last executing test programs: 5.554239048s ago: executing program 4 (id=4751): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x10) ioctl(r1, 0x1, &(0x7f0000000280)="f4b35d61be48743f2a1f4ff97fe199274e7716389c7aa4ad0b9ffe8ceac16ef5af1c24df8b65af0cd83aafec3a7ef8646c5795c7d9149e189bb3bd762e7144b128cd0c3c00159b25601321772fbbcdb59f8261177c27d6ee963b26a9da9a45291c6e2355f255e732d713e06094fb13d60155bbdb0a79933aded75d391dd8435fd9aabc97") r3 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fecff6a9250000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r3, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x673}, {{0x0, 0x0, 0x0}, 0x7ff}], 0x2, 0x40010142, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000a00851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000340)={0xfff8, 0xfffd, 0xa0, 0xffff}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) close(0x3) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000802000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000004f881431b678380e"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000200)=ANY=[@ANYRESHEX=r8, @ANYRESOCT=0x0], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) sendmmsg$inet(r7, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}], 0x1, 0x4004000) setsockopt(r7, 0x84, 0x7d, 0x0, 0x0) 5.238230391s ago: executing program 4 (id=4752): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="84010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058"], 0x184}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f00000000c0)={@empty, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x8) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r6) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)={0x14, r7, 0xba87317d461c07c9, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x74, r7, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x20}]}, 0x74}, 0x1, 0x0, 0x0, 0x8005}, 0xc000) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x30b, 0x5, 0x8, 0x7, 0x2e, @broadcast}, 0x10) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r9, @ANYRES32=r9, @ANYBLOB='/\x00\x00', @ANYRES32, @ANYBLOB="ae556f0f6428154a12197317f04771dd97daa83dc9a952943cef7c741828f84666fe983640d15a7b5e3ed566bf5628f0", @ANYRES64=r10], 0x20) 4.766517789s ago: executing program 4 (id=4753): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1900000000000300000000000000528d47917f00150000000000002288b449c7c35c1f1b100c701eee52eed542fdf2e291daaa155e7a142ce9166bd26f285acf03dac57fafbfcfbeb829", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) recvmsg$kcm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)}, 0x2003) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) close(0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) write(r1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x81, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) socket(0x1, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00a00b0000000000000000000000000000001a4db3ef2e2700fd0000"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4000000) 4.622696222s ago: executing program 3 (id=4755): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x20075, r4}, 0x38) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r7, &(0x7f0000000140)="7755109f00000000ff609cf9b7", 0xd) splice(r7, &(0x7f0000000040)=0x8, r6, 0x0, 0x6, 0x8) vmsplice(r5, &(0x7f0000000100)=[{&(0x7f0000000340)="6af2", 0x2}], 0x1, 0x8) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="e0ffffffffffffff300012800900b918766c616e00000000200002800c0002001e0000000f00000006000100fe0f00060600050088a80000080005000d14b71e24f52201b305f7cc3a6f9a498d568da1813608b0369f74cd57ed86730754d82529c2abd0df88b5ecfd89c439fd8b22c77ed9e2608797e240d68f060c4002cd94f6196b52fca5", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0500000000000000000001000000000000000c4100000014001462726f61c4c1d0f3c72a2b519c31646361"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c010380400000800800034000000002340002803000028008000180fffffffd0900020073797a310000000008000340000000000800034000f4ffff070003"], 0x1ec}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="00000000c237aaf5013d38eb6febb7cd4bc6ffc70b772021ac4f6ade30f1ee7b60", @ANYRES16=0x0, @ANYBLOB="000000000000000000003f0000000c009900000000000000000044005e8008000500000000000800030000000000080009000000000010000100000000000000000000000000080007000000000008000100010000000800070000000000"], 0x64}}, 0x0) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), 0xffffffffffffffff) 4.258915137s ago: executing program 3 (id=4757): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f1ea3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b2213fdc2881e1a6ec9d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232f0485a2ca9f37fc9c3d2688efcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdcdeb2af1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f925f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5c49209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378ad8f6afb0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3826ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="84010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058"], 0x184}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f00000000c0)={@empty, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x8) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r6) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)={0x14, r7, 0xba87317d461c07c9, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x74, r7, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x20}]}, 0x74}, 0x1, 0x0, 0x0, 0x8005}, 0xc000) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 4.012193985s ago: executing program 3 (id=4760): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r1}, 0x18) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21, 0x31863}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x44040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r6, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfe}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) 3.924547818s ago: executing program 4 (id=4761): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)={@multicast2, @multicast2, 0x0, 0x8, [@remote, @multicast1, @local, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast2, @local]}, 0x30) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @broadcast}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)}, 0x0) unshare(0x28040680) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f00000000c0)=0xfffffffffffffffd, 0x12) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) select(0x40, &(0x7f0000000000)={0x0, 0x5, 0x2, 0x81, 0x80, 0xd0f3, 0xe5d5, 0x9}, 0x0, &(0x7f0000000140)={0x69f, 0xfffffffffffffffc, 0x3ff, 0x2, 0x7ff, 0xc1, 0x101, 0x8001}, &(0x7f0000000200)) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x41) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000104008000"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="274d107749f17dff"], 0x48}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001"], 0x14b0}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000030601010000000000000000090000000500010095ef0000a584d0b45cc1646034649661fa96b70963f3621417e9869db66e3700e94c4194"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 3.583366146s ago: executing program 4 (id=4763): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000700)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000a80)=[@hoplimit={{0x14, 0x29, 0x34, 0x7f}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xbf}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1c}}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffc00}}], 0x88}}], 0x2, 0x2400c044) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480), 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000002040)={0x60, r7, 0x1, 0x200000, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd08}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, 0x0, &(0x7f0000000680)='GPL\x00', 0x80000, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0), 0x10, 0x5}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r8, 0x0, 0x4010) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) 3.513749159s ago: executing program 3 (id=4764): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="84010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058"], 0x184}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f00000000c0)={@empty, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x8) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r6) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)={0x14, r7, 0xba87317d461c07c9, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x74, r7, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x20}]}, 0x74}, 0x1, 0x0, 0x0, 0x8005}, 0xc000) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet(0x2, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x30b, 0x5, 0x8, 0x7, 0x2e, @broadcast}, 0x10) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r9, @ANYRES32=r9, @ANYBLOB='/\x00\x00', @ANYRES32, @ANYBLOB="ae556f0f6428154a12197317f04771dd97daa83dc9a952943cef7c741828f84666fe983640d15a7b5e3ed566bf5628f0", @ANYRES64=r10], 0x20) 3.057192317s ago: executing program 3 (id=4766): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000040)=0x9eb6, 0x4) bind$inet6(r1, &(0x7f0000f65000)={0xa, 0x4e20, 0x8001, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x5eff}, 0x1c) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.time\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) socket(0x22, 0x80008, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffd, 0x7fe2, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={r4, &(0x7f0000000180), 0x0}, 0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r5, 0x0, 0xfe9d) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x1, 0x1, 0x503, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xee4c}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x94}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x200}]}, 0x60}, 0x1, 0x0, 0x0, 0xa70544c2eb05d73b}, 0x80) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020301020000e6ffffffffffffff00100800010001000000"], 0x1c}}, 0x40) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2721, 0x0, &(0x7f00000000c0)) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) 2.816591313s ago: executing program 2 (id=4768): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0xd}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={r3, 0x1, 0x10, 0xfff, 0x55b}, &(0x7f00000000c0)=0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x9, [@float={0x7, 0x0, 0x0, 0x10, 0x4}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x1, 0x5}, {0x2, 0x3}, {0x3, 0x3}, {0x2, 0x5}, {0x1, 0x3}, {0x2, 0x5}, {0xc, 0x4}, {0x2, 0x2}]}]}, {0x0, [0x30, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x30]}}, &(0x7f00000001c0)=""/189, 0x79, 0xbd, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x5, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000a40)='syzkaller\x00', 0x8, 0x85, &(0x7f0000000a80)=""/133, 0x41100, 0x65, '\x00', r4, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x2, 0x1, 0xe, 0x3}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5, 0x0, 0x4}, 0x18) unshare(0x2a020400) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r6}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x1df3, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000003500)=[{0x0}, {0x0}, {0x0}], 0x3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, 0x0, &(0x7f0000000580)='%pK \x00'}, 0x20) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x64000041}, 0x44885) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f00000009c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x4048000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r9, 0x9c3fa077fa966179, 0x70bd29, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) 2.461109779s ago: executing program 2 (id=4771): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) sendmsg$rds(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4090, 0xffa}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x1010, r3, 0x0) epoll_create1(0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000940), 0x10) close(0x3) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) close(0x3) 2.29950694s ago: executing program 0 (id=4773): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000a000000080000000201000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000300), 0x0}, 0x20) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r4, 0x204) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0c010700000800ff020000000000000000000000000004fc0200000600d9a551f20000000000004d859401fe880000000000000000000000000101fc000000cafe9ae671e02b9b44c1f4fd103f000000000000000000000000000000080000000100000000000000"], 0x68) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000d00000000000000000000008500000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r8, 0x40047451, 0x0) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, 0x0) pwritev(r8, &(0x7f0000000080)=[{&(0x7f0000000240)="00214717a70700000000030640710a069d317ebbaaa6721d5874", 0x1a}], 0x1, 0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r7, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000022c0)={0x40, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2fdb}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0xfff, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000902b7596a7c39d230000000000180100002078316e00000000222020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r10, 0x29, 0xc8, 0x0, 0xc000000) 2.218533941s ago: executing program 1 (id=4774): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r1}, 0x18) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21, 0x31863}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x44040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r6, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfe}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) 2.138212537s ago: executing program 3 (id=4775): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000700)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000a80)=[@hoplimit={{0x14, 0x29, 0x34, 0x7f}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xbf}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1c}}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffc00}}], 0x88}}], 0x2, 0x2400c044) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480), 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000002040)={0x60, r7, 0x1, 0x200000, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd08}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, 0x0, &(0x7f0000000680)='GPL\x00', 0x80000, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0), 0x10, 0x5}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r8, 0x0, 0x4010) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) 2.014572004s ago: executing program 0 (id=4776): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f1c2725e7", 0x5}], 0x2}, 0x4000000) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)=0x1) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x40}}, 0x4040010) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001a40)) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) vmsplice(r6, &(0x7f00000019c0)=[{&(0x7f0000001a00)="ce", 0x1}], 0x1, 0x1) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) accept4(r8, 0x0, 0x0, 0x0) splice(r5, 0x0, r5, 0x0, 0x4, 0xe) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x101}}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000002d40)={'batadv_slave_1\x00'}) connect$tipc(r5, &(0x7f0000000200)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x4}}, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003500), r0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r11) sendmsg$NL80211_CMD_DEL_STATION(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="55c025bd7000fcdbdf251400000008000300", @ANYRES32, @ANYBLOB="0600360080000000050029000c"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYRES32=r4, @ANYRES32, @ANYBLOB="08005700510500000800570014000000"], 0x2c}}, 0x4040007) r13 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r13, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002300)=""/174, 0xae}, 0x6}], 0x1, 0x2, 0x0) 1.915069177s ago: executing program 1 (id=4777): socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x2) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3b000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000780000c6091ee60e459b91ce74e42db323105ce6619e78ac0df0f77ff65e894c61d644d8e8eba02aef0276e0ccc5f0404f00749374d76a7d4bc2b2676d023892a097e1069afecb0af339b9c1910e4d86d9ae8565c1a99fbc6609f49c466d301b9ab0a94f1164e7002316c5e966c184"], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000900)=ANY=[@ANYRES8=r1, @ANYBLOB="e23e8202da712f221f10bd38fcf6dc9cac2a09000000c677b1f647f864c0c259fd449a6232b39f0a0caeaf0514a928d5aa08f7b1b584bff1c41d7fe92296860bc430d1c94f6286bcb43611b1f64426a2928a7425e73bbf6a61c9bb201170026b7687608a0e6b21a9be18e1a01bba296156d606"], 0x8) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7010040000000500000006000100050000000800090002000000080001000000000008000c00021193cb3fe8d068c0be1d8adcebc38900001040e3b6c4eb269fec98003ead35186a05f4bc0f1c67cbd9ca36fb1fe9"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}, 0xffc0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYRES8=r2], 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000040), &(0x7f0000000080)=r9}, 0x73) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1f000000250000000a0000000700000000000000", @ANYRES32=r8, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/27], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r10, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r7}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r11, &(0x7f00000001c0), 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000003000900000000060015000400000014001680100008800c00038008000a"], 0x38}}, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r13 = accept4(r12, 0x0, 0x0, 0x0) recvmmsg(r13, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001d00)=""/1, 0x1}], 0x1}, 0xc}], 0x1, 0x10002, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES64=r4, @ANYBLOB="bcc7505e949320684d54dac56a857c103aef7ed0980075502e57028ef6f11a40593f41ad0ec0d8a22c9aca19"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000500)=ANY=[], 0x30}}, 0x20000000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r14], 0x1c}, 0x1, 0x0, 0x0, 0xc004050}, 0x0) 1.70829694s ago: executing program 1 (id=4778): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r5, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 1.46294829s ago: executing program 2 (id=4779): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="84010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058"], 0x184}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f00000000c0)={@empty, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x8) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r6) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)={0x14, r7, 0xba87317d461c07c9, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x74, r7, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x20}]}, 0x74}, 0x1, 0x0, 0x0, 0x8005}, 0xc000) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x30b, 0x5, 0x8, 0x7, 0x2e, @broadcast}, 0x10) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r9, @ANYRES32=r9, @ANYBLOB='/\x00\x00', @ANYRES32, @ANYBLOB="ae556f0f6428154a12197317f04771dd97daa83dc9a952943cef7c741828f84666fe983640d15a7b5e3ed566bf5628f0", @ANYRES64=r10], 0x20) 1.35214736s ago: executing program 1 (id=4780): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xa) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r9], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x0) 1.111023697s ago: executing program 2 (id=4781): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xa) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r9], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x0) 967.08722ms ago: executing program 0 (id=4782): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0xd}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={r3, 0x1, 0x10, 0xfff, 0x55b}, &(0x7f00000000c0)=0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x9, [@float={0x7, 0x0, 0x0, 0x10, 0x4}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x1, 0x5}, {0x2, 0x3}, {0x3, 0x3}, {0x2, 0x5}, {0x1, 0x3}, {0x2, 0x5}, {0xc, 0x4}, {0x2, 0x2}]}]}, {0x0, [0x30, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x30]}}, &(0x7f00000001c0)=""/189, 0x79, 0xbd, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x5, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000a40)='syzkaller\x00', 0x8, 0x85, &(0x7f0000000a80)=""/133, 0x41100, 0x65, '\x00', r4, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x2, 0x1, 0xe, 0x3}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5, 0x0, 0x4}, 0x18) unshare(0x2a020400) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r6}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x1df3, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000003500)=[{0x0}, {0x0}, {0x0}], 0x3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, 0x0, &(0x7f0000000580)='%pK \x00'}, 0x20) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x64000041}, 0x44885) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f00000009c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x4048000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r9, 0x9c3fa077fa966179, 0x70bd29, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) 786.90911ms ago: executing program 1 (id=4783): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 668.163066ms ago: executing program 0 (id=4784): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000040)=0x9eb6, 0x4) bind$inet6(r1, &(0x7f0000f65000)={0xa, 0x4e20, 0x8001, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x5eff}, 0x1c) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.time\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) socket(0x22, 0x80008, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffd, 0x7fe2, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={r4, &(0x7f0000000180), 0x0}, 0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r5, 0x0, 0xfe9d) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x1, 0x1, 0x503, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xee4c}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x94}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x200}]}, 0x60}, 0x1, 0x0, 0x0, 0xa70544c2eb05d73b}, 0x80) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x9) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, 0x0, &(0x7f0000000040)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020301020000e6ffffffffffffff00100800010001000000"], 0x1c}}, 0x40) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) r9 = socket(0x15, 0x5, 0x0) getsockopt(r9, 0x200000000114, 0x2721, 0x0, &(0x7f00000000c0)) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) 637.422952ms ago: executing program 2 (id=4785): socket(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000f65000)={0xa, 0x4e20, 0x8001, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x5eff}, 0x1c) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.time\x00', 0x275a, 0x0) socket(0x22, 0x80008, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffd, 0x7fe2, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000180), 0x0}, 0x20) 352.71607ms ago: executing program 2 (id=4786): r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, &(0x7f00000000c0)=0x2, 0x4) unshare(0x20000400) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) splice(r1, 0xfffffffffffffffe, r2, 0x0, 0x8, 0x0) socketpair(0x11, 0x1, 0x401, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @private0}, @in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000040)=0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)) readv(r5, &(0x7f0000001500)=[{&(0x7f0000000280)=""/100, 0x64}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000004c0)={r4, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x80}, 0x90) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x8001) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000004) syz_init_net_socket$ax25(0x3, 0x2, 0xce) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004900010028bd7000fedbdf250a008000", @ANYRES32=0x0, @ANYBLOB="00000000080002000100000014000100fc000000000000000000000000000000202ada3a2b0cee5d146024e752b31e5f2ddfcf37452f012abb0c6d5c25061e0d003396f9412149078e04be23d192962cdb70209a8fcd60bf15fdef6d44379b8f0e5d081004efdbb7e5d9fe2c"], 0x38}, 0x1, 0x0, 0x0, 0x14000000}, 0x80) socket$kcm(0x10, 0x4, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f00000100000046000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESHEX=r1, @ANYRES32, @ANYBLOB="00000000000005000000240000"], 0x48) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000040)={0x1, @null, @bpq0, 0xb49, 'syz1\x00', @null, 0xfff, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 254.605001ms ago: executing program 1 (id=4787): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21, 0x31863}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x44040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r6, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfe}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) 188.302931ms ago: executing program 0 (id=4788): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000a80)=ANY=[@ANYBLOB="e80200001000200027bd7000fddbdf25fe800000000000000000000000000043ac1414bb00"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/686], 0x2e8}, 0x1, 0x0, 0x0, 0x10}, 0x4c040) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x7d}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000040)="9c0e9e085911", 0x6}], 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="adc79706ffbc16f214000000800000000000000007000000"], 0x18}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004100)={0x18, 0x42, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x4}]}, 0x18}}, 0x4000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000014c0)=@filter={'filter\x00', 0x2, 0x4, 0x3c8, 0xffffffff, 0x208, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0x5, 0x1, 0x4, {0x92}}}, @common=@srh={{0x30}, {0x2e, 0x0, 0x80, 0x0, 0x0, 0x0, 0xa}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x0, 0x0, 0xffffffff], [0xff, 0x0, 0x0, 0xffffff00], 'bridge_slave_0\x00', 'bridge0\x00', {}, {}, 0xc}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESOCT=r6, @ANYBLOB="2503000000000000000016000000140001"], 0x5f}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000300)={0x0, 0x2, 0x5, 0x2378e939}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0xa0, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r14, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x74, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x3ee, 0x1, 0x4}, {0x9, 0xf12, 0x7f, 0xa}, {0x7ff, 0x2, 0x1, 0x8000}, {0x3, 0x1, 0x3, 0x3e}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_U32_POLICE={0x4}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000024}, 0xc1) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20044005}, 0x4000010) 7.11492ms ago: executing program 0 (id=4789): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) sendmsg$rds(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4090, 0xffa}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x1010, r3, 0x0) epoll_create1(0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000940), 0x10) close(0x3) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) close(0x3) 0s ago: executing program 4 (id=4790): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4020000) socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000300090c10000000008003000000", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'xfrm0\x00'}) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x240048c4}, 0x24040890) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)={0xa00, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0x9a4, 0x8, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x4, @loopback, 0x7ff}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "20134b4562eb2d94b0ddc4e0a293ee110a7fc20342ad83f4a4bea09a644e68d4"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1b748c321929042fd612d82cccb6a27ddd90b5ea5e99506f0d1a71c7044de4e5"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x401, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb895}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}, {0x4a4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4a0, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xa}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}]}, {0x164, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @private=0xa010101}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eb60436b4be888868fdb5b53f831c282c485dcbc0ba44b2a86dae632558f2289"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xffff, @mcast2, 0x3607}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xb0, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "bd972de253771b866d25cb56f92bade64e6fac49f07b821aff419e1bf180f5b4"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x144, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffff}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x101, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, @WGPEER_A_ALLOWEDIPS={0xbc, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4, @loopback, 0x800}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "61aa27583501bd36b68fb509a230272c9e37306e38e3fefcb69ef1a4050867f2"}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa63a}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b6e2de0fb8c00c3c4fb8ce6746143019d29024e2259ca7688e3d912137f27f10"}]}, {0x4}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0xa00}, 0x1, 0x0, 0x0, 0x4000004}, 0x40040) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x40) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4) sendmsg$kcm(r1, 0x0, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r7, &(0x7f0000000200), 0x12) bind$x25(r6, &(0x7f0000000080), 0x12) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000700)={'bond0\x00'}) kernel console output (not intermixed with test programs): d promiscuous mode [ 450.280493][ T399] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.301026][T16423] mpoa:mpoad_close: () going down [ 450.312085][T16462] openvswitch: netlink: VXLAN extension message has 9 unknown bytes. [ 450.324740][ T399] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.391533][T16466] bond13: (slave bridge9): Releasing active interface [ 450.469019][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 450.489725][T16470] team0: Mode changed to "activebackup" [ 450.496333][T16467] syzkaller0: entered promiscuous mode [ 450.501997][T16467] syzkaller0: entered allmulticast mode [ 450.508863][T16466] vlan0: entered promiscuous mode [ 450.594448][T16466] tipc: Enabled bearer , priority 0 [ 450.602210][T16473] tipc: Enabling of bearer rejected, already enabled [ 450.618761][T16469] lo speed is unknown, defaulting to 1000 [ 450.721481][T16469] hsr0 speed is unknown, defaulting to 1000 [ 450.799711][T16469] lo speed is unknown, defaulting to 1000 [ 450.830393][T16477] tipc: Enabling of bearer rejected, already enabled [ 450.856851][T16483] netlink: 'syz.3.3608': attribute type 13 has an invalid length. [ 451.223722][T16492] syzkaller0: entered promiscuous mode [ 451.253863][T16492] syzkaller0: entered allmulticast mode [ 451.664906][T16496] siw: device registration error -23 [ 452.041427][T16509] tipc: Enabled bearer , priority 0 [ 452.056614][T16509] tipc: Resetting bearer [ 452.078651][T16508] tipc: Disabling bearer [ 452.093394][T16511] tipc: Enabling of bearer rejected, already enabled [ 452.346405][T16519] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 452.420608][T16516] lo speed is unknown, defaulting to 1000 [ 452.428795][T16516] hsr0 speed is unknown, defaulting to 1000 [ 452.436685][T16516] lo speed is unknown, defaulting to 1000 [ 452.823858][T16533] openvswitch: netlink: Flow key attribute not present in set flow. [ 452.877070][T16525] tipc: New replicast peer: 255.255.255.255 [ 452.971351][T16525] tipc: Enabled bearer , priority 10 [ 453.816480][T16543] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3626'. [ 453.827134][T16547] syzkaller0: entered promiscuous mode [ 453.854469][T16547] syzkaller0: entered allmulticast mode [ 453.964229][T16557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3631'. [ 454.031112][T16557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3631'. [ 454.056283][T16560] netlink: 'syz.0.3632': attribute type 10 has an invalid length. [ 454.112658][T16561] netlink: 'syz.2.3630': attribute type 13 has an invalid length. [ 454.127125][T16561] netlink: 'syz.2.3630': attribute type 17 has an invalid length. [ 454.164618][T16561] tipc: Resetting bearer [ 454.214278][T16561] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 454.345112][T16570] netlink: 'syz.3.3635': attribute type 46 has an invalid length. [ 454.424411][T16579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3636'. [ 454.631019][T16583] netlink: 87 bytes leftover after parsing attributes in process `syz.2.3639'. [ 454.770296][T16591] syzkaller0: entered promiscuous mode [ 454.782494][T16591] syzkaller0: entered allmulticast mode [ 454.858509][T16594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3644'. [ 454.868725][T16594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3644'. [ 455.439664][T16615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3649'. [ 455.478220][T16615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3649'. [ 455.808839][T16623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3649'. [ 456.433821][T16630] netlink: 'syz.3.3653': attribute type 10 has an invalid length. [ 456.463397][T16630] dummy0: entered promiscuous mode [ 456.494217][T16630] bond0: (slave dummy0): Releasing backup interface [ 456.533833][T16630] bridge0: port 2(dummy0) entered blocking state [ 456.568576][T16630] bridge0: port 2(dummy0) entered disabled state [ 456.585822][T16630] dummy0: entered allmulticast mode [ 457.419071][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 457.716070][T16659] tipc: Enabling of bearer rejected, already enabled [ 458.034332][T16669] netlink: 'syz.2.3665': attribute type 1 has an invalid length. [ 458.103327][T16669] bond15: entered promiscuous mode [ 458.113112][T16669] 8021q: adding VLAN 0 to HW filter on device bond15 [ 458.116214][T16663] netlink: 'syz.4.3664': attribute type 303 has an invalid length. [ 458.205260][T16675] bond15: (slave bridge11): making interface the new active one [ 458.226412][T16675] bridge11: entered promiscuous mode [ 458.233832][T16675] bond15: (slave bridge11): Enslaving as an active interface with an up link [ 458.795774][T16690] geneve2: entered promiscuous mode [ 458.852844][ T8132] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.879076][ T8132] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.887312][ T8132] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.895646][ T8132] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.028691][T16699] lo speed is unknown, defaulting to 1000 [ 459.048941][T16699] hsr0 speed is unknown, defaulting to 1000 [ 459.059395][T16699] lo speed is unknown, defaulting to 1000 [ 459.084147][T16702] netlink: 'syz.4.3670': attribute type 13 has an invalid length. [ 459.120429][T16702] netlink: 'syz.4.3670': attribute type 17 has an invalid length. [ 459.193683][T16702] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 459.711904][T16720] __nla_validate_parse: 4 callbacks suppressed [ 459.711926][T16720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3677'. [ 459.867193][T16724] vlan1: entered promiscuous mode [ 459.918640][T16724] batadv0: entered promiscuous mode [ 460.178926][T16728] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3681'. [ 460.249329][T16728] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3681'. [ 460.579839][T16743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3686'. [ 461.150968][T16758] netlink: 'syz.2.3691': attribute type 2 has an invalid length. [ 461.194118][T16758] k›*·]‘: entered promiscuous mode [ 461.252479][T16758] tipc: Resetting bearer [ 461.259328][T16758] tipc: Resetting bearer [ 461.276909][T16758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 461.371513][T16758] veth0_to_team: entered promiscuous mode [ 461.381746][T16758] veth0_to_team: entered allmulticast mode [ 461.649939][T16769] netlink: 'syz.2.3694': attribute type 7 has an invalid length. [ 461.681546][T16769] netlink: 'syz.2.3694': attribute type 8 has an invalid length. [ 461.727024][T16769] netlink: 'syz.2.3694': attribute type 4 has an invalid length. [ 461.761074][T16769] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3694'. [ 462.115384][T16777] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 462.151596][T16780] netlink: 'syz.2.3697': attribute type 1 has an invalid length. [ 462.231267][T16777] dummy0: left allmulticast mode [ 462.236469][T16777] bridge0: port 2(dummy0) entered disabled state [ 462.260830][T16777] bridge_slave_0: left allmulticast mode [ 462.276740][T16777] bridge_slave_0: left promiscuous mode [ 462.283567][T16780] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3697'. [ 462.304098][T16784] netlink: 'syz.3.3696': attribute type 10 has an invalid length. [ 462.325364][T16777] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.376668][T16777] bond0: (slave 77ÿ): Releasing backup interface [ 462.417197][T16777] bond0: (slave bond_slave_1): Releasing backup interface [ 462.436098][T16777] team0: Port device team_slave_1 removed [ 462.438975][T16789] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3699'. [ 462.447305][T16777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.454520][T16789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3699'. [ 462.473371][T16789] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3699'. [ 462.483818][T16777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.505183][T16777] bond4: (slave bridge9): Releasing active interface [ 462.560942][T16777] bond5: (slave gretap2): Releasing active interface [ 462.575030][T16777] bond6: (slave bond7): Releasing backup interface [ 462.582524][T16777] bond6: (slave bond7): the permanent HWaddr of slave - 36:a4:30:df:b3:3c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 462.602851][T16777] bond6: (slave gretap3): making interface the new active one [ 462.620438][T16794] netlink: 'syz.0.3700': attribute type 1 has an invalid length. [ 462.629495][T16794] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3700'. [ 462.643372][T16777] bond6: (slave gretap3): Releasing backup interface [ 462.653689][T16777] bond9: (slave veth9): Releasing backup interface [ 462.679004][T16795] ipvlan0: entered promiscuous mode [ 462.811711][T16782] veth21: entered promiscuous mode [ 462.838604][T16782] bond16: (slave veth21): Enslaving as a backup interface with a down link [ 462.892485][T16780] 8021q: adding VLAN 0 to HW filter on device bond16 [ 462.904525][T16784] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 462.978575][T16784] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 463.280844][T16806] netlink: 'syz.3.3703': attribute type 1 has an invalid length. [ 463.404825][T16806] 8021q: adding VLAN 0 to HW filter on device bond11 [ 463.478308][T16814] 8021q: adding VLAN 0 to HW filter on device bond11 [ 463.499286][T16814] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 463.539284][T16814] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 463.644047][T16826] netlink: 'syz.3.3703': attribute type 11 has an invalid length. [ 463.694338][T16816] veth11: entered promiscuous mode [ 463.714100][T16816] bond11: (slave veth11): Enslaving as an active interface with a down link [ 463.734717][T16806] erspan0: entered allmulticast mode [ 463.860197][ T399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.872828][ T399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.885924][T16831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.014507][T16834] hsr0 speed is unknown, defaulting to 1000 [ 464.037222][T16834] lo speed is unknown, defaulting to 1000 [ 464.129923][T16842] netlink: 'syz.2.3709': attribute type 12 has an invalid length. [ 464.200833][T16844] netlink: 'syz.3.3710': attribute type 1 has an invalid length. [ 464.360360][T16848] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 464.432183][T16848] netlink: 'syz.0.3711': attribute type 10 has an invalid length. [ 464.447628][T16848] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 465.283891][T16873] __nla_validate_parse: 2 callbacks suppressed [ 465.283910][T16873] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3717'. [ 465.741565][T16878] syzkaller0: entered promiscuous mode [ 465.748323][T16878] syzkaller0: entered allmulticast mode [ 465.988478][T16887] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 466.165986][T16896] tipc: Enabling of bearer rejected, already enabled [ 467.160433][T16902] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 467.203982][T16902] tipc: Resetting bearer [ 467.221043][T16904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3729'. [ 467.236201][T16902] bond15: (slave bridge11): Releasing backup interface [ 467.254260][T16902] bridge11: left promiscuous mode [ 467.263252][T16904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3729'. [ 467.290595][T16902] bond16: (slave veth21): Releasing backup interface [ 467.326810][T16902] validate_nla: 1 callbacks suppressed [ 467.326826][T16902] netlink: 'syz.2.3728': attribute type 10 has an invalid length. [ 467.370448][T16902] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 467.385709][T16902] bond0: (slave wlan1): refused to change device type [ 467.533816][T16918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3732'. [ 467.752252][T16928] netlink: 'syz.0.3735': attribute type 1 has an invalid length. [ 467.770276][T16926] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 467.875549][T16933] netlink: 'syz.3.3736': attribute type 10 has an invalid length. [ 467.889894][T16935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3735'. [ 467.900650][T16929] bond0: (slave wlan1): Releasing backup interface [ 467.911620][T16929] bond11: (slave veth11): Releasing active interface [ 467.969862][T16930] veth13: entered promiscuous mode [ 467.981618][T16930] bond10: (slave veth13): Enslaving as a backup interface with a down link [ 467.991426][T16933] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 468.001700][T16938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3737'. [ 468.016188][T16933] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 468.031984][T16935] 8021q: adding VLAN 0 to HW filter on device bond10 [ 468.243136][T16940] tipc: Enabled bearer , priority 0 [ 468.254299][T16940] tipc: Resetting bearer [ 468.380520][T16939] tipc: Disabling bearer [ 468.516754][T16944] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 468.539017][T16946] bond0: (slave wlan1): Releasing backup interface [ 468.683005][T16946] team0: Mode changed to "activebackup" [ 468.729991][T16951] tipc: Enabling of bearer rejected, already enabled [ 468.894396][T16957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3745'. [ 468.950932][T16957] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 469.731721][T16973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3749'. [ 469.822462][T16977] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 469.854375][T16977] bond10: (slave veth13): Releasing backup interface [ 469.884360][T16977] netlink: 'syz.0.3750': attribute type 10 has an invalid length. [ 469.892941][T16977] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 470.025305][T16984] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3754'. [ 470.071796][T16984] team0: Mode changed to "broadcast" [ 470.121908][T16987] : entered promiscuous mode [ 470.475792][T17008] dvmrp1: left allmulticast mode [ 471.052395][T17016] netlink: 'syz.4.3764': attribute type 10 has an invalid length. [ 471.141031][T17016] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 471.152740][T17019] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3765'. [ 471.194135][T17019] netlink: 'syz.2.3765': attribute type 7 has an invalid length. [ 471.227534][T17019] netlink: 'syz.2.3765': attribute type 4 has an invalid length. [ 471.246627][T17020] netlink: 364 bytes leftover after parsing attributes in process `syz.2.3765'. [ 471.266599][T17020] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 471.303301][T17019] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3765'. [ 471.583784][T17034] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3768'. [ 471.635555][T17032] veth13: entered promiscuous mode [ 471.719102][T17039] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 471.771455][T17039] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3769'. [ 472.494842][T17051] netlink: 'syz.4.3772': attribute type 16 has an invalid length. [ 472.503709][T17051] netlink: 'syz.4.3772': attribute type 17 has an invalid length. [ 472.534587][T17051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 472.609229][T17054] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 472.626145][T17054] tipc: Resetting bearer [ 472.666164][T17054] netlink: 'syz.2.3773': attribute type 10 has an invalid length. [ 472.675064][T17054] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 472.682708][T17054] bond0: (slave wlan1): refused to change device type [ 473.378499][T17076] netlink: 'syz.2.3776': attribute type 4 has an invalid length. [ 473.388137][T17076] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3776'. [ 473.431187][T17076] Ã: renamed from bond0 (while UP) [ 473.562137][T17078] hsr0 speed is unknown, defaulting to 1000 [ 473.583631][T17078] lo speed is unknown, defaulting to 1000 [ 474.660543][T17086] netlink: 'syz.4.3782': attribute type 10 has an invalid length. [ 474.894970][T17098] hsr0 speed is unknown, defaulting to 1000 [ 474.922240][T17098] lo speed is unknown, defaulting to 1000 [ 475.284553][T17105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3785'. [ 476.333781][T17010] Set syz1 is full, maxelem 65536 reached [ 476.481437][T17130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3790'. [ 476.564326][T17130] macvtap0: entered promiscuous mode [ 476.581618][T17130] batadv0: entered promiscuous mode [ 476.590535][T17130] macvtap0: entered allmulticast mode [ 476.602799][T17130] batadv0: entered allmulticast mode [ 476.611050][T17130] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 476.657062][T17131] batadv0: left allmulticast mode [ 476.669323][T17131] batadv0: left promiscuous mode [ 476.706237][T17134] netlink: 'syz.1.3791': attribute type 4 has an invalid length. [ 476.866557][T17141] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3793'. [ 477.026595][T17144] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode [ 477.057100][T17144] tipc: Resetting bearer [ 477.088159][T17150] netlink: 47 bytes leftover after parsing attributes in process `syz.3.3797'. [ 477.096721][T17144] netlink: 'syz.1.3794': attribute type 10 has an invalid length. [ 477.208582][T17152] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 477.360583][T17154] tipc: Enabling of bearer rejected, failed to enable media [ 477.461074][T17162] hsr0 speed is unknown, defaulting to 1000 [ 477.476011][T17162] lo speed is unknown, defaulting to 1000 [ 478.200817][T17174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.315423][T17174] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3803'. [ 478.736239][T17179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3804'. [ 479.160914][T17188] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 479.186018][T17188] tipc: Resetting bearer [ 479.243241][T17188] netlink: 'syz.2.3806': attribute type 10 has an invalid length. [ 479.263163][T17188] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 479.283531][T17188] Ã: (slave wlan1): refused to change device type [ 479.484851][T17194] tipc: Enabling of bearer rejected, already enabled [ 479.562853][T17199] IPVS: Error connecting to the multicast addr [ 479.571836][T17199] netlink: 'syz.4.3811': attribute type 16 has an invalid length. [ 479.578262][T17198] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 479.580776][T17199] netlink: 'syz.4.3811': attribute type 17 has an invalid length. [ 479.638362][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3812'. [ 479.650324][T17202] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3812'. [ 479.689560][T17204] IPv6: NLM_F_REPLACE set, but no existing node found! [ 479.723896][ T5949] lo speed is unknown, defaulting to 1000 [ 479.727965][T17201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3811'. [ 479.736132][ T5949] syz0: Port: 1 Link DOWN [ 479.743781][T17198] netlink: 'syz.0.3810': attribute type 10 has an invalid length. [ 479.759690][ T5949] lo speed is unknown, defaulting to 1000 [ 479.765579][T17198] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 480.056168][T17217] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3814'. [ 480.075059][T17216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3816'. [ 480.599630][T17233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.614517][T17232] tipc: Enabled bearer , priority 0 [ 480.624770][T17232] syzkaller0: entered promiscuous mode [ 480.651582][T17232] syzkaller0: entered allmulticast mode [ 480.695376][T17230] tipc: Resetting bearer [ 480.745144][T17230] tipc: Disabling bearer [ 480.952650][T17242] tipc: Enabling of bearer rejected, already enabled [ 480.974814][T17240] hsr0 speed is unknown, defaulting to 1000 [ 481.006551][T17240] lo speed is unknown, defaulting to 1000 [ 481.873284][T17269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3827'. [ 482.185119][T17273] tipc: Resetting bearer [ 482.236378][T17273] veth0_to_team: left promiscuous mode [ 482.245917][T17273] veth0_to_team: left allmulticast mode [ 482.254858][T17273] vlan0: left promiscuous mode [ 482.260438][T17273] macvlan0: left allmulticast mode [ 482.300118][T17273] vlan2: left allmulticast mode [ 482.313979][T17273] macvtap1: left promiscuous mode [ 482.321505][T17273] macvtap1: left allmulticast mode [ 482.347911][T17277] netlink: 'syz.4.3830': attribute type 1 has an invalid length. [ 482.369361][T17273] tipc: Resetting bearer [ 482.375810][T17273] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 482.383563][T17273] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 482.401046][T17273] veth15: left promiscuous mode [ 482.411002][T17273] macvtap2: left promiscuous mode [ 482.417128][T17273] macvtap2: left allmulticast mode [ 482.431587][T17273] veth17: left promiscuous mode [ 482.437242][T17273] veth19: left promiscuous mode [ 482.456586][T17273] geneve3: left promiscuous mode [ 482.463577][T17273] geneve3: left allmulticast mode [ 482.472606][T17273] bond15: left promiscuous mode [ 482.491478][T17273] veth21: left promiscuous mode [ 482.570605][T17281] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3830'. [ 482.593212][ T399] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.622931][T17279] veth11: entered promiscuous mode [ 482.633982][ T399] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.655405][T17285] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 482.688830][T17283] tipc: Enabled bearer , priority 0 [ 482.701393][T17283] tipc: Resetting bearer [ 482.708516][T17285] netlink: 'syz.2.3832': attribute type 10 has an invalid length. [ 482.716655][ T399] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.729779][T17285] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 482.736761][T17285] Ã: (slave wlan1): refused to change device type [ 482.759477][T17282] tipc: Disabling bearer [ 482.771995][ T8143] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.782750][T17291] tipc: Enabling of bearer rejected, failed to enable media [ 483.031993][T17304] netlink: 'syz.1.3837': attribute type 1 has an invalid length. [ 483.173179][T17304] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3837'. [ 483.173256][T17306] veth15: entered promiscuous mode [ 483.304178][T17311] hsr0 speed is unknown, defaulting to 1000 [ 483.321015][T17313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3841'. [ 483.348877][ T30] audit: type=1804 audit(1754056162.428:8): pid=17315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3840" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=3912 res=1 errno=0 [ 483.381949][ T30] audit: type=1800 audit(1754056162.428:9): pid=17315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3840" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=3912 res=0 errno=0 [ 483.414616][T17311] lo speed is unknown, defaulting to 1000 [ 483.596021][T17325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3843'. [ 483.794181][T17332] tipc: Enabling of bearer rejected, already enabled [ 483.873347][T17337] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 483.908331][T17337] netlink: 'syz.2.3847': attribute type 10 has an invalid length. [ 483.916391][T17337] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 483.925623][T17337] Ã: (slave wlan1): refused to change device type [ 484.173622][T17345] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 484.183027][T17348] tipc: Enabling of bearer rejected, already enabled [ 484.216711][T17350] netlink: 'syz.3.3851': attribute type 10 has an invalid length. [ 484.238392][T17350] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 484.292075][T17350] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 484.557786][T17362] netlink: 'syz.4.3854': attribute type 10 has an invalid length. [ 484.889270][T17379] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 484.972346][T17379] netlink: 'syz.2.3856': attribute type 10 has an invalid length. [ 485.003503][T17379] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 485.044964][T17379] Ã: (slave wlan1): refused to change device type [ 485.226229][T17388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3858'. [ 485.287342][T17394] tipc: Resetting bearer [ 485.351454][T17392] hsr0 speed is unknown, defaulting to 1000 [ 485.357849][T17394] netlink: 'syz.1.3859': attribute type 10 has an invalid length. [ 485.386224][T17392] lo speed is unknown, defaulting to 1000 [ 485.485320][T17397] tipc: Enabled bearer , priority 0 [ 485.499590][T17397] tipc: Resetting bearer [ 485.529935][T17396] tipc: Disabling bearer [ 485.630143][T17404] tipc: Enabling of bearer rejected, failed to enable media [ 485.860048][T17414] tipc: Enabled bearer , priority 0 [ 485.904584][T17414] tipc: Resetting bearer [ 485.983141][T17412] tipc: Disabling bearer [ 486.198959][T17419] IPVS: Scheduler module ip_vs_sip not found [ 486.210189][T17422] IPVS: length: 8 != 446622349272 [ 486.223823][T17426] netlink: 'syz.4.3867': attribute type 1 has an invalid length. [ 486.561436][T17432] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 486.581206][T17432] netlink: 'syz.0.3868': attribute type 10 has an invalid length. [ 486.589429][T17432] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 486.960986][T17436] bridge0: failed insert local address into bridge forwarding table [ 486.977120][T17436] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 487.130138][T17438] hsr0 speed is unknown, defaulting to 1000 [ 487.164217][T17438] lo speed is unknown, defaulting to 1000 [ 487.171046][T17441] hsr0 speed is unknown, defaulting to 1000 [ 487.328727][T17445] syzkaller0: entered promiscuous mode [ 487.354632][T17445] syzkaller0: entered allmulticast mode [ 487.589911][T17441] lo speed is unknown, defaulting to 1000 [ 487.598530][T17452] tipc: Resetting bearer [ 487.612206][T17452] netlink: 'syz.1.3874': attribute type 10 has an invalid length. [ 487.951522][T17462] tipc: Enabling of bearer rejected, failed to enable media [ 489.518833][T17476] infiniband syz1: set down [ 489.523499][T17476] infiniband syz1: added veth1_to_bond [ 489.583115][T17476] syz1: rxe_create_cq: returned err = -12 [ 489.627681][T17476] infiniband syz1: Couldn't create ib_mad CQ [ 489.634926][T17476] infiniband syz1: Couldn't open port 1 [ 489.795368][T17476] RDS/IB: syz1: added [ 489.873941][T17476] smc: adding ib device syz1 with port count 1 [ 489.903017][T17476] smc: ib device syz1 port 1 has pnetid SYZ1 (user defined) [ 490.820787][T17521] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3886'. [ 491.225732][T17536] tipc: Enabling of bearer rejected, failed to enable media [ 491.843569][T17553] hsr0 speed is unknown, defaulting to 1000 [ 491.891355][T17553] lo speed is unknown, defaulting to 1000 [ 492.513926][T17564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3896'. [ 492.575457][T17564] macvtap1: entered promiscuous mode [ 492.591349][T17564] batadv0: entered promiscuous mode [ 492.602858][T17564] macvtap1: entered allmulticast mode [ 492.617723][T17564] batadv0: entered allmulticast mode [ 492.638287][T17564] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 492.679070][T17567] batadv0: left allmulticast mode [ 492.684271][T17567] batadv0: left promiscuous mode [ 492.823393][T17570] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 493.951020][T17591] tipc: Enabling of bearer rejected, failed to enable media [ 494.431656][T17582] hsr0 speed is unknown, defaulting to 1000 [ 494.546960][T17605] pim6reg: entered allmulticast mode [ 494.555833][T17607] pim6reg: left allmulticast mode [ 494.598915][T17582] lo speed is unknown, defaulting to 1000 [ 495.739948][T17623] 8021q: adding VLAN 0 to HW filter on device à [ 495.787034][T17623] A link change request failed with some changes committed already. Interface à may have been left with an inconsistent configuration, please check. [ 496.024876][T17630] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 496.103178][T17630] bond0: (slave wlan1): Releasing backup interface [ 496.635175][T17636] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 496.666490][T17636] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 496.683182][T17636] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 496.810655][T17633] hsr0 speed is unknown, defaulting to 1000 [ 496.822177][T17633] lo speed is unknown, defaulting to 1000 [ 497.066778][T17644] tipc: Enabling of bearer rejected, failed to enable media [ 497.534946][T17659] tipc: Enabling of bearer rejected, already enabled [ 497.568862][T17659] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 497.585400][T17659] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 497.937342][T17665] netlink: 'syz.2.3919': attribute type 1 has an invalid length. [ 497.991104][T17665] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3919'. [ 498.403306][T17671] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 498.644589][T17673] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3921'. [ 498.819500][T17675] tipc: Enabling of bearer rejected, already enabled [ 498.903920][T17679] netlink: 'syz.2.3924': attribute type 2 has an invalid length. [ 499.498318][T17692] tipc: Enabling of bearer rejected, failed to enable media [ 499.598247][T17694] tipc: Enabling of bearer rejected, failed to enable media [ 499.958513][T17717] netlink: 'syz.0.3931': attribute type 10 has an invalid length. [ 500.024875][T17717] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.3931'. [ 500.098549][T17720] tipc: Enabling of bearer rejected, failed to enable media [ 500.166524][T17723] tipc: Enabling of bearer rejected, failed to enable media [ 500.607040][T17743] hsr0 speed is unknown, defaulting to 1000 [ 500.615689][T17743] lo speed is unknown, defaulting to 1000 [ 501.011179][T17760] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 501.024452][T17760] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 501.033436][T17760] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 501.130987][T17766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3941'. [ 501.152192][T17760] veth13: left promiscuous mode [ 501.174303][T17760] macvtap0: left promiscuous mode [ 501.190384][T17760] macvtap0: left allmulticast mode [ 501.195930][T17760] macvtap1: left promiscuous mode [ 501.268545][T17760] macvtap1: left allmulticast mode [ 501.346592][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 501.616786][T17771] tipc: Enabling of bearer rejected, already enabled [ 501.645008][T17774] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 501.673009][T17774] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 501.843842][T17784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3946'. [ 501.916450][T17785] veth15: entered promiscuous mode [ 501.929911][T17782] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3945'. [ 502.027177][T17788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3947'. [ 502.139503][T17791] tipc: Enabling of bearer rejected, already enabled [ 502.262645][T17800] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 502.317603][T17802] tipc: Enabling of bearer rejected, failed to enable media [ 502.334691][T17806] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2 [ 502.883736][T17821] netlink: 'syz.3.3954': attribute type 1 has an invalid length. [ 502.892793][T17821] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3954'. [ 503.183748][T17828] 8021q: adding VLAN 0 to HW filter on device bond12 [ 503.192406][T17828] bond0: (slave bond12): Enslaving as an active interface with an up link [ 503.261086][T17830] hsr0 speed is unknown, defaulting to 1000 [ 503.273569][T17830] lo speed is unknown, defaulting to 1000 [ 503.434554][T17841] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.753839][T17843] IPVS: Unknown mcast interface: veth1_to_bridge [ 503.940372][T17841] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.325707][T17859] netlink: 'syz.2.3961': attribute type 29 has an invalid length. [ 504.364379][T17861] netlink: 'syz.2.3961': attribute type 29 has an invalid length. [ 504.372880][T17864] tipc: Enabling of bearer rejected, failed to enable media [ 504.431639][T17841] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.630534][T17841] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.871334][T17877] tipc: Enabling of bearer rejected, failed to enable media [ 504.890989][ T3544] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.960394][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.071599][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.100248][ T1160] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.124119][T17887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3966'. [ 505.213055][T17887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3966'. [ 506.405428][T17921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3972'. [ 506.924641][T17932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3975'. [ 507.030306][T17932] macvtap0: entered promiscuous mode [ 507.043099][T17932] macvtap0: entered allmulticast mode [ 507.061123][T17932] batadv0: entered allmulticast mode [ 507.081967][T17932] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 507.139832][T17936] batadv0: left allmulticast mode [ 507.398588][T17947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3978'. [ 507.441836][T17945] netlink: 8192 bytes leftover after parsing attributes in process `syz.4.3977'. [ 507.482406][T17945] raw_sendmsg: syz.4.3977 forgot to set AF_INET. Fix it! [ 507.485983][T17947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3978'. [ 507.668456][T17951] tipc: Enabling of bearer rejected, already enabled [ 507.804400][T17955] batman_adv: batadv0: Adding interface: ip6gretap2 [ 507.822213][T17955] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.905739][T17955] batman_adv: batadv0: Interface activated: ip6gretap2 [ 508.190842][T17969] hsr0 speed is unknown, defaulting to 1000 [ 508.221330][T17969] lo speed is unknown, defaulting to 1000 [ 508.246818][T17975] syzkaller0: entered promiscuous mode [ 508.257101][T17975] syzkaller0: entered allmulticast mode [ 508.335205][T17975] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 508.623072][T17982] IPVS: Scheduler module ip_vs_sip not found [ 508.663705][T17984] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3989'. [ 508.718390][T17990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3990'. [ 508.733462][T17984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3989'. [ 508.964013][T17995] tipc: Enabling of bearer rejected, already enabled [ 510.190207][T18025] __nla_validate_parse: 4 callbacks suppressed [ 510.190224][T18025] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3999'. [ 510.545455][T18034] netlink: 'syz.3.4000': attribute type 3 has an invalid length. [ 510.631934][T18037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4001'. [ 510.841895][T18037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4001'. [ 511.405697][T18048] tipc: Enabling of bearer rejected, already enabled [ 511.455103][T18054] netlink: 'syz.4.4005': attribute type 10 has an invalid length. [ 511.465330][T18044] tipc: Resetting bearer [ 511.474595][T18053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4006'. [ 511.486055][T18044] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 511.496812][T18056] netlink: 'syz.2.4002': attribute type 21 has an invalid length. [ 511.503540][T18044] batman_adv: batadv0: Removing interface: ip6gretap2 [ 511.611111][T18056] netlink: 'syz.2.4002': attribute type 6 has an invalid length. [ 511.626574][T18056] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4002'. [ 511.671806][T18066] netlink: 'syz.1.4003': attribute type 10 has an invalid length. [ 511.703674][T18056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4002'. [ 511.749729][T18051] hsr0 speed is unknown, defaulting to 1000 [ 511.864115][T18069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4002'. [ 511.900054][T18051] lo speed is unknown, defaulting to 1000 [ 511.961388][T18069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4002'. [ 512.140645][T18072] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4008'. [ 512.289222][T18072] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4008'. [ 512.953431][T18090] wireguard0: entered promiscuous mode [ 512.968239][T18090] wireguard0: entered allmulticast mode [ 513.658987][T18112] tipc: Enabling of bearer rejected, failed to enable media [ 515.171970][T18143] netlink: 'syz.0.4022': attribute type 1 has an invalid length. [ 515.286735][T18141] __nla_validate_parse: 8 callbacks suppressed [ 515.286757][T18141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4019'. [ 515.554545][T18143] 8021q: adding VLAN 0 to HW filter on device bond11 [ 515.730852][T18147] veth15: entered promiscuous mode [ 515.784137][T18147] bond11: (slave veth15): Enslaving as an active interface with a down link [ 515.805366][T18151] netlink: 'syz.0.4022': attribute type 11 has an invalid length. [ 515.888315][T18145] erspan0: entered allmulticast mode [ 515.993963][T18156] pim6reg: entered allmulticast mode [ 516.093072][T18157] pim6reg: left allmulticast mode [ 516.445826][T18160] pimreg: entered allmulticast mode [ 517.150273][T18182] netlink: 'syz.4.4030': attribute type 1 has an invalid length. [ 517.191376][T18182] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4030'. [ 517.320102][T18183] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4028'. [ 518.104012][ T30] audit: type=1800 audit(1754056197.178:10): pid=18172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4028" name="cgroup.controllers" dev="tmpfs" ino=4226 res=0 errno=0 [ 518.286968][T18201] veth3: left allmulticast mode [ 518.341362][T18201] ip6gre1: left allmulticast mode [ 518.417887][T18201] geneve2: left promiscuous mode [ 518.427744][T18201] team1: left promiscuous mode [ 518.435674][T18201] team1: left allmulticast mode [ 518.447753][T18201] veth1: left promiscuous mode [ 518.460418][T18201] vlan0: left allmulticast mode [ 518.470058][T18201] veth1: left allmulticast mode [ 518.486227][T18201] gretap2: left promiscuous mode [ 518.491667][T18201] xfrm1: left allmulticast mode [ 518.502250][T18201] veth11: left promiscuous mode [ 518.776489][T18213] netlink: 'syz.4.4040': attribute type 10 has an invalid length. [ 518.801909][T18208] netlink: 'syz.3.4039': attribute type 16 has an invalid length. [ 518.837538][T18208] netlink: 'syz.3.4039': attribute type 17 has an invalid length. [ 518.946472][T18208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.998799][T18208] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.038748][T18208] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 519.091317][ T399] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 519.246228][T18219] syz0: rxe_newlink: already configured on lo [ 519.310685][T18222] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 519.481844][T18218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.551662][T18229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4044'. [ 519.701089][T18235] hsr0 speed is unknown, defaulting to 1000 [ 519.712205][T18236] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4055'. [ 519.713564][T18235] lo speed is unknown, defaulting to 1000 [ 519.726368][T18236] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4055'. [ 519.818910][T18237] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.842673][T18237] tipc: Resetting bearer [ 519.859385][T18237] tipc: Resetting bearer [ 519.890784][T18237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 520.059922][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 520.210980][T18246] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4047'. [ 520.698356][T18251] netlink: 'syz.0.4049': attribute type 16 has an invalid length. [ 520.706338][T18251] netlink: 'syz.0.4049': attribute type 17 has an invalid length. [ 520.747420][T18260] netlink: 1016 bytes leftover after parsing attributes in process `syz.4.4050'. [ 520.765429][T18251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.779181][T18251] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.833881][T18251] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 520.932351][T18236] rdma_rxe: rxe_newlink: failed to add lo [ 520.942795][T18265] pim6reg: entered allmulticast mode [ 521.033971][T18265] pim6reg: left allmulticast mode [ 521.081784][T18268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4052'. [ 521.124959][T18268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4052'. [ 521.501476][T18275] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4056'. [ 521.526416][T18281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4057'. [ 521.608965][T18282] netlink: 'syz.0.4057': attribute type 1 has an invalid length. [ 521.625618][T18282] netlink: 208 bytes leftover after parsing attributes in process `syz.0.4057'. [ 521.905845][T18293] tipc: Enabling of bearer rejected, already enabled [ 522.052044][T18296] netlink: 'syz.2.4063': attribute type 10 has an invalid length. [ 522.075563][T18298] netlink: 'syz.1.4064': attribute type 1 has an invalid length. [ 522.170406][T18298] veth15: entered promiscuous mode [ 522.195185][T18298] bond12: (slave veth15): Enslaving as a backup interface with a down link [ 522.353932][T18304] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4065'. [ 522.460964][T18308] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 522.507309][T18310] team0: entered promiscuous mode [ 522.514652][T18310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4068'. [ 522.792197][T18310] team0 (unregistering): left promiscuous mode [ 522.896400][T18324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4070'. [ 523.127583][T18326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4072'. [ 523.161823][T18331] netlink: 'syz.4.4074': attribute type 1 has an invalid length. [ 523.230643][T18331] bond8: entered promiscuous mode [ 523.235730][T18331] bond8: entered allmulticast mode [ 523.257612][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 523.273211][T18328] syzkaller0: entered promiscuous mode [ 523.279434][T18328] syzkaller0: entered allmulticast mode [ 523.532743][T18331] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 523.679374][T18340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.160829][T18355] netlink: 'syz.2.4078': attribute type 9 has an invalid length. [ 524.538195][ T5158] Bluetooth: hci0: command tx timeout [ 524.664973][T18373] bridge0: failed insert local address into bridge forwarding table [ 525.905421][T18382] hsr0 speed is unknown, defaulting to 1000 [ 525.919690][T18382] lo speed is unknown, defaulting to 1000 [ 525.984796][T18403] netlink: 'syz.2.4086': attribute type 1 has an invalid length. [ 526.097754][T18406] tipc: Enabled bearer , priority 0 [ 526.118685][T18403] __nla_validate_parse: 12 callbacks suppressed [ 526.118706][T18403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4086'. [ 526.147965][T18406] tipc: Resetting bearer [ 526.181142][T18404] tipc: Disabling bearer [ 526.204820][T18403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.385235][T18411] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 526.406816][T18411] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001 [ 526.559950][T18417] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535) [ 526.607858][T18417] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 526.679206][T18410] dvmrp8: entered allmulticast mode [ 526.778605][T18408] dvmrp8: left allmulticast mode [ 526.979795][T18421] hsr0 speed is unknown, defaulting to 1000 [ 527.015905][T18421] lo speed is unknown, defaulting to 1000 [ 527.181251][T18429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.183634][T18428] netlink: 'syz.1.4094': attribute type 10 has an invalid length. [ 528.001110][T18426] hsr0 speed is unknown, defaulting to 1000 [ 528.109041][T18426] lo speed is unknown, defaulting to 1000 [ 528.855108][T18441] netlink: 'syz.1.4097': attribute type 13 has an invalid length. [ 529.077322][T18446] netlink: 'syz.0.4099': attribute type 1 has an invalid length. [ 529.190080][T18446] bond12: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 529.209947][T18446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4099'. [ 529.245788][ T49] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 529.247087][T18446] 8021q: adding VLAN 0 to HW filter on device bond12 [ 529.382697][ T36] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 529.504602][T18454] netlink: 'syz.4.4100': attribute type 10 has an invalid length. [ 529.579813][T18456] pim6reg: entered allmulticast mode [ 529.812514][T18461] pim6reg: left allmulticast mode [ 529.919302][T18464] vxcan0: entered promiscuous mode [ 530.159335][T18473] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4103'. [ 530.291235][T18470] veth13: entered promiscuous mode [ 530.378260][T18472] tipc: Resetting bearer [ 531.105943][T18510] hsr0 speed is unknown, defaulting to 1000 [ 531.113907][T18510] lo speed is unknown, defaulting to 1000 [ 531.233253][T18518] netlink: 'syz.2.4111': attribute type 1 has an invalid length. [ 531.265134][T18516] hsr0 speed is unknown, defaulting to 1000 [ 531.575281][T18521] veth23: entered promiscuous mode [ 531.583585][T18518] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4111'. [ 531.593187][T18521] bond17: (slave veth23): Enslaving as a backup interface with a down link [ 531.602552][T18516] lo speed is unknown, defaulting to 1000 [ 531.630024][T18526] tipc: Resetting bearer [ 531.699224][T18526] bond12: (slave veth15): Releasing backup interface [ 531.880121][T18540] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 532.057893][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 532.562803][T18551] hsr0 speed is unknown, defaulting to 1000 [ 532.787480][T18551] lo speed is unknown, defaulting to 1000 [ 533.469427][T18558] hsr0 speed is unknown, defaulting to 1000 [ 533.477231][T18558] lo speed is unknown, defaulting to 1000 [ 534.229835][T18577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4122'. [ 535.077885][T18586] netlink: 'syz.0.4124': attribute type 1 has an invalid length. [ 535.307035][T18590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4124'. [ 535.403178][T18589] veth17: entered promiscuous mode [ 535.412539][T18589] bond13: (slave veth17): Enslaving as a backup interface with a down link [ 535.712533][T18601] bond11: (slave veth15): Releasing active interface [ 535.751271][T18601] bond12: (slave ip6gretap2): Removing an active aggregator [ 535.780592][T18601] bond12: (slave ip6gretap2): Releasing backup interface [ 535.821042][T18601] bond13: (slave veth17): Releasing backup interface [ 536.427486][T18610] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4127'. [ 536.610775][T18613] sctp: [Deprecated]: syz.3.4128 (pid 18613) Use of struct sctp_assoc_value in delayed_ack socket option. [ 536.610775][T18613] Use struct sctp_sack_info instead [ 536.833993][T18618] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4129'. [ 537.068731][T18622] netlink: 'syz.1.4130': attribute type 1 has an invalid length. [ 537.310076][T18632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4134'. [ 537.583838][T18646] netlink: 'syz.2.4136': attribute type 1 has an invalid length. [ 537.676401][T18645] netlink: 'syz.3.4137': attribute type 10 has an invalid length. [ 537.691298][T18645] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 537.703804][T18645] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 537.854640][T18646] veth25: entered promiscuous mode [ 537.879717][T18646] bond18: (slave veth25): Enslaving as a backup interface with a down link [ 537.944502][T18646] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4136'. [ 538.001826][T18654] bond0: entered promiscuous mode [ 538.032945][T18654] bond0: left promiscuous mode [ 538.180730][T18657] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 538.670538][T18668] syzkaller0: entered promiscuous mode [ 538.692690][T18668] syzkaller0: entered allmulticast mode [ 539.089069][T18666] hsr0 speed is unknown, defaulting to 1000 [ 539.097015][T18666] lo speed is unknown, defaulting to 1000 [ 539.138715][T18676] syzkaller0: entered promiscuous mode [ 539.144239][T18676] syzkaller0: entered allmulticast mode [ 539.225597][T18683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4146'. [ 539.246912][T18686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4147'. [ 539.865838][T18665] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4141'. [ 540.158841][T18706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4150'. [ 540.833584][T18716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.943512][T18711] hsr0 speed is unknown, defaulting to 1000 [ 540.970542][T18711] lo speed is unknown, defaulting to 1000 [ 541.860459][T18738] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 541.909662][T18738] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 542.252346][T18745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4161'. [ 542.265045][T18745] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 542.274271][T18745] tipc: Enabled bearer , priority 10 [ 542.598323][T18760] netlink: 'syz.0.4163': attribute type 1 has an invalid length. [ 542.647173][T18760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4163'. [ 542.661297][T18761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4163'. [ 542.817724][T18754] hsr0 speed is unknown, defaulting to 1000 [ 542.957271][T18754] lo speed is unknown, defaulting to 1000 [ 543.753103][T18786] tipc: Resetting bearer [ 543.785472][T18780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4166'. [ 543.808605][T18786] bond17: (slave veth23): Releasing backup interface [ 543.865655][T18786] bond18: (slave veth25): Releasing backup interface [ 543.931820][T18788] syzkaller0: entered promiscuous mode [ 543.939407][T18788] syzkaller0: entered allmulticast mode [ 543.980578][ T5848] Bluetooth: hci0: command tx timeout [ 544.128475][T18790] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4169'. [ 544.209131][T18791] netlink: 'syz.4.4169': attribute type 29 has an invalid length. [ 544.677689][T18806] netlink: 'syz.0.4172': attribute type 9 has an invalid length. [ 544.691507][T18806] netlink: 'syz.0.4172': attribute type 6 has an invalid length. [ 545.017645][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 546.354820][T18816] macsec1: entered promiscuous mode [ 546.362767][T18816] macsec1: entered allmulticast mode [ 546.483106][T18815] tipc: Resetting bearer [ 546.604595][T18815] tipc: Resetting bearer [ 546.696753][T18805] hsr0 speed is unknown, defaulting to 1000 [ 546.731151][T18805] lo speed is unknown, defaulting to 1000 [ 548.697950][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 549.038097][T18859] netlink: 'syz.3.4179': attribute type 3 has an invalid length. [ 550.220341][T18884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4183'. [ 550.614714][T18905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4190'. [ 550.884535][T18915] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4191'. [ 550.972434][T18917] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 550.986202][T18913] hsr0 speed is unknown, defaulting to 1000 [ 550.995563][T18913] lo speed is unknown, defaulting to 1000 [ 551.006754][T18916] netlink: 'syz.3.4193': attribute type 20 has an invalid length. [ 551.420307][T18924] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4195'. [ 551.428984][T18926] bond0: entered promiscuous mode [ 551.440865][T18926] bond0: left promiscuous mode [ 551.467911][T18927] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 551.714702][ T30] audit: type=1800 audit(1754056230.788:11): pid=18928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4195" name="memory.events" dev="tmpfs" ino=4658 res=0 errno=0 [ 552.178595][T18946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4200'. [ 553.045958][T18967] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 553.213016][T18971] netlink: 'syz.0.4209': attribute type 10 has an invalid length. [ 553.268502][T18971] team0: Port device dummy0 added [ 553.482989][T18976] hsr0 speed is unknown, defaulting to 1000 [ 553.494401][T18979] hsr0 speed is unknown, defaulting to 1000 [ 553.503419][T18976] lo speed is unknown, defaulting to 1000 [ 554.122065][T18994] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 554.160052][T18999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4214'. [ 554.401713][T18979] lo speed is unknown, defaulting to 1000 [ 554.402773][T18994] hsr0 speed is unknown, defaulting to 1000 [ 555.159595][T19017] netlink: 'syz.4.4217': attribute type 13 has an invalid length. [ 555.180375][T18994] lo speed is unknown, defaulting to 1000 [ 555.186832][T19017] netlink: 'syz.4.4217': attribute type 17 has an invalid length. [ 555.274433][T19017] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.286989][T19017] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 555.425278][T10366] lo speed is unknown, defaulting to 1000 [ 555.436977][T10366] syz0: Port: 1 Link ACTIVE [ 555.457145][T10365] lo speed is unknown, defaulting to 1000 [ 555.472599][T19017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.543716][T19017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.663506][T19017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.784782][T19028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4219'. [ 557.066750][T19048] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 557.135803][T19048] bond0: (slave wlan1): Releasing backup interface [ 557.158990][T19048] bond0: (slave bond12): Releasing backup interface [ 557.203391][T19048] netlink: 'syz.3.4224': attribute type 10 has an invalid length. [ 557.224183][T19048] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 557.233334][T19050] netlink: 'syz.1.4225': attribute type 23 has an invalid length. [ 557.247976][T19048] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 557.438552][T19060] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4228'. [ 557.449117][T19060] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4228'. [ 557.676872][T19071] syzkaller0: entered promiscuous mode [ 557.697564][T19071] syzkaller0: entered allmulticast mode [ 557.895632][T19080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4232'. [ 558.035764][T19082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4233'. [ 558.530265][T19097] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 558.549229][T19097] netlink: 'syz.2.4238': attribute type 10 has an invalid length. [ 558.557318][T19097] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 558.567726][T19097] wlan1: mtu less than device minimum [ 558.573136][T19097] Ã: (slave wlan1): Error -22 calling dev_set_mtu [ 558.782401][T19103] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 558.803763][T19104] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4240'. [ 558.829763][T19103] netlink: 'syz.2.4239': attribute type 10 has an invalid length. [ 558.838020][T19103] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 558.856600][T19103] wlan1: mtu less than device minimum [ 558.873405][T19103] Ã: (slave wlan1): Error -22 calling dev_set_mtu [ 559.364084][T19113] hsr0 speed is unknown, defaulting to 1000 [ 559.410794][T19113] lo speed is unknown, defaulting to 1000 [ 559.566901][T19119] !: renamed from dummy0 (while UP) [ 559.779500][T19123] hsr0 speed is unknown, defaulting to 1000 [ 560.332656][T19134] netlink: 'syz.2.4246': attribute type 10 has an invalid length. [ 560.368560][T19134] wlan1: mtu less than device minimum [ 560.373990][T19134] Ã: (slave wlan1): Error -22 calling dev_set_mtu [ 560.813443][T19123] lo speed is unknown, defaulting to 1000 [ 560.911763][T19154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4249'. [ 560.960024][T19153] netlink: 'syz.2.4251': attribute type 1 has an invalid length. [ 560.967765][T19154] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4249'. [ 561.019146][T19154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4249'. [ 561.067810][T19154] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4249'. [ 561.107597][T19154] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4249'. [ 561.259274][T19160] 8021q: adding VLAN 0 to HW filter on device bond19 [ 561.269831][T19159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4250'. [ 561.499200][T19115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4242'. [ 561.531657][T19163] veth27: entered promiscuous mode [ 561.541304][T19163] bond19: (slave veth27): Enslaving as a backup interface with a down link [ 561.571648][T19165] bond19: (slave veth27): Releasing backup interface [ 561.581800][T19173] netlink: 'syz.0.4253': attribute type 1 has an invalid length. [ 561.671367][T19172] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4252'. [ 561.690855][T19175] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4253'. [ 561.728609][T19173] veth19: entered promiscuous mode [ 562.033366][T19180] syzkaller0: entered promiscuous mode [ 562.039016][T19180] syzkaller0: entered allmulticast mode [ 562.121104][T19177] hsr0 speed is unknown, defaulting to 1000 [ 562.172665][T19177] lo speed is unknown, defaulting to 1000 [ 562.770383][T19191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4258'. [ 562.799599][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 563.236765][T19200] IPv6: Can't replace route, no match found [ 564.645641][T19212] netlink: 'syz.0.4264': attribute type 303 has an invalid length. [ 565.016514][T19217] veth17: entered promiscuous mode [ 565.063029][T19226] hsr0 speed is unknown, defaulting to 1000 [ 565.071248][T19226] lo speed is unknown, defaulting to 1000 [ 565.917014][T19249] pim6reg: entered allmulticast mode [ 565.924357][T19249] pim6reg: left allmulticast mode [ 566.077747][T19255] __nla_validate_parse: 4 callbacks suppressed [ 566.077767][T19255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4273'. [ 566.364602][T19256] hsr0 speed is unknown, defaulting to 1000 [ 566.389583][T19256] lo speed is unknown, defaulting to 1000 [ 566.400199][T19259] netlink: 192 bytes leftover after parsing attributes in process `syz.4.4274'. [ 566.430706][T19259] netlink: zone id is out of range [ 566.437553][T19259] netlink: zone id is out of range [ 566.452927][T19259] netlink: zone id is out of range [ 566.494322][T19259] netlink: zone id is out of range [ 566.578248][T19259] netlink: zone id is out of range [ 566.583511][T19259] netlink: zone id is out of range [ 566.595179][T19259] netlink: zone id is out of range [ 566.606718][T19259] netlink: zone id is out of range [ 566.663121][T19259] netlink: zone id is out of range [ 566.692235][T19259] netlink: zone id is out of range [ 566.819037][T19268] hsr0 speed is unknown, defaulting to 1000 [ 567.088076][T19268] lo speed is unknown, defaulting to 1000 [ 567.246257][T19275] syzkaller0: entered promiscuous mode [ 567.259924][T19275] syzkaller0: entered allmulticast mode [ 567.346608][T19274] hsr0 speed is unknown, defaulting to 1000 [ 567.903164][T19278] netlink: 'syz.2.4276': attribute type 6 has an invalid length. [ 567.985205][T19274] lo speed is unknown, defaulting to 1000 [ 568.165123][T19297] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ1 [ 568.740101][T19297] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 568.788209][T19297] bond0 (unregistering): Released all slaves [ 569.832610][T19303] hsr0 speed is unknown, defaulting to 1000 [ 569.879906][T19303] lo speed is unknown, defaulting to 1000 [ 570.120678][T19320] netlink: 'syz.3.4286': attribute type 11 has an invalid length. [ 570.181692][T19322] netlink: 308 bytes leftover after parsing attributes in process `syz.3.4286'. [ 570.214418][T19322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4286'. [ 570.443853][T19329] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 570.524469][T19330] netlink: 'syz.3.4288': attribute type 10 has an invalid length. [ 570.550122][T19330] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 571.346222][T19342] geneve4: entered promiscuous mode [ 571.353733][T19342] geneve4: entered allmulticast mode [ 571.385648][ T3544] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 42364 - 0 [ 571.412290][ T3544] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 36673 - 0 [ 571.431945][ T3544] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 42364 - 0 [ 571.443705][ T3544] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 36673 - 0 [ 571.612995][ T3544] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 42364 - 0 [ 571.637239][ T3544] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 36673 - 0 [ 571.646139][ T3544] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 42364 - 0 [ 571.656423][ T3544] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 36673 - 0 [ 572.583877][T19371] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 42364 - 0 [ 572.595188][T19371] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 36673 - 0 [ 572.703508][T19371] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 42364 - 0 [ 572.713962][T19371] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 36673 - 0 [ 572.833364][T19368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4297'. [ 572.852533][T19371] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 42364 - 0 [ 572.878778][T19371] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 36673 - 0 [ 572.971856][T19371] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 42364 - 0 [ 573.006159][T19371] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 36673 - 0 [ 573.009859][T19384] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4301'. [ 573.080414][T19384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4301'. [ 573.096761][T19386] net_ratelimit: 29 callbacks suppressed [ 573.096777][T19386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.181696][T19386] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4302'. [ 573.210140][ T1160] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 36673 - 0 [ 573.230708][ T1160] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 42364 - 0 [ 573.270133][ T1160] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 36673 - 0 [ 573.301723][ T1160] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 42364 - 0 [ 573.345755][T19392] macsec0: entered allmulticast mode [ 573.400337][T19396] veth1_macvtap: entered allmulticast mode [ 573.407571][T19395] netlink: 'syz.0.4302': attribute type 9 has an invalid length. [ 573.426868][T19396] macsec0: left allmulticast mode [ 573.440325][T19396] veth1_macvtap: left allmulticast mode [ 573.544559][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 36673 - 0 [ 573.553090][ T36] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 42364 - 0 [ 573.641108][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 36673 - 0 [ 573.686779][ T13] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 42364 - 0 [ 573.858464][T19413] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 573.899723][T19409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4308'. [ 573.917094][T19413] netlink: 'syz.3.4310': attribute type 10 has an invalid length. [ 573.928940][T19413] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 573.974596][T19417] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ1 [ 574.016441][T19414] pim6reg: entered allmulticast mode [ 574.034989][T19409] pim6reg: left allmulticast mode [ 574.254712][T19422] hsr0 speed is unknown, defaulting to 1000 [ 574.272932][T19427] netlink: 'syz.4.4315': attribute type 13 has an invalid length. [ 574.298246][T19427] netlink: 'syz.4.4315': attribute type 17 has an invalid length. [ 574.350399][T19427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 574.417063][T19422] lo speed is unknown, defaulting to 1000 [ 574.560582][T19435] hsr0 speed is unknown, defaulting to 1000 [ 574.626585][T19431] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4317'. [ 574.656121][T19443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.798840][T19427] hsr0 speed is unknown, defaulting to 1000 [ 574.889716][T19447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4318'. [ 575.352359][T19435] lo speed is unknown, defaulting to 1000 [ 575.481972][T19451] netlink: 'syz.0.4319': attribute type 12 has an invalid length. [ 575.493911][T19451] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4319'. [ 575.687519][T19427] lo speed is unknown, defaulting to 1000 [ 576.271866][T19458] netlink: 'syz.2.4320': attribute type 1 has an invalid length. [ 576.286640][T19458] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4320'. [ 576.520688][T19467] mac80211_hwsim hwsim39 wlan1: entered allmulticast mode [ 576.532459][T19467] team0: Port device dummy0 removed [ 576.552968][T19467] netlink: 'syz.0.4323': attribute type 10 has an invalid length. [ 576.625648][T19471] netlink: 'syz.0.4325': attribute type 10 has an invalid length. [ 577.949624][T19496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4331'. [ 577.969976][T19496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4331'. [ 578.008519][T19496] netlink: 'syz.3.4331': attribute type 4 has an invalid length. [ 578.033718][T19499] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4331'. [ 578.561668][T19511] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4335'. [ 578.720457][T19519] netlink: 'syz.0.4337': attribute type 10 has an invalid length. [ 578.732470][T19515] hsr0 speed is unknown, defaulting to 1000 [ 578.800377][T19516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4335'. [ 578.899694][T19515] lo speed is unknown, defaulting to 1000 [ 579.692184][T19545] syzkaller0: entered promiscuous mode [ 579.708942][T19545] syzkaller0: entered allmulticast mode [ 579.782516][T19520] hsr0 speed is unknown, defaulting to 1000 [ 579.797077][T19520] lo speed is unknown, defaulting to 1000 [ 579.886300][T19549] netlink: 844 bytes leftover after parsing attributes in process `syz.0.4345'. [ 579.919885][T19551] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 579.956305][T19549] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4345'. [ 579.978482][T19551] netlink: 'syz.3.4346': attribute type 10 has an invalid length. [ 579.986355][T19551] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 580.175771][T19553] syzkaller0: entered promiscuous mode [ 580.188368][T19553] syzkaller0: entered allmulticast mode [ 580.556078][T19565] hsr0 speed is unknown, defaulting to 1000 [ 580.765524][T19565] lo speed is unknown, defaulting to 1000 [ 581.703023][T19592] hsr0 speed is unknown, defaulting to 1000 [ 581.977561][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 582.212104][T19592] lo speed is unknown, defaulting to 1000 [ 582.624713][T19616] veth29: entered promiscuous mode [ 582.666119][T19615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4356'. [ 582.670022][T19617] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4355'. [ 582.695923][T19615] pim6reg: entered allmulticast mode [ 582.898658][T19620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4357'. [ 583.891998][T19634] syzkaller0: entered promiscuous mode [ 583.917262][T19634] syzkaller0: entered allmulticast mode [ 584.367126][T19638] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 584.455806][T19639] netlink: 'syz.3.4361': attribute type 10 has an invalid length. [ 584.494739][T19639] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 585.583345][T19647] hsr0 speed is unknown, defaulting to 1000 [ 585.614896][T19647] lo speed is unknown, defaulting to 1000 [ 585.712290][T19662] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4367'. [ 585.744966][T19661] veth13: entered promiscuous mode [ 586.561588][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.582313][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.297819][T19692] syzkaller0: entered promiscuous mode [ 587.348253][T19692] syzkaller0: entered allmulticast mode [ 587.356625][T19696] netlink: 'syz.3.4375': attribute type 10 has an invalid length. [ 587.633994][T19698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4377'. [ 587.753669][T19705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4379'. [ 587.845405][T19711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4380'. [ 587.855685][T19711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4380'. [ 587.905524][T19706] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 587.934750][T19712] team0: Unable to change to the same mode the team is in [ 587.942325][T19713] vlan0: entered promiscuous mode [ 587.952392][T19713] veth1: entered promiscuous mode [ 587.974054][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.996196][T19705] tipc: Enabled bearer , priority 0 [ 588.013018][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.272314][T19726] hsr0 speed is unknown, defaulting to 1000 [ 588.281366][T19726] lo speed is unknown, defaulting to 1000 [ 588.363883][T19717] hsr0 speed is unknown, defaulting to 1000 [ 588.511847][T19731] erspan0: left allmulticast mode [ 588.810314][T19731] !: left promiscuous mode [ 588.841692][T19731] batadv0: left promiscuous mode [ 588.854026][T19731] veth3: left allmulticast mode [ 588.880575][T19731] geneve3: left promiscuous mode [ 588.896683][T19731] bridge8: left allmulticast mode [ 588.913499][T19731] gretap2: left promiscuous mode [ 588.929197][T19731] macsec1: left promiscuous mode [ 588.941468][T19731] macsec1: left allmulticast mode [ 588.954577][T19731] veth9: left promiscuous mode [ 588.969918][T19731] vlan3: left promiscuous mode [ 588.975050][T19731] vlan3: left allmulticast mode [ 588.987618][T19731] hsr_slave_1: left allmulticast mode [ 589.002553][T19731] gtp0: left promiscuous mode [ 589.145498][T19731] veth11: left promiscuous mode [ 589.156591][T19731] macvtap0: left promiscuous mode [ 589.162315][T19731] macvtap0: left allmulticast mode [ 589.211974][T19731] geneve4: left promiscuous mode [ 589.223921][T19731] geneve4: left allmulticast mode [ 589.336282][T19740] pim6reg: entered allmulticast mode [ 589.352877][T19717] lo speed is unknown, defaulting to 1000 [ 589.364665][ T36] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 36673 - 0 [ 589.387988][ T36] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 42364 - 0 [ 589.408703][ T36] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 36673 - 0 [ 589.417219][ T36] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 42364 - 0 [ 589.476934][ T36] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 36673 - 0 [ 589.491042][ T36] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 42364 - 0 [ 589.516586][ T36] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 36673 - 0 [ 589.554074][ T36] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 42364 - 0 [ 589.641776][T19748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4388'. [ 589.755517][T19746] veth13: entered promiscuous mode [ 589.897890][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 589.908489][ T5158] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 590.495464][T19775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4393'. [ 590.622785][T19767] smc: net device bond0 applied user defined pnetid SYZ2 [ 590.641374][T19767] smc: net device bond0 erased user defined pnetid SYZ2 [ 590.657597][T19767] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ1 [ 591.123118][T19774] hsr0 speed is unknown, defaulting to 1000 [ 591.152172][T19774] lo speed is unknown, defaulting to 1000 [ 591.208908][T19787] hsr0 speed is unknown, defaulting to 1000 [ 592.120239][T19787] lo speed is unknown, defaulting to 1000 [ 592.343384][T19809] veth15: entered promiscuous mode [ 592.367811][T19811] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4400'. [ 592.542223][T19816] netlink: 'syz.4.4401': attribute type 10 has an invalid length. [ 592.552710][T19816] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4401'. [ 592.605097][T19816] geneve0: entered promiscuous mode [ 592.621613][T19817] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4401'. [ 592.660749][T19816] team0: Port device geneve0 added [ 592.667204][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.679383][T19817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4401'. [ 592.690372][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.733884][T19817] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 592.756316][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.790058][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.884040][T19819] syzkaller0: entered promiscuous mode [ 592.890054][T19819] syzkaller0: entered allmulticast mode [ 593.160155][T10366] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 593.921154][T19837] sctp: [Deprecated]: syz.4.4407 (pid 19837) Use of struct sctp_assoc_value in delayed_ack socket option. [ 593.921154][T19837] Use struct sctp_sack_info instead [ 593.940860][T10366] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 593.962541][T19837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4407'. [ 594.193917][T19841] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 594.434647][T19843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4409'. [ 594.840164][ T3544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.852341][ T3544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.959481][T19852] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4411'. [ 594.989397][T19849] veth13: entered promiscuous mode [ 595.304062][T19863] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4415'. [ 595.393324][T19868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4415'. [ 595.405377][T19863] veth19: entered promiscuous mode [ 595.485809][T19867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4416'. [ 595.540695][T19867] pim6reg: entered allmulticast mode [ 595.659649][T19875] tipc: Enabling of bearer rejected, failed to enable media [ 595.669496][T19875] syzkaller0: entered promiscuous mode [ 595.674999][T19875] syzkaller0: entered allmulticast mode [ 596.049598][T19887] netlink: 'syz.2.4422': attribute type 10 has an invalid length. [ 596.071102][T19887] wlan1: mtu less than device minimum [ 596.082155][T19887] Ã: (slave wlan1): Error -22 calling dev_set_mtu [ 596.339885][T19899] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 597.337011][T19919] dvmrp8: entered allmulticast mode [ 597.350648][T19919] openvswitch: netlink: Flow key attr not present in new flow. [ 597.480328][T19917] dvmrp8: left allmulticast mode [ 597.499253][T19921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 597.561017][T19921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4427'. [ 597.622418][T19924] siw: device registration error -23 [ 597.708585][T19931] tipc: Resetting bearer [ 597.789794][T19934] netlink: 'syz.1.4430': attribute type 10 has an invalid length. [ 597.972071][T19937] tipc: Enabling of bearer rejected, failed to enable media [ 597.984494][T19937] syzkaller0: entered promiscuous mode [ 597.992500][T19937] syzkaller0: entered allmulticast mode [ 598.278211][T19946] netlink: 'syz.3.4434': attribute type 10 has an invalid length. [ 598.458713][T19954] netlink: 'syz.2.4438': attribute type 1 has an invalid length. [ 598.519245][T19958] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4438'. [ 598.640744][T19954] bond20: entered promiscuous mode [ 598.655051][T19954] 8021q: adding VLAN 0 to HW filter on device bond20 [ 598.670646][T19958] batadv0: entered promiscuous mode [ 598.676156][T19958] batadv0: entered allmulticast mode [ 598.685717][T19958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.696420][T19958] bond20: (slave batadv0): making interface the new active one [ 598.705758][T19958] bond20: (slave batadv0): Enslaving as an active interface with an up link [ 598.896452][T19954] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4438'. [ 598.954723][T19968] netlink: 'syz.3.4440': attribute type 1 has an invalid length. [ 599.002397][T19968] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4440'. [ 599.071552][T19973] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4443'. [ 599.097809][T19968] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4440'. [ 599.486736][T19980] bond20: (slave batadv0): Releasing active interface [ 599.569876][T19983] erspan0: left allmulticast mode [ 599.651606][T19985] netlink: 'syz.2.4444': attribute type 10 has an invalid length. [ 599.695466][T19983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.721109][T19983] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.753363][T19983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 599.794594][T19985] wlan1: mtu less than device minimum [ 599.803831][T19985] Ã: (slave wlan1): Error -22 calling dev_set_mtu [ 599.915320][T19990] tipc: Resetting bearer [ 599.959959][T19990] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 600.002298][ T24] lo speed is unknown, defaulting to 1000 [ 600.018171][ T24] syz0: Port: 1 Link DOWN [ 600.103837][ T24] lo speed is unknown, defaulting to 1000 [ 600.110048][T19996] tipc: Enabling of bearer rejected, failed to enable media [ 600.129222][T19994] syzkaller0: entered promiscuous mode [ 600.134980][T19998] netlink: 'syz.0.4447': attribute type 1 has an invalid length. [ 600.145767][T19994] syzkaller0: entered allmulticast mode [ 600.151646][T19998] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4447'. [ 600.168501][T19998] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4447'. [ 600.198508][T20000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4447'. [ 600.232540][T20000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4447'. [ 600.331445][T20004] tipc: Resetting bearer [ 600.395180][T20004] netlink: 'syz.1.4449': attribute type 10 has an invalid length. [ 600.824115][T20028] netlink: 'syz.4.4456': attribute type 11 has an invalid length. [ 601.049974][T20035] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.159625][T20035] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.236126][T20044] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.318612][T20035] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.343011][T20044] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.382689][T20035] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.403557][T20050] tipc: Enabling of bearer rejected, failed to enable media [ 601.414076][T20050] syzkaller0: entered promiscuous mode [ 601.419677][T20050] syzkaller0: entered allmulticast mode [ 601.441323][T20044] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.531556][T20044] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.601781][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.652994][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.673944][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.708831][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.735338][T20062] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ1 [ 601.829399][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.848808][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.911416][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.933940][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.052555][T20072] pim6reg: left allmulticast mode [ 602.274908][T20083] netlink: 'syz.0.4465': attribute type 16 has an invalid length. [ 602.296022][T20085] netlink: 'syz.1.4470': attribute type 20 has an invalid length. [ 602.394104][T20083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 602.499333][T20077] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 602.507716][T20088] hsr0 speed is unknown, defaulting to 1000 [ 602.517271][T20088] lo speed is unknown, defaulting to 1000 [ 602.653507][T20092] tipc: Bearer : already 2 bearers with priority 0 [ 602.674697][T20092] tipc: Enabling of bearer rejected, cannot adjust to lower [ 602.893887][T20094] hsr0 speed is unknown, defaulting to 1000 [ 602.922985][T20099] validate_nla: 1 callbacks suppressed [ 602.923002][T20099] netlink: 'syz.2.4474': attribute type 21 has an invalid length. [ 602.925681][T20094] lo speed is unknown, defaulting to 1000 [ 602.929324][T20099] netlink: 'syz.2.4474': attribute type 6 has an invalid length. [ 602.988370][T20099] __nla_validate_parse: 7 callbacks suppressed [ 602.988389][T20099] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4474'. [ 603.005521][T20101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4474'. [ 603.017916][T20096] hsr0 speed is unknown, defaulting to 1000 [ 603.063536][T20099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4474'. [ 603.089140][T20098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4475'. [ 603.177021][T20107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4477'. [ 603.241425][T20105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4476'. [ 603.299214][T20105] pim6reg: left allmulticast mode [ 603.512913][T20113] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 603.539285][T20113] IPVS: length: 185 != 8 [ 603.583735][T20096] lo speed is unknown, defaulting to 1000 [ 603.681166][T20115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4480'. [ 603.735652][T20115] pim6reg: entered allmulticast mode [ 603.746806][T20118] pim6reg: left allmulticast mode [ 603.789297][T20119] netlink: 'syz.4.4481': attribute type 20 has an invalid length. [ 603.922921][T20123] tipc: Enabling of bearer rejected, failed to enable media [ 603.933982][T20123] syzkaller0: entered promiscuous mode [ 603.950107][T20123] syzkaller0: entered allmulticast mode [ 604.218592][T20129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4484'. [ 604.625649][T20134] hsr0 speed is unknown, defaulting to 1000 [ 604.729521][T20132] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 604.804448][T20134] lo speed is unknown, defaulting to 1000 [ 605.316582][T20144] tipc: Enabled bearer , priority 0 [ 605.324478][T20144] syzkaller0: entered promiscuous mode [ 605.332949][T20144] syzkaller0: entered allmulticast mode [ 605.371598][T20144] tipc: Resetting bearer [ 605.430771][T20144] tipc: Resetting bearer [ 605.465428][T20144] tipc: Disabling bearer [ 605.482772][T20146] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.4487'. [ 605.954544][T20151] hsr0 speed is unknown, defaulting to 1000 [ 606.050664][T20151] lo speed is unknown, defaulting to 1000 [ 606.623119][T20158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4490'. [ 606.769707][T20162] tipc: Enabling of bearer rejected, failed to enable media [ 606.784796][T20162] syzkaller0: entered promiscuous mode [ 606.801931][T20162] syzkaller0: entered allmulticast mode [ 606.926594][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.945616][T20165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 607.067472][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.180891][T20174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 607.216030][T20174] vlan0: left promiscuous mode [ 607.225894][T20174] veth1: left promiscuous mode [ 607.242702][T20174] bond8: left promiscuous mode [ 607.250379][T20174] bond8: left allmulticast mode [ 607.257111][T20174] veth13: left promiscuous mode [ 607.303864][ T36] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.319113][ T36] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.340683][ T36] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.352620][ T36] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.719336][T20184] hsr0 speed is unknown, defaulting to 1000 [ 607.726769][T20184] lo speed is unknown, defaulting to 1000 [ 608.016969][T20190] __nla_validate_parse: 4 callbacks suppressed [ 608.016986][T20190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4497'. [ 608.182811][T20194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4498'. [ 608.221937][T20194] pim6reg: left allmulticast mode [ 608.978614][T20207] netlink: 'syz.0.4502': attribute type 12 has an invalid length. [ 609.069967][T20209] tipc: Enabling of bearer rejected, failed to enable media [ 609.137888][T20209] syzkaller0: entered promiscuous mode [ 609.143410][T20209] syzkaller0: entered allmulticast mode [ 609.413793][T20217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4505'. [ 609.805022][T20224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4507'. [ 609.866413][T20229] netlink: 'syz.0.4509': attribute type 10 has an invalid length. [ 609.890570][T20229] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4509'. [ 609.972480][T20229] team0: Port device geneve0 added [ 609.988790][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.018496][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.041540][T20227] tipc: Enabling of bearer rejected, failed to enable media [ 610.065104][T20224] hsr0 speed is unknown, defaulting to 1000 [ 610.087234][T20231] syzkaller0: entered promiscuous mode [ 610.103774][T20231] syzkaller0: entered allmulticast mode [ 610.114052][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.141394][T20224] lo speed is unknown, defaulting to 1000 [ 610.141415][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.235101][T20236] netlink: 'syz.0.4510': attribute type 10 has an invalid length. [ 610.310418][T20237] tipc: Enabling of bearer rejected, already enabled [ 610.539898][T20242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4513'. [ 610.564610][T20239] hsr0 speed is unknown, defaulting to 1000 [ 610.841262][T20247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4514'. [ 610.876476][T20247] pim6reg: entered allmulticast mode [ 610.886794][T20239] lo speed is unknown, defaulting to 1000 [ 610.898025][T20247] pim6reg: left allmulticast mode [ 610.988062][T20251] hsr0 speed is unknown, defaulting to 1000 [ 611.283710][T20238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.420351][T20251] lo speed is unknown, defaulting to 1000 [ 611.693320][T20260] geneve0: left promiscuous mode [ 611.717772][T20260] team0: Port device geneve0 removed [ 611.803315][T20262] netlink: 'syz.4.4518': attribute type 10 has an invalid length. [ 612.606763][T20271] netlink: 'syz.0.4520': attribute type 13 has an invalid length. [ 612.625424][T20271] netlink: 'syz.0.4520': attribute type 17 has an invalid length. [ 612.717104][T20271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 612.788901][T20270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.671641][T20280] tun0: tun_chr_ioctl cmd 2147767520 [ 613.786867][T20283] tipc: Resetting bearer [ 613.803053][T20283] netlink: 'syz.1.4524': attribute type 10 has an invalid length. [ 613.956021][T20285] netlink: 'syz.0.4526': attribute type 4 has an invalid length. [ 614.000355][T20285] netlink: 'syz.0.4526': attribute type 4 has an invalid length. [ 614.011465][T20287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4525'. [ 614.063303][T20290] tipc: Resetting bearer [ 614.098670][T20290] netlink: 'syz.1.4527': attribute type 10 has an invalid length. [ 614.246893][T20293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4528'. [ 614.365877][T20297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4529'. [ 614.394443][T20297] pim6reg: entered allmulticast mode [ 614.448361][T20307] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ1 [ 614.473683][T20304] pim6reg: left allmulticast mode [ 614.863908][T20310] smc: removing net device bond0 with user defined pnetid SYZ2 [ 614.873551][T20310] bond0 (unregistering): Released all slaves [ 614.955967][T20319] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4534'. [ 615.037136][T20322] netlink: 'syz.2.4535': attribute type 10 has an invalid length. [ 615.048212][T20324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4536'. [ 615.061164][T20322] wlan1: mtu less than device minimum [ 615.066732][T20324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4536'. [ 615.076219][T20322] Ã: (slave wlan1): Error -22 calling dev_set_mtu [ 615.164012][T20328] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 615.273119][T20333] tipc: Resetting bearer [ 615.288425][T20335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4537'. [ 615.296094][T20333] netlink: 'syz.1.4538': attribute type 10 has an invalid length. [ 615.552401][T20346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4541'. [ 616.340562][T20361] syzkaller0: entered promiscuous mode [ 616.347825][T20361] syzkaller0: entered allmulticast mode [ 616.493058][T20369] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 616.674336][T20374] hsr0 speed is unknown, defaulting to 1000 [ 616.688965][T20374] lo speed is unknown, defaulting to 1000 [ 617.264886][T20390] netlink: 'syz.4.4548': attribute type 10 has an invalid length. [ 617.449972][T20392] netlink: 'syz.3.4549': attribute type 10 has an invalid length. [ 617.649473][T20400] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4552'. [ 617.744700][T20397] team0: Port device geneve0 removed [ 617.770800][ T49] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.791302][T20397] netlink: 'syz.0.4551': attribute type 10 has an invalid length. [ 617.834348][T20404] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4552'. [ 617.868313][T20400] veth13: entered promiscuous mode [ 617.879279][T20383] netlink: 'syz.1.4544': attribute type 6 has an invalid length. [ 618.049787][ T49] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.063459][ T49] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.184706][ T49] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.720874][T20425] netlink: 'syz.4.4557': attribute type 20 has an invalid length. [ 618.766157][T20427] netlink: zone id is out of range [ 618.862044][T20427] netlink: zone id is out of range [ 618.898756][T20427] netlink: zone id is out of range [ 618.914403][T20427] netlink: zone id is out of range [ 618.937705][T20427] netlink: zone id is out of range [ 618.943102][T20427] netlink: zone id is out of range [ 618.986401][T20430] hsr0 speed is unknown, defaulting to 1000 [ 618.998115][T20424] hsr0 speed is unknown, defaulting to 1000 [ 619.009757][T20430] lo speed is unknown, defaulting to 1000 [ 619.025234][T20427] netlink: zone id is out of range [ 619.075300][T20427] netlink: zone id is out of range [ 619.082757][T20427] netlink: zone id is out of range [ 619.120141][T20427] netlink: zone id is out of range [ 619.152839][T20436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4559'. [ 619.342917][T20443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4560'. [ 619.366379][T20433] hsr0 speed is unknown, defaulting to 1000 [ 619.387702][T20443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4560'. [ 619.419573][T20444] netlink: 'syz.3.4559': attribute type 2 has an invalid length. [ 619.483589][T20447] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4560'. [ 619.639439][T20444] : entered promiscuous mode [ 620.172985][T20461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4562'. [ 620.298566][T20465] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4563'. [ 620.513747][T20473] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4564'. [ 620.539467][T20424] lo speed is unknown, defaulting to 1000 [ 620.665563][T20475] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.738556][ T5956] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 620.792082][T20478] tipc: Resetting bearer [ 620.821557][T20478] netlink: 'syz.1.4565': attribute type 10 has an invalid length. [ 620.957943][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 621.152944][T20484] netlink: 'syz.1.4568': attribute type 20 has an invalid length. [ 621.218827][ T8143] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 621.250215][T20433] lo speed is unknown, defaulting to 1000 [ 621.643967][T20498] netlink: 'syz.3.4572': attribute type 13 has an invalid length. [ 621.683487][T20498] netlink: 'syz.3.4572': attribute type 17 has an invalid length. [ 621.768363][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 622.202827][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 622.553859][ T3544] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 622.577962][ T3544] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 622.600175][T20505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4583'. [ 622.835323][T20511] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4574'. [ 622.847446][T20502] hsr0 speed is unknown, defaulting to 1000 [ 622.953112][T20502] lo speed is unknown, defaulting to 1000 [ 622.991204][T20513] netlink: 'syz.1.4575': attribute type 1 has an invalid length. [ 623.047888][T20515] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4575'. [ 623.105579][T20513] bond13: entered promiscuous mode [ 623.111488][T20513] 8021q: adding VLAN 0 to HW filter on device bond13 [ 623.126194][T20515] batadv1: entered promiscuous mode [ 623.131485][T20515] batadv1: entered allmulticast mode [ 623.140054][T20515] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 623.149225][T20515] bond13: (slave batadv1): making interface the new active one [ 623.158043][T20515] bond13: (slave batadv1): Enslaving as an active interface with an up link [ 623.300938][T20509] netlink: 'syz.3.4573': attribute type 6 has an invalid length. [ 623.578732][T10366] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 624.115770][T20529] veth17: entered promiscuous mode [ 624.235004][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 624.265544][T20532] tipc: Resetting bearer [ 624.274156][T20532] bond13: (slave batadv1): Releasing active interface [ 624.296898][T20532] netlink: 'syz.1.4578': attribute type 10 has an invalid length. [ 624.314155][T20526] hsr0 speed is unknown, defaulting to 1000 [ 624.438006][T20526] lo speed is unknown, defaulting to 1000 [ 626.563047][T20567] hsr0 speed is unknown, defaulting to 1000 [ 626.623365][T20567] lo speed is unknown, defaulting to 1000 [ 626.715842][T20577] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.867595][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 626.894568][T20577] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.049995][T20577] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.051076][T20587] __nla_validate_parse: 3 callbacks suppressed [ 627.051096][T20587] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4590'. [ 627.120872][T20577] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.211801][T20590] net_ratelimit: 6 callbacks suppressed [ 627.211822][T20590] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 627.350947][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.370031][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.405771][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.435130][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.657253][T20599] tipc: Resetting bearer [ 627.689982][T20599] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 628.110765][T20610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4598'. [ 628.252623][T20618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4598'. [ 628.266025][T20620] netlink: 'syz.4.4597': attribute type 10 has an invalid length. [ 628.299795][T20615] veth29: entered promiscuous mode [ 628.969274][T20653] netlink: 'syz.2.4603': attribute type 16 has an invalid length. [ 628.977181][T20653] netlink: 'syz.2.4603': attribute type 17 has an invalid length. [ 629.089280][T20653] 8021q: adding VLAN 0 to HW filter on device à [ 629.098090][T20653] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.107858][T20653] tipc: Resetting bearer [ 629.120126][T20653] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 629.756697][T20674] netlink: 'syz.2.4610': attribute type 20 has an invalid length. [ 629.831379][T20676] netlink: 'syz.0.4611': attribute type 10 has an invalid length. [ 629.871213][T20678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4612'. [ 629.966642][T20682] veth17: entered promiscuous mode [ 629.989454][T20683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4612'. [ 630.039119][T20681] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4614'. [ 630.118708][T20684] tipc: Resetting bearer [ 630.134638][T20684] tipc: Resetting bearer [ 630.176757][T20684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 630.268889][T20692] syzkaller0: entered promiscuous mode [ 630.274420][T20692] syzkaller0: entered allmulticast mode [ 630.510709][T20704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4620'. [ 630.525164][T20698] tipc: Resetting bearer [ 630.586098][T20698] tipc: Resetting bearer [ 630.671800][T20701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4619'. [ 631.516707][T20728] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4625'. [ 631.596785][T20730] netlink: 'syz.3.4626': attribute type 13 has an invalid length. [ 631.614804][T20730] netlink: 'syz.3.4626': attribute type 17 has an invalid length. [ 631.676978][T20730] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 631.708111][ T5911] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 631.722175][T20736] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4628'. [ 631.771666][T20730] hsr0 speed is unknown, defaulting to 1000 [ 631.817761][T20730] lo speed is unknown, defaulting to 1000 [ 631.981267][T20743] 8021q: adding VLAN 0 to HW filter on device à [ 632.016980][T20743] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.051826][T20743] tipc: Resetting bearer [ 632.081592][T20743] tipc: Resetting bearer [ 632.126953][T20743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 632.350118][ T30] audit: type=1800 audit(1754056311.428:12): pid=20733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4624" name="memory.events" dev="tmpfs" ino=4412 res=0 errno=0 [ 632.357937][ T5911] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 632.734597][T20757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4631'. [ 632.878363][T20759] syzkaller0: entered promiscuous mode [ 632.898992][T20759] syzkaller0: entered allmulticast mode [ 632.916321][T20761] hsr0 speed is unknown, defaulting to 1000 [ 633.000594][T20761] lo speed is unknown, defaulting to 1000 [ 633.479118][T20773] netlink: 47 bytes leftover after parsing attributes in process `syz.0.4637'. [ 634.341333][T20767] netlink: 'syz.2.4634': attribute type 6 has an invalid length. [ 634.891196][T20804] IPv6: Can't replace route, no match found [ 634.948038][T20801] hsr0 speed is unknown, defaulting to 1000 [ 635.000019][T20801] lo speed is unknown, defaulting to 1000 [ 635.100556][T20803] syzkaller0: entered promiscuous mode [ 635.106099][T20803] syzkaller0: entered allmulticast mode [ 635.630153][T20800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.737499][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 637.599901][T20823] netlink: 'syz.4.4647': attribute type 10 has an invalid length. [ 637.687208][T20828] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4649'. [ 637.703033][T20826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4650'. [ 637.949794][T20828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 638.334009][T20846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4652'. [ 638.547467][T20846] 8021q: VLANs not supported on ipvlan1 [ 639.745826][T20878] netlink: 'syz.3.4660': attribute type 7 has an invalid length. [ 639.754210][T20878] netlink: 'syz.3.4660': attribute type 8 has an invalid length. [ 639.764821][T20878] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4660'. [ 639.831824][T20880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.877676][T20880] bond0: (slave rose0): Enslaving as an active interface with an up link [ 639.943903][T20883] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4662'. [ 640.045213][T20891] tipc: Resetting bearer [ 640.095063][T20891] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 640.140441][T20898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4664'. [ 640.165952][T20898] netlink: 'syz.4.4664': attribute type 5 has an invalid length. [ 640.223654][T20898] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4664'. [ 640.414605][T20898] geneve3: entered promiscuous mode [ 640.457386][T20898] geneve3: entered allmulticast mode [ 640.472537][ T3544] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 640.494246][ T3544] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 640.520179][ T3544] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 640.561638][ T3544] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 640.789581][T20912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 640.874087][T20912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 640.903139][T20920] netlink: 'syz.4.4670': attribute type 1 has an invalid length. [ 640.971577][T20920] smc: adding net device bond0 with user defined pnetid SYZ2 [ 640.998120][T20911] hsr0 speed is unknown, defaulting to 1000 [ 641.035872][T20911] lo speed is unknown, defaulting to 1000 [ 641.348491][T20931] netlink: 'syz.0.4674': attribute type 1 has an invalid length. [ 641.493989][T20933] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4674'. [ 641.517943][T20931] veth19: entered promiscuous mode [ 641.526844][T20931] bond14: (slave veth19): Enslaving as an active interface with an up link [ 641.543330][T20933] 8021q: adding VLAN 0 to HW filter on device bond14 [ 641.687636][T20938] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4676'. [ 641.838921][T20943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4676'. [ 642.084225][T20946] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4677'. [ 642.114667][T20949] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4678'. [ 642.197938][T20948] tipc: Resetting bearer [ 642.208599][T20948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 642.922954][T20964] hsr0 speed is unknown, defaulting to 1000 [ 643.005123][T20964] lo speed is unknown, defaulting to 1000 [ 643.589027][T20991] tipc: Enabled bearer , priority 0 [ 643.669218][T20995] __nla_validate_parse: 1 callbacks suppressed [ 643.669237][T20995] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4689'. [ 643.698974][T20991] syzkaller0: entered promiscuous mode [ 643.704645][T20991] syzkaller0: entered allmulticast mode [ 643.715432][T20991] tipc: Resetting bearer [ 643.721823][T20968] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4682'. [ 643.838589][T20997] macvlan3: entered allmulticast mode [ 643.844144][T20997] veth1_vlan: entered allmulticast mode [ 643.892562][T20997] veth1_vlan: left allmulticast mode [ 644.085345][T20990] tipc: Resetting bearer [ 645.839397][T20990] tipc: Disabling bearer [ 645.919608][T21020] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 646.185370][T21041] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4695'. [ 646.564374][T21053] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004 [ 646.576756][T21059] netlink: 'syz.3.4700': attribute type 20 has an invalid length. [ 646.687557][T21053] nbd3: detected capacity change from 0 to 127 [ 646.718929][ T5158] block nbd3: Receive control failed (result -32) [ 646.781871][T21061] netlink: 'syz.2.4702': attribute type 1 has an invalid length. [ 646.922674][T21064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4702'. [ 646.999727][T21061] 8021q: adding VLAN 0 to HW filter on device bond21 [ 647.020026][T21067] netlink: 'syz.4.4703': attribute type 13 has an invalid length. [ 647.034542][T21067] netlink: 'syz.4.4703': attribute type 17 has an invalid length. [ 647.051671][T21061] gretap2: entered promiscuous mode [ 647.061366][T21061] bond21: (slave gretap2): making interface the new active one [ 647.071462][T21061] bond21: (slave gretap2): Enslaving as an active interface with an up link [ 647.179649][T21067] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.187062][T21067] tipc: Resetting bearer [ 647.193518][T21067] tipc: Resetting bearer [ 647.199429][ T5956] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 647.214452][T21067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 647.231722][ T5911] lo speed is unknown, defaulting to 1000 [ 647.241294][ T5911] syz0: Port: 1 Link ACTIVE [ 647.262860][T21066] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4702'. [ 647.276491][T21070] hsr0 speed is unknown, defaulting to 1000 [ 647.287885][ T5911] lo speed is unknown, defaulting to 1000 [ 647.320802][ T5956] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 647.353785][T21070] lo speed is unknown, defaulting to 1000 [ 647.372460][T21067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.469306][T21079] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4707'. [ 647.628776][ T5911] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 647.640535][T21081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 647.850648][ T1160] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 647.892090][ T1160] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 648.014231][ T1160] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 648.023492][ T1160] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 648.207995][ T5911] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 648.298198][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 648.471868][T21098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4712'. [ 648.487101][ T5911] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 648.495240][T21098] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4712'. [ 649.302272][T21099] tipc: Resetting bearer [ 649.310880][T21099] tipc: Resetting bearer [ 649.316540][T21099] tipc: Resetting bearer [ 649.331340][T21111] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 649.359267][T21115] syzkaller0: entered promiscuous mode [ 649.378390][T21111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4714'. [ 649.378598][T21115] syzkaller0: entered allmulticast mode [ 649.452827][T21113] bridge14: entered promiscuous mode [ 649.465055][T21113] bridge14: entered allmulticast mode [ 649.475094][T21113] team0: Port device bridge14 added [ 649.889219][T21123] tipc: Enabling of bearer rejected, failed to enable media [ 649.905798][T21121] netlink: 'syz.1.4717': attribute type 20 has an invalid length. [ 650.032192][T21126] hsr0 speed is unknown, defaulting to 1000 [ 650.043467][T21132] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4720'. [ 650.076733][T21126] lo speed is unknown, defaulting to 1000 [ 650.078583][T21131] netlink: 'syz.0.4721': attribute type 10 has an invalid length. [ 650.145152][T21141] pimreg: left allmulticast mode [ 650.609157][T21150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4725'. [ 650.624052][T21148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4723'. [ 650.652129][T21152] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4724'. [ 650.696380][T21155] netlink: 'syz.1.4726': attribute type 10 has an invalid length. [ 650.712877][T21155] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4726'. [ 650.829418][T21160] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4726'. [ 650.855822][T21150] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4725'. [ 650.903188][T21163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.966392][T21159] hsr0 speed is unknown, defaulting to 1000 [ 650.999427][T21159] lo speed is unknown, defaulting to 1000 [ 651.248000][T21169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4728'. [ 651.258792][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 651.270879][T21169] pim6reg: entered allmulticast mode [ 651.282053][T21169] pim6reg: left allmulticast mode [ 652.061426][T21181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4732'. [ 652.150848][T21183] hsr0 speed is unknown, defaulting to 1000 [ 652.215233][T21183] lo speed is unknown, defaulting to 1000 [ 652.266822][T21191] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 652.297783][ C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 652.297802][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 652.606376][T21188] syzkaller0: entered promiscuous mode [ 652.612659][T21188] syzkaller0: entered allmulticast mode [ 652.651494][T21198] tipc: Enabling of bearer rejected, failed to enable media [ 653.659074][T21221] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 653.681738][T21221] netlink: 'syz.3.4737': attribute type 10 has an invalid length. [ 653.708473][T21221] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 654.005200][T21225] syzkaller0: entered promiscuous mode [ 654.027570][T21225] syzkaller0: entered allmulticast mode [ 654.248753][T21230] pim6reg1: entered promiscuous mode [ 654.255663][T21230] pim6reg1: entered allmulticast mode [ 654.580984][T21231] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4738'. [ 654.723149][T21231] bond14 (unregistering): Released all slaves [ 654.764137][T21241] hsr0 speed is unknown, defaulting to 1000 [ 654.795887][T21241] lo speed is unknown, defaulting to 1000 [ 654.809111][T21244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4742'. [ 654.847854][T21244] pim6reg: entered allmulticast mode [ 654.854938][T21244] pim6reg: left allmulticast mode [ 655.486315][T21250] syzkaller0: entered promiscuous mode [ 655.501291][T21250] syzkaller0: entered allmulticast mode [ 655.556583][T21252] tipc: Enabling of bearer rejected, failed to enable media [ 656.121369][T21272] netlink: 'syz.1.4748': attribute type 3 has an invalid length. [ 656.217734][T21274] netlink: 'syz.4.4751': attribute type 4 has an invalid length. [ 656.276070][T21279] netlink: 'syz.4.4751': attribute type 4 has an invalid length. [ 656.344112][ T24] lo speed is unknown, defaulting to 1000 [ 656.353589][ T24] lo speed is unknown, defaulting to 1000 [ 656.409869][ T5956] lo speed is unknown, defaulting to 1000 [ 656.563677][T21286] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4752'. [ 657.029277][T21292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4753'. [ 657.069597][T21292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4753'. [ 657.117805][T21291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.166368][T21294] netlink: 'syz.3.4755': attribute type 10 has an invalid length. [ 657.194801][T21294] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4755'. [ 657.234021][T21295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4755'. [ 657.237375][T21294] !: entered promiscuous mode [ 657.285733][T21294] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 657.310743][T21298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4754'. [ 657.325304][T21294] netlink: 'syz.3.4755': attribute type 3 has an invalid length. [ 657.348357][T21294] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4755'. [ 657.408529][T21299] netlink: 452 bytes leftover after parsing attributes in process `syz.1.4754'. [ 657.516332][T21301] pim6reg: entered allmulticast mode [ 657.526675][T21301] pim6reg: left allmulticast mode [ 657.783509][T21317] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 657.896294][T21321] vxcan0: entered promiscuous mode [ 658.267817][T21334] netlink: 'syz.4.4763': attribute type 13 has an invalid length. [ 658.299604][T21334] netlink: 'syz.4.4763': attribute type 17 has an invalid length. [ 658.331990][T21334] tipc: Resetting bearer [ 658.354953][T21334] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 658.379067][ T5956] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 658.443744][T21339] !: left promiscuous mode [ 658.468003][ T5956] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 658.509651][T21339] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 658.594066][T21334] hsr0 speed is unknown, defaulting to 1000 [ 658.609363][ T5956] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 658.705929][T21334] lo speed is unknown, defaulting to 1000 [ 658.777619][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 658.945608][T21351] pim6reg: entered allmulticast mode [ 659.011053][T21355] veth17: entered promiscuous mode [ 659.058083][T21351] pim6reg: left allmulticast mode [ 659.337745][ T5956] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 659.350339][T21361] pim6reg: entered allmulticast mode [ 659.357897][T21366] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 659.376504][T21361] pim6reg: left allmulticast mode [ 659.615073][T21377] netlink: 'syz.3.4775': attribute type 13 has an invalid length. [ 659.629818][T21377] netlink: 'syz.3.4775': attribute type 17 has an invalid length. [ 659.695997][T21377] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 659.728922][ T5956] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 659.854082][T21377] hsr0 speed is unknown, defaulting to 1000 [ 659.861796][T21384] netlink: 'syz.1.4777': attribute type 1 has an invalid length. [ 659.922154][T21377] lo speed is unknown, defaulting to 1000 [ 660.043106][T21390] __nla_validate_parse: 8 callbacks suppressed [ 660.043123][T21390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4778'. [ 660.133041][T21390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4778'. [ 660.263454][ T1160] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 660.275376][ T1160] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 660.289353][T21393] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4779'. [ 660.446311][T21397] netlink: 'syz.1.4780': attribute type 1 has an invalid length. [ 660.458099][ T5956] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 660.662164][T21403] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4780'. [ 660.720882][T21401] veth17: entered promiscuous mode [ 660.761022][T21406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4781'. [ 660.763752][T21401] bond14: (slave veth17): Enslaving as an active interface with an up link [ 660.806406][T21403] 8021q: adding VLAN 0 to HW filter on device bond14 [ 660.877060][T21405] veth29: entered promiscuous mode [ 660.931694][T21410] tipc: Enabling of bearer rejected, failed to enable media [ 661.100063][T10366] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 661.253211][T21418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4784'. [ 661.356914][T21418] pim6reg: entered allmulticast mode [ 661.381905][T21423] pim6reg: left allmulticast mode [ 661.705193][T21435] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 661.717128][T21435] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 661.726698][T21435] CPU: 1 UID: 0 PID: 21435 Comm: modprobe Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 661.738268][T21435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 661.748516][T21435] RIP: 0010:percpu_ref_get_many+0x8d/0x140 [ 661.754336][T21435] Code: 01 48 c7 c7 00 51 98 8b be 4b 03 00 00 48 c7 c2 40 51 98 8b e8 a4 24 72 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 04 5d f7 ff 49 8b 07 a8 03 75 62 [ 661.773939][T21435] RSP: 0018:ffffc9001b2776f8 EFLAGS: 00010206 [ 661.780004][T21435] RAX: 000000001fffe000 RBX: ffffffff822b7619 RCX: 74a7531020d12200 [ 661.788009][T21435] RDX: 0000000000000000 RSI: ffffffff8be309e0 RDI: ffffffff8be309a0 [ 661.795977][T21435] RBP: 0000000000000078 R08: 0000000000000000 R09: ffffffff822b7619 [ 661.804037][T21435] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: dffffc0000000000 [ 661.812004][T21435] R13: ffff8880b873b500 R14: 0000000000000001 R15: 00000000ffff0000 [ 661.819973][T21435] FS: 0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 661.828906][T21435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 661.835505][T21435] CR2: 00007ffeeb1c5d28 CR3: 00000000517c4000 CR4: 00000000003526f0 [ 661.843525][T21435] Call Trace: [ 661.846827][T21435] [ 661.849759][T21435] refill_obj_stock+0x254/0x850 [ 661.854624][T21435] ? refill_obj_stock+0x116/0x850 [ 661.859746][T21435] __memcg_slab_free_hook+0x127/0x3d0 [ 661.865132][T21435] ? unlink_anon_vmas+0x2cc/0x670 [ 661.870151][T21435] kmem_cache_free+0x223/0x400 [ 661.874928][T21435] unlink_anon_vmas+0x2cc/0x670 [ 661.879777][T21435] free_pgtables+0x7bf/0xaf0 [ 661.884372][T21435] ? __pfx_free_pgtables+0x10/0x10 [ 661.889493][T21435] ? __pfx_down_write+0x10/0x10 [ 661.894337][T21435] ? __mas_set_range+0x12f/0x3c0 [ 661.899279][T21435] exit_mmap+0x444/0xb50 [ 661.903538][T21435] ? uprobe_clear_state+0x20f/0x290 [ 661.908740][T21435] ? __pfx_exit_mmap+0x10/0x10 [ 661.913510][T21435] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 661.919151][T21435] ? __pfx_exit_aio+0x10/0x10 [ 661.923837][T21435] ? uprobe_clear_state+0x274/0x290 [ 661.929031][T21435] __mmput+0x118/0x420 [ 661.933191][T21435] exit_mm+0x1da/0x2c0 [ 661.937256][T21435] ? __pfx_exit_mm+0x10/0x10 [ 661.941844][T21435] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 661.947304][T21435] ? rcu_is_watching+0x15/0xb0 [ 661.952077][T21435] do_exit+0x648/0x22e0 [ 661.956241][T21435] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 661.961618][T21435] ? __pfx_do_exit+0x10/0x10 [ 661.966213][T21435] ? _raw_spin_unlock_irq+0x23/0x50 [ 661.971415][T21435] ? lockdep_hardirqs_on+0x9c/0x150 [ 661.976635][T21435] do_group_exit+0x21c/0x2d0 [ 661.981233][T21435] __x64_sys_exit_group+0x3f/0x40 [ 661.986257][T21435] x64_sys_call+0x21f7/0x2200 [ 661.990939][T21435] do_syscall_64+0xfa/0x3b0 [ 661.995533][T21435] ? lockdep_hardirqs_on+0x9c/0x150 [ 662.000741][T21435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.006805][T21435] ? clear_bhb_loop+0x60/0xb0 [ 662.011482][T21435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.017392][T21435] RIP: 0033:0x7f6b7629d6c5 [ 662.021818][T21435] Code: Unable to access opcode bytes at 0x7f6b7629d69b. [ 662.028846][T21435] RSP: 002b:00007fff1fb29878 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 662.037289][T21435] RAX: ffffffffffffffda RBX: 00007f6b7639efe8 RCX: 00007f6b7629d6c5 [ 662.045268][T21435] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 662.053236][T21435] RBP: 0000000000000001 R08: 00007fff1fb29808 R09: 0000000000000000 [ 662.061210][T21435] R10: 00007fff1fb296a0 R11: 0000000000000206 R12: 0000000000000000 [ 662.069174][T21435] R13: 0000000000000001 R14: 00007f6b7639d680 R15: 00007f6b7639f000 [ 662.077159][T21435] [ 662.080189][T21435] Modules linked in: [ 662.085732][T21435] ---[ end trace 0000000000000000 ]--- [ 662.091857][T21435] RIP: 0010:percpu_ref_get_many+0x8d/0x140 [ 662.097726][T21435] Code: 01 48 c7 c7 00 51 98 8b be 4b 03 00 00 48 c7 c2 40 51 98 8b e8 a4 24 72 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 04 5d f7 ff 49 8b 07 a8 03 75 62 [ 662.117805][T21435] RSP: 0018:ffffc9001b2776f8 EFLAGS: 00010206 [ 662.123887][T21435] RAX: 000000001fffe000 RBX: ffffffff822b7619 RCX: 74a7531020d12200 [ 662.131918][T21435] RDX: 0000000000000000 RSI: ffffffff8be309e0 RDI: ffffffff8be309a0 [ 662.140001][T21435] RBP: 0000000000000078 R08: 0000000000000000 R09: ffffffff822b7619 [ 662.148290][T21435] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: dffffc0000000000 [ 662.156279][T21435] R13: ffff8880b873b500 R14: 0000000000000001 R15: 00000000ffff0000 [ 662.164302][T21435] FS: 0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 662.173278][T21435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 662.180242][T21435] CR2: 00007ffeeb1c5d28 CR3: 00000000517c4000 CR4: 00000000003526f0 [ 662.188298][T21435] Kernel panic - not syncing: Fatal exception [ 662.194744][T21435] Kernel Offset: disabled [ 662.199069][T21435] Rebooting in 86400 seconds..