last executing test programs: 2m5.022915029s ago: executing program 1 (id=591): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711053000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x0, @local}, 0x10) (async) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x0, @local}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000d40)={r3, 0x1, 0x6}, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd0, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r1}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x91}, 0x4008011) 2m4.731000883s ago: executing program 1 (id=597): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2830], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) r2 = socket(0x11, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r3, 0x11, 0x67, 0x0, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socket(0x1, 0x80000, 0xb2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r6, r7, 0x8f5, 0x100000000000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x38, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0x9800, 0x1, 0x2, 0xbd59, 0x6, 0x571]}}]}]}]}, 0x38}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x71, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x11, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, &(0x7f0000000140), 0x41000, 0x40, '\x00', r5, @sock_ops, r6, 0x8, &(0x7f0000000180)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r7, 0x7, &(0x7f0000000440)=[0x1, r11, r12], &(0x7f0000000480)=[{0x0, 0x4, 0x2, 0xb}, {0x0, 0x2, 0x7, 0x3}, {0x0, 0x1, 0x1, 0x1}, {0x4, 0x3, 0x4, 0x5}, {0x5, 0x4, 0xd, 0xc}, {0x0, 0x1, 0xb, 0x6}, {0x3, 0x3, 0x0, 0xc}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0x81, 0x0, &(0x7f0000000380)="764b9e147583ddd0569ba56a5cfd3c1f8faa8744b2a3c5c763047ba1585e2a94c0fd780100e7e144d6a8280d5f79b3d7bf5756687aff2574a38904d67872771946ac2d58027ffeb27c010705e1ba81f50aeb128a8ca3cf7cb4abe854ddb03d2f56ae3fc2af209fbe52c06714bbaa532d3a75a2d639081ce165e41d1d6a4f5e1533", 0x0, 0x3400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m3.794295051s ago: executing program 1 (id=619): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063011000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x3, 0x7fff, 0x4}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf9}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) (async) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa4, r3, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x538}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller1\x00'}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf01e}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) 2m3.640824165s ago: executing program 1 (id=621): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x78, 0x0, 0x1, 0x470bd2c, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x4b, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_b, @broadcast, @from_mac, {0x0, 0x20}, @value=@ver_80211n={0x0, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0xe, @default, 0x40, @void, @void, @val={0x3, 0x1, 0x2c}, @val={0x4, 0x6, {0x0, 0x5, 0x2, 0xe8}}, @val={0x6, 0x2, 0xd}, @val={0x5, 0x3, {0x0, 0xd4, 0x2}}, @val={0x25, 0x3, {0x1, 0xb3, 0xd}}, @void, @val={0x3c, 0x4, {0x0, 0x8, 0x184, 0x22}}, @void, @void, @void, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1bb}]]}, 0x78}, 0x1, 0x0, 0x0, 0x6a845ecb6f203e71}, 0x24008080) socket$netlink(0x10, 0x3, 0x14) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x2}]}, {0x0, [0x5f]}}, &(0x7f0000000080)=""/3, 0x27, 0x3, 0x1, 0x3, 0x10000, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x4, 0x6b72, {{0x1b, 0x4, 0x1, 0x24, 0x6c, 0x64, 0x0, 0xa, 0x29, 0x0, @private=0x2, @multicast1, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0x42, 0x0, 0x8, [0x4, 0xd3, 0xe, 0xe155, 0x0]}, @timestamp={0x44, 0x14, 0xaa, 0x0, 0x5, [0x686, 0x200, 0x8, 0x1]}, @rr={0x7, 0x27, 0x53, [@multicast1, @broadcast, @rand_addr=0x64010101, @remote, @multicast2, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r4, 0x126a32087be7eeb8, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) 2m3.487148137s ago: executing program 1 (id=624): socket(0xa, 0x3, 0x3a) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffff8, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0xffffffff, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x66, &(0x7f0000000840)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd60122d9200303afffe80000000000000000000f0ffffffbaff020000000000000000000000000001"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_deladdrlabel={0x1c, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) 2m2.929438954s ago: executing program 1 (id=631): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000b20000009500000000000000b78fd000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = openat$cgroup(r0, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f00000002c0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d5b4982ac97bb29bd14f7719b28fe0c4f66eddd03f793b24f5355", 0x23}}, 0xee) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1}, 0x18) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000b20000009500000000000000b78fd000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) openat$cgroup(r0, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r5, &(0x7f00000002c0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) (async) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d5b4982ac97bb29bd14f7719b28fe0c4f66eddd03f793b24f5355", 0x23}}, 0xee) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) (async) 1m48.045898758s ago: executing program 32 (id=631): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000b20000009500000000000000b78fd000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = openat$cgroup(r0, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f00000002c0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d5b4982ac97bb29bd14f7719b28fe0c4f66eddd03f793b24f5355", 0x23}}, 0xee) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1}, 0x18) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000b20000009500000000000000b78fd000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) openat$cgroup(r0, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r5, &(0x7f00000002c0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) (async) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d5b4982ac97bb29bd14f7719b28fe0c4f66eddd03f793b24f5355", 0x23}}, 0xee) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) (async) 41.025809545s ago: executing program 5 (id=1830): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10000, 0x0) (async) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000030000000700000000000000", @ANYRES32, @ANYBLOB="0000bcc625cd69bf2a7f1c528441349e044a4d2384bfd4ebbc7d3a2ac086000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000003080)=ANY=[@ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="f57e8890dd25324500000000800018001ca2efaf3b", @ANYRES64=0x0], 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000030c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0200000002"], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0200000002"], 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r9, 0x2, 0x0, 0x5, &(0x7f0000000180)=[0x0], 0x400000c0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r9, 0x2, 0x0, 0x5, &(0x7f0000000180)=[0x0], 0x400000c0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r10, 0x891d, 0x0) (async) ioctl$SIOCX25SFACILITIES(r10, 0x891d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0xf, &(0x7f0000002400)=ANY=[@ANYBLOB="1800000001fffffffffffa000800000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r12, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0xf, &(0x7f0000002400)=ANY=[@ANYBLOB="1800000001fffffffffffa000800000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r12, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)={0x14, r3, 0x1}, 0x14}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001380)=@bpf_ext={0x1c, 0x2, &(0x7f00000000c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31efac15}], &(0x7f0000000100)='syzkaller\x00', 0xff, 0x1000, &(0x7f00000002c0)=""/4096, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x5, 0xa, 0x10, 0x80000000}, 0x10, 0x7e04, 0xffffffffffffffff, 0x5, &(0x7f00000012c0)=[r1], &(0x7f0000001300)=[{0x2, 0x2, 0x3, 0x9}, {0x2, 0x4, 0x8, 0xa}, {0x5, 0x4, 0x4, 0xb}, {0x3, 0x4, 0x8}, {0x0, 0x4, 0xa, 0xd}], 0x10, 0x80000001, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) 40.755901823s ago: executing program 5 (id=1833): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001700)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_police={0x34, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "9aaa"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01000000000000000000010000000900010073797a3000000000a40000001f0a01000000000000000000010000000900010073797a3000030000090002003f20000000000000780003"], 0x11c}}, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x30, r0, 0x9d06000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001700)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_police={0x34, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "9aaa"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01000000000000000000010000000900010073797a3000000000a40000001f0a01000000000000000000010000000900010073797a3000030000090002003f20000000000000780003"], 0x11c}}, 0x0) (async) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x30, r0, 0x9d06000) (async) 40.34734277s ago: executing program 5 (id=1838): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c0001801800108014"], 0x34}}, 0x84) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 30.728876882s ago: executing program 5 (id=1838): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c0001801800108014"], 0x34}}, 0x84) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 18.133512762s ago: executing program 5 (id=1838): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c0001801800108014"], 0x34}}, 0x84) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 10.374908925s ago: executing program 5 (id=1838): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c0001801800108014"], 0x34}}, 0x84) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 3.624822068s ago: executing program 0 (id=2261): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x16}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 3.452602885s ago: executing program 0 (id=2264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001", @ANYBLOB="f7b08fed7cca353b94021f78811da5cbf148c4f2e3db6f08894c83176c4347a6f26b36dabd3d5f1baa179d31ba7f19364f5e216de618806928ea82740badaaa47e14", @ANYBLOB="a97cb32eb688294a7bab494f19c89e58f8834fd72bed250a1efce764be38cac64d974af45be6f22b89edcd4ff8d3025da63deed0a8602d981ee0bc1062dd1a739618ac08", @ANYRESDEC=r0], 0xb0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0xc8, 0xa, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_EXPRESSIONS={0x94, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x48, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x17}]}}}]}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}, 0xc8}, 0x1, 0x0, 0x0, 0x814}, 0x4000) 3.357899374s ago: executing program 0 (id=2265): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) (async, rerun: 32) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ea0c00", 0x18, 0x88, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@dstopts={0x1}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}}}}}}}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000180)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000001c40)={'IDLETIMER\x00'}, &(0x7f0000004580)=0x1e) 2.853664831s ago: executing program 0 (id=2271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x74, r4, 0x1, 0x0, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @loopback, 0x1002}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x74}}, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}, 0x1c) socket(0x21, 0x4, 0x2) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x540, 0x0, 0x148, 0xffffffff, 0x350, 0x0, 0x470, 0x470, 0xffffffff, 0x470, 0x470, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x9, 0x9}}, @common=@hl={{0x28}, {0x1, 0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x6, @ipv6=@rand_addr=' \x01\x00', @ipv4=@empty, @gre_key=0x3, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv4=@remote, @ipv4=@private=0xa010102, @port=0x4e24, @icmp_id=0x64}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0x0, 0x47feb26065ccebdb, 0xff000000], 'ip6_vti0\x00', 'erspan0\x00', {0xff}, {}, 0x62, 0xff, 0x1, 0x93}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1c, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id=0x65, @icmp_id=0x64}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x2a, 0x48, 0x1, 0x3, 0xc, 0x800}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@local, @icmp_id=0x68, @port=0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) socket$nl_route(0x10, 0x3, 0x0) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x100) r7 = socket$netlink(0x10, 0x3, 0xb) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) 2.523083885s ago: executing program 4 (id=2275): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) listen(r1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @empty}, 0x1c) 2.191318325s ago: executing program 2 (id=2277): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x20000002) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200000c5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0xffffffb3, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES8=r0], 0xac}, 0x1, 0x0, 0x0, 0x850}, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 2.175330077s ago: executing program 2 (id=2278): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x738, 0x1, 0x10001, 0x9, 0x5}, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c008000", @ANYRES16=r2, @ANYBLOB="0100ffffffff00000000010000000c0002000400000000000000040007800800010000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES16=r0, @ANYRES32=r3, @ANYRES64, @ANYBLOB="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"/436], 0x1fc}, 0x1, 0x0, 0x0, 0x2c0108d5}, 0x8000000) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES16=r0, @ANYRES32=r3, @ANYRES64, @ANYBLOB="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"/436], 0x1fc}, 0x1, 0x0, 0x0, 0x2c0108d5}, 0x8000000) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000008000000a079c8ccbed9b7a65de51f830000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000008000000a079c8ccbed9b7a65de51f830000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) (async) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) (async) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) shutdown(r7, 0x1) (async) shutdown(r7, 0x1) setsockopt(r5, 0x84, 0x7c, &(0x7f0000000040)="badd8e37a0feecff", 0x8) socket$packet(0x11, 0x2, 0x300) 1.989992052s ago: executing program 2 (id=2279): r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000600)={0xa, &(0x7f0000001700)=[{0x8c4, 0xd1, &(0x7f0000000240)="187232de0d7d8b53dbd12398951ff101789e33ca17ef0a77e09d459f7f29b037e16a5382841c752366a70ef14c13b08f6ff18cacd3ea0f8e9cf725201a9133d02d9abf2d0117e6fdf6997e71272e677ed45b9ff6e931af23f13155d08ab357e36c8fdd21e09d3dbe9a14cf826a81761609a1de89e339fc2ee4e34c24e77043a42116cd986e02c65f67637618615b3d1bdb9a01e7a88ff2578cc3ca730ae904bfbfbacbc96cb7479dd0c8c553d8e2e0a64ed37f82b339d5ebb96c41e108991828d67631ab35be7146fa1e64458600d48dc7", 0x0, 0x1}, {0x4, 0x1000, &(0x7f0000000700)="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", 0x1}, {0x10000, 0x66, &(0x7f0000000080)="29b64f1df99c5798d1ba62c78b91966c910096ae11dface4d920cdd9fc0439f0b8c1136432b75753182d00568811a5d28d03d0023fa36810e4c6a200fc0f725662df8c005944326c1904bc98502a2fe6504c9f89d0d694c51a0c825c820cbfb9a8a0002ad850"}, {0xa, 0xbf, &(0x7f0000000340)="727d21e9c4619cedd1849b1ea3a75aa0c77992155ad6cf18d11bc83c5b47c4a62da0e2f3c53cc02fd4df81a1361982f6e086e8ff927cb59376ab6ac603eb6da3dc3f9725b806051fccc7d55a528b9f6f7c3f78796d4582cfdce816210df7679af084c36482e932bb2c0912c8d680793f2f609b7c3070b4a2b7c955e51153492f029edd1eed1af53d7cca2f5f0763dee92a2b38b1dd057e7311c13b436415f06140ad67cefd556e79a79df24118c52918720f1b2cff62dec91b83b5b01a47ef"}, {0x9, 0x7, &(0x7f0000000000)="0f09798ea6ff6a", 0x1}, {0x3, 0x1e, &(0x7f0000000140)="64bf5016fae634a6852c8a59d2d706584cd8b651ed7d7a465fe7e180fe56", 0x1}, {0x7, 0x0, &(0x7f0000000400), 0x0, 0x1}, {0x48f8e461, 0x52, &(0x7f0000000440)="6110f6fb7f90ea8e69736c3d25f2ad5286f74a5e0ae2ecf5cd7402909b64b1ba0a4b429b3270097135d87ecc2a9459ff87c1de39f6f3ce96e4c1dfe84d69fd9aa8e9779ecea1e1d592e25d81ed68085e6692"}, {0x3c, 0xdb, &(0x7f00000004c0)="baf449321cef5643c3664ec57c0f38a491759b005b8eb02d27fcfc238e90529c4874cf120c22a636f1a3dd545b0f375fdb87dbbc70903242299f3d49646f7f7e3353f48e91def3dc8d4949c4b44959e290cdc9f92ab68f6e75b11677cb1ca5e7943519f2af850dd200000e9642b5d05151ada9f813526905ab27acd30a923c91776552b0329eb2ff0e8055df4a970d5c6627f48c68418336d5253bc3ff5429547968fdc412b783b218d722c407824760439b0960c1222f8d78c08175b9113fa0eb5e35bb3d660c9ecae2b2659308693206e9b1c46331a856a0b5ee", 0x1, 0x1}, {0xd, 0x3f, &(0x7f00000005c0)="cdb37a0440db29e8a67cbf834074b2a4c88d3b710e4e227e9ac244d6a4a1b1d5de9f3c464681f735a0bfcc96dae91f54cb9bdbff79ebc8269fca0aefa5a16a", 0x0, 0x1}]}) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r1, 0x0, 0xcf, 0x0, 0x0) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000180)="480000001400197f09004b0101048c59028800ffff0001000000000028213ee20600d4ff4affff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace35ee8b12c00", 0x48}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000004000071103516cb767072e360160000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.863033181s ago: executing program 0 (id=2281): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0xfffffffd, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x20004000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6015690900442f"], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xda, 0x2b, &(0x7f0000000080)="4816c3a879cacd7c7e0a3c86f8fdeca614983f9556e57f30578852a6b8f5212945396da2f8a82e837d423082cf4e0f136111fa00f221eb491563ffb75a05c51f5d2add19a22eccbfcc3acc9123eec0dce2d9927e42f0cfc104c0b4f2cb09eea3b55955375bc7f2c956be96db17708d735bb5f72968b617d66b953a1a04483c78680838deaccd7b78b95dee7a5c7e8a30328c3e598a6b16c020b045a88726c52c1254438ad1fef7c24ba9565b1110ecb503e67dee45bc39beaea972a72de3b07409854afb79d98bc6cfe6a8721e5510f5aa79c3a1c665fd90d3a8", &(0x7f0000000180)=""/43, 0x8, 0x0, 0x1000, 0xdd, &(0x7f00000006c0)="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", &(0x7f00000016c0)="7af5c5b83f76ce4eb8c81ac105767a7b48639f634495d130dfa181f1e93f33fe41c8540d418e8876b723b70d7e3d9a0dac40851564b8b90566c646a6b1ae081da51dec29e6fbf0cf27fc81eaef86f75e26435c68c77fabcb3488a89e34c375d0923274b78f73784967070da911c50c498e083903344eb0a9273f613a992d1a036ea6cea601728c666071b4763ab366b78ccf61a82001bbb76f4d8dabd6273fc165d88e9cb2da26aa1b8ab035c7a58a6fcb846c3c312b44300f73c5d66ce8677453f6f3243c5841678b03e5d35bdd21c3bae34ed418afa2a1f76ba28ec5", 0x4, 0x0, 0x3}, 0x50) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffd}}}, 0x108) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 1.862277508s ago: executing program 2 (id=2282): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x246, &(0x7f0000000300)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x210, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}, @hopopts={0x0, 0x3a, '\x00', [@ra, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x33, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3b379fe"}, @pad1, @generic={0x1, 0x59, "08f1390b0c74cba47ed1dbe3290dbd16fe15f3802c8f12d8687cb72f6783172e63fafc0bc19fc7ea5e20fe65290cc5531784929dd4b5c8ff0df008542d00f6159b80595da8d72872864da820552af488c1cea2b483cc5fa05f"}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab", 0x80}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48019}, 0x4040014) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r1, 0x18f40, 0x2200a}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) 1.745596635s ago: executing program 2 (id=2284): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r6, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r5, &(0x7f0000000000)={0x23, 0x4}, 0x10) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r7, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r8, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x10, 0x140b, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x2}, 0x40810) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x6, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x1a, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@cb_func={0x18, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r12}, 0x38) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000014000100fffffffbffdbdf250a00a100", @ANYRES32=r11, @ANYBLOB="1400010000000000000000000000000000000001"], 0x2c}}, 0x24005040) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x64, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x9, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ct={0x2c, 0x11, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) r14 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r14, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x160, 0xa, 0x148, 0x160, 0x10, 0x370, 0x2a8, 0x2a8, 0x370, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'virt_wifi0\x00'}, 0x0, 0xf0, 0x160, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0xa359e000, 0x0, 0x20}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x7, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x0, 0x3}, 0x0, 0x1f0, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x0, 0x1, 0x30, 0x0, 0x0, 0x7ffe, 0x1ff, 0xfffffff5}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x468) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYRES32=0x0], 0x0) 1.690917752s ago: executing program 0 (id=2285): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) r3 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000400)=[@timestamp, @sack_perm, @window={0x3, 0x0, 0xfff8}, @window={0x3, 0x4, 0x3}, @mss={0x2, 0xfffffffb}, @sack_perm], 0x6) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000ac0)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x860, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1, 0x60, 0xfff, 0x7, 0x80000000, 0x1, 0xa, 0x8, 0xfff, 0x4, 0x9, 0x78f, 0x0, 0x9, 0x1, 0x6, 0x0, 0x1, 0x1, 0x1, 0x40, 0x2, 0x1, 0xba0e, 0x3, 0x200, 0x8048, 0x1, 0x0, 0x2, 0xe8, 0x40, 0x6, 0x200, 0x5b3e, 0x993, 0x4, 0x800, 0x846, 0x5, 0x7, 0x8000, 0x30, 0x284, 0x4, 0x7, 0x6, 0x3, 0x2, 0x66eb, 0x2, 0x74, 0x7ff, 0xea4c, 0x1, 0x24, 0xfffffffc, 0x4, 0x100, 0x7, 0x8, 0x0, 0x94, 0x2, 0x1, 0xfff, 0x0, 0x5, 0x9, 0x7fff, 0x1, 0x30, 0x9f9, 0x5, 0x7fff, 0x8, 0x2, 0x1, 0x8, 0xf5, 0x10000, 0x9, 0x9, 0xe, 0x5, 0x0, 0x6, 0x1ff, 0x6, 0x5, 0x9, 0x5, 0x14, 0x58, 0x2, 0x3, 0x800, 0xf676, 0xfffffff7, 0xd9, 0x101, 0x2, 0x6, 0x8, 0x10001, 0x2, 0x0, 0xfffffeff, 0x8, 0x9, 0xffffffff, 0x9, 0x5, 0x1e2c, 0x401, 0x5, 0x5, 0x1, 0x7924, 0x0, 0x7, 0x9, 0x8000, 0x9, 0xfffffffd, 0x8, 0x82d, 0x4, 0x7, 0x0, 0x35e80000, 0x1, 0x1, 0xa26, 0x0, 0x2c, 0xfff, 0x7, 0x6, 0x7ede, 0x8000, 0x1, 0x4, 0x5, 0x0, 0x5, 0x3, 0x8, 0x4, 0xa21, 0x0, 0x7, 0x7, 0xfffffffc, 0x2, 0x6, 0x54ed5172, 0x6, 0x5, 0x0, 0xf, 0x20000, 0x9, 0x9e, 0xb, 0xbb42da9, 0x25, 0x6, 0x3, 0xd, 0x7, 0x2, 0x3, 0x5, 0xd, 0x4, 0x1ff, 0x9, 0x6, 0x6, 0x8, 0x40, 0x5, 0x9, 0xff, 0x5, 0x40, 0x0, 0x7, 0xfffffff5, 0x5, 0x8001, 0xdb1, 0x8, 0x81, 0x40000, 0xfff, 0xce, 0x10, 0x5, 0x5, 0xffffffff, 0x8, 0x9, 0xdc1b, 0xf2c, 0x10000, 0x4d, 0xe8b3, 0x6, 0x9, 0x2, 0x4, 0x2, 0xc, 0x1, 0x6, 0x896, 0x3, 0x0, 0x8cc6, 0x8, 0x10000, 0x4, 0x9, 0x8, 0x7, 0x1a, 0x80000001, 0x80000000, 0x101, 0x17f, 0x1, 0x9, 0x5, 0x4, 0xb1c0, 0x7, 0x7fffffff, 0x80, 0x8, 0x0, 0xffffffff, 0x40, 0x8001, 0x101, 0x8, 0x8, 0x1ff, 0xfc51c64, 0x10000, 0xffffffff, 0x400, 0x7, 0x2]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x3d, &(0x7f00000000c0), 0x4) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000001c0)='afs_call\x00', r5, 0x0, 0x3}, 0x18) unshare(0x6a040000) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="390000001300034700bb5be1c3e4feff0600000001000000450000002500000019008d4a5ab04c8c73d61d04000400ad000d00000000000006040000000000f93132", 0xfffffffffffffd38}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) 1.491491726s ago: executing program 3 (id=2286): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000000}, 0x4048800) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="360362d0b204c5edf578753c0000001000090600", @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c0002800500010001000000"], 0x3c}}, 0x0) 1.490817691s ago: executing program 3 (id=2287): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x4, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x64}, {0x6}]}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@can={0xc, {{0x3, 0x1}, 0x4, 0x1, 0x0, 0x0, "11a63b6556e977d9"}}}}, &(0x7f00000000c0)={0x1, 0x3, [0xdee, 0x18c, 0x10a, 0x492]}) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.489057947s ago: executing program 4 (id=2288): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg(r0, &(0x7f0000002300)={&(0x7f0000000000)=@generic={0x1, "1bf05a163f59e1998600dcc5284e94f4a5afcca21b7f82055d35c8e3de262b4481f9269d11f4a935bd39302d56d23334d4888f296194035a6d43946dffe469f775e97b24dd7d1a33b7cc24fd353fd2b6dda3ee1bb1c73ef70190027749a310b7eb800afb6a747ec4bc958bd0c35abef499b05ca09b9ce3a3397f9973aa45"}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="9b65cb0319337cf07e2683e91298b0ea0f10eada0d7b74c4def7429211ce49a1f7dc37929107593d52bc80c3afaf35d00ba56e6277a3a5fbb0ad428fef385363e7297da3d3bbe0ae7d67e056388bcafd18383a997546e3016e442d944a2b76bb922caefcdacb3e8b163260a0bc81b290c8f2fefd64118cb0d7541d4080cbecde5bab360de44c7db95ea254c70c0cc18b8141b02c8c4015de91915d11bb3f3c4abe87c79c6ea123f31398ec6b18187415032931c0f708f9b7a7cfe800240194d708670512e5389e454b", 0xc9}, {&(0x7f0000000180)="636ecb80b02fbe1232bb021e0e77ae5e22c934cefd1c95deffd3a4a64fd427163042259e3594a8ea17c75edd86844d3cb949027532d4605bb3608d7434ac466bd0383e0f8e43bda4a52fce67c815dbfeda56ed0586321e2f2dc3caf5c98be7f636c10a8cefea7fe6ebe90a5930925b18", 0x70}, {&(0x7f0000000200)="4a049a5fdbdc1e37a32cc00a66dd494f7fd838cc37b47e2b142cfe814986dd96561c0ab452d4fda36b73445c5bac9b75ec", 0x31}, {&(0x7f0000000240)="eabed1f788950aad3c274dd3a8e01b6fdedf960157a82cf7def9", 0x1a}], 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="10100000000000000e01000005000000e59bf0ddf5b0bc43001ce86863b081fae3f1c05d02cb41bef577a55588c03a00518729772e37ad0cad6c2fe4663c64fa4fc97cabe4c8efed756853f7dc2aff57d7488b54c8e2bf0a1058993397c7465c0ca204d196d7e97d9f9a3c359b878576006b982968c3af2a3edda851f78b3458b7811142d82cd7c6d8bac9f6f4fa7319153ee1b9b462ed0c5ef15b7154cc9c08e792db7d4409b74e711530bec5413f6d9c9fe2b7cb05f7646943a38174db1c8a514fb113b2d1e6a07d03155cb8ab4d71fe4df45912eae4a43ce56a316fa93bafe794e236c8a56706e5c2cd49c18262b6d66d2af63d6cc92c14abf2170f494516cd5dec5c1ddf4e4e7ee7828491b204eabce6164d8403090316f326e45d4a3fbeaf1e27bada0ee8f6dd7663cb69d1f4ae8e2d1c371895f7efbbd042e3e19ff39aa00e08db08f62aac09127dbb943e91813acf946989407425fa59b4d0b13acc541ee3544ddf492370379c98af112858a36ec7e1411b545fb11a0d3c5f28ae1f71e119830d3e6cede1ea36e6a1089f5b1c59dc83a51ae193dcd9bef2673c4079958979acad396592ab1f90ac5d9063444b670a5b104b42264c2c70e8d46414166684cce2085500999f4f800b015ffa5f69c70b99b489e4a646fc3163a2d0ed5894ddce863369a12da248e115399838bf16aec2ead03b4ed886351385983f8a0e4aad0d2e34832d5649130094fd7040dba02e30b21da62179ae295a06ba27bd720f50992f66cd5d3bd53acb7152f98948c10836fbbd11f7199d48b2730736dd16500a3bc991240d1612da79a2396b77a9a1d6c85bdc83e812998ae8a87f133c6b896034f0b04a0fb29491ff0780a98f94b2ef0fc04afd9c8d248c1f05fb5f93233c952f25e40d5c135528bf63c52062af71f80a90b244ec789a4e191a4cde6c99abe6d587676e09cf08442cb5cf913b9751dd15cd748ff96fa203b9c44325d6c050ed6bdbf2e835c0c5e768a6845bea8b17d21cf64acb042bd87cf7d2028d935217ebd94d72e060ab7f00c627589d43066ed2bf873b9656ad8c93a3536a053540a7a98a402fdaf29d4a9c66d14ada7ef8aaea90c4fa397a91c08db68108d88cca2df0e04364ef8dc1f7b13fb7be65742f705d45f34250b20177bba5fde0fb35393055eb6cc36379fdfe5f15fb35899994ecbd343207fdee392bbecd90b182b18e77fec22478bbd23690810d6d3a3117262770768275b35313c987b8e464cbe84e43d016ca9b58e6926a9aefeb6fcd5342b269b2673e7a054ccf266aa3446414fd4f7f01e699a96f9882adccd5ae8b70eed47b7b3f11a7e22fc961f9fd660a5e8fb6353262adbeb369a73f9c68d56c7e792f18cfadf64648e6dad323c8cf337b5b6c30562934b6b8e6150e6299daa2e9b0abf36e7e6754733d843df32d639917d890e77e6cc1a02802cc1c3f01e3cd4a80a7b1049b8c72003fc9bb853b365ff1e57c77cc9819fbd319e04198b8e00338f692388994cc4996d3be2815e287abbe090d3ee3785ce37e554959d1de9619bb4be7f240bba8123b003312e5ae3ac098e342f9ec68b63454374c2b53ca01f15e51bca7b1e0cb99348060eb87c794f7a42777c1a0dc50d2ef294d94f80adeee13aa567accd4dc927184da1d0ef7214ce3a34cee33448b4c90172748c8a40fbc0eb5d318dadd6a82bb09236b564be8ebf6fa4e096c2c89205a76c0c9697aa6f59e117fc5f57c60494bd8f6c64497c76890ba0e5e3eb4ba535a9d0e9937e9e931e2ed5377c0086e212f53352f29af78473c9496817bd5ed71237b82b1f3c3bf9f3068b6a6b5f3fcbb10cb0685e18326b98d9a6e138cf783c132c6263261099720ea08b7986d16631e26ab95d8139b4574554fe16b85fc742df415d4844f6d7fcbb12cdbcdc61e0fb3910ae8edad3be4cb5962f5713370969baf869c9ae33088b8b843ced2bee7a130c615c502ad5ca38ebc8b419deb16cf595b2b319fa2452d09271484bdb4e22d02d467e4f291d906132843ff41e78f37558f70e4f0184380bbe1d06180213a417986bcd6f4d97a26c04a86b4963d53993cb84b8a30d8907d00121e6ac58ce1e0dd3323fd78aece458f44e2e1968f91d547dcb673e6b1b3651aaa4224c0c67d2ebfa029c3793c7c4efd2f326d555d5ab1ddb9b1010105d83ae835100f11c18c7dcfa0eddd7cae59cd1e2fe79de80863b1b024b70aa2eeb6f0a533bcb33ec0833ecba80c994afb303d137b57380ec2a2cd1c053cbaf871ed3e2f2401434feaed51e76b7953c8b2b30796a44213593a87bf37b55e2728ef90082e4c0113fa0cbfe296db794122d51a8f799e34ba9a6ad7e3754aa7565dba8d5fdb844fc3cb31b75f652c1a5446812af0eb123552683611c6ab581dc1b5d127f3c15f0f363ffd8fa27356c382c99f5203199e23ca4ee9d76f96b1d2e729bfdb6c8511072d667608edcebc193711f86d88212889df0aa2dcb4cf0681b8f6838cbd59399a5cad6a6b2346cbb6d381ddd30048bef730570451c9bfd7c7728c1d4c385cb3024a4832c7dc6de7dc1d574cedc331e2841a7c3d4aadd84661b747f6554f6b2faeac936569adfd881b7e4f3ab51f805f421bf1f27ad79869b7a6d033e4621f00cfcff91631c3fd703a6be4a7ea347ac3ba83be25d75e7463ed2a468b715237ff5ae8c94c3643cf02bbe408ac164a96c9bb15a0f19081155c01aca32b6d3a7a8256cd28b1cef60920e07f69f90002b52a66ba49c8a5e5547b009ea4b401f6a217ed02198745c457b6410b6ef0b5f34d23548169af932b52f9f25d66f9270bbc5c6cf588358b0835ab76d595866269291053a4197d466248f9eeb8d9562577b036ad4794eccfdf8837ea744ad0899fe59d39dc433da2c1b3b7afa7ebc55e8ee1181f78529246cb4f7badbc4c06440c82e26899879bcc0494b9710df5e7caeed64f4d49a65d1d27e0fc44da65163ce5934d11453c243ab089b3fb0130039fd0cac28303e16e203977c22d30e34c81e291516e242c53c80f7daf713b70bce2d26a8bd3cc444ba3a7ff624069d9a05890821f9c43f12cfee767870d5dd2bf9cbb7e527df9d5232f5c2922f64ca7d36980b6d1ba6490cb7eeafb46dbd8f156373026b76db5a436198c50cdcec85157bb989ae52b473ca1467c79b6de6afafff9e4404e364e8e29922a06cb3b14338089a1aaf016076060190052dc01d49022e53ded78d31fd5d0ddac8e624e353a0447108ae589157da6b37b37a6f99f4672c34afff5d379dad3df1517773a78463ec9772d05e36e612901dd7c2263d77b2773c91e8910cf1090889ac0aef08205636fec16602f57eb8311ed2e62b43b5df2d3951f2eaabeafa848817b40867dde0304e88ec1f3db083338df113f34b94e2f84de95949cb657f42f36f659ccc8885e8014b5eea64f0a8ff87cee601988602fefc3bf30cb30a85bd9fb7083055d9787df1c1ac06e6eeb50fbc8c5e1c8c67f8c36888186a0b37bc18e7c5b35b2bf80db8bb2f4e13a2cdb7c948df03df81554c3aaf397f5cef49473e4157f359ae716114a8faefb63d73f1faaa7860878de40a0bb032300be3fb82e562321325c6bcd91259b6753321de77ab631278f01f2ea3bfae92878e8a29cc26a0b3278b26890fb65106d53763d296eff310f0ad4a1726e4a85d39afb6ba4ec313689f3f8f85ddd909cd9712d294c56f2d194af66cad92ada2022c3a7c444bb629a2518d7ff0ce691b932580aedfb516afc382be772423c92e600ae39456d4ffe875bbefc80c0923c07c1fe2e235223f8c4ef6767c2b0534c566402374cad28b7d978333b7f9e9c148311d1750854e30b63ae6c8435613658aadf9ec34fdd0c8a738af311ac13016ec8daefaacd0643d00c2bcc71237c63aef53dc7ad7e787f2493f031a7d1b5ac532c123439bf21925b4c9c8d926da7b3ccc9e22bf439fa6f7bd4c97d551fb2aa2171d5de654e0a37195269fc0b4ec204c14b52d509d753010706fff6585249a6d495ce53bf2543e33fe4c110e2ad6889e0a55fa4a10567bb9806fd4a1f0822fb0ff576eaa15bcbbdec84138bc7891b431b7d14ad9102fa29028134e2e4a1cf203b6405abd9246af7369a401fb81d71cf3190ae06d2e5c1db67827373a32eb10cb3bfece41c9b6f6e2c7baabe9578a7335b5a90d1cd3eb4dabeb972e0ea6c251f3f63b7935a23d0bf16e53c2d6e9971723233b1bc8f25b19d6487a335e96239661ee66cd379cb8316ec9bb3bfac5fdc98df045d77a602c2367ac766f794f981fc7764e4e317b80d71fb12f40ab90701a570135dde64e21afb8ecbcfa2eb2af486d0e789509ae089f53741b59243d4ace932a2f77692e00f99b374871bbc8b294db7b52c8c02e554e88ff744f70bac16f49a6b8b9c48549828f8be195bf8f9beb3188ea0a8ddfe33f634295a8922e00db770f6941a40de82d147ca797db15b291035d4cfddca0964dced4e76e6d4026813f3874919d6e09fe42544fb53c00d768c4814169cfc91865ae74fc187a0a5b66ea2b7f35638cf35ccbefb1a94a6ac5269d9abc497004062265e579ede33593cfd132c7a7f032b658cbca98b771b999db28ba82c9fcb4c1f94a618e61a819e4759af3f6cf2189fa1028b9af826bafa692fcdb9454dce53dc671c30c5e0c44a7346308958a4152982e4d3e7b9c5265e3d3753d74d614c30b0854da078ec1369c134c73f57d61ab10d92a2439823e0a5de41f93e38efd843f47dda0a7a64797b7f28ebc9c1586920aca0c45c6ae7f474954cacc89fac8a7cfaba95fc7650a0e62d9c6495db0ac94fd4125b823392a3744a0ac2beb899dc8b3058da1f1e7a84b75a2069881e75b160d8b89c13925925b9c379f6a0f0d2f97c3f44852aacb7ecc60ac1ac503711acf20771fb421b7e7425b841362cd23671b5e4e25dc0f6449728e0344e7a7be4d365450d0082c29515cd9a5bb6309d4ab193d96c5ea16b67de9d0d1156b95a38528a3803b141875447fd4806ef27e7a04d732f73d0c94fd3e4746c4a1a39de658c310a6fc13f0084f7a986a0b4c9facad649da3e74f898562aad027221b610b37f339d83fe19238ed8ae1c80e1271befb61e0e8438a506cf9ea80bd5d6f3c035663c27d8959218eb608b7089e2f3ca66c97c7d8b04a6776575bf433738d6bd267d71054b5475856c87e19bbfe03941c43d6c474aa43b92cc4518fc65c64ee7065092b8bc5ac07406097cfb522b159e120f1deb7400f1abba52e4d21f71ef5ea3eb881d02bf674fbd1a0bd580eb0cf91410e0e83b9a56cc3e5f82dc2838ca471214f3872cadd63ea79fc03916081d5845ee3742335c766896987de08ee3ff49742a5078feb15af52c74552a55266c5657c9d9e51f5372c928fafd6cebbde27d1f70823fed6eea5ef67f37dd45f6ded1dfa5ee5869c75f1e33de33a79acd2f49fdf53bd697e8ff70b3f0c8608d1b4e55db009fc8439ce434a52c2008cbc04e19348e57219a1f31ccc1c907d7d88f1b408e8943a343085b73dc36d3d2a0123a97e08f4b615073be6c9dc3b2f7970f85370a572df653ebcd6199d5491663ff370f5b764affea8e3d5f73722459f6a4ff3dc04a451092c7d524ed8288a5e71bed6e0832bcbdafd16ad8a02ee8307ee8119ce91fe642b2ff36b7efa448a83915c617c364e4f243becde86fb2a98c9ee7f064239e444c624ccb50c25ffae0a29f26920aa5c6f0de46eed08e505cf7d62ed3d242f06a94fe295d11e1f27f17d6a65d7e0349d14be0626ff13d4eb23f8e179018efd555659dae652e10100000000000000e0100000800000058eb89f43301798e5dca6a79fa91cfa8353953664e51fdd9b7477686a86639a3798424397ba27527f7f3a8ee67a7becaf1636e04b0353552f1126e80cdc094b2658309e06a86bd74866a0d046e296a89d5490b15964bc625184d1f38b73ef4b0f56c0e5b3a47f2c9f88b1b26c67a85cf378f940cfd1b7efa2fe96534a4fd721da625dfc18579f21187dbe5533785b048c25648d04d5f72206954a637195b2532972784a33fd140088872578b5430ab2e977f509a2e87af0f53edcef7b5b65701a722c0d2593f5b4c0cb83e39a227903bf1cff2a82272227c69c68c77becb0d6d5465781b2cecc80002e39f728ee3310de5372ead50bf2adb776d5ea32ce35d811373ec0dcdb65776744918b7b0dc861e58cf54208db1e107715d13dea44b09ce598f2e7fdba47c53ff249ecd50824b59f7ec4d4d33790f60e5da71c85eeae7ac39dbc26483e8137b49cfe34d25bb18fd7ac4a13dbe9d2d7442b6b30bfaaa000271d4b9bf055eac534166a3fb395606374cd9a0b3885b4fbd8a46a44fb51d9c1fee685b55d505f256894a2af3bee7a0b5260198bcf8584b9324c273c5e382e601bb80c3e6940057092fee8cb18e4752781d64891e7888e8a307c082b3029f2f96bcd4dec30d52e0a5b4522a8f41fac7e9c97c47ad54e2e54268f926466c5ee5400c5ca892d70ba3a1657a627696a40ec06c8b1d68bf74950216c9fa62d672d675cbb31f9d60f94cc9c268d28242712fbfcddfc4af6cc897f9159bdb225c77cc6565479fe270e9a8b836452f56cf0ee007f7b6a010725bbb53f95ca2a11722cd2cbb66dd8b9be6b8b27876f2609eb34f845b9f09b783e3533f3cba92889110b871e804b9d43e382b8b21ac2fad9cc952353cc53b08100337639bb7ed4b6272fa80bb71131b56fd8347b132350cf774e88d835d6d0c8b0b58e469f7cbf7b4529a05392fe10242b5cdd2fd31c6e1ef4e0cbb4bc69559325a266f574e2743f082f747e52cc0c3656a52e02e22e6482e876e662551e0dcdf8b4c108f1986cf8cb3176d0ea93ecc2647f46c1d4d4d5ecb1ca7a797552cf6f2492b0cf60bb17cd1bcd7a5e7f12e5c3aff7c1d746d554e9282a16df41b4e4d250f099fb6915f87399973d6e18eb11eefc714a3b153d47e4aedb2be3557efc2559365117ec3bced21dd7b346d70d1ccfd3a5bbe3698cf3085492fb264e9142d4ac5c22f1fd6191f43fb3563f847acd76dda59c88854714264182e11403d25468520409de8358bd3f9a697acc46a4417ad8d56378739843eceadcbf16c09be4695665d682223fb94f6de20226945c2f1f49e87a1b44d44f0b3cc4f14cadb6ca0a0700d0f88b13dc18cef517d9005869bb8deae67d6fb4a609af6ba442185e0481fb528dc27d3719c66caa65dcf81a6b6e1d1e2d55bb90d45b72d693e6fa766362572da182e901331e1b11e62275a3bc0f649535afb82bd40c32335f40a700fa6e423a283ddf72057eec2185e41d3df5ba006b5bdf1e121a18100833d53283b0500d40a7c9dd89a40dd2f2ebf1adeeac6cdf934ca8ce13953922f9de7bf8ad99041923c718731fba5a35bbefa6684877427968e8498f1595b9173ba0342bcf7199f05d46f636477ceba317e9358df20952f2ed876e2188b5ae2d9ae8f62647bb67268e050942ada9b609bda87584994592c4d18d5de1483994746627bc173fc45d448dec35c46d5d6006b3d381983afaad9ccfb2fbcb85eda8adf248d42cb0d979ff042491ec447acd3947675b534a13645a2fdda0f5cdf69104f5729ba3d8e32c139b64ccc26b0c1975133a36d50aaa9ecf344d84af5720380ed6d6a29bdb46e1b1cb9aaa922c5adc3bb6b1a20cb3475113604d1a5c43f4edf5c283eaf22afbee7ec1644d678b0ad54996e92e792f4624cf54128caea37655d84d6c61446d4dd0ff9062ad63e5e0a0f69d585d8ede71390bdafb1dedc808e2845c9b316b4d1ac8430364516f77892f505499b91f4dbe6e1b4a886c238e2c1bc6cefb4eb47a27629943f57399f06ad385d0d1cff343178f1cd2717e9635b60e48f4e3e716c77df1eee7d37acf834c7957da95ac36e4a6a202e106617ce893aef2f7c7e763ec935ca1969e464478b5780228be9f887e3ba24f627ca82a302155a9f86e37f747b369ca30b1ffd0af0d5473171c06f7d2e83d148db6a991117638ee766fd7edaf14a19f902cc8987b6fef2d16bfd6faf596d4cc98490a6f38360a47d008ca00013542a3a132ba41761a61886b9f8c056d89090c9c272fee3bd68dabed7dd394dc81ad4270d6fb8de1c18177ce7fe205007ca27635302ad937e222e455ee0f6e894cb3733408da9ff346e5040a30b86f61072b23aed27263799fa9378429dc4ccf9dcbbec30465f5c79bff1ea2c0992d60e70705d5fcc3973f298ddd645cda6d9c5720a2e3fae48e509ffbca389b5c2f8e09f75ad7315290654c63a4f80ec17bb88ea6ff59d74ca8f9c436b6dc3d55e96d4f964a3904cfcf0a26e302fb1ee4e733e55230446bcf45d3effff3426de2d13cda784b579ea3481a4381ba9ad33336cc302ccaf0b37b06ee818cfcb207f812e84ca161528bf84e86141de175faec97c46f85d8f12a254eda056f51bf3b6c0413759f728142288848072f570b074354e8899ca46158f99aea555b90d61452ee3f6b40d180058652be19c0684e610bcd5be22e7e00efd24734142dd99607fab2b5da6023b04e652e94e13cb797f532d35b4f75ec97ec4a0d7e5ee93010a292fb92f46d1fc14fb3096c2d644c8b0415066b31e697688350a977e0202b25b1ebb8dec5530bae01d8bc87331448556a06994a565cfacf38a0da19849cb84eb11e0f2a2699e187b60acad5158b05b21af1c000dfd8ea3fbcaeb029edbcb3e4bb12380eb30234a1b2f1f50bd23f10073974aa5f2ec9601ec25e268493ab5c50371a27ed7e331dc16230539a8d7474c4a96be4a634fe480f98d071040e26369015736ac376aee855995455602faf57bff722a3c78d4fc0247122d785ac8a367311ff163d25ae2a5b0afa0b012333c200bdf1f1f2e0fae0fe48ae01b2ad46e718155c015420beb6b71b4f1a8d3e6c0de260080be7f87e01666a9feb38f669a84723faa06c645c1213b7da85e40c0ac6bde4477f8d3036edf6ccdd94daed9532bc7d1915731da81bd7836c988b9ac4761925206505924897047891dc037c472e891dc967a07589fbdd31ac2a69c2bc10e22b0dedace5d55cf5edbbd256c4243dc65b4852a707d5bed70343edd9b7bb1110cf28ae8f2f65e62f96415284f79c67bb536902b44689a0a17152b362f848936b11a2d2a6846d9cf50e0b3a27c14440a21a82d9344c7f375cdf57da97e711215584fcb74025b6f35414ef284b9b32f1c5a2c86f7e3fc8976ed7b94d2b17671519a658bb5669e09eedc611d88c8e1ff5da08c0da3ea4524d6cf6972425d08eccd204ad2060ea09afd0ec5a191fec802b494e742b81877b0f539ee2e7f2585d74af9a88d339f908bd7b0d52b4db3f9ce0eb00c276dade01c6e37d1f8bae9b55e393b83a7507a18bb8fba9da90bcb9746a7e03d7d63f65c5f8d579a736bd4023ef13bbe124b7265211e8274f2a794302ccb3852690d20a05a6aca8f717ffcb00bf41db51a3948daf4e4227acbbce09e2e0d2fc880773e22b03f80852d885a93ff1d1b1fcb369013148d9524b7c480fa087548920dcf94075f552ffd8e04fb2d7066b93da93b91d26bee40b8f71c854aaf5ec67bcfb6a425a68b64619eb0a7aab3a3b4a5d178e47afd769bd0e4de0c673b75c23ce36298987a1f11e29ac65f102d49f45ed771f3cfc51e64d679b225c072ed2556f70a71fc25f492531ca38bf4440126bf23ba8d147af70866678847c9ec0869eb0b5f8d82353c8651853e80f019d9edcf2c567d5bf000f818ed228e5827e08ffb99e95b65842c43ab457cf18b756ca861fcfdebd772c637564d03d26e87b030e6c5d89033875d9b2ad23267419b0b10af4a3d118e7fc637a3dc20594fdbd2c5af0d4b14ca976c1aeb03856927ffc15f3518d99bc793f8c99e45644dcc7c90fab299d28e30d1e8a757cb54f041092b25276cdc2dead6be30ec22fa473e09d51a3f681ab8edbfdb227e969398365bbc505064c2ad0388a0ef798aee296e2669d944d015e17e85158cc7071462969ded90ef664ca97267cb00c58417dba41a4ef221f11b39e7449213e27ff82437d6ca3df0cbf966e131674385d7d557bb109e2dadb607b6168a67739d3918feb91a876df4a072fd9770129ea4d94e1f804dba65fb73179ba132bf6a6b5a4a2a7b25472b6202a789f66392f2e53c4445f33f0a53ea1914749bcdabb465d67388a9b88159bd1965681c0b3733c778852c354f4c18381df71d2dfdb7982f5dc6d5b88917556c008864d059510ac3f6ce1cafcfe0ffdd990f36fa55eb923c0919678cbdb74f0cfd0b38b04e535c9afe60841d0d427d8f358d7c8754a04ea26c1eab5333278b3578b1f4acd1e256ee3a7631c6438a84d0c8a3e55d4309251c02e481288b4288a57b6129f50b1a39448c870f6b0ce67f9dbffb5309c797c88eca7f444b0bd48c9b5c82eda5d5854b0bfe0542d4959c460ca76f1f0c6c96c8e2357f800b5ec443ff269b81b48d2637587b46803a2eddc35157390b78b682f4386a395e4dc941183d6d67e761bf9696e31d7f0b9d684a9e226c74a3afebf6e60e88c8388af566c976a4a629ee93d6121ced1d3c75b2216c651da6e79e599188b805f975450f3d1c448e9a530e2ef5cf8551ec1efc981913ee565cede8fc9dfd5040e85a911c7841fcda84e7a9c08d42e03fdb87ee3ded9d14e48d3fbf0ee97e2ecc66a120281df1c7cc461cfb4e8b442ac2c66e8725f9d798808d7b8b19eccd5973a39e3188a3c09daa636b78560ca76a8150b1fdb985f422780991fbdeb37205987cc81896320dec79ece529c7f784eb8911be4e202613f5b6156fad81f803e19e963b9e90e6edabcf5473a8ac5c1052d05feea77438091415071907c919ee3e6ddddc1d27bfcd2a9d00ab7244b747795046de799bbb630a58a64e2bf3d37815dc41b7e168a53b691cd255d5162f7bbee4e08348282314807d5abdb45607734c35ecd657fc20160dd71b3d57b1f73662072579c30075388f5c293b86ce98602ad07c674444c37b1595e053517bef823a9486dc9a9b70625b104f20b45475f21854c8853f6f96abb7794ca94af741b1f7b4f89bf06c41550ebfea7419b3e6baa2f1987ef79e7b65d720e55dd5dd23b0c4278f536d11888059ace05ec164e849b183e8dd6eb50892f12db0b9df4f3a4d70651c9ad65b13c1427af67439ca1599f00a3464f176ab5b8ca6abc1418fd7e73d58d05d7f2915b7b54fb4b1b6b1d279133752887ae9fddd84753ffd2422025d7ac57c48e903a75d8c25f10972090d4611f99591ea4e2857c08d464c24b03fdf761b1f164c7eaeb2e2d93bdfc26cde12b13d64ebe20d6c223a1bff0e4bdb8d60ef92b5260535bf716e47e294f4daa630a09c6572420418b2a6f7438bfb1c647c7ea9dc19d08fe2e6e889398f3e4761fd0b03cc10d10064e607023a3db48b6792e035913d3761dcfbc95d60eb02dc7ffab6f02a3eaa2d8886e4a913f8a30f836c0c8e10941711b269bc330ecd5a73da73f1ad82216fe553845ade93891f4ea6c9888d0bd61a5c531c767e6d70c8c9ce6919d7063cc3f44cdb8e8996f2c2c40e405cb778bc8aea4d44dc1a2237db2e5d305ae1f601e522e9b26119ba2c08c3593cfa64e85041ffdd1f55"], 0x2020}, 0x24004000) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(r1, &(0x7f00000029c0)=[{{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=[@rights={{0x10}}], 0x10, 0x20000010}}], 0x1, 0x3400c0c4) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r2) 1.443934411s ago: executing program 4 (id=2289): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@nat={'nat\x00', 0x1b, 0x5, 0x678, 0xf0, 0x318, 0xffffffff, 0x0, 0x468, 0x5a8, 0x5a8, 0xffffffff, 0x5a8, 0x5a8, 0x5, &(0x7f0000000080), {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, [0x0, 0xff, 0xffffffff], [0xffffff00, 0xff, 0xffffffff, 0xff], 'vcan0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x11, 0xf8, 0x4, 0x24}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@loopback, @icmp_id=0x65, @gre_key=0x2}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffffff, 0x0, 0xffffff00], [0x100fffe00, 0xff000000, 0x0, 0xffffffff], 'veth1_to_bridge\x00', 'rose0\x00', {}, {}, 0x6c, 0x9, 0x4, 0x7e}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x5, [0x7, 0xf504], 0x2, 0x30, 0x7, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @empty, @remote, @private1, @mcast2, @loopback, @dev={0xfe, 0x80, '\x00', 0x41}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3d}, @mcast2, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}], 0x6}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4=@local, @icmp_id=0x67, @port=0x4e24}}}, {{@ipv6={@rand_addr=' \x01\x00', @loopback, [0xffffffff, 0xff, 0x0, 0xff], [0x0, 0xff000000, 0xff000000, 0xffffffff], 'veth1_to_bridge\x00', 'netpci0\x00', {0xff}, {0x4a1a313367540f57}, 0x16, 0x1, 0x1, 0x2}, 0x0, 0x108, 0x150, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d6], 0x40, 0xee, 0x1}}, @common=@srh={{0x30}, {0x12, 0xc, 0x4, 0x7, 0x3, 0x400}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv4=@local, @ipv4=@loopback, @icmp_id=0x67, @icmp_id=0x65}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@eui64={{0x28}}, @common=@eui64={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, @port=0x4e20, @port=0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) sendmsg$inet6(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="f148", 0x2}], 0x1}, 0x20000044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.390096386s ago: executing program 3 (id=2290): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$netlink(0x10, 0x3, 0x15) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x10, 0x1409, 0x262543c4cee33fe7, 0x70bd2b, 0x1000}, 0x4e}}, 0x20008000) recvfrom(r0, 0x0, 0x0, 0x100, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x92462}, [@IFLA_MAP={0x24, 0xe, {0xd, 0x10001, 0x7, 0xa6a7, 0xb, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x80000000000000a, 0x2, 0x0) sendto$phonet(r4, 0x0, 0x0, 0x4040000, &(0x7f0000000080)={0x23, 0x7, 0x4, 0xe}, 0x10) recvfrom$inet(r4, &(0x7f0000001880)=""/4096, 0x1000, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x34, r6, 0x5, 0xffffffff, 0xc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x18}]]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x880) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000ffdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="24003300d0980700ffffffffffff080211000001505050505050020004000ec108"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x44050) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.287249805s ago: executing program 4 (id=2291): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002e80)={'gre0\x00', &(0x7f0000002e40)=@ethtool_wolinfo={0x7, 0x1, 0x1ff, "729d3031f960"}}) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)={0x28, r3, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}]}]}, 0x28}}, 0x0) recvmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/156, 0x9c}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/152, 0x98}, {&(0x7f00000002c0)=""/210, 0xd2}], 0x6}, 0x1}], 0x2, 0x0, 0x0) 1.286111742s ago: executing program 2 (id=2292): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x6a, 0x3, 0x20000000, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="59cf0000000000000000080000001400018006000100020000000800050003"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000000500050002000000050001000600"], 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) readv(r4, &(0x7f0000000180)=[{&(0x7f00000006c0)=""/224, 0xe0}, {&(0x7f00000007c0)=""/244, 0xf4}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x88, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_INDEV={0x14, 0x8, 'syzkaller1\x00'}]}}]}, 0x88}}, 0x24040084) (async) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x88, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_INDEV={0x14, 0x8, 'syzkaller1\x00'}]}}]}, 0x88}}, 0x24040084) 1.123691161s ago: executing program 4 (id=2293): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000001940)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x8, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x1000}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000000)="a0002883e99ced2eeeb203", 0xb}, {&(0x7f0000002440)="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", 0x5aa}], 0x2}}], 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) accept4(r1, 0x0, &(0x7f0000000040), 0x800) r2 = accept(r1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0x6, 0x1, 0x0, 0x1, [{0x8, 0x1b, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 400.168831ms ago: executing program 3 (id=2294): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x0, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0xfcba}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x404}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040080}, 0x20000044) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @empty, [], [], 'vlan0\x00', 'sit0\x00'}, 0x0, 0x198, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1b}}, @common=@ah={{0x30}}]}, @common=@unspec=@NFQUEUE3={0x28}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) 159.106835ms ago: executing program 3 (id=2295): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r5, 0x6ff, 0x0, 0x25dfdbfc, {0x52}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, r5, 0x20, 0x3, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040}, 0x48050) (async) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c00e394c549eaae5ce8de5f55", @ANYRES16=r5, @ANYBLOB="f40c28bd7000fcdbdf254b0000000e00a80066697273746e616d65000000080003000000000008000300000000000c00a700ff0f000000000000080003000100000008000300020000000c00a700ffffffffffffff7f"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r6, &(0x7f0000003580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044805) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 80.182176ms ago: executing program 4 (id=2296): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r2]) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) r5 = accept4$bt_l2cap(r4, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r6, 0x114, 0x3f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r7, 0x1, 0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 0s ago: executing program 3 (id=2297): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1825fd7b4313f301000021000000000000003b810000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)={0x1c, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x808000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x7c, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x101, 0xf}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "12f9b130b615ecca2adecc7222be6f71"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "406fbbd5a59bcb2a5976f66b2a4502ef"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "a8f437f9d063329a8fd4815eecb6c1bc"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "cb635b1355679b3c137f0912d65838be"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x90}, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) unshare(0x20000400) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) write(r4, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x6e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1825fd7b4313f301000021000000000000003b810000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)={0x1c, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x808000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x7c, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x101, 0xf}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "12f9b130b615ecca2adecc7222be6f71"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "406fbbd5a59bcb2a5976f66b2a4502ef"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "a8f437f9d063329a8fd4815eecb6c1bc"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "cb635b1355679b3c137f0912d65838be"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x90}, 0x1) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) unshare(0x20000400) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) (async) write(r4, 0x0, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x6e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) kernel console output (not intermixed with test programs): comm="syz.4.442" name="bpf-map" dev="anon_inodefs" ino=1070 res=0 errno=0 [ 120.407430][ T7590] tipc: Node identity -:, cluster identity 4711 [ 120.413830][ T7590] tipc: Enabling of bearer rejected, failed to enable media [ 121.016634][ T7640] netlink: 'syz.2.454': attribute type 20 has an invalid length. [ 121.236130][ T7654] : entered promiscuous mode [ 121.249972][ T7654] netlink: 'syz.0.460': attribute type 4 has an invalid length. [ 121.301803][ T7654] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 121.603199][ T7685] __nla_validate_parse: 19 callbacks suppressed [ 121.603218][ T7685] netlink: 16 bytes leftover after parsing attributes in process `syz.4.471'. [ 121.635065][ T7685] batadv0: entered promiscuous mode [ 121.643170][ T7686] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.650438][ T7686] IPv6: NLM_F_CREATE should be set when creating new route [ 121.661739][ T7685] team0: entered promiscuous mode [ 121.667034][ T7685] team_slave_0: entered promiscuous mode [ 121.673545][ T7685] team_slave_1: entered promiscuous mode [ 121.682565][ T7685] hsr1: entered promiscuous mode [ 121.687824][ T7685] hsr1: entered allmulticast mode [ 121.693022][ T7685] batadv0: entered allmulticast mode [ 121.709066][ T7685] team0: entered allmulticast mode [ 121.727006][ T7685] team_slave_0: entered allmulticast mode [ 121.732850][ T7685] team_slave_1: entered allmulticast mode [ 122.166401][ T7709] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 122.282898][ T7714] netlink: 'syz.2.480': attribute type 1 has an invalid length. [ 122.307647][ T7714] netlink: 244 bytes leftover after parsing attributes in process `syz.2.480'. [ 122.453582][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 122.487162][ T7725] netlink: 'syz.2.482': attribute type 4 has an invalid length. [ 122.514456][ T7719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.481'. [ 123.017178][ T7760] netlink: 16 bytes leftover after parsing attributes in process `syz.3.489'. [ 123.047655][ T7760] syz_tun: entered promiscuous mode [ 123.402798][ T7782] netlink: 28 bytes leftover after parsing attributes in process `syz.3.496'. [ 123.412344][ T7782] netlink: 'syz.3.496': attribute type 7 has an invalid length. [ 123.432676][ T7782] netlink: 'syz.3.496': attribute type 8 has an invalid length. [ 123.434929][ T7775] team_slave_0: mtu greater than device maximum [ 123.460008][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.496'. [ 123.618625][ T7799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.501'. [ 123.764790][ T7803] netlink: 'syz.1.503': attribute type 1 has an invalid length. [ 123.779969][ T7803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.802368][ T7807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.506'. [ 123.812994][ T7809] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 123.921527][ T7817] xt_hashlimit: max too large, truncated to 1048576 [ 124.056113][ T7822] netlink: 64 bytes leftover after parsing attributes in process `syz.2.509'. [ 124.114942][ T7824] netlink: 'syz.1.510': attribute type 3 has an invalid length. [ 124.739215][ T7872] x_tables: duplicate underflow at hook 3 [ 124.762250][ T7872] sctp: [Deprecated]: syz.1.523 (pid 7872) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.762250][ T7872] Use struct sctp_sack_info instead [ 124.805080][ T7878] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20004 [ 124.829496][ T7879] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20004 [ 124.849649][ T7872] sctp: [Deprecated]: syz.1.523 (pid 7872) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.849649][ T7872] Use struct sctp_sack_info instead [ 124.880392][ T7878] sctp: [Deprecated]: syz.1.523 (pid 7878) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.880392][ T7878] Use struct sctp_sack_info instead [ 125.159908][ T7893] netlink: 'syz.1.525': attribute type 16 has an invalid length. [ 125.353026][ T7901] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.303262][ T7964] openvswitch: netlink: IPv4 tun info is not correct [ 126.650375][ T7982] __nla_validate_parse: 4 callbacks suppressed [ 126.650392][ T7982] netlink: 80 bytes leftover after parsing attributes in process `syz.1.557'. [ 126.705029][ T7987] x_tables: duplicate underflow at hook 2 [ 126.724299][ T7989] netlink: 88 bytes leftover after parsing attributes in process `syz.2.551'. [ 126.902288][ T7999] : entered promiscuous mode [ 126.908438][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.561'. [ 127.033689][ T8005] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 127.074197][ T8010] netlink: 68 bytes leftover after parsing attributes in process `syz.2.564'. [ 127.094812][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.564'. [ 127.098537][ T8005] bond2: entered promiscuous mode [ 127.109068][ T8005] bond2: entered allmulticast mode [ 127.114653][ T8005] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.128636][ T8010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.564'. [ 127.135930][ T8007] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.146008][ T8007] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.159839][ T8010] netlink: 'syz.2.564': attribute type 14 has an invalid length. [ 127.369421][ T8029] netlink: 188 bytes leftover after parsing attributes in process `syz.4.568'. [ 127.523260][ T8037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.571'. [ 127.616601][ T8037] bond1: entered promiscuous mode [ 127.621972][ T8037] bond1: entered allmulticast mode [ 127.628129][ T8037] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.786635][ T8037] bond1 (unregistering): Released all slaves [ 127.809205][ T8046] netlink: 168 bytes leftover after parsing attributes in process `syz.2.575'. [ 127.954095][ T8065] netlink: 28 bytes leftover after parsing attributes in process `syz.3.579'. [ 127.979272][ T8065] nbd: must specify at least one socket [ 128.002370][ T8065] nbd: must specify at least one socket [ 128.044681][ T8071] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 128.147388][ T8073] netlink: 'syz.0.583': attribute type 29 has an invalid length. [ 128.184457][ T8073] netlink: 'syz.0.583': attribute type 29 has an invalid length. [ 128.280704][ T8084] bond0: (slave bond_slave_0): Releasing backup interface [ 128.314330][ T8084] bond0: (slave bond_slave_1): Releasing backup interface [ 128.369669][ T8084] team0: Port device team_slave_0 removed [ 128.400152][ T8084] team0: Port device team_slave_1 removed [ 128.406267][ T8084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.433187][ T8084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.571487][ T8084] vlan0: left allmulticast mode [ 128.774515][ T8123] IPVS: length: 8 != 1152 [ 128.876302][ T8128] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 128.915275][ T8132] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 128.935362][ T8128] openvswitch: netlink: Duplicate key (type 0). [ 128.961012][ T8136] netlink: 'syz.3.598': attribute type 4 has an invalid length. [ 129.068717][ T8143] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 129.450487][ T8170] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 129.465601][ T8170] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 129.483518][ T8170] gretap2: entered promiscuous mode [ 129.494233][ T8170] gretap2: entered allmulticast mode [ 129.647842][ T8181] tipc: New replicast peer: 255.255.255.255 [ 129.669463][ T8181] tipc: Enabled bearer , priority 10 [ 129.956170][ T8196] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 130.008200][ T8207] xt_hashlimit: max too large, truncated to 1048576 [ 130.218506][ T8220] netlink: 'syz.2.628': attribute type 5 has an invalid length. [ 130.229300][ T8219] netlink: 'syz.2.628': attribute type 5 has an invalid length. [ 130.267647][ T8224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.667953][ T978] tipc: Node number set to 1835347501 [ 130.960696][ T8276] netlink: 'syz.2.649': attribute type 1 has an invalid length. [ 131.024287][ T8287] IPVS: Unknown mcast interface: pim6reg1 [ 131.122761][ T8289] netlink: 'syz.2.652': attribute type 11 has an invalid length. [ 131.204546][ T8297] bond1: entered promiscuous mode [ 131.218364][ T8297] bond1: entered allmulticast mode [ 131.237560][ T8297] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.858268][ T8338] __nla_validate_parse: 22 callbacks suppressed [ 131.858287][ T8338] netlink: 20 bytes leftover after parsing attributes in process `syz.4.664'. [ 132.069584][ T8351] netlink: 32 bytes leftover after parsing attributes in process `syz.3.669'. [ 132.084424][ T8351] netlink: 32 bytes leftover after parsing attributes in process `syz.3.669'. [ 132.132362][ T8355] netlink: 44 bytes leftover after parsing attributes in process `syz.4.670'. [ 132.143378][ T8355] syz_tun: entered allmulticast mode [ 132.154839][ T8354] syz_tun: left allmulticast mode [ 132.164617][ T8357] netlink: 'syz.3.671': attribute type 1 has an invalid length. [ 132.418976][ T8369] netlink: 'syz.3.675': attribute type 2 has an invalid length. [ 132.493245][ T8377] tipc: Started in network mode [ 132.509496][ T8377] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 132.536344][ T8377] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 132.545880][ T8377] tipc: Enabled bearer , priority 10 [ 132.571012][ T8380] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 132.623265][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.733504][ T8385] sit1: entered promiscuous mode [ 132.739023][ T8385] sit1: entered allmulticast mode [ 132.958712][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.686'. [ 132.976371][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.686'. [ 133.260472][ T8371] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 133.532344][ T8430] netlink: 272 bytes leftover after parsing attributes in process `syz.0.698'. [ 133.658087][ T7367] tipc: Node number set to 1 [ 133.722210][ T8442] netlink: 'syz.4.701': attribute type 18 has an invalid length. [ 133.737557][ T8442] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.746430][ T8442] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.755254][ T8442] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.764347][ T8442] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.201012][ T8469] tipc: Failed to remove unknown binding: 66,1,1/0:2005296791/2005296793 [ 134.221616][ T8469] tipc: Failed to remove unknown binding: 66,1,1/0:2005296791/2005296793 [ 134.348753][ T8479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.711'. [ 134.455339][ T8490] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 134.479793][ T8486] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 134.525853][ T8486] bond2: (slave vcan1): Error -95 calling set_mac_address [ 134.546502][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.715'. [ 134.555641][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.715'. [ 135.203396][ T8538] netlink: 'syz.2.727': attribute type 11 has an invalid length. [ 135.404018][ T8555] netlink: 'syz.2.732': attribute type 4 has an invalid length. [ 135.413693][ T8555] : renamed from bond0 [ 135.684467][ T8565] bridge0: port 3(gretap0) entered blocking state [ 135.695410][ T8565] bridge0: port 3(gretap0) entered disabled state [ 135.703401][ T8565] gretap0: entered allmulticast mode [ 135.715024][ T8565] gretap0: entered promiscuous mode [ 135.723107][ T8565] bridge0: port 3(gretap0) entered blocking state [ 135.729797][ T8565] bridge0: port 3(gretap0) entered forwarding state [ 135.763838][ T8570] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 135.796215][ T8572] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 136.000578][ T8577] bridge0: port 3(gretap0) entered disabled state [ 136.065553][ T8577] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.073207][ T8577] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.243251][ T8594] netlink: 'syz.4.744': attribute type 32 has an invalid length. [ 136.271291][ T8594] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 136.454398][ T8606] sit0: entered promiscuous mode [ 136.460160][ T8606] sit0: entered allmulticast mode [ 137.071214][ T8626] netlink: 'syz.0.752': attribute type 1 has an invalid length. [ 137.831873][ T8627] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.845417][ T8627] bond1: (slave bond2): making interface the new active one [ 137.856237][ T8627] bond1: (slave bond2): Enslaving as an active interface with an up link [ 137.869294][ T8637] netlink: 'syz.2.754': attribute type 5 has an invalid length. [ 137.891455][ T8633] wg1: entered promiscuous mode [ 138.303503][ T8663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.321534][ T8663] __nla_validate_parse: 15 callbacks suppressed [ 138.321548][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'. [ 138.767327][ T8700] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.800473][ T8693] macvlan0: left promiscuous mode [ 138.805574][ T8693] macvlan0: left allmulticast mode [ 138.811786][ T8693] netlink: 'syz.2.775': attribute type 2 has an invalid length. [ 138.959650][ T8708] netlink: 24 bytes leftover after parsing attributes in process `syz.2.779'. [ 138.987908][ T8715] netlink: 'syz.4.782': attribute type 13 has an invalid length. [ 138.995693][ T8715] netlink: 'syz.4.782': attribute type 58 has an invalid length. [ 139.004013][ T8715] netlink: 152 bytes leftover after parsing attributes in process `syz.4.782'. [ 139.374110][ T8737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.539101][ T8753] tipc: Can't bind to reserved service type 0 [ 139.595041][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.792'. [ 139.625490][ T8761] netlink: 'syz.0.795': attribute type 1 has an invalid length. [ 139.634872][ T8761] netlink: 15 bytes leftover after parsing attributes in process `syz.0.795'. [ 139.845740][ T8773] netlink: 32 bytes leftover after parsing attributes in process `syz.0.800'. [ 140.025283][ T8783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.803'. [ 140.153463][ T8792] netlink: 16 bytes leftover after parsing attributes in process `syz.2.807'. [ 140.163482][ T8792] netlink: 'syz.2.807': attribute type 10 has an invalid length. [ 140.171641][ T8792] netlink: 40 bytes leftover after parsing attributes in process `syz.2.807'. [ 140.192922][ T8789] bridge0: port 3(gretap0) entered blocking state [ 140.199839][ T8789] bridge0: port 3(gretap0) entered disabled state [ 140.206555][ T8789] gretap0: entered allmulticast mode [ 140.213919][ T8789] gretap0: entered promiscuous mode [ 140.221471][ T8789] bridge0: port 3(gretap0) entered blocking state [ 140.228133][ T8789] bridge0: port 3(gretap0) entered listening state [ 140.282795][ T8792] geneve0: left promiscuous mode [ 140.288259][ T8792] geneve0: left allmulticast mode [ 140.298111][ T8792] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 140.444708][ T8799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.808'. [ 141.458878][ T8801] bridge0: port 1(vlan2) entered blocking state [ 141.465379][ T8801] bridge0: port 1(vlan2) entered disabled state [ 141.472434][ T8801] vlan2: entered allmulticast mode [ 141.478171][ T8801] bridge0: entered allmulticast mode [ 141.485529][ T8801] vlan2: left allmulticast mode [ 141.491237][ T8801] bridge0: left allmulticast mode [ 142.155771][ T8846] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 142.260531][ T8857] netlink: 'syz.3.822': attribute type 10 has an invalid length. [ 142.272025][ T8857] dummy0: entered promiscuous mode [ 142.284111][ T8857] bridge0: port 4(dummy0) entered blocking state [ 142.296719][ T8857] bridge0: port 4(dummy0) entered disabled state [ 142.305427][ T8857] dummy0: entered allmulticast mode [ 142.569728][ T8872] 8021q: VLANs not supported on wg2 [ 142.704669][ T8880] sctp: [Deprecated]: syz.2.830 (pid 8880) Use of int in max_burst socket option. [ 142.704669][ T8880] Use struct sctp_assoc_value instead [ 142.928485][ T8884] netlink: 'syz.4.831': attribute type 4 has an invalid length. [ 143.043753][ T8884] bond0: (slave bond_slave_0): Releasing backup interface [ 143.053249][ T8884] bond_slave_0 (unregistering): left promiscuous mode [ 143.063535][ T8884] bond_slave_0 (unregistering): left allmulticast mode [ 143.139651][ T8889] netlink: 'syz.3.833': attribute type 26 has an invalid length. [ 143.323239][ T8900] netlink: 'syz.2.835': attribute type 4 has an invalid length. [ 143.348627][ T8900] __nla_validate_parse: 5 callbacks suppressed [ 143.348642][ T8900] netlink: 17 bytes leftover after parsing attributes in process `syz.2.835'. [ 143.638481][ T8915] netlink: 44 bytes leftover after parsing attributes in process `syz.4.840'. [ 143.875840][ T8930] 8021q: VLANs not supported on vcan0 [ 143.883249][ T8930] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.842'. [ 144.006333][ T8938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.848'. [ 144.151845][ T8947] TCP: TCP_TX_DELAY enabled [ 144.169549][ T8947] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.851'. [ 144.404359][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.856'. [ 144.803589][ T8991] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 144.880942][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.864'. [ 144.920900][ T8997] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.866'. [ 144.932730][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 144.935547][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 145.173444][ T9006] veth3: entered promiscuous mode [ 145.185277][ T9006] veth3: entered allmulticast mode [ 145.263368][ T9017] syzkaller0: entered promiscuous mode [ 145.269108][ T9017] syzkaller0: entered allmulticast mode [ 145.386701][ T9017] vlan2: entered promiscuous mode [ 145.403057][ T9017] bridge0: entered promiscuous mode [ 146.103755][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.113387][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.122103][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.130634][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.138894][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.395060][ T9053] chnl_net:caif_netlink_parms(): no params data found [ 146.555164][ T9069] xt_socket: unknown flags 0x50 [ 146.645348][ T9069] tipc: Started in network mode [ 146.662594][ T9069] tipc: Node identity 4650803a5028, cluster identity 4711 [ 146.695006][ T9069] tipc: Enabled bearer , priority 0 [ 146.776699][ T9069] syzkaller0: entered promiscuous mode [ 146.799464][ T9069] syzkaller0: entered allmulticast mode [ 146.856491][ T9069] tipc: Resetting bearer [ 146.868047][ T9053] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.883948][ T9053] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.892206][ T9053] bridge_slave_0: entered allmulticast mode [ 146.904662][ T9053] bridge_slave_0: entered promiscuous mode [ 146.914670][ T9067] tipc: Resetting bearer [ 146.941942][ T9067] tipc: Disabling bearer [ 146.953455][ T9053] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.960851][ T9053] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.968107][ T9053] bridge_slave_1: entered allmulticast mode [ 146.975697][ T9053] bridge_slave_1: entered promiscuous mode [ 147.092025][ T9053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.111070][ T9089] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 147.141343][ T9053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.223902][ T9094] netlink: 'syz.3.895': attribute type 8 has an invalid length. [ 147.239353][ T9094] xt_ecn: cannot match TCP bits for non-tcp packets [ 147.247518][ T9053] team0: Port device team_slave_0 added [ 147.283066][ T9053] team0: Port device team_slave_1 added [ 147.406365][ T9053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.418852][ T9053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.447828][ T9053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.462187][ T9053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.469814][ T9053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.497614][ T9053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.594836][ T9100] bond0: option ad_select: unable to set because the bond device is up [ 147.693399][ T9117] openvswitch: netlink: Multiple metadata blocks provided [ 147.749067][ T9053] hsr_slave_0: entered promiscuous mode [ 147.755625][ T9053] hsr_slave_1: entered promiscuous mode [ 147.777467][ T9053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.785046][ T9053] Cannot create hsr debugfs directory [ 148.067566][ T9135] netlink: 'syz.0.907': attribute type 10 has an invalid length. [ 148.217202][ T5836] Bluetooth: hci5: command tx timeout [ 148.229068][ T9135] team0: Port device geneve0 added [ 148.630164][ T9053] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 148.701257][ T9053] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 148.779860][ T9053] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 148.798231][ T9151] netlink: 'syz.2.913': attribute type 11 has an invalid length. [ 148.816846][ T9151] __nla_validate_parse: 4 callbacks suppressed [ 148.816860][ T9151] netlink: 20 bytes leftover after parsing attributes in process `syz.2.913'. [ 148.883126][ T9053] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 148.960116][ T9178] netlink: 68 bytes leftover after parsing attributes in process `syz.4.917'. [ 149.182042][ T9053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.259878][ T9053] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.293910][ T8826] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.301149][ T8826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.364853][ T8826] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.372059][ T8826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.380307][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.924'. [ 149.406639][ T9198] netlink: 20 bytes leftover after parsing attributes in process `syz.2.924'. [ 149.430594][ T9203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.465516][ T9199] tipc: Started in network mode [ 149.479998][ T9199] tipc: Node identity 66006e32d6a1, cluster identity 4711 [ 149.506181][ T9199] tipc: Enabled bearer , priority 0 [ 149.627787][ T9199] syzkaller0: entered promiscuous mode [ 149.633390][ T9199] syzkaller0: entered allmulticast mode [ 149.639923][ T9199] tipc: Resetting bearer [ 149.666551][ T9197] tipc: Resetting bearer [ 150.297390][ T5836] Bluetooth: hci5: command tx timeout [ 150.492868][ T9219] netlink: 14 bytes leftover after parsing attributes in process `syz.0.932'. [ 150.520848][ T7363] tipc: Node number set to 2963369522 [ 150.922032][ T9197] tipc: Disabling bearer [ 150.935194][ T9053] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 150.946127][ T9053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.093658][ T9219] hsr_slave_1 (unregistering): left promiscuous mode [ 151.105217][ T9230] netlink: 'syz.4.934': attribute type 21 has an invalid length. [ 151.426524][ T9242] SET target dimension over the limit! [ 151.497224][ T9245] SET target dimension over the limit! [ 151.515774][ T9053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.638632][ T9251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.941'. [ 151.697314][ T9255] netlink: 16 bytes leftover after parsing attributes in process `syz.4.940'. [ 151.941843][ T9262] netlink: 132 bytes leftover after parsing attributes in process `syz.4.946'. [ 152.089507][ T9272] netlink: 40 bytes leftover after parsing attributes in process `syz.3.947'. [ 152.145900][ T9272] netlink: 40 bytes leftover after parsing attributes in process `syz.3.947'. [ 152.330985][ T9287] nbd: must specify at least one socket [ 152.372780][ T9053] veth0_vlan: entered promiscuous mode [ 152.388438][ T5836] Bluetooth: hci5: command tx timeout [ 152.424268][ T9290] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 152.439531][ T9290] bridge0: entered allmulticast mode [ 152.449493][ T9053] veth1_vlan: entered promiscuous mode [ 152.481402][ T9053] veth0_macvtap: entered promiscuous mode [ 152.490192][ T9293] gretap0: left allmulticast mode [ 152.498856][ T9293] gretap0: left promiscuous mode [ 152.501599][ T9290] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.504044][ T9293] bridge0: port 3(gretap0) entered disabled state [ 152.528781][ T9293] bridge_slave_0: left allmulticast mode [ 152.534561][ T9293] bridge_slave_0: left promiscuous mode [ 152.540625][ T9293] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.554414][ T9293] bridge_slave_1: left allmulticast mode [ 152.561066][ T9293] bridge_slave_1: left promiscuous mode [ 152.566981][ T9293] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.584660][ T9293] bond0: (slave bond_slave_0): Releasing backup interface [ 152.602971][ T9293] bond0: (slave bond_slave_1): Releasing backup interface [ 152.633380][ T9293] team0: Port device team_slave_0 removed [ 152.655567][ T9293] team0: Port device team_slave_1 removed [ 152.668743][ T9293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.676338][ T9293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.687835][ T9293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.695267][ T9293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.724878][ T9293] team0: Port device geneve0 removed [ 152.737150][ T9293] bond1: (slave bond2): Releasing backup interface [ 152.822840][ T9053] veth1_macvtap: entered promiscuous mode [ 152.832270][ T9298] xt_hashlimit: size too large, truncated to 1048576 [ 152.856367][ T9053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.875169][ T9053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.908094][ T9053] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.926152][ T9053] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.949760][ T9053] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.973512][ T9053] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.158894][ T8829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.181562][ T8829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.234504][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b74b400: rx timeout, send abort [ 153.239190][ T8826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.259141][ T8826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.411932][ T9311] netlink: 'syz.3.957': attribute type 1 has an invalid length. [ 153.743403][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b74b400: abort rx timeout. Force session deactivation [ 153.899516][ T9333] pimreg: entered allmulticast mode [ 153.925134][ T9333] pimreg: left allmulticast mode [ 154.141841][ T9353] __nla_validate_parse: 6 callbacks suppressed [ 154.141861][ T9353] netlink: 48 bytes leftover after parsing attributes in process `syz.3.975'. [ 154.457239][ T5836] Bluetooth: hci5: command tx timeout [ 154.509893][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.985'. [ 154.565155][ T9376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.985'. [ 154.624373][ T9376] netlink: 16 bytes leftover after parsing attributes in process `syz.4.985'. [ 154.642675][ T9381] vlan2: entered allmulticast mode [ 154.648446][ T9381] bond0: entered allmulticast mode [ 154.653594][ T9381] bond_slave_0: entered allmulticast mode [ 154.660019][ T9381] bond_slave_1: entered allmulticast mode [ 154.724891][ T9386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.989'. [ 155.292521][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1003'. [ 155.312081][ T9424] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1003'. [ 155.486416][ T5945] IPVS: starting estimator thread 0... [ 155.576837][ T9436] IPVS: using max 29 ests per chain, 69600 per kthread [ 155.702623][ T9450] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1016'. [ 155.924317][ T9462] netlink: 192 bytes leftover after parsing attributes in process `syz.5.1021'. [ 156.012722][ T9466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1023'. [ 156.218859][ T9475] syz.0.1027: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 156.266933][ T9475] CPU: 1 UID: 0 PID: 9475 Comm: syz.0.1027 Not tainted 6.16.0-rc2-syzkaller-00162-g302251f1fdfd #0 PREEMPT(full) [ 156.266959][ T9475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.266977][ T9475] Call Trace: [ 156.266988][ T9475] [ 156.266996][ T9475] dump_stack_lvl+0x189/0x250 [ 156.267031][ T9475] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.267059][ T9475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.267105][ T9475] warn_alloc+0x214/0x310 [ 156.267126][ T9475] ? stack_depot_save_flags+0x40/0x900 [ 156.267160][ T9475] ? __pfx_warn_alloc+0x10/0x10 [ 156.267182][ T9475] ? kasan_save_track+0x4f/0x80 [ 156.267210][ T9475] ? xskq_create+0x56/0x170 [ 156.267233][ T9475] ? xsk_init_queue+0xb0/0x110 [ 156.267256][ T9475] ? xsk_setsockopt+0x43f/0x710 [ 156.267277][ T9475] ? do_sock_setsockopt+0x257/0x3e0 [ 156.267297][ T9475] ? __x64_sys_setsockopt+0x18b/0x220 [ 156.267316][ T9475] ? do_syscall_64+0xfa/0x3b0 [ 156.267330][ T9475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.267355][ T9475] __vmalloc_node_range_noprof+0x125/0x12f0 [ 156.267403][ T9475] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 156.267425][ T9475] ? xskq_create+0x56/0x170 [ 156.267452][ T9475] ? __kasan_kmalloc+0x93/0xb0 [ 156.267472][ T9475] vmalloc_user_noprof+0xad/0xf0 [ 156.267491][ T9475] ? xskq_create+0xbf/0x170 [ 156.267517][ T9475] xskq_create+0xbf/0x170 [ 156.267544][ T9475] xsk_init_queue+0xb0/0x110 [ 156.267571][ T9475] xsk_setsockopt+0x43f/0x710 [ 156.267597][ T9475] ? __pfx_xsk_setsockopt+0x10/0x10 [ 156.267618][ T9475] ? __lock_acquire+0xab9/0xd20 [ 156.267653][ T9475] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 156.267674][ T9475] ? __pfx_xsk_setsockopt+0x10/0x10 [ 156.267699][ T9475] do_sock_setsockopt+0x257/0x3e0 [ 156.267723][ T9475] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 156.267748][ T9475] ? __fget_files+0x2a/0x420 [ 156.267776][ T9475] __x64_sys_setsockopt+0x18b/0x220 [ 156.267802][ T9475] do_syscall_64+0xfa/0x3b0 [ 156.267817][ T9475] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.267862][ T9475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.267881][ T9475] ? clear_bhb_loop+0x60/0xb0 [ 156.267912][ T9475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.267931][ T9475] RIP: 0033:0x7f806178e929 [ 156.267954][ T9475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.267969][ T9475] RSP: 002b:00007f806266c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 156.267989][ T9475] RAX: ffffffffffffffda RBX: 00007f80619b5fa0 RCX: 00007f806178e929 [ 156.268003][ T9475] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 156.268014][ T9475] RBP: 00007f8061810b39 R08: 0000000000000004 R09: 0000000000000000 [ 156.268026][ T9475] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.268037][ T9475] R13: 0000000000000000 R14: 00007f80619b5fa0 R15: 00007ffd6c151848 [ 156.268068][ T9475] [ 156.268144][ T9475] Mem-Info: [ 156.618306][ T9475] active_anon:4754 inactive_anon:0 isolated_anon:0 [ 156.618306][ T9475] active_file:1154 inactive_file:39851 isolated_file:0 [ 156.618306][ T9475] unevictable:768 dirty:93 writeback:0 [ 156.618306][ T9475] slab_reclaimable:10721 slab_unreclaimable:102588 [ 156.618306][ T9475] mapped:33982 shmem:1363 pagetables:1158 [ 156.618306][ T9475] sec_pagetables:0 bounce:0 [ 156.618306][ T9475] kernel_misc_reclaimable:0 [ 156.618306][ T9475] free:1317188 free_pcp:15862 free_cma:0 [ 156.672896][ T9475] Node 0 active_anon:19096kB inactive_anon:0kB active_file:4616kB inactive_file:159200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135928kB dirty:368kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13784kB pagetables:4504kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 156.675308][ T9464] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.714117][ T9464] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.717154][ T9475] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 156.760827][ T9475] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 156.798483][ T9475] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 156.804413][ T9475] Node 0 DMA32 free:1357616kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19068kB inactive_anon:0kB active_file:4616kB inactive_file:157372kB unevictable:1536kB writepending:364kB present:3129332kB managed:2561020kB mlocked:0kB bounce:0kB free_pcp:39316kB local_pcp:18144kB free_cma:0kB [ 156.844183][ T9475] lowmem_reserve[]: 0 0 1 1 1 [ 156.849243][ T9475] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 156.888215][ T9475] lowmem_reserve[]: 0 0 0 0 0 [ 156.893154][ T9475] Node 1 Normal free:3898204kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21560kB local_pcp:13888kB free_cma:0kB [ 156.931934][ T9475] lowmem_reserve[]: 0 0 0 0 0 [ 156.940430][ T9475] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 156.962260][ T9475] Node 0 DMA32: 360*4kB (UME) 300*8kB (UM) 217*16kB (UME) 349*32kB (UM) 101*64kB (UME) 86*128kB (UM) 19*256kB (UME) 6*512kB (UM) 5*1024kB (UE) 5*2048kB (ME) 317*4096kB (M) = 1357680kB [ 156.987930][ T9475] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 157.004842][ T9475] Node 1 Normal: 195*4kB (UE) 48*8kB (UME) 43*16kB (UME) 89*32kB (UME) 20*64kB (UME) 8*128kB (UME) 6*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3898204kB [ 157.029695][ T9475] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 157.042634][ T9475] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 157.055221][ T9475] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 157.074047][ T9475] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 157.083848][ T9475] 42364 total pagecache pages [ 157.093854][ T9475] 0 pages in swap cache [ 157.100132][ T9475] Free swap = 124996kB [ 157.104356][ T9475] Total swap = 124996kB [ 157.114134][ T9475] 2097051 pages RAM [ 157.118024][ T9475] 0 pages HighMem/MovableOnly [ 157.122918][ T9475] 424690 pages reserved [ 157.132597][ T9475] 0 pages cma reserved [ 157.237638][ T9464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.264089][ T9464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.431229][ T9464] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.440609][ T9464] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.450097][ T9464] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.459482][ T9464] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.521644][ T9464] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.530888][ T9464] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.539909][ T9464] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.549063][ T9464] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.617091][ T9553] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 158.639944][ T9554] sctp: [Deprecated]: syz.4.1063 (pid 9554) Use of int in max_burst socket option. [ 158.639944][ T9554] Use struct sctp_assoc_value instead [ 159.195147][ T9575] __nla_validate_parse: 7 callbacks suppressed [ 159.195166][ T9575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1072'. [ 159.331005][ T9590] netlink: 'syz.3.1075': attribute type 9 has an invalid length. [ 159.528799][ T9603] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1078'. [ 159.785703][ T9618] openvswitch: netlink: Flow key attr not present in new flow. [ 159.926453][ T9623] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1082'. [ 160.175702][ T9636] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1088'. [ 160.185305][ T9635] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1088'. [ 160.913784][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1095'. [ 160.956545][ T9657] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1094'. [ 161.058897][ T9662] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1095'. [ 161.176562][ T9665] syzkaller1: entered promiscuous mode [ 161.211458][ T9665] syzkaller1: entered allmulticast mode [ 161.684752][ T9684] netlink: 'syz.5.1103': attribute type 1 has an invalid length. [ 161.693206][ T9684] netlink: 'syz.5.1103': attribute type 3 has an invalid length. [ 161.703995][ T9684] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1103'. [ 161.713888][ T9684] NCSI netlink: No device for ifindex 131080 [ 161.850956][ T9691] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.404184][ T9720] netlink: 'syz.0.1112': attribute type 8 has an invalid length. [ 162.426934][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1110'. [ 164.509549][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1114'. [ 164.538382][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1114'. [ 164.698074][ T9737] netlink: 'syz.4.1117': attribute type 10 has an invalid length. [ 164.759746][ T9741] x_tables: ip_tables: cgroup.0 match: invalid size 8 (kernel) != (user) 16 [ 164.797055][ T9737] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 164.816053][ T9741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1119'. [ 164.835415][ T9741] netlink: 'syz.0.1119': attribute type 2 has an invalid length. [ 164.843818][ T9741] netlink: 'syz.0.1119': attribute type 1 has an invalid length. [ 164.864300][ T9741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1119'. [ 164.885769][ T9744] netlink: 'syz.4.1117': attribute type 10 has an invalid length. [ 164.899088][ T9744] bridge0: entered promiscuous mode [ 164.904631][ T9744] bridge0: entered allmulticast mode [ 164.944049][ T9744] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 165.005771][ T9749] tipc: Enabling of bearer rejected, failed to enable media [ 165.272755][ T9617] Set syz1 is full, maxelem 65536 reached [ 165.284806][ T9753] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1122'. [ 165.295391][ T9753] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1122'. [ 165.453014][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1123'. [ 165.466004][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1124'. [ 165.478327][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1124'. [ 165.508221][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1124'. [ 165.545700][ T9758] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 165.840619][ T9783] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 166.120465][ T9799] raw_sendmsg: syz.2.1131 forgot to set AF_INET. Fix it! [ 167.710555][ T9841] netlink: 'syz.4.1148': attribute type 21 has an invalid length. [ 167.719397][ T9841] netlink: 'syz.4.1148': attribute type 1 has an invalid length. [ 167.842464][ T9849] netlink: 'syz.4.1151': attribute type 1 has an invalid length. [ 167.902158][ T7361] hid-generic 0005:15C2:000B.0001: item fetching failed at offset 0/1 [ 167.921549][ T7361] hid-generic 0005:15C2:000B.0001: probe with driver hid-generic failed with error -22 [ 168.138275][ T9868] netlink: 'syz.2.1155': attribute type 1 has an invalid length. [ 168.209619][ T9865] sctp: [Deprecated]: syz.5.1157 (pid 9865) Use of int in maxseg socket option. [ 168.209619][ T9865] Use struct sctp_assoc_value instead [ 168.226843][ T9865] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 168.494185][ T9893] netlink: 'syz.0.1166': attribute type 10 has an invalid length. [ 168.523112][ T9893] bridge0: port 1(team0) entered blocking state [ 168.555999][ T9893] bridge0: port 1(team0) entered disabled state [ 168.574507][ T9893] team0: entered allmulticast mode [ 168.604163][ T9893] team0: entered promiscuous mode [ 168.613769][ T9902] netlink: 'syz.0.1166': attribute type 1 has an invalid length. [ 168.789460][ T9914] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 168.846135][ T9914] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 168.866197][ T9914] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 168.875014][ T9914] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 168.891624][ T9914] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 168.904392][ T9914] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 168.917953][ T9914] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 169.096474][ T9928] xt_cgroup: xt_cgroup: no path or classid specified [ 169.099357][ T9925] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 169.521072][ T9948] __nla_validate_parse: 19 callbacks suppressed [ 169.521089][ T9948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1184'. [ 169.928131][ T9968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1194'. [ 169.957157][ T9975] validate_nla: 2 callbacks suppressed [ 169.957170][ T9975] netlink: 'syz.5.1195': attribute type 13 has an invalid length. [ 170.029944][ T9975] netlink: 'syz.5.1195': attribute type 58 has an invalid length. [ 170.064989][ T9975] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1195'. [ 170.084859][ T9983] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1199'. [ 170.144962][ T9488] IPVS: starting estimator thread 0... [ 170.165272][ T9985] tipc: Enabled bearer , priority 0 [ 170.172894][ T9985] syzkaller0: entered promiscuous mode [ 170.178900][ T9985] syzkaller0: entered allmulticast mode [ 170.188699][ T9985] tipc: Resetting bearer [ 170.200400][ T9982] tipc: Resetting bearer [ 170.237439][ T9982] tipc: Disabling bearer [ 170.257949][ T9988] IPVS: using max 30 ests per chain, 72000 per kthread [ 170.376355][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1201'. [ 170.415923][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1201'. [ 170.481920][T10001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1204'. [ 170.922782][T10023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1209'. [ 171.280172][T10040] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1216'. [ 171.373309][T10052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1219'. [ 171.439375][T10057] vxcan1 speed is unknown, defaulting to 1000 [ 171.459272][T10057] vxcan1 speed is unknown, defaulting to 1000 [ 171.479092][T10057] vxcan1 speed is unknown, defaulting to 1000 [ 171.577172][ T5916] page_pool_release_retry() stalled pool shutdown: id 43, 1 inflight 60 sec [ 171.854904][T10057] infiniband syz2: set active [ 171.862040][ T9488] vxcan1 speed is unknown, defaulting to 1000 [ 171.868594][T10057] infiniband syz2: added vxcan1 [ 171.874855][T10057] syz2: rxe_create_cq: returned err = -12 [ 171.881526][T10057] infiniband syz2: Couldn't create ib_mad CQ [ 171.888010][T10057] infiniband syz2: Couldn't open port 1 [ 171.920913][T10057] RDS/IB: syz2: added [ 171.926381][T10057] smc: adding ib device syz2 with port count 1 [ 171.940132][T10057] smc: ib device syz2 port 1 has pnetid SYZ2 (user defined) [ 171.959066][T10057] vxcan1 speed is unknown, defaulting to 1000 [ 171.973007][ T9488] vxcan1 speed is unknown, defaulting to 1000 [ 172.094786][T10084] netlink: 'syz.4.1228': attribute type 7 has an invalid length. [ 172.115593][T10084] netlink: 'syz.4.1228': attribute type 8 has an invalid length. [ 172.337506][T10057] vxcan1 speed is unknown, defaulting to 1000 [ 172.355975][T10099] netlink: 'syz.2.1234': attribute type 32 has an invalid length. [ 172.364119][T10099] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 172.547629][T10106] netlink: 'syz.3.1237': attribute type 1 has an invalid length. [ 172.555400][T10106] netlink: 'syz.3.1237': attribute type 1 has an invalid length. [ 172.910909][T10057] vxcan1 speed is unknown, defaulting to 1000 [ 173.333816][T10147] netlink: 'syz.3.1252': attribute type 4 has an invalid length. [ 173.363585][T10147] netlink: 'syz.3.1252': attribute type 4 has an invalid length. [ 173.492457][T10057] vxcan1 speed is unknown, defaulting to 1000 [ 173.714256][ T5916] IPVS: starting estimator thread 0... [ 173.807004][T10167] IPVS: using max 29 ests per chain, 69600 per kthread [ 173.820395][T10172] netlink: 'syz.0.1260': attribute type 20 has an invalid length. [ 173.982833][T10057] vxcan1 speed is unknown, defaulting to 1000 [ 174.109216][T10180] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 174.529160][T10200] x_tables: duplicate underflow at hook 1 [ 174.622196][T10161] vxcan1 speed is unknown, defaulting to 1000 [ 174.691202][T10208] __nla_validate_parse: 23 callbacks suppressed [ 174.691218][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1271'. [ 174.753552][T10208] netlink: 'syz.4.1271': attribute type 11 has an invalid length. [ 174.767676][T10208] netlink: 'syz.4.1271': attribute type 11 has an invalid length. [ 174.785667][T10208] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1271'. [ 175.000855][ T8832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.011554][ T8832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.035036][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1275'. [ 175.050275][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1275'. [ 175.070140][T10057] vxcan1 speed is unknown, defaulting to 1000 [ 175.475576][T10240] bond0: entered promiscuous mode [ 175.516573][T10239] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1281'. [ 175.923401][T10263] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1287'. [ 176.028098][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1287'. [ 176.099423][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1290'. [ 176.145228][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1287'. [ 176.172867][T10263] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1287'. [ 176.369032][T10291] Unsupported ieee802154 address type: 0 [ 176.384692][T10292] net_ratelimit: 27 callbacks suppressed [ 176.384709][T10292] netlink: zone id is out of range [ 176.426512][T10292] netlink: zone id is out of range [ 176.443049][T10292] netlink: zone id is out of range [ 176.448393][T10292] netlink: zone id is out of range [ 176.457345][T10292] netlink: zone id is out of range [ 176.462504][T10292] netlink: zone id is out of range [ 176.502031][T10292] netlink: zone id is out of range [ 176.518614][T10292] netlink: zone id is out of range [ 176.523892][T10292] netlink: zone id is out of range [ 176.529646][T10292] netlink: zone id is out of range [ 176.663845][T10306] validate_nla: 4 callbacks suppressed [ 176.663861][T10306] netlink: 'syz.3.1301': attribute type 7 has an invalid length. [ 176.727046][T10309] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 178.815712][T10412] syzkaller0: entered promiscuous mode [ 178.822055][T10412] syzkaller0: entered allmulticast mode [ 179.733235][T10440] __nla_validate_parse: 6 callbacks suppressed [ 179.733277][T10440] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1327'. [ 179.806381][T10440] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1327'. [ 179.857239][T10448] x_tables: duplicate underflow at hook 3 [ 180.023798][T10459] netlink: 'syz.5.1331': attribute type 10 has an invalid length. [ 180.052203][T10459] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1331'. [ 180.078205][T10464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1334'. [ 180.136495][T10459] team0: Port device geneve0 added [ 180.348443][T10474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1337'. [ 180.371667][T10474] netlink: 'syz.2.1337': attribute type 7 has an invalid length. [ 180.418432][T10474] netlink: 'syz.2.1337': attribute type 8 has an invalid length. [ 180.426214][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1337'. [ 180.677287][T10496] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 0, id = 0 [ 181.043351][T10519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1350'. [ 181.111062][T10519] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1350'. [ 181.136903][T10525] veth0: entered promiscuous mode [ 181.222833][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1351'. [ 181.341359][T10520] veth0: left promiscuous mode [ 181.509921][T10554] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.540086][T10554] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.549393][T10560] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1363'. [ 181.565585][T10554] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.574882][T10554] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.600620][T10554] geneve2: entered promiscuous mode [ 181.606608][T10554] geneve2: entered allmulticast mode [ 181.640167][T10554] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.668785][T10554] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.683371][T10554] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.697167][T10554] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.732803][T10560] netlink: 'syz.3.1363': attribute type 4 has an invalid length. [ 181.935171][T10579] netlink: 'syz.5.1369': attribute type 6 has an invalid length. [ 181.943522][T10577] tipc: Enabled bearer , priority 0 [ 182.003711][T10575] tipc: Disabling bearer [ 182.098799][ T8842] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 182.403220][T10594]  (unregistering): Released all slaves [ 183.548835][T10614] netlink: 'syz.0.1377': attribute type 1 has an invalid length. [ 183.584627][T10613] netlink: 'syz.0.1377': attribute type 1 has an invalid length. [ 184.765232][T10699] ieee802154 phy1 wpan1: encryption failed: -22 [ 184.929342][T10708] netlink: 'syz.0.1408': attribute type 8 has an invalid length. [ 184.937295][T10708] __nla_validate_parse: 11 callbacks suppressed [ 184.937307][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1408'. [ 185.230243][T10735] tipc: Invalid UDP bearer configuration [ 185.230364][T10735] tipc: Enabling of bearer rejected, failed to enable media [ 185.234447][T10739] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1417'. [ 185.263728][T10740] netlink: 'syz.5.1419': attribute type 11 has an invalid length. [ 185.272012][T10740] netlink: 'syz.5.1419': attribute type 11 has an invalid length. [ 185.280795][T10740] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1419'. [ 185.371187][T10746] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1421'. [ 185.389630][T10746] netlink: 'syz.5.1421': attribute type 21 has an invalid length. [ 185.403160][T10746] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1421'. [ 185.406402][T10748] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1422'. [ 185.433758][T10746] net_ratelimit: 4 callbacks suppressed [ 185.433773][T10746] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 185.846900][T10775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1431'. [ 185.847500][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1431'. [ 185.874474][T10775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1431'. [ 185.996649][T10784] netlink: 'syz.0.1433': attribute type 11 has an invalid length. [ 186.009213][T10784] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1433'. [ 186.334265][T10799] can: request_module (can-proto-5) failed. [ 186.732221][T10826] netlink: ct family unspecified [ 186.749270][T10828] netlink: 'syz.0.1444': attribute type 1 has an invalid length. [ 186.775052][T10826] openvswitch: netlink: Actions may not be safe on all matching packets [ 186.932084][T10832] 8021q: adding VLAN 0 to HW filter on device bond4 [ 186.948753][T10832] bond3: (slave bond4): making interface the new active one [ 186.967628][T10832] bond3: (slave bond4): Enslaving as an active interface with an up link [ 186.993774][T10824] bond3: (slave gretap2): Enslaving as a backup interface with an up link [ 187.022280][T10828] 8021q: adding VLAN 0 to HW filter on device bond3 [ 187.069521][T10848] tap0: tun_chr_ioctl cmd 1074025672 [ 187.074982][T10848] tap0: ignored: set checksum disabled [ 187.229300][T10856] netlink: 'syz.5.1452': attribute type 4 has an invalid length. [ 187.247147][T10857] netlink: 'syz.5.1452': attribute type 4 has an invalid length. [ 187.482195][T10871] vlan3: entered promiscuous mode [ 187.488131][T10871] bond0: (slave vlan3): Opening slave failed [ 187.570796][T10880] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.612714][T10880] IPVS: Scheduler module ip_vs_sip not found [ 187.632808][T10881] netlink: 'syz.5.1459': attribute type 1 has an invalid length. [ 187.839161][T10896] Bluetooth: MGMT ver 1.23 [ 188.133730][T10919] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 188.254641][T10929] netlink: 'syz.5.1474': attribute type 10 has an invalid length. [ 188.263652][T10929] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.271316][T10929] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.317091][T10929] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.324341][T10929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.331895][T10929] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.339119][T10929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.378479][T10928] atm:sigd_send: bad message type 0 [ 188.388965][T10929] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 188.583212][T10944] batadv_slave_1: entered promiscuous mode [ 188.597633][T10944] macsec1: entered promiscuous mode [ 188.603721][T10944] macsec1: entered allmulticast mode [ 188.619872][T10944] batadv_slave_1: entered allmulticast mode [ 189.090042][T10967] macvtap1: entered allmulticast mode [ 189.185355][T10976] netlink: 'syz.2.1487': attribute type 1 has an invalid length. [ 189.221834][T10977] veth0: entered promiscuous mode [ 189.261179][T10975] veth0: left promiscuous mode [ 189.595828][T11005] netlink: 'syz.5.1494': attribute type 1 has an invalid length. [ 189.836618][T11012] syzkaller0: entered promiscuous mode [ 189.843642][T11012] syzkaller0: entered allmulticast mode [ 190.023152][T11035] __nla_validate_parse: 15 callbacks suppressed [ 190.023172][T11035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1504'. [ 191.494265][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1510'. [ 191.581020][T11060] netlink: 'syz.3.1512': attribute type 1 has an invalid length. [ 191.670703][T11065] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 191.825212][T11082] x_tables: duplicate underflow at hook 3 [ 192.295195][T11109] dummy0: left allmulticast mode [ 192.317238][T11109] bridge0: port 4(dummy0) entered disabled state [ 192.338884][T11109] batman_adv: batadv0: Adding interface: dummy0 [ 192.350618][T11121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1532'. [ 192.367934][T11109] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.396034][T11109] batman_adv: batadv0: Interface activated: dummy0 [ 192.445003][T11114] batadv0: mtu less than device minimum [ 192.467527][T11114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.479409][T11114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.491131][T11114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.503095][T11114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.514860][T11114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.526615][T11114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.538085][T11114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.549816][T11114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.561868][T11114] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.750941][T11143] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1539'. [ 192.761402][T11144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1540'. [ 192.837996][T11144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1540'. [ 192.881227][T11153] netlink: 'syz.5.1542': attribute type 1 has an invalid length. [ 193.036681][T11156] x_tables: unsorted underflow at hook 1 [ 193.097349][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1544'. [ 193.119071][T11169] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 193.197948][T11172] netlink: 'syz.4.1547': attribute type 1 has an invalid length. [ 193.247021][T11172] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1547'. [ 193.266999][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1547'. [ 193.419329][T11183] netlink: 'syz.5.1551': attribute type 2 has an invalid length. [ 194.065048][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.639168][T11195] erspan0: entered promiscuous mode [ 194.646994][T11195] vlan2: entered promiscuous mode [ 195.181999][T11233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1565'. [ 195.570573][T11253] netlink: 'syz.3.1572': attribute type 1 has an invalid length. [ 196.797744][T11253] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 196.873852][T11269] tipc: Started in network mode [ 196.915339][T11269] tipc: Node identity 7e19187ce6ff, cluster identity 4711 [ 196.922741][T11269] tipc: Enabled bearer , priority 0 [ 197.012400][T11266] syzkaller0: entered promiscuous mode [ 197.018348][T11266] syzkaller0: entered allmulticast mode [ 197.026156][T11266] tipc: Resetting bearer [ 197.054673][T11265] tipc: Resetting bearer [ 197.883813][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1584'. [ 198.051007][ T7361] tipc: Node number set to 2565216380 [ 198.295927][T11265] tipc: Disabling bearer [ 198.305674][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1580'. [ 198.512021][T11303] netlink: 'syz.4.1588': attribute type 1 has an invalid length. [ 198.534129][T11303] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1588'. [ 198.702967][T11315] netlink: 'syz.2.1592': attribute type 1 has an invalid length. [ 198.772204][T11318] net_ratelimit: 11 callbacks suppressed [ 198.772225][T11318] netlink: zone id is out of range [ 198.831942][T11318] netlink: zone id is out of range [ 198.853675][T11318] netlink: zone id is out of range [ 198.876849][T11318] netlink: get zone limit has 4 unknown bytes [ 198.886007][T11323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1592'. [ 198.887405][T11321] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.981190][T11321] bond1: (slave bond2): making interface the new active one [ 198.993843][T11321] bond1: (slave bond2): Enslaving as an active interface with an up link [ 199.016643][T11315] bond1: (slave gretap2): Enslaving as a backup interface with an up link [ 199.029009][T11323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.410315][T11355] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 199.711954][T11370] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.845872][T11367] xt_CT: No such helper "syz0" [ 200.049844][T11387] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1612'. [ 200.274881][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1618'. [ 200.306102][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1618'. [ 200.372454][T11407] netlink: 'syz.0.1620': attribute type 6 has an invalid length. [ 200.396563][T11410] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 200.412898][T11408] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1621'. [ 200.558717][T11421] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1623'. [ 200.605814][T11424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1626'. [ 200.618335][T11428] netlink: 'syz.3.1627': attribute type 5 has an invalid length. [ 200.649541][T11424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1626'. [ 200.681193][T11424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1626'. [ 200.748319][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1626'. [ 200.782572][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1626'. [ 200.797458][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1629'. [ 200.982421][T11440] lo: left promiscuous mode [ 200.994667][T11440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.245493][T11453] Bluetooth: MGMT ver 1.23 [ 201.256963][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 201.263076][ T5156] Bluetooth: hci2: command 0x0406 tx timeout [ 201.269730][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 201.417919][T11463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.473664][T11461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.040689][T11498] batadv0: entered promiscuous mode [ 202.056011][T11498] team0: entered promiscuous mode [ 202.061765][T11498] team_slave_0: entered promiscuous mode [ 202.069265][T11498] team_slave_1: entered promiscuous mode [ 202.077995][T11498] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 202.087046][T11498] Cannot create hsr debugfs directory [ 202.092730][T11498] hsr1: entered promiscuous mode [ 202.099192][T11498] hsr1: entered allmulticast mode [ 202.104299][T11498] batadv0: entered allmulticast mode [ 202.112144][T11498] team0: entered allmulticast mode [ 202.117678][T11498] team_slave_0: entered allmulticast mode [ 202.123965][T11498] team_slave_1: entered allmulticast mode [ 202.135332][T11507] netlink: 'syz.4.1655': attribute type 21 has an invalid length. [ 202.599322][T11531] tipc: Enabling of bearer rejected, failed to enable media [ 202.697527][ T5840] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 202.840014][T11548] netlink: 'syz.4.1670': attribute type 10 has an invalid length. [ 203.802251][T11600] geneve2: entered promiscuous mode [ 203.809602][T11600] geneve2: entered allmulticast mode [ 204.021848][T11619] xt_NFQUEUE: number of total queues is 0 [ 204.415373][T11637] netlink: 'syz.3.1695': attribute type 2 has an invalid length. [ 204.451106][T11644] netlink: 'syz.5.1698': attribute type 7 has an invalid length. [ 204.567833][T11645] vxcan1 speed is unknown, defaulting to 1000 [ 204.913272][T11674] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20004 [ 205.202918][T11644] vxcan1 speed is unknown, defaulting to 1000 [ 205.238048][T11690] netlink: 'syz.4.1713': attribute type 1 has an invalid length. [ 205.245830][T11690] netlink: 'syz.4.1713': attribute type 2 has an invalid length. [ 205.502753][T11706] __nla_validate_parse: 30 callbacks suppressed [ 205.502774][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1717'. [ 205.580920][T11704] tap0: tun_chr_ioctl cmd 1074025678 [ 205.593200][T11704] tap0: group set to 0 [ 205.736259][T11712] openvswitch: netlink: IP tunnel dst address not specified [ 206.097322][T11727] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1726'. [ 206.168975][T11731] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 206.319682][T11727] netlink: 'syz.4.1726': attribute type 4 has an invalid length. [ 206.339686][T11744] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 206.373167][T11747] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 206.386264][T11742] netlink: 'syz.0.1730': attribute type 3 has an invalid length. [ 206.610194][T11752] veth0: entered promiscuous mode [ 206.635835][T11752] veth0: left promiscuous mode [ 207.607470][T11798] netlink: 'syz.4.1748': attribute type 9 has an invalid length. [ 207.636112][T11796] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1747'. [ 207.718098][T11796] team1: entered promiscuous mode [ 207.723604][T11796] team1: entered allmulticast mode [ 207.944473][T11823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1756'. [ 207.962694][T11823] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1756'. [ 208.041994][T11827] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1757'. [ 208.062369][T11828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1758'. [ 208.265605][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1763'. [ 208.274815][T11838] bridge_slave_0: entered promiscuous mode [ 208.305086][T11840] vxcan1 speed is unknown, defaulting to 1000 [ 208.373118][T11841] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1764'. [ 208.700654][T11856] dvmrp0: entered allmulticast mode [ 209.091542][T11868] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 209.306596][ C0] vcan0: j1939_tp_rxtimer: 0xffff888050f66c00: rx timeout, send abort [ 209.315175][ C0] vcan0: j1939_tp_rxtimer: 0xffff888050f66800: rx timeout, send abort [ 209.392855][T11873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1774'. [ 209.814899][ C0] vcan0: j1939_tp_rxtimer: 0xffff888050f66c00: abort rx timeout. Force session deactivation [ 209.826120][ C0] vcan0: j1939_tp_rxtimer: 0xffff888050f66800: abort rx timeout. Force session deactivation [ 210.130588][T11912] netlink: 'syz.0.1783': attribute type 7 has an invalid length. [ 210.174718][T11914] netlink: 'syz.4.1785': attribute type 2 has an invalid length. [ 210.221736][T11914] netlink: 'syz.4.1785': attribute type 62 has an invalid length. [ 210.592086][T11935] Cannot find add_set index 0 as target [ 210.662280][T11935] sit0: left promiscuous mode [ 210.674591][T11935] sit0: left allmulticast mode [ 210.694252][T11935] bond0: left promiscuous mode [ 210.704919][T11935] bond_slave_1: left promiscuous mode [ 210.710779][T11935] bridge0: left promiscuous mode [ 210.715958][T11935] bond0: left allmulticast mode [ 210.721918][T11935] bond_slave_1: left allmulticast mode [ 210.727920][T11935] bridge0: left allmulticast mode [ 210.735606][T11935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.746478][T11935] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.786044][T11935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.814435][T11945] __nla_validate_parse: 3 callbacks suppressed [ 210.814450][T11945] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1796'. [ 210.838448][T11940] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1795'. [ 210.852151][T11946] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1796'. [ 210.862106][T11946] 0ªX¹¦D: renamed from gretap0 [ 210.867550][T11945] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1796'. [ 210.910298][T11946] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 210.956824][T11945] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 210.965754][T11951] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1798'. [ 210.981199][T11945] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 211.092736][T11955] team0: Device gtp0 is of different type [ 211.128025][T11960] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1801'. [ 211.181738][T11953] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1798'. [ 211.194486][T11953] nbd: device at index 64 is going down [ 211.264635][T11963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1802'. [ 211.369441][T11969] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 211.551138][T11978] netlink: 'syz.3.1809': attribute type 1 has an invalid length. [ 211.560482][T11979] netlink: 'syz.5.1808': attribute type 21 has an invalid length. [ 211.568526][T11979] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1808'. [ 211.622096][T11985] netlink: 'syz.2.1811': attribute type 83 has an invalid length. [ 211.646987][T11986] netlink: 'syz.5.1808': attribute type 21 has an invalid length. [ 211.677036][T11979] netlink: 'syz.5.1808': attribute type 4 has an invalid length. [ 211.691921][T11986] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1808'. [ 211.707135][T11979] netlink: 'syz.5.1808': attribute type 5 has an invalid length. [ 211.819347][T11986] netlink: 'syz.5.1808': attribute type 4 has an invalid length. [ 211.856074][T11997] veth0_macvtap: left promiscuous mode [ 211.872984][T11997] macvtap0: entered promiscuous mode [ 213.368783][T12094] xt_hashlimit: size too large, truncated to 1048576 [ 213.965823][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.974778][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.983239][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.992132][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.000251][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.145978][T12132] vxcan1 speed is unknown, defaulting to 1000 [ 214.214741][T12146] xt_l2tp: missing protocol rule (udp|l2tpip) [ 214.680692][T12171] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.689891][T12171] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.699266][T12171] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.708439][T12171] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.854386][T12186] sock: sock_timestamping_bind_phc: sock not bind to device [ 214.995352][T12193] openvswitch: netlink: IP tunnel TTL not specified. [ 215.015732][T12193] openvswitch: netlink: Key type 272 is out of range max 32 [ 215.084145][T12195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.317354][T12132] chnl_net:caif_netlink_parms(): no params data found [ 215.328876][T12212] validate_nla: 3 callbacks suppressed [ 215.328890][T12212] netlink: 'syz.4.1876': attribute type 1 has an invalid length. [ 215.346109][ T8825] tipc: Subscription rejected, illegal request [ 215.388386][T12212] netlink: 'syz.4.1876': attribute type 3 has an invalid length. [ 215.700624][T12132] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.713434][T12132] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.724372][T12132] bridge_slave_0: entered allmulticast mode [ 215.745077][T12132] bridge_slave_0: entered promiscuous mode [ 215.767828][T12132] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.786354][T12132] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.826694][T12132] bridge_slave_1: entered allmulticast mode [ 215.834678][T12132] bridge_slave_1: entered promiscuous mode [ 215.871096][T12248] __nla_validate_parse: 15 callbacks suppressed [ 215.871112][T12248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1885'. [ 215.906484][T12248] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1885'. [ 215.951322][T12250] erspan0: entered allmulticast mode [ 216.004481][T12255] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1888'. [ 216.019653][T12255] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1888'. [ 216.034060][T12255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1888'. [ 216.056965][ T5836] Bluetooth: hci5: command tx timeout [ 216.070609][T12132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.104225][T12132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.113861][T12258] netlink: 'syz.0.1889': attribute type 1 has an invalid length. [ 216.144169][T12258] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1889'. [ 216.164665][T12258] netlink: 'syz.0.1889': attribute type 1 has an invalid length. [ 216.278544][T12132] team0: Port device team_slave_0 added [ 216.300330][T12132] team0: Port device team_slave_1 added [ 216.440288][T12132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.449848][T12132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.487943][T12132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.501101][T12132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.510708][T12132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.551773][T12132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.567832][T12288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.656692][T12132] hsr_slave_0: entered promiscuous mode [ 216.691457][T12132] hsr_slave_1: entered promiscuous mode [ 216.702238][T12132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.714582][T12132] Cannot create hsr debugfs directory [ 217.122217][T12315] netlink: 'syz.4.1904': attribute type 1 has an invalid length. [ 217.142060][T12315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1904'. [ 217.162340][T12315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1904'. [ 217.249016][T12132] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.350846][T12322] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1907'. [ 217.367427][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1909'. [ 217.533032][T12132] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.778558][T12132] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.860055][T12355] netlink: 'syz.4.1914': attribute type 7 has an invalid length. [ 217.953947][T12132] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.146760][ T5836] Bluetooth: hci5: command tx timeout [ 218.434322][T12132] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 218.504652][T12132] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 218.552029][T12132] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 218.579819][T12132] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 218.932144][T12132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.043319][T12132] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.308913][ T8832] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.316134][ T8832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.376764][ T8842] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.383983][ T8842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.543647][T12448] openvswitch: netlink: IP tunnel TTL not specified. [ 219.603848][T12132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.919222][T12463] netlink: 'syz.2.1936': attribute type 27 has an invalid length. [ 220.189330][T12469] batadv0: entered promiscuous mode [ 220.195337][T12469] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 220.217900][ T5836] Bluetooth: hci5: command tx timeout [ 220.247153][T12469] Cannot create hsr debugfs directory [ 220.270776][T12469] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 220.363277][T12469] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 220.439642][T12469] batadv0: left promiscuous mode [ 220.814405][T12132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.369516][T12534] __nla_validate_parse: 4 callbacks suppressed [ 221.369535][T12534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1956'. [ 221.399956][T12534] gre0: Master is either lo or non-ether device [ 221.604607][T12548] dvmrp1: entered allmulticast mode [ 221.642596][T12132] veth0_vlan: entered promiscuous mode [ 221.673186][T12132] veth1_vlan: entered promiscuous mode [ 221.759040][T12132] veth0_macvtap: entered promiscuous mode [ 221.790663][T12132] veth1_macvtap: entered promiscuous mode [ 221.830224][T12132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.842844][T12132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.883330][T12132] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.895260][T12132] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.907545][T12132] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.916581][T12132] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.119600][ T8825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.143908][ T8825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.213580][T12567] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1966'. [ 222.219740][ T8825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.241585][ T8825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.264072][T12567] netlink: 'syz.4.1966': attribute type 9 has an invalid length. [ 222.298231][ T5836] Bluetooth: hci5: command tx timeout [ 222.478312][T12584] sctp: [Deprecated]: syz.4.1969 (pid 12584) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.478312][T12584] Use struct sctp_sack_info instead [ 222.789759][ T8825] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.970605][ T8825] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.082698][ T8825] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.147319][T12614] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1979'. [ 223.235954][ T8825] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.259096][T12623] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1979'. [ 223.365461][T12628] vxcan1: tx address claim with different name [ 223.637230][T12640] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 223.735086][T12647] netlink: 'syz.4.1989': attribute type 1 has an invalid length. [ 223.780987][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 223.818721][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 223.827830][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 223.831608][ T8825] bridge_slave_1: left allmulticast mode [ 223.854756][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 223.865286][ T8825] bridge_slave_1: left promiscuous mode [ 223.874287][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 223.890559][ T8825] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.911145][ T8825] bridge_slave_0: left allmulticast mode [ 223.922036][ T8825] bridge_slave_0: left promiscuous mode [ 223.930793][ T8825] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.995225][T12667] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1992'. [ 224.181853][T12676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.410103][ T8825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.425204][ T8825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.436015][ T8825] bond0 (unregistering): Released all slaves [ 224.463645][T12675] netlink: 'syz.4.1996': attribute type 12 has an invalid length. [ 224.494588][T12675] netlink: 'syz.4.1996': attribute type 29 has an invalid length. [ 224.507468][T12675] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1996'. [ 224.625941][T12679] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1998'. [ 224.701241][T12683] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1997'. [ 224.744705][T12651] vxcan1 speed is unknown, defaulting to 1000 [ 224.755529][T12682] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1999'. [ 224.967772][T12698] x_tables: unsorted underflow at hook 4 [ 225.025672][T12696] netlink: 'syz.2.2001': attribute type 18 has an invalid length. [ 225.205702][T12710] netlink: 'syz.2.2006': attribute type 1 has an invalid length. [ 225.867389][ T8825] hsr_slave_0: left promiscuous mode [ 225.874580][ T8825] hsr_slave_1: left promiscuous mode [ 225.889284][ T8825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.908418][ T8825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.921853][ T8825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.936783][ T8825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.977235][ T5840] Bluetooth: hci5: command tx timeout [ 225.998670][ T8825] veth1_macvtap: left promiscuous mode [ 226.004385][ T8825] veth0_macvtap: left promiscuous mode [ 226.020813][ T8825] veth1_vlan: left promiscuous mode [ 226.026254][ T8825] veth0_vlan: left promiscuous mode [ 226.115277][T12735] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2013'. [ 226.186420][T12738] netlink: 'syz.2.2014': attribute type 13 has an invalid length. [ 226.257090][T12740] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 226.261853][T12741] netlink: 'syz.2.2014': attribute type 10 has an invalid length. [ 226.606585][ T8825] team0 (unregistering): Port device team_slave_1 removed [ 226.648156][ T8825] team0 (unregistering): Port device team_slave_0 removed [ 227.037483][T12738] macvtap0: left promiscuous mode [ 227.043826][T12738] macvtap0: refused to change device tx_queue_len [ 227.333393][T12651] chnl_net:caif_netlink_parms(): no params data found [ 227.592499][T12782] netlink: 'syz.3.2023': attribute type 1 has an invalid length. [ 227.614618][T12782] __nla_validate_parse: 1 callbacks suppressed [ 227.614633][T12782] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2023'. [ 227.695833][T12651] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.713311][T12651] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.736891][T12651] bridge_slave_0: entered allmulticast mode [ 227.747873][T12651] bridge_slave_0: entered promiscuous mode [ 227.787365][T12651] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.795568][T12651] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.811818][T12651] bridge_slave_1: entered allmulticast mode [ 227.823207][T12651] bridge_slave_1: entered promiscuous mode [ 227.904794][T12795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2027'. [ 227.928828][T12651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.954607][T12651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.057322][ T5840] Bluetooth: hci5: command tx timeout [ 228.074691][T12806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2031'. [ 228.082355][T12651] team0: Port device team_slave_0 added [ 228.092345][T12651] team0: Port device team_slave_1 added [ 228.113331][T12806] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2031'. [ 228.204669][T12651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.235594][T12651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.281525][T12651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.318748][T12651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.325715][T12651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.364088][T12651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.444571][T12817] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2033'. [ 228.603873][T12651] hsr_slave_0: entered promiscuous mode [ 228.618509][T12651] hsr_slave_1: entered promiscuous mode [ 228.635004][T12651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.674590][T12651] Cannot create hsr debugfs directory [ 228.766646][T12840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2043'. [ 228.810918][T12842] netlink: 'syz.2.2044': attribute type 10 has an invalid length. [ 229.225067][T12862] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2051'. [ 229.276475][T12867] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2053'. [ 229.438905][T12651] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 229.456231][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2055'. [ 229.480974][T12651] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 229.510867][T12651] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 229.547036][T12651] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 229.672563][T12891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2059'. [ 229.811144][T12651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.830972][T12895] netlink: 'syz.3.2061': attribute type 1 has an invalid length. [ 229.851588][T12895] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.851902][T12898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.858848][T12895] IPv6: NLM_F_CREATE should be set when creating new route [ 229.876694][T12651] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.908234][ T8825] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.915419][ T8825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.969895][ T8829] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.977114][ T8829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.150437][ T5836] Bluetooth: hci5: command tx timeout [ 230.183343][T12912] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.192401][T12912] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.201361][T12912] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.210118][T12912] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.332764][T12919] xt_cluster: node mask cannot exceed total number of nodes [ 230.568424][T12651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.982129][T12949] netlink: 'syz.2.2072': attribute type 12 has an invalid length. [ 231.272545][T12651] veth0_vlan: entered promiscuous mode [ 231.297667][T12651] veth1_vlan: entered promiscuous mode [ 231.404193][T12651] veth0_macvtap: entered promiscuous mode [ 231.453452][T12651] veth1_macvtap: entered promiscuous mode [ 231.525759][T12651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.558399][T12651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.603311][T12651] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.633990][T12651] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.666800][T12651] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.686798][T12651] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.769279][T12987] netlink: 'syz.4.2088': attribute type 15 has an invalid length. [ 231.914641][ T8832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.914659][ T8832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.079556][ T8825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.110660][ T8825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.222871][ T5836] Bluetooth: hci5: command 0x0419 tx timeout [ 232.248964][T13006] netlink: 'syz.0.2095': attribute type 1 has an invalid length. [ 232.547768][T13019] netlink: 'syz.0.2095': attribute type 10 has an invalid length. [ 232.600345][T13015] 8021q: adding VLAN 0 to HW filter on device bond7 [ 232.610034][T13015] bond6: (slave bond7): making interface the new active one [ 232.618721][T13015] bond6: (slave bond7): Enslaving as an active interface with an up link [ 232.724442][T13006] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.773549][T13006] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.864453][T13027] netlink: 'syz.3.2099': attribute type 1 has an invalid length. [ 232.876227][T13019] geneve0: entered promiscuous mode [ 232.893835][T13027] __nla_validate_parse: 16 callbacks suppressed [ 232.893852][T13027] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2099'. [ 232.895354][T13019] geneve0: entered allmulticast mode [ 232.914615][T13027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2099'. [ 232.924985][T13019] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 232.954916][T13019] team0: Failed to send options change via netlink (err -105) [ 232.958493][T13027] openvswitch: netlink: Message has -1 unknown bytes. [ 232.970697][T13030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2100'. [ 232.984791][T13019] team0: Port device geneve0 added [ 233.105407][ T8829] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.194548][T13006] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.219210][T13006] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.311582][ T8829] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.414121][T13006] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.435406][T13006] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.524599][ T8829] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.573972][T13006] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.593288][T13006] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.634979][ T8829] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.672260][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 233.681687][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 233.690197][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 233.705873][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 233.714442][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 233.767164][T13038] vxcan1 speed is unknown, defaulting to 1000 [ 233.786160][T13006] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.794598][T13006] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.813849][T13006] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.822747][T13006] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.842136][T13006] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.850674][T13006] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.870241][T13006] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.878996][T13006] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.986044][ T8829] bridge_slave_1: left allmulticast mode [ 233.995738][ T8829] bridge_slave_1: left promiscuous mode [ 234.004543][ T8829] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.025579][ T8829] bridge_slave_0: left allmulticast mode [ 234.035692][ T8829] bridge_slave_0: left promiscuous mode [ 234.045726][ T8829] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.381197][ T8829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.393153][ T8829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.404375][ T8829] bond0 (unregistering): Released all slaves [ 234.643026][T13038] chnl_net:caif_netlink_parms(): no params data found [ 234.869122][T13038] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.876330][T13038] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.883894][T13038] bridge_slave_0: entered allmulticast mode [ 234.891827][T13038] bridge_slave_0: entered promiscuous mode [ 234.913187][ T8829] hsr_slave_0: left promiscuous mode [ 234.919660][ T8829] hsr_slave_1: left promiscuous mode [ 234.925467][ T8829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.933909][ T8829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.943941][ T8829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.951827][ T8829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.975457][ T8829] veth1_macvtap: left promiscuous mode [ 234.981354][ T8829] veth0_macvtap: left promiscuous mode [ 234.988316][ T8829] veth1_vlan: left promiscuous mode [ 234.994026][ T8829] veth0_vlan: left promiscuous mode [ 235.486676][T13061] xt_HMARK: proto mask must be zero with L3 mode [ 235.499174][T13066] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2106'. [ 235.562504][ T8829] team0 (unregistering): Port device team_slave_1 removed [ 235.601832][ T8829] team0 (unregistering): Port device team_slave_0 removed [ 235.817124][ T5836] Bluetooth: hci5: command tx timeout [ 235.989463][T13038] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.996641][T13038] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.004133][T13038] bridge_slave_1: entered allmulticast mode [ 236.014625][T13038] bridge_slave_1: entered promiscuous mode [ 236.209973][T13038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.224006][T13038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.426108][T13078] netlink: 'syz.2.2109': attribute type 29 has an invalid length. [ 236.451407][T13090] xt_hashlimit: max too large, truncated to 1048576 [ 236.468668][T13080] netlink: 'syz.2.2109': attribute type 29 has an invalid length. [ 236.481165][T13038] team0: Port device team_slave_0 added [ 236.514964][T13038] team0: Port device team_slave_1 added [ 236.522237][T13078] netlink: 'syz.2.2109': attribute type 11 has an invalid length. [ 236.539233][T13078] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2109'. [ 236.701492][T13038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.726829][T13038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.806129][T13103] xt_hashlimit: size too large, truncated to 1048576 [ 236.808969][T13038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.876377][T13103] netlink: 'syz.3.2117': attribute type 2 has an invalid length. [ 236.887202][T13038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.897471][T13100] IPVS: set_ctl: invalid protocol: 4 172.20.20.29:20000 [ 236.915228][T13038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.944940][T13100] x_tables: duplicate underflow at hook 1 [ 236.975905][T13107] Cannot find set identified by id 0 to match [ 236.996115][T13038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.030548][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2119'. [ 237.345340][T13127] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2127'. [ 237.361235][T13130] netlink: 'syz.0.2128': attribute type 2 has an invalid length. [ 237.444733][T13134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2129'. [ 237.580283][T13140] netlink: 'syz.2.2131': attribute type 21 has an invalid length. [ 237.900526][ T5836] Bluetooth: hci5: command tx timeout [ 238.628073][T13140] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2131'. [ 238.739619][T13038] hsr_slave_0: entered promiscuous mode [ 238.746228][T13038] hsr_slave_1: entered promiscuous mode [ 238.759908][T13038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.768097][T13038] Cannot create hsr debugfs directory [ 238.927954][T13157] netlink: 'syz.4.2138': attribute type 11 has an invalid length. [ 238.985551][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2139'. [ 239.073234][T13162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2140'. [ 239.314661][T13178] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2145'. [ 239.383856][T13182] netlink: 'syz.0.2146': attribute type 1 has an invalid length. [ 239.625108][T13191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2149'. [ 239.672626][T13038] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 239.687805][T13038] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 239.701209][T13038] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 239.720074][T13038] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 239.961746][T13038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.977167][ T5836] Bluetooth: hci5: command tx timeout [ 240.049661][T13038] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.063244][ T8826] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.070426][ T8826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.134948][ T8826] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.142213][ T8826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.274517][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2158'. [ 240.300841][T13232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2158'. [ 240.577241][T13243] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2160'. [ 240.752509][T13038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.911756][T13256] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2164'. [ 240.981790][T13259] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2165'. [ 241.327573][T13278] xt_hashlimit: overflow, rate too high: 0 [ 241.356236][T13038] veth0_vlan: entered promiscuous mode [ 241.382166][T13038] veth1_vlan: entered promiscuous mode [ 241.482745][T13038] veth0_macvtap: entered promiscuous mode [ 241.495976][T13038] veth1_macvtap: entered promiscuous mode [ 241.567551][T13038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.601831][T13038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.646543][T13038] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.673801][T13038] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.693874][T13038] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.714674][T13038] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.866517][T13308] netlink: 'syz.4.2182': attribute type 1 has an invalid length. [ 241.935299][T13311] netlink: 'syz.4.2182': attribute type 1 has an invalid length. [ 242.041077][ T6385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.057109][ T5836] Bluetooth: hci5: command tx timeout [ 242.084363][ T6385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.112932][ T8832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.141911][ T8832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.210705][T13323] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 242.531572][T13337] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 242.539841][ T7363] IPVS: starting estimator thread 0... [ 242.669316][T13342] IPVS: using max 29 ests per chain, 69600 per kthread [ 243.182092][ T8832] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.234517][T13386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.258861][T13380] netlink: 'syz.0.2204': attribute type 1 has an invalid length. [ 243.354014][ T8832] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.603932][ T8832] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.761380][ T8832] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.860146][T13393] __nla_validate_parse: 7 callbacks suppressed [ 243.860163][T13393] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2209'. [ 243.888809][T13394] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2208'. [ 243.900872][T13397] lo: entered allmulticast mode [ 243.915923][T13401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2210'. [ 244.050734][T13406] netlink: 'syz.4.2211': attribute type 39 has an invalid length. [ 244.147434][ T8832] bridge_slave_1: left allmulticast mode [ 244.157774][ T8832] bridge_slave_1: left promiscuous mode [ 244.177361][ T8832] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.221907][ T8832] bridge_slave_0: left allmulticast mode [ 244.240767][ T8832] bridge_slave_0: left promiscuous mode [ 244.262166][ T8832] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.344360][T13419] xt_hashlimit: size too large, truncated to 1048576 [ 244.401414][T13419] syz.3.2216: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 244.458653][T13426] netlink: 'syz.0.2217': attribute type 1 has an invalid length. [ 244.465135][T13419] CPU: 0 UID: 0 PID: 13419 Comm: syz.3.2216 Not tainted 6.16.0-rc2-syzkaller-00162-g302251f1fdfd #0 PREEMPT(full) [ 244.465173][T13419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.465188][T13419] Call Trace: [ 244.465196][T13419] [ 244.465205][T13419] dump_stack_lvl+0x189/0x250 [ 244.465246][T13419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.465277][T13419] ? __pfx__printk+0x10/0x10 [ 244.465298][T13419] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 244.465321][T13419] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 244.465348][T13419] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 244.465374][T13419] warn_alloc+0x214/0x310 [ 244.465410][T13419] ? __pfx_warn_alloc+0x10/0x10 [ 244.465443][T13419] ? __get_vm_area_node+0x28f/0x300 [ 244.465464][T13419] ? htable_create+0xfc/0x7a0 [ 244.465497][T13419] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 244.465551][T13419] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 244.465581][T13419] ? rcu_is_watching+0x15/0xb0 [ 244.465613][T13419] ? htable_create+0xfc/0x7a0 [ 244.465638][T13419] ? htable_create+0xfc/0x7a0 [ 244.465664][T13419] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 244.465684][T13419] ? htable_create+0xfc/0x7a0 [ 244.465710][T13419] ? hashlimit_pernet+0x23/0x240 [ 244.465746][T13419] htable_create+0xfc/0x7a0 [ 244.465782][T13419] hashlimit_mt_check_common+0x719/0xa10 [ 244.465820][T13419] xt_check_match+0x3d1/0xab0 [ 244.465846][T13419] ? __pfx___mutex_lock+0x10/0x10 [ 244.465869][T13419] ? __pfx_xt_check_match+0x10/0x10 [ 244.465899][T13419] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 244.465930][T13419] ? xt_find_match+0x1f7/0x250 [ 244.465963][T13419] translate_table+0x1553/0x2040 [ 244.466014][T13419] ? __pfx_translate_table+0x10/0x10 [ 244.466042][T13419] ? __might_fault+0xb0/0x130 [ 244.466082][T13419] ? _copy_from_user+0x94/0xb0 [ 244.466107][T13419] do_ip6t_set_ctl+0x970/0xce0 [ 244.466140][T13419] ? rcu_is_watching+0x15/0xb0 [ 244.466170][T13419] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 244.466217][T13419] ? __pfx___mutex_lock+0x10/0x10 [ 244.466235][T13419] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 244.466263][T13419] ? __pfx_futex_wait+0x10/0x10 [ 244.466299][T13419] nf_setsockopt+0x26f/0x290 [ 244.466333][T13419] rawv6_setsockopt+0x23b/0x5b0 [ 244.466360][T13419] ? __lock_acquire+0xab9/0xd20 [ 244.466402][T13419] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 244.466427][T13419] ? aa_sock_opt_perm+0x74/0x110 [ 244.466450][T13419] ? sock_common_setsockopt+0x36/0xc0 [ 244.466468][T13419] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 244.466488][T13419] do_sock_setsockopt+0x257/0x3e0 [ 244.466517][T13419] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 244.466549][T13419] ? __fget_files+0x2a/0x420 [ 244.466582][T13419] __x64_sys_setsockopt+0x18b/0x220 [ 244.466613][T13419] do_syscall_64+0xfa/0x3b0 [ 244.466630][T13419] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.466659][T13419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.466678][T13419] ? clear_bhb_loop+0x60/0xb0 [ 244.466702][T13419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.466721][T13419] RIP: 0033:0x7fc0d2b8e929 [ 244.466745][T13419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.466763][T13419] RSP: 002b:00007fc0d3a25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 244.466784][T13419] RAX: ffffffffffffffda RBX: 00007fc0d2db5fa0 RCX: 00007fc0d2b8e929 [ 244.466799][T13419] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 244.466810][T13419] RBP: 00007fc0d2c10b39 R08: 00000000000005c0 R09: 0000000000000000 [ 244.466823][T13419] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 244.466836][T13419] R13: 0000000000000000 R14: 00007fc0d2db5fa0 R15: 00007ffc64433b88 [ 244.466868][T13419] [ 244.475350][T13419] Mem-Info: [ 244.548220][T13426] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2217'. [ 244.595854][T13419] active_anon:4727 inactive_anon:0 isolated_anon:0 [ 244.595854][T13419] active_file:1316 inactive_file:39895 isolated_file:0 [ 244.595854][T13419] unevictable:768 dirty:56 writeback:0 [ 244.595854][T13419] slab_reclaimable:11698 slab_unreclaimable:112072 [ 244.595854][T13419] mapped:34077 shmem:1363 pagetables:1129 [ 244.595854][T13419] sec_pagetables:0 bounce:0 [ 244.595854][T13419] kernel_misc_reclaimable:0 [ 244.595854][T13419] free:1309272 free_pcp:10922 free_cma:0 [ 244.621317][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 244.625895][T13419] Node 0 active_anon:18908kB inactive_anon:0kB active_file:5264kB inactive_file:159376kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136308kB dirty:220kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14604kB pagetables:4376kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 244.668514][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 244.724136][T13419] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 244.727547][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 244.767216][T13419] Node 0 [ 244.769837][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 244.787550][T13419] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 244.792707][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 244.922931][T13419] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 245.115609][T13437] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 245.136044][T13419] Node 0 DMA32 free:1321920kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18800kB inactive_anon:0kB active_file:5264kB inactive_file:157552kB unevictable:1536kB writepending:220kB present:3129332kB managed:2561020kB mlocked:0kB bounce:0kB free_pcp:24852kB local_pcp:13700kB free_cma:0kB [ 245.147905][T13437] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2219'. [ 245.180119][T13419] lowmem_reserve[]: 0 0 1 1 1 [ 245.184930][T13419] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 245.218070][T13419] lowmem_reserve[]: 0 0 0 0 0 [ 245.222836][T13419] Node 1 Normal free:3899508kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20320kB local_pcp:6912kB free_cma:0kB [ 245.255174][T13419] lowmem_reserve[]: 0 0 0 0 0 [ 245.261225][T13419] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 245.274152][T13419] Node 0 DMA32: 855*4kB (UME) 448*8kB (UM) 299*16kB (UM) 162*32kB (UME) 119*64kB (UME) 45*128kB (UME) 25*256kB (UM) 20*512kB (UME) 15*1024kB (UE) 9*2048kB (UME) 303*4096kB (UM) = 1321868kB [ 245.294750][T13419] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 245.313601][T13419] Node 1 Normal: 195*4kB (UE) 49*8kB (UME) 42*16kB (UME) 112*32kB (UME) 25*64kB (UME) 10*128kB (UME) 6*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3899508kB [ 245.332970][T13419] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 245.343407][T13419] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 245.352839][T13419] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 245.363315][T13419] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 245.373393][T13419] 42571 total pagecache pages [ 245.378140][T13419] 0 pages in swap cache [ 245.382313][T13419] Free swap = 124996kB [ 245.386495][T13419] Total swap = 124996kB [ 245.390834][T13419] 2097051 pages RAM [ 245.394659][T13419] 0 pages HighMem/MovableOnly [ 245.399471][T13419] 424690 pages reserved [ 245.403633][T13419] 0 pages cma reserved [ 245.531084][ T8832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.544751][ T8832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.555479][ T8832] bond0 (unregistering): Released all slaves [ 245.996598][T13428] vxcan1 speed is unknown, defaulting to 1000 [ 246.089930][T13457] netlink: 'syz.0.2224': attribute type 13 has an invalid length. [ 246.380748][T13467] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2227'. [ 246.380803][T13469] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2227'. [ 246.602832][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2231'. [ 246.648852][T13479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2231'. [ 246.903020][ T8832] hsr_slave_0: left promiscuous mode [ 246.922679][ T8832] hsr_slave_1: left promiscuous mode [ 246.938485][ T8832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.949797][ T8832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.959277][ T8832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.967600][ T8832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.020002][ T8832] veth1_macvtap: left promiscuous mode [ 247.029447][ T8832] veth0_macvtap: left promiscuous mode [ 247.036276][ T8832] veth1_vlan: left promiscuous mode [ 247.043362][ T8832] veth0_vlan: left promiscuous mode [ 247.098873][ T5840] Bluetooth: hci5: command tx timeout [ 247.193938][T13498] xt_CT: No such helper "syz0" [ 247.695853][ T8832] team0 (unregistering): Port device team_slave_1 removed [ 247.733663][ T8832] team0 (unregistering): Port device team_slave_0 removed [ 248.143817][T13506] tap0: tun_chr_ioctl cmd 1074025678 [ 248.164671][T13506] tap0: group set to 0 [ 248.293233][T13514] netlink: 'syz.2.2238': attribute type 7 has an invalid length. [ 248.323937][T13514] : entered promiscuous mode [ 248.728970][T13428] chnl_net:caif_netlink_parms(): no params data found [ 248.836974][T13541] wg2: left promiscuous mode [ 248.841752][T13541] wg2: left allmulticast mode [ 248.865130][T13541] wg2: entered promiscuous mode [ 248.870515][T13541] wg2: entered allmulticast mode [ 248.974366][T13428] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.991282][T13428] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.002984][T13428] bridge_slave_0: entered allmulticast mode [ 249.010362][T13428] bridge_slave_0: entered promiscuous mode [ 249.050141][T13428] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.066318][T13428] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.083587][T13428] bridge_slave_1: entered allmulticast mode [ 249.098123][T13428] bridge_slave_1: entered promiscuous mode [ 249.179102][ T5840] Bluetooth: hci5: command tx timeout [ 249.183049][T13428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.262309][T13428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.300605][T13569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2252'. [ 249.311389][T13569] netlink: 'syz.4.2252': attribute type 7 has an invalid length. [ 249.319488][T13569] netlink: 'syz.4.2252': attribute type 8 has an invalid length. [ 249.328368][T13569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2252'. [ 249.416111][T13428] team0: Port device team_slave_0 added [ 249.448131][T13428] team0: Port device team_slave_1 added [ 249.518877][T13428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.539003][T13428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.584630][T13428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.606070][T13428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.624873][T13428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.687002][T13428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.825060][T13428] hsr_slave_0: entered promiscuous mode [ 249.836470][T13428] hsr_slave_1: entered promiscuous mode [ 249.844082][T13428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.851909][T13428] Cannot create hsr debugfs directory [ 250.096074][T13605] netlink: 'syz.0.2265': attribute type 1 has an invalid length. [ 250.164775][T13611] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2266'. [ 250.178190][T13610] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2266'. [ 250.250401][T13605] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 250.339192][T13618] wg1: left promiscuous mode [ 250.362179][T13618] hsr1: left promiscuous mode [ 250.367571][T13618] hsr1: left allmulticast mode [ 250.367887][T13621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2268'. [ 250.372363][T13618] batadv0: left allmulticast mode [ 250.372383][T13618] team0: left allmulticast mode [ 250.372399][T13618] team_slave_0: left allmulticast mode [ 250.407454][T13618] team_slave_1: left allmulticast mode [ 250.413525][T13618] gretap2: left promiscuous mode [ 250.423638][T13618] gretap2: left allmulticast mode [ 250.429518][T13618] bond1: left promiscuous mode [ 250.434487][T13618] bond1: left allmulticast mode [ 250.439884][T13618] sit1: left promiscuous mode [ 250.444673][T13618] sit1: left allmulticast mode [ 250.588834][T13626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2270'. [ 250.617219][T13626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2270'. [ 250.636557][T13626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2270'. [ 250.654444][T13629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2270'. [ 250.664289][T13629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2270'. [ 250.968694][T13428] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 250.991107][T13428] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 251.013303][T13428] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 251.033175][T13428] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 251.046484][T13647] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 251.162039][T13428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.202645][T13428] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.233615][ T8825] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.240838][ T8825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.257918][ T5840] Bluetooth: hci5: command tx timeout [ 251.267849][ T8832] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.275045][ T8832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.777194][T13428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.959544][T13689] vxcan1 speed is unknown, defaulting to 1000 [ 251.959916][T13692] netlink: 'syz.0.2285': attribute type 4 has an invalid length. [ 251.991259][T13694] x_tables: duplicate underflow at hook 1 [ 252.197580][T13707] Set syz1 is full, maxelem 65536 reached [ 252.434746][T13428] veth0_vlan: entered promiscuous mode [ 252.473722][T13428] veth1_vlan: entered promiscuous mode [ 252.535492][T13428] veth0_macvtap: entered promiscuous mode [ 252.653035][T13428] veth1_macvtap: entered promiscuous mode [ 252.718972][T13428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.734142][T13428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.760023][T13428] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.779822][T13428] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.811682][T13428] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.825454][T13428] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.041169][ T8829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.059547][ T8829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.182540][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.211586][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.337151][ T5840] Bluetooth: hci5: command tx timeout [ 253.489429][T13727] ================================================================== [ 253.497562][T13727] BUG: KASAN: slab-use-after-free in cfusbl_device_notify+0x150/0x6a0 [ 253.505738][T13727] Read of size 8 at addr ffff888055014c50 by task syz.4.2296/13727 [ 253.513643][T13727] [ 253.515986][T13727] CPU: 0 UID: 0 PID: 13727 Comm: syz.4.2296 Not tainted 6.16.0-rc2-syzkaller-00162-g302251f1fdfd #0 PREEMPT(full) [ 253.516011][T13727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 253.516023][T13727] Call Trace: [ 253.516031][T13727] [ 253.516039][T13727] dump_stack_lvl+0x189/0x250 [ 253.516072][T13727] ? __virt_addr_valid+0x1c8/0x5c0 [ 253.516090][T13727] ? rcu_is_watching+0x15/0xb0 [ 253.516118][T13727] ? __kasan_check_byte+0x12/0x40 [ 253.516138][T13727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.516165][T13727] ? rcu_is_watching+0x15/0xb0 [ 253.516193][T13727] ? lock_release+0x4b/0x3e0 [ 253.516222][T13727] ? __virt_addr_valid+0x1c8/0x5c0 [ 253.516241][T13727] ? __virt_addr_valid+0x4a5/0x5c0 [ 253.516261][T13727] print_report+0xd2/0x2b0 [ 253.516286][T13727] ? cfusbl_device_notify+0x150/0x6a0 [ 253.516307][T13727] kasan_report+0x118/0x150 [ 253.516339][T13727] ? cfusbl_device_notify+0x150/0x6a0 [ 253.516364][T13727] cfusbl_device_notify+0x150/0x6a0 [ 253.516384][T13727] ? net_generic+0x1e/0x240 [ 253.516403][T13727] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 253.516424][T13727] ? caif_device_notify+0x250/0xfc0 [ 253.516445][T13727] ? smc_pnet_netdev_event+0x3b5/0x6c0 [ 253.516470][T13727] notifier_call_chain+0x1b3/0x3e0 [ 253.516501][T13727] register_netdevice+0x12ee/0x1ae0 [ 253.516557][T13727] ? __pfx_register_netdevice+0x10/0x10 [ 253.516587][T13727] ? __asan_memset+0x22/0x50 [ 253.516613][T13727] ? dev_addr_mod+0x2ce/0x3d0 [ 253.516638][T13727] register_netdev+0x40/0x60 [ 253.516663][T13727] bnep_add_connection+0x6bf/0xbf0 [ 253.516695][T13727] ? __pfx_bnep_add_connection+0x10/0x10 [ 253.516721][T13727] ? __fget_files+0x3a0/0x420 [ 253.516747][T13727] do_bnep_sock_ioctl+0x40e/0x640 [ 253.516776][T13727] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 253.516808][T13727] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 253.516831][T13727] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 253.516855][T13727] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 253.516882][T13727] sock_do_ioctl+0xd9/0x300 [ 253.516911][T13727] ? __pfx_sock_do_ioctl+0x10/0x10 [ 253.516937][T13727] ? __lock_acquire+0xab9/0xd20 [ 253.516971][T13727] sock_ioctl+0x576/0x790 [ 253.516998][T13727] ? __pfx_sock_ioctl+0x10/0x10 [ 253.517025][T13727] ? __fget_files+0x2a/0x420 [ 253.517045][T13727] ? __fget_files+0x3a0/0x420 [ 253.517064][T13727] ? __fget_files+0x2a/0x420 [ 253.517086][T13727] ? bpf_lsm_file_ioctl+0x9/0x20 [ 253.517113][T13727] ? __pfx_sock_ioctl+0x10/0x10 [ 253.517149][T13727] __se_sys_ioctl+0xfc/0x170 [ 253.517178][T13727] do_syscall_64+0xfa/0x3b0 [ 253.517194][T13727] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.517222][T13727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.517240][T13727] ? clear_bhb_loop+0x60/0xb0 [ 253.517260][T13727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.517279][T13727] RIP: 0033:0x7f69c1d8e929 [ 253.517294][T13727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.517311][T13727] RSP: 002b:00007f69c2ca6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.517331][T13727] RAX: ffffffffffffffda RBX: 00007f69c1fb5fa0 RCX: 00007f69c1d8e929 [ 253.517346][T13727] RDX: 0000200000000540 RSI: 00000000400442c8 RDI: 0000000000000007 [ 253.517358][T13727] RBP: 00007f69c1e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 253.517370][T13727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.517381][T13727] R13: 0000000000000000 R14: 00007f69c1fb5fa0 R15: 00007ffe43e47198 [ 253.517404][T13727] [ 253.517410][T13727] [ 253.864345][T13727] Allocated by task 5840: [ 253.868668][T13727] kasan_save_track+0x3e/0x80 [ 253.873354][T13727] __kasan_kmalloc+0x93/0xb0 [ 253.877937][T13727] __kmalloc_cache_noprof+0x230/0x3d0 [ 253.883337][T13727] __hci_conn_add+0x233/0x1b30 [ 253.888113][T13727] hci_conn_request_evt+0x53e/0xb60 [ 253.893314][T13727] hci_event_packet+0x7e0/0x1200 [ 253.898251][T13727] hci_rx_work+0x46a/0xe80 [ 253.902677][T13727] process_scheduled_works+0xae1/0x17b0 [ 253.908236][T13727] worker_thread+0x8a0/0xda0 [ 253.912829][T13727] kthread+0x70e/0x8a0 [ 253.916900][T13727] ret_from_fork+0x3f9/0x770 [ 253.921494][T13727] ret_from_fork_asm+0x1a/0x30 [ 253.926264][T13727] [ 253.928585][T13727] Freed by task 13727: [ 253.932645][T13727] kasan_save_track+0x3e/0x80 [ 253.937342][T13727] kasan_save_free_info+0x46/0x50 [ 253.942380][T13727] __kasan_slab_free+0x62/0x70 [ 253.947150][T13727] kfree+0x18e/0x440 [ 253.951046][T13727] device_release+0x9c/0x1c0 [ 253.955894][T13727] kobject_put+0x22b/0x480 [ 253.960308][T13727] device_add+0x6bb/0xb50 [ 253.964631][T13727] netdev_register_kobject+0x156/0x2f0 [ 253.970095][T13727] register_netdevice+0x126c/0x1ae0 [ 253.975297][T13727] register_netdev+0x40/0x60 [ 253.979916][T13727] bnep_add_connection+0x6bf/0xbf0 [ 253.985102][T13727] do_bnep_sock_ioctl+0x40e/0x640 [ 253.990132][T13727] sock_do_ioctl+0xd9/0x300 [ 253.994645][T13727] sock_ioctl+0x576/0x790 [ 253.999001][T13727] __se_sys_ioctl+0xfc/0x170 [ 254.003594][T13727] do_syscall_64+0xfa/0x3b0 [ 254.008093][T13727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.013979][T13727] [ 254.016298][T13727] Last potentially related work creation: [ 254.022008][T13727] kasan_save_stack+0x3e/0x60 [ 254.026699][T13727] kasan_record_aux_stack+0xbd/0xd0 [ 254.031898][T13727] insert_work+0x3d/0x330 [ 254.036250][T13727] __queue_work+0xcfc/0xfe0 [ 254.040750][T13727] queue_delayed_work_on+0x18b/0x280 [ 254.046029][T13727] l2cap_chan_del+0x285/0x5e0 [ 254.050712][T13727] l2cap_conn_del+0x388/0x680 [ 254.055401][T13727] hci_conn_hash_flush+0x10d/0x230 [ 254.060522][T13727] hci_dev_close_sync+0xaef/0x1330 [ 254.065638][T13727] hci_unregister_dev+0x206/0x500 [ 254.070664][T13727] vhci_release+0x80/0xd0 [ 254.075000][T13727] __fput+0x44c/0xa70 [ 254.078989][T13727] task_work_run+0x1d1/0x260 [ 254.083580][T13727] do_exit+0x6ad/0x22e0 [ 254.087748][T13727] do_group_exit+0x21c/0x2d0 [ 254.092348][T13727] __x64_sys_exit_group+0x3f/0x40 [ 254.097377][T13727] x64_sys_call+0x21ba/0x21c0 [ 254.102054][T13727] do_syscall_64+0xfa/0x3b0 [ 254.106558][T13727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.112536][T13727] [ 254.114858][T13727] The buggy address belongs to the object at ffff888055014000 [ 254.114858][T13727] which belongs to the cache kmalloc-8k of size 8192 [ 254.128907][T13727] The buggy address is located 3152 bytes inside of [ 254.128907][T13727] freed 8192-byte region [ffff888055014000, ffff888055016000) [ 254.142883][T13727] [ 254.145210][T13727] The buggy address belongs to the physical page: [ 254.151613][T13727] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55010 [ 254.160369][T13727] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 254.168859][T13727] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 254.176833][T13727] page_type: f5(slab) [ 254.180807][T13727] raw: 00fff00000000040 ffff88801a442280 0000000000000000 dead000000000001 [ 254.189385][T13727] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 254.197961][T13727] head: 00fff00000000040 ffff88801a442280 0000000000000000 dead000000000001 [ 254.206626][T13727] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 254.215294][T13727] head: 00fff00000000003 ffffea0001540401 00000000ffffffff 00000000ffffffff [ 254.223960][T13727] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 254.232625][T13727] page dumped because: kasan: bad access detected [ 254.239046][T13727] page_owner tracks the page as allocated [ 254.244756][T13727] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5546, tgid 5546 (dhcpcd-run-hook), ts 51306707458, free_ts 51274369073 [ 254.265591][T13727] post_alloc_hook+0x240/0x2a0 [ 254.270359][T13727] get_page_from_freelist+0x21e4/0x22c0 [ 254.275902][T13727] __alloc_frozen_pages_noprof+0x181/0x370 [ 254.281708][T13727] alloc_pages_mpol+0x232/0x4a0 [ 254.286553][T13727] allocate_slab+0x8a/0x3b0 [ 254.291070][T13727] ___slab_alloc+0xbfc/0x1480 [ 254.295763][T13727] __kmalloc_cache_noprof+0x296/0x3d0 [ 254.301134][T13727] tomoyo_init_log+0x111f/0x1f70 [ 254.306069][T13727] tomoyo_supervisor+0x340/0x1480 [ 254.311094][T13727] tomoyo_env_perm+0x149/0x1e0 [ 254.315853][T13727] tomoyo_find_next_domain+0x15cf/0x1aa0 [ 254.321487][T13727] tomoyo_bprm_check_security+0x11c/0x180 [ 254.327210][T13727] security_bprm_check+0x89/0x270 [ 254.332242][T13727] bprm_execve+0x8ee/0x1450 [ 254.336758][T13727] do_execveat_common+0x510/0x6a0 [ 254.342577][T13727] __x64_sys_execve+0x94/0xb0 [ 254.347284][T13727] page last free pid 5545 tgid 5545 stack trace: [ 254.353599][T13727] __free_frozen_pages+0xc71/0xe70 [ 254.358710][T13727] __put_partials+0x161/0x1c0 [ 254.363383][T13727] put_cpu_partial+0x17c/0x250 [ 254.368144][T13727] __slab_free+0x2f7/0x400 [ 254.372562][T13727] qlist_free_all+0x97/0x140 [ 254.377161][T13727] kasan_quarantine_reduce+0x148/0x160 [ 254.382625][T13727] __kasan_slab_alloc+0x22/0x80 [ 254.387569][T13727] __kmalloc_noprof+0x224/0x4f0 [ 254.392417][T13727] load_elf_binary+0x2cd/0x2790 [ 254.397275][T13727] bprm_execve+0x999/0x1450 [ 254.401782][T13727] do_execveat_common+0x510/0x6a0 [ 254.406803][T13727] __x64_sys_execve+0x94/0xb0 [ 254.411482][T13727] do_syscall_64+0xfa/0x3b0 [ 254.415977][T13727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.421867][T13727] [ 254.424190][T13727] Memory state around the buggy address: [ 254.429812][T13727] ffff888055014b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.437866][T13727] ffff888055014b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.445920][T13727] >ffff888055014c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.453976][T13727] ^ [ 254.460640][T13727] ffff888055014c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.468696][T13727] ffff888055014d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.476746][T13727] ================================================================== [ 254.499268][T13727] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 254.506504][T13727] CPU: 1 UID: 0 PID: 13727 Comm: syz.4.2296 Not tainted 6.16.0-rc2-syzkaller-00162-g302251f1fdfd #0 PREEMPT(full) [ 254.518592][T13727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.528663][T13727] Call Trace: [ 254.531971][T13727] [ 254.534913][T13727] dump_stack_lvl+0x99/0x250 [ 254.539534][T13727] ? __asan_memcpy+0x40/0x70 [ 254.544146][T13727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.549375][T13727] ? __pfx__printk+0x10/0x10 [ 254.553976][T13727] panic+0x2db/0x790 [ 254.558240][T13727] ? __pfx_panic+0x10/0x10 [ 254.562707][T13727] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 254.568619][T13727] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 254.574951][T13727] ? print_memory_metadata+0x314/0x400 [ 254.580426][T13727] ? cfusbl_device_notify+0x150/0x6a0 [ 254.585803][T13727] check_panic_on_warn+0x89/0xb0 [ 254.590749][T13727] ? cfusbl_device_notify+0x150/0x6a0 [ 254.596120][T13727] end_report+0x78/0x160 [ 254.600375][T13727] kasan_report+0x129/0x150 [ 254.604993][T13727] ? cfusbl_device_notify+0x150/0x6a0 [ 254.610371][T13727] cfusbl_device_notify+0x150/0x6a0 [ 254.615579][T13727] ? net_generic+0x1e/0x240 [ 254.620089][T13727] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 254.625819][T13727] ? caif_device_notify+0x250/0xfc0 [ 254.631025][T13727] ? smc_pnet_netdev_event+0x3b5/0x6c0 [ 254.636486][T13727] notifier_call_chain+0x1b3/0x3e0 [ 254.641611][T13727] register_netdevice+0x12ee/0x1ae0 [ 254.646821][T13727] ? __pfx_register_netdevice+0x10/0x10 [ 254.652385][T13727] ? __asan_memset+0x22/0x50 [ 254.656996][T13727] ? dev_addr_mod+0x2ce/0x3d0 [ 254.661689][T13727] register_netdev+0x40/0x60 [ 254.666288][T13727] bnep_add_connection+0x6bf/0xbf0 [ 254.671408][T13727] ? __pfx_bnep_add_connection+0x10/0x10 [ 254.677051][T13727] ? __fget_files+0x3a0/0x420 [ 254.681735][T13727] do_bnep_sock_ioctl+0x40e/0x640 [ 254.686773][T13727] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 254.692337][T13727] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 254.697981][T13727] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 254.703714][T13727] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 254.709707][T13727] sock_do_ioctl+0xd9/0x300 [ 254.714241][T13727] ? __pfx_sock_do_ioctl+0x10/0x10 [ 254.719362][T13727] ? __lock_acquire+0xab9/0xd20 [ 254.724223][T13727] sock_ioctl+0x576/0x790 [ 254.728564][T13727] ? __pfx_sock_ioctl+0x10/0x10 [ 254.733422][T13727] ? __fget_files+0x2a/0x420 [ 254.738018][T13727] ? __fget_files+0x3a0/0x420 [ 254.742699][T13727] ? __fget_files+0x2a/0x420 [ 254.747301][T13727] ? bpf_lsm_file_ioctl+0x9/0x20 [ 254.752280][T13727] ? __pfx_sock_ioctl+0x10/0x10 [ 254.757161][T13727] __se_sys_ioctl+0xfc/0x170 [ 254.761773][T13727] do_syscall_64+0xfa/0x3b0 [ 254.766277][T13727] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.771486][T13727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.777554][T13727] ? clear_bhb_loop+0x60/0xb0 [ 254.782242][T13727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.788142][T13727] RIP: 0033:0x7f69c1d8e929 [ 254.792568][T13727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.812191][T13727] RSP: 002b:00007f69c2ca6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.820637][T13727] RAX: ffffffffffffffda RBX: 00007f69c1fb5fa0 RCX: 00007f69c1d8e929 [ 254.828610][T13727] RDX: 0000200000000540 RSI: 00000000400442c8 RDI: 0000000000000007 [ 254.836578][T13727] RBP: 00007f69c1e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 254.844547][T13727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.852525][T13727] R13: 0000000000000000 R14: 00007f69c1fb5fa0 R15: 00007ffe43e47198 [ 254.860517][T13727] [ 254.863839][T13727] Kernel Offset: disabled [ 254.868166][T13727] Rebooting in 86400 seconds..