suppressed [ 266.296505][T10812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1165'. [ 266.353057][T10816] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1167'. [ 266.375698][T10816] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1167'. [ 266.388401][T10816] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1167'. [ 266.398891][T10816] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1167'. [ 266.409062][T10816] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1167'. [ 266.419590][T10816] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1167'. [ 266.445236][T10816] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1167'. [ 266.467103][T10813] tipc: Enabled bearer , priority 0 [ 266.469473][T10816] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1167'. [ 266.488556][T10816] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1167'. [ 266.500823][T10811] tipc: Disabling bearer [ 266.617818][T10826] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 267.019974][T10857] wg1 speed is unknown, defaulting to 1000 [ 267.028795][T10857] lo speed is unknown, defaulting to 1000 [ 267.164502][T10862] netlink: 'syz.3.1178': attribute type 4 has an invalid length. [ 267.225817][T10865] sch_fq: defrate 2 ignored. [ 267.751803][T10872] netlink: 'syz.2.1181': attribute type 29 has an invalid length. [ 267.798566][T10872] netlink: 'syz.2.1181': attribute type 29 has an invalid length. [ 268.531818][T10876] wg1 speed is unknown, defaulting to 1000 [ 268.611446][T10876] lo speed is unknown, defaulting to 1000 [ 270.489149][ T6098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.504659][ T6098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.790385][T10965] bridge_slave_1 (unregistering): left allmulticast mode [ 270.802450][T10965] bridge_slave_1 (unregistering): left promiscuous mode [ 270.821179][T10965] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.120166][T10989] openvswitch: netlink: Flow actions attr not present in new flow. [ 271.527255][T11003] netlink: 'syz.2.1216': attribute type 1 has an invalid length. [ 271.556898][T11006] __nla_validate_parse: 73 callbacks suppressed [ 271.556918][T11006] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1216'. [ 271.619899][T11007] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 271.631304][T11007] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 271.691211][T11003] vlan2: entered allmulticast mode [ 271.696678][T11003] bridge0: entered allmulticast mode [ 271.852172][T11015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1218'. [ 271.888048][T11015] vlan2: entered promiscuous mode [ 271.893156][T11015] team0: entered promiscuous mode [ 271.898501][T11015] team_slave_0: entered promiscuous mode [ 271.907965][T11015] team_slave_1: entered promiscuous mode [ 271.965364][T11018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.322675][T11033] tipc: Enabling of bearer rejected, failed to enable media [ 272.336740][T11034] sctp: [Deprecated]: syz.4.1223 (pid 11034) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.336740][T11034] Use struct sctp_sack_info instead [ 272.452371][T11041] team_slave_0: entered promiscuous mode [ 272.459131][T11041] team_slave_1: entered promiscuous mode [ 272.465545][T11041] macsec1: entered promiscuous mode [ 272.470834][T11041] team0: entered promiscuous mode [ 272.479295][T11041] team0: Device macsec1 is already an upper device of the team interface [ 272.489162][T11041] team0: left promiscuous mode [ 272.494706][T11041] team_slave_0: left promiscuous mode [ 272.500237][T11041] team_slave_1: left promiscuous mode [ 272.541950][T11040] ip6erspan0: entered promiscuous mode [ 272.747613][T11046] netlink: 'syz.2.1227': attribute type 13 has an invalid length. [ 272.778122][T11046] netlink: 'syz.2.1227': attribute type 17 has an invalid length. [ 272.854514][T11046] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.991998][T11067] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1228'. [ 273.137060][T11069] veth9: entered promiscuous mode [ 273.536064][T11080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1236'. [ 273.869934][T11091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1239'. [ 274.015700][T11091] wg1 speed is unknown, defaulting to 1000 [ 274.041766][T11091] lo speed is unknown, defaulting to 1000 [ 274.184316][T11092] wg1 speed is unknown, defaulting to 1000 [ 274.201653][T11086] netlink: 'syz.1.1237': attribute type 1 has an invalid length. [ 274.218140][T11086] netlink: 'syz.1.1237': attribute type 4 has an invalid length. [ 274.231137][T11092] lo speed is unknown, defaulting to 1000 [ 274.240689][T11086] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1237'. [ 274.334646][T11099] netlink: 'syz.0.1241': attribute type 10 has an invalid length. [ 274.362581][T11099] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 274.439278][T11104] netlink: 'syz.4.1243': attribute type 1 has an invalid length. [ 274.595953][T11104] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 274.596494][T11112] tipc: Enabled bearer , priority 0 [ 274.617635][T11113] syzkaller0: entered promiscuous mode [ 274.623290][T11113] syzkaller0: entered allmulticast mode [ 274.646221][T11102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1242'. [ 274.763394][T11102] tipc: Resetting bearer [ 274.834349][T11100] tipc: Resetting bearer [ 274.882450][T11100] tipc: Disabling bearer [ 275.017022][T11120] wg1 speed is unknown, defaulting to 1000 [ 275.043641][T11120] lo speed is unknown, defaulting to 1000 [ 275.514478][T11153] wg1 speed is unknown, defaulting to 1000 [ 275.526058][T11153] lo speed is unknown, defaulting to 1000 [ 275.921888][T11172] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1257'. [ 275.932099][T11172] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1257'. [ 275.943448][T11172] netlink: 'syz.2.1257': attribute type 6 has an invalid length. [ 275.951671][T11172] netlink: 'syz.2.1257': attribute type 5 has an invalid length. [ 275.960726][T11172] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1257'. [ 276.089544][T11180] netlink: 'syz.0.1260': attribute type 1 has an invalid length. [ 276.226107][T11186] wg1 speed is unknown, defaulting to 1000 [ 276.235497][T11186] lo speed is unknown, defaulting to 1000 [ 277.083882][T11219] wg1 speed is unknown, defaulting to 1000 [ 277.093308][T11219] lo speed is unknown, defaulting to 1000 [ 277.366220][T11233] __nla_validate_parse: 3 callbacks suppressed [ 277.366241][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1275'. [ 277.366951][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1276'. [ 277.411443][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1276'. [ 277.490319][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1276'. [ 277.617496][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1276'. [ 277.627566][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1276'. [ 277.639656][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1276'. [ 277.944178][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1276'. [ 277.957914][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1276'. [ 277.985072][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1276'. [ 278.692283][T11291] bond7: entered promiscuous mode [ 278.697495][T11291] bond7: entered allmulticast mode [ 278.703381][T11291] 8021q: adding VLAN 0 to HW filter on device bond7 [ 279.739735][T11327] wg1 speed is unknown, defaulting to 1000 [ 279.789458][T11335] wg1 speed is unknown, defaulting to 1000 [ 279.800673][T11327] lo speed is unknown, defaulting to 1000 [ 279.808890][T11335] lo speed is unknown, defaulting to 1000 [ 280.813449][T11382] macsec1: entered promiscuous mode [ 280.827395][T11382] bridge0: entered promiscuous mode [ 280.842471][T11382] bridge0: port 1(macsec1) entered blocking state [ 280.855765][T11382] bridge0: port 1(macsec1) entered disabled state [ 280.862987][T11382] macsec1: entered allmulticast mode [ 280.870043][T11382] bridge0: entered allmulticast mode [ 280.880262][T11382] macsec1: left allmulticast mode [ 280.887677][T11382] bridge0: left allmulticast mode [ 280.895667][T11382] bridge0: left promiscuous mode [ 281.683846][T11405] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 281.706975][T11405] bond9 (unregistering): Released all slaves [ 281.900288][T11400] wg1 speed is unknown, defaulting to 1000 [ 281.967650][T11400] lo speed is unknown, defaulting to 1000 [ 282.513118][T11430] wg1 speed is unknown, defaulting to 1000 [ 282.520016][T11448] __nla_validate_parse: 17 callbacks suppressed [ 282.520036][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'. [ 282.557136][T11430] lo speed is unknown, defaulting to 1000 [ 282.586282][T11451] netlink: 'syz.1.1327': attribute type 1 has an invalid length. [ 282.692632][T11456] bond9: (slave veth5): Enslaving as an active interface with a down link [ 282.726460][T11455] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1328'. [ 282.826393][T11462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1330'. [ 282.850974][T11462] openvswitch: netlink: Missing key (keys=40, expected=100) [ 283.400593][T11486] vxcan2: entered promiscuous mode [ 283.581048][T11497] netlink: 'syz.4.1339': attribute type 4 has an invalid length. [ 283.636685][T11502] netlink: 'syz.3.1340': attribute type 1 has an invalid length. [ 284.084496][T11528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1350'. [ 284.389477][T11546] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1355'. [ 284.543638][T11559] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1360'. [ 284.664029][T11569] dvmrp12: entered allmulticast mode [ 284.677132][T11567] dvmrp12: left allmulticast mode [ 284.756358][T11574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1365'. [ 284.796683][T11574] 8021q: adding VLAN 0 to HW filter on device bond3 [ 284.947430][T11582] macvtap2: entered allmulticast mode [ 284.952886][T11582] veth0_macvtap: entered allmulticast mode [ 285.030861][T11593] FAULT_INJECTION: forcing a failure. [ 285.030861][T11593] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 285.091524][T11593] CPU: 1 UID: 0 PID: 11593 Comm: syz.3.1369 Not tainted syzkaller #0 PREEMPT(full) [ 285.091555][T11593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 285.091577][T11593] Call Trace: [ 285.091585][T11593] [ 285.091595][T11593] dump_stack_lvl+0x189/0x250 [ 285.091634][T11593] ? __pfx____ratelimit+0x10/0x10 [ 285.091670][T11593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.091697][T11593] ? __pfx__printk+0x10/0x10 [ 285.091730][T11593] ? __might_fault+0xb0/0x130 [ 285.091771][T11593] should_fail_ex+0x414/0x560 [ 285.091808][T11593] _copy_from_user+0x2d/0xb0 [ 285.091836][T11593] sk_setsockopt+0x27f/0x2dc0 [ 285.091860][T11593] ? __pfx___might_resched+0x10/0x10 [ 285.091892][T11593] ? __pfx_sk_setsockopt+0x10/0x10 [ 285.091914][T11593] ? __lock_acquire+0xab9/0xd20 [ 285.091941][T11593] ? aa_sk_perm+0x81e/0x950 [ 285.091975][T11593] ? __pfx_aa_sk_perm+0x10/0x10 [ 285.092007][T11593] ? __fget_files+0x2a/0x420 [ 285.092035][T11593] ? aa_sock_opt_perm+0xff/0x1b0 [ 285.092070][T11593] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 285.092142][T11593] do_sock_setsockopt+0x11b/0x1b0 [ 285.092173][T11593] __x64_sys_setsockopt+0x13f/0x1b0 [ 285.092205][T11593] do_syscall_64+0xfa/0x3b0 [ 285.092225][T11593] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.092259][T11593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.092281][T11593] ? clear_bhb_loop+0x60/0xb0 [ 285.092308][T11593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.092329][T11593] RIP: 0033:0x7f776878eec9 [ 285.092354][T11593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.092372][T11593] RSP: 002b:00007f77669d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 285.092400][T11593] RAX: ffffffffffffffda RBX: 00007f77689e6090 RCX: 00007f776878eec9 [ 285.092416][T11593] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 0000000000000003 [ 285.092429][T11593] RBP: 00007f77669d5090 R08: 0000000000000004 R09: 0000000000000000 [ 285.092443][T11593] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.092458][T11593] R13: 00007f77689e6128 R14: 00007f77689e6090 R15: 00007ffcc88e16c8 [ 285.092494][T11593] [ 285.500937][T11606] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1374'. [ 285.725644][T11621] wg1 speed is unknown, defaulting to 1000 [ 285.798504][T11622] geneve2: entered promiscuous mode [ 285.803775][T11622] geneve2: entered allmulticast mode [ 285.898605][T11621] lo speed is unknown, defaulting to 1000 [ 285.919433][T11623] geneve2: entered promiscuous mode [ 285.926199][T11623] geneve2: entered allmulticast mode [ 286.033332][T11637] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1379'. [ 286.160313][T11640] vlan2: entered allmulticast mode [ 286.223540][T11640] bridge_slave_0: entered allmulticast mode [ 286.281020][T11649] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1382'. [ 286.305702][T11639] wg1 speed is unknown, defaulting to 1000 [ 286.313629][T11639] lo speed is unknown, defaulting to 1000 [ 286.580278][T11657] netlink: 'syz.4.1386': attribute type 29 has an invalid length. [ 286.891880][T11671] netlink: 'syz.2.1389': attribute type 9 has an invalid length. [ 287.120737][T11680] tipc: Enabled bearer , priority 0 [ 287.129582][T11680] syzkaller0: entered promiscuous mode [ 287.135427][T11680] syzkaller0: entered allmulticast mode [ 287.218956][T11680] tipc: Resetting bearer [ 287.234057][T11679] tipc: Resetting bearer [ 287.268240][T11679] tipc: Disabling bearer [ 287.532535][T11706] IPVS: length: 141 != 8 [ 287.824095][T11722] netlink: 'syz.3.1404': attribute type 9 has an invalid length. [ 287.857745][T11717] __nla_validate_parse: 1 callbacks suppressed [ 287.857764][T11717] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1402'. [ 287.885492][T11720] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1402'. [ 287.981318][T11726] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1406'. [ 288.055835][T11732] batadv_slave_1: entered promiscuous mode [ 288.067624][T11732] batadv_slave_1: left promiscuous mode [ 288.211549][T11740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1409'. [ 288.262026][T11748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1412'. [ 288.282361][T11748] pim6reg1: entered promiscuous mode [ 288.290834][T11748] pim6reg1: entered allmulticast mode [ 288.473850][T11752] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1413'. [ 288.642035][T11765] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1416'. [ 289.176607][T11781] pim6reg: entered allmulticast mode [ 289.189705][T11781] pim6reg: left allmulticast mode [ 289.598156][T11795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1425'. [ 289.687512][T11794] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1425'. [ 290.762828][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1430'. [ 291.039711][T11817] pimreg3: entered allmulticast mode [ 291.143728][T11819] vlan2: entered promiscuous mode [ 291.165304][T11819] macvtap0: entered promiscuous mode [ 291.191766][T11827] netlink: 'syz.4.1436': attribute type 14 has an invalid length. [ 291.255250][T11825] wg1 speed is unknown, defaulting to 1000 [ 291.298914][T11825] lo speed is unknown, defaulting to 1000 [ 291.889666][T11844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.093879][T11846] wg1 speed is unknown, defaulting to 1000 [ 292.128936][T11846] lo speed is unknown, defaulting to 1000 [ 292.391129][T11863] wg1 speed is unknown, defaulting to 1000 [ 292.481082][T11863] lo speed is unknown, defaulting to 1000 [ 292.950760][T11905] __nla_validate_parse: 7 callbacks suppressed [ 292.950785][T11905] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1452'. [ 293.138152][T11898] wg1 speed is unknown, defaulting to 1000 [ 293.223890][T11910] wg1 speed is unknown, defaulting to 1000 [ 293.230703][T11898] lo speed is unknown, defaulting to 1000 [ 293.242151][T11910] lo speed is unknown, defaulting to 1000 [ 293.325236][T11916] netlink: 'syz.2.1455': attribute type 10 has an invalid length. [ 293.597268][T11919] pim6reg1: entered promiscuous mode [ 293.602651][T11919] pim6reg1: entered allmulticast mode [ 294.112216][T11938] netlink: 5452 bytes leftover after parsing attributes in process `syz.4.1461'. [ 294.123233][T11938] openvswitch: netlink: Missing key (keys=40, expected=80) [ 294.134064][T11932] wg1 speed is unknown, defaulting to 1000 [ 294.168021][T11932] lo speed is unknown, defaulting to 1000 [ 294.757216][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'. [ 294.773845][T11963] openvswitch: netlink: Missing key (keys=40, expected=100) [ 294.796189][T11964] sctp: [Deprecated]: syz.0.1469 (pid 11964) Use of int in max_burst socket option deprecated. [ 294.796189][T11964] Use struct sctp_assoc_value instead [ 295.102712][T11974] wg1 speed is unknown, defaulting to 1000 [ 295.127702][T11977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1471'. [ 295.239082][T11974] lo speed is unknown, defaulting to 1000 [ 295.986794][T11994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1476'. [ 296.052273][T11994] 8021q: adding VLAN 0 to HW filter on device bond6 [ 296.514451][T12012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1479'. [ 296.565950][T12012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1479'. [ 296.581473][T12012] netlink: 'syz.4.1479': attribute type 4 has an invalid length. [ 296.588369][T12015] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1481'. [ 296.616444][T12015] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1481'. [ 296.678740][T12016] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1481'. [ 296.843077][T12022] ip6gre1: entered allmulticast mode [ 296.978023][T12028] wg1 speed is unknown, defaulting to 1000 [ 297.061047][T12028] lo speed is unknown, defaulting to 1000 [ 297.229529][T12056] netlink: 'syz.1.1485': attribute type 1 has an invalid length. [ 297.742271][T12062] wg1 speed is unknown, defaulting to 1000 [ 297.768208][T12071] wg1 speed is unknown, defaulting to 1000 [ 297.778627][T12062] lo speed is unknown, defaulting to 1000 [ 297.788665][T12066] wg1 speed is unknown, defaulting to 1000 [ 297.800091][T12071] lo speed is unknown, defaulting to 1000 [ 297.871815][T12066] lo speed is unknown, defaulting to 1000 [ 298.219383][T12088] __nla_validate_parse: 5 callbacks suppressed [ 298.219409][T12088] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1498'. [ 298.472113][T12104] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1504'. [ 298.515740][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 299.288439][T12107] wg1 speed is unknown, defaulting to 1000 [ 299.339185][T12107] lo speed is unknown, defaulting to 1000 [ 299.711169][T12144] syzkaller1: entered promiscuous mode [ 299.735374][T12144] syzkaller1: entered allmulticast mode [ 300.551424][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1521'. [ 300.649298][T12185] netlink: 'syz.4.1522': attribute type 1 has an invalid length. [ 300.657897][T12185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1522'. [ 300.694499][T12185] wg1 speed is unknown, defaulting to 1000 [ 300.703404][T12185] lo speed is unknown, defaulting to 1000 [ 300.841192][T12188] netlink: 'syz.2.1523': attribute type 1 has an invalid length. [ 300.864977][T12188] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1523'. [ 300.891034][T12188] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1523'. [ 300.925592][T12188] tipc: Enabled bearer , priority 0 [ 301.032975][T12188] syzkaller0: entered promiscuous mode [ 301.049624][T12188] syzkaller0: entered allmulticast mode [ 301.088189][T12188] tipc: Resetting bearer [ 301.118834][T12187] tipc: Resetting bearer [ 301.361235][T12194] IPVS: length: 222 != 8 [ 302.027983][T12201] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1526'. [ 302.059292][T12201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1526'. [ 303.594039][T12187] tipc: Disabling bearer [ 303.605469][T12199] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1525'. [ 303.615326][T12199] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1525'. [ 303.630292][T12205] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 303.705338][T12205] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 303.737681][T12205] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 303.853679][T12220] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1531'. [ 303.901951][T12220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1531'. [ 303.935292][T12220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1531'. [ 304.274097][T12236] netlink: 'syz.4.1537': attribute type 2 has an invalid length. [ 304.301472][T12236] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1537'. [ 304.985298][T12259] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1543'. [ 305.269994][T12267] wg1 speed is unknown, defaulting to 1000 [ 305.281752][T12267] lo speed is unknown, defaulting to 1000 [ 305.430127][T12273] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1545'. [ 305.826603][T12276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1547'. [ 305.907459][T12279] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR [ 306.649761][T12322] tipc: Enabled bearer , priority 0 [ 306.666599][T12319] netlink: 'syz.3.1556': attribute type 83 has an invalid length. [ 306.712929][T12322] syzkaller0: entered promiscuous mode [ 306.738371][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1558'. [ 306.760394][T12322] syzkaller0: entered allmulticast mode [ 306.778569][T12325] netlink: 'syz.4.1558': attribute type 5 has an invalid length. [ 306.848220][T12322] tipc: Resetting bearer [ 306.993446][T12321] tipc: Resetting bearer [ 307.088091][T12321] tipc: Disabling bearer [ 307.666530][T12341] wg1 speed is unknown, defaulting to 1000 [ 307.697269][T12341] lo speed is unknown, defaulting to 1000 [ 307.837464][T12346] syzkaller1: entered promiscuous mode [ 307.843429][T12346] syzkaller1: entered allmulticast mode [ 309.107932][T12400] __nla_validate_parse: 3 callbacks suppressed [ 309.107951][T12400] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1575'. [ 309.243205][T12407] netlink: 5636 bytes leftover after parsing attributes in process `syz.4.1577'. [ 309.319364][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1579'. [ 309.489072][T12422] ûý: entered promiscuous mode [ 309.573603][T12422] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1580'. [ 309.606005][T12422] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1580'. [ 309.814405][T12444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1586'. [ 309.815606][T12441] wg1 speed is unknown, defaulting to 1000 [ 309.863452][T12444] 8021q: adding VLAN 0 to HW filter on device bond10 [ 309.871408][T12448] netlink: 'syz.3.1586': attribute type 3 has an invalid length. [ 309.872993][T12441] lo speed is unknown, defaulting to 1000 [ 309.902706][T12445] siw: device registration error -23 [ 309.915870][T12442] wg1 speed is unknown, defaulting to 1000 [ 309.973299][T12442] lo speed is unknown, defaulting to 1000 [ 310.107756][T12455] netlink: 'syz.3.1587': attribute type 13 has an invalid length. [ 310.150332][T12455] netlink: 'syz.3.1587': attribute type 17 has an invalid length. [ 310.491291][T12455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.663853][T12475] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1592'. [ 310.728892][T12468] wg1 speed is unknown, defaulting to 1000 [ 310.739173][T12468] lo speed is unknown, defaulting to 1000 [ 310.852494][T12488] netlink: 212260 bytes leftover after parsing attributes in process `syz.0.1595'. [ 310.875899][T12488] netlink: get zone limit has 4 unknown bytes [ 310.890347][T12488] netlink: 'syz.0.1595': attribute type 1 has an invalid length. [ 311.072980][T12488] bond4: entered promiscuous mode [ 311.081606][T12488] 8021q: adding VLAN 0 to HW filter on device bond4 [ 311.301784][T12506] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1599'. [ 311.345333][T12504] netlink: 'syz.2.1598': attribute type 1 has an invalid length. [ 311.357882][T12506] sctp: [Deprecated]: syz.4.1599 (pid 12506) Use of int in max_burst socket option. [ 311.357882][T12506] Use struct sctp_assoc_value instead [ 311.384442][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1599'. [ 311.501541][T12514] ip6gretap0: entered promiscuous mode [ 311.518937][T12514] macsec1: entered promiscuous mode [ 311.654188][T12524] 8021q: adding VLAN 0 to HW filter on device bond5 [ 311.820818][T12542] netlink: 'syz.3.1607': attribute type 10 has an invalid length. [ 312.092626][T12555] wg1 speed is unknown, defaulting to 1000 [ 312.170932][T12555] lo speed is unknown, defaulting to 1000 [ 312.342179][T12560] openvswitch: netlink: Flow key attr not present in new flow. [ 312.567096][T12583] netlink: 'syz.2.1616': attribute type 16 has an invalid length. [ 312.834347][T12577] wg1 speed is unknown, defaulting to 1000 [ 312.920845][T12577] lo speed is unknown, defaulting to 1000 [ 313.174370][T12615] wg1 speed is unknown, defaulting to 1000 [ 313.186553][T12615] lo speed is unknown, defaulting to 1000 [ 313.248699][T12617] wg1 speed is unknown, defaulting to 1000 [ 313.257470][T12617] lo speed is unknown, defaulting to 1000 [ 313.654164][T12629] sctp: [Deprecated]: syz.0.1624 (pid 12629) Use of int in max_burst socket option. [ 313.654164][T12629] Use struct sctp_assoc_value instead [ 313.710187][T12631] netlink: 'syz.3.1625': attribute type 10 has an invalid length. [ 313.830405][T12631] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 313.941108][T12640] ipvlan0: mtu less than device minimum [ 314.363631][T12670] delete_channel: no stack [ 314.711187][T12679] syzkaller0: entered promiscuous mode [ 314.720347][T12679] syzkaller0: entered allmulticast mode [ 314.724958][T12685] netlink: 'syz.1.1638': attribute type 1 has an invalid length. [ 315.189465][T12715] __nla_validate_parse: 41 callbacks suppressed [ 315.189489][T12715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1641'. [ 315.253725][T12718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1644'. [ 315.476198][T12724] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1645'. [ 315.818291][T12728] netlink: 'syz.1.1646': attribute type 1 has an invalid length. [ 315.828020][T12728] netlink: 17231 bytes leftover after parsing attributes in process `syz.1.1646'. [ 317.024245][T12722] wg1 speed is unknown, defaulting to 1000 [ 317.041494][T12722] lo speed is unknown, defaulting to 1000 [ 317.206137][T12732] wg1 speed is unknown, defaulting to 1000 [ 317.213918][T12732] lo speed is unknown, defaulting to 1000 [ 317.223365][T12737] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 317.263437][T12737] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1650'. [ 317.553771][T12744] tipc: Enabled bearer , priority 0 [ 317.563327][T12747] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1653'. [ 317.581282][T12744] syzkaller0: entered promiscuous mode [ 317.587604][T12744] syzkaller0: entered allmulticast mode [ 317.678380][T12743] tipc: Resetting bearer [ 317.716524][T12743] tipc: Disabling bearer [ 317.952134][T12762] netlink: 'syz.3.1658': attribute type 10 has an invalid length. [ 318.313843][T12778] wg1 speed is unknown, defaulting to 1000 [ 318.322515][T12778] lo speed is unknown, defaulting to 1000 [ 319.150324][T12819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1673'. [ 319.181499][T12819] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1673'. [ 319.192138][T12819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1673'. [ 319.224960][T12819] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1673'. [ 319.266079][T12818] wg1 speed is unknown, defaulting to 1000 [ 319.274291][T12818] lo speed is unknown, defaulting to 1000 [ 319.352594][T12822] bond0: (slave bridge0): Releasing backup interface [ 319.387237][T12830] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.394600][T12830] IPv6: NLM_F_CREATE should be set when creating new route [ 319.401882][T12830] IPv6: NLM_F_CREATE should be set when creating new route [ 319.447904][T12822] bridge_slave_0: left promiscuous mode [ 319.455595][T12822] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.470806][T12822] bond0: (slave bond_slave_0): Releasing backup interface [ 319.487575][T12822] bond0: (slave bond_slave_1): Releasing backup interface [ 319.500665][T12822] team0: Port device team_slave_0 removed [ 319.511937][T12822] team0: Port device team_slave_1 removed [ 319.518383][T12822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.526616][T12822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.534426][T12822] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 320.661518][T12883] __nla_validate_parse: 1 callbacks suppressed [ 320.661540][T12883] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1693'. [ 320.717069][T12889] bond0: (slave wlan1): Releasing backup interface [ 320.918508][T12905] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1698'. [ 320.964467][T12902] dvmrp1: entered allmulticast mode [ 321.128357][T12905] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.138171][T12919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1701'. [ 321.147165][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1700'. [ 321.150262][T12905] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.217929][T12916] bridge4: port 1(macvlan3) entered blocking state [ 321.224849][T12916] bridge4: port 1(macvlan3) entered disabled state [ 321.231908][T12916] macvlan3: entered allmulticast mode [ 321.245789][T12916] macvlan3: entered promiscuous mode [ 321.349738][T12905] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.364111][T12928] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1703'. [ 321.373720][T12905] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.512293][T12905] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.553980][T12905] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.605184][T12943] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1708'. [ 321.717112][T12942] netlink: 'syz.2.1706': attribute type 10 has an invalid length. [ 321.737234][T12951] netlink: 'syz.4.1709': attribute type 4 has an invalid length. [ 321.749914][T12905] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.761940][T12905] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.781144][T12931] wg1 speed is unknown, defaulting to 1000 [ 321.803748][T12931] lo speed is unknown, defaulting to 1000 [ 322.089016][T12968] netlink: 'syz.3.1713': attribute type 2 has an invalid length. [ 322.151711][ T66] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.164648][ T66] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.199385][ T66] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.211836][ T66] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.235977][ T66] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.244408][ T66] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.256932][T12973] netlink: 'syz.4.1715': attribute type 4 has an invalid length. [ 322.269763][T12971] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1714'. [ 322.285788][T12978] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1714'. [ 322.344247][ T66] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.358695][ T66] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.374349][T12980] IPVS: set_ctl: invalid protocol: 31 10.1.1.2:20002 [ 322.395305][T12986] netlink: 'syz.2.1718': attribute type 1 has an invalid length. [ 322.448368][T12986] bond6: entered promiscuous mode [ 322.453953][T12986] 8021q: adding VLAN 0 to HW filter on device bond6 [ 322.512368][T12990] 8021q: adding VLAN 0 to HW filter on device bond6 [ 322.525129][T12990] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 322.535915][T12990] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 322.553036][T12990] bond6: (slave wireguard0): making interface the new active one [ 322.564092][T12990] wireguard0: entered promiscuous mode [ 322.564440][T13002] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 322.573050][T12990] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 322.618683][T12986] bond6: (slave wireguard1): The slave device specified does not support setting the MAC address [ 322.637744][T12986] bond6: (slave wireguard1): Enslaving as a backup interface with an up link [ 322.684276][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.071802][T12997] wg1 speed is unknown, defaulting to 1000 [ 323.106429][T12997] lo speed is unknown, defaulting to 1000 [ 323.294013][T13032] netlink: 'syz.4.1726': attribute type 11 has an invalid length. [ 323.473746][T13038] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1729'. [ 323.633069][T13044] sch_fq: defrate 0 ignored. [ 323.809138][T13062] wg1 speed is unknown, defaulting to 1000 [ 323.818010][T13062] lo speed is unknown, defaulting to 1000 [ 323.892424][T13066] netlink: 'syz.4.1737': attribute type 16 has an invalid length. [ 323.900473][T13060] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 324.152816][T13079] tipc: Enabled bearer , priority 0 [ 324.196263][T13079] syzkaller0: entered promiscuous mode [ 324.201996][T13079] syzkaller0: entered allmulticast mode [ 324.219777][T13085] netlink: 'syz.1.1742': attribute type 1 has an invalid length. [ 324.220511][T13081] syzkaller1: entered promiscuous mode [ 324.235451][T13081] syzkaller1: entered allmulticast mode [ 324.290723][T13085] 8021q: adding VLAN 0 to HW filter on device bond10 [ 324.355883][T13091] tipc: Resetting bearer [ 324.388777][T13085] bond10: (slave gretap1): making interface the new active one [ 324.411492][T13085] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 324.458328][T13078] tipc: Resetting bearer [ 324.509008][T13078] tipc: Disabling bearer [ 324.772163][T13112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1748'. [ 325.259383][T13148] wg1 speed is unknown, defaulting to 1000 [ 325.283912][T13148] lo speed is unknown, defaulting to 1000 [ 325.446627][T13154] netlink: 'syz.3.1760': attribute type 3 has an invalid length. [ 325.475382][T13160] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 326.895100][T13215] __nla_validate_parse: 7 callbacks suppressed [ 326.895122][T13215] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1775'. [ 329.000800][T13227] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1779'. [ 329.041510][T13228] wg1 speed is unknown, defaulting to 1000 [ 329.066099][T13228] lo speed is unknown, defaulting to 1000 [ 329.153292][T13235] netlink: 'syz.1.1777': attribute type 1 has an invalid length. [ 329.162025][T13235] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1777'. [ 329.322189][T13240] tipc: Enabled bearer , priority 0 [ 329.333765][T13240] tipc: Resetting bearer [ 329.459862][T13239] tipc: Disabling bearer [ 329.553425][T13247] wg1 speed is unknown, defaulting to 1000 [ 329.596701][T13247] lo speed is unknown, defaulting to 1000 [ 329.816567][T13250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1786'. [ 330.241847][T13294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1797'. [ 330.433068][T13300] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 330.606348][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1803'. [ 330.616895][T13313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1803'. [ 330.621048][T13307] veth7: entered promiscuous mode [ 330.626822][T13313] netlink: 'syz.3.1803': attribute type 13 has an invalid length. [ 330.890864][T13322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1805'. [ 330.924254][T13326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1807'. [ 331.108471][T13328] veth0: entered promiscuous mode [ 331.114146][T13332] netlink: 'syz.1.1809': attribute type 4 has an invalid length. [ 331.123269][T13323] veth0: left promiscuous mode [ 331.129436][T13337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1810'. [ 331.779730][T13379] netlink: 'syz.2.1821': attribute type 1 has an invalid length. [ 332.689627][T13428] __nla_validate_parse: 8 callbacks suppressed [ 332.689651][T13428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1835'. [ 332.769555][T13433] tipc: Enabled bearer , priority 0 [ 332.785540][T13428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1835'. [ 332.814606][T13428] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1835'. [ 332.837993][T13428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1835'. [ 332.850476][T13428] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1835'. [ 332.859776][T13428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1835'. [ 332.898787][T13433] syzkaller0: entered promiscuous mode [ 332.904351][T13433] syzkaller0: entered allmulticast mode [ 332.910586][T13433] tipc: Resetting bearer [ 332.929656][T13432] tipc: Resetting bearer [ 333.104144][T13450] tipc: Can't bind to reserved service type 1 [ 333.429178][T13462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1842'. [ 334.655721][T13432] tipc: Disabling bearer [ 334.920861][T13466] wg1 speed is unknown, defaulting to 1000 [ 334.951846][T13472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1847'. [ 334.958445][T13466] lo speed is unknown, defaulting to 1000 [ 334.992318][T13472] vlan0: entered promiscuous mode [ 335.004033][T13472] bond0: entered promiscuous mode [ 335.224128][T13483] netlink: 'syz.1.1851': attribute type 21 has an invalid length. [ 335.248767][T13483] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1851'. [ 335.403622][T13486] wg1 speed is unknown, defaulting to 1000 [ 335.457038][T13486] lo speed is unknown, defaulting to 1000 [ 335.792896][T13495] wg1 speed is unknown, defaulting to 1000 [ 335.835951][T13495] lo speed is unknown, defaulting to 1000 [ 336.142637][T13513] wg1 speed is unknown, defaulting to 1000 [ 336.192298][T13513] lo speed is unknown, defaulting to 1000 [ 336.604190][T13535] netlink: 'syz.3.1865': attribute type 10 has an invalid length. [ 336.928792][T13535] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 337.405129][T13547] netlink: 'syz.2.1867': attribute type 276 has an invalid length. [ 337.680593][T13566] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1873'. [ 337.802436][T13572] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1874'. [ 338.349763][T13602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1884'. [ 338.590647][T13608] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 338.717650][T13619] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1887'. [ 339.441020][T13655] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1897'. [ 339.692885][T13670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1900'. [ 339.703970][T13668] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1899'. [ 339.735581][T13660] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.748015][T13673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1900'. [ 339.767780][T13660] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.813155][T13675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1900'. [ 339.823113][T13675] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1900'. [ 339.927484][T13670] bridge5: entered allmulticast mode [ 340.033203][T13660] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.057481][T13660] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.120343][T13678] dvmrp1: entered allmulticast mode [ 340.163979][T13660] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.182342][T13660] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.222999][T13687] netlink: 'syz.1.1905': attribute type 1 has an invalid length. [ 340.293283][T13678] wg1 speed is unknown, defaulting to 1000 [ 340.303799][T13660] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.318576][T13660] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.350225][T13690] bond11: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 340.365325][T13678] lo speed is unknown, defaulting to 1000 [ 340.398967][T13687] veth9: entered promiscuous mode [ 340.408085][T13687] bond11: (slave veth9): Enslaving as a backup interface with a down link [ 340.608748][T13700] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1908'. [ 340.635038][ T1163] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.644056][ T1163] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.652926][ T1163] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.661735][ T1163] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.690838][T13703] netlink: 'syz.3.1909': attribute type 15 has an invalid length. [ 340.708752][T13704] netlink: 'syz.3.1909': attribute type 15 has an invalid length. [ 340.912113][ T6096] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.925942][ T6096] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.004235][ T66] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.016150][ T66] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.069139][T13726] netlink: 'syz.1.1914': attribute type 11 has an invalid length. [ 341.244912][T13729] netlink: 'syz.0.1915': attribute type 1 has an invalid length. [ 341.472380][T13734] netlink: 'syz.1.1917': attribute type 5 has an invalid length. [ 343.547591][T13762] netlink: 'syz.1.1924': attribute type 6 has an invalid length. [ 343.810716][T13780] netlink: 'syz.3.1926': attribute type 21 has an invalid length. [ 343.927241][T13780] __nla_validate_parse: 7 callbacks suppressed [ 343.927265][T13780] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1926'. [ 343.947994][T13780] netlink: 'syz.3.1926': attribute type 1 has an invalid length. [ 343.959015][T13784] @ÿ: renamed from veth0_vlan [ 344.156696][T13797] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1936'. [ 344.363240][T13813] wg1 speed is unknown, defaulting to 1000 [ 344.375824][T13813] lo speed is unknown, defaulting to 1000 [ 344.411552][T13819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1942'. [ 344.473438][T13818] netlink: 'syz.2.1942': attribute type 1 has an invalid length. [ 344.488237][T13821] netlink: 'syz.2.1942': attribute type 1 has an invalid length. [ 344.527424][T13819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1942'. [ 344.546450][T13818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1942'. [ 344.910584][T13813] IPVS: You probably need to specify IP address on multicast interface. [ 344.920252][T13813] IPVS: Error connecting to the multicast addr [ 345.060528][T13845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1948'. [ 345.607641][T13864] wg1 speed is unknown, defaulting to 1000 [ 345.643069][T13864] lo speed is unknown, defaulting to 1000 [ 345.853014][T13876] validate_nla: 2 callbacks suppressed [ 345.853037][T13876] netlink: 'syz.3.1958': attribute type 1 has an invalid length. [ 346.375612][ T30] audit: type=1800 audit(1759590714.544:2): pid=13875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1957" name="memory.events" dev="tmpfs" ino=1938 res=0 errno=0 [ 346.407392][T13900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1963'. [ 346.479591][T13903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1963'. [ 346.536529][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1965'. [ 346.549560][T13906] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1964'. [ 346.563328][T13904] openvswitch: netlink: Message has 398 unknown bytes. [ 346.572293][T13905] openvswitch: netlink: Message has 398 unknown bytes. [ 346.841576][T13920] ieee802154 phy1 wpan1: encryption failed: -90 [ 346.861060][T13915] dvmrp0: left allmulticast mode [ 346.873756][T13915] dvmrp1: left allmulticast mode [ 347.235248][T13937] wg1 speed is unknown, defaulting to 1000 [ 347.243483][T13937] wg1 speed is unknown, defaulting to 1000 [ 347.250580][T13937] wg1 speed is unknown, defaulting to 1000 [ 347.268178][T13937] infiniband syz!: RDMA CMA: cma_listen_on_dev, error -98 [ 347.304153][T13937] wg1 speed is unknown, defaulting to 1000 [ 347.320367][T13937] wg1 speed is unknown, defaulting to 1000 [ 347.328317][T13936] wg1 speed is unknown, defaulting to 1000 [ 347.338383][T13937] wg1 speed is unknown, defaulting to 1000 [ 347.347417][T13936] lo speed is unknown, defaulting to 1000 [ 347.359316][T13937] wg1 speed is unknown, defaulting to 1000 [ 347.388318][T13937] wg1 speed is unknown, defaulting to 1000 [ 347.409207][T13936] wg1 speed is unknown, defaulting to 1000 [ 348.092397][T13969] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 348.597522][T14001] netlink: 'syz.4.1990': attribute type 12 has an invalid length. [ 348.948574][T14019] __nla_validate_parse: 6 callbacks suppressed [ 348.948596][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1995'. [ 348.969234][T14022] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1997'. [ 349.139655][T14036] wg1 speed is unknown, defaulting to 1000 [ 349.151260][T14036] lo speed is unknown, defaulting to 1000 [ 349.182105][T14036] wg1 speed is unknown, defaulting to 1000 [ 349.191713][T14041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2001'. [ 350.198888][T14070] syzkaller1: entered promiscuous mode [ 350.210813][T14070] syzkaller1: entered allmulticast mode [ 350.369207][T14073] wg1 speed is unknown, defaulting to 1000 [ 350.379239][T14081] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2014'. [ 350.410513][T14073] lo speed is unknown, defaulting to 1000 [ 350.426628][T14080] ieee802154 phy1 wpan1: encryption failed: -22 [ 350.482228][T14073] wg1 speed is unknown, defaulting to 1000 [ 351.012879][T14102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2018'. [ 351.024992][T14099] ------------[ cut here ]------------ [ 351.030513][T14099] ida_free called for id=2124 which is not allocated. [ 351.089915][T14099] WARNING: CPU: 0 PID: 14099 at lib/idr.c:592 ida_free+0x280/0x310 [ 351.098479][T14099] Modules linked in: [ 351.102469][T14099] CPU: 0 UID: 0 PID: 14099 Comm: syz.4.2019 Not tainted syzkaller #0 PREEMPT(full) [ 351.111960][T14099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 351.122144][T14099] RIP: 0010:ida_free+0x280/0x310 [ 351.127349][T14099] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 81 2c 0c 00 90 48 c7 c7 20 27 74 8c 44 89 fe e8 91 1c 59 f6 90 <0f> 0b 90 90 eb 34 e8 75 ae 95 f6 49 bd 00 00 00 00 00 fc ff df eb [ 351.127579][T14105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2018'. [ 351.147135][T14099] RSP: 0018:ffffc9000b3b7880 EFLAGS: 00010246 [ 351.147169][T14099] RAX: 74bba1df4dd9cd00 RBX: 0000000000000a06 RCX: ffff888030211e40 [ 351.147186][T14099] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 351.147199][T14099] RBP: ffffc9000b3b7968 R08: 0000000000000003 R09: 0000000000000004 [ 351.147215][T14099] R10: dffffc0000000000 R11: fffffbfff1b7a118 R12: 1ffff92001676f14 [ 351.147232][T14099] R13: dffffc0000000000 R14: ffff888020afa900 R15: 000000000000084c [ 351.147249][T14099] FS: 0000000000000000(0000) GS:ffff88812639b000(0000) knlGS:0000000000000000 [ 351.147266][T14099] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 351.147282][T14099] CR2: 00007f5a78fa2d58 CR3: 0000000051408000 CR4: 00000000003526f0 [ 351.147302][T14099] Call Trace: [ 351.147315][T14099] [ 351.147332][T14099] ? __pfx_ida_free+0x10/0x10 [ 351.147366][T14099] ? namespace_unlock+0x486/0x760 [ 351.147403][T14099] free_mnt_ns+0x52/0xe0 [ 351.147427][T14099] namespace_unlock+0x529/0x760 [ 351.147461][T14099] ? __pfx_namespace_unlock+0x10/0x10 [ 351.147497][T14099] ? free_nsproxy+0x3e/0x350 [ 351.147525][T14099] free_nsproxy+0x3e/0x350 [ 351.147550][T14099] do_exit+0x6b0/0x2300 [ 351.147591][T14099] ? cgroup_freezing+0x20/0x350 [ 351.147626][T14099] ? __pfx_do_exit+0x10/0x10 [ 351.147669][T14099] ? cgroup_freezing+0x20/0x350 [ 351.147699][T14099] ? cgroup_freezing+0x20/0x350 [ 351.147742][T14099] do_group_exit+0x21c/0x2d0 [ 351.147774][T14099] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.147815][T14099] get_signal+0x1285/0x1340 [ 351.147860][T14099] arch_do_signal_or_restart+0xa0/0x790 [ 351.147898][T14099] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 351.147934][T14099] ? ksys_unshare+0x7b7/0x8c0 [ 351.147978][T14099] ? exit_to_user_mode_loop+0x40/0x110 [ 351.148018][T14099] exit_to_user_mode_loop+0x72/0x110 [ 351.334494][T14099] do_syscall_64+0x2bd/0x3b0 [ 351.339200][T14099] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.344457][T14099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.350638][T14099] ? clear_bhb_loop+0x60/0xb0 [ 351.355417][T14099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.361397][T14099] RIP: 0033:0x7faaa7d8eec9 [ 351.365913][T14099] Code: Unable to access opcode bytes at 0x7faaa7d8ee9f. [ 351.372966][T14099] RSP: 002b:00007faaa8cd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 351.381498][T14099] RAX: fffffffffffffff4 RBX: 00007faaa7fe5fa0 RCX: 00007faaa7d8eec9 [ 351.389553][T14099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002020400 [ 351.397781][T14099] RBP: 00007faaa7e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 351.405838][T14099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.413860][T14099] R13: 00007faaa7fe6038 R14: 00007faaa7fe5fa0 R15: 00007ffcc6c39f98 [ 351.421960][T14099] [ 351.425078][T14099] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 351.432391][T14099] CPU: 0 UID: 0 PID: 14099 Comm: syz.4.2019 Not tainted syzkaller #0 PREEMPT(full) [ 351.441797][T14099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 351.452066][T14099] Call Trace: [ 351.455385][T14099] [ 351.458355][T14099] dump_stack_lvl+0x99/0x250 [ 351.462998][T14099] ? __asan_memcpy+0x40/0x70 [ 351.467650][T14099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.472901][T14099] ? __pfx__printk+0x10/0x10 [ 351.477609][T14099] vpanic+0x281/0x750 [ 351.481642][T14099] ? __pfx__printk+0x10/0x10 [ 351.486276][T14099] ? __pfx_vpanic+0x10/0x10 [ 351.490802][T14099] ? is_bpf_text_address+0x26/0x2b0 [ 351.496035][T14099] panic+0xb9/0xc0 [ 351.499786][T14099] ? __pfx_panic+0x10/0x10 [ 351.504255][T14099] __warn+0x31b/0x4b0 [ 351.508252][T14099] ? ida_free+0x280/0x310 [ 351.512595][T14099] ? ida_free+0x280/0x310 [ 351.516934][T14099] report_bug+0x2be/0x4f0 [ 351.521274][T14099] ? ida_free+0x280/0x310 [ 351.525615][T14099] ? ida_free+0x280/0x310 [ 351.530044][T14099] ? ida_free+0x282/0x310 [ 351.534420][T14099] handle_bug+0x84/0x160 [ 351.538691][T14099] exc_invalid_op+0x1a/0x50 [ 351.543248][T14099] asm_exc_invalid_op+0x1a/0x20 [ 351.548245][T14099] RIP: 0010:ida_free+0x280/0x310 [ 351.553246][T14099] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 81 2c 0c 00 90 48 c7 c7 20 27 74 8c 44 89 fe e8 91 1c 59 f6 90 <0f> 0b 90 90 eb 34 e8 75 ae 95 f6 49 bd 00 00 00 00 00 fc ff df eb [ 351.572884][T14099] RSP: 0018:ffffc9000b3b7880 EFLAGS: 00010246 [ 351.578986][T14099] RAX: 74bba1df4dd9cd00 RBX: 0000000000000a06 RCX: ffff888030211e40 [ 351.587004][T14099] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 351.595081][T14099] RBP: ffffc9000b3b7968 R08: 0000000000000003 R09: 0000000000000004 [ 351.603081][T14099] R10: dffffc0000000000 R11: fffffbfff1b7a118 R12: 1ffff92001676f14 [ 351.611084][T14099] R13: dffffc0000000000 R14: ffff888020afa900 R15: 000000000000084c [ 351.619120][T14099] ? __pfx_ida_free+0x10/0x10 [ 351.623833][T14099] ? namespace_unlock+0x486/0x760 [ 351.628893][T14099] free_mnt_ns+0x52/0xe0 [ 351.633159][T14099] namespace_unlock+0x529/0x760 [ 351.638033][T14099] ? __pfx_namespace_unlock+0x10/0x10 [ 351.643438][T14099] ? free_nsproxy+0x3e/0x350 [ 351.648051][T14099] free_nsproxy+0x3e/0x350 [ 351.652575][T14099] do_exit+0x6b0/0x2300 [ 351.656767][T14099] ? cgroup_freezing+0x20/0x350 [ 351.661660][T14099] ? __pfx_do_exit+0x10/0x10 [ 351.666288][T14099] ? cgroup_freezing+0x20/0x350 [ 351.671249][T14099] ? cgroup_freezing+0x20/0x350 [ 351.676132][T14099] do_group_exit+0x21c/0x2d0 [ 351.680749][T14099] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.685987][T14099] get_signal+0x1285/0x1340 [ 351.690523][T14099] arch_do_signal_or_restart+0xa0/0x790 [ 351.696098][T14099] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 351.702281][T14099] ? ksys_unshare+0x7b7/0x8c0 [ 351.706996][T14099] ? exit_to_user_mode_loop+0x40/0x110 [ 351.712493][T14099] exit_to_user_mode_loop+0x72/0x110 [ 351.717808][T14099] do_syscall_64+0x2bd/0x3b0 [ 351.722447][T14099] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.727674][T14099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.733758][T14099] ? clear_bhb_loop+0x60/0xb0 [ 351.738458][T14099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.744455][T14099] RIP: 0033:0x7faaa7d8eec9 [ 351.748888][T14099] Code: Unable to access opcode bytes at 0x7faaa7d8ee9f. [ 351.756047][T14099] RSP: 002b:00007faaa8cd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 351.764487][T14099] RAX: fffffffffffffff4 RBX: 00007faaa7fe5fa0 RCX: 00007faaa7d8eec9 [ 351.772538][T14099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002020400 [ 351.780544][T14099] RBP: 00007faaa7e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 351.788547][T14099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.796550][T14099] R13: 00007faaa7fe6038 R14: 00007faaa7fe5fa0 R15: 00007ffcc6c39f98 [ 351.804836][T14099] [ 351.808259][T14099] Kernel Offset: disabled [ 351.812603][T14099] Rebooting in 86400 seconds..