last executing test programs: 1m0.914263045s ago: executing program 4 (id=594): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2, @vifc_lcl_addr=@private, @empty}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000004000c8018001a8004000400"], 0x3c}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r3, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r3, 0x200}, {r2, 0x8044}, {r2, 0x89}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4080}, {0xffffffffffffffff, 0x8000}, {r2, 0x320}], 0x7, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000280)=[{r3, 0x200}, {r2, 0x8044}, {r2, 0x89}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4080}, {0xffffffffffffffff, 0x8000}, {r2, 0x320}], 0x7, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r4, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x62}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x23}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) (async) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r4, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x62}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x23}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x700, 0xc, 0xff, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @empty, @empty}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x700, 0xc, 0xff, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @empty, @empty}}}}) r7 = socket$inet6(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000884) (async) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000884) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x7fffffff, 0x2, 0x3, 0x1, 0x0, 0x7fff}, 0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0xffffffff}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbf9, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) 51.051770004s ago: executing program 4 (id=594): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2, @vifc_lcl_addr=@private, @empty}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000004000c8018001a8004000400"], 0x3c}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r3, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r3, 0x200}, {r2, 0x8044}, {r2, 0x89}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4080}, {0xffffffffffffffff, 0x8000}, {r2, 0x320}], 0x7, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000280)=[{r3, 0x200}, {r2, 0x8044}, {r2, 0x89}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4080}, {0xffffffffffffffff, 0x8000}, {r2, 0x320}], 0x7, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r4, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x62}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x23}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) (async) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r4, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x62}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x23}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x700, 0xc, 0xff, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @empty, @empty}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x700, 0xc, 0xff, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @empty, @empty}}}}) r7 = socket$inet6(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000884) (async) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000884) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x7fffffff, 0x2, 0x3, 0x1, 0x0, 0x7fff}, 0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0xffffffff}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbf9, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) 40.613202193s ago: executing program 4 (id=594): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2, @vifc_lcl_addr=@private, @empty}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000004000c8018001a8004000400"], 0x3c}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r3, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r3, 0x200}, {r2, 0x8044}, {r2, 0x89}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4080}, {0xffffffffffffffff, 0x8000}, {r2, 0x320}], 0x7, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000280)=[{r3, 0x200}, {r2, 0x8044}, {r2, 0x89}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4080}, {0xffffffffffffffff, 0x8000}, {r2, 0x320}], 0x7, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r4, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x62}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x23}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) (async) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r4, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x62}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x23}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x700, 0xc, 0xff, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @empty, @empty}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x700, 0xc, 0xff, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @empty, @empty}}}}) r7 = socket$inet6(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000884) (async) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000884) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x7fffffff, 0x2, 0x3, 0x1, 0x0, 0x7fff}, 0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0xffffffff}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbf9, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) 28.547529002s ago: executing program 4 (id=594): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2, @vifc_lcl_addr=@private, @empty}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000004000c8018001a8004000400"], 0x3c}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r3, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r3, 0x200}, {r2, 0x8044}, {r2, 0x89}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4080}, {0xffffffffffffffff, 0x8000}, {r2, 0x320}], 0x7, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000280)=[{r3, 0x200}, {r2, 0x8044}, {r2, 0x89}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4080}, {0xffffffffffffffff, 0x8000}, {r2, 0x320}], 0x7, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r4, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x62}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x23}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) (async) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r4, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x62}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x23}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x700, 0xc, 0xff, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @empty, @empty}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x700, 0xc, 0xff, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @empty, @empty}}}}) r7 = socket$inet6(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000884) (async) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000884) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x7fffffff, 0x2, 0x3, 0x1, 0x0, 0x7fff}, 0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0xffffffff}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbf9, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) 19.771553174s ago: executing program 4 (id=594): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2, @vifc_lcl_addr=@private, @empty}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000004000c8018001a8004000400"], 0x3c}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r3, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r3, 0x200}, {r2, 0x8044}, {r2, 0x89}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4080}, {0xffffffffffffffff, 0x8000}, {r2, 0x320}], 0x7, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000280)=[{r3, 0x200}, {r2, 0x8044}, {r2, 0x89}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4080}, {0xffffffffffffffff, 0x8000}, {r2, 0x320}], 0x7, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r4, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x62}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x23}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) (async) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r4, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x62}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x23}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x700, 0xc, 0xff, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @empty, @empty}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x700, 0xc, 0xff, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @empty, @empty}}}}) r7 = socket$inet6(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000884) (async) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000884) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x7fffffff, 0x2, 0x3, 0x1, 0x0, 0x7fff}, 0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0xffffffff}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbf9, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) 13.928143624s ago: executing program 0 (id=1104): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x84, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_PORT_SELF={0x5c, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xac8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9a07f885d2f717ec82026aeadfe9f92f"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3d20f3d4012abdb3ccd2563a18214453"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "be9a16e172c137d44f07e992d6651f07"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "dd9171792925b3c98a3c991d4fc3cfe4"}]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x84}}, 0x4040) 12.356999755s ago: executing program 0 (id=1108): r0 = socket(0x2, 0xa, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x87}, {0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x87}, {0x6}]}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) 12.187784671s ago: executing program 0 (id=1111): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000fc0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="7c61d484b06d012ba5571ba48e4852bda5979b14aa1391c6e9654cdcc5c5baddae3b0dbe6b0919eda531e331492894ae2e518f44b9c8078b0f19175e5b8cc88d09d96d4573a431f341a56a9cd461b28233d8409644910c7aef917a6684d3bdf916e927d979d9b6b9f8471458bb23485700d79ca81adf70599e1845", @ANYRES64=0x0], 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r3, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffeb, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="01000000060000000100010009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000008000000000000000ffffffff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYRES8=r5], 0x0, 0x7fff, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf739, @void, @value}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010000002c0004800500030080ff00000500030005080000050003000600faff05000300000000000500030000f3000008000100ffffffff0800020002"], 0x50}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x48044) (async) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) (async, rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (rerun: 64) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 64) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (rerun: 64) 11.110109597s ago: executing program 0 (id=1123): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=@newtaction={0x48, 0x5a, 0x1, 0x0, 0x0, {0x2}, [{0x34, 0x1, [@m_pedit={0x30, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000806910a0000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) (async) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={r1, @private=0xa010101, @broadcast}, 0xc) 10.751803981s ago: executing program 0 (id=1130): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendfile(0xffffffffffffffff, r0, 0x0, 0x8) write(r0, &(0x7f0000000000)="33bf6c2cdc9f587e30ae5ac6e4e505d3bf4bb542889462407ae77b2cc42d3b30849111276ebd82d183dcdb390f6c9cdaa4aeff0e86f0771a68277b826a516e3f208cfe7162852236e4b23ab7fd41121f96f1be103f37a37d5ce557a15d2ac9f24143daab50ffcf338c72521822c985e7c57789c41347cac31defed9b4f31c61aa149e003bd15e8983ae5c469e0b8d42bcf6103817889c767eff1", 0x9a) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x5, 0x3, 0x4, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x20, 0x4, 0xa1a2}}) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x4, r2, 0x27, r3}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x800, 0x1, 0x0, 0x9, 0xfff, 0x3, 0x1000, {0x0, @in6={{0xa, 0x4e21, 0xd, @mcast1, 0x7}}, 0x3, 0x7ff, 0xfffffffd, 0x8, 0x6}}, &(0x7f0000000300)=0xb0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={r5, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}}, 0x400, 0x4}, 0x90) r6 = accept4$inet(r1, 0x0, &(0x7f0000000400), 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000480)={'vxcan1\x00', &(0x7f0000000440)=@ethtool_rxfh={0x47, 0x27, 0x1f, 0x2, 0x2, '}\bL', 0x4, [0x9, 0xd12, 0x0, 0x2, 0x1, 0x1]}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@cgroup=r1, 0xf, 0x0, 0x4, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@fallback=r1, 0xffffffffffffffff, 0x22, 0x2001, 0xffffffffffffffff, @value=r1, @void, @void, @void, r7}, 0x20) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000680)={'veth0_to_batadv\x00', &(0x7f0000000640)=@ethtool_ts_info}) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f00000006c0), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000ac0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'nr0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6_vti0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x0, 0x0, 0x0, {0xf38c46682b5d7299}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x7, 0x6, '&qW'}]}, @NFT_MSG_DELCHAIN={0x40, 0x5, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x3c, 0x18, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELOBJ={0x164, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0xbb, 0x8, "10dae33eb0285d4649c8f910f0f7a56f11e6df5b572b9b89b459c86ec0b475a90b3acdd8aad9b012ad13976ab87b6f4bbb26d1d22fc3d0469ca22ebf52a785deba8ecd34f31c7e1c119d6813dae2c2c541aa55149f6b6802b41db2d3a11b7002e457ddfad073873fb3c6690fe6bc243ca4cfe3307832e7783b95b315ed1faef084b6d944c0871ef9a5b9d163318fbf96de095f26be99a6f3ae7c07b5cdb7c86d826287945fb6d96eb676822826b32c5b52fe82e46d9177"}, @NFTA_OBJ_USERDATA={0x12, 0x8, "a52e0111a7e90bb8fec52f889c9c"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x53, 0x8, "bd3cf007c671b421dd2ba179ad0976e48ad86ec4e06f2c22fc313159bba223bcbcb54d23b67db23cae8454d82315419a2bd3d2457688a1ba7b2c591c38df86124bee94e75d57420fb3d266dd0cd3ec"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x340}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000b00), &(0x7f0000000b40)=0x8) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000000b80)={0x2, {{0xa, 0x4e22, 0x2, @mcast1, 0x8cd}}, {{0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, 0x1}}}, 0x108) socket$inet6(0xa, 0x2, 0x101) sendto$inet(r10, &(0x7f0000000cc0)="be6342f670d89625e9916b51ae542585129648f7a1cdae284209214f1aebbffe5b9ea7a7e855b0dc3e55c7277778c3b6c5", 0x31, 0x80, 0x0, 0x0) r11 = syz_init_net_socket$ax25(0x3, 0x5, 0x1) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000d40)={'batadv0\x00', &(0x7f0000000d00)=@ethtool_rxfh_indir={0x38, 0x8, [0xc8, 0x4, 0x3, 0x4, 0x4dea, 0x100, 0x5, 0x7]}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e80)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@restrict={0x8, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x61, 0x2e, 0x61, 0x30, 0x5f]}}, &(0x7f0000000dc0)=""/188, 0x2b, 0xbc, 0x0, 0x689a, 0x0, @void, @value}, 0x28) getsockname$packet(r1, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$xdp(0xffffffffffffffff, &(0x7f0000000f40)={0x2c, 0x2, 0x0, 0x1e, r1}, 0x10) 8.962527971s ago: executing program 4 (id=594): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2, @vifc_lcl_addr=@private, @empty}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000004000c8018001a8004000400"], 0x3c}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r3, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r3, 0x200}, {r2, 0x8044}, {r2, 0x89}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4080}, {0xffffffffffffffff, 0x8000}, {r2, 0x320}], 0x7, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000280)=[{r3, 0x200}, {r2, 0x8044}, {r2, 0x89}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x4080}, {0xffffffffffffffff, 0x8000}, {r2, 0x320}], 0x7, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r4, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x62}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x23}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) (async) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r4, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x62}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x23}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x700, 0xc, 0xff, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @empty, @empty}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x700, 0xc, 0xff, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @empty, @empty}}}}) r7 = socket$inet6(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000884) (async) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000884) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x7fffffff, 0x2, 0x3, 0x1, 0x0, 0x7fff}, 0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0xffffffff}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbf9, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) 2.668038311s ago: executing program 3 (id=1196): r0 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='rtc_irq_set_state\x00', r2, 0x0, 0xe}, 0x18) setsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="1005000000ff02000226a804", 0xc, 0x24000094, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) socket$packet(0x11, 0x3, 0x300) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000140)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='rtc_irq_set_state\x00', r2, 0x0, 0xe}, 0x18) (async) setsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000000)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) (async) sendto$packet(r0, &(0x7f0000000180)="1005000000ff02000226a804", 0xc, 0x24000094, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) (async) 2.55996907s ago: executing program 3 (id=1197): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0x11, 0x148, 0x230, 0x0, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1e8, 0x230, 0x4003, {}, [@common=@inet=@hashlimit2={{0x150}, {'batadv_slave_1\x00', {0xe, 0x8, 0x1, 0x9, 0x2, 0x3, 0x4}, {0x7}}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e78}, [@printk={@lu, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3252}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r3, 0xd58}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x16, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000001000100000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000800b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000851000000000000018490000080000000000000000000000851000000700000065903000f0ffffff18490000fcffffff0000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x7}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 2.488066961s ago: executing program 3 (id=1199): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r2, 0x0, 0x40000000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r1, 0x0, 0x40000000}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000005c0)={&(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000440)="3591c2c303d4e2fcb363878b99f256a31fb9c6251642a987d3bfd529a2457132cca629bf3b81d81cdd6701745b73dcca66ef55a68764f7435d9fa2fe465433fb7a4e6414560546688aee833a518968cc6602fd642e5e270724df24fa868129bc2db7c379a9cd25a37993f8311faf42c5425e08c64ddb55975fd81f2c5f32db52710b702c9372c798ce24c631ae23ab0cf89b3e0273eaba7040e479f3fa335332e204ba0f134f8105bab08c04c894690ce70ae31c1c2a304533c183923f76b0686de01cebf28f8aaf956d9eded0cc660052e660e4930cf478a808", 0xda}, {&(0x7f0000000100)="72521e4635468c074d951cb5f11156232550d4f030ac5ee00880", 0x1a}], 0x2, &(0x7f0000000540)=[@ip_tos_u8={{0x11}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc}}, @ip_tos_u8={{0x11}}], 0x78}, 0x20048051) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/204, 0xcc}], 0x1}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@broadcast}, {@dev}, {@dev}]}]}}}}}}}, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0xf4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0xdc, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb58a22dd353048848e1ffffff000000000000000000000000450e00be0067000006069078ac1414bbac1414bb07233be0000002000000000a010101ac1414aa7f0000010a010100ac1e0001e0000001890fd5e00000017f0000010a010101071bcc64010102ac1414bb6401010000000000ac141c43ac1e0101441450a17f0000010000000f0a010101000000b20707b2e00000018313c5ffffffff64010101e0000002640101008903a600000000000000000000000000000000000000004e2200004e22000000010000000300000004000000010000"], &(0x7f0000000040)={0x8, 0x4, [0x20a, 0x9f9, 0xa2c, 0xcfe]}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8) sendmmsg$alg(r6, &(0x7f0000004f00)=[{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000006c0)="6e70d1d58c44d3f6770a62b84ecc5c006853b5c1b4ba170d5731a55f46611e059e978b0156bbb6dde6d2870ae1e51067816d68a55a0f9b360020fe29308d823deeba2fef752f4093635a1b517a", 0x4d}, {&(0x7f0000000640)="d47946b0b79fbd3d42e9be35a5fc2ed025c1ec3c66d99255f8b864f6a0dafd288ee843848a043d0bf1c61386ff327e40", 0x30}, {&(0x7f0000000740)="a241fb436c71fbe66ecccc7f1f4e6598fef4c79cd0bf98a73f7212193b887d60feabb3a9622cced9a93c02783338fc926efab03b4c2a7d42d357e4c3e685a162203ed23f9d93ff3626748d8b870c591cdcf742487af9ee7441f704815ab030311cd935723eb31b2bb97fe483f6ac6b3c16895ad3803fd79e1fc484", 0x7b}, {&(0x7f00000009c0)="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", 0xfa}, {&(0x7f0000000ac0)="5eaa5f77207c1f09de2702d7adaac6cda14193bf9d6f6bbd9822167edfa427a0280d78bc30ac7e081222a4eed9f40ffad91121f07e5109bc11e4d634b7f1941acd17a0791fbc9d883302be5897409887c8c512efe523e47d45e2cbd27fa3da4faf4026d046d9b3391c0fb8d73894da3d05ce3153340cd1932bf842c90214b2609f136e63540fc26596deaa134a2552559d7720824499764511da4e3ac7558111bd9b945af50cd4e578c821bfc86c6b072118a1c476687fc6405d3826b6d70844f5001e90560088954ba7b6427dfec1a00269bbc9d909cba46699f62cafea1b13", 0xe0}, {&(0x7f00000007c0)="a1c1f5256e73825f526abe312ceb142b5a5750fb396330b60675ffb678bbb0f48e149541cc80d549caef5386241397a6f1e61a2d5b5609a445aa048e8ab427e3f5dfdc41aa5b2b224da5", 0x4a}, {&(0x7f0000000bc0)="283466949928efc7830c111830d0f890548a41520c58867cfac40001ee37d618117983dc90a817700872d95d785cc4382ec2988ce56c185d0325b2d9b2f55e32a9d5cec3014f404a7e1ff7efcc62aa3e682afdb6b7186d97a3d48d76e14b1484be892afae989bab0fe787e8caea4883d1fb58492b37e5d92c852bf8b551bb754c7bc0ce1c85c326c93ed4867cda870d1e5bf8af9daf38620d665000678f7717d1bce53d69705b9806dd7e6faaec234b7521c09", 0xb3}, {&(0x7f0000000c80)="e5a4d1a2361b213e6ac8ec51f1e04766da8b3517f9510729af755469dadc3a60541688cab1e8118b2591d55fca8e3d178befca5d5ba7b2922e61f69aec25b84d75d48b70328f2e3feb37c0da4597200ae2530ec72714b35220f878ea8ec3c837bb60e5e2429ebc8e502108839f2be02f762ff7ec0a1785991734c270f1a358afb2f698", 0x83}, {&(0x7f0000000d40)="073f2a667ac18235fb502ab07f1aa3927ed99586402291fe6f7f57536c230dd0e3db5c834f8a1a7c08c1d57e7c7a0845677666e29b5f024ab78611edb2bdd116cd462c510232a469b698fba27493253e2f306b6694ed8c53ba7b954f7b4cc480fba7e6769f1612be06ac87b218182e031b2a5811908a32a7e65a6a4f5e18ea30200117d12f72", 0x86}], 0x9, &(0x7f0000000ec0)=[@assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x88, 0x117, 0x2, 0x70, "a250286381abe7ed1b4b525457d7c1bd7231d08ef62d5144b9269473c0f167bf19d01b92f3f0208fc6acd797819fd9a6733230cbb263c52f83f2db6d829de1794a5211220a7b078c467855d56d1a91d3e47e0b0ca444e613c3701f919be8b79e73070cd2fd11b4c122fbf60541b7f96a"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0xd0, 0x4000040}, {0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000fc0)="49e6b18dbebba7b62b275f46db607d3c3da1db6cb10d91dd26d48f3ecf427d7bf77c3e8f775b1e3b93f2cff719608c1a4973917f5a139abe89d6cef5ffc7276dd7338d62153b63b08da2fbc6146e723b90e3a5e54fa09ccdcad773432b86a68e104e2faf179abb85", 0x68}, {&(0x7f0000001040)="0b69c8dda599d5a83e3686b40553ccf13991483eac321927f617e5706274431f88df3f9dbfa46a2e43168f19f00845cbdafdf974c7695f3196ece9e5ca882548461aae7d7c4e9bda2b854dd4ac94481427c47ea49dbe20e4133f6313ebc26d67d1ae6dcfbf22bb825ad374e6807e4667d9f9ea4383f943c304dc6c9c8c4fcb4c12c65360e8698b986db4c5b88e1a25325a967832cb7e3475ce89b9d2f4d76cf4", 0xa0}, {&(0x7f0000001100)="02b61b9b07a906a8496a7e62e2bf2bbda21bf9ccf2fc7534adbdbe564bbe35bb4c940090947351e74cc19442a4c58f24aa1222889df7f91c96d0bada007f751a6bb9ebb1c814a337cd62200dfa", 0x4d}, {&(0x7f0000001180)="7c431f6c402935daba18d58bacf2c0a58febf687b5114a769c053ca1428dbe2799f472e001f941692a1ebbebc894ae256e7cdb63858e8b", 0x37}, {&(0x7f00000011c0)="1defd96e042b031eba4c51a4e32da2d8f7b4cc7df2152877e294b74227771b8cb0e29098a53298ae9c4fb3ab5af8ec23403b110ba6e45ba20e61700d77c00ffad8deb9b9250644907c95ec52e9caa238c5386dfc4db9dbaa431313df96cf5dbd1b157723a948f33a8edcbec93866297dbe9d180ec818151445c98687f09334d9811de54a6676679489001a13b5aaec2f7d42d30251c7a559ba6cd3ffce7246617ee05141c4767246ff0c4ebf3fba49247f194dadc5cc74a09db9517c8457d3f8e2f7d5", 0xc3}, {&(0x7f00000012c0)="82b49f9d3e87cf4aedf8897f53d5afb074b9e5fad9f136", 0x17}], 0x6, 0x0, 0x0, 0x40}, {0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001380)="35162d6d69b130f70b995bed4a42e367035f5c0ddb27b4f48ae0c75cd59345af68c69ac9eeb5006618b5eddd776694016032a0457ffb6cb06af7f70399a438c61243cedce2fc37bc50eefa6182d73284458de9320efd3fef3275a254e4908ebc365888f2e722833e", 0x68}], 0x1, &(0x7f0000001440)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x1078, 0x40}, {0x0, 0x0, &(0x7f0000004980)=[{&(0x7f00000025c0)="121baf860580502507fcada4915c8b213804b0cc732997d5f1cc2589ebbf362832fcf16f615ecd7b68a992d6a838419f0ca4a26001263afbb886e5b36384a6f091ac1eef49fa3a9d38cc8ac6d6911b636b2e49f3cc36fc435af76b1316f86b0925e52da4b59f6603342a92eff86f1f40562c9842689ff2a123958b2eac18b5ccb04d46a6978027c46faf6259986d6ed371a5db57fd4f6eec65f8e3f2c6052f38622c79afde2997703440b36d79a64611022a61511d6540c5f6d0d154f84ee5c6f089de8f14b31b87790944d7d73c8fced2497facbb0d221772ed6ba81dd64bafac6ba0a979a717b3a44cf08331f1d94e5795bb2d14bd2749eca7673f1636dcf867774e7f8eed140b57394b0811e371b27c301e513537bf86dd4079652b0fa56ed6909f01038d3d0692af76e5c8c8bcdf148611753457a6ce9b64a22fe45e3d8ef87e91fc1db2a10887da3079d5876f063773153c3136131b05eb87d487afe49c97cf30d471380d44ce67c6c2b34a58ebee93ea632775b9d9d6fee8bbd3ad829038443a9cf52740e93377e79d81ab5d9668a775e3cfe8dacd23fdb9a9cd534ebbf2b96f4804c25198d630296cbec09575a431997bac58e4ffa5a32ada645ab4a3c7b83cc026f2fcd6849bdb5e4910a0b14bf02796768533bb950436bfcf8efe68d8bbc6a4fefa8adcabfcce0d61099516324c0fff2454cedb89ee4cea64a0d447ffac33dcdc276dfdf21e632579d552f69f513d4e7491217d13a6ba1d4046cb693b5568d2a964c7b45e1b9f15c7584865582a924eddc6e56ecb65b1a2087e3c7c9dcc3489fa6b9c8e3355004680c33b41d418e1473e43fec410ea1ac23959548222e7f91bbd815b1b18b28f183012d01ca1479ba3fd090efe10f4f1b282e9728ae7e0034bc1f5f1228269d591f3144c8e35dba43bc33023f96f182b4a22279cef428696bedd0986129aadc38f3ae9b6b9ea3cac3b7e0106ac8f414340652acabb5bd2d64f1a135b192a3892234a839a0bd060faa55f19931f6c10ca8876ffdc50fe9297be179d49a26bf85ecf2d3d626f0db313c4f46ce6efd58fee95139041f743acfced28bbc5031c3d5cc590aab1d77160fd50421dec64cec4725c735f9b427f7de152028f199b87587e915ad0159eb3ba0223e0cc7c3aa2cac3bcec1208f5d0f8d40cf5f5798ababce9e293e2cd931258f9484622b489369b94177d5cbba2b823987034534f55fd5bf32ca6aa0cd0b340382f527c08385b9117ba27d681a7ad41499f313b10a0ad87dab97a3ec98610f95538a268c48c862598b9f031a2440dc7d7c2ee6439abd3a09200d1922ed36257c3c8f4f1258bfd21814a3f1e854e881a101e738b45d4145604f78abd15b84e4535fec5d3ec321812f465d0cd14d34f0afcf0cca002c69753ad4b33d49544f8747566a7f26b6c9f24a12b227bf955297cfb17864605bc1ffefcac56a806e629dd27a8450dba6aa74718c020454e7990ae2024433ff371ffa922bc6c1410e733a71457d8354baea0be184d205838ed5a7a5e001e6aa9283670d725c681293b42dff8f861c4d1037806a64d826829cc3f4535d670b320a7a799c00eeccf535af4f6710c0156d162fcb8783472721348261b13e29419306754faa7df13703bd9d1408f266617a9dc065f29e237b7bb6753458250a33ff6f7e1876b197d2b72775cee0e1606ec294995ee63cb5a261551bb5c72804a500c3d3e8d3ab25d103b279524be0e27828a56c8050886e0fd48fd985291f7f3b6f56f9beda4e77a1c5b49aef446c020f09972dfc29ed072d0c4d7cb8f3253702d04051a63b4db14d935e392d5b87a188cf295fe633f61d6206361b8ff2c41bba126e5a33a6a6244ba501eda8a53803dd75f6081ca3199bc48650f79cb662cf521d8b6a6fe8d458b82c846a16d3e526d05597eb72406ebb507796ce73ecd21b426c7ed40d4cc37f8343f9a2c3d9678f35d18ee6b1af5346e8812d2d8d548739c1af158ba7a49d2048710c602283ff3af1053d23117b794f11c660cd2a54c851bdfa16498f042bdc4054bcdc04c8ec97258c82c93769ee97539ce2b9af45f4369564227a4881a097567f7c892f48cc5fc528967cf55486289deb7e868dfc3ef49382338dda3be83c4aa8458f7ee8a345fb7427b9434a794191d60681086b734245a9b6d1271c37063a1a4272f8e57274496b902279caef3fa9a27befea2f32c055e6106eb035aca1fecd9b2a7eefef215a8d33ef897a03b30588da029d77b2020409df6b42f15656e518d5d84ef320d1e608e77db472ab0c084d8f1c39c84c49872c2797db3d15c94bceea2490ee7132e6e916e355895ec7d47aecf484d61d9b8e7ce17978ed762487f6f4679ec2d20a9e7c99116d2c76a2b3d756a4061295d5d58388a43093c7d151a57a9ecca9eae49ece3196b3f3dc525edd18b12f523fe7d920070c653848ab9c993c2210b0160993ab83edf1cbd8d7b89af1de3a5d620df2cb9dd6277355bd3c4b88828f7052907f31429970785f63a7f12d79d7a3e2d7356af2403004d24c08b94bd571f9cbe204ea3305b753d1d9678f25f83a20ea17851d3f790614f0b0335c1bde2bcb01bae8fb42a0bf4893bc767ea710438e6f1a80a176f2c9c7f1a578ba23b956f979c10b9b27db952ff8835322958ecb743a23b2365a9db8f233e89f6686ac67c169d518b07c0dcbc15a87df81ea7a27650a3b5555434a8a0bbdaa7ce66885a9ccd9fb017474fe2c92893aaad8fe911df182242819d7090a31852ecf38316d77fb49662b7d6f0ae49f4f2858f863ee8baec52d410da23ee387636f96588fec8a86e175b95806c8bbc88f312cc9b6c986a7f9d7b8a9373b829efc1158b50b2462299863132ffebf5190b267839d18a2e757d2109a858ad19d9c54afb864dd2232b43b0863c83439aa1e9c35d8eb62fb2b6620514627548b9757eb3858d40855310670bf302b8a24dd8c4d8e9bb1e2a9ca6acfa53d2c891cdca774ee64bc0e2608f6c46a9eb86aca3d3319938b8f4b2c24da3bcf6ab26c4ef7cc36229d95959e643df8838f4258c4589831dd9b0b4660dbaa81cfbb292f3c33786349556abc595a068654b89934ccc49dbeb32346f8f5fd5bceedf4e0efb7ef72e97e5370b13d843ed3682d1f979b7ba53d8d7c5e547b35c434c09243054a480a689ae7332d04dcfcd1ac1657f0f7c8425f37da735d04b2a8226fe29ad18fa621ed07282121558c58b2884451ca94680931afe8af691136f7ff6de6abd43f432972141cfe2bd55cc23c60decc2c3ec579eea38cd115fc8472ac04386ac49971f2ba28cf151d83ab416fb40cda154657603fa3c34ab232a2a304638addf1b1a8234979ca1444722a1d0b3ee68fb5f9952c0b2cef8225d5c9ebce09c590f89acf1f7f224cd764bd15e0bc40a99dc82392d9a59db1c38ddfbf5e557d90cebb5ee949487539b6d9723bed557acafdc9ee74d724e9b80c8affe7c92117062f8c0e94c643277d57004fef671cda891ccc74e7e7f63ca0f90f7ca1be62859e87ad409dbf9ddce3f30acc3c9fa94d810e50d11ba292381cc1ad4469d72836f159a28af385eccc2e32f8f6d19c9333e46788fe123f6c97e016b24f470e7ceaa22b5ac4d5ed3800e82a0ce10c706e2aeb55b6b8de9241cb0c80ecb78411ef8d7e810b0fb628d9850c0cbd908365e8555c4f237051f123e6e285dea42ba529285d3415a7d543818868de6f145c3b062793798d53525a8acd16e2c72bc9fc3d95c461515395e9cbb381bca46899f4f431c1f9caa2a96b45481dbfc290134641f267fe296f8b8e01fe71ba28ced6301d95992af388eb36d7e4271c50a3dd0b929297441a9685f9b59995b62283e6bc23cfcf60e9c931ae59ceb6b883251a2b26878ce56bc4411e1a93d2368773ba9a31f1c7f74c05e8cf9d28d83a63d666ce6f5466b04a94497eebe7a2c92b075ae03bd0c036167718b24910031738f652908a9824c42f7860fbadc008a154368e1a76a9fa39b6c66a137aa45f3ca532a54140f06df09ffec3373d390e2985b9a455ce05d57f88d3520560b3f859117048b5d5dae02dced9a24f084c1813db5afcee3d7d7a17d88da116f37a27c1ef961c5ba8ecc377b8d07cc46ea7cb42b823fe065d0c61e0a016dd849d588497b928eb35f92c9c96934c956394146d2b437dd182fa5edc8d4470dfbb31d54933fccb61eaa398639adc9bac24a092086b9e8ac0e84a79125d4dafb29116951bcb9bec7fb4b5f960c80bb8e8b0c0a6962b65a905c66bd02555190e9de6bbcc67601646c21017d2c08356355f2134c6efb1acafb3cc492a52209ebf6b7e68a3e42dc912c08bf732005c34ab3d5be9b6671357186d7f6b03a4e149075067384ec9082df5f4f0901521978a4485f7e06ea759f8e1d24e9ec20ecec1ab91557f5a0aab7def90dc9ccf5f880a7c694ed18ef6f15fe31cebe9ba32792be1091ed6f862ca53126979c8df98c4dcae7ae917dba434a2fc167a7694328a208772be9f6b28a7fa3c35ed83db8d7ce0564fb709995542383c9ec39b557bb016f53db95a769a3bcf6f12fabb4782e22529b451339aa3b848590668024711f0ee3ee636f1b784df876876fe8e0eea73b0d3998e44a841c02435d163f687e33b6ab5243e08de6668bb88ef57c8d3ce4eb4948c9fe52d76802efc86dfa5a0fdb40c316c27155be3405589bb466ee07e7cc724b921080e6a06b1bfcef45bc692fa257659972a907eea38713393f6f7e900a58a156afb1a85507be89036f2680c7dad63141320b8a91b305fb041a2f58249531b2a8d3d121335b2d8dfccbd6cf575ff233ea25ed4962ff7b28397740e8e61e18cecb6eedf99b700e13cd013b3195f9b46b1e59d77084967583d576ae484d288f3beaff79d84ae619e91f3e3694b1640426ba07b01f276b270f264ae7b833a99b9343605629a6596cc5d5068256f5b6fd630b7db6b6c835e64a4bf44d5becad15b0354debcfa4cf3856ed40aefef8a9a8e5826e6d94ffae91f7bda90831e8677f018b8426609a9d69d0bd9a6a55112bf944fbe653e51635b80d72a78094bda5fb8661cc92dc771cb266205cf814dcc2c79b5cfc623ca05f3217484edbc8e9eb30e271a3dc0bbe4834e479f642c4cf20f3370d127627aab974df8a809b2eb62a2fc9458ea107a45cae42c097c052610f8ce998331213fec488354d6febdb93a112c7f1868c5f7fd485531fe9b28ffc76941e41505a7e7b7bd05d1dcf5355aa3a4114e925444c1013b49a6cc2969b3567e1a493dfa0249029df26b3eb332e14582b9813d3f61f35259cf6cdc2ee0e4af2b92d80b3e683cfd87f036163000fa4c09eabf48837f901f8f64df2b43876fef42441992bff764f4893962f2bf986cdfe0da4561c03c2b783777d307300c43257ba5a9733eec91d918f997b7213987763c73e5735908e6a9cc61e8e9718a0a2a0945ef67c44dfd5eda4214e014a9f4feafb6080a7817e3fe4bc4856b0cd0e7e943d73c3ff8a429776d72a60073326b01969bd355feade299981e2d9e490766f7a41f23b9b4cd50dfdf763a8ae9ea71ed45a1ffa181ab27e1ac0777a09d91b7deb06ac3a9b8e7b0306e7be938e68439a5418eacef3f9af863904d3cc434f1a2f806c8347f5afd500160eb8b59c1aba3167198a786401d37fbdb6dcf289bb8a8d068c15bd011d591eb04ed66d0eaad42d63c0859c6eac82f3ddeb4d049d959609592bbc05cbf9bc90767bccc4a1fd859e8d300f4112044a5d6831b3d566bfaaebd225c8ab063b2b2ddf93", 0x1000}, {&(0x7f00000024c0)="2b346dceeafebbee5c9423895665a0fec8094f75c6d2bc0e", 0x18}, {&(0x7f00000035c0)="51e61113dcf2044db850c9abe24ce8ae0d449261fd004348f8d07eceee3b812cd0db7af25fe1b575fd96c9f8e96024e0014794c4ca5c4452a95d65a389450114e2a7f4895a784d1b6a01a2becd77c4f2bf6418bfa0c37b69e66fb71b5c55ba11b13108c556d2c307aece785016a74cc338ea61b4d55338648d8b25fd451aa369fb198e54687206455f49b111e8fc5431ae58ce4f75ef7ccabe50b2be8b78009707f2034bde654f2ca0ce7d9c4a619c2da4036dbf209ea64bc18202d5f6ed28fdc43b081d", 0xc4}, {&(0x7f0000002500)="d14a6d15e2491809cf4411e88e5b3c32ed7f32c3efe13795733c8fe59f0994d403166a389ca1267051cad66160b627762627fc6bb1a2712b6ca38db7c8a10e", 0x3f}, {&(0x7f00000036c0)="21bb5bf307ec51ba9ed9c64c52f1f972faeaf5ab599b3041a474bd5a83ce41569c269ad2b0f305a44e0ceef323140c30582efce6b37db5709ac306d863d4a71ae8b59a3417b09dda01368ba1fa1beeb0c8f71f02ad4cb296e0b319094013656447f05f9cdb959fcefa88b99264505844229178da593ec29a624b68e7fb0451ce4bc185e724443debddf272e5dee1808651854c5dbe0a512911017dee1c0e5125dd4acbd83df71a587f6d0d24f9e33a334c09192ac564a3146296fb286338fb63ab51f5cfa674620198084c6c7222c03dceb40a921e181fddfdc684a9166e9a060aab27f0b5b7522a18816e5a94", 0xed}, {&(0x7f00000037c0)="2c283ab9fa45219fa0446f0b8b54d9e7ac98d95e24650858f191545e3717c6f4aa268755af9763cd86627bc3d2f07e29823bfcfaf5b60462f579da7c046ea0661e482cd6fdddd3984216241a2891e2f72f131c587bd6070bd63bc1cfe1b3496eeca4c3868ddb0184eb15137ea648d43f7974da6ceb5b59f62942b0194d890b35e316de9b1e08657a49ece79b48da4e", 0x8f}, {&(0x7f0000003880)="7ad8fe3a400a2f2716c52c4eaeaf33ef4acbe83827e5e0674ceb33fa4c82280f52c322b0c9b642d1a2406986f5c1ddf9a721924fa84c6144c3dfe7009108ac9c1fc077899c8d76176c4f60c7c68689a9961072106f7b90ed70bf73b7820aeedf9d07e650c778ac4d3c7425e02ceab9c836a0f14cbf452e645fd3aac0c3a90dc8729b5628e9240c60640eb1d6155be9828fc687222944610ee9479d0862340a8d6f9f5e7edc74b515beb8f6bf70b1ec711d338f69f3944794836f5107850b9fbae952464ea8a9f9a3cd4b904fb8de62e1b68d83e87a94c29fdcd03daaa16a2a4898ca72df96a05db161666f9fbbce296e1f33081b9dfe6be69c34e88edfa85b7de88e8e23acb48738e00baf550ba71c0a002e55b3abdacd36ff7a99d4689664ce23627c8612281c6b09470721aa14794812ff0fd447aa695bdbe253ceea3cb13c9582b6311ea2d41ad728303f45b39a247779ff3924ffd9dfff6853b29511480f90ba55b0fb4d6d02d24fa0f43dd38f3a3d5b12387ad979293b58827606093584a074970ba53eb23b8859b6e4f40fb226f33800f93d4bbb0888c846ad3ac1acde51353ae924c14dad7b5c695d4630e8151f8db87e5cda3b3abed42690c57b5d1462d2ebe1930b16b6ee17912c97b133d973e49767ee48ed69ae59a06a3665773b40daf38c406b2617fd14e7039f4b90b19d4762d5ac1d03d8753357eec93d0a266815e90c7e92774563a1a388f4fdf08853e66c62bbefcbac52089c924c3abb39627c045cbe81158f05e02de343553b2754b13e7e0afe3d2feaaf90db61248954b4fe5b69cb70ec1a75286b5f04ce5390d7b48a1bac688fbbb61f037e2e53cd14fd75b43f435327efa42bb60161c90093db79f37c95dbb5baee054aed7666e3e1fe5f0bdbeebcaa1b6aa5de7737e302dda533c43f570682761b705a48eda0acd2e66ac19c86b3632757e88f0c34c46b43efc445aa65b4afbd6cee13eb67340f851c05de7ff6082777aee3b4527a7f4393b4531eaa27c16f768a98d855d6a47aa675c90d818cfaa85277602fb6c51fe80602c7fd1dd1a1790f5e9b1d4937a9d9ff51fcc63f496232c1906bf2c7a0b6ae275af87edda0c627fab5b4a9289394b8dadb9a35140cb49299f7e3575571ae1c71c7e5647ef18120f25f428bce4d6d9dd3f2c791d51e68b09f95594f4ba98a92a887bc1af9673657894e5db64b08604b3c1f66d737d034a06fc765740e254b5dce4252285f19118926693dff1e98c59824f5570006a4b147be01f527f501efaff6e10e345285571885febd74c9b4e920985f5c65e2e22c215a9f4bafa0fb87c5234ce5a4e59c5f92628fab9a251d7cd3fbfd447441f8d3b7810d0de251bff66f4de02e3d5858703163d0315abb5cb004e4084c5ec3e8d9fcf8cf417dcc6489ca6dde75c24acd4803311abd0d6a7872fe3a3b3db121df1e4ff46cc8f8637920bef88d097a2219849df095b7fbb843fdcb10f945da11e8b67d151247e040dac76d2bbf7302235dfa1d41f2984d8dbbe8ea5c4bba72a4ea17991d0646462a1ade1f3b1b559c3ef2214026d2ed481888b4b1fbbe71c9988cdf7cba2bf2e5ab48f9e99f228bc892269be0f37864f8c149e084c04a47afe7e02fa08f0797204373d3ededd534d50a04e2e1316e92d188198a4464f43c77ffc372718dae6a1d79970779f84cea78124b71e7d77aa2c9def4c99cc2980024e839c34f378d46acfcef1e0fae75f0c10a1dad8da58757fa58b8a2d86eacec0a2c15038c9c08afa8929f5f8daa18cc8bb6ca6b5018682a896b6d115bb0d89f1249fd30705b19aac9412ee3b6edfe81e816d58edbbbe37fb4609888a6dbfe6c89712a40fc4bd44a09763887917f6418ef01d3582d07aeea9cb6e5546de3f5ccf48e1e064c95a1214e13ada4eeed2348d843456327f7b8238f7ed3f3de7037e194e6a024e3d191c5b4e8cf37db0bf43c4e6a5fb3da316ed41b793f00d4c43958a0d547b935d8d6cfb9697065514ba6aec6a1690121ffd292656eb011a7e0b46609f472b581778bbedd7a13ac33cc210e36df361afbc0eb65b525d9e343985e24214846ece1af3deeb1ef295298df15c1603ef9c2eab9748d6445c18842050675f666bc646c8f9bae4dfc486798b97ce13f90832d898a597d785d7bbff8ed067daf6ee2ebc5f06318cb85f33235a8967d85afa990920006b4d0e7be02deb33273c3e0e98c0fe9c9c5d0735707d5870a3bc5e2e15ca3cc7c2e0566273c6b99ccc3dcd7dbd051fc492cb7003fafc24b58b817c1d721376752ae8cc686abde2a2bd46ab761945793c0b186089e92ec6c7ab204ad6b3d1478888d7ef8e69a48d550ce4e3721dcc9ec784f15f540ad2c93383b7bfecf64fa2770235d75515bc19d051853b0b8021e274518bd804ccf4dc23551a4fb16b3db5464d4d6652fc4a8f13eeaa7c2beb2d427b2d111fe1ec282662427b648e426df591335b0facfad12e326c5a9406e9952f15095d0d818af751839db7ffb489d96da216c3766878ccb8df6f4e10202f5bb37f577f61064f5b745d77e8ffae0cac23f922cf7bf4f8ff4cea9bb66be72f9c72046b3b0bf06cdb154a4f37ee08e77329740c41e8916307682731468dae56ef9ac7b25c0a4c5b5e684655879a7422be8ba27d39824129b609beb6b0215f2477d51111cf0baa93c98ddac13ea3f453d503a1274121e91456dead804242fee6789e8c29204b67f7719acee40cf21904ee478d71406fa4aad9122602dca99041cf99b49bf360a1a4048e4e6de5c9913dffad74ad59690742b4085a4ca384520f9846d1a19bda59d0acf9c2e8d55067599e443fbce4a51fef387bcbec4fcfd0119feb528cd9e205f21f8b891ed66124190992484b60481eac08f2a7f43d0f2b1ca152298ffe74b13ba58ec9b2cd3181dfeb5a69daa9ccff4a88d1669f9c6d5e6c179ff2e431b2012e76f098f09fa5f815cb23caeabf8724849d3b7c99b593a45fa07ce458dc066f0afe9f264b2a5eb086ff85229f4833c64bda2ec0115c65c92081b4bd3f2588b564744f618711aaca584478305e104aebd88efca516ff4d4cc55261a00e3e7692667cc77269de6058b91340617c8f82bf2eb10e66fcb17aaf1e24b2da48e1546aa0df9eada78eea2bb3c834c4ad585bcb5f86a74b95095bd2e6b72ba88d1dd35226097bb37a877a48334710dfa9811a33fe5e0206a7cc476e23f855d9311c48bfe2b87c0f83ac3cb62fb406fd88643f07b20bffed1e59d1e1560b7de3c413651513783c57c233fe6a58d1f79f66f65160fbbac97d742ee92cbf2256877aea8bb92770fb13d1f41abfcc61a8d35de3debce24ca96ce394968f9d34e02d27f831121bd610d934997a1d7dcd4293b7df448f3bc3cdfe645b5a8e0c3a6eeca2005e7311c037a6b9110a6275548ae78cab2a81b4b15edb27f2f8da56da58e37b6a10b7c6edd94bdcf50824cfeec67de1e6cfe999cea3f8c8e78cc73843eaf2cd86dbee0d96f763ee9725ad6da9c72003cb328e10aa8e555dd8de0e9388d94693a902ff84ed61788a490dbfb7fa6852f9bf06f7a904a6fbf5bd7650c0c1d34a0ff4f901a5991ce603a9e55c5c6b75c71990b0e39904de7edc3d3c7e85c978a2e0e905d30c405a6dc2e7eb1fd0f3702b4d3d2aa7c92bc278fb4695fdf2afa3992b3150221df58da242c48642baf352136c1ffa7ae1a33cd763a1d42c4fa7b435ad3fe9d0dc6dd5c83344b8bf993f8d3b8d7016ed2b1e8e050633c486cecfe6d2822c808034ca8d80bb95dd2a69669439967f0f990bf326c733266f767a05576f294eac4908a54a5f6acdeb1ea57aa54393029e9544f25a72f1709967c53cd32f59f855dad838f4ef23179803b6cd768a3af14d17c83c6708b04450463f2256f6558c8096f2601c1566f89336531bc93766de84db8e81928877d785c312199a768170516d74607700da66163f7401334fd992a427c2b3f019978e48f3710f35ceb87dfb51b327a2860dc658f036ba9e15fb4cb46569b38bef772ecac1d70cac0d49109f50a134df4d00758ec945138f5d2a45755e701ffc256e8a32ba3b00cc933fb4cfed235da2b0739067f3e056a53ca9dc47abecdc5af42215360ebb1713414ef2852a5557664049049e2d58b66f5dc8d39d7c3afe3801afa4b28c5ccffe0f141228370a071708bb4dd62bd822d8a542f80b8e95a2123de4015d885385a7dd3bc414aa7b55db8f0c7b8e172517c08afe9e77919e9637594a7d95a43e25ba288a89746ed7ffd31019baa6c5aaba09d3a1701e4558413b34086fd2fa10bbff44a177865bb957cd7f7d7ffc55b1e8878c5d5159eb3c18693fe8572d5e835ef3f0d6a570b1beba17eea0bd3bb69d483f3999eafc1c0c418cf05edbd4fc891ff121cf0e3c3942cb2c162874de72bc3f5f95bc401838555820d50a76c65f9b286d8f4223572ae79d060fcf43e68f15b0d7e623e09858e201dc8efdb01eedcd68f98625afaf43ec373a2ddc0d3517023b32508e799a4e4627d05196def290cd0c5f9a9f18f5bb71b8a07ac635e76d8fbee35a2f1e9d19da46de8aaa9f7a25d38c6885e53cd8d7fc6b7a45829cc0e6b7d0b1354d42a14fb8f95ae1b2d1025ce70bea52b77f1ebc6c2c16f2ff27a80f1ad25f40978a2280620eb70636892120daf21923125db916ea92a0a601f37e7874c5ff8247300ccb5e13cacee016e7c1828507e174b33c222421078c57805ad42c09d93ee223bd48fe15c2d82301036ad8f44e84c61a81ee7c1856e3f8f20228085247580053d9cacae55393edbe47f09c56a5e1060dbd8ca8dc590b3b20b64a50de783711e64b19dee7b69d8e1847678e5b7f90541f425b808487da4546b055985b8ef4d2da0508f77826a14c96df0c13ae488b711dca4b731574d0c725a847b45c5989d0046775db7dee1f04f8e0227e4c42130efefbc0778cf7521b02836a7c88b902522cd8b5b4576fac6ab8ab8bfddb220027c26d06972f4993e650fe6b035659b32644fb59baa42dc697b1b3f4df08d17362bfb12c87790772540cb4f953b3a76c2b1dec4ec90cd084a76f8bd1fe1c932b566bea88212992d74a7e3e0ce95300067ffc54cac85b8a51f9fd248909d62263c866829538c125ec82d9d6be14e2c7eff4e45fda3fb75c6f43cbec12d40796e8df86af93129854d113ea0409d923d303326ff8e9a5021c3152588f39a954cf4eec92a7f9d3f6d6575ac9cee4afbd95097b503b4e9d0d84e6b61a333975897d4df31f1357d4238e4f262b199b3b634404cb99561f93a3fa7f579d75336011db9bad372f5f12d17dbd62fb7805d356326603a757ddc2540bf51239e050c3761eeeb20160c4ecee753bb99fcfadb7303bb079c210b33e6770d072e8e1cb6762e0f8dc2c006d125b2ee40c8f2f33a3c2630081ffd99b6355f3a201de229885cc498ca8f3f5d8ba33525321785633a2bf41e07e07aba3718c0b55a84ccb2518d3a5b7859eb8b0e6ef4e797991fc3f6b5926b9edeae6e493ffd76c75b40ab1a03e15ea3dbdfb4a7cd05d6e62c23450d8c389ee28ec51fda6dd5744e7fbbb968ee10557c66e922d0aac8e63c1ad3cab338293b162a9db961f96cef9686e2497e8ee326b23fd4ea766f3f17dd8b8324b8bbce17d91dcd9de3d27b77c0d6e1ba5f1e1445a027915feebfcaf25a00dd7c601d858fd81e8410e46c96f0bc5ba53066152e6868555f2e8625a3e413bc29f88ac427ae1b8c70a683d039fc1d2989bd34bffcbbcce440d93d8a34847f61b20a617b0ecc0fd43a1dbdb006a2", 0x1000}, {&(0x7f0000004880)="19d8fe5d5620f8db051186ab81eb49538af114ede9ba981b9aa3019efbd0bccf4541ed4cf79b2db0e42c2bb2ff1a6a6a7ce7b7286dc0c80f8635504b5e63b3d86db383cdc89799f176e6dab623b692abd6e7547aa310829fcb4574d6504cdeea4327d7bfee04a0364831739a491b325f894e99ee785441b395a7894fe7850e636368165e65c17f54f1467458351d33f1c497ab0de374f83d78e5eb3534549c4db164322a5b104416fec669208cb561177e4c9c4f486ba0b62baf1083e018e2f47811ad117459029e214f", 0xca}], 0x8, 0x0, 0x0, 0x24000800}, {0x0, 0x0, &(0x7f0000004b40)=[{&(0x7f0000004a00)="0e46b7f0c051219906df0dc1eee8bcb52c5ecec23d7469ff487461453a137c3229fd56b5e90b7f35c99f82c92b4ad58bddd2f64f284e3b24be919575b82a5145fca48a4e5fc25202d809d1a469698a555994cdb6aab844a85493bc39e4caa338b92da98620f316c6b52f81cfe1abe73f8b2655", 0x73}, {&(0x7f0000004a80)="d9b4d6e79432a8ac4515d74099bc3333abed45334fdf2a6f7a990867d141246f1bf5c6ce7e5a6d60f229f5cee7e4b11689f567d23fcdc1049c70e781a5d25919fb81fc4470ee9d3044ea1f905ede0cc87909b1be53ade446ebc11c6178e25b3e9cd00ce9d663f06c9cdd6e0b701a7f6d5cf1cbaf54c287d677f6bffaecada8b03be9289ef6bcff1bbc4168927fa2c87f10661805f25680b83e75519ac9dba97c1f387323adaaa5c164", 0xa9}, {&(0x7f0000002540)="408821", 0x3}], 0x3, 0x0, 0x0, 0x20000000}, {0x0, 0x0, &(0x7f0000004c40)=[{&(0x7f0000004b80)="2adbd31606910f0de82493ae97e1c548387727b63d7da48d13f1c3fbddce3659b9ce82d824e9011e657a78273aa38773821e8aeb6ab4ff7538d495766eff28b81be0b3e89c02e2d589699e8d91b28a7d5af16e7f110730d4cec399442f57c600219323ad482095a7dd4fea822c0d756ac436168312bc1391f47f62869912f2435f3864cc683ff6b630e1c602", 0x8c}], 0x1, &(0x7f0000004c80)=[@iv={0x70, 0x117, 0x2, 0x5a, "1286dde7c3189636e6d478e767a0b23c34c661431c19335e1ef2581c3b0efa4bbc0932fd8ad4ad1f1e956406e6f8a16bfa69195cd4460d63ea6a10265f7cce5e5016be0ea1aba7f2e7037373f15f9b83433a738cf3da10426a3c"}, @iv={0x88, 0x117, 0x2, 0x73, "caeee87b3fdba77b49b73aab710ee1f0e8d71abfd5beabd21941263170447cbe876f1e53e5c4180568108645e2006aed62a1826753f5a342c2f91d3ac25951dc7c10a98ed3fabdefe12b266961e3f0cfe642455bff546afd74d67e0ea9f3a029250fd1c9bf68d1cb81585395e8621d905c74aa"}, @iv={0xd0, 0x117, 0x2, 0xba, "36c5c26a447cc49675546b8a70f3e6004af99f7981b8530d82660a377be1cfc7ba10a64d2d632d2ad2cc20ede65957e22ef52537ffc271ea52db2129416dbc6092bdabadc9de921a8dbea73a6e7067714e88506913898e6cf224a2e03c702c2528c35953078d7e888dfbb4e0861c11f20fc3a686da24ef07810de021a0b86911400be51b959018475d9382bd7a900cb37c3eb22ebd27b0282e0ad443d043b9dcacb4651f1a2a170dec50fc59f29a2c31af77826e04ad07e73b3c"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1ff}, @iv={0x58, 0x117, 0x2, 0x42, "d27fe1444ae6645cbc48b4509df301cfa37746eb520bf33330138ed5cc2ac51766d326cb66b888030b6e7997b20887622c5301e2e7d05077deb3a5eb022dc92865c8"}], 0x250, 0x9bd2669b6119d541}], 0x6, 0x20040440) sendmsg$nl_xfrm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000880)=ANY=[@ANYBLOB="4c03000016000100000a000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRESDEC=r5, @ANYBLOB="68cbb43f088083538298d50ba6091da0edc5caf57436a4aa909e1096472a6cb61d96a30f4d00", @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}, 0x1, 0x0, 0x0, 0x20000800}, 0xfb28edc2d3d31df2) 1.870056246s ago: executing program 1 (id=1204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40006a0}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x10}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000015) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000180)={0x18, 0x0, {0x1, @local, 'ipvlan0\x00'}}, 0x1e) ioctl$sock_netdev_private(r2, 0x89f1, &(0x7f00000001c0)="be9865ed6d985e9cf7bbc55f5723e77092714763705efa14e07020b342a545a50774afd74e04a080c07d19c2dfe64f3935b56c77659417f4d996834d165e50673155a10dc44a364c1bd158c8e589b9cdf4dfabb62a170b4a707fdf6dbf6d8f7f6b26dd1fbafa7a6f1aad92db58bd16cde455dce81f5f8a99abf006e0def7da6d4995604cc657114a4ef9bb128295a5e092e5d1163cab8771b456ea9eace5a1c4f4b67e2b9d2d0a") close(r2) r3 = accept4(r2, &(0x7f0000000280)=@tipc, &(0x7f0000000300)=0x80, 0x0) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x3f5, 0x400, 0x70bd28, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4008005) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40480d0}, 0x4040000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r3) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f00000007c0)={&(0x7f0000000540), 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x1b0, r4, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x24004800}, 0x4000080) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000800), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000840)={[{0x2b, 'cpu'}]}, 0x5) connect$netlink(r3, &(0x7f0000000880)=@proc={0x10, 0x0, 0x25dfdbfb, 0x100}, 0xc) clock_gettime(0x7, &(0x7f00000008c0)) getsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000900), &(0x7f0000000940)=0x4) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x7c, r1, 0xe10, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x848) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000ac0), &(0x7f0000000b00)=0x30) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x40280, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000b80)={'team_slave_0\x00', @remote}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), r3) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, r7, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x3, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x28006880) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x58, r8, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000081) sendto$inet6(r3, &(0x7f0000000ec0)="1e16fb4d2068a86ff687492b5d29883cbff5fd62791ad1920c2153e9cafe1c7b73b1a9147486018d222f5a1671cec439c1d05249340a8d18b25b5bcfd23c4b9df4721dec51a65ee001c48e811257ee5d28c87a6994a30054d922da057fd7a1ac0f5f217e8ffae75181e91aea51c7d1b939feeafdb1bfa7acdfbc41a13e4bfd448157ae5c98dc47ee8297099a8097", 0x8e, 0x4040, &(0x7f0000000f80)={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10}, 0x1c) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001000), r0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14, r10, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40030}, 0x10) sendfile(r3, r6, &(0x7f0000001100)=0xffffffffffffffff, 0x80000000) 1.678890766s ago: executing program 1 (id=1206): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872061ce618117c56f0979bd10b97163c953ab1abda4589e9cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346d2014006000000e1ffff8816326d7d35c32aac1c7d5b5be399f6609876b5887437a172751151b633fbc02a74067529194e533583412dff048f0000000000000000b2728a04816cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13ceec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad30000000000170022626165866c156a25148972700000b515a1000000000000000eb2e9c15b6c8f6198282d0000000000c2ccf3f69cfcf1e15ea7a9e57aee78e12a2caebaada42811754e19a7e9b531636794a718b4766d2c7c61c3dba128c7fcd1f97989ccf1d55de496eae46c590c2d0225f9cd07005ac7f76d9d560a08c9fd0caafd9d095cb9db0099014cd0d4df62af52b088b01adeadc4c5225a6cd8486b03f83805dffe90dbf7ad042012b7213a2b03e3b1634ddfc9d6f570c4990fbbc7306871d9a52a157fb1a10fa2868df06faf83a8420e9ce62567043ce7e56d1ebe81"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xffff0000, 0x40f, 0xfffffffffffffe4a, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r3, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x400, 0x709d2a, 0x8000000, {0x0, 0x0, 0x0, r4, {0x1f, 0x3}, {0x5}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008080}, 0x24044000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf2519000000180001801400020064763000000000000000000000000000a2fac6412b782db2ccd81807fac2864efaa15a0bcb3f9bd54a9f5aa58babd68a74f34f9e288e2a3184701004c88d0e9d7265a4841af410861ee38fb0f7deee83893a199a6e4e8e5cd5f663be13fcbc2bf9abb45b3594f26965cca7b7b24eae583051ec1e7daeece8c41d8152"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0xc0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000ac0)={0x0, @in6={{0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd88}}, 0x8001, 0x5, 0x2, 0x96, 0x65, 0xd88, 0xc}, &(0x7f0000000b80)=0x9c) r8 = accept(r0, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, &(0x7f0000000200)=0x80) setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "e9668e330841f16a", "b31898be0f73a42dcc80d26a0c35db000055d6c50b1f575db5db90a1cde9b8a2", "2b454a88", "23802a8b090c0400"}, 0x38) 1.554734504s ago: executing program 3 (id=1207): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x3}, 0x4) close(r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) socket$tipc(0x1e, 0x8, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000", @ANYRES16=r2, @ANYBLOB="0100000000003fc14d7a0100000004000480080002000100000008000100000000000400088008010c8054000b800800090000000000080009000000000008000a0000000000080009000000000008000a00000000000800090000000009"], 0x134}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040005}, 0x4000) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)={0x220, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xf4, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x34a2}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32a18c1e}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66e2e336}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69acdbd4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f00612e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ede7706}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1726}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3bd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36ebe384}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2eb35ca9}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4bfd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29744f9a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc49a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x381b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79eccc01}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf613}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a7822e8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63c4e4f5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c27}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50532fc4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x34fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6992}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7fe3}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68c22eaa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26924d57}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x3c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa2de}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4067fd4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x501942af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xad03867}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d34}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf814}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x98, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a692a3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd62c102}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x382ab891}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f5672fc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70458fb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c8cc6e2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b30ac30}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4673e1c1}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39a690e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b193c84}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x232cec3c6fea833b}]}, 0x220}, 0x1, 0x0, 0x0, 0x45}, 0x800) 1.280643463s ago: executing program 3 (id=1210): r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000a80)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\t\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x15, 0x7d, &(0x7f00000000c0)="714790c5c92daa0afdee6bdafaa320686136406e73", &(0x7f0000000240)=""/125, 0x8, 0x0, 0x71, 0x40, &(0x7f00000002c0)="cd6fce72e7efa76565a88bebcf09eff889a21d8887b9299533ae9dea8f50f3008e35b0924ad10314ed99e651d3153ee79187d249551af325a7d92a10c07d6570317cc2598e75527426db07107df737c2799100fae3cd59104899aa8d6431d55fc793b630dabcec9f360fd01df12b97f001", &(0x7f0000000100)="4707b3e4a67c48d90bd59ab3476742046e9b32535b0f65191ea3be903e3d132f3ec31fa92f9cad6a672d1a6453924882e55376192f7a5b5aaca2b24cef1df810", 0x0, 0x0, 0x400}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32, @ANYBLOB="090001"], 0x38}}, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.232092528s ago: executing program 1 (id=1211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0x5}]}]}, 0x4c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x900, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.205732678s ago: executing program 0 (id=1130): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendfile(0xffffffffffffffff, r0, 0x0, 0x8) write(r0, &(0x7f0000000000)="33bf6c2cdc9f587e30ae5ac6e4e505d3bf4bb542889462407ae77b2cc42d3b30849111276ebd82d183dcdb390f6c9cdaa4aeff0e86f0771a68277b826a516e3f208cfe7162852236e4b23ab7fd41121f96f1be103f37a37d5ce557a15d2ac9f24143daab50ffcf338c72521822c985e7c57789c41347cac31defed9b4f31c61aa149e003bd15e8983ae5c469e0b8d42bcf6103817889c767eff1", 0x9a) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x5, 0x3, 0x4, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x20, 0x4, 0xa1a2}}) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x4, r2, 0x27, r3}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) r4 = socket$inet6(0xa, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x800, 0x1, 0x0, 0x9, 0xfff, 0x3, 0x1000, {0x0, @in6={{0xa, 0x4e21, 0xd, @mcast1, 0x7}}, 0x3, 0x7ff, 0xfffffffd, 0x8, 0x6}}, &(0x7f0000000300)=0xb0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={r5, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}}, 0x400, 0x4}, 0x90) r6 = accept4$inet(r1, 0x0, &(0x7f0000000400), 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000480)={'vxcan1\x00', &(0x7f0000000440)=@ethtool_rxfh={0x47, 0x27, 0x1f, 0x2, 0x2, '}\bL', 0x4, [0x9, 0xd12, 0x0, 0x2, 0x1, 0x1]}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@cgroup=r1, 0xf, 0x0, 0x4, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@fallback=r1, 0xffffffffffffffff, 0x22, 0x2001, 0xffffffffffffffff, @value=r1, @void, @void, @void, r7}, 0x20) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000680)={'veth0_to_batadv\x00', &(0x7f0000000640)=@ethtool_ts_info}) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f00000006c0), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000ac0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'nr0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6_vti0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x0, 0x0, 0x0, {0xf38c46682b5d7299}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x7, 0x6, '&qW'}]}, @NFT_MSG_DELCHAIN={0x40, 0x5, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x3c, 0x18, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELOBJ={0x164, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0xbb, 0x8, "10dae33eb0285d4649c8f910f0f7a56f11e6df5b572b9b89b459c86ec0b475a90b3acdd8aad9b012ad13976ab87b6f4bbb26d1d22fc3d0469ca22ebf52a785deba8ecd34f31c7e1c119d6813dae2c2c541aa55149f6b6802b41db2d3a11b7002e457ddfad073873fb3c6690fe6bc243ca4cfe3307832e7783b95b315ed1faef084b6d944c0871ef9a5b9d163318fbf96de095f26be99a6f3ae7c07b5cdb7c86d826287945fb6d96eb676822826b32c5b52fe82e46d9177"}, @NFTA_OBJ_USERDATA={0x12, 0x8, "a52e0111a7e90bb8fec52f889c9c"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x53, 0x8, "bd3cf007c671b421dd2ba179ad0976e48ad86ec4e06f2c22fc313159bba223bcbcb54d23b67db23cae8454d82315419a2bd3d2457688a1ba7b2c591c38df86124bee94e75d57420fb3d266dd0cd3ec"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x340}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000b00), &(0x7f0000000b40)=0x8) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000000b80)={0x2, {{0xa, 0x4e22, 0x2, @mcast1, 0x8cd}}, {{0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, 0x1}}}, 0x108) socket$inet6(0xa, 0x2, 0x101) sendto$inet(r10, &(0x7f0000000cc0)="be6342f670d89625e9916b51ae542585129648f7a1cdae284209214f1aebbffe5b9ea7a7e855b0dc3e55c7277778c3b6c5", 0x31, 0x80, 0x0, 0x0) r11 = syz_init_net_socket$ax25(0x3, 0x5, 0x1) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000d40)={'batadv0\x00', &(0x7f0000000d00)=@ethtool_rxfh_indir={0x38, 0x8, [0xc8, 0x4, 0x3, 0x4, 0x4dea, 0x100, 0x5, 0x7]}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e80)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@restrict={0x8, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x61, 0x2e, 0x61, 0x30, 0x5f]}}, &(0x7f0000000dc0)=""/188, 0x2b, 0xbc, 0x0, 0x689a, 0x0, @void, @value}, 0x28) getsockname$packet(r1, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14) bind$xdp(0xffffffffffffffff, &(0x7f0000000f40)={0x2c, 0x2, 0x0, 0x1e, r1}, 0x10) 1.190755208s ago: executing program 2 (id=1212): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x208, 0x2e8, 0x2e8, 0x208, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0xf8, 0x118, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0xa}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x56, &(0x7f0000000080)={@remote, @broadcast, @void, {@canfd={0xd, {{0x3, 0x1, 0x1, 0x1}, 0xf, 0x2, 0x0, 0x0, "e8641b6002809d7c2a1eccd36a4acf1912a77b0a40dd49701ca30d01be1247792b17c78d69fcb03466c87f5987fa6422aaf60c826eb199c5d6b160c7d91d439d"}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x38, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x337}]}]}, 0x38}}, 0x0) 902.924712ms ago: executing program 1 (id=1213): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000047c0000040000000c"], 0x528}}, 0xc000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000b00), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000340)={0x0, 0xfffffffffffffcf7, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000200000000002000000080001"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003900000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000100)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x2b, 0xe4, 0x0, 0x1, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}, "d3141c09fe2c7896481d1efc1dec75d1b40e00000000c6"}}}}}, 0x3d) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000080)={r7, 0x8001}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={r7, 0x6}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000047c0000040000000c"], 0x528}}, 0xc000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r0) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000b00), r0) (async) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000340)={0x0, 0xfffffffffffffcf7, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000200000000002000000080001"], 0x1c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003900000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r4, &(0x7f0000000100)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x2b, 0xe4, 0x0, 0x1, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}, "d3141c09fe2c7896481d1efc1dec75d1b40e00000000c6"}}}}}, 0x3d) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000080)={r7, 0x8001}, 0x8) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={r7, 0x6}, 0xc) (async) 815.658392ms ago: executing program 2 (id=1214): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f00000000c0), &(0x7f0000000280)=@udp=r1}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r2) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl1\x00', r5, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x20}}) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @initdev={0xac, 0x35, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000540)='X&z', 0x0}, 0x20) 814.938051ms ago: executing program 3 (id=1215): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c0000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e6400b852f8a40000000c0002800500060000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x80) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.io_merged\x00', 0x7a05, 0x1700) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40804) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r7, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r6, 0x1ad72f7) accept4$netrom(r6, 0x0, 0x0, 0x80000) r8 = accept4(r6, 0x0, 0x0, 0x80800) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x40c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) getsockopt$sock_int(r5, 0x1, 0x2a, 0x0, &(0x7f0000000140)) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000680)={0x0, @initdev, @private}, &(0x7f00000006c0)=0xc) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0xeb06, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x13, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='GPL\x00', 0x80, 0x93, &(0x7f00000005c0)=""/147, 0x41100, 0x18, '\x00', r9, 0x0, r3, 0x8, &(0x7f0000000700)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x2b1f7, 0xffffffffffffffff, 0x9, &(0x7f00000007c0)=[r1, r2, r10, r2, r1, r4, r4], &(0x7f0000000800)=[{0x1, 0x3, 0x1, 0x4}, {0x0, 0x3, 0xe}, {0x0, 0x4, 0xf, 0x4}, {0x5, 0x5, 0xf, 0x3}, {0x0, 0x5, 0x2, 0x4}, {0x3, 0x3, 0x7, 0x8}, {0x4, 0x4, 0x7, 0xb}, {0x1, 0x5, 0xc, 0xb}, {0x2, 0x4, 0x7, 0xa}], 0x10, 0xfffffff6, @void, @value}, 0x94) r11 = socket(0x10, 0x3, 0x0) sendto$inet6(r11, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008200800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r11, 0x10f, 0x81, &(0x7f0000000940), &(0x7f0000000980)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000280)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xdc, 0x6b, 0x6, 0x100, 0x510d5abe, 0x4000000, r12}) syz_init_net_socket$x25(0x9, 0x5, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r13, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044014}, 0x20000050) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000003c0)={r12, 0x1, 0x6}, 0x10) 615.827922ms ago: executing program 2 (id=1216): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x10cc, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x5efe) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 523.73913ms ago: executing program 2 (id=1217): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_linger(r2, 0x1, 0x38, 0x0, &(0x7f0000000240)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="68000000100003052dbd70200000000400000000", @ANYRES32=0x0, @ANYBLOB="0400040000000000400012800e00010069703665727370616e0000002c0002800400120014000700fc02000000000000000000000000000108000100", @ANYRES32=r1, @ANYBLOB="060017000b00000008000a009a98ccc9b71832a3142acf2f3b940b2b793197cfdc0513f6d44fc1bacb7b964a5e1a02000000000000004b38f8a47755bdc79e14f76542106361e0bbe47bb8fd0ecb4f0fa2b9967994000000000000000000", @ANYRES32=r1, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x2004c012}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) 327.841331ms ago: executing program 1 (id=1218): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x101, 0xbcd000}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x70}}, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f00000000c0), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0ad03240", @ANYRES16=r10, @ANYBLOB="000000000000030000004c0000000600a800150000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x40000) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff}, [@RTA_OIF={0x8, 0x4, r7}, @RTA_PREF={0x5, 0x14, 0x6}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x2000007}}]}, 0x38}}, 0x80) socket$inet(0x2, 0x6, 0xfffe0000) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000340)={r1, 0x3}, 0x8) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000200040000000900e7000010000c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r11, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000207f1503640200000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r12}, &(0x7f0000000840), &(0x7f0000000880)=r11}, 0x20) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000380)={0x0, 0xcbd}, &(0x7f00000003c0)=0x8) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x12, r13, 0x0) epoll_pwait(r13, &(0x7f0000000140)=[{}], 0x1, 0x66f, &(0x7f0000000180)={[0xd0f6]}, 0x69) 229.074309ms ago: executing program 2 (id=1219): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x80, 0x80a4, 0x9e, 0x6, {{0x12, 0x4, 0x3, 0x3b, 0x48, 0x68, 0x0, 0xb, 0x4, 0x0, @multicast2, @local, {[@timestamp_prespec={0x44, 0xc, 0x9d, 0x3, 0x6, [{@local, 0x200}]}, @end, @noop, @timestamp_prespec={0x44, 0x1c, 0x51, 0x3, 0x7, [{@rand_addr=0x64010102, 0x800}, {@broadcast, 0x6}, {@private=0xa010101, 0x3ff}]}, @end, @lsrr={0x83, 0x7, 0x94, [@multicast1]}]}}}}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1d16997bc7dcd69f, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002c0001000000000000000000020000800c0000000000000000000000140001"], 0x114}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0x43, 0xfffffffffffffffe}, 0x1d) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e21, @multicast2}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001800dd8d00000000000000000200eaffffffff050000000006001500060000001000168006000100000801000000000041345d50bb75eba5b0d5b82e0ebeed9930db0f2b5d382902009539df1c6e462968cfb1979e08ca31856e63cf907a673ad9981d534207038d71a50d586a3a4b9be1232276d419e40960163b21194be61297c89a60afb0d13914fa1f37c5c27a18d4045be8ae6961dfc220ef20de0463e1b7f859348a7d1652be22db7c9d2caf1fc0f9871fadf9d2d66ef039428394ffddad6e48bd1303ed1a7e64902ea65f8bb6816cdac0531c82cfa785032993f3b7b142"], 0x34}}, 0x0) 63.961959ms ago: executing program 1 (id=1220): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) socket(0x1e, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) shutdown(r0, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x4}}]}, 0x38}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r6, 0x40305829, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) sendmsg$nl_generic(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x33, 0x1, 0x70bd2a, 0x25dbdbff, {0x2}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000) ioctl$sock_netdev_private(r7, 0x89f5, &(0x7f0000000140)="6b809e3b6bb75d12cae06bd86e1a46693882a1fe80eb284982fe1d393e96137e3270e06290bb9a5c34aaa53172964d77d26dd0d5077f361365e53aa8cead09d8344f8074bf0219b57b09bc592554f0be7f7781db0cdf455fe304655fb76d73eaf592e12ad377893825f5bc") sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a18100310000", 0x17}], 0x1}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) 0s ago: executing program 2 (id=1221): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008b00000095"], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb6, 0xb6, 0xa, [@enum64={0xa, 0x2, 0x0, 0x13, 0x1, 0x4, [{0xa, 0x4, 0x8}, {0xf, 0x0, 0x7}]}, @ptr={0x2, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x3, 0xffffffffffffffff}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x5}}, @ptr={0x6, 0x0, 0x0, 0x2, 0x2}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x5, 0x2}]}, @ptr={0x6}, @datasec={0x7, 0x3, 0x0, 0xf, 0x2, [{0x1, 0x8001, 0x7}, {0x4, 0x3, 0x2}, {0x5, 0x1, 0x5}], "c79a"}]}, {0x0, [0x5f, 0x5f, 0x30, 0x5f, 0x30, 0x2e, 0x5f, 0x2e]}}, &(0x7f0000000340)=""/181, 0xda, 0xb5, 0x1, 0xfffffffa, 0x10000, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001400)={r0, 0x20, &(0x7f00000001c0)={&(0x7f0000000400)=""/4096, 0x1000, 0x0, &(0x7f0000000180)=""/16, 0x10}}, 0x10) kernel console output (not intermixed with test programs): y added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.756630][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.767606][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.799742][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.808991][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.817857][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.817970][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.834940][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.843653][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.865154][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.875929][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.886213][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.896937][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.908781][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.919343][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.930669][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.968540][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.980595][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.991641][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.002248][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.012187][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.023212][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.035836][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.065163][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.066825][ T5841] veth0_macvtap: entered promiscuous mode [ 64.111027][ T5841] veth1_macvtap: entered promiscuous mode [ 64.135351][ T5847] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.144073][ T5847] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.153620][ T5847] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.162407][ T5847] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.322103][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.355020][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.380905][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.408657][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.435229][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.446674][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.462318][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.472930][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.484196][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.498050][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.538976][ T5931] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 64.539581][ T5928] netlink: 'syz.1.2': attribute type 21 has an invalid length. [ 64.565222][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.572977][ T5931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 64.576971][ T5928] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 64.606723][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.620714][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.637763][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.649465][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.694344][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.726830][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.750861][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.761643][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.778159][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.831181][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.856576][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.870352][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.883007][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.890562][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.898943][ T5148] Bluetooth: hci0: command tx timeout [ 64.913120][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.938856][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.947737][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.975009][ T5148] Bluetooth: hci3: command tx timeout [ 64.975166][ T53] Bluetooth: hci2: command tx timeout [ 64.980418][ T5148] Bluetooth: hci1: command tx timeout [ 64.980446][ T5148] Bluetooth: hci4: command tx timeout [ 65.045890][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.064938][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.185429][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.193378][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.328637][ T3021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.345068][ T5960] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 65.351259][ T3021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.676018][ T5969] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14'. [ 66.405760][ T6009] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.633114][ T6040] netlink: 132 bytes leftover after parsing attributes in process `syz.0.28'. [ 66.702543][ T6009] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 66.737528][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'. [ 66.842138][ T5887] IPVS: starting estimator thread 0... [ 66.934823][ T6052] IPVS: using max 26 ests per chain, 62400 per kthread [ 66.951189][ T6057] netlink: 'syz.1.33': attribute type 7 has an invalid length. [ 66.975245][ T5148] Bluetooth: hci0: command tx timeout [ 67.054944][ T5148] Bluetooth: hci4: command tx timeout [ 67.055607][ T5840] Bluetooth: hci1: command tx timeout [ 67.060405][ T5148] Bluetooth: hci3: command tx timeout [ 67.066199][ T53] Bluetooth: hci2: command tx timeout [ 67.200010][ T6068] netlink: 9 bytes leftover after parsing attributes in process `syz.2.36'. [ 67.210586][ T6068] gretap0: entered promiscuous mode [ 67.223976][ T6068] netlink: 5 bytes leftover after parsing attributes in process `syz.2.36'. [ 67.225990][ T6070] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 67.233241][ T6068] 0ªî{X¹¦: renamed from gretap0 [ 67.248336][ T6068] 0ªî{X¹¦: left promiscuous mode [ 67.253434][ T6068] 0ªî{X¹¦: entered allmulticast mode [ 67.258421][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'. [ 67.261017][ T6068] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 67.272223][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37'. [ 67.299647][ T6070] netlink: 52 bytes leftover after parsing attributes in process `syz.1.37'. [ 67.636644][ T6085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.40'. [ 67.756537][ T6085] nbd: socks must be embedded in a SOCK_ITEM attr [ 67.827930][ T6091] nbd: device at index 64 is going down [ 68.006325][ T6100] Zero length message leads to an empty skb [ 68.310213][ T6121] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 68.329868][ T6121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 68.625072][ T5937] hid-generic 0005:0B57:0001.0001: item fetching failed at offset 0/1 [ 68.703656][ T6147] netlink: 'syz.2.60': attribute type 13 has an invalid length. [ 68.715649][ T5937] hid-generic 0005:0B57:0001.0001: probe with driver hid-generic failed with error -22 [ 68.762363][ T6147] veth0_macvtap: left promiscuous mode [ 68.783016][ T6147] macvtap0: entered allmulticast mode [ 68.805459][ T6147] macvtap0: refused to change device tx_queue_len [ 68.862589][ T6144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.938601][ T6151] warning: `syz.3.59' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 69.007341][ T6162] openvswitch: netlink: Geneve opt len 31 is not a multiple of 4. [ 69.027322][ T6151] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.132866][ T6144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.276097][ T6144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.433735][ T6144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.524404][ T6177] openvswitch: netlink: IP tunnel dst address not specified [ 69.557446][ T6177] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 69.567182][ T6174] syz.2.66 uses obsolete (PF_INET,SOCK_PACKET) [ 69.778022][ T6144] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.799808][ T6186] netlink: 'syz.4.71': attribute type 1 has an invalid length. [ 69.849594][ T6144] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.874824][ T6185] netlink: 'syz.4.71': attribute type 1 has an invalid length. [ 69.889215][ T6144] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.903880][ T6144] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.175875][ T6207] xt_cgroup: path and classid specified [ 70.498292][ T6233] netlink: 'syz.2.82': attribute type 12 has an invalid length. [ 70.579889][ T6236] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 70.601979][ T6236] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 70.638575][ T6232] __nla_validate_parse: 13 callbacks suppressed [ 70.638592][ T6232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.83'. [ 70.655651][ T6237] sctp: [Deprecated]: syz.0.85 (pid 6237) Use of struct sctp_assoc_value in delayed_ack socket option. [ 70.655651][ T6237] Use struct sctp_sack_info instead [ 70.869996][ T6250] netlink: 16 bytes leftover after parsing attributes in process `syz.1.88'. [ 70.877933][ T6249] netlink: 'syz.2.89': attribute type 10 has an invalid length. [ 70.889547][ T6256] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 2, id = 0 [ 70.913067][ T6249] hsr0: entered promiscuous mode [ 70.989037][ T6249] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 71.014212][ T6249] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 71.034179][ T6249] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 71.625624][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.99'. [ 71.635226][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.641724][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.703425][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.99'. [ 71.906774][ T6303] openvswitch: netlink: Message has 8 unknown bytes. [ 72.116082][ T6313] veth0: entered promiscuous mode [ 72.177974][ T6313] geneve2: entered promiscuous mode [ 72.199489][ T6313] geneve2: entered allmulticast mode [ 72.265238][ T6311] veth0: left promiscuous mode [ 72.539247][ T6341] netlink: 'syz.4.110': attribute type 1 has an invalid length. [ 72.539694][ T6339] netlink: 20 bytes leftover after parsing attributes in process `syz.1.109'. [ 72.939252][ T6364] Bluetooth: MGMT ver 1.23 [ 72.948168][ T6363] rdma_op ffff88807dacf1f0 conn xmit_rdma 0000000000000000 [ 73.046903][ T6371] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.119'. [ 73.073342][ T6371] openvswitch: netlink: Flow actions attr not present in new flow. [ 73.366921][ T6384] netlink: 'syz.1.123': attribute type 1 has an invalid length. [ 73.410380][ T6384] netlink: 224 bytes leftover after parsing attributes in process `syz.1.123'. [ 73.434045][ T6387] netlink: 68 bytes leftover after parsing attributes in process `syz.3.125'. [ 73.735662][ T6407] tipc: Enabling of bearer rejected, failed to enable media [ 73.948178][ T6418] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 73.955022][ T6418] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 74.161444][ T6424] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 74.235692][ T6432] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 74.616822][ T6461] netlink: 43 bytes leftover after parsing attributes in process `syz.4.137'. [ 74.640669][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.140'. [ 74.672997][ T6458] netlink: 'syz.1.140': attribute type 1 has an invalid length. [ 74.691106][ T6458] netlink: 'syz.1.140': attribute type 2 has an invalid length. [ 74.975042][ T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 74.981753][ T5148] Bluetooth: hci0: command 0x0c1a tx timeout [ 75.344003][ T6490] infiniband syz2: set active [ 75.358557][ T6490] infiniband syz2: added bridge_slave_1 [ 75.473351][ T6490] RDS/IB: syz2: added [ 75.484795][ T6490] smc: adding ib device syz2 with port count 1 [ 75.500746][ T6490] smc: ib device syz2 port 1 has pnetid [ 75.849481][ T6523] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 75.952899][ T6527] x_tables: duplicate underflow at hook 2 [ 76.128259][ T6533] gtp0: entered promiscuous mode [ 76.174617][ T6536] netlink: 'syz.3.162': attribute type 25 has an invalid length. [ 76.202290][ T6536] __nla_validate_parse: 4 callbacks suppressed [ 76.202306][ T6536] netlink: 184 bytes leftover after parsing attributes in process `syz.3.162'. [ 76.338685][ T6540] netlink: 'syz.3.164': attribute type 1 has an invalid length. [ 76.349753][ T6540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 76.357379][ T6540] IPv6: NLM_F_CREATE should be set when creating new route [ 76.371791][ T6540] netlink: 'syz.3.164': attribute type 1 has an invalid length. [ 76.379569][ T6540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 76.395993][ T6540] netlink: 256 bytes leftover after parsing attributes in process `syz.3.164'. [ 76.410982][ T6540] netlink: 'syz.3.164': attribute type 9 has an invalid length. [ 76.561931][ T6546] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 76.571695][ T6546] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 76.586699][ T6546] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 76.599798][ T6546] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 76.612878][ T6546] geneve2: entered promiscuous mode [ 76.622197][ T6546] geneve2: entered allmulticast mode [ 76.633433][ T6546] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 76.650730][ T6546] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 76.660317][ T6546] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 76.670227][ T6546] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 76.802391][ T6549] netlink: 240 bytes leftover after parsing attributes in process `syz.2.167'. [ 77.006899][ T6561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'. [ 77.026493][ T6561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'. [ 77.972747][ T6608] IPVS: length: 157 != 8 [ 78.003385][ T6608] netem: incorrect ge model size [ 78.038139][ T6608] netem: change failed [ 78.569380][ T6637] xt_policy: neither incoming nor outgoing policy selected [ 78.582169][ T6644] netlink: 'syz.1.190': attribute type 11 has an invalid length. [ 79.356020][ T6678] xt_hashlimit: size too large, truncated to 1048576 [ 79.741705][ T6706] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 80.287366][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.208'. [ 80.359542][ T6731] hsr_slave_0: left promiscuous mode [ 80.394181][ T6731] hsr_slave_1: left promiscuous mode [ 80.451563][ T6735] netlink: 'syz.3.209': attribute type 1 has an invalid length. [ 80.480604][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'. [ 80.490025][ T6742] bridge_slave_1: left allmulticast mode [ 80.503243][ T6742] bridge_slave_1: left promiscuous mode [ 80.518584][ T6742] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.626043][ T6742] bridge_slave_0: left allmulticast mode [ 80.631743][ T6742] bridge_slave_0: left promiscuous mode [ 80.670360][ T6742] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.721773][ T6757] netlink: 'syz.3.213': attribute type 10 has an invalid length. [ 80.729885][ T6757] netlink: 40 bytes leftover after parsing attributes in process `syz.3.213'. [ 80.808585][ T6757] team0: Port device geneve0 added [ 80.943617][ T6766] netem: change failed [ 81.020362][ T6769] syzkaller1: entered promiscuous mode [ 81.030980][ T6769] syzkaller1: entered allmulticast mode [ 81.166514][ T6782] netlink: 'syz.1.220': attribute type 1 has an invalid length. [ 81.180678][ T6782] netlink: 224 bytes leftover after parsing attributes in process `syz.1.220'. [ 81.412713][ T6790] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 81.466462][ T6790] 0ªî{X¹¦: left allmulticast mode [ 81.546808][ T6790] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 81.726500][ T6805] netlink: 48 bytes leftover after parsing attributes in process `syz.3.225'. [ 81.751455][ T6805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.225'. [ 81.860635][ T974] cfg80211: failed to load regulatory.db [ 81.972024][ T6824] netlink: 'syz.0.230': attribute type 1 has an invalid length. [ 82.013369][ T6825] netlink: 'syz.0.230': attribute type 1 has an invalid length. [ 82.052445][ T6827] netlink: 24 bytes leftover after parsing attributes in process `syz.2.231'. [ 82.052454][ T6828] netlink: 24 bytes leftover after parsing attributes in process `syz.2.231'. [ 82.108213][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.232'. [ 82.128878][ T6833] netlink: 24 bytes leftover after parsing attributes in process `syz.1.234'. [ 82.138831][ T6836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.233'. [ 82.357199][ T6848] netlink: 32 bytes leftover after parsing attributes in process `syz.2.236'. [ 82.373998][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.234'. [ 82.395660][ T6848] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 82.645727][ T6863] x_tables: unsorted entry at hook 1 [ 82.917898][ T6879] netlink: 76 bytes leftover after parsing attributes in process `syz.3.243'. [ 83.631793][ T6913] tipc: Started in network mode [ 83.653636][ T6913] tipc: Node identity 000000000000405f0000000000000001, cluster identity 4711 [ 83.683614][ T6913] tipc: Enabling of bearer rejected, failed to enable media [ 83.744388][ T6922] No such timeout policy "syz0" [ 83.935659][ T6930] netlink: 'syz.1.254': attribute type 12 has an invalid length. [ 84.096884][ T6944] netlink: 'syz.0.258': attribute type 30 has an invalid length. [ 84.108913][ T6942] openvswitch: netlink: Message has 44053 unknown bytes. [ 84.164982][ T6944] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.173825][ T6944] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.182317][ T6944] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.190598][ T6944] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.236382][ T6955] netlink: 'syz.0.258': attribute type 30 has an invalid length. [ 84.496932][ T6967] netlink: 'syz.4.261': attribute type 1 has an invalid length. [ 84.609971][ T6971] bridge_slave_0: left allmulticast mode [ 84.776015][ T6976] netlink: 'syz.2.263': attribute type 10 has an invalid length. [ 84.825992][ T6971] bridge_slave_0: left promiscuous mode [ 84.846903][ T6971] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.888024][ T6971] bridge_slave_1: left allmulticast mode [ 84.907242][ T6971] bridge_slave_1: left promiscuous mode [ 84.924613][ T6971] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.951569][ T6971] bond0: (slave bond_slave_0): Releasing backup interface [ 84.991563][ T6971] bond0: (slave bond_slave_1): Releasing backup interface [ 85.017124][ T6971] team0: Port device team_slave_0 removed [ 85.029687][ T6971] team0: Port device team_slave_1 removed [ 85.038070][ T6971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.048390][ T6971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.057920][ T6971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.066433][ T6971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.089237][ T6976] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 85.405275][ T7005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.811289][ T7034] netlink: 'syz.1.276': attribute type 10 has an invalid length. [ 85.898177][ T7034] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.923001][ T7034] bond0: (slave team0): Enslaving as an active interface with an up link [ 86.154649][ T7046] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 86.219758][ T7049] netlink: 'syz.1.281': attribute type 10 has an invalid length. [ 86.296892][ T7049] team0: Port device geneve0 added [ 86.462490][ T7061] veth1: entered promiscuous mode [ 86.492675][ T7061] veth1: left promiscuous mode [ 86.958830][ T7100] __nla_validate_parse: 13 callbacks suppressed [ 86.958848][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.292'. [ 87.268422][ T7121] netlink: 44 bytes leftover after parsing attributes in process `syz.0.295'. [ 87.309202][ T7121] netlink: 43 bytes leftover after parsing attributes in process `syz.0.295'. [ 87.332856][ T7121] netlink: 'syz.0.295': attribute type 6 has an invalid length. [ 87.343774][ T7121] netlink: 'syz.0.295': attribute type 5 has an invalid length. [ 87.368770][ T7121] netlink: 43 bytes leftover after parsing attributes in process `syz.0.295'. [ 87.833921][ T7147] netlink: 260 bytes leftover after parsing attributes in process `syz.0.303'. [ 88.141474][ T7151] team0 (unregistering): Port device team_slave_0 removed [ 88.163254][ T7151] team0 (unregistering): Port device team_slave_1 removed [ 88.486905][ T7175] @ÿ: renamed from bond_slave_0 [ 88.560385][ T7172] syzkaller1: entered promiscuous mode [ 88.585705][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.311'. [ 88.600576][ T7172] syzkaller1: entered allmulticast mode [ 88.662442][ T7180] openvswitch: netlink: Flow key attr not present in new flow. [ 88.723231][ T7188] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 88.883308][ T7198] netlink: 48 bytes leftover after parsing attributes in process `syz.3.317'. [ 88.954583][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 88.965060][ T7198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.317'. [ 89.008538][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 89.068875][ T7200] netlink: 'syz.0.318': attribute type 1 has an invalid length. [ 89.079831][ T7198] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 89.334176][ T7218] netlink: 'syz.4.322': attribute type 3 has an invalid length. [ 89.632800][ T7227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.114071][ T7259] Bluetooth: MGMT ver 1.23 [ 91.029058][ T7299] netlink: 'syz.1.345': attribute type 18 has an invalid length. [ 91.058350][ T7299] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.067636][ T7299] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.076402][ T7299] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.085259][ T7299] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.162306][ T7308] geneve2: entered promiscuous mode [ 91.215356][ T7308] geneve2: entered allmulticast mode [ 91.244312][ T7303] rdma_op ffff888034c721f0 conn xmit_rdma 0000000000000000 [ 91.303517][ T7320] IPVS: set_ctl: invalid protocol: 44 172.20.20.55:20001 [ 91.503045][ T7329] openvswitch: netlink: Missing valid actions attribute. [ 91.510523][ T7329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.833383][ T7345] netlink: 'syz.0.357': attribute type 1 has an invalid length. [ 91.892081][ T7356] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 92.497722][ T7381] batadv1: entered allmulticast mode [ 92.762902][ T7392] __nla_validate_parse: 12 callbacks suppressed [ 92.762922][ T7392] netlink: 208 bytes leftover after parsing attributes in process `syz.2.368'. [ 92.883358][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.370'. [ 93.121050][ T7407] sctp: [Deprecated]: syz.4.372 (pid 7407) Use of struct sctp_assoc_value in delayed_ack socket option. [ 93.121050][ T7407] Use struct sctp_sack_info instead [ 93.233184][ T7407] netlink: 'syz.4.372': attribute type 1 has an invalid length. [ 93.259518][ T7407] netlink: 134744 bytes leftover after parsing attributes in process `syz.4.372'. [ 93.575729][ T7433] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 93.906059][ T7456] netlink: 36 bytes leftover after parsing attributes in process `syz.0.384'. [ 94.032082][ T7462] netlink: 68 bytes leftover after parsing attributes in process `syz.4.385'. [ 94.179301][ T7474] netlink: 20 bytes leftover after parsing attributes in process `syz.2.386'. [ 94.550846][ T7499] xt_HMARK: spi-set and port-set can't be combined [ 94.694707][ T7503] veth0: entered promiscuous mode [ 94.721962][ T7501] veth0: left promiscuous mode [ 94.755028][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'. [ 94.778771][ T7512] netlink: 'syz.4.393': attribute type 1 has an invalid length. [ 94.841141][ T7512] netlink: 'syz.4.393': attribute type 1 has an invalid length. [ 94.902859][ T7507] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 95.132646][ T7528] bridge_slave_0: left allmulticast mode [ 95.174305][ T7528] bridge_slave_0: left promiscuous mode [ 95.180072][ T7528] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.275987][ T7528] bridge_slave_1: left allmulticast mode [ 95.292262][ T7528] bridge_slave_1: left promiscuous mode [ 95.303958][ T7528] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.326152][ T7528] bond0: (slave bond_slave_0): Releasing backup interface [ 95.346177][ T7528] bond0: (slave bond_slave_1): Releasing backup interface [ 95.368778][ T7528] team0: Port device team_slave_0 removed [ 95.379911][ T7528] team0: Port device team_slave_1 removed [ 95.387193][ T7528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.398465][ T7528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.410041][ T7528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.421304][ T7528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.456943][ T7528] team0: Port device geneve0 removed [ 95.495052][ T7541] netlink: 80 bytes leftover after parsing attributes in process `syz.1.404'. [ 95.507443][ T7541] netlink: 80 bytes leftover after parsing attributes in process `syz.1.404'. [ 95.639673][ T7549] netlink: 24 bytes leftover after parsing attributes in process `syz.3.406'. [ 95.743371][ T7549] bond1: entered promiscuous mode [ 95.762706][ T7549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.469521][ T7595] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 96.514265][ T7599] sch_fq: defrate 0 ignored. [ 97.975433][ T7663] __nla_validate_parse: 3 callbacks suppressed [ 97.975451][ T7663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.428'. [ 98.456738][ T7680] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.432'. [ 98.553952][ T7690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.434'. [ 98.602965][ T7693] netlink: 20 bytes leftover after parsing attributes in process `syz.1.436'. [ 98.927226][ T7713] trusted_key: syz.3.439 sent an empty control message without MSG_MORE. [ 99.000508][ T7717] netlink: 'syz.3.439': attribute type 24 has an invalid length. [ 99.071041][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.441'. [ 99.096375][ T7722] netlink: 'syz.2.442': attribute type 1 has an invalid length. [ 99.119839][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.442'. [ 99.129630][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.442'. [ 99.163872][ T7724] netlink: 28 bytes leftover after parsing attributes in process `syz.4.441'. [ 99.246270][ T7729] hsr0 speed is unknown, defaulting to 1000 [ 99.263613][ T7722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.442'. [ 99.264459][ T7729] hsr0 speed is unknown, defaulting to 1000 [ 99.279405][ T7722] netlink: 'syz.2.442': attribute type 1 has an invalid length. [ 99.297004][ T7722] netlink: 28 bytes leftover after parsing attributes in process `syz.2.442'. [ 99.307528][ T7729] hsr0 speed is unknown, defaulting to 1000 [ 99.339988][ T7729] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 99.418760][ T7729] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 99.482120][ T7729] hsr0 speed is unknown, defaulting to 1000 [ 99.491062][ T7729] hsr0 speed is unknown, defaulting to 1000 [ 99.498875][ T7729] hsr0 speed is unknown, defaulting to 1000 [ 99.505887][ T7729] hsr0 speed is unknown, defaulting to 1000 [ 99.524065][ T7729] hsr0 speed is unknown, defaulting to 1000 [ 100.029544][ T7761] netlink: 'syz.0.451': attribute type 15 has an invalid length. [ 100.088688][ T7761] ÿ: renamed from bridge_slave_0 (while UP) [ 100.296641][ T7780] netlink: 'syz.2.456': attribute type 8 has an invalid length. [ 100.361767][ T7785] netlink: 'syz.0.457': attribute type 6 has an invalid length. [ 100.420430][ T7785] netlink: 'syz.0.457': attribute type 6 has an invalid length. [ 100.464024][ T7785] netlink: 'syz.0.457': attribute type 6 has an invalid length. [ 100.494833][ T7785] netlink: 'syz.0.457': attribute type 6 has an invalid length. [ 100.523814][ T7785] netlink: 'syz.0.457': attribute type 6 has an invalid length. [ 100.945577][ T7825] delete_channel: no stack [ 101.507807][ T7853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.853120][ T7873] netlink: 'syz.3.479': attribute type 11 has an invalid length. [ 101.875789][ T7871] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 101.993805][ T7863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.558198][ T7912] xt_TCPMSS: Only works on TCP SYN packets [ 102.608239][ T7917] dummy0: entered allmulticast mode [ 102.653843][ T7917] batman_adv: batadv0: Adding interface: dummy0 [ 102.701586][ T7917] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.766416][ T7920] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 102.791423][ T7917] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 102.812493][ T7891] hsr0 speed is unknown, defaulting to 1000 [ 103.013356][ T7935] __nla_validate_parse: 18 callbacks suppressed [ 103.013373][ T7935] netlink: 104 bytes leftover after parsing attributes in process `syz.0.497'. [ 103.029281][ T7931] netlink: 32 bytes leftover after parsing attributes in process `syz.2.496'. [ 103.192492][ T7953] netlink: 20 bytes leftover after parsing attributes in process `syz.1.499'. [ 103.508473][ T7959] xt_CT: No such helper "snmp" [ 103.709262][ T7971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.503'. [ 104.351451][ T8003] netlink: 20 bytes leftover after parsing attributes in process `syz.3.511'. [ 104.372195][ T8003] netlink: 7 bytes leftover after parsing attributes in process `syz.3.511'. [ 104.411660][ T8003] netlink: 20 bytes leftover after parsing attributes in process `syz.3.511'. [ 104.426050][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.509'. [ 104.698109][ T8014] netlink: 72 bytes leftover after parsing attributes in process `syz.2.512'. [ 104.816206][ T5148] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.582118][ T7897] hsr0 speed is unknown, defaulting to 1000 [ 105.596592][ T7999] bridge0: port 1(batadv1) entered blocking state [ 105.603153][ T7999] bridge0: port 1(batadv1) entered disabled state [ 105.610285][ T7999] batadv1: entered allmulticast mode [ 105.617393][ T7999] batadv1: entered promiscuous mode [ 106.107753][ T81] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 106.117344][ T81] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 106.169628][ T8033] netlink: 17 bytes leftover after parsing attributes in process `syz.2.520'. [ 106.210082][ T8033] netlink: zone id is out of range [ 106.214081][ T8037] x_tables: duplicate entry at hook 1 [ 106.229485][ T8033] netlink: zone id is out of range [ 106.234807][ T8033] netlink: zone id is out of range [ 106.240565][ T8033] netlink: zone id is out of range [ 106.245842][ T8033] netlink: zone id is out of range [ 106.251014][ T8033] netlink: zone id is out of range [ 106.259085][ T8033] netlink: zone id is out of range [ 106.264418][ T8033] netlink: zone id is out of range [ 108.298911][ T8078] validate_nla: 63 callbacks suppressed [ 108.298927][ T8078] netlink: 'syz.1.529': attribute type 29 has an invalid length. [ 108.467328][ T8083] af_packet: tpacket_rcv: packet too big, clamped from 3088 to 2928. macoff=96 [ 108.537986][ T8081] netlink: 'syz.1.529': attribute type 29 has an invalid length. [ 108.620862][ T8078] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 108.652783][ T8078] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 108.745861][ T8093] __nla_validate_parse: 1 callbacks suppressed [ 108.745879][ T8093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.535'. [ 108.922524][ T8102] sctp: [Deprecated]: syz.1.538 (pid 8102) Use of struct sctp_assoc_value in delayed_ack socket option. [ 108.922524][ T8102] Use struct sctp_sack_info instead [ 108.933798][ T5834] IPVS: starting estimator thread 0... [ 109.074409][ T8104] IPVS: using max 23 ests per chain, 55200 per kthread [ 109.107437][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.536'. [ 109.325643][ T8133] net_ratelimit: 76 callbacks suppressed [ 109.325662][ T8133] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 109.337917][ T8133] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 109.777613][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.550'. [ 109.857064][ T8152] dvmrp0: entered allmulticast mode [ 109.910502][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.555'. [ 110.067899][ T8165] openvswitch: netlink: Actions may not be safe on all matching packets [ 110.203914][ T8172] bridge0: port 1(ÿ) entered disabled state [ 110.217082][ T8172] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.268838][ T5885] hsr0 speed is unknown, defaulting to 1000 [ 110.368938][ T8181] netlink: 'syz.0.565': attribute type 4 has an invalid length. [ 110.382176][ T8181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.565'. [ 110.577324][ T8197] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 [ 110.632336][ T8197] netlink: 'syz.0.569': attribute type 1 has an invalid length. [ 110.633642][ T8203] pimreg3: entered allmulticast mode [ 110.641257][ T8197] netlink: 'syz.0.569': attribute type 2 has an invalid length. [ 110.747963][ T8208] dvmrp0: entered allmulticast mode [ 110.808758][ T8211] veth0: entered promiscuous mode [ 110.830859][ T8211] veth0: left promiscuous mode [ 110.850471][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.573'. [ 110.880543][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 110.889940][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.573'. [ 110.937612][ T8215] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 110.965093][ T8215] gretap1: entered promiscuous mode [ 110.981854][ T8215] gretap1: entered allmulticast mode [ 111.314987][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'. [ 111.383292][ T8244] No such timeout policy "syz0" [ 111.401267][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'. [ 111.596135][ T8257] tipc: Started in network mode [ 111.601082][ T8257] tipc: Node identity aaaaaaaaaa1f, cluster identity 4711 [ 111.608735][ T8257] tipc: Enabled bearer , priority 0 [ 111.637033][ T8262] netlink: 'syz.2.583': attribute type 39 has an invalid length. [ 112.137140][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.205865][ T8277] netlink: 'syz.1.593': attribute type 8 has an invalid length. [ 112.270468][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.360650][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.543839][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.578407][ T8283] netlink: 'syz.2.595': attribute type 10 has an invalid length. [ 112.650328][ T8283] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.687160][ T8283] bond0: (slave team0): Enslaving as an active interface with an up link [ 112.725974][ T5918] tipc: Node number set to 11905706 [ 112.913124][ T12] bridge_slave_1: left allmulticast mode [ 112.937348][ T12] bridge_slave_1: left promiscuous mode [ 112.959595][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.996431][ T12] bridge_slave_0: left allmulticast mode [ 113.006674][ T12] bridge_slave_0: left promiscuous mode [ 113.020372][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.147822][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.160207][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.170058][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.177951][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.187005][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 113.194461][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.638750][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.649895][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.667268][ T12] bond0 (unregistering): Released all slaves [ 113.687615][ T12] bond1 (unregistering): Released all slaves [ 113.862420][ T12] tipc: Left network mode [ 113.900256][ T8312] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 113.935209][ T8315] __nla_validate_parse: 5 callbacks suppressed [ 113.935226][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.602'. [ 114.163068][ T8303] hsr0 speed is unknown, defaulting to 1000 [ 114.536706][ T8331] netlink: 40 bytes leftover after parsing attributes in process `syz.3.604'. [ 114.786187][ T8339] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 115.057836][ T8352] netlink: 60 bytes leftover after parsing attributes in process `syz.1.612'. [ 115.196204][ T8366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.615'. [ 115.205086][ T8367] netlink: 40 bytes leftover after parsing attributes in process `syz.2.614'. [ 115.224479][ T5148] Bluetooth: hci2: command tx timeout [ 115.243548][ T8366] netlink: 36 bytes leftover after parsing attributes in process `syz.0.615'. [ 115.283110][ T8303] chnl_net:caif_netlink_parms(): no params data found [ 115.594853][ T8385] netlink: 48 bytes leftover after parsing attributes in process `syz.3.621'. [ 115.638618][ T12] hsr_slave_0: left promiscuous mode [ 115.649256][ T12] hsr_slave_1: left promiscuous mode [ 115.660869][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.669205][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.682865][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.690488][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.734513][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.623'. [ 115.764864][ T12] veth1_macvtap: left promiscuous mode [ 115.775972][ T12] veth0_macvtap: left promiscuous mode [ 115.782801][ T12] veth1_vlan: left promiscuous mode [ 115.793242][ T12] veth0_vlan: left promiscuous mode [ 115.917681][ T12] pimreg3 (unregistering): left allmulticast mode [ 116.754441][ T8303] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.761571][ T8303] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.804779][ T8303] bridge_slave_0: entered allmulticast mode [ 116.811807][ T8303] bridge_slave_0: entered promiscuous mode [ 116.863376][ T8303] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.882422][ T8303] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.893274][ T8303] bridge_slave_1: entered allmulticast mode [ 116.908168][ T8303] bridge_slave_1: entered promiscuous mode [ 116.914076][ T8425] netlink: 'syz.3.629': attribute type 10 has an invalid length. [ 116.950137][ T8427] netlink: 512 bytes leftover after parsing attributes in process `syz.1.630'. [ 116.953051][ T8303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.024258][ T8425] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 117.062879][ T8425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.088407][ T8425] bond0: (slave lo): Enslaving as an active interface with an up link [ 117.142836][ T8303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.264776][ T8433] netlink: 'syz.0.632': attribute type 29 has an invalid length. [ 117.289968][ T8303] team0: Port device team_slave_0 added [ 117.294548][ T5148] Bluetooth: hci2: command tx timeout [ 117.301192][ T8303] team0: Port device team_slave_1 added [ 117.309444][ T8438] netlink: 'syz.0.632': attribute type 29 has an invalid length. [ 117.427868][ T8303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.442228][ T8303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.483829][ T8303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.510093][ T12] IPVS: stop unused estimator thread 0... [ 117.524786][ T8303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.543675][ T8303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.590780][ T8303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.720164][ T8303] hsr_slave_0: entered promiscuous mode [ 117.738928][ T8303] hsr_slave_1: entered promiscuous mode [ 117.745615][ T8303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.754169][ T8303] Cannot create hsr debugfs directory [ 117.901827][ T29] audit: type=1107 audit(1741431583.668:2): pid=8466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='®0íÐݪ¦~¥–ÕëW=>%®å©À•yÒŽq^)X¢ð¨„ë{믖' [ 118.024151][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.641'. [ 118.212108][ T8479] IPVS: Error connecting to the multicast addr [ 118.221760][ T8482] netlink: 'syz.1.645': attribute type 9 has an invalid length. [ 118.242794][ T8482] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 118.400600][ T8490] veth7: entered allmulticast mode [ 118.587649][ T8303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 118.605534][ T8303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 118.660222][ T8303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 118.685828][ T8303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.713642][ T8504] ipt_REJECT: TCP_RESET invalid for non-tcp [ 118.886684][ T8303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.939902][ T8303] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.977900][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.985081][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.006455][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.013612][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.375084][ T5148] Bluetooth: hci2: command tx timeout [ 119.405180][ T8303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.680078][ T8550] netlink: 'syz.0.665': attribute type 1 has an invalid length. [ 119.707328][ T8550] __nla_validate_parse: 2 callbacks suppressed [ 119.707346][ T8550] netlink: 224 bytes leftover after parsing attributes in process `syz.0.665'. [ 119.749466][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.666'. [ 119.991981][ T8303] veth0_vlan: entered promiscuous mode [ 120.008795][ T8564] openvswitch: netlink: Missing key (keys=40, expected=100) [ 120.016257][ T8303] veth1_vlan: entered promiscuous mode [ 120.039169][ T8566] netlink: 28 bytes leftover after parsing attributes in process `syz.3.670'. [ 120.067702][ T8303] veth0_macvtap: entered promiscuous mode [ 120.098539][ T8566] netlink: 'syz.3.670': attribute type 7 has an invalid length. [ 120.120964][ T8303] veth1_macvtap: entered promiscuous mode [ 120.145238][ T8566] netlink: 'syz.3.670': attribute type 8 has an invalid length. [ 120.174119][ T8303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.192251][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.670'. [ 120.203902][ T8303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.220995][ T8303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.224170][ T8575] netlink: 'syz.2.672': attribute type 6 has an invalid length. [ 120.246455][ T8575] netlink: 166080 bytes leftover after parsing attributes in process `syz.2.672'. [ 120.259175][ T8303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.273235][ T8303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.277641][ T8573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.672'. [ 120.372144][ T8303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.384185][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'. [ 120.396884][ T8303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.418827][ T8303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.430762][ T8303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.442517][ T8303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.592441][ T8303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.620911][ T8303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.654285][ T8303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.663033][ T8303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.891320][ T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.920415][ T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.993230][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.011372][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.089913][ T8618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.632531][ T8647] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 121.645294][ T8647] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 121.681978][ T8647] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 121.732063][ T8643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.691'. [ 121.747137][ T8648] netlink: 28 bytes leftover after parsing attributes in process `syz.1.691'. [ 121.868131][ T8662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.695'. [ 121.996948][ T8664] FAULT_INJECTION: forcing a failure. [ 121.996948][ T8664] name failslab, interval 1, probability 0, space 0, times 1 [ 122.009887][ T8664] CPU: 1 UID: 0 PID: 8664 Comm: syz.3.696 Not tainted 6.14.0-rc5-syzkaller-00125-gdf8ce77ba8b7 #0 [ 122.009908][ T8664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 122.009922][ T8664] Call Trace: [ 122.009929][ T8664] [ 122.009936][ T8664] dump_stack_lvl+0x241/0x360 [ 122.009970][ T8664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.009986][ T8664] ? __pfx__printk+0x10/0x10 [ 122.010014][ T8664] should_fail_ex+0x40a/0x550 [ 122.010038][ T8664] ? __pfx_ip6_dst_gc+0x10/0x10 [ 122.010058][ T8664] should_failslab+0xac/0x100 [ 122.010081][ T8664] ? dst_alloc+0x12b/0x190 [ 122.010102][ T8664] kmem_cache_alloc_noprof+0x70/0x380 [ 122.010122][ T8664] ? __pfx_rt6_find_cached_rt+0x10/0x10 [ 122.010143][ T8664] ? __pfx_ip6_dst_gc+0x10/0x10 [ 122.010162][ T8664] dst_alloc+0x12b/0x190 [ 122.010190][ T8664] ip6_pol_route+0xb87/0x15d0 [ 122.010215][ T8664] ? ip6_pol_route+0x198/0x15d0 [ 122.010237][ T8664] ? __pfx_ip6_pol_route+0x10/0x10 [ 122.010271][ T8664] ? fib6_get_table+0x39/0x270 [ 122.010290][ T8664] ? fib6_get_table+0x253/0x270 [ 122.010313][ T8664] fib6_rule_action+0x1f1/0x7c0 [ 122.010334][ T8664] ? __pfx_fib6_rule_action+0x10/0x10 [ 122.010356][ T8664] fib_rules_lookup+0x62c/0xdb0 [ 122.010383][ T8664] ? fib_rules_lookup+0x9a/0xdb0 [ 122.010402][ T8664] ? __pfx_fib_rules_lookup+0x10/0x10 [ 122.010418][ T8664] ? l3mdev_update_flow+0x29/0x5f0 [ 122.010440][ T8664] ? l3mdev_update_flow+0x4a8/0x5f0 [ 122.010464][ T8664] fib6_rule_lookup+0x1fd/0x790 [ 122.010497][ T8664] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 122.010517][ T8664] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 122.010540][ T8664] ? __lock_acquire+0x1397/0x2100 [ 122.010563][ T8664] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 122.010597][ T8664] ? ip6_route_output_flags+0x30/0x610 [ 122.010617][ T8664] ip6_route_output_flags+0x38e/0x610 [ 122.010643][ T8664] ip6_dst_lookup_tail+0x1b3/0x1500 [ 122.010671][ T8664] ? sk_dst_check+0x29/0x470 [ 122.010694][ T8664] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 122.010727][ T8664] ? sk_dst_check+0x29/0x470 [ 122.010746][ T8664] ? sk_dst_check+0x2f9/0x470 [ 122.010770][ T8664] ip6_sk_dst_lookup_flow+0x78c/0xa30 [ 122.010790][ T8664] ? txopt_get+0x3e0/0x4f0 [ 122.010809][ T8664] ? __lock_acquire+0x1397/0x2100 [ 122.010832][ T8664] ? __pfx_ip6_sk_dst_lookup_flow+0x10/0x10 [ 122.010852][ T8664] ? udpv6_sendmsg+0x1bc8/0x3310 [ 122.010879][ T8664] udpv6_sendmsg+0x1ff6/0x3310 [ 122.010910][ T8664] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 122.010940][ T8664] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 122.010967][ T8664] ? inet_send_prepare+0x1b7/0x260 [ 122.010987][ T8664] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 122.011022][ T8664] ? inet_send_prepare+0x1b7/0x260 [ 122.011042][ T8664] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 122.011059][ T8664] ? inet_send_prepare+0x1b7/0x260 [ 122.011078][ T8664] ? do_raw_spin_unlock+0x13c/0x8b0 [ 122.011108][ T8664] ? inet_send_prepare+0x1b7/0x260 [ 122.011134][ T8664] __sock_sendmsg+0xef/0x270 [ 122.011158][ T8664] ____sys_sendmsg+0x53a/0x860 [ 122.011182][ T8664] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.011195][ T8664] ? __fget_files+0x2a/0x410 [ 122.011220][ T8664] ? __fget_files+0x2a/0x410 [ 122.011249][ T8664] __sys_sendmmsg+0x36a/0x720 [ 122.011277][ T8664] ? __pfx___sys_sendmmsg+0x10/0x10 [ 122.011307][ T8664] ? __pfx_lock_release+0x10/0x10 [ 122.011327][ T8664] ? kstrtouint_from_user+0x128/0x190 [ 122.011369][ T8664] ? ksys_write+0x22a/0x2b0 [ 122.011386][ T8664] ? __pfx_lock_release+0x10/0x10 [ 122.011415][ T8664] ? sb_end_write+0xe9/0x1c0 [ 122.011436][ T8664] ? vfs_write+0x7fa/0xd10 [ 122.011455][ T8664] ? __mutex_unlock_slowpath+0x227/0x800 [ 122.011516][ T8664] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 122.011541][ T8664] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 122.011564][ T8664] ? do_syscall_64+0x100/0x230 [ 122.011590][ T8664] __x64_sys_sendmmsg+0xa0/0xb0 [ 122.011609][ T8664] do_syscall_64+0xf3/0x230 [ 122.011630][ T8664] ? clear_bhb_loop+0x35/0x90 [ 122.011655][ T8664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.011683][ T8664] RIP: 0033:0x7f584a18d169 [ 122.011703][ T8664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.011715][ T8664] RSP: 002b:00007f584b06e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 122.011734][ T8664] RAX: ffffffffffffffda RBX: 00007f584a3a5fa0 RCX: 00007f584a18d169 [ 122.011745][ T8664] RDX: 0000000000000002 RSI: 0000400000000940 RDI: 0000000000000003 [ 122.011755][ T8664] RBP: 00007f584b06e090 R08: 0000000000000000 R09: 0000000000000000 [ 122.011765][ T8664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.011775][ T8664] R13: 0000000000000000 R14: 00007f584a3a5fa0 R15: 00007ffd17c222c8 [ 122.011802][ T8664] [ 122.573778][ T81] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.953860][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 122.963442][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 122.972130][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 122.982788][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 122.991689][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 122.999156][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 123.070967][ T81] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.411569][ T81] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.460628][ T8689] hsr0 speed is unknown, defaulting to 1000 [ 123.474002][ T8714] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 123.566964][ T81] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.585960][ T8718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.603554][ T8718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.619874][ T8718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.640563][ T8718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.831602][ T81] bridge_slave_1: left allmulticast mode [ 123.841394][ T81] bridge_slave_1: left promiscuous mode [ 123.863847][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.881544][ T81] bridge_slave_0: left allmulticast mode [ 123.896973][ T81] bridge_slave_0: left promiscuous mode [ 123.903692][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.293829][ T8746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.311260][ T8746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.409024][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.420735][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.431133][ T81] bond0 (unregistering): Released all slaves [ 124.543246][ T8689] chnl_net:caif_netlink_parms(): no params data found [ 124.821361][ T8753] Cannot find add_set index 1 as target [ 125.043078][ T8689] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.055686][ T53] Bluetooth: hci2: command tx timeout [ 125.062794][ T8689] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.088813][ T8689] bridge_slave_0: entered allmulticast mode [ 125.109846][ T8689] bridge_slave_0: entered promiscuous mode [ 125.118473][ T8777] __nla_validate_parse: 7 callbacks suppressed [ 125.118489][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.727'. [ 125.138623][ T8782] openvswitch: netlink: IPv6 tunnel dst address is zero [ 125.152122][ T8689] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.174543][ T8689] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.181754][ T8689] bridge_slave_1: entered allmulticast mode [ 125.193499][ T8689] bridge_slave_1: entered promiscuous mode [ 125.194693][ T8778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.725'. [ 125.222622][ T8778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.725'. [ 125.252854][ T1108] bond0: (slave lo): interface is now down [ 125.262822][ T1108] bond0: now running without any active interface! [ 125.445817][ T81] hsr_slave_0: left promiscuous mode [ 125.452000][ T81] hsr_slave_1: left promiscuous mode [ 125.459680][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.474768][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.500181][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.533932][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.599886][ T81] veth1_macvtap: left promiscuous mode [ 125.607485][ T81] veth0_macvtap: left promiscuous mode [ 125.613038][ T81] veth1_vlan: left promiscuous mode [ 125.624521][ T81] veth0_vlan: left promiscuous mode [ 125.651132][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.733'. [ 125.665719][ T8799] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048) [ 126.147156][ T8816] netlink: 'syz.2.739': attribute type 10 has an invalid length. [ 126.216532][ T81] team0 (unregistering): Port device team_slave_1 removed [ 126.252730][ T81] team0 (unregistering): Port device team_slave_0 removed [ 126.586954][ T8689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.600970][ T8795] veth1: entered promiscuous mode [ 126.608178][ T8795] veth1: left promiscuous mode [ 126.635374][ T8689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.838538][ T8689] team0: Port device team_slave_0 added [ 126.875600][ T8689] team0: Port device team_slave_1 added [ 126.988449][ T8689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.038956][ T8689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.078635][ T8689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.134767][ T53] Bluetooth: hci2: command tx timeout [ 127.149279][ T8689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.168567][ T8689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.195223][ T8689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.222542][ T8842] netlink: 72 bytes leftover after parsing attributes in process `syz.3.744'. [ 127.266052][ T8844] batadv_slave_1: entered promiscuous mode [ 127.284442][ T8844] batadv_slave_1: entered allmulticast mode [ 127.627405][ T8689] hsr_slave_0: entered promiscuous mode [ 127.647049][ T8689] hsr_slave_1: entered promiscuous mode [ 127.658825][ T8689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.666705][ T8689] Cannot create hsr debugfs directory [ 128.018112][ T8879] netlink: 44 bytes leftover after parsing attributes in process `syz.3.755'. [ 128.194481][ T8892] netlink: 'syz.1.757': attribute type 8 has an invalid length. [ 128.280655][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.759'. [ 128.509623][ T8908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.521894][ T8907] netlink: 16 bytes leftover after parsing attributes in process `syz.0.762'. [ 128.599108][ T8689] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 128.619594][ T8914] xt_hashlimit: size too large, truncated to 1048576 [ 128.630906][ T8916] netlink: 32 bytes leftover after parsing attributes in process `syz.1.764'. [ 128.646999][ T8689] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 128.681692][ T8689] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.731278][ T8689] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 128.772295][ T8922] : renamed from bond0 (while UP) [ 128.943986][ T8928] syzkaller0: entered allmulticast mode [ 128.985443][ T8689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.037606][ T8689] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.068708][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.075936][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.103174][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.110367][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.215967][ T53] Bluetooth: hci2: command tx timeout [ 129.246376][ T8939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.772'. [ 129.481412][ T8689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.644770][ T8962] netlink: 'syz.1.777': attribute type 5 has an invalid length. [ 130.043792][ T8689] veth0_vlan: entered promiscuous mode [ 130.069171][ T8689] veth1_vlan: entered promiscuous mode [ 130.149170][ T8689] veth0_macvtap: entered promiscuous mode [ 130.172031][ T8689] veth1_macvtap: entered promiscuous mode [ 130.222629][ T8994] team_slave_0: Device is already in use. [ 130.232926][ T8689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.251286][ T8689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.267039][ T8689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.289812][ T8689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.345704][ T8689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.363939][ T8689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.418125][ T8689] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.447692][ T8689] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.464551][ T8689] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.471165][ T9005] FAULT_INJECTION: forcing a failure. [ 130.471165][ T9005] name failslab, interval 1, probability 0, space 0, times 0 [ 130.473269][ T8689] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.503779][ T9005] CPU: 1 UID: 0 PID: 9005 Comm: syz.3.789 Not tainted 6.14.0-rc5-syzkaller-00125-gdf8ce77ba8b7 #0 [ 130.503807][ T9005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 130.503816][ T9005] Call Trace: [ 130.503823][ T9005] [ 130.503830][ T9005] dump_stack_lvl+0x241/0x360 [ 130.503856][ T9005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.503874][ T9005] ? __pfx__printk+0x10/0x10 [ 130.503892][ T9005] ? __kmalloc_noprof+0xb5/0x4c0 [ 130.503914][ T9005] ? __pfx___might_resched+0x10/0x10 [ 130.503940][ T9005] should_fail_ex+0x40a/0x550 [ 130.503967][ T9005] should_failslab+0xac/0x100 [ 130.503989][ T9005] __kmalloc_noprof+0xdd/0x4c0 [ 130.504009][ T9005] ? sock_kmalloc+0xd7/0x160 [ 130.504030][ T9005] sock_kmalloc+0xd7/0x160 [ 130.504050][ T9005] ____sys_sendmsg+0x231/0x860 [ 130.504074][ T9005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.504088][ T9005] ? __fget_files+0x2a/0x410 [ 130.504114][ T9005] ? __sys_sendmmsg+0x392/0x720 [ 130.504130][ T9005] ? __might_fault+0xaa/0x120 [ 130.504151][ T9005] __sys_sendmmsg+0x36a/0x720 [ 130.504177][ T9005] ? __pfx___sys_sendmmsg+0x10/0x10 [ 130.504206][ T9005] ? __pfx_lock_release+0x10/0x10 [ 130.504225][ T9005] ? kstrtouint_from_user+0x128/0x190 [ 130.504259][ T9005] ? ksys_write+0x22a/0x2b0 [ 130.504274][ T9005] ? __pfx_lock_release+0x10/0x10 [ 130.504298][ T9005] ? sb_end_write+0xe9/0x1c0 [ 130.504317][ T9005] ? vfs_write+0x7fa/0xd10 [ 130.504333][ T9005] ? __mutex_unlock_slowpath+0x227/0x800 [ 130.504378][ T9005] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 130.504400][ T9005] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 130.504422][ T9005] ? do_syscall_64+0x100/0x230 [ 130.504444][ T9005] __x64_sys_sendmmsg+0xa0/0xb0 [ 130.504461][ T9005] do_syscall_64+0xf3/0x230 [ 130.504482][ T9005] ? clear_bhb_loop+0x35/0x90 [ 130.504503][ T9005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.504521][ T9005] RIP: 0033:0x7f584a18d169 [ 130.504536][ T9005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.504547][ T9005] RSP: 002b:00007f584b06e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 130.504563][ T9005] RAX: ffffffffffffffda RBX: 00007f584a3a5fa0 RCX: 00007f584a18d169 [ 130.504574][ T9005] RDX: 0000000000000002 RSI: 0000400000000940 RDI: 0000000000000003 [ 130.504592][ T9005] RBP: 00007f584b06e090 R08: 0000000000000000 R09: 0000000000000000 [ 130.504601][ T9005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.504610][ T9005] R13: 0000000000000000 R14: 00007f584a3a5fa0 R15: 00007ffd17c222c8 [ 130.504632][ T9005] [ 130.853131][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.862805][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.940308][ T9011] __nla_validate_parse: 1 callbacks suppressed [ 130.940325][ T9011] netlink: 39 bytes leftover after parsing attributes in process `syz.0.790'. [ 130.962205][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.992043][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.026072][ T9020] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.065754][ T9021] netlink: 'syz.1.794': attribute type 4 has an invalid length. [ 131.535150][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.802'. [ 132.912185][ T5148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 132.939037][ T5148] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 132.966807][ T5148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 132.974980][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 132.983648][ T5148] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 132.991990][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 133.048326][ T9077] raw_sendmsg: syz.1.807 forgot to set AF_INET. Fix it! [ 133.072273][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.079039][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.590163][ T2938] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.626384][ T9082] netlink: 'syz.3.810': attribute type 27 has an invalid length. [ 133.638931][ T9082] sctp: [Deprecated]: syz.3.810 (pid 9082) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.638931][ T9082] Use struct sctp_sack_info instead [ 133.670205][ T9082] sctp: [Deprecated]: syz.3.810 (pid 9082) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.670205][ T9082] Use struct sctp_sack_info instead [ 133.751882][ T2938] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.853698][ T9072] hsr0 speed is unknown, defaulting to 1000 [ 134.072467][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.815'. [ 134.083174][ T9108] netlink: 'syz.3.815': attribute type 3 has an invalid length. [ 134.104312][ T9108] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.113123][ T9108] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.122005][ T9108] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.130866][ T9108] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.276063][ T9072] chnl_net:caif_netlink_parms(): no params data found [ 134.588172][ T2938] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.639984][ T9072] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.659015][ T9072] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.675955][ T9072] bridge_slave_0: entered allmulticast mode [ 134.683046][ T9072] bridge_slave_0: entered promiscuous mode [ 134.712897][ T9072] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.738923][ T9072] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.754009][ T9072] bridge_slave_1: entered allmulticast mode [ 134.768701][ T9072] bridge_slave_1: entered promiscuous mode [ 134.813353][ T2938] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.897474][ T9072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.930914][ T9072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.011233][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.827'. [ 135.051026][ T9072] team0: Port device team_slave_0 added [ 135.064908][ T5148] Bluetooth: hci2: command tx timeout [ 135.073889][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.827'. [ 135.102458][ T9072] team0: Port device team_slave_1 added [ 135.295812][ T2938] bridge_slave_1: left allmulticast mode [ 135.301508][ T2938] bridge_slave_1: left promiscuous mode [ 135.318615][ T9180] netlink: 'syz.0.833': attribute type 1 has an invalid length. [ 135.327600][ T2938] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.334440][ T9180] netlink: 'syz.0.833': attribute type 1 has an invalid length. [ 135.373845][ T2938] bridge_slave_0: left allmulticast mode [ 135.379047][ T9186] netlink: 104 bytes leftover after parsing attributes in process `syz.3.832'. [ 135.388904][ T2938] bridge_slave_0: left promiscuous mode [ 135.397120][ T2938] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.407845][ T9185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'. [ 135.421456][ T9185] netlink: 176 bytes leftover after parsing attributes in process `syz.1.835'. [ 135.432792][ T9185] netlink: 'syz.1.835': attribute type 5 has an invalid length. [ 135.638153][ T9200] Unknown options in mask 1f4 [ 135.822597][ T2938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.833142][ T2938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.848106][ T2938] bond0 (unregistering): Released all slaves [ 135.860784][ T9072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.868017][ T9072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.895858][ T9072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.963378][ T9196] netlink: 'syz.0.837': attribute type 5 has an invalid length. [ 136.018039][ T9072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.033628][ T9072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.092004][ T9072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.189815][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.839'. [ 136.231268][ T9214] openvswitch: netlink: Missing key (keys=40, expected=80) [ 136.408202][ T9072] hsr_slave_0: entered promiscuous mode [ 136.435089][ T9072] hsr_slave_1: entered promiscuous mode [ 136.441258][ T9072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.474339][ T9072] Cannot create hsr debugfs directory [ 136.810706][ T2938] hsr_slave_0: left promiscuous mode [ 136.827760][ T2938] hsr_slave_1: left promiscuous mode [ 136.842220][ T2938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.864121][ T2938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.885659][ T2938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.893444][ T2938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.979708][ T2938] veth1_macvtap: left promiscuous mode [ 137.017335][ T2938] veth0_macvtap: left promiscuous mode [ 137.020735][ T9254] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 137.022981][ T2938] veth1_vlan: left promiscuous mode [ 137.071921][ T9259] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 137.080193][ T2938] veth0_vlan: left promiscuous mode [ 137.135151][ T5148] Bluetooth: hci2: command tx timeout [ 137.175047][ T9262] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 137.823340][ T2938] team0 (unregistering): Port device team_slave_1 removed [ 137.824526][ T9290] netlink: 'syz.0.860': attribute type 4 has an invalid length. [ 137.867619][ T2938] team0 (unregistering): Port device team_slave_0 removed [ 137.896230][ T9291] netlink: 'syz.0.860': attribute type 4 has an invalid length. [ 138.605553][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.863'. [ 139.101045][ T9324] netlink: 'syz.3.869': attribute type 9 has an invalid length. [ 139.119429][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.869'. [ 139.217127][ T5148] Bluetooth: hci2: command tx timeout [ 139.300565][ T9072] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 139.334386][ T9072] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 139.374941][ T9072] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 139.389572][ T9340] netlink: 16 bytes leftover after parsing attributes in process `syz.1.873'. [ 139.399480][ T9072] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 139.466850][ T9] hid-generic 0005:0B57:0001.0002: item fetching failed at offset 0/1 [ 139.467510][ T9342] netlink: 'syz.3.875': attribute type 11 has an invalid length. [ 139.499356][ T9] hid-generic 0005:0B57:0001.0002: probe with driver hid-generic failed with error -22 [ 139.666884][ T9072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.723081][ T9072] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.731679][ T9358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.878'. [ 139.754334][ T9363] netlink: 'syz.2.881': attribute type 1 has an invalid length. [ 139.772032][ T2938] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.773691][ T9363] netlink: 'syz.2.881': attribute type 1 has an invalid length. [ 139.779201][ T2938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.804886][ T2938] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.812011][ T2938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.128194][ T9072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.482970][ T9396] syzkaller0: entered promiscuous mode [ 140.492860][ T9396] syzkaller0: entered allmulticast mode [ 140.519464][ T9401] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 140.549075][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 140.563166][ T9399] netlink: 'syz.2.891': attribute type 1 has an invalid length. [ 140.601888][ T9399] netlink: 209800 bytes leftover after parsing attributes in process `syz.2.891'. [ 140.613378][ T9408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.891'. [ 140.702390][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.893'. [ 140.725058][ T9412] netlink: 232 bytes leftover after parsing attributes in process `syz.0.894'. [ 141.297141][ T5148] Bluetooth: hci2: command tx timeout [ 142.181781][ T9072] veth0_vlan: entered promiscuous mode [ 142.224912][ T9072] veth1_vlan: entered promiscuous mode [ 142.271620][ T9072] veth0_macvtap: entered promiscuous mode [ 142.413915][ T9420] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.438589][ T9420] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.478723][ T9072] veth1_macvtap: entered promiscuous mode [ 142.555437][ T9436] netlink: 620 bytes leftover after parsing attributes in process `syz.3.903'. [ 142.571692][ T9436] netlink: 620 bytes leftover after parsing attributes in process `syz.3.903'. [ 142.584058][ T9420] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.596000][ T9420] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.645808][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.666889][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.695522][ T9072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.741342][ T9420] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.768522][ T9420] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.797494][ T9072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.818447][ T9072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.834149][ T9072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.897946][ T9420] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.934657][ T9420] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.980279][ T9453] netlink: 'syz.3.910': attribute type 1 has an invalid length. [ 142.988723][ T9072] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.998706][ T9072] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.007854][ T9072] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.018048][ T9072] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.058308][ T9453] netlink: 'syz.3.910': attribute type 1 has an invalid length. [ 143.115799][ T9453] netlink: 224 bytes leftover after parsing attributes in process `syz.3.910'. [ 143.158058][ T9420] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.166591][ T9420] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.188158][ T9420] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.196743][ T9420] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.229633][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.249556][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.280121][ T9420] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.307281][ T9420] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.332721][ T9420] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.344513][ T9420] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.369130][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.384046][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.384151][ T9473] netlink: 'syz.3.916': attribute type 10 has an invalid length. [ 143.459200][ T9473] netlink: 'syz.3.916': attribute type 10 has an invalid length. [ 143.485428][ T9473] netlink: 'syz.3.916': attribute type 10 has an invalid length. [ 143.508430][ T9473] netlink: 'syz.3.916': attribute type 10 has an invalid length. [ 143.804060][ T9497] netlink: 204 bytes leftover after parsing attributes in process `syz.0.921'. [ 143.960284][ T9478] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.969452][ T9478] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.978899][ T9478] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.987938][ T9478] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.112634][ T9473] netlink: 'syz.3.916': attribute type 10 has an invalid length. [ 144.125688][ T9473] netlink: 'syz.3.916': attribute type 10 has an invalid length. [ 144.211541][ T9473] netlink: 'syz.3.916': attribute type 10 has an invalid length. [ 144.358597][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.926'. [ 144.394002][ T9516] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_macvtap, syncid = 0, id = 0 [ 144.482183][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.928'. [ 144.546033][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.559939][ T9525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.928'. [ 144.578086][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.927'. [ 144.591574][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'. [ 144.950872][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.997633][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.057979][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.158187][ T9529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.930'. [ 145.262359][ T51] bridge_slave_1: left allmulticast mode [ 145.285958][ T51] bridge_slave_1: left promiscuous mode [ 145.311189][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.390539][ T51] bridge_slave_0: left allmulticast mode [ 145.404864][ T51] bridge_slave_0: left promiscuous mode [ 145.414833][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.550815][ T9554] x_tables: duplicate entry at hook 3 [ 145.596576][ T9555] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 145.679231][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.691803][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.706950][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.719524][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.730269][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.742427][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.003960][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.018165][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.028326][ T51] bond0 (unregistering): Released all slaves [ 146.319180][ T9556] hsr0 speed is unknown, defaulting to 1000 [ 146.502648][ T9584] 0·: renamed from hsr_slave_1 [ 146.518937][ T9584] 0·: entered allmulticast mode [ 146.525436][ T9584] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 146.601836][ T9584] bond0: (slave wlan1): Releasing backup interface [ 146.608769][ T9584] bond0: (slave wlan1): the permanent HWaddr of slave - 08:02:11:00:00:01 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 146.644724][ T9592] netlink: 'syz.1.944': attribute type 4 has an invalid length. [ 146.760194][ T9556] chnl_net:caif_netlink_parms(): no params data found [ 146.866891][ T9596] netlink: 'syz.2.948': attribute type 4 has an invalid length. [ 146.911018][ T51] hsr_slave_0: left promiscuous mode [ 146.923027][ T51] hsr_slave_1: left promiscuous mode [ 146.935411][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.945432][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.965094][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.972549][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.020546][ T51] veth1_macvtap: left promiscuous mode [ 147.044354][ T51] veth0_macvtap: left promiscuous mode [ 147.050026][ T51] veth1_vlan: left promiscuous mode [ 147.059898][ T51] veth0_vlan: left promiscuous mode [ 147.474017][ T51] team0 (unregistering): Port device team_slave_1 removed [ 147.514642][ T51] team0 (unregistering): Port device team_slave_0 removed [ 147.779931][ T5148] Bluetooth: hci2: command tx timeout [ 147.937033][ T9613] netlink: 'syz.3.952': attribute type 21 has an invalid length. [ 147.946222][ T9615] netlink: 'syz.3.952': attribute type 21 has an invalid length. [ 148.158620][ T9556] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.169473][ T9556] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.184615][ T9556] bridge_slave_0: entered allmulticast mode [ 148.201875][ T9556] bridge_slave_0: entered promiscuous mode [ 148.209927][ T9633] nftables ruleset with unbound chain [ 148.224686][ T9556] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.231905][ T9556] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.242565][ T9556] bridge_slave_1: entered allmulticast mode [ 148.249985][ T9556] bridge_slave_1: entered promiscuous mode [ 148.276010][ T9635] tipc: Started in network mode [ 148.280899][ T9635] tipc: Node identity 4, cluster identity 135 [ 148.302853][ T9635] tipc: Node number set to 4 [ 148.386827][ T9556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.399555][ T9556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.522183][ T9556] team0: Port device team_slave_0 added [ 148.529265][ T9649] netlink: 'syz.3.963': attribute type 1 has an invalid length. [ 148.556051][ T9556] team0: Port device team_slave_1 added [ 148.620170][ T9655] __nla_validate_parse: 7 callbacks suppressed [ 148.620186][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.965'. [ 148.658239][ T9655] netlink: 56 bytes leftover after parsing attributes in process `syz.1.965'. [ 148.670442][ T9556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.686592][ T9556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.727488][ T9556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.743417][ T9556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.753690][ T9556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.839665][ T9556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.021914][ T5885] IPVS: starting estimator thread 0... [ 149.063000][ T9556] hsr_slave_0: entered promiscuous mode [ 149.085874][ T9556] hsr_slave_1: entered promiscuous mode [ 149.092195][ T9556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.109634][ T9556] Cannot create hsr debugfs directory [ 149.115301][ T9674] IPVS: using max 25 ests per chain, 60000 per kthread [ 149.124579][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.969'. [ 149.589354][ T9701] netlink: 56 bytes leftover after parsing attributes in process `syz.3.976'. [ 149.769577][ T9711] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:5 [ 149.854558][ T5148] Bluetooth: hci2: command tx timeout [ 149.951215][ T9556] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 149.968860][ T9721] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 149.982208][ T9556] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 150.005712][ T9556] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 150.027297][ T9556] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 150.196857][ T9556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.251360][ T9556] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.272310][ T9737] netlink: 4104 bytes leftover after parsing attributes in process `syz.2.988'. [ 150.286585][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.293716][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.320807][ T9739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.335113][ T9737] netlink: 10 bytes leftover after parsing attributes in process `syz.2.988'. [ 150.355500][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.362684][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.388760][ T9739] netlink: 108 bytes leftover after parsing attributes in process `syz.0.989'. [ 150.426547][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.989'. [ 150.455156][ T5885] IPVS: starting estimator thread 0... [ 150.518931][ T9742] tipc: Started in network mode [ 150.523894][ T9742] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 150.562052][ T9742] tipc: Enabling of bearer rejected, failed to enable media [ 150.574695][ T9745] IPVS: using max 26 ests per chain, 62400 per kthread [ 150.687702][ T9761] xt_l2tp: invalid flags combination: c [ 150.724842][ T9760] xt_l2tp: invalid flags combination: c [ 150.760370][ T9764] netlink: 24 bytes leftover after parsing attributes in process `syz.1.995'. [ 150.777147][ T9556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.938303][ T9779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.999'. [ 151.114029][ T9789] nbd: device at index 3 is going down [ 151.310928][ T9556] veth0_vlan: entered promiscuous mode [ 151.353874][ T9556] veth1_vlan: entered promiscuous mode [ 151.456595][ T9556] veth0_macvtap: entered promiscuous mode [ 151.496510][ T9556] veth1_macvtap: entered promiscuous mode [ 151.595454][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.610641][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.636206][ T9556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.644166][ T9820] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 151.696650][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.726007][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.743842][ T9556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.802864][ T9556] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.823414][ T9556] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.834641][ T9556] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.843388][ T9556] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.875016][ T9835] netlink: 'syz.0.1016': attribute type 1 has an invalid length. [ 151.934595][ T5148] Bluetooth: hci2: command tx timeout [ 152.014608][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.027067][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.157288][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.180396][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.520468][ T9874] netlink: 'syz.0.1027': attribute type 6 has an invalid length. [ 152.646825][ T9889] erspan0: vlans aren't supported yet for dev_uc|mc_add() [ 152.899769][ T9907] pim6reg: entered allmulticast mode [ 152.956117][ T9908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.289187][ T9926] netlink: 'syz.0.1041': attribute type 1 has an invalid length. [ 153.315133][ T991] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.320134][ T9926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.492848][ T991] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.724569][ T991] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.792058][ T991] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.919352][ T991] bridge_slave_1: left allmulticast mode [ 153.925364][ T991] bridge_slave_1: left promiscuous mode [ 153.931056][ T991] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.939545][ T991] bridge_slave_0: left allmulticast mode [ 153.945533][ T991] bridge_slave_0: left promiscuous mode [ 153.951289][ T991] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.562806][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.573042][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.593790][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.612100][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.620293][ T991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.638489][ T991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.647519][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.657928][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.659062][ T991] bond0 (unregistering): Released all slaves [ 154.677064][ T9947] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.684382][ T9947] IPv6: NLM_F_CREATE should be set when creating new route [ 154.760087][ T9955] veth0: entered promiscuous mode [ 154.772235][ T9959] geneve2: entered promiscuous mode [ 154.778145][ T9959] geneve2: entered allmulticast mode [ 154.892474][ T9954] veth0: left promiscuous mode [ 155.174126][ T9956] hsr0 speed is unknown, defaulting to 1000 [ 155.250612][ T9982] __nla_validate_parse: 8 callbacks suppressed [ 155.250630][ T9982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1056'. [ 155.378181][ T9986] netlink: 'syz.0.1057': attribute type 4 has an invalid length. [ 155.411399][ T991] hsr_slave_0: left promiscuous mode [ 155.412063][ T9986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1057'. [ 155.432797][ T991] hsr_slave_1: left promiscuous mode [ 155.441247][ T991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.449800][ T991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.459568][ T991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.467526][ T991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.497632][ T991] veth1_macvtap: left promiscuous mode [ 155.503410][ T991] veth0_macvtap: left promiscuous mode [ 155.509247][ T991] veth1_vlan: left promiscuous mode [ 155.514864][ T991] veth0_vlan: left promiscuous mode [ 155.533884][ T9989] IPVS: length: 8 != 1152 [ 155.662863][ T9998] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1060'. [ 155.686331][ T9998] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1060'. [ 155.806802][T10001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1061'. [ 156.110654][ T991] team0 (unregistering): Port device team_slave_1 removed [ 156.161432][ T991] team0 (unregistering): Port device team_slave_0 removed [ 156.254405][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 156.447252][T10015] netlink: 'syz.3.1064': attribute type 32 has an invalid length. [ 156.513936][T10018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1064'. [ 156.565327][T10015] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1064'. [ 156.645288][T10001] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 156.650743][T10012] lo: entered allmulticast mode [ 156.675697][T10014] lo: left allmulticast mode [ 156.687659][T10018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1064'. [ 156.734487][ T5148] Bluetooth: hci2: command tx timeout [ 156.890166][ T9956] chnl_net:caif_netlink_parms(): no params data found [ 156.966347][T10038] openvswitch: netlink: IPv4 tun info is not correct [ 157.258595][T10061] vlan1: entered promiscuous mode [ 157.264060][ T9956] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.284306][ T9956] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.295206][T10064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1075'. [ 157.297441][ T9956] bridge_slave_0: entered allmulticast mode [ 157.314308][ T9956] bridge_slave_0: entered promiscuous mode [ 157.328360][T10051] vlan1: left promiscuous mode [ 157.349119][ T9956] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.365880][ T9956] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.381597][ T9956] bridge_slave_1: entered allmulticast mode [ 157.398040][ T9956] bridge_slave_1: entered promiscuous mode [ 157.505243][T10071] netlink: 'syz.3.1077': attribute type 2 has an invalid length. [ 157.526710][T10071] netlink: 'syz.3.1077': attribute type 1 has an invalid length. [ 157.527879][ T9956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.551666][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1079'. [ 157.563348][ T9956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.669442][ T9956] team0: Port device team_slave_0 added [ 157.685515][ T9956] team0: Port device team_slave_1 added [ 157.833494][T10089] xt_CT: No such helper "pptp" [ 157.881172][ T9956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.895278][ T9956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.928109][ T9956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.943329][ T9956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.964308][ T9956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.020543][ T9956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.068491][T10106] openvswitch: netlink: Flow key attr not present in new flow. [ 158.120078][ T9956] hsr_slave_0: entered promiscuous mode [ 158.137120][ T9956] hsr_slave_1: entered promiscuous mode [ 158.143259][ T9956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.151074][ T9956] Cannot create hsr debugfs directory [ 158.432314][T10134] rdma_op ffff8880629571f0 conn xmit_rdma 0000000000000000 [ 158.739532][T10153] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 158.747472][T10153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.814747][ T5148] Bluetooth: hci2: command tx timeout [ 160.601107][T10188] __nla_validate_parse: 4 callbacks suppressed [ 160.601125][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1107'. [ 160.649173][ T9956] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 160.683660][ T9956] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 160.713133][ T9956] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 160.738903][ T9956] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 160.895419][ T5148] Bluetooth: hci2: command tx timeout [ 160.909713][ T9956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.929217][ T9956] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.949902][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.957064][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.012715][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.019888][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.073960][T10214] syzkaller1: entered promiscuous mode [ 161.093359][T10214] syzkaller1: entered allmulticast mode [ 161.113785][T10214] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 27 [ 161.235924][ T9956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.274420][T10224] 0·: left allmulticast mode [ 161.284732][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1117'. [ 161.314724][T10224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1117'. [ 161.338106][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1117'. [ 161.449446][ T29] audit: type=1800 audit(1741431627.218:3): pid=10232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1119" name="memory.events" dev="tmpfs" ino=1242 res=0 errno=0 [ 161.514632][T10237] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1120'. [ 161.532303][T10238] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1120'. [ 161.981422][ T9956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.029048][T10252] netlink: zone id is out of range [ 162.055904][T10252] netlink: zone id is out of range [ 162.087418][T10252] netlink: zone id is out of range [ 162.092590][T10252] netlink: zone id is out of range [ 162.133980][T10252] netlink: zone id is out of range [ 162.169637][T10252] netlink: zone id is out of range [ 162.184086][T10252] netlink: zone id is out of range [ 162.206506][T10252] netlink: zone id is out of range [ 162.217748][T10252] netlink: zone id is out of range [ 162.224144][T10252] netlink: zone id is out of range [ 162.278554][T10267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1128'. [ 162.300974][T10267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1128'. [ 162.317018][T10271] netlink: 187320 bytes leftover after parsing attributes in process `syz.1.1129'. [ 162.329626][T10267] veth1_macvtap: left promiscuous mode [ 162.351490][T10267] macsec0: entered promiscuous mode [ 162.375231][T10271] veth1_macvtap: left promiscuous mode [ 162.530142][ T9956] veth0_vlan: entered promiscuous mode [ 162.588189][T10278] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1132'. [ 162.615171][ T9956] veth1_vlan: entered promiscuous mode [ 162.670752][ T9956] veth0_macvtap: entered promiscuous mode [ 162.700154][ T9956] veth1_macvtap: entered promiscuous mode [ 162.741748][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.764374][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.791017][ T9956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.822960][ T9956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.852472][ T9956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.868144][ T9956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.881943][ T9956] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.890981][ T9956] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.912070][ T9956] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.921823][ T9956] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.977607][ T5148] Bluetooth: hci2: command tx timeout [ 163.001660][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 163.014145][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 163.025293][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 163.053207][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 163.089453][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 163.099523][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 163.125065][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.133163][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.272648][ T2938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.295366][T10294] hsr0 speed is unknown, defaulting to 1000 [ 163.314382][ T2938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.540739][T10291] hsr0 speed is unknown, defaulting to 1000 [ 163.950281][T10291] chnl_net:caif_netlink_parms(): no params data found [ 164.188021][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.261757][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.279215][T10291] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.286556][T10291] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.293828][T10291] bridge_slave_0: entered allmulticast mode [ 164.300620][T10291] bridge_slave_0: entered promiscuous mode [ 164.309278][T10291] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.319342][T10291] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.326597][T10291] bridge_slave_1: entered allmulticast mode [ 164.333145][T10291] bridge_slave_1: entered promiscuous mode [ 164.360589][T10291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.372883][T10291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.400074][T10291] team0: Port device team_slave_0 added [ 164.407555][T10291] team0: Port device team_slave_1 added [ 164.439219][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.462802][T10291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.470111][T10291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.496332][T10291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.508840][T10291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.516346][T10291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.542582][T10291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.578019][T10291] hsr_slave_0: entered promiscuous mode [ 164.584311][T10291] hsr_slave_1: entered promiscuous mode [ 164.590483][T10291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.598312][T10291] Cannot create hsr debugfs directory [ 164.619830][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.699976][T10291] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.711613][T10291] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.769280][ T35] bridge_slave_1: left allmulticast mode [ 164.780111][ T35] bridge_slave_1: left promiscuous mode [ 164.786054][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.794757][ T35] bridge_slave_0: left allmulticast mode [ 164.800417][ T35] bridge_slave_0: left promiscuous mode [ 164.806837][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.141314][ T53] Bluetooth: hci3: command tx timeout [ 165.143562][T10351] Bluetooth: MGMT ver 1.23 [ 165.168150][T10355] netlink: 'syz.3.1150': attribute type 2 has an invalid length. [ 165.285254][ T5148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.294800][ T5148] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.303671][ T5148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.314932][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.322560][ T5148] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 165.336213][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.549600][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.560932][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.571165][ T35] bond0 (unregistering): Released all slaves [ 165.583422][T10291] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.593674][T10291] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.616989][T10370] gretap0: entered promiscuous mode [ 165.637464][T10371] 0ªî{X¹¦: renamed from gretap0 [ 165.649441][T10371] 0ªî{X¹¦: left promiscuous mode [ 165.656533][T10371] 0ªî{X¹¦: entered allmulticast mode [ 165.737143][T10291] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.772005][T10291] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.819513][T10374] __nla_validate_parse: 7 callbacks suppressed [ 165.819530][T10374] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1153'. [ 165.853818][T10376] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 165.907803][T10378] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 165.933034][T10291] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.945621][T10291] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.989843][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1153'. [ 166.004616][T10374] netlink: 50 bytes leftover after parsing attributes in process `syz.1.1153'. [ 166.013595][T10374] netlink: 50 bytes leftover after parsing attributes in process `syz.1.1153'. [ 166.046960][T10361] hsr0 speed is unknown, defaulting to 1000 [ 166.085691][T10384] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1155'. [ 166.246148][ T35] hsr_slave_0: left promiscuous mode [ 166.258376][ T35] hsr_slave_1: left promiscuous mode [ 166.268737][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.281681][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.293046][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.300701][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.358185][ T35] veth1_macvtap: left promiscuous mode [ 166.363746][ T35] veth0_macvtap: left promiscuous mode [ 166.371896][ T35] veth1_vlan: left promiscuous mode [ 166.381483][ T35] veth0_vlan: left promiscuous mode [ 166.567433][T10403] sctp: [Deprecated]: syz.3.1160 (pid 10403) Use of int in maxseg socket option. [ 166.567433][T10403] Use struct sctp_assoc_value instead [ 167.222804][ T53] Bluetooth: hci3: command tx timeout [ 167.310283][ T35] team0 (unregistering): Port device team_slave_1 removed [ 167.354360][ T35] team0 (unregistering): Port device team_slave_0 removed [ 167.376429][ T53] Bluetooth: hci2: command tx timeout [ 167.781646][T10428] veth0: entered promiscuous mode [ 167.976306][T10291] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 167.988723][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1168'. [ 168.037201][T10443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1168'. [ 168.042416][T10442] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1169'. [ 168.056826][T10361] chnl_net:caif_netlink_parms(): no params data found [ 168.067024][T10291] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 168.087747][T10424] veth0: left promiscuous mode [ 168.092687][T10291] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 168.183547][T10291] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 168.362554][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'. [ 168.380175][T10461] netlink: 'syz.3.1173': attribute type 1 has an invalid length. [ 168.406186][T10361] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.415397][T10361] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.422640][T10361] bridge_slave_0: entered allmulticast mode [ 168.431348][T10361] bridge_slave_0: entered promiscuous mode [ 168.459318][T10461] hsr0: entered promiscuous mode [ 168.466637][ T29] audit: type=1800 audit(1741431634.228:4): pid=10464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1175" name="memory.events" dev="tmpfs" ino=1467 res=0 errno=0 [ 168.493215][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1173'. [ 168.494897][T10361] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.509863][T10361] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.517695][T10361] bridge_slave_1: entered allmulticast mode [ 168.525786][T10361] bridge_slave_1: entered promiscuous mode [ 168.533516][T10461] hsr_slave_0: left promiscuous mode [ 168.540807][T10461] hsr_slave_1: left promiscuous mode [ 168.560482][T10461] hsr0 (unregistering): left promiscuous mode [ 168.601503][T10361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.613545][T10361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.680546][T10361] team0: Port device team_slave_0 added [ 168.692405][T10291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.707447][T10361] team0: Port device team_slave_1 added [ 168.751175][T10291] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.774167][T10361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.782125][T10361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.809402][T10361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.830480][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.837814][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.847504][T10361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.864258][T10361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.891844][T10361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.912600][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.919777][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.995526][T10361] hsr_slave_0: entered promiscuous mode [ 169.001956][T10361] hsr_slave_1: entered promiscuous mode [ 169.031760][T10474] xt_hashlimit: size too large, truncated to 1048576 [ 169.300343][ T53] Bluetooth: hci3: command tx timeout [ 169.454549][ T53] Bluetooth: hci2: command tx timeout [ 169.586036][T10484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.595298][T10484] bond0: (slave bond1): Enslaving as an active interface with an up link [ 169.808650][T10291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.013049][T10291] veth0_vlan: entered promiscuous mode [ 170.052389][T10291] veth1_vlan: entered promiscuous mode [ 170.117149][T10291] veth0_macvtap: entered promiscuous mode [ 170.156259][T10291] veth1_macvtap: entered promiscuous mode [ 170.242667][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.264089][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.276242][T10291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.317575][T10291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.332907][T10291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.349423][T10291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.361538][T10361] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 170.384839][T10291] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.406495][T10291] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.416437][T10545] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 170.438134][T10291] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.447356][T10291] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.457558][T10361] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 170.470640][T10547] net_ratelimit: 1548 callbacks suppressed [ 170.470657][T10547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.505477][T10361] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 170.523625][T10361] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 170.617184][T10550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.660179][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.679240][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.732680][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.741788][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.772614][T10361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.812950][T10558] netlink: 'syz.1.1200': attribute type 21 has an invalid length. [ 170.827596][T10558] __nla_validate_parse: 1 callbacks suppressed [ 170.827612][T10558] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1200'. [ 170.858289][T10361] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.889334][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.896547][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.953305][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.960422][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.046571][T10535] rdma_op ffff88805e8711f0 conn xmit_rdma 0000000000000000 [ 171.252997][T10361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.377480][T10579] vlan0: entered promiscuous mode [ 171.393177][T10583] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1206'. [ 171.513929][T10591] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1207'. [ 171.534455][ T53] Bluetooth: hci2: command tx timeout [ 171.598438][T10591] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1207'. [ 171.622542][T10361] veth0_vlan: entered promiscuous mode [ 171.643926][T10361] veth1_vlan: entered promiscuous mode [ 171.659065][T10595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1209'. [ 171.687193][T10361] veth0_macvtap: entered promiscuous mode [ 171.717691][T10361] veth1_macvtap: entered promiscuous mode [ 171.749047][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.779575][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.798525][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1211'. [ 171.804247][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.835347][T10603] netlink: 'syz.3.1210': attribute type 10 has an invalid length. [ 171.860857][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.870652][T10605] xt_addrtype: ipv6 does not support BROADCAST matching [ 171.888815][T10361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.996368][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.091537][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.116017][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.154516][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.175526][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.200676][T10361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.201664][T10614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1215'. [ 172.211688][T10361] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.233819][T10361] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.264513][T10361] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.279649][T10361] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.378390][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.515872][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.541904][T10631] netlink: 'syz.2.1217': attribute type 23 has an invalid length. [ 172.551789][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.644743][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.674883][ T5148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.686220][ T5148] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 172.695638][ T5148] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 172.703597][ T5148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 172.712878][ T5148] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 172.722746][ T5148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 172.754878][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.763888][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.789801][T10639] netlink: 'syz.2.1219': attribute type 11 has an invalid length. [ 172.798038][T10639] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1219'. [ 172.811972][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.044102][T10538] ------------[ cut here ]------------ [ 173.050094][T10538] refcount_t: underflow; use-after-free. [ 173.056178][T10538] WARNING: CPU: 0 PID: 10538 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 173.066352][T10538] Modules linked in: [ 173.070275][T10538] CPU: 0 UID: 0 PID: 10538 Comm: kbnepd bnep0 Not tainted 6.14.0-rc5-syzkaller-00125-gdf8ce77ba8b7 #0 [ 173.081583][T10538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 173.091684][T10538] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 173.097880][T10538] Code: 80 b3 80 8c e8 d7 2a 8c fc 90 0f 0b 90 90 eb 99 e8 db 6d cc fc c6 05 cc b0 31 0b 01 90 48 c7 c7 e0 b3 80 8c e8 b7 2a 8c fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 b8 6d cc fc c6 05 a6 b0 31 0b 01 90 [ 173.117632][T10538] RSP: 0018:ffffc9000bd0f720 EFLAGS: 00010246 [ 173.123704][T10538] RAX: daa86a7c85ec2500 RBX: ffff8880259e0078 RCX: ffff88807def5a00 [ 173.131689][T10538] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.139731][T10538] RBP: 0000000000000003 R08: ffffffff81818e32 R09: fffffbfff1d3a67c [ 173.147747][T10538] R10: dffffc0000000000 R11: fffffbfff1d3a67c R12: ffff8880259e0060 [ 173.155747][T10538] R13: 1ffff11004b3c00c R14: ffff8880259e0060 R15: ffffffff8638a1d0 [ 173.163915][T10538] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 173.173047][T10538] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.179676][T10538] CR2: 000000110c2df789 CR3: 000000006ee74000 CR4: 00000000003526f0 [ 173.187670][T10538] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 173.195678][T10538] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 173.203653][T10538] Call Trace: [ 173.207027][T10538] [ 173.209946][T10538] ? __warn+0x165/0x4d0 [ 173.214092][T10538] ? refcount_warn_saturate+0x15a/0x1d0 [ 173.219782][T10538] ? report_bug+0x2b3/0x500 [ 173.224300][T10538] ? refcount_warn_saturate+0x15a/0x1d0 [ 173.229832][T10538] ? handle_bug+0x60/0x90 [ 173.234143][T10538] ? exc_invalid_op+0x1a/0x50 [ 173.238876][T10538] ? asm_exc_invalid_op+0x1a/0x20 [ 173.243886][T10538] ? __pfx_klist_children_put+0x10/0x10 [ 173.249458][T10538] ? __warn_printk+0x292/0x360 [ 173.254259][T10538] ? refcount_warn_saturate+0x15a/0x1d0 [ 173.259789][T10538] klist_dec_and_del+0x3ec/0x3f0 [ 173.264967][T10538] ? __pfx_klist_children_put+0x10/0x10 [ 173.270502][T10538] klist_del+0xa7/0x110 [ 173.274892][T10538] device_del+0x2c9/0x9b0 [ 173.279215][T10538] ? __pfx_device_del+0x10/0x10 [ 173.284062][T10538] ? netdev_unregister_kobject+0x178/0x250 [ 173.289950][T10538] unregister_netdevice_many_notify+0x19b4/0x1f10 [ 173.296439][T10538] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 173.303192][T10538] ? __mutex_lock+0xba3/0x1010 [ 173.307979][T10538] ? __mutex_lock+0x602/0x1010 [ 173.312738][T10538] ? rtnl_net_dev_lock+0x271/0x320 [ 173.317894][T10538] ? __pfx___mutex_lock+0x10/0x10 [ 173.322908][T10538] ? __pfx_lock_release+0x10/0x10 [ 173.327957][T10538] unregister_netdevice_queue+0x303/0x370 [ 173.333669][T10538] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 173.339944][T10538] ? rtnl_net_dev_lock+0x37/0x320 [ 173.345025][T10538] ? rtnl_net_dev_lock+0x302/0x320 [ 173.350125][T10538] ? rtnl_net_dev_lock+0x37/0x320 [ 173.355205][T10538] unregister_netdev+0x1f/0x60 [ 173.359950][T10538] bnep_session+0x2e4e/0x3040 [ 173.364887][T10538] ? __pfx_bnep_session+0x10/0x10 [ 173.369901][T10538] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 173.376160][T10538] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 173.382479][T10538] ? __pfx_woken_wake_function+0x10/0x10 [ 173.388171][T10538] ? __kthread_parkme+0x169/0x1d0 [ 173.393179][T10538] ? __pfx_bnep_session+0x10/0x10 [ 173.398238][T10538] kthread+0x7a9/0x920 [ 173.402303][T10538] ? __pfx_kthread+0x10/0x10 [ 173.406901][T10538] ? __pfx_bnep_session+0x10/0x10 [ 173.411910][T10538] ? __pfx_kthread+0x10/0x10 [ 173.416562][T10538] ? __pfx_kthread+0x10/0x10 [ 173.421137][T10538] ? __pfx_kthread+0x10/0x10 [ 173.425776][T10538] ? _raw_spin_unlock_irq+0x23/0x50 [ 173.430959][T10538] ? lockdep_hardirqs_on+0x99/0x150 [ 173.436173][T10538] ? __pfx_kthread+0x10/0x10 [ 173.440754][T10538] ret_from_fork+0x4b/0x80 [ 173.445225][T10538] ? __pfx_kthread+0x10/0x10 [ 173.449806][T10538] ret_from_fork_asm+0x1a/0x30 [ 173.454683][T10538] [ 173.457695][T10538] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 173.464951][T10538] CPU: 0 UID: 0 PID: 10538 Comm: kbnepd bnep0 Not tainted 6.14.0-rc5-syzkaller-00125-gdf8ce77ba8b7 #0 [ 173.475855][T10538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 173.485887][T10538] Call Trace: [ 173.489230][T10538] [ 173.492143][T10538] dump_stack_lvl+0x241/0x360 [ 173.496800][T10538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.501974][T10538] ? __pfx__printk+0x10/0x10 [ 173.506538][T10538] ? _printk+0xd5/0x120 [ 173.510670][T10538] ? __init_begin+0x41000/0x41000 [ 173.515673][T10538] ? vscnprintf+0x5d/0x90 [ 173.519981][T10538] panic+0x349/0x880 [ 173.523854][T10538] ? __warn+0x174/0x4d0 [ 173.527992][T10538] ? __pfx_panic+0x10/0x10 [ 173.532395][T10538] ? ret_from_fork_asm+0x1a/0x30 [ 173.537397][T10538] __warn+0x344/0x4d0 [ 173.541381][T10538] ? refcount_warn_saturate+0x15a/0x1d0 [ 173.546911][T10538] report_bug+0x2b3/0x500 [ 173.551218][T10538] ? refcount_warn_saturate+0x15a/0x1d0 [ 173.556745][T10538] handle_bug+0x60/0x90 [ 173.560882][T10538] exc_invalid_op+0x1a/0x50 [ 173.565373][T10538] asm_exc_invalid_op+0x1a/0x20 [ 173.570203][T10538] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 173.576362][T10538] Code: 80 b3 80 8c e8 d7 2a 8c fc 90 0f 0b 90 90 eb 99 e8 db 6d cc fc c6 05 cc b0 31 0b 01 90 48 c7 c7 e0 b3 80 8c e8 b7 2a 8c fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 b8 6d cc fc c6 05 a6 b0 31 0b 01 90 [ 173.595951][T10538] RSP: 0018:ffffc9000bd0f720 EFLAGS: 00010246 [ 173.601996][T10538] RAX: daa86a7c85ec2500 RBX: ffff8880259e0078 RCX: ffff88807def5a00 [ 173.609945][T10538] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.617892][T10538] RBP: 0000000000000003 R08: ffffffff81818e32 R09: fffffbfff1d3a67c [ 173.625840][T10538] R10: dffffc0000000000 R11: fffffbfff1d3a67c R12: ffff8880259e0060 [ 173.633804][T10538] R13: 1ffff11004b3c00c R14: ffff8880259e0060 R15: ffffffff8638a1d0 [ 173.641763][T10538] ? __pfx_klist_children_put+0x10/0x10 [ 173.647298][T10538] ? __warn_printk+0x292/0x360 [ 173.652051][T10538] klist_dec_and_del+0x3ec/0x3f0 [ 173.656975][T10538] ? __pfx_klist_children_put+0x10/0x10 [ 173.662506][T10538] klist_del+0xa7/0x110 [ 173.666651][T10538] device_del+0x2c9/0x9b0 [ 173.670972][T10538] ? __pfx_device_del+0x10/0x10 [ 173.675807][T10538] ? netdev_unregister_kobject+0x178/0x250 [ 173.681601][T10538] unregister_netdevice_many_notify+0x19b4/0x1f10 [ 173.688005][T10538] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 173.694748][T10538] ? __mutex_lock+0xba3/0x1010 [ 173.699496][T10538] ? __mutex_lock+0x602/0x1010 [ 173.704240][T10538] ? rtnl_net_dev_lock+0x271/0x320 [ 173.709334][T10538] ? __pfx___mutex_lock+0x10/0x10 [ 173.714341][T10538] ? __pfx_lock_release+0x10/0x10 [ 173.719360][T10538] unregister_netdevice_queue+0x303/0x370 [ 173.725059][T10538] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 173.731280][T10538] ? rtnl_net_dev_lock+0x37/0x320 [ 173.736301][T10538] ? rtnl_net_dev_lock+0x302/0x320 [ 173.741416][T10538] ? rtnl_net_dev_lock+0x37/0x320 [ 173.746430][T10538] unregister_netdev+0x1f/0x60 [ 173.751184][T10538] bnep_session+0x2e4e/0x3040 [ 173.755877][T10538] ? __pfx_bnep_session+0x10/0x10 [ 173.760905][T10538] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 173.766789][T10538] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 173.773105][T10538] ? __pfx_woken_wake_function+0x10/0x10 [ 173.778727][T10538] ? __kthread_parkme+0x169/0x1d0 [ 173.783740][T10538] ? __pfx_bnep_session+0x10/0x10 [ 173.788752][T10538] kthread+0x7a9/0x920 [ 173.792811][T10538] ? __pfx_kthread+0x10/0x10 [ 173.797392][T10538] ? __pfx_bnep_session+0x10/0x10 [ 173.802422][T10538] ? __pfx_kthread+0x10/0x10 [ 173.807006][T10538] ? __pfx_kthread+0x10/0x10 [ 173.811594][T10538] ? __pfx_kthread+0x10/0x10 [ 173.816175][T10538] ? _raw_spin_unlock_irq+0x23/0x50 [ 173.821366][T10538] ? lockdep_hardirqs_on+0x99/0x150 [ 173.826556][T10538] ? __pfx_kthread+0x10/0x10 [ 173.831136][T10538] ret_from_fork+0x4b/0x80 [ 173.835574][T10538] ? __pfx_kthread+0x10/0x10 [ 173.840150][T10538] ret_from_fork_asm+0x1a/0x30 [ 173.844903][T10538] [ 174.916133][T10538] Shutting down cpus with NMI [ 174.921095][T10538] Kernel Offset: disabled [ 174.925533][T10538] Rebooting in 86400 seconds..