last executing test programs: 4.153676888s ago: executing program 3 (id=1085): r0 = socket(0x11, 0x2, 0x10001) r1 = socket(0x10, 0x3, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) close(r1) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="970c4000ba00", @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c000f007900000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r6 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x1404, 0x0, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) connect$pppl2tp(r6, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x1, 0x1, 0x0, 0x4, {0xa, 0x4e20, 0x3, @empty, 0x3}}}, 0x3a) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000340)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x40}, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000440)='GPL\x00', 0x4, 0x54, &(0x7f0000000480)=""/84, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) getpeername$netlink(r7, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syzkaller1\x00', &(0x7f0000000080)=@ethtool_sfeatures}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000007, 0x13, r8, 0x1000) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) sendmsg$AUDIT_DEL_RULE(r8, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x42c, 0x3f4, 0x400, 0x70bd25, 0x25dfdbff, {0x6, 0x1, 0x15, [0x0, 0x14118e1f, 0x9, 0x5, 0x9, 0x4, 0xc, 0xfffff001, 0x1, 0x9, 0x7ff, 0x6, 0x6, 0x401, 0x5, 0x1ff, 0xa, 0x3, 0x40, 0x2, 0x6, 0x7, 0x81, 0x3ff, 0x7f, 0x14e0, 0x9, 0x35423f08, 0x6, 0x4, 0x100, 0x4, 0x3, 0x3, 0x9, 0x7, 0x6, 0x1ff, 0xb7, 0x3, 0x1fa2, 0x2, 0x101, 0x1, 0x3, 0x1, 0x6e, 0x2, 0x9, 0xe, 0x3, 0xc, 0x5, 0x0, 0x3, 0x0, 0x6, 0x3, 0x2, 0x5, 0x8, 0x6c, 0x3ff, 0x9d96], [0x5, 0x401, 0x8, 0x0, 0xb, 0xd5, 0xa, 0xb, 0x798, 0x2, 0x8, 0xfffff001, 0x7ff, 0x2, 0x0, 0x2, 0xe2, 0x3, 0x10000, 0x5, 0x1ff, 0x0, 0x7, 0x0, 0x80, 0x81, 0x5, 0x9, 0x4, 0x7, 0x200, 0xe7, 0x4, 0x2b2, 0x4, 0xffffd11e, 0x6, 0x7, 0x3, 0x1, 0x5, 0x6, 0x1, 0x5, 0x5, 0x2, 0x2, 0x2, 0x4, 0xfffffff9, 0x3, 0x3, 0x5ba, 0x0, 0x7, 0x3ff, 0x7ff, 0x1, 0xa7, 0x8, 0x0, 0x5, 0xd29, 0x7], [0x7, 0xfffffffd, 0x7, 0xae6, 0x4, 0x7, 0x1, 0x0, 0x5bc6, 0x85, 0x0, 0x9, 0x5, 0xa9, 0x20, 0x7fff, 0xcc5, 0x95, 0x8000, 0x1, 0x0, 0x9, 0x59ae, 0x5, 0x3, 0x1000, 0x4, 0x400, 0x1, 0x5, 0x101, 0xde, 0x7, 0x3, 0x1, 0xb8, 0x7f, 0xa18, 0x5f18, 0xeeb, 0x8, 0x3, 0x9613, 0x3, 0x4, 0xfff, 0x1, 0x3, 0x7, 0x4, 0x1, 0x9, 0x8000, 0x1, 0x2, 0x1ff, 0x1ac6000, 0x1, 0x3, 0x6a000000, 0xda5, 0x8, 0x379c, 0x2646], [0x5, 0xffffff73, 0x7, 0x96c, 0x40, 0x7, 0x80000000, 0x3, 0x4, 0xc, 0xb9, 0xb, 0x2, 0x9, 0x4, 0x4, 0x8, 0x9, 0xab8, 0x3ff, 0xfff, 0x3, 0x1, 0xd, 0x4, 0x200, 0x3, 0x3, 0x5, 0x9, 0x8001, 0x8, 0x3ff, 0x5, 0x5, 0x4a7aa8e0, 0xffffff80, 0x10000, 0xf, 0xdc89, 0x7, 0x6, 0x5, 0x9, 0xffffffff, 0x7fffffff, 0x3, 0x2, 0x62b, 0x5, 0x7, 0x4555, 0x1, 0x1, 0x3, 0x7ff, 0x50, 0x10001, 0x7, 0xffffffff, 0x1000, 0x7, 0x8001, 0x80000000], 0xb, ['(-\x00', 'l2tp\x00', '-\\\x00']}, ["", "", ""]}, 0x42c}}, 0x10000000) 3.789245122s ago: executing program 0 (id=1090): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000000c0)={0x0}, 0x7, 0x0, 0x0, 0x2004c004}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="9699901e28241dcaa7f5fb6ab6ab33d94c889890d748eebd0c20b7913bfdd56e32e7742876e45778c243198a4e2e688cf5aa5bbdcc7ddceabcce436e0d763d7e", 0x40}], 0x1}}], 0x1, 0x8004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="480100001000010000000000000000000000000000000000000000000000000000000000f8ff000000000000000000007133ff4b971437c50000000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073507169762863d86d28626c6f77676973682d61736d2929000000000000000000000000000000000000000000000000000000e40000000000000000000000000000000040000000"], 0x148}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b"], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x8010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900150000000000000000000a0000000002000000000000180009"], 0x34}], 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000940)=@newtaction={0x118, 0x30, 0x9, 0x0, 0x0, {}, [{0x104, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0xffe0}}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}, @m_simple={0xa8, 0xc, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7fff, 0x101, 0x1, 0x9, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x25, 0x828, 0x20000000, 0x57d, 0xedd}}, @TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xb, 0x3, '\\*,[{$\x00'}, @TCA_DEF_DATA={0x7, 0x3, '#!\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x4, 0xffffffffeffffffd, 0x55922935, 0x5979}}, @TCA_DEF_DATA={0xc, 0x3, 'skbedit\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x118}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x64, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x44}, [@nested={0x50, 0xe, 0x0, 0x1, [@nested={0x4c, 0x151, 0x0, 0x1, [@typed={0xc, 0x120, 0x0, 0x0, @u64}, @typed={0x8, 0xde, 0x0, 0x0, @pid}, @generic="d5938376f408f47c06aa365b797aafe2660b18ee45e48284a3b4ef398bc2fb7185b7604d553c3361c774288f3d80746bdaa9af09"]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c002886bda6ac18fc6ee318fe713052000008000000030000000000000604000000000000612e5f2e00"], 0x0, 0x2c, 0x0, 0x1, 0x80000000}, 0x28) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32], 0x4c}}, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800a507511bb300000600000000000000f5ffffad37bd86fac460f58f9e87857345f9310b5b22a11824a8d6c660cc7010702bea7ac30241eef57718b41381b7fc97d2c54ccd55b3d10043ad602b9abcaa5d1d4698034eaa99c61171a37390eae3f01576a2f4401ec9ee580400000031b55aa207c8bf03d154f88736310232041ee037b27791f59bbaa5db0603eb180df89db7ff4b612f3cec896a2f88004800f9a8ab0ef9677f8781d7da3ed475566ae5c01627c2915364a5f0b27b9cf6857656df75f6f4395367f2a924ad281e32c31c9431ba93e6b0973b6058d61200"/232, @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000cc000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x1f00, 0x10, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000340)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x10, 0x8}, 0x10, 0x27b85, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, r8, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a80)=ANY=[@ANYBLOB="440000002bc17cd7e51000030500000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1501000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB], 0x44}}, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000580), 0x4) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x8, 0x5}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000500)={r9, r12}, 0xc) 3.699468752s ago: executing program 3 (id=1091): unshare(0x2c060000) unshare(0x2c020400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r0, 0x952de000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000050017"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r5, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r5, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) accept(r2, 0x0, 0x0) socketpair(0xa, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14, 0x80000) getpeername$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 2.221280162s ago: executing program 3 (id=1094): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async, rerun: 32) r1 = socket$kcm(0x29, 0x2, 0x0) (rerun: 32) write$cgroup_pressure(r1, &(0x7f0000000140)={'full', 0x20, 0x0, 0x20, 0x1}, 0x2f) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$int_in(r1, 0x5452, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32) socket$netlink(0x10, 0x3, 0x12) (async) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) bind$llc(r3, 0x0, 0x0) write$tun(r2, &(0x7f0000001800)={@val={0x0, 0xfbfb}, @val={0x2, 0x1, 0xb, 0x3679, 0x6, 0x8001}, @ipv4=@udp={{0x6, 0x4, 0x2, 0x28, 0x7c, 0x66, 0x0, 0xd, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@end]}}, {0x4e22, 0x4e23, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x4, "bacbf91e14a55ec700f5ecebf3f7d994fcc8e99b0c6c3c33137dbb1dc2118b15", "70654b8844bcf27ebe6b6c66f725e9fd", {"884f130fdfcf7f668f2fba4e3256af7c", "cd2040df2cf57e52cbdafa2c9ac19a03"}}}}}, 0x8a) (async, rerun: 64) close(0x3) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xfffffffffffffe1c) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r4, 0x0) (async) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r4, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fddbdf252b000000180001801400020076657468305f746f5f626174616476"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000500)={0x4, &(0x7f00000004c0)=[{0xfa, 0x7, 0x1, 0x4}, {0xfffe, 0x8, 0x1}, {0x7ff, 0x2, 0x8, 0x5}, {0xce, 0x7f, 0x3, 0x8}]}, 0x10) (async) close(0x4) (async) r7 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r7, 0xc0286687, &(0x7f0000000440)={0x1, 0x7, 0xd9, &(0x7f00000006c0)=""/217}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000000), 0x4) 2.210421654s ago: executing program 0 (id=1095): getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, r0, 0xfe6c7000) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3c}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x34}}, @in6={0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x78) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xf7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f0000000100)="4e1984cabc0aebcb82de03061c108d75fec630992d62d42bdaf50bbeac965311015d8a1f7eb1a7ae8a82f2872480e4691d7af2", &(0x7f0000000140)=""/67, &(0x7f00000001c0)="49e3b0195af6fd129586b1a12c1f76ae93d43bb3084f284e011b09dcc1aaf358ae56cc2a5013f3d34c60208bf3beddf7be3505367987f7bcdc2d26b0fc2e2706d5e5a2dd0662fb30ee9bb1966f31d7410391e7173baec5e365660ef6b0bc69e2cf4cb930d77497da777fa8c4634b220f6ebe079f8b6ebbdd", &(0x7f0000000240)="c2bd938dfab54ebeae0edbdca449b058a250afde35faa0b8ce3102431f2e7e6c3f11d18f17658b919df3794a75e49ef16879ab238bb94c51f6d04d384ff740a5ba9336c86a3798398e809ab845822fb65e5ef6c2477b091ebd75c7f6cb3fd08f0001824e66af4b", 0x400, r2}, 0x38) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x1000, "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"}, &(0x7f00000013c0)=0x1008) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000001400)=@sack_info={r3, 0x4, 0x1}, 0xc) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001440)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000001480)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r5) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000002bc0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002b80)={&(0x7f0000001540)={0x163c, r6, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x56}}}}, [@NL80211_ATTR_CSA_IES={0x1570, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_PROBE_RESP={0x293, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x6, 0xff80, 0xff, 0x1]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x33, 0x80, [@random={0x1, 0x2a, "13476b0f1e9897703749da0e43c9992a96ab532e007346b764c8ea3867ea46838ac18d571eba07baa377"}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}, @NL80211_ATTR_FTM_RESPONDER={0x3ac, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xe3, 0x2, "61d33ba073cb71722594bd53ea55da2a202d729e969fb42d3a09110c6cb6b76855c74fbbbb884f143331804a770c4d02631ab6d59cfa9d9bd8e8534fa2dbbd3169ee266deb30d084daf660d8c6e8e7282627971f9455734042c7fb3ac78b0d63730b026042659666f6f5da90480ffcab2350fcf7751022a74157085f8d1114830c5d0550b93a5ea16b625a3527c37a38fe9f273e9f38731b7f82675b59115d6497bc8f945200dbae99a52121293b8d9a1909f46b76fa56f10ba99599d6107543d751dd9909769fc31795ad9362ec458cc6d817995d7ef3df27794d98b448b1"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xc4, 0x2, "0b43065ab0319f95192050b8033b50299a0f2381a7fcb17ae539d23d4bfab61cd78db2011a9dcae8ffef66225c425d8593be6fe36bc5c6e82c56e50c3b152f3243ee3083f847dccbd643c082dfbf722a9e0fd00da8be825b5bf6c456819f7e4fca88be28686a58d4097cc2140cfa8fb92454fb9d35dbe0d6caca63a4dc8ad2355c787c4addf8da8ae92d50b6fb6312c2c615d7073fac3859d7379792054d03c5a07567403534cd4823ecc4be64d631ce0ee8c4eb7349930f6b5bae96886e6fed"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x72, 0x3, "210ba534f41a10db694a7add1a27ecde5c26cf82b744feff95dbb1e38f66e2f6a847011db881ea8eccb853ed8e5a6d83f983d63895e128856eeb3733fbfbbeba7627c8918aac603818442f61e08a4b34f09afb0ba7be7b5a96b4695a76d1f330cbb0ce47c2782096a8ca64429cd1"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xde, 0x3, "fdaaecf66df331e7ec7057b27c2bb0178f4df78198baf3d0464f3eff017f42c2a4784deb90371b8bf38e72097f194ecd3a93a93979a02b576820fca40acca07aeee8a8ca4d7a0fff7e1bcba87976757ef79eaeee973eeb13e1d2122db39612394183e77bad8acf13173a21f681d45375d36f7b599ca6a05ea6d12e5ca1b879f4709eb5c4aff7b7f610eb120a692765df9bf05d83a836794b22b4f570cf63703c9aea0feb6bb25977883d78e8d5d137f129f89b075f23edc6679bc4e74662825fbe24e344c3f37bcd258dfa95c198bb4a53156490e1c7fd949792"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xa7, 0x3, "3f23528259427fbdfcf993409f669451fcb26711f36cc4de9e4e23d1c9d5276d0ada0dcd2a0bb6a9cf63aab14c6a8026ba2423398e213ce211fa4f96118e399dc47bb1ca42a3fdf92bf780de941ba0927ba7b39e142a473f0d9b8b23836553200a868d6056502dde5983bdc78c0abb079d4b2a0550e1387fe2eae09290a6cc5b8b33b4de20db2d1c97d919eef88adad2bc20435aa64b9a9f21bff8a452dccb18cb540e"}]}, @NL80211_ATTR_FTM_RESPONDER={0x2f4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xae, 0x3, "353b087d98457ed34cb29346c6f3e033f2c984787b2fb804aef69500accffab990c0f3964d22ad32c7307fc8e9b042ad09ce842f459fccff9854069ccf91306a4e461e22fb1413d1dc40b899d78ea42df46ae0dc83d37e1f863e7d0401d958f4fc1cbe50ffbcccd41f99e5e8d8f0666fe84c96fbb2fdeca44f53458045cc19caf2e0eff468da857df845043ce6a43423a21507e2aa9225c55437decfb4c5bdd91fc44a25b4c90f7204dd"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x93, 0x3, "264850f60149527d85bd1001cb56d452ad16992a1d362aba93caaff335cac9bfe4b8b18a4198f981c925ef3a9d5dbd41bd5ca883b44c9814ab736bd5d81a6e3b4d7e4a090cd392c2d78d2e93c978bea0aa06ac758d889ad3be967f83b34653d1252424b047e6bf8dd2cace5fee406956b1ea683266136da4188fc8a72d60650cf2d244db12fbad7c45de6ba1bf6a85"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x8c, 0x3, "e1456d5e3f2635f9714aa95ebfe5d3e7aa0ccac8ed2bcba340b50a0c905b3e5f2c09f76aa9f27274d03cc9309706cd3b6a6e254ca7d75dd1aec29e60124431021121d96ab6ef09688b2e9b2ab104d2392cce014a1ed2ffd2a83df06df62a6c728b592259ecca961d028ee47d5fe89da70e0c8e2f00d718b7cbd80de122fab807f5b5165c240c34d3"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x66, 0x3, "2e59a4823449e59eddd4c4cfba3564da1f3fd0aeebf6de82d7594df7f0960ed76aecb36c360fcdc825fea820fed901e429b9b74cde11c0b48c3ad5e4d8c7b1171a3c4a40500ed8c26f4eb697c8f70cb5b5aff17ee636b13d1d1c1087ee9bc1af69e1"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb2, 0x3, "f38735b947471c669e6345114750aeee304df9314873cde44e62bc2a1b80e5673d7e18657e587c5c33f2be8473a7d39108d66d1830b8eeffa99f426e89cd8a232e54f0e99d3656cb70c00d145bcc6de5428ad0ce11b92e7153be9b98f67de149d400e74cfeaa4103b7a98d76d5315b4ed2ae40f0aae061d7f0cb6f76f68b003bafe75a73e22b2814e9b0081e3ac059771dadb6f39a056aa1a55101ec5f1fdcafad59817dc53a26689e14fed9a5d7"}]}, @NL80211_ATTR_FTM_RESPONDER={0x188, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xae, 0x3, "d3058d880aba29a78c235c69f574924f965e2cfc5c571ebf2747fa9e849712e6f4108b9f8b275adfa971009f6b92610a4f0714ff34c78a4db1e7b019911dfcef520cafbfa3925ac0d269a99c9a0e2d8441fc056138be29b8ff5bc87b1ed54bfa67dc04b1f1565b64bed59304060a4c6801a80ffc40a409188464d8f351234bbb213228db25913bc36feadbbd4848b6a6d700a87a7ba0ceff40509d66e314c16c2f2b93aa7ea8abe4ca6b"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xcb, 0x2, "1dbcaaf417c6986dcf5bea4381e2c1b68c32da4ae8148a544a659cac3f27220709eb52c9982ed3ff71bb5ecbbd9bd39ea920bfd7cd04bb59ab0ddd2f878ad0e182e6864f7f1058f96871bd3bca13cd8a59f313c00ceefb38d9c7d69372056aa2c74e9a2feb99f64baa06623639de7f52d7c61cfc10faa8a347b9893c875f431801d7f1b3e103cdc0bbafd23c5ee4d3a45f1181a1e67d6c3c3bc001f7a59e266ab40ec9593faa72791938ae32142f01e32760205aa17c03fe05b1b4ba1572a6e3953aa3ad5ab61e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x8ea, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x166, 0xf, [@tim={0x5, 0x4c, {0x1, 0x56, 0x9, "e0897b8aac6f45f55136aeaedd79a9fa26ef49ac8f7b418f89076dbf33d86dd88c84d4e640da5e4c5bddb23b727aa8cdf7d1dc1836a0ff00d451fe3360cad5e25cc562f27636d081f5"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xd5, 0x2, @device_a, 0x951, @value, 0x3, 0x1ff, @device_a, 0x2}}, @fast_bss_trans={0x37, 0xd1, {0x6d, 0x9, "964d5f1c05dba29185d9c0c0c9abf4d7", "d2f4c516fbe5fb0940be0a53bcf7052709f262129b8dc53d87108bd974f04fe4", "5dd045d8e8a6e71c7d4069d25084008b242e5afad6a9ba48b457eef104adf25f", [{0x1, 0x4, "2d7f0586"}, {0x1, 0x1a, "a3938073b80f3c49a05e58223b7a5a0f60ccfaecb874f7733a1a"}, {0x3, 0xd, "7a31d1557fb681f25e375f7455"}, {0x4, 0x22, "d0f69783125b159a2bf82c12076d714ed0378b5c32f9ae99092f6924c8ec27754e53"}, {0x3, 0x6, "c86fd2c83d6d"}, {0x4, 0x4, "31eb1db1"}, {0x3, 0x14, "ee57bbc8bd47b1ab380bb01a4870f9d886212953"}, {0x4, 0x2, 'c7'}, {0x3}]}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @supported_rates={0x1, 0x1, [{0x9, 0x1}]}]}, @NL80211_ATTR_PROBE_RESP={0x10, 0x91, "451529f2ef992c31697d4faa"}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x9, 0x5, 0x9, 0x2]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb7}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffff01}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x46}, @NL80211_ATTR_CSA_IES={0x2c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0xaf42, 0x15ae, 0x4, 0x1, 0x8001]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x16, 0xba, [0xaf3, 0xa9df, 0x5, 0x6, 0x4, 0xfffd, 0x5, 0x148, 0xcc3f]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x163c}, 0x1, 0x0, 0x0, 0x1}, 0x40) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000002c00)={0x0, 0x4, 0x5, 0x8}, 0x8) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002e40)={0x6, 0x1, &(0x7f0000002c40)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}], &(0x7f0000002c80)='syzkaller\x00', 0x1, 0x83, &(0x7f0000002cc0)=""/131, 0x40f00, 0x3e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002d80)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002dc0)=[r5, r5, r5, r5, r5], &(0x7f0000002e00)=[{0x1, 0x3, 0x8, 0x7}, {0x2, 0x4, 0x7, 0x3}], 0x10, 0xd0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000002f00)={r8, r2}, 0xc) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002f80), r7) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000003040)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x20, r9, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0xd, 0x1a}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x891}, 0x40010) clock_gettime(0x7, &(0x7f0000003080)) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f00000030c0)=@assoc_value={r3, 0x3}, &(0x7f0000003100)=0x8) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000003140)) r12 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_inet_SIOCSIFADDR(r12, 0x8916, &(0x7f0000003180)={'geneve1\x00', {0x2, 0x4e20, @broadcast}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000031c0)=[@in6={0xa, 0x4e20, 0xa08a, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, @in6={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, @in6={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}], 0x54) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000003340)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003300)={&(0x7f0000003280)={0x68, r6, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000033c0)={&(0x7f0000003380)='svcrdma_send_err\x00', r5, 0x0, 0x1}, 0x18) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000003400)={r11, 0x400}, &(0x7f0000003440)=0x8) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f00000036c0)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003680)={&(0x7f00000035c0)={0xac, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfd}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0xffb6}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1b}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x880) 2.153885838s ago: executing program 1 (id=1096): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = gettid() r1 = socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=r1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="68000000100003040e000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="049c01000750050008001300", @ANYRES32=r0, @ANYBLOB="1400030076657468305f766972745f776966690008001f00ba00000024000e000100000000000000020000007f00000000000000850e070700000000"], 0x68}, 0x1, 0x0, 0x0, 0x400c0d6}, 0x0) 2.079189289s ago: executing program 2 (id=1097): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8}, @XFRMA_IF_ID={0x8}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x430}]}, 0x150}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) write$tun(r1, &(0x7f0000001380)={@val={0x1c, 0x800}, @val={0x2, 0x3, 0x60, 0x14, 0x2, 0x1}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x3, 0x2f, 0xfa7, 0x67, 0x0, 0x4, 0x2f, 0x0, @loopback, @rand_addr=0x64010101}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0x0, 0x3, 0x0, 0x0, 0x4, 0x1}, 0x1, {0x10}}}, {0x8, 0x22eb, 0x0, {{0x4, 0x2, 0x7, 0x1, 0x0, 0x2, 0x2, 0x5}, 0x2, {0x4, 0x7, 0x1, 0x14, 0x1, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "d4327899e67566f565f3b6f39267f8c1581a1d8e5602fb9e8b83f6e62135bda4a2e2668dee614bc3d82d4cd01b4541722c422f05b5116e84f028cd53bbcfde9ae71d721f04b1bc50aadbf9f369386617c5d7ea8b4f643e92406b0a8b7ed306f46d7267b7b58fd7f498ddf2955dd47068"}}}}}, 0xfb5) 1.9500819s ago: executing program 3 (id=1098): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000080000000000000000e400711006000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.821807486s ago: executing program 1 (id=1100): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0xfff}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000240)=""/182, 0xb6}, {&(0x7f00000004c0)=""/262, 0x106}, {&(0x7f0000000040)=""/27, 0x1b}, {&(0x7f0000000600)=""/4112, 0x1010}, {&(0x7f0000000340)=""/219, 0xdb}], 0x5}, 0x80000000}], 0x4, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000210400"/20, @ANYRES32=r11, @ANYBLOB="00000000000001002000128008000100677265001400028006000f00aa0b000006000e0000000000"], 0x40}}, 0x90) sendto$inet6(r1, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0015003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160020200800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010"], 0x6c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500000000fcdbdf2500000001", @ANYRES16=r11, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050006"], 0x48}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}}) 1.820040331s ago: executing program 3 (id=1101): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}}, 0x8000) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x444, 0x3f4, 0x2, 0x70bd28, 0x25dfdbff, {0x2, 0x0, 0x40, [0x3, 0x7fffffff, 0x8000, 0x2, 0x4, 0x2, 0x2715, 0x69, 0x9, 0x1, 0x5, 0x0, 0x5, 0xffffffff, 0x40, 0x5, 0x7ff, 0x6, 0x1ff, 0xebd, 0xfffffffa, 0x3, 0xa48, 0x7, 0x9336, 0xffff, 0x6, 0xfffffffa, 0x8a2, 0x798, 0x8000, 0x2, 0x5, 0x2078561d, 0x2b4, 0x2, 0x1, 0x1, 0x6, 0x2, 0x3ff, 0x5, 0x100, 0x3, 0x8, 0xffff, 0x2, 0x5, 0x9, 0x3, 0x5, 0x4, 0xf, 0x9, 0x1, 0x0, 0x4, 0x3, 0x40, 0xff, 0x0, 0x0, 0xd, 0x17], [0x6, 0x0, 0xfffffff8, 0xf324, 0x50, 0x5, 0x3, 0x1, 0x1, 0x5, 0x3ff, 0x2, 0xfffffffc, 0x1, 0x6, 0x1, 0x0, 0xe5, 0x7, 0x2, 0x2, 0xd1, 0x1, 0x3, 0x6, 0x5, 0x16, 0x2, 0x8, 0x6, 0x6, 0x70fe, 0x327, 0x0, 0xfffffffa, 0x9, 0x8, 0x3d, 0x0, 0xb8, 0x2, 0x5, 0x2, 0x5, 0x0, 0xfffffffc, 0x7, 0x80000000, 0x0, 0xfff, 0xc, 0xf, 0x0, 0xf, 0x8, 0x40, 0xe3, 0x3, 0x2, 0x80000000, 0x98, 0x72, 0x2, 0x200000], [0x2d, 0x1000, 0x0, 0xfffffffc, 0x8, 0xfffffc01, 0xe1, 0xa, 0x0, 0xf4, 0x7, 0x3, 0xb, 0xbc, 0x6, 0x9, 0x0, 0x1, 0xc3, 0x0, 0x6, 0x9, 0x53, 0x6, 0x8, 0x0, 0x9, 0x62, 0x1, 0x5, 0x6, 0x0, 0x8000, 0x2, 0x9, 0x8, 0xffff0c7a, 0x1000, 0x6, 0xfffffeff, 0x5, 0x9, 0x6, 0x8, 0xbe, 0x5de, 0xbbc2, 0x4, 0x9, 0x7c470a14, 0x7f, 0x5, 0x1670f56c, 0xf, 0x8, 0x6, 0x7, 0x0, 0xd2, 0x6, 0x3b, 0x5, 0x5, 0x3], [0xdf, 0x2, 0x57a, 0xca7, 0x4, 0xc, 0x764f, 0x1, 0x8, 0x7, 0xf663, 0x3, 0x3f91, 0x5, 0xd659, 0x7, 0xd424, 0x7, 0x2, 0x7fff, 0x1, 0x45, 0xe, 0x7, 0x0, 0x5, 0x7, 0x5, 0x1000, 0x8, 0x0, 0xa9, 0x4, 0x9, 0x1, 0x4, 0x7, 0x4ff553ab, 0x6, 0x100, 0x3, 0x9, 0x0, 0x5, 0x7ff, 0x10, 0x9, 0xf5, 0x8, 0x5, 0x1ff, 0x101, 0x1b0, 0x0, 0x1ff, 0x60ec, 0x7, 0x2, 0x5, 0x401, 0x4, 0xd, 0xffffffff, 0xa], 0x24, ['\x00', ',!--#\\**!\x00', '\\^[%++\x15!}\x00', '\x00', '*}\x00', '-*\x00', '\x00', '+%@!@\'\x00']}, ["", "", "", "", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x40002}, 0x800) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}}, 0x8000) (async) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x444, 0x3f4, 0x2, 0x70bd28, 0x25dfdbff, {0x2, 0x0, 0x40, [0x3, 0x7fffffff, 0x8000, 0x2, 0x4, 0x2, 0x2715, 0x69, 0x9, 0x1, 0x5, 0x0, 0x5, 0xffffffff, 0x40, 0x5, 0x7ff, 0x6, 0x1ff, 0xebd, 0xfffffffa, 0x3, 0xa48, 0x7, 0x9336, 0xffff, 0x6, 0xfffffffa, 0x8a2, 0x798, 0x8000, 0x2, 0x5, 0x2078561d, 0x2b4, 0x2, 0x1, 0x1, 0x6, 0x2, 0x3ff, 0x5, 0x100, 0x3, 0x8, 0xffff, 0x2, 0x5, 0x9, 0x3, 0x5, 0x4, 0xf, 0x9, 0x1, 0x0, 0x4, 0x3, 0x40, 0xff, 0x0, 0x0, 0xd, 0x17], [0x6, 0x0, 0xfffffff8, 0xf324, 0x50, 0x5, 0x3, 0x1, 0x1, 0x5, 0x3ff, 0x2, 0xfffffffc, 0x1, 0x6, 0x1, 0x0, 0xe5, 0x7, 0x2, 0x2, 0xd1, 0x1, 0x3, 0x6, 0x5, 0x16, 0x2, 0x8, 0x6, 0x6, 0x70fe, 0x327, 0x0, 0xfffffffa, 0x9, 0x8, 0x3d, 0x0, 0xb8, 0x2, 0x5, 0x2, 0x5, 0x0, 0xfffffffc, 0x7, 0x80000000, 0x0, 0xfff, 0xc, 0xf, 0x0, 0xf, 0x8, 0x40, 0xe3, 0x3, 0x2, 0x80000000, 0x98, 0x72, 0x2, 0x200000], [0x2d, 0x1000, 0x0, 0xfffffffc, 0x8, 0xfffffc01, 0xe1, 0xa, 0x0, 0xf4, 0x7, 0x3, 0xb, 0xbc, 0x6, 0x9, 0x0, 0x1, 0xc3, 0x0, 0x6, 0x9, 0x53, 0x6, 0x8, 0x0, 0x9, 0x62, 0x1, 0x5, 0x6, 0x0, 0x8000, 0x2, 0x9, 0x8, 0xffff0c7a, 0x1000, 0x6, 0xfffffeff, 0x5, 0x9, 0x6, 0x8, 0xbe, 0x5de, 0xbbc2, 0x4, 0x9, 0x7c470a14, 0x7f, 0x5, 0x1670f56c, 0xf, 0x8, 0x6, 0x7, 0x0, 0xd2, 0x6, 0x3b, 0x5, 0x5, 0x3], [0xdf, 0x2, 0x57a, 0xca7, 0x4, 0xc, 0x764f, 0x1, 0x8, 0x7, 0xf663, 0x3, 0x3f91, 0x5, 0xd659, 0x7, 0xd424, 0x7, 0x2, 0x7fff, 0x1, 0x45, 0xe, 0x7, 0x0, 0x5, 0x7, 0x5, 0x1000, 0x8, 0x0, 0xa9, 0x4, 0x9, 0x1, 0x4, 0x7, 0x4ff553ab, 0x6, 0x100, 0x3, 0x9, 0x0, 0x5, 0x7ff, 0x10, 0x9, 0xf5, 0x8, 0x5, 0x1ff, 0x101, 0x1b0, 0x0, 0x1ff, 0x60ec, 0x7, 0x2, 0x5, 0x401, 0x4, 0xd, 0xffffffff, 0xa], 0x24, ['\x00', ',!--#\\**!\x00', '\\^[%++\x15!}\x00', '\x00', '*}\x00', '-*\x00', '\x00', '+%@!@\'\x00']}, ["", "", "", "", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x40002}, 0x800) (async) 1.788499692s ago: executing program 0 (id=1102): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0x50, 0x21, 0x1, 0xfffffffc, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x100000}}, 0x50}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) 1.649767305s ago: executing program 1 (id=1104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8, 0x4, 0x2, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xe}, {0xd, 0xd}}}, 0x24}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) (async) close(r4) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8, 0x4, 0x2, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xe}, {0xd, 0xd}}}, 0x24}}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) 1.649100722s ago: executing program 2 (id=1105): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e3d, 0x2, @mcast2, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8045}, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000200)=0x80000001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.648469838s ago: executing program 3 (id=1106): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x1e, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x75, 0x0, 0x0, 0x0, 0x897}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x800}, @map_fd={0x18, 0x2, 0x1, 0x0, r1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x8}]}, &(0x7f00000001c0)='syzkaller\x00', 0xc, 0x0, 0x0, 0x60780, 0x74, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xd, 0x13, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000280)=[r1, r1, r1, r1, r1], &(0x7f0000000400)=[{0x0, 0x4, 0xd, 0x4}, {0x0, 0x5, 0x5, 0xc}, {0x3, 0x5, 0x0, 0xa}, {0x0, 0x1, 0x5, 0x5}], 0x10, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40044, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.595291281s ago: executing program 0 (id=1107): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x4000000, 0x0, 0xff, 0x0, 0xfffffeff}}) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, r0, 0x180000000) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x4e22, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6, 0x0, 0x6c}]}, 0x10) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 1.437998307s ago: executing program 2 (id=1109): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000140)={0x0, 0xea60}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000)=0xd64, 0x8) connect$vsock_stream(r0, &(0x7f0000000940)={0x28, 0x0, 0xffffd8ee}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e615500140004800800014000000001080002"], 0xbc}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) 1.347499478s ago: executing program 4 (id=1110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8000}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@multicast1, @private, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa0, r1, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x8041001) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x402100, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000380)=0x8000, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000400)=r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x7ff, 0x3d, 0x2, 0x8, 0x30, 0x8e9, 0x7}, &(0x7f0000000500)=0x9c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000540)={r5, @in6={{0xa, 0x4e21, 0x100, @mcast2, 0x7}}}, 0x84) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000000600)={r4, 0x5, 0x8, "b526d34a5f086e908b579ea83792700026a1e9f9e0f2b2dced858a1888cf230d24e9f1c5dff388c2b72fe53a0e1cea0b39c0e39dba45f024f85cb63bbd5cadd3c7f18858617392890709734a610491c511feb5fe26df504a89416a58d38fca7d4d9cb325d6bfb0d416459281adac661bac1a3a1fb9b15531e806539d39136b79bb3abcbdfd80485f206a0d604a1cf477eba0640b506e322774d5aace14d227124ba3d7c32e0b0e9b5de5af064d6e"}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000900)={&(0x7f00000006c0)="fc8f283e3dfcba1ac8cffc669f3ada1b42c80d2754629f97e43d1388485a90c316668c73530cc0c55b994c154650d7b26c", &(0x7f0000000700)=""/44, &(0x7f0000000740)="b60b06a2d14e6195905f92ed02aa266ad80f9cd57d2fb2677b6af08d5548f6da5e97c1db16933f40cc3e19f92ad863f8060dadd32ced011950bc9050e58531c07d53ea1168cc9aa14a70d0353a929c9639435a4841253194687dd9e90cb404e91eca10dd9aaf74561c54944a87ab2b3cd91e8a9448fa5b9a1f5d62848cb2ceecb4ae40339ac9b16bfb73f6fec4348a0d3166842799a8d42d7a8f2c17033612afccee93f28ca0c97f9e01d314176e445c0c19d0cac58a0c0ab7ed", &(0x7f0000000800)="f90b2e362f8922d369fa2158798f176c7691f08eef70990f925a34b7d739d15619dee27ba3cb01043fa5fba600d8116c49080662d570300bfefa0b713a4360d1b28c04c21e96238f0c6e83485d8c3b843e9e6cfed9a268d66dc396cd11f0716842050941f063f561d338a2ecd23f31969ecfcf4ff26f1f72d68bd8f4023f15913bb1d1a6684cd678131e43e041e3163059b7978f1daa866efddfa43dd3ec480086528cdaa63797390259d77b4c8d56b6363ad82be879c5046efad45e8ae420a1255463cf4a1eb0", 0xffff8001, 0xffffffffffffffff, 0x4}, 0x38) r7 = accept4(r4, &(0x7f0000000940)=@l2tp, &(0x7f00000009c0)=0x80, 0x0) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f0000000a40)=@add_del={0x2, &(0x7f0000000a00)='nicvf0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$tipc(0x1e, 0x0, 0x0) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000ac0)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x2, 0x4}}, @hci={0x1f, 0x1, 0x1}, @hci={0x1f, 0xffffffffffffffff, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000a80)='wg1\x00', 0x10, 0xffff, 0x81}) sendmsg$NFT_MSG_GETGEN(r7, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}}, 0x40) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000c40)={r5}, &(0x7f0000000c80)=0x8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000cc0), r9) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000d80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r11, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x48, r10, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40841d4) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0x7, &(0x7f0000000ec0)={0x3, 0x7fff, 0x0, 0x5}, 0x10) 1.084051122s ago: executing program 2 (id=1111): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@gettaction={0xc0, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x84}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0xc0}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_procs(r6, 0x0, 0x2, 0x0) sendfile(r7, r7, 0x0, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=ANY=[@ANYRES64=r0], 0x68}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) read$alg(r11, &(0x7f0000000100)=""/12, 0xc) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xce, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) 961.822495ms ago: executing program 4 (id=1112): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\b\b'}]}, @NFTA_CMP_OP={0x8}]}}}]}]}], {0x14}}, 0x84}}, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000001500)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0xff, 0x8, 0x0, 0x7f}, 0x20) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x30, 0x0, &(0x7f0000000040)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="200000002d00040a8132eea7bb81df25040000000c001a000900000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x2406c089}, 0x20000000) getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000070000200040000000000000850000003b0000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0xfffffcea, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYRESOCT=r7, @ANYRESOCT=r0, @ANYRES16=r8, @ANYRESHEX=0x0, @ANYRESOCT=r9], 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r10}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) unshare(0x22020400) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000000)={r11, 0x0, 0x0}, 0x20) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001800090400000000fddbdf250a0000000000f9240000049c03071e0001000000080017004e234e236c7421a965dc0e558f6d7c8371d432241ed2927f681ea5c14b3603016db3423688484e340d0cd7e8295fef9e016c158d36284cf21c12f77a9d151ad2390913c0c0d84df8cf74e33a7f1612023b8768bda48abebd1bb83084ce74d39f3007c4e200005538142cf3d3ddb47d9a82b3bb753d6a9a4c04cf43a63c555b6f7641fadcbb62c08278902322cc1c8baa1daef79578709657ae26b67205a75c2149be4901a2ed3a493f80230a39000000000000"], 0x2c}}, 0x0) syz_emit_ethernet(0xa2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) 948.12458ms ago: executing program 1 (id=1113): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async, rerun: 32) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c000280"], 0x40}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500000000fcdbdf2500000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c28000050006"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000bc0)={'veth1_vlan\x00', &(0x7f0000000b80)=@ethtool_channels={0x3d, 0x5b1, 0x59, 0x8, 0x3ff, 0x1, 0x1, 0x6}}) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f0000000080)=0x6d86) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 754.308009ms ago: executing program 1 (id=1114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip6erspan0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xd769, 0x2, 0x49b, 0x7, 0x5, 0x7}}, @TCA_NETEM_CORR={0x10, 0x1, {0x80000001, 0x6af, 0xe}}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 585.932688ms ago: executing program 4 (id=1115): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000028000280080001"], 0x46}}, 0x4004) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7fffffff, 0x0, 0x0, 0xfffffffd}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa0}}, 0x14008004) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) shutdown(r0, 0x1) 549.018624ms ago: executing program 0 (id=1116): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x8, 0x9, 0xb35, @vifc_lcl_ifindex=r1, @remote}, 0x10) 442.264674ms ago: executing program 0 (id=1117): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800003a7a9a4d7a12c616beff24ef7f9d944e19402f67784eb2046d9716ce701907835b6c95af692d876235c68c01bacfe9", @ANYRES16=r3, @ANYRES16=r1], 0x38}, 0x1, 0x0, 0x0, 0x44801}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d1400bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000500)="8236fca008874827ccf1c8ed1e1f", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80300, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="250300000000140001800d"], 0x28}}, 0x0) close(r5) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x40080c0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r11 = socket$nl_rdma(0x10, 0x3, 0x14) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r12, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="0304"], 0xa) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900200073797a310000000008000fbb7278650014003300626f6e645f736c6176655f3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x2080) r13 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r14, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r13, &(0x7f0000000000)={0xa0000001}) 369.669014ms ago: executing program 4 (id=1118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x5e20, 0xffffffff, @empty, 0x4}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="80000000", @ANYRES16=r7, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="0600cd00000000005900330080200900080211000001080211000000"], 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0x28, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x81, 0x63}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x48800}, 0x48840) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000006d00673c25bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9881040004680200180034801400351e64756d6d79300000000000000000000014000300"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) (async) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@random="49a188da23ac", @random="d5d460bdee3c", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000580)={0x0, 0x1000, "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"}, &(0x7f0000000140)=0x1008) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000015c0)=@sack_info={r8, 0x80000000, 0x8}, &(0x7f0000001600)=0xc) 302.1123ms ago: executing program 1 (id=1119): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x630a, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0xfffffffffffffdba, &(0x7f0000000980)=[{&(0x7f0000000300)=""/122}, {&(0x7f0000000780)=""/126, 0x1400}, {&(0x7f00000004c0)=""/68}, {&(0x7f0000000540)=""/195}, {&(0x7f0000000640)=""/182}, {&(0x7f0000000700)=""/102}, {&(0x7f0000000180)=""/56}, {&(0x7f0000001000)=""/193}, {&(0x7f0000000880)=""/242}], 0x12, &(0x7f0000000a40)=""/126}, 0xe4}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000440), 0x14}, {&(0x7f0000000ac0)=""/166}, {&(0x7f0000000b80)=""/173}, {&(0x7f0000000c40)=""/221}, {&(0x7f0000000d40)=""/236}, {&(0x7f0000000e40)=""/60}], 0x24, &(0x7f0000000800)=""/73}, 0x1}], 0x2a, 0x40012020, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x1, 0x9}, &(0x7f00000001c0)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)=ANY=[@ANYBLOB="6300764f6249a1b4b3513dd69bffc4a48618b9cfd324780ea0fc2dd5dcc3255d219d9a65d8c2af9133d613beb3150a3484521bb7d4da4a105ff3c615ee6657347af80d02cdbe724a0000000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250c000000040003801800018014000200766972745f7769666930000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x404c004}, 0x24084084) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e23, 0x5, @empty, 0x53}}, 0x81, 0xb28, 0x3, 0xe, 0x24, 0x4, 0x6}, 0x9c) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000001e00005e00100000000040", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="03000000030000000200"/28], 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xc7}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xffffe10e}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$nl_route(0x10, 0x3, 0x0) 272.000262ms ago: executing program 4 (id=1120): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000001880)=0x3, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0xa4, 0x0, 0xda}, {0x6}]}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000000c0)=0x2, 0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r2, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001500010000000000fbdbdf25e0000002000000000000000000000000ffffffff00000000000000000000000000000000000400000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000c06b6e0000000000000000009b717e789fc8598a603c3984fc3edfc74948509509116b49265aa9260a2514a5e9f330ea0edbdf3267d7450e0115fbbdc1da94694ea8bfa995bae5ed61666bbfb4083c6bd406bd674526400b9bf6a75f44a6b3deff0d352cd7893fb3304994200be88a946d9d6e6e5300d2f852d3eeceb64fcf6d37a159327be4177f17ac40c768429e7326bdce4c42cd116d1295f8111a7383d3ac77828fc7a92d522f2b08db88152f5480"], 0xb8}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x6, 0x4) 193.883443ms ago: executing program 2 (id=1121): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e24, 0x20f, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1ff}, 0x1c) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32=r1, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0) 88.41934ms ago: executing program 4 (id=1122): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'vxcan1\x00', 0x0}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r0, 0x0, {0x0, 0x1, 0x4}, 0x1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000000)={0x2a, 0x2}, 0xc) bind$qrtr(r4, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8) listen(0xffffffffffffffff, 0x6) r5 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0xa, 0x4) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001680)=ANY=[], 0x20) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r8, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={0x0, 0x28}}, 0x20004000) sendmsg$nl_route_sched(r7, 0x0, 0x404d) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc000000", @ANYRES16=0x0], 0xfc}}, 0x4) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='\n\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100fdffffff00000000010000002000018006000100020000000c000700040000000000000007000600666f0000"], 0x34}}, 0x200040d0) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000340001000000000000000000010100800c"], 0x114}], 0x1}, 0x0) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) 0s ago: executing program 2 (id=1123): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000100)=""/13, 0x2}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="640000070000070800064000000101050001000700000008000640000003ff0800064000000007090102b3cac5e50073797a300000000008003e000000000408980d400000040000000640000000000900024eca739abba330b900"/104], 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) r1 = socket$kcm(0x10, 0x4, 0x10) socketpair(0x10, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="18000000190001dbdf251d01090004001280"], 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYRES64=r2, @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x40000000, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001914050e"], 0x18}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r10, @ANYRES32=r10, @ANYBLOB="2f0000001400000004"], 0x20) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="796900000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="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"/291], 0x1c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r12}, &(0x7f0000000040)=0x2, &(0x7f0000000240)=r3}, 0x20) r13 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="611087000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) bind$rds(r13, &(0x7f0000000640)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0xfffffc73) sendmsg$rds(r13, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x3c, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r13, 0x8983, &(0x7f00000001c0)={0x0, 'ipvlan1\x00', {0x4}, 0xff81}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) bind$bt_hci(r9, &(0x7f00000005c0)={0x1f, 0x1, 0x3}, 0x6) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="030000000000000002004e23e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000300000002004e207f8a56010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1414bb00"/514], 0x210) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. [ 83.017942][ T5826] cgroup: Unknown subsys name 'net' [ 83.112593][ T5826] cgroup: Unknown subsys name 'cpuset' [ 83.121861][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.842810][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.655436][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.663310][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.679106][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.687230][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.694772][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.703112][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.712553][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.720371][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.728394][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.736124][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.746288][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.754573][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.762358][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.772646][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.776407][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.781369][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.796274][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.803511][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.812885][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.813155][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.830800][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.834623][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.839005][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.846272][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.891370][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.547630][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 88.624779][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 88.810190][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 88.883884][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 88.961494][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.968909][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.977249][ T5838] bridge_slave_0: entered allmulticast mode [ 88.984873][ T5838] bridge_slave_0: entered promiscuous mode [ 88.994269][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 89.060898][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.068394][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.076510][ T5838] bridge_slave_1: entered allmulticast mode [ 89.083842][ T5838] bridge_slave_1: entered promiscuous mode [ 89.127898][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.135290][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.142709][ T5837] bridge_slave_0: entered allmulticast mode [ 89.150477][ T5837] bridge_slave_0: entered promiscuous mode [ 89.158672][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.165995][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.173268][ T5837] bridge_slave_1: entered allmulticast mode [ 89.181359][ T5837] bridge_slave_1: entered promiscuous mode [ 89.221544][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.284704][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.363109][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.370871][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.381231][ T5846] bridge_slave_0: entered allmulticast mode [ 89.388876][ T5846] bridge_slave_0: entered promiscuous mode [ 89.413595][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.439137][ T5838] team0: Port device team_slave_0 added [ 89.447624][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.454839][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.462744][ T5846] bridge_slave_1: entered allmulticast mode [ 89.471815][ T5846] bridge_slave_1: entered promiscuous mode [ 89.498370][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.537974][ T5838] team0: Port device team_slave_1 added [ 89.544169][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.551794][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.559298][ T5836] bridge_slave_0: entered allmulticast mode [ 89.567291][ T5836] bridge_slave_0: entered promiscuous mode [ 89.589498][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.596920][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.604142][ T5843] bridge_slave_0: entered allmulticast mode [ 89.612418][ T5843] bridge_slave_0: entered promiscuous mode [ 89.663637][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.671151][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.679140][ T5836] bridge_slave_1: entered allmulticast mode [ 89.687202][ T5836] bridge_slave_1: entered promiscuous mode [ 89.708558][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.716129][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.723525][ T5843] bridge_slave_1: entered allmulticast mode [ 89.731108][ T5843] bridge_slave_1: entered promiscuous mode [ 89.739687][ T5837] team0: Port device team_slave_0 added [ 89.749002][ T5837] team0: Port device team_slave_1 added [ 89.757000][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.763961][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.790456][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.820615][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.834737][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.872477][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.879629][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.906534][ T5159] Bluetooth: hci0: command tx timeout [ 89.909279][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.955328][ T5159] Bluetooth: hci3: command tx timeout [ 89.961197][ T5159] Bluetooth: hci1: command tx timeout [ 89.967343][ T5857] Bluetooth: hci4: command tx timeout [ 89.967359][ T5842] Bluetooth: hci2: command tx timeout [ 90.004219][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.017191][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.042481][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.056049][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.066161][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.073211][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.099315][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.113449][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.120825][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.147780][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.197905][ T5846] team0: Port device team_slave_0 added [ 90.263505][ T5846] team0: Port device team_slave_1 added [ 90.286390][ T5836] team0: Port device team_slave_0 added [ 90.294145][ T5843] team0: Port device team_slave_0 added [ 90.320577][ T5838] hsr_slave_0: entered promiscuous mode [ 90.327243][ T5838] hsr_slave_1: entered promiscuous mode [ 90.351116][ T5836] team0: Port device team_slave_1 added [ 90.372217][ T5843] team0: Port device team_slave_1 added [ 90.415881][ T5837] hsr_slave_0: entered promiscuous mode [ 90.422377][ T5837] hsr_slave_1: entered promiscuous mode [ 90.428791][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 90.434612][ T5837] Cannot create hsr debugfs directory [ 90.441230][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.448287][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.474301][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.487094][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.494090][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.520284][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.601064][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.608382][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.634722][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.647539][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.654510][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.680556][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.692278][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.699582][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.725764][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.738569][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.745929][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.772134][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.923764][ T5846] hsr_slave_0: entered promiscuous mode [ 90.930497][ T5846] hsr_slave_1: entered promiscuous mode [ 90.937773][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 90.943534][ T5846] Cannot create hsr debugfs directory [ 90.983904][ T5836] hsr_slave_0: entered promiscuous mode [ 90.990533][ T5836] hsr_slave_1: entered promiscuous mode [ 90.997548][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 91.003357][ T5836] Cannot create hsr debugfs directory [ 91.162640][ T5843] hsr_slave_0: entered promiscuous mode [ 91.169448][ T5843] hsr_slave_1: entered promiscuous mode [ 91.175839][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 91.181597][ T5843] Cannot create hsr debugfs directory [ 91.619455][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.641356][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.663727][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.703993][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.772492][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.791192][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.809197][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.830478][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.940678][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.955534][ T5857] Bluetooth: hci0: command tx timeout [ 91.961494][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.974394][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.009128][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.036094][ T5857] Bluetooth: hci4: command tx timeout [ 92.041578][ T5857] Bluetooth: hci1: command tx timeout [ 92.046321][ T5856] Bluetooth: hci2: command tx timeout [ 92.047278][ T5857] Bluetooth: hci3: command tx timeout [ 92.059870][ T121] cfg80211: failed to load regulatory.db [ 92.093330][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.107226][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.122750][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.151044][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.172865][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.282989][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.300299][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.321293][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.332479][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.363748][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.371115][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.380480][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.409683][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.416968][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.446606][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.579334][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.636697][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.653547][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.660709][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.692282][ T2955] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.699556][ T2955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.744159][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.830753][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.838013][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.870825][ T5837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.884044][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.903825][ T2938] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.911040][ T2938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.031027][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.113601][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.193403][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.232364][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.270352][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.293220][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.300484][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.348191][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.355457][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.401835][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.409090][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.429570][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.436827][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.525880][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.614769][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.650268][ T5838] veth0_vlan: entered promiscuous mode [ 93.709242][ T5838] veth1_vlan: entered promiscuous mode [ 93.779833][ T5837] veth0_vlan: entered promiscuous mode [ 93.821695][ T5836] veth0_vlan: entered promiscuous mode [ 93.834218][ T5837] veth1_vlan: entered promiscuous mode [ 93.899270][ T5836] veth1_vlan: entered promiscuous mode [ 93.923001][ T5838] veth0_macvtap: entered promiscuous mode [ 93.973686][ T5838] veth1_macvtap: entered promiscuous mode [ 94.044721][ T5857] Bluetooth: hci0: command tx timeout [ 94.074393][ T5837] veth0_macvtap: entered promiscuous mode [ 94.090821][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.117934][ T5857] Bluetooth: hci3: command tx timeout [ 94.117983][ T5159] Bluetooth: hci2: command tx timeout [ 94.123489][ T5857] Bluetooth: hci1: command tx timeout [ 94.130492][ T5856] Bluetooth: hci4: command tx timeout [ 94.142845][ T5837] veth1_macvtap: entered promiscuous mode [ 94.154071][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.198044][ T1155] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.207806][ T1155] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.219052][ T5836] veth0_macvtap: entered promiscuous mode [ 94.233719][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.243225][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.250782][ T1155] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.260964][ T1155] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.289481][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.317677][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.347018][ T5836] veth1_macvtap: entered promiscuous mode [ 94.354199][ T2955] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.364202][ T2955] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.388374][ T2955] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.402041][ T2955] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.531722][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.610516][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.638271][ T2955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.641728][ T5846] veth0_vlan: entered promiscuous mode [ 94.653097][ T2955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.718621][ T2955] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.734723][ T2955] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.750858][ T2955] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.784042][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.784739][ T2955] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.801949][ T5846] veth1_vlan: entered promiscuous mode [ 94.805099][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.891399][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.908886][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.984179][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.987487][ T5846] veth0_macvtap: entered promiscuous mode [ 95.001700][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.030448][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.063404][ T5846] veth1_macvtap: entered promiscuous mode [ 95.119692][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.133081][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.177230][ T5843] veth0_vlan: entered promiscuous mode [ 95.215924][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.267218][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.283037][ T5843] veth1_vlan: entered promiscuous mode [ 95.322075][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.347678][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.372233][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.383572][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.407932][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.426316][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.462363][ T5970] netlink: 'syz.3.6': attribute type 1 has an invalid length. [ 95.467254][ T5963] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 95.542536][ T5843] veth0_macvtap: entered promiscuous mode [ 95.743394][ T5977] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 95.757604][ T5843] veth1_macvtap: entered promiscuous mode [ 95.864599][ T5982] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 95.883819][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.911348][ T5982] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2'. [ 95.983870][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.009813][ T5987] syzkaller0: entered promiscuous mode [ 96.020815][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.046304][ T5987] syzkaller0: entered allmulticast mode [ 96.054711][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.066866][ T5986] tipc: Started in network mode [ 96.072131][ T5986] tipc: Node identity ba63af4f367d, cluster identity 4711 [ 96.081861][ T5986] tipc: Enabled bearer , priority 0 [ 96.116770][ T5159] Bluetooth: hci0: command tx timeout [ 96.122307][ T2938] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.161996][ T5985] tipc: Resetting bearer [ 96.195855][ T5159] Bluetooth: hci2: command tx timeout [ 96.201333][ T5159] Bluetooth: hci4: command tx timeout [ 96.207882][ T5856] Bluetooth: hci1: command tx timeout [ 96.209543][ T5985] tipc: Disabling bearer [ 96.213329][ T5856] Bluetooth: hci3: command tx timeout [ 96.247070][ T2938] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.256454][ T1108] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.293822][ T2955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.302851][ T2955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.339824][ T1108] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.445178][ T6005] syz.3.12 uses obsolete (PF_INET,SOCK_PACKET) [ 97.013769][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.042082][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.239059][ T6030] dummy0: entered promiscuous mode [ 97.246872][ T6030] macsec1: entered promiscuous mode [ 97.253039][ T6030] macsec1: entered allmulticast mode [ 97.259792][ T6030] dummy0: entered allmulticast mode [ 97.272487][ T6030] dummy0: left allmulticast mode [ 97.281097][ T6030] dummy0: left promiscuous mode [ 97.341055][ T2938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.371853][ T2938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.496535][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 97.534651][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'. [ 97.543952][ T6045] netlink: 'syz.0.21': attribute type 12 has an invalid length. [ 97.551990][ T6045] netlink: 'syz.0.21': attribute type 11 has an invalid length. [ 97.816211][ T6053] syzkaller0: entered promiscuous mode [ 97.848095][ T6053] syzkaller0: entered allmulticast mode [ 97.922062][ T6060] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.287804][ T6076] netlink: 'syz.0.27': attribute type 2 has an invalid length. [ 98.314255][ T6072] bridge_slave_0: left allmulticast mode [ 98.361187][ T6072] bridge_slave_0: left promiscuous mode [ 98.379488][ T6072] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.496998][ T6072] bridge_slave_1: left allmulticast mode [ 98.579511][ T6072] bridge_slave_1: left promiscuous mode [ 98.674727][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.767152][ T6072] bond0: (slave bond_slave_0): Releasing backup interface [ 98.894295][ T6072] bond0: (slave bond_slave_1): Releasing backup interface [ 98.980224][ T6072] team0: Port device team_slave_0 removed [ 99.014631][ T6072] team0: Port device team_slave_1 removed [ 99.029971][ T6072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.041967][ T6072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.056185][ T6072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.063754][ T6072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.123573][ T6082] tipc: Started in network mode [ 99.129164][ T6082] tipc: Node identity 7e93cf3776bc, cluster identity 4711 [ 99.152452][ T6082] tipc: Enabled bearer , priority 0 [ 99.183782][ T6087] syzkaller0: entered promiscuous mode [ 99.199002][ T6087] syzkaller0: entered allmulticast mode [ 99.251137][ T6101] tipc: Resetting bearer [ 99.372250][ T6101] tipc: Resetting bearer [ 99.386104][ T6101] tipc: Disabling bearer [ 99.491299][ T6112] netlink: 216 bytes leftover after parsing attributes in process `syz.3.34'. [ 99.531243][ T6112] netlink: 24 bytes leftover after parsing attributes in process `syz.3.34'. [ 99.562299][ T6112] netlink: 16 bytes leftover after parsing attributes in process `syz.3.34'. [ 100.095565][ T6137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.39'. [ 100.104538][ T6137] tc_dump_action: action bad kind [ 100.443913][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'. [ 100.871977][ T6151] Zero length message leads to an empty skb [ 101.053284][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.095064][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.245797][ T6164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.46'. [ 101.320929][ T6172] netlink: 'syz.2.48': attribute type 1 has an invalid length. [ 101.343043][ T6168] Bluetooth: MGMT ver 1.23 [ 101.357579][ T6168] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.367787][ T2938] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.408120][ T2938] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.472894][ T6167] vlan2: entered promiscuous mode [ 101.483245][ T6167] bond0: entered promiscuous mode [ 101.489956][ T6167] bond_slave_0: entered promiscuous mode [ 101.498055][ T6167] bond_slave_1: entered promiscuous mode [ 101.504169][ T6167] vlan2: entered allmulticast mode [ 101.510951][ T6167] bond0: entered allmulticast mode [ 101.517063][ T6167] bond_slave_0: entered allmulticast mode [ 101.523119][ T6167] bond_slave_1: entered allmulticast mode [ 101.562822][ T6173] bond1 (unregistering): Released all slaves [ 101.733313][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.53'. [ 102.158964][ T6210] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.254211][ T6212] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 102.263714][ T6212] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 102.283943][ T6212] team0: Failed to send options change via netlink (err -105) [ 102.324614][ T6212] team0: Port device batadv1 added [ 102.362559][ T6220] tipc: Enabling of bearer rejected, failed to enable media [ 102.387151][ T6221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.58'. [ 102.531773][ T6210] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.813446][ T6210] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.976318][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.64'. [ 103.002991][ T6210] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.181361][ T6258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.67'. [ 103.523045][ T6267] netlink: 28 bytes leftover after parsing attributes in process `syz.1.70'. [ 103.779529][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.832078][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.974279][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.072224][ T1108] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.636713][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.78'. [ 104.747088][ T6320] netlink: 'syz.4.80': attribute type 3 has an invalid length. [ 104.755543][ T6320] netlink: 156 bytes leftover after parsing attributes in process `syz.4.80'. [ 104.764545][ T6320] netlink: 'syz.4.80': attribute type 3 has an invalid length. [ 104.774342][ T6320] netlink: 156 bytes leftover after parsing attributes in process `syz.4.80'. [ 104.861151][ T6309] netlink: 36 bytes leftover after parsing attributes in process `syz.3.78'. [ 105.953745][ T6372] netlink: 'syz.1.92': attribute type 3 has an invalid length. [ 105.963015][ T6372] netlink: 'syz.1.92': attribute type 3 has an invalid length. [ 106.434729][ T2938] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.457050][ T2938] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.532032][ T2938] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.553685][ T2938] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.591210][ T6389] warning: `syz.4.96' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.726939][ T6393] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 107.183243][ T6412] netlink: 'syz.0.104': attribute type 3 has an invalid length. [ 107.205176][ T6412] __nla_validate_parse: 4 callbacks suppressed [ 107.205257][ T6412] netlink: 156 bytes leftover after parsing attributes in process `syz.0.104'. [ 107.221830][ T6412] netlink: 'syz.0.104': attribute type 3 has an invalid length. [ 107.230577][ T6412] netlink: 156 bytes leftover after parsing attributes in process `syz.0.104'. [ 107.590799][ T6432] netlink: 76 bytes leftover after parsing attributes in process `syz.0.109'. [ 107.601547][ T6431] netlink: 76 bytes leftover after parsing attributes in process `syz.0.109'. [ 107.816364][ T6428] syzkaller0: entered promiscuous mode [ 107.821953][ T6428] syzkaller0: entered allmulticast mode [ 107.867212][ T6451] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 107.888208][ T6447] netlink: 'syz.2.114': attribute type 1 has an invalid length. [ 107.915585][ T6447] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.114'. [ 108.098873][ T6460] sctp: [Deprecated]: syz.1.117 (pid 6460) Use of int in max_burst socket option deprecated. [ 108.098873][ T6460] Use struct sctp_assoc_value instead [ 108.121265][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'. [ 108.166102][ T6459] Driver unsupported XDP return value 0 on prog (id 60) dev N/A, expect packet loss! [ 110.014059][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.033573][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.209777][ T6508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.125'. [ 110.382323][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.128'. [ 110.701853][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.133'. [ 110.749710][ T6533] veth1_macvtap: left promiscuous mode [ 110.830832][ T6540] netlink: 'syz.1.132': attribute type 13 has an invalid length. [ 110.848283][ T6540] netlink: 'syz.1.132': attribute type 17 has an invalid length. [ 111.043321][ T6540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.287419][ T6555] netlink: 20 bytes leftover after parsing attributes in process `syz.2.137'. [ 111.320667][ T6555] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 111.328282][ T6555] IPv6: NLM_F_CREATE should be set when creating new route [ 111.335807][ T6555] IPv6: NLM_F_CREATE should be set when creating new route [ 112.440652][ T6595] dvmrp4: entered allmulticast mode [ 112.475293][ T6594] dvmrp4: left allmulticast mode [ 112.880949][ T6606] netlink: 'syz.0.151': attribute type 1 has an invalid length. [ 113.103874][ T6613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.122439][ T6615] __nla_validate_parse: 2 callbacks suppressed [ 113.122461][ T6615] netlink: 28 bytes leftover after parsing attributes in process `syz.3.150'. [ 113.299728][ T6617] netlink: 'syz.2.154': attribute type 1 has an invalid length. [ 113.401574][ T6617] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.431267][ T6624] vlan0: entered promiscuous mode [ 113.461437][ T6617] netlink: 'syz.2.154': attribute type 1 has an invalid length. [ 113.492361][ T6617] vlan0: entered allmulticast mode [ 113.497767][ T6617] veth1: entered allmulticast mode [ 113.511004][ T6617] bond1: (slave vlan0): making interface the new active one [ 113.521471][ T6617] bond1: (slave vlan0): Enslaving as an active interface with an up link [ 113.641302][ T6621] bond1: (slave veth3): Enslaving as an active interface with a down link [ 113.655561][ T6616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.933486][ T6641] netlink: 44 bytes leftover after parsing attributes in process `syz.0.160'. [ 113.972503][ T6642] netlink: 44 bytes leftover after parsing attributes in process `syz.0.160'. [ 114.023811][ T6650] netlink: 104 bytes leftover after parsing attributes in process `syz.4.163'. [ 114.067527][ T6651] netlink: 128 bytes leftover after parsing attributes in process `syz.3.161'. [ 114.284218][ T6664] netlink: 20 bytes leftover after parsing attributes in process `syz.0.164'. [ 114.655967][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.664724][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.107284][ T6680] netlink: 32 bytes leftover after parsing attributes in process `syz.0.171'. [ 115.197240][ T6682] netlink: 'syz.4.173': attribute type 7 has an invalid length. [ 115.230701][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.173'. [ 115.251376][ T6685] netlink: 24 bytes leftover after parsing attributes in process `syz.4.173'. [ 115.263009][ T6680] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 115.323709][ T6686] netlink: 24 bytes leftover after parsing attributes in process `syz.2.174'. [ 116.168390][ T6709] veth3: entered allmulticast mode [ 116.738470][ T6741] netlink: 'syz.2.188': attribute type 6 has an invalid length. [ 116.746766][ T6745] netlink: 'syz.2.188': attribute type 6 has an invalid length. [ 116.867977][ T6741] netlink: 'syz.2.188': attribute type 6 has an invalid length. [ 116.876100][ T6745] netlink: 'syz.2.188': attribute type 6 has an invalid length. [ 116.940557][ T2977] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.965615][ T2977] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.060433][ T2977] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.091672][ T6752] IPVS: Error joining to the multicast group [ 117.119574][ T6751] IPVS: Error joining to the multicast group [ 117.137773][ T2977] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.308487][ T6762] netlink: zone id is out of range [ 117.313716][ T6762] netlink: zone id is out of range [ 117.374321][ T6764] netlink: 'syz.1.193': attribute type 21 has an invalid length. [ 117.402913][ T6762] netlink: zone id is out of range [ 117.651127][ T6774] ip6erspan0: entered promiscuous mode [ 117.917061][ T6786] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 117.947023][ T6786] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 118.241343][ T6797] __nla_validate_parse: 15 callbacks suppressed [ 118.241362][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.205'. [ 118.372462][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.195'. [ 118.515860][ T6801] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.523770][ T6801] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.712487][ T6801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.713162][ T6806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.207'. [ 118.728960][ T6801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.917735][ T6814] netlink: 'syz.3.209': attribute type 15 has an invalid length. [ 119.035706][ T60] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.059921][ T60] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.145310][ T49] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.171521][ T49] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.214814][ T49] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.224313][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.212'. [ 119.245373][ T6822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.214'. [ 119.304556][ T49] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.327800][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 119.345188][ T49] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.394096][ T49] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.419612][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'. [ 119.476809][ T6834] netlink: 404 bytes leftover after parsing attributes in process `syz.1.214'. [ 119.532943][ T6834] netlink: 88 bytes leftover after parsing attributes in process `syz.1.214'. [ 119.597645][ T6834] netlink: 88 bytes leftover after parsing attributes in process `syz.1.214'. [ 119.631140][ T6833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.668981][ T6833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.733084][ T6833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.760213][ T6833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.933724][ T6848] netlink: 36 bytes leftover after parsing attributes in process `syz.4.220'. [ 120.368398][ T6879] bridge1: entered promiscuous mode [ 120.381307][ T6879] bridge1: entered allmulticast mode [ 120.445231][ T6879] team0: Port device bridge1 added [ 120.654508][ T6898] tipc: Started in network mode [ 120.661842][ T6898] tipc: Node identity 5ebc709cac57, cluster identity 4711 [ 120.685273][ T6898] tipc: Enabled bearer , priority 0 [ 120.745586][ T6899] syzkaller0: entered promiscuous mode [ 120.751221][ T6899] syzkaller0: entered allmulticast mode [ 120.964358][ T6899] tipc: Resetting bearer [ 121.008964][ T6899] tipc: Disabling bearer [ 121.455956][ T6937] openvswitch: netlink: Tunnel attr 2 has unexpected len 0 expected 4 [ 121.886174][ T6954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.267777][ T6971] pimreg: entered allmulticast mode [ 122.343078][ T6971] pimreg: left allmulticast mode [ 123.791642][ T7010] __nla_validate_parse: 4 callbacks suppressed [ 123.791666][ T7010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.259'. [ 124.140076][ T7014] netlink: 60 bytes leftover after parsing attributes in process `syz.1.262'. [ 124.161499][ T7014] syzkaller1: entered promiscuous mode [ 124.179844][ T7014] syzkaller1: entered allmulticast mode [ 124.973760][ T7043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.269'. [ 125.003273][ T7044] tipc: Enabled bearer , priority 0 [ 125.022655][ T7044] netlink: 'syz.2.271': attribute type 21 has an invalid length. [ 125.053492][ T7045] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 125.053599][ T5905] IPVS: starting estimator thread 0... [ 125.102264][ T7044] netlink: 'syz.2.271': attribute type 1 has an invalid length. [ 125.121143][ T7044] netlink: 144 bytes leftover after parsing attributes in process `syz.2.271'. [ 125.143277][ T7051] veth1_to_bond: entered allmulticast mode [ 125.169623][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'. [ 125.190513][ T7048] IPVS: using max 26 ests per chain, 62400 per kthread [ 125.248591][ T7044] bond0: (slave bond_slave_1): Releasing backup interface [ 125.332704][ T7058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.272'. [ 125.358778][ T7058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.272'. [ 125.370924][ T7044] veth1_to_bond (unregistering): left allmulticast mode [ 125.402405][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'. [ 125.456617][ T7051] syzkaller0: entered promiscuous mode [ 125.473136][ T7051] syzkaller0: entered allmulticast mode [ 125.591897][ T7042] tipc: Resetting bearer [ 125.690543][ T7042] tipc: Disabling bearer [ 125.912820][ T7073] netlink: 24 bytes leftover after parsing attributes in process `syz.3.277'. [ 126.044880][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.280'. [ 126.099286][ T43] IPVS: starting estimator thread 0... [ 126.106000][ T7080] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 126.205426][ T7081] IPVS: using max 25 ests per chain, 60000 per kthread [ 126.618776][ T7099] netlink: 'syz.2.286': attribute type 1 has an invalid length. [ 127.159747][ T5944] hid-generic 0005:10CF:0009.0001: item fetching failed at offset 0/2 [ 127.189772][ T5944] hid-generic 0005:10CF:0009.0001: probe with driver hid-generic failed with error -22 [ 127.337730][ T7109] bridge_slave_0: left allmulticast mode [ 127.346639][ T7109] bridge_slave_0: left promiscuous mode [ 127.352512][ T7109] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.390323][ T7109] bridge_slave_1: left allmulticast mode [ 127.433043][ T7109] bridge_slave_1: left promiscuous mode [ 127.458488][ T7109] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.480571][ T7109] bond0: (slave bond_slave_0): Releasing backup interface [ 127.499897][ T7109] bond0: (slave bond_slave_1): Releasing backup interface [ 127.534481][ T7109] team0: Port device team_slave_0 removed [ 127.553331][ T7109] team0: Port device team_slave_1 removed [ 127.561850][ T7109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.572094][ T7109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.584001][ T7109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.592071][ T7109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.619887][ T7109] team0: Port device batadv1 removed [ 128.016677][ T7140] veth0: entered promiscuous mode [ 128.689977][ T7172] tipc: Can't bind to reserved service type 0 [ 128.762805][ T7172] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.937262][ T7169] syz.2.303 (7169) used greatest stack depth: 15096 bytes left [ 129.026669][ T7184] __nla_validate_parse: 6 callbacks suppressed [ 129.026691][ T7184] netlink: 120 bytes leftover after parsing attributes in process `syz.0.307'. [ 129.170321][ T30] audit: type=1800 audit(1754019967.819:2): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.305" name="cgroup.controllers" dev="tmpfs" ino=311 res=0 errno=0 [ 129.925954][ T7234] netlink: 96 bytes leftover after parsing attributes in process `syz.0.322'. [ 130.247078][ T7244] netlink: 60 bytes leftover after parsing attributes in process `syz.2.325'. [ 130.294181][ T7244] netlink: 35 bytes leftover after parsing attributes in process `syz.2.325'. [ 130.339343][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.326'. [ 130.442055][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.327'. [ 130.822578][ T7264] netlink: 28 bytes leftover after parsing attributes in process `syz.0.331'. [ 130.927490][ T7270] lo speed is unknown, defaulting to 1000 [ 131.327567][ T7270] lo speed is unknown, defaulting to 1000 [ 131.339058][ T7270] lo speed is unknown, defaulting to 1000 [ 131.403389][ T12] tipc: Subscription rejected, illegal request [ 131.446784][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.338'. [ 131.466581][ T7291] netlink: 312 bytes leftover after parsing attributes in process `syz.0.338'. [ 131.507328][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.338'. [ 131.637376][ T7270] infiniband syz0: set down [ 131.642198][ T7270] infiniband syz0: added lo [ 131.663137][ T5944] lo speed is unknown, defaulting to 1000 [ 131.777911][ T7268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.838125][ T7270] RDS/IB: syz0: added [ 131.858797][ T7270] smc: adding ib device syz0 with port count 1 [ 131.900688][ T7270] smc: ib device syz0 port 1 has pnetid [ 131.954272][ T43] lo speed is unknown, defaulting to 1000 [ 131.980079][ T7270] lo speed is unknown, defaulting to 1000 [ 132.855347][ T7343] raw_sendmsg: syz.3.350 forgot to set AF_INET. Fix it! [ 133.003528][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.015047][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.037640][ T7270] lo speed is unknown, defaulting to 1000 [ 133.949566][ T7270] lo speed is unknown, defaulting to 1000 [ 134.602773][ T7270] lo speed is unknown, defaulting to 1000 [ 134.680186][ T7384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.052357][ T7270] lo speed is unknown, defaulting to 1000 [ 135.294722][ T7433] veth1_to_bond: entered allmulticast mode [ 135.303593][ T7433] __nla_validate_parse: 16 callbacks suppressed [ 135.303612][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.367'. [ 135.494423][ T7433] veth1_to_bond (unregistering): left allmulticast mode [ 135.530190][ T7437] tipc: Started in network mode [ 135.536232][ T7437] tipc: Node identity 6e3f391400fe, cluster identity 4711 [ 135.543563][ T7437] tipc: Enabled bearer , priority 0 [ 135.559783][ T7437] syzkaller0: entered promiscuous mode [ 135.566367][ T7437] syzkaller0: entered allmulticast mode [ 135.601484][ T7437] tipc: Resetting bearer [ 135.619539][ T7385] rdma_rxe: rxe_newlink: failed to add lo [ 135.778561][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.369'. [ 135.797250][ T7435] tipc: Resetting bearer [ 135.839956][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.369'. [ 135.855677][ T7435] tipc: Disabling bearer [ 135.901079][ T7450] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 136.023154][ T7454] netlink: 'syz.4.370': attribute type 4 has an invalid length. [ 136.854572][ T7497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 136.902859][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'. [ 137.199444][ T7512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.388'. [ 137.337976][ T7517] lo speed is unknown, defaulting to 1000 [ 137.769148][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.394'. [ 137.791468][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.394'. [ 138.505269][ T7553] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 138.994285][ T7550] veth0_virt_wifi: renamed from veth0_macvtap [ 139.310040][ T7571] netlink: 32 bytes leftover after parsing attributes in process `syz.1.403'. [ 139.335452][ T7571] nbd: couldn't find device at index 536870912 [ 139.692694][ T7584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.036149][ T7598] netlink: 'syz.0.412': attribute type 2 has an invalid length. [ 140.053451][ T7600] tipc: Failed to remove unknown binding: 66,1,1/0:2775134807/2775134809 [ 140.100607][ T7605] netlink: 24 bytes leftover after parsing attributes in process `syz.1.414'. [ 140.325348][ T7615] __nla_validate_parse: 2 callbacks suppressed [ 140.325377][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'. [ 140.343875][ T7615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.415'. [ 140.540166][ T7611] hsr_slave_1 (unregistering): left promiscuous mode [ 140.563756][ T7620] pimreg: entered allmulticast mode [ 140.575970][ T7620] pimreg: left allmulticast mode [ 140.694102][ T7623] netlink: 248 bytes leftover after parsing attributes in process `syz.2.419'. [ 141.156111][ T7633] lo speed is unknown, defaulting to 1000 [ 141.377460][ T7649] (unnamed net_device) (uninitialized): option lacp_active: invalid value (18) [ 141.691703][ T7661] netlink: 'syz.2.429': attribute type 1 has an invalid length. [ 141.695980][ T7658] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 141.778258][ T7661] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.845958][ T7663] bond2: (slave veth5): Enslaving as an active interface with a down link [ 141.981714][ T7661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.088410][ T7667] netlink: 36 bytes leftover after parsing attributes in process `syz.3.430'. [ 142.147039][ T7646] lo speed is unknown, defaulting to 1000 [ 142.180265][ T7673] vlan1: entered promiscuous mode [ 142.195327][ T7673] gretap0: entered promiscuous mode [ 142.208244][ T7671] netlink: 44 bytes leftover after parsing attributes in process `syz.1.431'. [ 142.245350][ T7671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.389992][ T7679] netlink: 248 bytes leftover after parsing attributes in process `syz.3.434'. [ 143.283819][ T7695] lo speed is unknown, defaulting to 1000 [ 143.376525][ T7722] netlink: 16 bytes leftover after parsing attributes in process `syz.2.442'. [ 143.452565][ T7694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.986209][ T7741] vlan2: entered promiscuous mode [ 144.174487][ T7743] netlink: 248 bytes leftover after parsing attributes in process `syz.2.446'. [ 144.177082][ T7723] lo speed is unknown, defaulting to 1000 [ 144.511766][ T7751] sctp: [Deprecated]: syz.3.448 (pid 7751) Use of int in max_burst socket option deprecated. [ 144.511766][ T7751] Use struct sctp_assoc_value instead [ 144.639846][ T7755] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607) [ 144.650542][ T7755] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 145.242205][ T7766] netlink: 'syz.2.454': attribute type 1 has an invalid length. [ 145.403969][ T7766] bond3: entered promiscuous mode [ 145.413241][ T7766] bond3: entered allmulticast mode [ 145.443731][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 145.749760][ T7774] netlink: 'syz.3.456': attribute type 9 has an invalid length. [ 145.798599][ T7774] netlink: 'syz.3.456': attribute type 7 has an invalid length. [ 145.830868][ T7774] netlink: 'syz.3.456': attribute type 8 has an invalid length. [ 146.097981][ T7778] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.103616][ T7780] netlink: 28 bytes leftover after parsing attributes in process `syz.4.459'. [ 146.349841][ T7778] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.453573][ T7778] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.471750][ T7784] netlink: 'syz.3.460': attribute type 10 has an invalid length. [ 146.523962][ T7784] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 146.545791][ T7790] netlink: 'syz.3.460': attribute type 10 has an invalid length. [ 146.586188][ T7778] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.603187][ T7784] netlink: 'syz.3.460': attribute type 10 has an invalid length. [ 146.626180][ T7790] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 146.663502][ T7790] team0: Failed to send options change via netlink (err -105) [ 146.686809][ T7790] team0: Port device dummy0 added [ 146.714062][ T7784] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 146.753616][ T7784] team0: Failed to send options change via netlink (err -105) [ 146.783083][ T7784] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 146.832024][ T7784] team0: Port device dummy0 removed [ 146.863010][ T7784] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 147.017201][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.049176][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.117905][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.155714][ T7816] netlink: 32 bytes leftover after parsing attributes in process `syz.1.469'. [ 147.173296][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.183372][ T7824] tipc: Enabled bearer , priority 0 [ 147.199702][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.468'. [ 147.214024][ T7824] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 147.234046][ T7824] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 147.243126][ T7824] tipc: Resetting bearer [ 147.282825][ T7824] tipc: Resetting bearer [ 147.371098][ T30] audit: type=1804 audit(1754019986.019:3): pid=7829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.473" name="/newroot/96/cgroup.controllers" dev="tmpfs" ino=505 res=1 errno=0 [ 147.457584][ T30] audit: type=1800 audit(1754019986.049:4): pid=7829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.473" name="cgroup.controllers" dev="tmpfs" ino=505 res=0 errno=0 [ 147.749252][ T13] tipc: Resetting bearer [ 147.788890][ T7850] netlink: 'syz.4.480': attribute type 2 has an invalid length. [ 147.840887][ T7850] netlink: 64 bytes leftover after parsing attributes in process `syz.4.480'. [ 148.086179][ T7864] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 148.093827][ T7864] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 148.196364][ T121] tipc: Node number set to 4075516060 [ 148.363345][ T7876] netlink: 52 bytes leftover after parsing attributes in process `syz.3.484'. [ 148.437005][ T7876] netlink: 52 bytes leftover after parsing attributes in process `syz.3.484'. [ 148.494554][ T7878] netlink: 16 bytes leftover after parsing attributes in process `syz.3.484'. [ 148.506058][ T7876] netlink: 52 bytes leftover after parsing attributes in process `syz.3.484'. [ 148.697420][ T7879] lo speed is unknown, defaulting to 1000 [ 149.558361][ T7901] netlink: 248 bytes leftover after parsing attributes in process `syz.1.491'. [ 149.715573][ T7905] trusted_key: syz.2.492 sent an empty control message without MSG_MORE. [ 150.344681][ T7932] veth1_to_bond: entered allmulticast mode [ 150.416455][ T7932] bond0: (slave bond_slave_1): Releasing backup interface [ 150.428918][ T7932] bond_slave_1 (unregistering): left promiscuous mode [ 150.436766][ T7932] bond_slave_1 (unregistering): left allmulticast mode [ 150.500477][ T7932] veth1_to_bond (unregistering): left allmulticast mode [ 150.514874][ T7935] __nla_validate_parse: 3 callbacks suppressed [ 150.533850][ T7935] netlink: 76 bytes leftover after parsing attributes in process `syz.3.499'. [ 150.618325][ T7942] netlink: 20 bytes leftover after parsing attributes in process `syz.4.501'. [ 150.628976][ T7930] lo speed is unknown, defaulting to 1000 [ 150.812327][ T7948] netlink: 96 bytes leftover after parsing attributes in process `syz.2.504'. [ 151.036406][ T7955] netlink: 248 bytes leftover after parsing attributes in process `syz.3.506'. [ 151.252424][ T7961] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 151.337846][ T7961] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 151.351844][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.510'. [ 151.583816][ T7976] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 151.911729][ T7987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 152.164667][ T7999] sctp: [Deprecated]: syz.3.518 (pid 7999) Use of int in maxseg socket option. [ 152.164667][ T7999] Use struct sctp_assoc_value instead [ 152.343471][ T8007] netlink: 248 bytes leftover after parsing attributes in process `syz.0.520'. [ 152.393969][ T8009] netlink: 'syz.3.522': attribute type 39 has an invalid length. [ 152.422540][ T8012] netlink: 'syz.3.522': attribute type 39 has an invalid length. [ 152.484798][ T8015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.523'. [ 152.983504][ T8043] tipc: Enabled bearer , priority 0 [ 152.992065][ T8042] tun0: tun_chr_ioctl cmd 21731 [ 153.165302][ T8043] syzkaller0: entered promiscuous mode [ 153.170915][ T8043] syzkaller0: entered allmulticast mode [ 153.215055][ T8038] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 153.257025][ T8038] syzkaller0: entered promiscuous mode [ 153.271196][ T8038] syzkaller0: entered allmulticast mode [ 153.486564][ T8067] netlink: 36 bytes leftover after parsing attributes in process `syz.2.532'. [ 153.527759][ T8067] netlink: 16 bytes leftover after parsing attributes in process `syz.2.532'. [ 153.639343][ T8067] netlink: 36 bytes leftover after parsing attributes in process `syz.2.532'. [ 153.734295][ T8067] netlink: 'syz.2.532': attribute type 1 has an invalid length. [ 153.762394][ T8067] netlink: 'syz.2.532': attribute type 7 has an invalid length. [ 154.106439][ T43] tipc: Node number set to 1858156820 [ 156.050263][ T8041] tipc: Resetting bearer [ 156.066992][ T8041] tipc: Disabling bearer [ 156.084664][ T8067] : entered promiscuous mode [ 156.222204][ T8094] __nla_validate_parse: 2 callbacks suppressed [ 156.222225][ T8094] netlink: 24 bytes leftover after parsing attributes in process `syz.4.537'. [ 156.716923][ T8120] netem: change failed [ 156.954328][ T8125] bridge_slave_1: left allmulticast mode [ 156.985168][ T8125] bridge_slave_1: left promiscuous mode [ 156.991363][ T8125] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.021385][ T8125] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 157.058944][ T8127] netlink: 248 bytes leftover after parsing attributes in process `syz.2.547'. [ 157.294047][ T8135] netlink: 788 bytes leftover after parsing attributes in process `syz.3.548'. [ 157.513252][ T8139] netlink: 20 bytes leftover after parsing attributes in process `syz.2.549'. [ 157.598378][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.551'. [ 157.884306][ T8156] openvswitch: netlink: Flow actions attr not present in new flow. [ 158.218857][ T8170] netlink: 248 bytes leftover after parsing attributes in process `syz.0.559'. [ 158.474836][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.560'. [ 159.180674][ T8203] netlink: 'syz.1.566': attribute type 10 has an invalid length. [ 159.197543][ T8201] netlink: 14 bytes leftover after parsing attributes in process `syz.2.567'. [ 159.211859][ T8203] netlink: 40 bytes leftover after parsing attributes in process `syz.1.566'. [ 159.226687][ T8194] syzkaller1: entered promiscuous mode [ 159.239594][ T8205] netlink: 16 bytes leftover after parsing attributes in process `syz.1.566'. [ 159.250295][ T8194] syzkaller1: entered allmulticast mode [ 159.347890][ T8203] team0: Port device geneve0 added [ 159.372181][ T8201] hsr_slave_0: left promiscuous mode [ 159.381379][ T8201] hsr_slave_1: left promiscuous mode [ 159.437712][ T8205] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 159.585691][ T8212] tipc: Enabled bearer , priority 0 [ 159.606432][ T8212] syzkaller0: entered promiscuous mode [ 159.611975][ T8212] syzkaller0: entered allmulticast mode [ 159.677750][ T8212] tipc: Resetting bearer [ 159.744514][ T8219] tipc: Resetting bearer [ 159.816436][ T8219] netlink: 'syz.2.572': attribute type 1 has an invalid length. [ 159.863418][ T8211] tipc: Resetting bearer [ 159.911290][ T8211] tipc: Disabling bearer [ 160.874556][ T8251] lo speed is unknown, defaulting to 1000 [ 160.913991][ T8262] netlink: 'syz.0.582': attribute type 4 has an invalid length. [ 160.988062][ T8266] netlink: 'syz.0.582': attribute type 4 has an invalid length. [ 161.009776][ T8260] IPVS: persistence engine module ip_vs_pe_ not found [ 161.094249][ T8269] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 161.276530][ T8273] veth1_to_batadv: entered promiscuous mode [ 161.296343][ T8273] __nla_validate_parse: 14 callbacks suppressed [ 161.296363][ T8273] netlink: 40 bytes leftover after parsing attributes in process `syz.3.585'. [ 161.912927][ T8296] netlink: 248 bytes leftover after parsing attributes in process `syz.0.594'. [ 162.288892][ T8314] netlink: 'syz.3.600': attribute type 21 has an invalid length. [ 162.296819][ T8314] netlink: 'syz.3.600': attribute type 22 has an invalid length. [ 162.307999][ T8314] netlink: 'syz.3.600': attribute type 23 has an invalid length. [ 162.323070][ T8314] netlink: 'syz.3.600': attribute type 25 has an invalid length. [ 162.336690][ T8314] netlink: 96 bytes leftover after parsing attributes in process `syz.3.600'. [ 162.509680][ T8323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.602'. [ 162.539565][ T8325] tipc: Enabled bearer , priority 0 [ 162.573753][ T8321] syzkaller0: entered promiscuous mode [ 162.581503][ T8321] syzkaller0: entered allmulticast mode [ 162.699108][ T8321] tipc: Resetting bearer [ 162.731648][ T8320] tipc: Resetting bearer [ 162.747887][ T8320] tipc: Disabling bearer [ 162.802213][ T8331] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 162.824718][ T8331] netlink: 52 bytes leftover after parsing attributes in process `syz.4.605'. [ 162.861729][ T8333] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.606'. [ 162.870081][ T8331] netlink: 'syz.4.605': attribute type 10 has an invalid length. [ 162.879312][ T8331] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 162.907374][ T8331] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 163.101326][ T8345] netlink: 248 bytes leftover after parsing attributes in process `syz.0.608'. [ 163.197103][ T8347] netlink: 148 bytes leftover after parsing attributes in process `syz.2.613'. [ 163.211276][ T8347] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 163.345456][ T8341] syzkaller0: entered promiscuous mode [ 163.351006][ T8341] syzkaller0: entered allmulticast mode [ 163.377642][ T8356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.612'. [ 163.400535][ T8356] netlink: 52 bytes leftover after parsing attributes in process `syz.0.612'. [ 163.424411][ T8358] nbd: must specify at least one socket [ 163.798978][ T8363] geneve2: entered promiscuous mode [ 163.804271][ T8363] geneve2: entered allmulticast mode [ 163.833159][ T1108] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.844309][ T1108] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.859912][ T1108] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.869384][ T1108] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.933261][ T8368] netlink: 'syz.3.618': attribute type 2 has an invalid length. [ 165.171800][ T8421] tipc: Started in network mode [ 165.185382][ T8421] tipc: Node identity 5e7e305d1879, cluster identity 4711 [ 165.203006][ T8421] tipc: Enabled bearer , priority 0 [ 165.220637][ T8423] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 165.296324][ T8421] syzkaller0: entered promiscuous mode [ 165.301894][ T8421] syzkaller0: entered allmulticast mode [ 165.420655][ T8421] tipc: Resetting bearer [ 165.464331][ T8420] tipc: Resetting bearer [ 165.494150][ T8420] tipc: Disabling bearer [ 165.789338][ T8446] netlink: 'syz.4.641': attribute type 29 has an invalid length. [ 165.893930][ T8451] netlink: 'syz.4.641': attribute type 29 has an invalid length. [ 166.051784][ T8453] lo speed is unknown, defaulting to 1000 [ 166.990229][ T8505] __nla_validate_parse: 12 callbacks suppressed [ 166.990253][ T8505] netlink: 40 bytes leftover after parsing attributes in process `syz.3.655'. [ 167.101901][ T8500] vlan3: entered promiscuous mode [ 167.131706][ T8500] team0: entered promiscuous mode [ 167.152344][ T8500] team_slave_0: entered promiscuous mode [ 167.180378][ T8500] team_slave_1: entered promiscuous mode [ 167.369456][ T8518] netlink: 128 bytes leftover after parsing attributes in process `syz.4.658'. [ 167.548814][ T8528] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 167.602481][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.661'. [ 167.780549][ T8546] netlink: 'syz.1.660': attribute type 3 has an invalid length. [ 167.793688][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'. [ 168.997713][ T8573] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 169.092525][ T8573] netlink: 14 bytes leftover after parsing attributes in process `syz.4.671'. [ 169.449887][ T8591] netlink: 'syz.0.677': attribute type 5 has an invalid length. [ 170.113383][ T8609] pim6reg: entered allmulticast mode [ 170.236220][ T8615] netlink: 'syz.3.683': attribute type 1 has an invalid length. [ 170.280637][ T8615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.683'. [ 170.418329][ T8617] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 170.637609][ T8639] netlink: 256 bytes leftover after parsing attributes in process `syz.0.688'. [ 170.684465][ T8634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.682'. [ 170.725081][ T8634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.682'. [ 170.775918][ T8636] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 170.792316][ T8641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.689'. [ 170.951303][ T8643] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 171.683034][ T8678] macsec1: entered promiscuous mode [ 171.696056][ T8678] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 171.730958][ T8678] macsec1: entered allmulticast mode [ 171.761188][ T8678] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 171.802712][ T8690] dummy0: entered promiscuous mode [ 171.813891][ T8690] macsec0: entered promiscuous mode [ 171.820130][ T8690] macsec0: entered allmulticast mode [ 171.861046][ T8690] dummy0: entered allmulticast mode [ 171.883266][ T8690] dummy0: left allmulticast mode [ 171.889457][ T8658] netlink: 'syz.3.694': attribute type 83 has an invalid length. [ 171.921202][ T8690] dummy0: left promiscuous mode [ 172.076929][ T8697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.137359][ T8697] lo speed is unknown, defaulting to 1000 [ 172.584386][ T8715] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 173.093214][ T8747] __nla_validate_parse: 11 callbacks suppressed [ 173.093235][ T8747] netlink: 24 bytes leftover after parsing attributes in process `syz.0.723'. [ 173.332707][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 173.537451][ T8766] pim6reg: entered allmulticast mode [ 174.403294][ T8802] netlink: 'syz.3.738': attribute type 12 has an invalid length. [ 174.413329][ T8802] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.738'. [ 174.919273][ T8814] netlink: 244 bytes leftover after parsing attributes in process `syz.3.742'. [ 174.961048][ T8814] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 174.988139][ T8814] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 175.140283][ T8822] tipc: Enabling of bearer rejected, already enabled [ 175.471033][ T8840] netlink: 248 bytes leftover after parsing attributes in process `syz.0.754'. [ 175.489147][ T8841] lo speed is unknown, defaulting to 1000 [ 175.593867][ T8845] netlink: 14 bytes leftover after parsing attributes in process `syz.4.756'. [ 175.618459][ T8845] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 175.639859][ T8848] netlink: 40 bytes leftover after parsing attributes in process `syz.1.755'. [ 175.689841][ T8845] bond0 (unregistering): Released all slaves [ 175.872693][ T8859] gtp0: entered promiscuous mode [ 175.883137][ T8859] gtp0: entered allmulticast mode [ 176.395785][ T8884] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.766'. [ 176.439470][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.765'. [ 176.484364][ T8882] netlink: 28 bytes leftover after parsing attributes in process `syz.4.765'. [ 176.524215][ T8884] bond_slave_0: entered promiscuous mode [ 176.530342][ T8884] bond_slave_1: entered promiscuous mode [ 176.536275][ T8884] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 176.543928][ T8884] dummy0: entered promiscuous mode [ 176.608298][ T8884] bond_slave_0: left promiscuous mode [ 176.613926][ T8884] bond_slave_1: left promiscuous mode [ 176.619516][ T8884] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 176.626736][ T8884] dummy0: left promiscuous mode [ 176.746509][ T8882] geneve2: entered promiscuous mode [ 176.751997][ T8882] geneve2: entered allmulticast mode [ 176.760186][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.843829][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.875486][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.900504][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.909903][ T8890] nbd: must specify at least one socket [ 177.319674][ T8903] netlink: 'syz.1.771': attribute type 4 has an invalid length. [ 177.584438][ T8911] netlink: 'syz.3.773': attribute type 1 has an invalid length. [ 177.755059][ T5857] Bluetooth: hci4: link tx timeout [ 177.761635][ T5857] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.906849][ T8921] netlink: 'syz.1.778': attribute type 1 has an invalid length. [ 178.236007][ T8940] __nla_validate_parse: 5 callbacks suppressed [ 178.236028][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.784'. [ 178.259314][ T8938] netlink: 'syz.4.783': attribute type 10 has an invalid length. [ 178.280159][ T8938] netlink: 40 bytes leftover after parsing attributes in process `syz.4.783'. [ 178.292388][ T8940] geneve2: entered promiscuous mode [ 178.343335][ T8938] team0: Port device geneve0 added [ 178.356307][ T8944] netlink: 40159 bytes leftover after parsing attributes in process `syz.1.785'. [ 178.541493][ T8953] netlink: 16 bytes leftover after parsing attributes in process `syz.0.788'. [ 178.793482][ T8959] @ÿ: renamed from bond_slave_0 (while UP) [ 178.924370][ T8955] IPVS: Scheduler module ip_vs_sip not found [ 179.795186][ T5857] Bluetooth: hci4: command 0x0406 tx timeout [ 179.959210][ T9014] netlink: 248 bytes leftover after parsing attributes in process `syz.4.803'. [ 180.143648][ T9019] lo speed is unknown, defaulting to 1000 [ 180.166814][ T9029] netlink: 'syz.0.804': attribute type 4 has an invalid length. [ 180.324741][ T9031] mac80211_hwsim hwsim8 wlan0 (unregistering): left allmulticast mode [ 180.339188][ T9031] mac80211_hwsim hwsim8 wlan0 (unregistering): left promiscuous mode [ 180.876215][ T9062] netlink: 20 bytes leftover after parsing attributes in process `syz.2.813'. [ 180.977851][ T9068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.815'. [ 180.990578][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.815'. [ 181.184275][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.815'. [ 181.237163][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.815'. [ 181.297524][ T9068] bridge19: entered promiscuous mode [ 181.307787][ T9068] bridge19: entered allmulticast mode [ 181.570838][ T9099] veth1_macvtap: left promiscuous mode [ 181.785791][ T9111] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 182.094356][ T9124] bridge_slave_0: left allmulticast mode [ 182.109289][ T9124] bridge_slave_0: left promiscuous mode [ 182.157781][ T9124] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.426028][ T9131] tipc: Enabled bearer , priority 0 [ 182.428168][ T9133] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 182.606506][ T9130] tipc: Disabling bearer [ 182.953360][ T9157] bridge21: the hash_elasticity option has been deprecated and is always 16 [ 183.361369][ T9176] __nla_validate_parse: 11 callbacks suppressed [ 183.361391][ T9176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.846'. [ 183.413204][ T9177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.846'. [ 183.482334][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.847'. [ 183.491871][ T9179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.847'. [ 183.503652][ T9179] netlink: 'syz.4.847': attribute type 13 has an invalid length. [ 183.521640][ T9179] netlink: 'syz.4.847': attribute type 12 has an invalid length. [ 183.841603][ T9200] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 183.864578][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.852'. [ 184.574498][ T9231] delete_channel: no stack [ 184.609113][ T9236] netlink: 56 bytes leftover after parsing attributes in process `syz.2.859'. [ 185.023086][ T9235] geneve2: left promiscuous mode [ 185.035016][ T9235] geneve2: left allmulticast mode [ 185.048711][ T1108] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.084453][ T1108] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.104471][ T1108] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.115424][ T1108] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.134558][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.865'. [ 185.155011][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.865'. [ 185.178053][ T9252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.866'. [ 185.192146][ T9252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.866'. [ 185.637901][ T9268] lo speed is unknown, defaulting to 1000 [ 185.835008][ T9283] netlink: 'syz.0.874': attribute type 1 has an invalid length. [ 185.913228][ T9283] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.282743][ T9296] sctp: [Deprecated]: syz.0.876 (pid 9296) Use of int in max_burst socket option. [ 186.282743][ T9296] Use struct sctp_assoc_value instead [ 187.347426][ T9334] lo speed is unknown, defaulting to 1000 [ 188.457238][ T9370] netlink: 'syz.0.896': attribute type 4 has an invalid length. [ 188.472105][ T9370] netlink: 'syz.0.896': attribute type 4 has an invalid length. [ 188.587979][ T9373] __nla_validate_parse: 69 callbacks suppressed [ 188.588002][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.898'. [ 188.616772][ T9374] netlink: 132 bytes leftover after parsing attributes in process `syz.1.897'. [ 188.751002][ T9378] openvswitch: netlink: IPv4 tun info is not correct [ 189.190320][ T9399] netlink: 24 bytes leftover after parsing attributes in process `syz.2.906'. [ 189.417780][ T9399] lo speed is unknown, defaulting to 1000 [ 190.190251][ T9419] netlink: 'syz.3.909': attribute type 11 has an invalid length. [ 190.223340][ T9417] geneve3: entered promiscuous mode [ 190.238846][ T1155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.257492][ T1155] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.340354][ T9426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.914'. [ 190.375499][ T9426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.914'. [ 190.390212][ T1155] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.410104][ T1155] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.430400][ T9421] caif0: entered allmulticast mode [ 190.528257][ T9421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.913'. [ 190.573806][ T9420] caif0: left allmulticast mode [ 191.401547][ T9467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.921'. [ 191.432415][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.922'. [ 191.451655][ T9467] netlink: 32 bytes leftover after parsing attributes in process `syz.3.921'. [ 191.471486][ T9467] gretap2: entered promiscuous mode [ 191.652831][ T9476] netlink: 2 bytes leftover after parsing attributes in process `syz.0.923'. [ 191.656106][ T9479] syz_tun: entered allmulticast mode [ 191.665618][ T9476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.830817][ T9488] batadv1: entered promiscuous mode [ 191.841142][ T9488] batadv1: entered allmulticast mode [ 191.866853][ T9487] lo speed is unknown, defaulting to 1000 [ 191.882829][ T9477] syz_tun: left allmulticast mode [ 192.103703][ T9495] netlink: 'syz.2.929': attribute type 3 has an invalid length. [ 192.330432][ T9507] netlink: 'syz.1.931': attribute type 99 has an invalid length. [ 193.476810][ T9538] lo speed is unknown, defaulting to 1000 [ 193.616517][ T9545] bond0: option mode: unable to set because the bond device has slaves [ 194.147370][ T9563] __nla_validate_parse: 6 callbacks suppressed [ 194.147390][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.944'. [ 194.178445][ T9547] lo speed is unknown, defaulting to 1000 [ 194.195697][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.944'. [ 194.448273][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.501078][ T9575] geneve3: entered promiscuous mode [ 194.662813][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.949'. [ 194.714775][ T9581] veth5: entered allmulticast mode [ 194.806549][ T9583] sctp: [Deprecated]: syz.0.950 (pid 9583) Use of int in maxseg socket option. [ 194.806549][ T9583] Use struct sctp_assoc_value instead [ 194.898616][ T9560] lo speed is unknown, defaulting to 1000 [ 195.048822][ T9590] netlink: 3 bytes leftover after parsing attributes in process `syz.0.952'. [ 195.163047][ T9598] netlink: 48 bytes leftover after parsing attributes in process `syz.0.952'. [ 196.199006][ T9605] netlink: 48 bytes leftover after parsing attributes in process `syz.0.955'. [ 196.563320][ T9608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.956'. [ 196.786024][ T9616] 8021q: VLANs not supported on lo [ 196.827129][ T9619] netlink: 56 bytes leftover after parsing attributes in process `syz.3.960'. [ 196.843455][ T9621] lo speed is unknown, defaulting to 1000 [ 197.555700][ T9642] netlink: 'syz.2.964': attribute type 2 has an invalid length. [ 197.761209][ T9647] bond0: entered promiscuous mode [ 197.775923][ T9647] bond_slave_0: entered promiscuous mode [ 197.798183][ T9647] batadv0: entered promiscuous mode [ 197.804389][ T9647] debugfs: 'hsr0' already exists in 'hsr' [ 197.824121][ T9647] Cannot create hsr debugfs directory [ 197.845341][ T9647] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 197.865348][ T9647] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 197.894282][ T9647] hsr0: entered allmulticast mode [ 197.899555][ T9647] bond0: entered allmulticast mode [ 197.908597][ T9647] bond_slave_0: entered allmulticast mode [ 197.914390][ T9647] batadv0: entered allmulticast mode [ 197.922150][ T9647] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 197.938917][ T9647] bond0: left promiscuous mode [ 197.954193][ T9647] bond_slave_0: left promiscuous mode [ 197.975998][ T9647] batadv0: left promiscuous mode [ 198.024750][ T5912] IPVS: starting estimator thread 0... [ 198.072746][ T9664] dvmrp8: entered allmulticast mode [ 198.094557][ T9658] dvmrp8: left allmulticast mode [ 198.117426][ T9663] IPVS: using max 27 ests per chain, 64800 per kthread [ 198.246350][ T9656] lo speed is unknown, defaulting to 1000 [ 198.465501][ T9673] netlink: 16 bytes leftover after parsing attributes in process `syz.4.974'. [ 199.138399][ T9695] netlink: 'syz.1.979': attribute type 13 has an invalid length. [ 199.146647][ T9695] netlink: 'syz.1.979': attribute type 17 has an invalid length. [ 199.176725][ T9695] gretap0: refused to change device tx_queue_len [ 199.178727][ T9697] netlink: 20 bytes leftover after parsing attributes in process `syz.4.980'. [ 199.191215][ T9695] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 199.198575][ T9697] netlink: 28 bytes leftover after parsing attributes in process `syz.4.980'. [ 199.322890][ T9702] netem: incorrect ge model size [ 199.338063][ T9702] netem: change failed [ 199.347388][ T9694] lo speed is unknown, defaulting to 1000 [ 199.746609][ T9709] tipc: Enabled bearer , priority 0 [ 199.766026][ T9709] syzkaller0: entered promiscuous mode [ 199.788349][ T9709] syzkaller0: entered allmulticast mode [ 199.858138][ T9709] tipc: Resetting bearer [ 199.904288][ T9707] tipc: Resetting bearer [ 199.939746][ T9707] tipc: Disabling bearer [ 200.109581][ T9727] netlink: 'syz.2.992': attribute type 1 has an invalid length. [ 200.301411][ T9735] bond5: (slave geneve3): making interface the new active one [ 200.318933][ T9735] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 200.373457][ T9742] GUP no longer grows the stack in syz.4.996 (9742): 200000006000-20000000a000 (200000005000) [ 200.393969][ T49] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 200.416793][ T9742] CPU: 0 UID: 0 PID: 9742 Comm: syz.4.996 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 200.416826][ T9742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.416847][ T9742] Call Trace: [ 200.416856][ T9742] [ 200.416871][ T9742] dump_stack_lvl+0x189/0x250 [ 200.416905][ T9742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.416928][ T9742] ? __pfx__printk+0x10/0x10 [ 200.416953][ T9742] ? find_vma+0xe7/0x160 [ 200.417009][ T9742] __get_user_pages+0x2a60/0x30b0 [ 200.417082][ T9742] ? __pfx___get_user_pages+0x10/0x10 [ 200.417111][ T9742] ? __gup_longterm_locked+0xbf7/0x15b0 [ 200.417141][ T9742] ? down_read_killable+0x1d1/0x350 [ 200.417162][ T9742] ? try_get_folio+0x633/0x660 [ 200.417198][ T9742] __gup_longterm_locked+0xd66/0x15b0 [ 200.417235][ T9742] ? try_grab_folio_fast+0x1be/0x4f0 [ 200.417280][ T9742] ? gup_fast_fallback+0x1afc/0x2260 [ 200.417315][ T9742] gup_fast_fallback+0x1cd4/0x2260 [ 200.417389][ T9742] ? __pfx_gup_fast_fallback+0x10/0x10 [ 200.417416][ T9742] ? __mutex_lock+0x335/0x1340 [ 200.417459][ T9742] ? is_valid_gup_args+0x11f/0x200 [ 200.417491][ T9742] ? get_user_pages_fast+0x4d/0xb0 [ 200.417524][ T9742] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 200.417564][ T9742] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 200.417585][ T9742] ? wait_for_space+0x24d/0x2d0 [ 200.417622][ T9742] iov_iter_get_pages2+0x5e/0xa0 [ 200.417657][ T9742] __se_sys_vmsplice+0x548/0x10d0 [ 200.417690][ T9742] ? futex_private_hash_put+0x4b/0x280 [ 200.417721][ T9742] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 200.417760][ T9742] ? __pfx_futex_wake+0x10/0x10 [ 200.417802][ T9742] ? __lock_acquire+0xab9/0xd20 [ 200.417884][ T9742] ? rcu_is_watching+0x15/0xb0 [ 200.417925][ T9742] ? do_syscall_64+0xbe/0x3b0 [ 200.417963][ T9742] do_syscall_64+0xfa/0x3b0 [ 200.418004][ T9742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.418025][ T9742] ? __switch_to_asm+0x39/0x70 [ 200.418050][ T9742] ? clear_bhb_loop+0x60/0xb0 [ 200.418077][ T9742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.418099][ T9742] RIP: 0033:0x7fc01058eb69 [ 200.418123][ T9742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.418142][ T9742] RSP: 002b:00007fc01144c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 200.418167][ T9742] RAX: ffffffffffffffda RBX: 00007fc0107b5fa0 RCX: 00007fc01058eb69 [ 200.418182][ T9742] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 200.418196][ T9742] RBP: 00007fc010611df1 R08: 0000000000000000 R09: 0000000000000000 [ 200.418209][ T9742] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 200.418221][ T9742] R13: 0000000000000000 R14: 00007fc0107b5fa0 R15: 00007ffe27352218 [ 200.418257][ T9742] [ 200.436180][ T49] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 200.607742][ T9727] netlink: 28 bytes leftover after parsing attributes in process `syz.2.992'. [ 200.721692][ T49] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 200.731048][ T49] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 200.879696][ T9746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.997'. [ 200.909190][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.997'. [ 200.921810][ T9747] openvswitch: netlink: Missing key (keys=40, expected=100) [ 200.928039][ T9746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.997'. [ 201.162206][ T9755] netlink: 'syz.3.999': attribute type 1 has an invalid length. [ 201.339799][ T9755] bond1: entered promiscuous mode [ 201.356467][ T9755] bond1: entered allmulticast mode [ 201.488535][ T9767] lo speed is unknown, defaulting to 1000 [ 201.691966][ T9776] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.729127][ T9782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1004'. [ 201.911801][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1007'. [ 202.390016][ T9788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.399805][ T9788] bond_slave_0: left promiscuous mode [ 202.409531][ T9788] bond_slave_0: left allmulticast mode [ 202.421291][ T9788] bond0 (unregistering): Released all slaves [ 202.457634][ T9800] tipc: Enabling of bearer rejected, already enabled [ 202.645198][ T9808] netlink: 'syz.4.1011': attribute type 10 has an invalid length. [ 202.685368][ T9806] delete_channel: no stack [ 202.896485][ T9811] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 202.966187][ T9811] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 203.254979][ T9836] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1019'. [ 203.284784][ T9819] lo speed is unknown, defaulting to 1000 [ 203.687010][ T9853] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1023'. [ 203.818166][ T9855] ip6tnl2: entered promiscuous mode [ 203.823886][ T9855] ip6tnl2: entered allmulticast mode [ 204.253166][ T9870] __nla_validate_parse: 1 callbacks suppressed [ 204.253190][ T9870] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1028'. [ 205.246302][ T9907] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1038'. [ 205.550955][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1039'. [ 205.927019][ T9928] lo speed is unknown, defaulting to 1000 [ 206.094828][ T9933] netlink: 'syz.3.1044': attribute type 1 has an invalid length. [ 206.394482][ T9940] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 206.680407][ T9943] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.971888][ T9951] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1049'. [ 206.983878][ T9951] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1049'. [ 207.014330][ T9951] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1049'. [ 207.045301][ T9957] tipc: Enabling of bearer rejected, already enabled [ 207.091352][ T9943] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.336275][ T9954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.358243][ T9954] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.373807][ T9954] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 207.398763][ T5905] lo speed is unknown, defaulting to 1000 [ 207.422540][ T5905] syz1: Port: 1 Link ACTIVE [ 207.437564][ T9943] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.597197][ T121] lo speed is unknown, defaulting to 1000 [ 207.660029][ T9972] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1054'. [ 207.692302][ T9943] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.764721][ T9979] netlink: 'syz.2.1056': attribute type 4 has an invalid length. [ 207.840677][ T5912] lo speed is unknown, defaulting to 1000 [ 207.858013][ T5912] syz1: Port: 1 Link DOWN [ 207.872826][ T5912] lo speed is unknown, defaulting to 1000 [ 207.957106][ T2955] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.102456][ T60] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.216173][ T9990] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.1060'. [ 208.237042][ T9990] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 209.508504][ T60] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.539839][ T9988] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.550788][ T9988] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 209.586078][ T9991] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 209.598727][ T9991] team0: Port device batadv1 added [ 209.611525][ T60] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.665750][T10009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.720193][ T9988] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.754840][ T9988] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 209.917645][ T9988] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.946697][ T9988] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 209.972173][T10017] tipc: Enabled bearer , priority 0 [ 209.997004][T10021] Bluetooth: MGMT ver 1.23 [ 210.138120][T10027] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.145993][T10027] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.160669][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1069'. [ 210.186802][T10033] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 210.214527][T10033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.358001][T10027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.391256][T10027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.557830][T10027] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 210.570432][T10027] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 210.612911][T10027] ip6erspan0: left promiscuous mode [ 210.621894][T10027] bridge1: left promiscuous mode [ 210.629134][T10027] bridge1: left allmulticast mode [ 210.644539][T10022] macsec0: entered allmulticast mode [ 210.656864][T10021] netlink: 'syz.0.1069': attribute type 1 has an invalid length. [ 210.697697][ T9988] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.712748][ T9988] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 210.754569][ T1108] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.782391][T10016] tipc: Disabling bearer [ 210.833148][ T49] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.871039][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.913167][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.976688][ T49] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 211.002872][ T49] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 211.037782][ T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 211.052282][ T49] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 211.066508][T10043] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1075'. [ 211.122460][ T60] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 211.140720][ T60] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 211.182231][ T2955] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 211.201127][ T2955] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 211.234319][T10049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1076'. [ 211.516231][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1081'. [ 211.882953][ T5854] Bluetooth: hci0: command 0x0406 tx timeout [ 211.889710][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 211.891284][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 211.896678][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 212.082108][T10091] syzkaller0: entered promiscuous mode [ 212.088532][T10091] syzkaller0: entered allmulticast mode [ 212.158501][T10099] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1090'. [ 212.261748][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1091'. [ 212.265891][ T30] audit: type=1804 audit(1754020050.909:5): pid=10103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1091" name="/newroot/215/memory.events" dev="tmpfs" ino=1115 res=1 errno=0 [ 212.299142][ T30] audit: type=1800 audit(1754020050.909:6): pid=10103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1091" name="memory.events" dev="tmpfs" ino=1115 res=0 errno=0 [ 212.773653][T10111] openvswitch: netlink: Key 0 has unexpected len 20 expected 0 [ 213.716397][T10114] vlan4: entered allmulticast mode [ 213.721971][T10114] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 213.836807][T10126] sctp: [Deprecated]: syz.0.1095 (pid 10126) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.836807][T10126] Use struct sctp_sack_info instead [ 214.101210][T10139] netlink: 'syz.1.1100': attribute type 21 has an invalid length. [ 214.117453][T10139] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1100'. [ 214.182274][T10144] netlink: 'syz.0.1102': attribute type 1 has an invalid length. [ 214.195152][T10144] netlink: 'syz.0.1102': attribute type 2 has an invalid length. [ 214.277058][T10146] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 214.299933][T10146] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 214.311328][T10148] tipc: Enabled bearer , priority 0 [ 214.332978][T10148] syzkaller0: entered promiscuous mode [ 214.344824][T10148] syzkaller0: entered allmulticast mode [ 214.470703][T10155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.501515][T10155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.572312][T10158] tipc: Resetting bearer [ 214.680220][T10155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.710228][T10155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.782316][T10158] tipc: Resetting bearer [ 214.858865][T10158] tipc: Disabling bearer [ 214.919439][T10155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.955481][T10155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.980875][T10172] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1111'. [ 214.994501][T10172] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1111'. [ 215.034605][T10175] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1112'. [ 215.069228][T10174] lo speed is unknown, defaulting to 1000 [ 215.103499][T10155] bond0: (slave netdevsim0): Releasing backup interface [ 215.120354][T10155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.152557][T10155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.196505][T10174] lo speed is unknown, defaulting to 1000 [ 215.203248][T10174] lo speed is unknown, defaulting to 1000 [ 215.231599][T10183] tipc: Enabled bearer , priority 0 [ 215.245615][T10174] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 215.265387][T10183] syzkaller0: entered promiscuous mode [ 215.272850][T10183] syzkaller0: entered allmulticast mode [ 215.340262][T10174] lo speed is unknown, defaulting to 1000 [ 215.351812][T10183] tipc: Resetting bearer [ 215.360653][T10185] netlink: 'syz.4.1115': attribute type 1 has an invalid length. [ 215.381364][T10185] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1115'. [ 215.390929][T10185] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1115'. [ 215.399306][T10188] syz_tun: entered allmulticast mode [ 215.411836][T10174] lo speed is unknown, defaulting to 1000 [ 215.419998][T10174] lo speed is unknown, defaulting to 1000 [ 215.428740][T10174] lo speed is unknown, defaulting to 1000 [ 215.439775][T10182] tipc: Resetting bearer [ 215.463862][T10182] tipc: Disabling bearer [ 215.491963][ T60] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.500800][ T60] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.536709][T10174] lo speed is unknown, defaulting to 1000 [ 215.554351][ T60] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.574125][ T60] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.630814][ T49] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.654727][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.674846][T10195] syzkaller0: entered promiscuous mode [ 215.681150][T10195] syzkaller0: entered allmulticast mode [ 215.713748][T10200] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1120'. [ 215.722104][ T49] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.725192][T10201] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1121'. [ 215.738285][ T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.751882][T10197] tipc: Enabled bearer , priority 0 [ 215.760407][T10195] netlink: 'syz.0.1117': attribute type 32 has an invalid length. [ 215.785400][T10197] syzkaller0: entered promiscuous mode [ 215.791116][T10197] syzkaller0: entered allmulticast mode [ 215.813101][T10154] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.846710][T10154] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.861692][T10203] netlink: 'syz.4.1122': attribute type 7 has an invalid length. [ 215.871519][T10203] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1122'. [ 215.888437][ T49] ================================================================== [ 215.896560][ T49] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1340 [ 215.904144][ T49] Read of size 8 at addr ffff88807e89e4b0 by task kworker/u8:3/49 [ 215.911947][ T49] [ 215.914282][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 215.914304][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 215.914316][ T49] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 215.914346][ T49] Call Trace: [ 215.914353][ T49] [ 215.914361][ T49] dump_stack_lvl+0x189/0x250 [ 215.914380][ T49] ? __kasan_check_byte+0x12/0x40 [ 215.914407][ T49] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.914424][ T49] ? lock_release+0x4b/0x3e0 [ 215.914452][ T49] ? __virt_addr_valid+0x4a5/0x5c0 [ 215.914473][ T49] print_report+0xca/0x240 [ 215.914498][ T49] ? __mutex_lock+0x147/0x1340 [ 215.914522][ T49] kasan_report+0x118/0x150 [ 215.914546][ T49] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 215.914570][ T49] ? __mutex_lock+0x147/0x1340 [ 215.914598][ T49] __mutex_lock+0x147/0x1340 [ 215.914633][ T49] ? __mutex_lock+0x5b6/0x1340 [ 215.914659][ T49] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 215.914685][ T49] ? __pfx___mutex_lock+0x10/0x10 [ 215.914713][ T49] ? __lock_acquire+0xab9/0xd20 [ 215.914742][ T49] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 215.914770][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 215.914795][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 215.914821][ T49] process_scheduled_works+0xae1/0x17b0 [ 215.914862][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 215.914901][ T49] worker_thread+0x8a0/0xda0 [ 215.914952][ T49] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 215.914980][ T49] ? __kthread_parkme+0x7b/0x200 [ 215.915001][ T49] kthread+0x70e/0x8a0 [ 215.915022][ T49] ? __pfx_worker_thread+0x10/0x10 [ 215.915048][ T49] ? __pfx_kthread+0x10/0x10 [ 215.915068][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 215.915090][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.915113][ T49] ? __pfx_kthread+0x10/0x10 [ 215.915132][ T49] ret_from_fork+0x3fc/0x770 [ 215.915160][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 215.915190][ T49] ? __switch_to_asm+0x39/0x70 [ 215.915209][ T49] ? __switch_to_asm+0x33/0x70 [ 215.915228][ T49] ? __pfx_kthread+0x10/0x10 [ 215.915247][ T49] ret_from_fork_asm+0x1a/0x30 [ 215.915275][ T49] [ 215.915281][ T49] [ 216.132771][ T49] Allocated by task 10155: [ 216.137192][ T49] kasan_save_track+0x3e/0x80 [ 216.141893][ T49] __kasan_kmalloc+0x93/0xb0 [ 216.146500][ T49] __kmalloc_noprof+0x27a/0x4f0 [ 216.151367][ T49] udp_tunnel_nic_netdevice_event+0x854/0x19f0 [ 216.157537][ T49] notifier_call_chain+0x1b3/0x3e0 [ 216.162652][ T49] register_netdevice+0x1608/0x1ae0 [ 216.167865][ T49] nsim_create+0xae8/0xf10 [ 216.172287][ T49] __nsim_dev_port_add+0x6b6/0xb10 [ 216.177427][ T49] nsim_dev_port_add_all+0x37/0xf0 [ 216.182556][ T49] nsim_dev_reload_up+0x451/0x780 [ 216.187607][ T49] devlink_reload+0x4e9/0x8d0 [ 216.192289][ T49] devlink_nl_reload_doit+0xb35/0xd50 [ 216.197670][ T49] genl_family_rcv_msg_doit+0x215/0x300 [ 216.203226][ T49] genl_rcv_msg+0x60e/0x790 [ 216.207775][ T49] netlink_rcv_skb+0x205/0x470 [ 216.212568][ T49] genl_rcv+0x28/0x40 [ 216.216557][ T49] netlink_unicast+0x82c/0x9e0 [ 216.221329][ T49] netlink_sendmsg+0x805/0xb30 [ 216.226108][ T49] __sock_sendmsg+0x219/0x270 [ 216.230791][ T49] ____sys_sendmsg+0x505/0x830 [ 216.235569][ T49] ___sys_sendmsg+0x21f/0x2a0 [ 216.240252][ T49] __x64_sys_sendmsg+0x19b/0x260 [ 216.245195][ T49] do_syscall_64+0xfa/0x3b0 [ 216.249821][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.255720][ T49] [ 216.258047][ T49] Freed by task 10154: [ 216.262108][ T49] kasan_save_track+0x3e/0x80 [ 216.266795][ T49] kasan_save_free_info+0x46/0x50 [ 216.271856][ T49] __kasan_slab_free+0x62/0x70 [ 216.276637][ T49] kfree+0x18e/0x440 [ 216.280545][ T49] udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 216.286804][ T49] notifier_call_chain+0x1b3/0x3e0 [ 216.291944][ T49] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 216.298374][ T49] unregister_netdevice_queue+0x33c/0x380 [ 216.304104][ T49] nsim_destroy+0x1dd/0x670 [ 216.308616][ T49] __nsim_dev_port_del+0x14d/0x1b0 [ 216.313739][ T49] nsim_dev_reload_destroy+0x288/0x490 [ 216.319207][ T49] nsim_dev_reload_down+0x8a/0xc0 [ 216.324246][ T49] devlink_reload+0x1b6/0x8d0 [ 216.328929][ T49] devlink_nl_reload_doit+0xb35/0xd50 [ 216.334308][ T49] genl_family_rcv_msg_doit+0x215/0x300 [ 216.339879][ T49] genl_rcv_msg+0x60e/0x790 [ 216.344390][ T49] netlink_rcv_skb+0x205/0x470 [ 216.349167][ T49] genl_rcv+0x28/0x40 [ 216.353156][ T49] netlink_unicast+0x82c/0x9e0 [ 216.357929][ T49] netlink_sendmsg+0x805/0xb30 [ 216.362705][ T49] __sock_sendmsg+0x219/0x270 [ 216.367388][ T49] ____sys_sendmsg+0x505/0x830 [ 216.372157][ T49] ___sys_sendmsg+0x21f/0x2a0 [ 216.376844][ T49] __x64_sys_sendmsg+0x19b/0x260 [ 216.381786][ T49] do_syscall_64+0xfa/0x3b0 [ 216.386304][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.392207][ T49] [ 216.394530][ T49] Last potentially related work creation: [ 216.400241][ T49] kasan_save_stack+0x3e/0x60 [ 216.404976][ T49] kasan_record_aux_stack+0xbd/0xd0 [ 216.410207][ T49] insert_work+0x3d/0x330 [ 216.414587][ T49] __queue_work+0xbd9/0xfe0 [ 216.419113][ T49] queue_work_on+0x181/0x270 [ 216.423718][ T49] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 216.429449][ T49] udp_tunnel_push_rx_port+0x180/0x200 [ 216.434929][ T49] geneve_offload_rx_ports+0xd7/0x160 [ 216.440331][ T49] geneve_netdevice_event+0x6a/0x80 [ 216.445636][ T49] notifier_call_chain+0x1b3/0x3e0 [ 216.450754][ T49] call_netdevice_notifiers+0x88/0xc0 [ 216.456160][ T49] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 216.462434][ T49] notifier_call_chain+0x1b3/0x3e0 [ 216.467561][ T49] register_netdevice+0x1608/0x1ae0 [ 216.472781][ T49] nsim_create+0xae8/0xf10 [ 216.477239][ T49] __nsim_dev_port_add+0x6b6/0xb10 [ 216.482378][ T49] nsim_dev_port_add_all+0x37/0xf0 [ 216.487512][ T49] nsim_dev_reload_up+0x451/0x780 [ 216.492559][ T49] devlink_reload+0x4e9/0x8d0 [ 216.497249][ T49] devlink_nl_reload_doit+0xb35/0xd50 [ 216.502632][ T49] genl_family_rcv_msg_doit+0x215/0x300 [ 216.508184][ T49] genl_rcv_msg+0x60e/0x790 [ 216.512720][ T49] netlink_rcv_skb+0x205/0x470 [ 216.517520][ T49] genl_rcv+0x28/0x40 [ 216.521507][ T49] netlink_unicast+0x82c/0x9e0 [ 216.526279][ T49] netlink_sendmsg+0x805/0xb30 [ 216.531084][ T49] __sock_sendmsg+0x219/0x270 [ 216.535770][ T49] ____sys_sendmsg+0x505/0x830 [ 216.540542][ T49] ___sys_sendmsg+0x21f/0x2a0 [ 216.545247][ T49] __x64_sys_sendmsg+0x19b/0x260 [ 216.550195][ T49] do_syscall_64+0xfa/0x3b0 [ 216.554712][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.560612][ T49] [ 216.562937][ T49] Second to last potentially related work creation: [ 216.569518][ T49] kasan_save_stack+0x3e/0x60 [ 216.574211][ T49] kasan_record_aux_stack+0xbd/0xd0 [ 216.579415][ T49] insert_work+0x3d/0x330 [ 216.583761][ T49] __queue_work+0xcfc/0xfe0 [ 216.588269][ T49] queue_work_on+0x181/0x270 [ 216.592873][ T49] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 216.598519][ T49] udp_tunnel_push_rx_port+0x180/0x200 [ 216.604004][ T49] vxlan_offload_rx_ports+0x139/0x200 [ 216.609407][ T49] vxlan_netdevice_event+0x111/0x470 [ 216.614713][ T49] notifier_call_chain+0x1b3/0x3e0 [ 216.619838][ T49] call_netdevice_notifiers+0x88/0xc0 [ 216.625267][ T49] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 216.631539][ T49] notifier_call_chain+0x1b3/0x3e0 [ 216.636663][ T49] register_netdevice+0x1608/0x1ae0 [ 216.641876][ T49] nsim_create+0xae8/0xf10 [ 216.646304][ T49] __nsim_dev_port_add+0x6b6/0xb10 [ 216.651430][ T49] nsim_dev_port_add_all+0x37/0xf0 [ 216.656558][ T49] nsim_dev_reload_up+0x451/0x780 [ 216.661597][ T49] devlink_reload+0x4e9/0x8d0 [ 216.666289][ T49] devlink_nl_reload_doit+0xb35/0xd50 [ 216.671682][ T49] genl_family_rcv_msg_doit+0x215/0x300 [ 216.677244][ T49] genl_rcv_msg+0x60e/0x790 [ 216.681764][ T49] netlink_rcv_skb+0x205/0x470 [ 216.686557][ T49] genl_rcv+0x28/0x40 [ 216.690556][ T49] netlink_unicast+0x82c/0x9e0 [ 216.695349][ T49] netlink_sendmsg+0x805/0xb30 [ 216.700141][ T49] __sock_sendmsg+0x219/0x270 [ 216.704847][ T49] ____sys_sendmsg+0x505/0x830 [ 216.709632][ T49] ___sys_sendmsg+0x21f/0x2a0 [ 216.714315][ T49] __x64_sys_sendmsg+0x19b/0x260 [ 216.719268][ T49] do_syscall_64+0xfa/0x3b0 [ 216.723817][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.729721][ T49] [ 216.732047][ T49] The buggy address belongs to the object at ffff88807e89e400 [ 216.732047][ T49] which belongs to the cache kmalloc-256 of size 256 [ 216.746101][ T49] The buggy address is located 176 bytes inside of [ 216.746101][ T49] freed 256-byte region [ffff88807e89e400, ffff88807e89e500) [ 216.759903][ T49] [ 216.762243][ T49] The buggy address belongs to the physical page: [ 216.768738][ T49] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e89e [ 216.777504][ T49] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 216.786009][ T49] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 216.793576][ T49] page_type: f5(slab) [ 216.797579][ T49] raw: 00fff00000000040 ffff88801a441b40 ffffea0001fa6080 dead000000000002 [ 216.806182][ T49] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 216.814780][ T49] head: 00fff00000000040 ffff88801a441b40 ffffea0001fa6080 dead000000000002 [ 216.823472][ T49] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 216.832150][ T49] head: 00fff00000000001 ffffea0001fa2781 00000000ffffffff 00000000ffffffff [ 216.840829][ T49] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 216.849541][ T49] page dumped because: kasan: bad access detected [ 216.855988][ T49] page_owner tracks the page as allocated [ 216.861748][ T49] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5843, tgid 5843 (syz-executor), ts 95406684505, free_ts 95165827241 [ 216.883140][ T49] post_alloc_hook+0x240/0x2a0 [ 216.887971][ T49] get_page_from_freelist+0x21e4/0x22c0 [ 216.893530][ T49] __alloc_frozen_pages_noprof+0x181/0x370 [ 216.899351][ T49] alloc_pages_mpol+0x232/0x4a0 [ 216.904217][ T49] allocate_slab+0x8a/0x3b0 [ 216.908768][ T49] ___slab_alloc+0xbfc/0x1480 [ 216.913451][ T49] __kmalloc_noprof+0x305/0x4f0 [ 216.918318][ T49] fib_create_info+0x1728/0x3210 [ 216.923268][ T49] fib_table_insert+0xc6/0x1b50 [ 216.928136][ T49] fib_magic+0x2c4/0x390 [ 216.932386][ T49] fib_add_ifaddr+0x144/0x5f0 [ 216.937071][ T49] fib_inetaddr_event+0x12e/0x190 [ 216.942109][ T49] notifier_call_chain+0x1b3/0x3e0 [ 216.947224][ T49] blocking_notifier_call_chain+0x6a/0x90 [ 216.952952][ T49] __inet_insert_ifa+0xa13/0xbf0 [ 216.957904][ T49] inet_rtm_newaddr+0xf3a/0x18b0 [ 216.962850][ T49] page last free pid 5898 tgid 5898 stack trace: [ 216.969177][ T49] __free_frozen_pages+0xc71/0xe70 [ 216.974344][ T49] __slab_free+0x326/0x400 [ 216.978768][ T49] qlist_free_all+0x97/0x140 [ 216.983373][ T49] kasan_quarantine_reduce+0x148/0x160 [ 216.988851][ T49] __kasan_slab_alloc+0x22/0x80 [ 216.993718][ T49] __kmalloc_cache_noprof+0x1be/0x3d0 [ 216.999105][ T49] nsim_fib_event_work+0x1174/0x3180 [ 217.004487][ T49] process_scheduled_works+0xae1/0x17b0 [ 217.010067][ T49] worker_thread+0x8a0/0xda0 [ 217.014705][ T49] kthread+0x70e/0x8a0 [ 217.018798][ T49] ret_from_fork+0x3fc/0x770 [ 217.023416][ T49] ret_from_fork_asm+0x1a/0x30 [ 217.028194][ T49] [ 217.030519][ T49] Memory state around the buggy address: [ 217.036152][ T49] ffff88807e89e380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 217.044218][ T49] ffff88807e89e400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 217.052306][ T49] >ffff88807e89e480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 217.060400][ T49] ^ [ 217.066053][ T49] ffff88807e89e500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 217.074132][ T49] ffff88807e89e580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 217.082203][ T49] ================================================================== [ 217.102808][ T43] tipc: Node number set to 137350967 [ 217.110788][ T49] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 217.118039][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 217.129687][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 217.139758][ T49] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 217.147067][ T49] Call Trace: [ 217.150350][ T49] [ 217.153283][ T49] dump_stack_lvl+0x99/0x250 [ 217.157882][ T49] ? __asan_memcpy+0x40/0x70 [ 217.162488][ T49] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.167693][ T49] ? __pfx__printk+0x10/0x10 [ 217.172301][ T49] panic+0x2db/0x790 [ 217.176208][ T49] ? __pfx_panic+0x10/0x10 [ 217.180644][ T49] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 217.186560][ T49] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 217.192907][ T49] ? print_memory_metadata+0x314/0x400 [ 217.198393][ T49] ? __mutex_lock+0x147/0x1340 [ 217.203178][ T49] check_panic_on_warn+0x89/0xb0 [ 217.208130][ T49] ? __mutex_lock+0x147/0x1340 [ 217.212912][ T49] end_report+0x78/0x160 [ 217.217171][ T49] kasan_report+0x129/0x150 [ 217.221688][ T49] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 217.227592][ T49] ? __mutex_lock+0x147/0x1340 [ 217.232375][ T49] __mutex_lock+0x147/0x1340 [ 217.236984][ T49] ? __mutex_lock+0x5b6/0x1340 [ 217.241764][ T49] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 217.248023][ T49] ? __pfx___mutex_lock+0x10/0x10 [ 217.253064][ T49] ? __lock_acquire+0xab9/0xd20 [ 217.257932][ T49] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 217.264014][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 217.269748][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 217.275491][ T49] process_scheduled_works+0xae1/0x17b0 [ 217.281064][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 217.287063][ T49] worker_thread+0x8a0/0xda0 [ 217.291668][ T49] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 217.298010][ T49] ? __kthread_parkme+0x7b/0x200 [ 217.302955][ T49] kthread+0x70e/0x8a0 [ 217.307034][ T49] ? __pfx_worker_thread+0x10/0x10 [ 217.312165][ T49] ? __pfx_kthread+0x10/0x10 [ 217.316761][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 217.321968][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.327179][ T49] ? __pfx_kthread+0x10/0x10 [ 217.331781][ T49] ret_from_fork+0x3fc/0x770 [ 217.336392][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 217.341554][ T49] ? __switch_to_asm+0x39/0x70 [ 217.346327][ T49] ? __switch_to_asm+0x33/0x70 [ 217.351102][ T49] ? __pfx_kthread+0x10/0x10 [ 217.355706][ T49] ret_from_fork_asm+0x1a/0x30 [ 217.360485][ T49] [ 217.363857][ T49] Kernel Offset: disabled [ 217.368180][ T49] Rebooting in 86400 seconds..