last executing test programs: 2m38.899889454s ago: executing program 1 (id=631): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x7ffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffffbb, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="00010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008003117"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket(0x2b, 0x80801, 0x1) ioctl$sock_TIOCINQ(r5, 0x8905, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, &(0x7f0000001980)=""/4096, 0x1000}, 0x3}], 0x1, 0x0, 0x0) write(r7, &(0x7f0000003400)="d3", 0x1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x64, r4, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x42, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0xb}, @device_b, @device_a, @initial, {0x6, 0x9}}, 0x1, 0x8, @default, @val={0x1, 0x2, [{0x3}, {0x36, 0x1}]}, @val={0x2d, 0x1a, {0x800, 0x0, 0x1, 0x0, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x1, 0x1}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x40080c4}, 0x10) 2m38.394893225s ago: executing program 1 (id=637): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, 0x0, 0x0) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) read(r0, &(0x7f0000000000)=""/38, 0x26) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1508004500002c006500000011907800000000e000000100004e2000189078041c0000cb289e95b8cc9c1104000000810000000000000020372479ce2bfbc76ffb8bfd"], 0x0) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000100)=0x5, 0x4) recvmsg(r4, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x20) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) 2m37.41125721s ago: executing program 1 (id=656): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) (async) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x885) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd2c, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x8) (async) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080), 0x4) 2m36.832619335s ago: executing program 1 (id=660): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xfff2, 0xf}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x3, '\x00', 0x0, r2, 0x0, 0x4}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x4e20, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10000, 0x5}, {}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1}}, 0xe8) getsockopt(r4, 0x5, 0xc55, &(0x7f0000000640)=""/77, &(0x7f0000000080)=0x4d) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x158) recvmmsg(r5, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010101}]}, 0x24}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000111401f3feffffff00000000080003000000000008004f0003eafc5c"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x4e24, 0x23, @remote, 0x3}, 0x1c) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}}, 0x0) r9 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_EDITDEST(r9, 0x0, 0x489, &(0x7f0000000180)={{0x5e, @rand_addr=0x64010101, 0x4e24, 0x4, 'lblcr\x00', 0x1, 0x3, 0x22}, {@broadcast, 0x4e22, 0x10000, 0x10000, 0x2, 0xfd8d}}, 0x44) 2m36.521604886s ago: executing program 1 (id=665): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x24000481}, 0x4040084) r0 = socket(0x1d, 0x2, 0x6) setsockopt$llc_int(r0, 0x6a, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_batadv\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x5, 0xf}}) 2m36.328384338s ago: executing program 1 (id=669): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x100) accept4(r1, 0x0, 0x0, 0x0) shutdown(r1, 0x1) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @host}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10) listen(r0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=@framed={{}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x48, 0x2, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x1a8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)=ANY=[@ANYBLOB="140000002600010026bdf000fcdb080006"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) accept4$unix(r0, 0x0, 0x0, 0x0) 2m33.674590241s ago: executing program 2 (id=714): r0 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000240012800b00010062726964676500adc6ba202a0a588129310e1a3d8fdaef0014000280"], 0x44}}, 0x0) 2m33.672836582s ago: executing program 2 (id=718): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0xc, 0xa, 0x0, 0x0, @u64=0xb}, @typed={0x8, 0xe6, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x33}}]}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_emit_ethernet(0x46, &(0x7f0000000340)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x88}}}}}}, 0x0) 2m33.509201915s ago: executing program 2 (id=721): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000850000009d00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1cc}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) r3 = accept(r2, &(0x7f0000000140)=@isdn, &(0x7f00000002c0)=0x80) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048802}, 0x8af5bb4280dde1f0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x3) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r6 = socket$inet(0x2, 0x3, 0xa) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d000400000000000e000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) syz_emit_ethernet(0x36, &(0x7f0000001c00)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0xffff, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0xa5, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x97, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}, {"6cda3cd5adbc9bfa53743a7af8ca7fd7cdda5a547530f134bed6b4eb0a92410c7e68b8a648ee47d02b30bef20b96a57619cd807175a2364694ba03112f59cb5d19e31f7e771d631c4d4fe6016314aacff4a8824271fc4ee0871db5426fb9d1e0e7e1d3888a47b16b8ff2426025601e"}}}}}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f00000009c0)={0x0, r3}, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000a00)={0x0}) r10 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f0000019580)={'filter\x00', 0x7, 0x4, 0x4c8, 0x110, 0x0, 0x110, 0x3e0, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@arp={@multicast1, @empty, 0xff000000, 0xff, 0x9, 0x1, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x2, 0x0, 0x8, 0x3ff, 0x2, 0x2, 'veth0_vlan\x00', 'geneve1\x00', {0xff}, {}, 0x0, 0x2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @rand_addr=0x64010100, @loopback, 0xf, 0x1}}}, {{@arp={@local, @empty, 0xff000000, 0xff000000, 0xe, 0x6, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, {@mac=@random="757930b1b98a", {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0xffff, 0x4, 0x21, 0x5, 0x2, 'ip_vti0\x00', 'pim6reg1\x00', {0xff}, {0x7f}, 0x0, 0x26c}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@arp={@multicast2, @broadcast, 0xffffff00, 0x0, 0xc, 0x9, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@random="23fc13b910db", {[0x0, 0xff]}}, 0xfb3, 0x1, 0x2, 0x9, 0x5, 0x3, 'geneve0\x00', 'veth0_to_bond\x00', {}, {0xff}, 0x0, 0xbdffa750df69ccdb}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x40, 'system_u:object_r:lost_found_t:s0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f0000000c00)={0x0, r9, "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", "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"}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r11, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x2dc2d, &(0x7f0000000300)=ANY=[], 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6007}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) close(r2) 2m33.403314506s ago: executing program 2 (id=723): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000005fdffffff1000320003000000000000000000eeff0f003300000000000000000000000000fc024000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg$inet6(r2, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f00000001c0)={@loopback, @empty, @multicast2}, 0xc) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x501, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r7, 0x116, 0x80, &(0x7f0000000340)="7155b506edb24822da43f6c2a0b5ce2b40b0ec718aca10ae53cc28d1450e844eb4ec512f6968cb25f7c89e54f319df5a500000a467048e926b327c99c786d163734c9ded0be5ea02e4fcc7bb7b6bd0fd2fca27a4e17c3ac1a71c19bfd6770cedd6df3172c534213f8afd48cf028b9188dcc2fb1d9abadccdd4e6b964e249507921d2236e34735722ea7130954ee997f67950c1d7477fee42cb0fdb885c8b18258ba79d179eba5279ce1fd01e325e2516af7096b27ed72b6706d973a76622ee87229dee597ca72a5375427806ab1e487a72461a29b59ee5a37dab21e4ba03a7c7e94500"/241, 0x155) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYRES8=r7], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) accept(r7, &(0x7f0000000280), &(0x7f0000000480)=0x80) 2m33.333733543s ago: executing program 2 (id=724): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x475}, 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvfrom$inet6(r1, 0x0, 0x0, 0x6122, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]}}}]}, 0x40}}, 0x0) 2m33.215035387s ago: executing program 2 (id=726): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800010000000000000000001d018f0008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r1], 0x24}}, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x62ea, 0x4) sendto$inet6(r2, 0x0, 0x97, 0x24000800, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x1e}, 0xd, 0x2}, 0x20) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r4, 0x101, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x26, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 2m21.241442465s ago: executing program 32 (id=669): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x100) accept4(r1, 0x0, 0x0, 0x0) shutdown(r1, 0x1) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @host}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10) listen(r0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=@framed={{}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x48, 0x2, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x1a8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)=ANY=[@ANYBLOB="140000002600010026bdf000fcdb080006"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) accept4$unix(r0, 0x0, 0x0, 0x0) 2m18.123820632s ago: executing program 33 (id=726): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800010000000000000000001d018f0008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r1], 0x24}}, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x62ea, 0x4) sendto$inet6(r2, 0x0, 0x97, 0x24000800, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x1e}, 0xd, 0x2}, 0x20) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r4, 0x101, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x26, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 52.353068259s ago: executing program 0 (id=1730): pipe(&(0x7f00000045c0)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x8000, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x4, 0xd, 0x115, 0x0, 0x1, 0xb7, '\x00', 0x0, r2, 0x3, 0x3, 0x3, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0xde8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x4, 0x5, 0x76c5, 0x2, 0x0, 0x80000000}}) getsockopt$llc_int(r5, 0x10c, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 51.333555369s ago: executing program 0 (id=1746): socket$kcm(0x10, 0x2, 0x10) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x800) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x4, &(0x7f0000000b40)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000680)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@private, @dev, 0x0}, &(0x7f0000000240)=0xc) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r2, 0x1, 0x6, @multicast}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) accept4(r5, 0x0, 0x0, 0x0) sendmsg$inet(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000200)="8f", 0x1}], 0x1}, 0x10) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r6, 0x29, 0x38, 0x0, &(0x7f0000000100)) sendmmsg(r4, &(0x7f000000e240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x5e, 0xffffffffffffffff, 0x41100, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff60, 0x0, 0x0, 0x10, 0x100}, 0x94) 51.263018708s ago: executing program 0 (id=1748): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f00000000c0), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 50.863411238s ago: executing program 0 (id=1751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000000c0)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$inet6(0xa, 0x802, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x2004c011, &(0x7f0000000080)={0xa, 0x4e24, 0xd502, @empty, 0x8000}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000100)={0xd}, 0x4) socket(0x2c, 0x800, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0xfffd, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x4}, @generic={0x0, 0x8, "d58838000391"}]}}}}}}, 0x4e) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200480, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x100}) 47.712650624s ago: executing program 0 (id=1763): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xf0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x19, 0x8, 0x2, 0xe, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, 0x8, 0x700, 0x3ff, 0x6}}) 47.445599378s ago: executing program 0 (id=1767): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000005f005f03a9f9f4ba0a1f0000000000000000ecffffffffffffff000000000000", 0x24) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r2, 0x0, 0x18, 0x0, &(0x7f0000003d00)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r3, 0x10c, 0x4, &(0x7f0000000000)=0x1e2600, 0x4) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000180)={0x0, 'wg2\x00', {0xfffffffc}, 0x79df}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x26, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) (async) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000006, 0x8010, r6, 0x1000) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000002c0)=[{{0x1, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x8) (async) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRESDEC=r1, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080001000100000014000000000108000f"], 0x74}}, 0x0) 32.456986097s ago: executing program 34 (id=1767): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000005f005f03a9f9f4ba0a1f0000000000000000ecffffffffffffff000000000000", 0x24) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r2, 0x0, 0x18, 0x0, &(0x7f0000003d00)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r3, 0x10c, 0x4, &(0x7f0000000000)=0x1e2600, 0x4) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000180)={0x0, 'wg2\x00', {0xfffffffc}, 0x79df}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x26, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) (async) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000006, 0x8010, r6, 0x1000) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000002c0)=[{{0x1, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x8) (async) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRESDEC=r1, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080001000100000014000000000108000f"], 0x74}}, 0x0) 2.123532862s ago: executing program 7 (id=2452): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000001c0)={0xf0}, 0x8) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x37) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e25, 0xeb, @initdev={0xfe, 0x88, '\x00', 0x21, 0x0}, 0x5b56}, 0x1c) sendto$inet6(r4, &(0x7f00000000c0)="800037e92208a19e", 0x8, 0x40094, &(0x7f0000000040)={0xa, 0x1000, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc}, 0x1c) 2.044259617s ago: executing program 3 (id=2453): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000ff0200000000000000000000000000010004000000000000071800000000040000d704"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x14, 0x2, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0x0, 0x0}, 0x10) ioctl$SIOCX25GDTEFACILITIES(r1, 0x61e2, 0x0) 1.993648604s ago: executing program 6 (id=2454): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x18, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500000056150a5981fd2af11000000006000000faffffff"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x6}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, 0x0, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) (async) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) (async) socket$pppoe(0x18, 0x1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x18, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500000056150a5981fd2af11000000006000000faffffff"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async) close(0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x6}, 0x94) (async) 1.878715448s ago: executing program 5 (id=2455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b100000000008510000002000000850000000500000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x28, 0x8, 0x6, 0x407, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0xc0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x50, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @dev}}}]}]}, 0x50}}, 0x0) 1.714006063s ago: executing program 6 (id=2456): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000006a0001e22165366bde524dbaf5d4a3250200000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) 1.649587513s ago: executing program 5 (id=2457): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206197900000000000000000000000005000100070000000900020073797a30000000001400078005001500fc00000008001240000000000d00d24b686173683a6e65740000000005000500020000000500040000000000941839b9d5a7e1c1100a6d4ba354ff51ee6e46ac60a0aa4f94"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}], 0x1}], 0x1, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x4, r2}, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r6, &(0x7f00000000c0)={0x2c, 0x4, r2, 0x32}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r8}, 0x10) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r9, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r9, 0x2) accept4(r9, 0x0, 0x0, 0x80800) poll(0x0, 0x0, 0xffffffffffbffff8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000a914cf162b8bd69b12db5ea2d1ac82e149ed0229ef6cb1c4b0f80e7e8a2adda600e507f61ce96064797c058cab3c5a531312211e551dfa804fbdfc4eaad18ce1831ec35f233e5bbc5b22879986368426282149614a", @ANYRES16=r7, @ANYBLOB="6b4e26bd7000fddbdf250b000000"], 0x14}}, 0x0) sendmsg$can_j1939(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x1d, r2, 0x0, {0x7, 0x1, 0x4}, 0x1}, 0x18, &(0x7f0000000200)={&(0x7f0000000500)="bc7a2a4e89a2365ea0239be9838647c3f77bd76f92b41755e39a56ca50a8d0db95f674323ecb833982ae47cf7cd266db39a33b4af32948467680aa58cf8134a51d9a23ddd48c72bfc747266ded0b791ba40010220986a5db64ae5370b2f0e93f273e792d0c9f42605c6f518f96c4b34d3cf295c4ea49e8f06865c9848719632f6590fa8bf3f0033361d864ec282414a4d32cbf9df28838e5918b6ec97a2a374290a54db2510ade8d62e3514d3b7b0af8b84a87a7aae464086aee4083e3d0c43f5d501b9b04d9eda757f1d427e552eefeac33999ac1187b9fffb5413a327b0398f3347c19407f28cce14f0fdc79f0d39a", 0xf0}, 0x1, 0x0, 0x0, 0x20048800}, 0x4008010) 1.617392452s ago: executing program 7 (id=2458): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) r11 = socket(0x400000000010, 0x3, 0x0) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x6, 0x3, 0x1, 0x41, 0x8, 0xc85e, 0xffff, 0x401}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.337667125s ago: executing program 6 (id=2460): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @multicast1}, &(0x7f0000000140)=0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r1, 0x1f4d2000) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000aebb66da00000000aaaaaaaaaaaa000c020000e0040300006345afc09b81b5ef"], 0x22) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) close(r3) close(r1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000200)=""/67, 0x43, 0x0, &(0x7f0000000280)=""/40, 0x28}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000040)=@raw=[@ldst={0x2, 0x3, 0x0, 0x7, 0x6, 0x30, 0xfffffffffffffffc}], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x83f00, 0x0, '\x00', r0, 0x1b, r1, 0x8, &(0x7f0000000180)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x3, 0x8a2}, 0x10, r4, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x1, 0x5, 0x1, 0x4}], 0x10, 0x8}, 0x94) 1.320713433s ago: executing program 7 (id=2462): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, 0x0, 0x43059294f10fa146) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1b}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@sndinfo={0x20, 0x84, 0x2, {0xd, 0x10000}}, @authinfo={0x18, 0x84, 0x6, {0x8}}], 0x38, 0x40040}, 0x4004000) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000015b40)={0x0, 0x0, &(0x7f0000015b00)={&(0x7f0000015a40)={0x34, 0x13, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x34}}, 0x4) recvmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) 1.117502185s ago: executing program 7 (id=2463): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @empty}}, [0x0, 0x80000001, 0x9, 0xfffffffffffffffd, 0x1, 0xffff, 0x6ae, 0x100, 0x8, 0xfffffffffffffffc, 0x6, 0x9, 0xfffffffffffffffe, 0x9, 0x1]}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}}}, &(0x7f0000000280)=0x84) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000000300)=0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000340), &(0x7f0000000380)=0x4) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f00000003c0)=""/52, &(0x7f0000000400)=0x34) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000440)={r2, @in={{0x2, 0x4e21, @loopback}}, 0x9, 0x4000}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, ["", ""]}, 0x14}}, 0x4800) getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000600)={@rand_addr, @dev}, &(0x7f0000000640)=0x8) r6 = accept4$rose(0xffffffffffffffff, &(0x7f0000000680)=@short={0xb, @dev, @null}, &(0x7f00000006c0)=0x1c, 0x800) ioctl$SIOCRSGL2CALL(r6, 0x89e5, &(0x7f0000000700)=@rose) r7 = socket$netlink(0x10, 0x3, 0x15) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f0000000740)={0x2, 0x2}) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000780), &(0x7f00000007c0)) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r7) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, r8, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCRSSCAUSE(r6, 0x89e1, &(0x7f0000000940)=0x9) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x1a, &(0x7f0000000980)=@raw=[@alu={0x7, 0x0, 0xd, 0xa, 0x0, 0xfffffffffffffffe, 0x4}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x39}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff7e11}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000a80)='GPL\x00', 0xfffffffb, 0xbb, &(0x7f0000000ac0)=""/187, 0x41100, 0x2e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x84}, 0x94) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000000c80)={{r9}, "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"}) bind$rose(r6, &(0x7f0000001c80)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x0, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001cc0), r10) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001d00), 0x4) r11 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r11, &(0x7f0000001d40)=""/133, 0x85, 0x10000, &(0x7f0000001e00)={0x2, 0x0, @multicast1}, 0x10) 1.115171355s ago: executing program 6 (id=2464): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, 0x0, &(0x7f0000000540)=0x44) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000000)={0x1000, 0xaf43, 0x7, 0x40, 0x1}) close(r5) (async) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x20, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x0, 0xfffc, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0x1, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x5d3}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x16, 0xd4a, 0x7, 0x6}, {0xf, 0x2, 0x4, 0xda, 0x7ff, 0x50}, 0x8, 0x5, 0x1ef3}}, @TCA_TBF_BURST={0x8, 0x6, 0x2}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000005}, 0x4008000) (async, rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="d702b1000000000000000000000000010000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (rerun: 64) 1.114758703s ago: executing program 4 (id=2465): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x14, r1, 0xba960a2220112c19, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) r2 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000100)=0x2, 0x4) sendto$inet6(r2, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1.005850692s ago: executing program 3 (id=2466): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) socketpair(0x28, 0x3, 0xffffffbc, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={r1}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'xfrm0\x00', @random="93801bd49998"}) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x4}}, 0x10) sendmsg$tipc(r3, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x0, 0x4a, 0x0, 0x1}, 0xfffffffffffffd19) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c000280", @ANYRES32], 0x4c}}, 0x0) 959.3443ms ago: executing program 4 (id=2467): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x34040001) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000), 0x4) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000140)) syz_emit_ethernet(0x6a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500000000fffd4e20004890780300000094950cf47fb1aca1b7000000006d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8d78548ef8230ff7dec71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d00"/113], 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) socket$inet6(0xa, 0x5, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r3, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f00000001c0)=r5, 0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r6, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)={r8, r6, 0x4, r6}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000001900599c6d0eab070004000523"], 0xfe33) 681.650926ms ago: executing program 3 (id=2468): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000005c0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="660a000000000000611183000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f7, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, &(0x7f0000000100)=0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r4, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x9, 0xe, &(0x7f0000003540)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0xc, r4, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x8}, 0x10}, 0x94) socket$inet6(0xa, 0x0, 0x0) 679.926022ms ago: executing program 5 (id=2469): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r4, 0x10c, 0x4, &(0x7f0000000000), 0x4) r5 = socket(0x18, 0x0, 0x0) close(r5) socket$can_j1939(0x1d, 0x2, 0x7) getsockname$packet(r5, 0x0, &(0x7f0000000080)) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="e8a51b48480bfda000", 0x9) r6 = accept4(r3, 0x0, 0x0, 0x800) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpeername(r7, &(0x7f00000001c0)=@sco={0x1f, @fixed}, &(0x7f0000000240)=0x80) writev(r6, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x58, 0x0, 0x8, 0x70bd24, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x800003e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]]}, 0x58}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, @null, @bpq0, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0xc) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYRESOCT=r8, @ANYRES32=r9], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 676.528421ms ago: executing program 6 (id=2470): unshare(0x2040400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0xffffff80, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0xd24f4d5778621546}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getroute={0x28, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x9}, [@RTA_MULTIPATH={0xc, 0x1d, {0xb, 0x1, 0x60}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) 608.796059ms ago: executing program 4 (id=2471): mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0xb635773f04ebbeec, 0x11171, 0xffffffffffffffff, 0xa1679000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0xb635773f04ebbeec, 0x11171, 0xffffffffffffffff, 0xa1679000) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) 572.553669ms ago: executing program 5 (id=2472): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async, rerun: 32) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) 501.588075ms ago: executing program 6 (id=2473): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) writev(r3, &(0x7f00000037c0)=[{&(0x7f0000001180)="04c893453620ea90c0e48666c11298d0d0fbe636bea485a4a0d6d934387ecff0535ec6a0b3ba529035ec4237a06d309fccd74b57abc9027484b3e276c0257121d2b8ddf48476a23c24db2299d6c0a60aa70fbf54dc5612ec7684b86a9e00513b1bad185f18ef55765ef014de6534f37328a9e14c83529c6c11271d719a18a7d5618f628cc9175967284a1cd11bc8cacd15e47b27720836bebf09bc8714e4790a90ce08f859d218063e8f13d96ac2f3fbfaabc2f356f477715dbb7f4c266061ca5163570756bc6036392a282aec2d3630a13c1e429fb0ace48540186c18a8db1db508eea18f", 0xe5}, {&(0x7f0000001280)="3eb679df51db9b5a57c1150065d6a65ae34738358bb0d0bcbe04d32ecadeedbddad47d8cb1bfb25b6d07f3eb6ba55a488c60b0b525c4ab8fd97a4ee8f374cbc61bcea9d5bd7e87caa4864820a6b38afa1e01381ed81adcdffdb7bc164fc6b23fa02b22dbdf5751389d30a3df9b7dfffc1e87bd24b4d09e13073e44e135da38623ea308b42bb9b99e5db5d7cb04252084a024a3957e0bb26483f17b59b6268b178b5dab3ad2d1600eb5be18ac8bc045616dc85bd9a03457a712d1416b1a75f2f335a3e968b5d3f13ebb23b52bcbd7aa747c8ed0ff10780785196d842d5eed", 0xde}, {&(0x7f00000025c0)="e3a5ba48e088556f3b44251507a044345ea2fcd17de21be0b6233f3c3c8b3d4698d0ef1297cbbea3ca074ea543d5f42e893a5c81c377d323ddda474f48624c7beda18c2fc80b239dcb46658bebec6aec75abe2a16c7b9ac21199bfaf559d6e914a80370a33d0b02dcadba691cbd3e259e35252c8797b7e6fd09b8e8c1b89adf8aa02ec5d3df6c7e342da0796263d7a4f1ea5a0ea183c56003075daff860dc0e1a4ed7f364ca06f0eee740285bb7ed93817d74033fbaa0dfd24568b8556b65571e25c4302afab7e3ccf492722b89a0fca6dd36b6044f232c693b29d232efc6a3d9061329a463fffb6d2261ec22c626978ee0d8769", 0xf4}, {&(0x7f0000001100)="ecd483ce1b204e0965906c36", 0xc}, {&(0x7f00000026c0)="2f2efbb9077ffb59a39611543fd3f0b5e9e4d2c80e3d6e6fc98e5030bdc59c4af7ff5cdd954873fa4b47031fe5d38ca15b8dacc36120bd4913834262a51e75bf727fe5d0303cc7b9c008fb3ac7ec90935c86f5d29d22ec21259515a0980fd89d1cd6e054386f5b3a22aeaab799dfe55085b81b6b6b809aaa1299d3c3a32d63d3d23f85d1006433756df431e08d9c2ef9b4cbb670a4e584e4174fccaa56609d74aa5ef41ce18059ce9921925a1343e2db79e95cd66776518199a7e2ec95bfbac54e934644fd3e1051d556a901355edf8fa836f8e599edd4f73a3aed48b2c3b27c90626a724e1a222a1bf1fa", 0xeb}, {&(0x7f0000001380)='8Y', 0x2}, {&(0x7f00000027c0)="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", 0x1000}, {&(0x7f00000013c0)="b55eed6795f117396ad5ee9ecac51781f108a7d58b3c79ab0259146ad1699f1b27ba95195760d05eb694efae40075366718a64650089b5eb1b00ba49", 0x3c}, {&(0x7f00000014c0)="55f743a11316d9203ec305c541a569942ac57a55d8d15065ed4c5d0b052d0b556b3b29a00e3ecc729b07b9a3ebb80a04cbe5372c54efe626c90b70083e0a3c47fcd661c08a07360b73537b5b6630df1517e051cad314b0d65afed4aafd709a0ff04b69f82819eaa048fe0557888f1cb754be53ea0ec88e61158db1fa46fdc0a764b49435", 0x84}], 0x9) ppoll(&(0x7f0000001080)=[{r1, 0x204}, {r0, 0x1086}, {r2, 0x10400}, {r1, 0x4200}, {r0, 0x2000}, {r1, 0x200}, {r1, 0x1029}, {r3, 0x455c}, {r1, 0x400b}, {r1, 0x552c}], 0xa, &(0x7f0000000140), &(0x7f0000001000)={[0x4]}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000003880)="548cf499830dfc8186caddfa71887bb875e4d5f3bc9e7573ddfce3de47702aee025eea45c913291c272548c89c1bae2177dd645b8008243db556b0cbeecc93cc7b4a0f8791f910362ec1cf79d561a9ebb00c3e7dc391961a66bc600155fe2b806296369845cfcad482c1", 0x6a}], 0x1}, 0x4048841) recvmsg(r4, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) socket(0x25, 0x5, 0xb4) recvmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 501.137595ms ago: executing program 4 (id=2474): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r8, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000500)='GPL\x00', 0x5, 0x11, &(0x7f00000017c0)=""/4098}, 0x90) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70ad2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r9 = socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r12, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r13, @ANYRES32=r13], 0x44}}, 0x2000800) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r13, 0x84, 0x17, 0x0, 0x69) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x3f, 0x2, 0x6}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x78, 0xfa}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x12, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf090000000000005509010000000000950000000000000018200000", @ANYRES32=r1, @ANYBLOB="000000000100000025000400fcffffffbc91100000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x2f}, 0x94) 481.396801ms ago: executing program 3 (id=2475): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25020000fd", @ANYRES64=r2, @ANYBLOB="080002007f00"], 0x20}, 0x1, 0x0, 0x0, 0x8090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e22, @broadcast}}) 404.735301ms ago: executing program 5 (id=2476): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) (async) shutdown(r1, 0x2) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r4, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r2, 0xdb9, 0x7}, &(0x7f0000000180)=0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r5, 0x10e, 0x8, &(0x7f00000001c0)=""/96, &(0x7f0000000000)=0x60) (async, rerun: 64) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x2c, r6, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0) 317.747831ms ago: executing program 3 (id=2477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000006380)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x7, @private0, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000016000000000000aa", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x1, 0x8044) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000500000000000000050008000d000000", 0x24) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0880010027be335aa9ca0bbd"], 0xfd6c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) sendmmsg$inet6(r1, &(0x7f0000006380)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x7, @private0, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000016000000000000aa", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x1, 0x8044) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) (async) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000500000000000000050008000d000000", 0x24) (async) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0880010027be335aa9ca0bbd"], 0xfd6c) (async) 305.457163ms ago: executing program 4 (id=2478): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000040)) r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @dev, @rose, 0x1, @default}, &(0x7f00000000c0)=0x1c, 0x800) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000100)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x8, 0x4, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3d}, @broadcast}, 0x10) r4 = socket$netlink(0x10, 0x3, 0xe) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd4, r5, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x7}}}}, [@NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x5, 0x5}], "a30ef72d7e23189f"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x6, 0x4}, {0x9, 0x5}, {0x9, 0x3}, {0x1c, 0x3}, {0x7f, 0x6}, {0x3, 0x4}, {0x1, 0x1}, {0x9, 0x2}, {0x5, 0x5}, {0x1, 0x7}, {0x80, 0x4}, {0x5, 0x4}, {0x0, 0x2}, {0x3, 0x7}, {0x6}, {0x3, 0x4}, {0x1, 0x2}, {0xe, 0x3}], "dde770efe6e39cba"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x6, 0x7}, {0x7f, 0x2}, {0x7, 0x5}, {0x2, 0x6}, {0x3, 0x5}, {0xfc, 0x4}, {0x7, 0x2}, {0x3, 0x5}, {0xc5}, {0x7, 0x5}, {0x27, 0x4}, {0x6, 0x5}, {0x4, 0x1}, {0x45, 0x5}, {0x6, 0x3}, {0x6, 0x4}], "98770aa1ff36fb68"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x2, 0x1}], "d28b4d8b5b271922"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x2}, {0x8, 0x3}, {0x7f, 0x4}], "e28015213451b49c"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x81}, {0x0, 0x5}, {0x3, 0x3}, {0x9, 0x7}, {0x7, 0x6}, {0x6}, {0x4, 0x3}, {0x7, 0x1}, {0x10, 0x6}, {0xe}, {0x6}], "f073f2a8dd9c43a7"}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24000010}, 0x24000080) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r6, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_FAMILY={0x5, 0xd, 0x5}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x87fc2c7b9092aee3) socketpair(0x27, 0x13defcec8612a9bc, 0x3, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, {0xa, 0x4e21, 0x101, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7f}, 0x1, {[0xffffff3f, 0x3ff, 0xc485, 0x2, 0xffff8001, 0x6, 0x2, 0x1c9cd84d]}}, 0x5c) sendmsg$nl_xfrm(r8, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000640)=@getsa={0x2a4, 0x12, 0x100, 0x70bd26, 0x25dfdbfd, {@in6=@mcast2, 0x4d4, 0xa, 0xc3}, [@address_filter={0x28, 0x1a, {@in=@rand_addr=0x64010101, @in6=@loopback, 0x2, 0x8, 0x80}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @migrate={0x9c, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@private=0xa010100, 0x6c, 0x0, 0x0, 0x3503, 0x8, 0xa}, {@in6=@mcast1, @in=@rand_addr=0x64010100, @in=@private=0xa010101, @in=@rand_addr=0x64010100, 0xff, 0x2, 0x0, 0x0, 0x2, 0xa}]}, @sec_ctx={0x41, 0x8, {0x3d, 0x8, 0x0, 0x2, 0x35, "88e0762d09c18b9d0f3ce69a2c0b2bff2c0fec5ca3041285d0fa38b7401a60a03ea99159b0955aa619793a3f81d9db8d146bcf1683"}}, @tfcpad={0x8, 0x16, 0x8a8}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @algo_comp={0x143, 0x3, {{'lzjh\x00'}, 0x7d8, "c00ae4b43b729557c30eff0204e2abdf64032e4483afcb061966dae8729ee46a82a07272ce92d8437829d103aa4eeea122e635149b5155892b8d191eea26200553a7c034dfca3963b30623f15dd8acc2523d368ee3ad90eb04b6264d16045caa0cfe8972bd77d2e3f75bc9f54503922cb087f03acdd7567d9594ee93db6a2482f8d18f43eeb5228fbd6ae6b6d820bd254afb473e4272d62a5bc82ad550a8207d6496a4a8c2ba9516d0f953a18a5bbe880e533136a473449d374f2e72d3fa1dd6c7fac81f7c0c07502618708820874623bbffe6dd5345bbdc76c700df10395ebf688e977b42a5ef78594349a0b9ae2f3152d6dcdf9edffddffc72d1"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd2d, 0x3ff}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x20008001}, 0x4040) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000980)={{0x0, 0xfff, 0x2, 0x101, 0x1ff, 0x1, 0x401, 0x0, 0x100, 0x80000001, 0x3, 0x100000000, 0x2, 0x8, 0x7}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r8, 0xc0709411, &(0x7f0000000a40)={{r10, 0x1000, 0x5, 0x0, 0x4bd, 0x754a, 0xb, 0x9, 0xdbb, 0x80000000, 0xf80, 0x71, 0x5, 0x5, 0x6cae}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000b00)=0x0) connect$nfc_raw(r9, &(0x7f0000000b40)={0x27, r11, 0x1, 0x5}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), r8) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r9) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r8, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xa0, r12, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x20001000) ioctl$BTRFS_IOC_QGROUP_CREATE(r8, 0x4010942a, &(0x7f0000000d80)={0x1, 0x8b73}) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), r4) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000001040)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000e40)={0x18c, r13, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc2ef}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd139}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe74}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf23c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_LINK={0x104, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x900000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x47d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000010c0)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x7c, r12, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x7c}}, 0x40004) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001240)='freezer.self_freezing\x00', 0x0, 0x0) 303.079135ms ago: executing program 5 (id=2479): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x1c, r1, 0x1c20df3d40b5e7, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r2, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) connect$inet(r2, &(0x7f0000000980)={0x2, 0x4e24, @multicast1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r4}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) r5 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0xbe, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x4e21, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffd, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0) r6 = socket(0xa, 0x3, 0x3a) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route(r6, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=@ipv6_newaddrlabel={0x34, 0x48, 0x400, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x40, 0x0, r9, 0xf}, [@IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x3) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000940)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)={0xa0, r1, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000) setsockopt$inet6_int(r6, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4) sendto$inet6(r2, &(0x7f0000000000)="d3b9ae838e76fa7bd65f", 0xa, 0x8, 0x0, 0x0) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000140)={0xfffb, 0x1}, 0xc) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f00000009c0)={0x6df6aaf031ad5ac2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 'sh\x00', 0x27, 0xffffffff, 0x4}, 0x2c) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r2, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x60, 0x0) 172.667078ms ago: executing program 7 (id=2480): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@getneigh={0x14, 0x1e, 0x2, 0x70bd27, 0x25dfdbff, {}, ["", "", ""]}, 0x14}}, 0x4) (async) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x0, 0x44004) socket$netlink(0x10, 0x3, 0xc) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00%\x00\x00\x00\x00@\b'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, 0x0, 0x4008000) 9.681097ms ago: executing program 3 (id=2481): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000000c0)) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x30011}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 4.291312ms ago: executing program 7 (id=2482): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xffffffffffffff92}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x401, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="9266", 0x2}], 0x1}}], 0x1, 0x8840) 0s ago: executing program 4 (id=2483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c"], 0x68}}, 0x24040800) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="cb2da763bb3282b121692bc43eb4105000000003080106000240000000002c"], 0x50}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000480)=[{@fixed}]}) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000006060500000000000000000000000007050001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) kernel console output (not intermixed with test programs): ng attributes in process `syz.4.708'. [ 136.167184][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.709'. [ 136.201579][ T8533] bond3: option xmit_hash_policy: invalid value (64) [ 136.233096][ T8533] bond3 (unregistering): Released all slaves [ 136.345786][ T8547] netlink: 16 bytes leftover after parsing attributes in process `syz.4.712'. [ 136.601446][ T8562] openvswitch: netlink: Tunnel attr 10 has unexpected len 8 expected 2 [ 136.708315][ T8572] netlink: 'syz.4.722': attribute type 7 has an invalid length. [ 136.724282][ T8572] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 136.741757][ T8570] xt_CT: No such helper "snmp_trap" [ 136.820623][ T8575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.723'. [ 136.902698][ T8577] netlink: 'syz.4.725': attribute type 1 has an invalid length. [ 136.936794][ T8577] 8021q: adding VLAN 0 to HW filter on device bond4 [ 136.972524][ T8577] 8021q: adding VLAN 0 to HW filter on device bond4 [ 136.979828][ T8577] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 136.991125][ T8577] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 137.034459][ T8582] veth3: entered promiscuous mode [ 137.043506][ T8582] bond4: (slave veth3): Enslaving as an active interface with a down link [ 137.136149][ T8588] netlink: 16 bytes leftover after parsing attributes in process `syz.4.727'. [ 137.520984][ T8607] sctp: [Deprecated]: syz.4.733 (pid 8607) Use of int in maxseg socket option. [ 137.520984][ T8607] Use struct sctp_assoc_value instead [ 137.752777][ T8624] netlink: 24 bytes leftover after parsing attributes in process `syz.4.738'. [ 137.941808][ T8637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.740'. [ 137.971985][ T8635] netlink: 'syz.0.741': attribute type 11 has an invalid length. [ 137.980446][ T8640] netlink: 'syz.4.743': attribute type 1 has an invalid length. [ 138.116862][ T8645] netlink: 'syz.4.745': attribute type 1 has an invalid length. [ 138.194239][ T8654] macvtap1: entered promiscuous mode [ 138.199912][ T8654] macvtap1: entered allmulticast mode [ 138.230505][ T8655] dvmrp0: entered allmulticast mode [ 138.240322][ T8655] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 138.392984][ T8666] netlink: 'syz.4.752': attribute type 58 has an invalid length. [ 138.467512][ T8670] netlink: 'syz.3.754': attribute type 3 has an invalid length. [ 138.542082][ T8672] netlink: 'syz.3.755': attribute type 11 has an invalid length. [ 139.038667][ T5824] Bluetooth: hci4: command 0x0406 tx timeout [ 141.057101][ T8779] Bluetooth: MGMT ver 1.23 [ 141.091411][ T8782] validate_nla: 5 callbacks suppressed [ 141.091428][ T8782] netlink: 'syz.3.789': attribute type 2 has an invalid length. [ 141.136707][ T8782] __nla_validate_parse: 10 callbacks suppressed [ 141.136722][ T8782] netlink: 119 bytes leftover after parsing attributes in process `syz.3.789'. [ 141.298938][ T8790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.323474][ T8790] bond0: (slave rose0): Enslaving as an active interface with an up link [ 141.369245][ T8793] tipc: Started in network mode [ 141.377449][ T8793] tipc: Node identity 16fbcd2ea993, cluster identity 4711 [ 141.395298][ T8793] tipc: Enabled bearer , priority 0 [ 141.415164][ T8793] syzkaller0: entered promiscuous mode [ 141.425127][ T8793] syzkaller0: entered allmulticast mode [ 141.459147][ T8793] tipc: Resetting bearer [ 141.478734][ T8792] tipc: Resetting bearer [ 141.496802][ T8792] tipc: Disabling bearer [ 141.505117][ T8802] netlink: 'syz.3.794': attribute type 13 has an invalid length. [ 141.513159][ T8802] netlink: 'syz.3.794': attribute type 17 has an invalid length. [ 141.527687][ T8802] netlink: 'syz.3.794': attribute type 27 has an invalid length. [ 141.732754][ T8814] netlink: 'syz.3.797': attribute type 33 has an invalid length. [ 141.788246][ T8814] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 141.802911][ T8820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.820261][ T8814] bond4 (unregistering): Released all slaves [ 141.829894][ T8815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.026121][ T8832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.308618][ T8850] netlink: 56 bytes leftover after parsing attributes in process `syz.3.805'. [ 142.404282][ T8850] bond4 (unregistering): Released all slaves [ 142.653960][ T8872] netlink: 44 bytes leftover after parsing attributes in process `syz.4.810'. [ 143.515808][ T8917] sctp: [Deprecated]: syz.3.820 (pid 8917) Use of int in maxseg socket option. [ 143.515808][ T8917] Use struct sctp_assoc_value instead [ 143.693619][ T8928] x_tables: duplicate underflow at hook 2 [ 143.729018][ T8930] netlink: 'syz.4.821': attribute type 3 has an invalid length. [ 143.754126][ T8931] sctp: [Deprecated]: syz.0.823 (pid 8931) Use of struct sctp_assoc_value in delayed_ack socket option. [ 143.754126][ T8931] Use struct sctp_sack_info instead [ 143.761152][ T8930] netlink: 'syz.4.821': attribute type 1 has an invalid length. [ 143.779861][ T8930] netlink: 204 bytes leftover after parsing attributes in process `syz.4.821'. [ 143.842189][ T13] wlan1: Trigger new scan to find an IBSS to join [ 144.811521][ T8989] openvswitch: netlink: IP tunnel dst address not specified [ 144.874282][ T8993] vlan2: entered promiscuous mode [ 144.887613][ T8993] vlan2: entered allmulticast mode [ 144.892857][ T8993] hsr_slave_1: entered allmulticast mode [ 144.963717][ T8998] tipc: Enabled bearer , priority 0 [ 144.989285][ T8998] syzkaller0: entered promiscuous mode [ 145.000132][ T8998] syzkaller0: entered allmulticast mode [ 145.020841][ T9001] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 145.034935][ T8999] tipc: Resetting bearer [ 145.051252][ T8998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.832'. [ 145.083086][ T8995] tipc: Resetting bearer [ 145.103144][ T8995] tipc: Disabling bearer [ 145.146485][ T9008] netlink: 56 bytes leftover after parsing attributes in process `syz.4.837'. [ 145.269254][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.838'. [ 145.280118][ T9010] sctp: [Deprecated]: syz.0.838 (pid 9010) Use of int in max_burst socket option deprecated. [ 145.280118][ T9010] Use struct sctp_assoc_value instead [ 145.525308][ T9026] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 145.540111][ T9026] vet0_virt_wifi: renamed from dummy0 (while UP) [ 145.660919][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.844'. [ 146.019632][ T9050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.064691][ T9052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.852'. [ 146.088410][ T44] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.095842][ T9054] netlink: 'syz.3.853': attribute type 11 has an invalid length. [ 146.100181][ T9055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.852'. [ 146.116809][ T44] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.137689][ T44] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.145910][ T44] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.243489][ T9062] 8021q: VLANs not supported on ip6_vti0 [ 146.519900][ T9089] openvswitch: netlink: Missing key (keys=40, expected=80) [ 146.539557][ T9089] __nla_validate_parse: 1 callbacks suppressed [ 146.539574][ T9089] netlink: 48 bytes leftover after parsing attributes in process `syz.4.861'. [ 146.607137][ T9092] netlink: 32 bytes leftover after parsing attributes in process `syz.3.862'. [ 146.881798][ T2914] wlan1: Trigger new scan to find an IBSS to join [ 146.966086][ T9119] sctp: [Deprecated]: syz.3.871 (pid 9119) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.966086][ T9119] Use struct sctp_sack_info instead [ 147.071247][ T9124] Bluetooth: MGMT ver 1.23 [ 147.616243][ T9140] netlink: 'syz.4.877': attribute type 4 has an invalid length. [ 147.636274][ T9140] netlink: 'syz.4.877': attribute type 4 has an invalid length. [ 147.746816][ T9140] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.754577][ T9140] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.852855][ T9145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.878'. [ 147.886977][ T9140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.908085][ T9140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.067767][ T9140] vlan0: left allmulticast mode [ 148.081854][ T9140] veth0_vlan: left allmulticast mode [ 148.093256][ T9140] vlan0: left promiscuous mode [ 148.133869][ T9144] gtp0: entered promiscuous mode [ 148.139778][ T9144] gtp0: entered allmulticast mode [ 148.146508][ T6745] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.155847][ T6745] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.168309][ T6745] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.176687][ T6745] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.197809][ T6745] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.206223][ T6745] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.215212][ T6745] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.229345][ T6745] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.250875][ T9147] tipc: Enabled bearer , priority 0 [ 148.276232][ T9147] syzkaller0: entered promiscuous mode [ 148.287887][ T9147] syzkaller0: entered allmulticast mode [ 148.327211][ T9147] tipc: Resetting bearer [ 148.333742][ T9150] tipc: Enabled bearer , priority 0 [ 148.345656][ T9152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.881'. [ 148.361528][ T9147] bond4: Removing last arp target with arp_interval on [ 148.369607][ T9150] syzkaller0: entered promiscuous mode [ 148.375112][ T9150] syzkaller0: entered allmulticast mode [ 148.404515][ T9150] tipc: Resetting bearer [ 148.474358][ T9158] netlink: 'syz.3.879': attribute type 10 has an invalid length. [ 148.502958][ T9158] syz_tun: entered promiscuous mode [ 148.540841][ T9158] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 148.582884][ T9149] tipc: Resetting bearer [ 148.609606][ T9149] tipc: Disabling bearer [ 148.640900][ T9146] tipc: Resetting bearer [ 148.661539][ T9146] tipc: Disabling bearer [ 148.766367][ T9174] xt_TCPMSS: Only works on TCP SYN packets [ 149.117469][ T5830] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 149.122755][ T5824] Bluetooth: hci2: command 0x0401 tx timeout [ 149.220192][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.230433][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.239896][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.249154][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.258882][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 149.277787][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 149.557185][ T9187] chnl_net:caif_netlink_parms(): no params data found [ 149.591752][ T9205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.892'. [ 149.662350][ T9205] netlink: 'syz.0.892': attribute type 21 has an invalid length. [ 149.671259][ T9205] netlink: 152 bytes leftover after parsing attributes in process `syz.0.892'. [ 149.742513][ T9205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.892'. [ 149.773138][ T9187] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.784056][ T9187] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.799717][ T9187] bridge_slave_0: entered allmulticast mode [ 149.808862][ T9187] bridge_slave_0: entered promiscuous mode [ 149.828397][ T9187] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.835563][ T9187] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.839511][ T13] wlan1: Trigger new scan to find an IBSS to join [ 149.850216][ T9187] bridge_slave_1: entered allmulticast mode [ 149.858375][ T9187] bridge_slave_1: entered promiscuous mode [ 149.931331][ T9187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.945128][ T9187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.974203][ T9226] xt_hashlimit: size too large, truncated to 1048576 [ 150.012388][ T9187] team0: Port device team_slave_0 added [ 150.046059][ T9187] team0: Port device team_slave_1 added [ 150.097194][ T9187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.104567][ T9187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.142397][ T9187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.157724][ T9187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.164819][ T9187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.191587][ T9187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.279452][ T9187] hsr_slave_0: entered promiscuous mode [ 150.286393][ T9187] hsr_slave_1: entered promiscuous mode [ 150.295053][ T9187] debugfs: 'hsr0' already exists in 'hsr' [ 150.301935][ T9187] Cannot create hsr debugfs directory [ 150.415431][ T9237] netlink: 20 bytes leftover after parsing attributes in process `syz.0.900'. [ 150.735847][ T9247] netlink: 76 bytes leftover after parsing attributes in process `syz.3.904'. [ 150.739764][ T9241] bridge_slave_0: left allmulticast mode [ 150.750586][ T9241] bridge_slave_0: left promiscuous mode [ 150.756385][ T9241] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.766472][ T9241] bridge_slave_1: left allmulticast mode [ 150.772400][ T9241] bridge_slave_1: left promiscuous mode [ 150.778265][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.786452][ T9241] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.794466][ T9243] netlink: 48 bytes leftover after parsing attributes in process `syz.4.902'. [ 150.807919][ T9241] bond0: (slave bond_slave_0): Releasing backup interface [ 150.818638][ T9241] bond0: (slave bond_slave_1): Releasing backup interface [ 150.829147][ T9241] team0: Port device team_slave_0 removed [ 150.837110][ T9241] team0: Port device team_slave_1 removed [ 150.844229][ T9241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.853420][ T9241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.862468][ T9241] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 150.907621][ T9187] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 150.982249][ T9187] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 151.011891][ T9187] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 151.030587][ T9187] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 151.269874][ T9187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.278093][ T5830] Bluetooth: hci5: command tx timeout [ 151.322535][ T9187] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.339537][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.346748][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.399378][ T6745] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.406564][ T6745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.779584][ T9293] __nla_validate_parse: 1 callbacks suppressed [ 151.779601][ T9293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.914'. [ 151.955505][ T9187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.306118][ T9325] netlink: 16 bytes leftover after parsing attributes in process `syz.3.923'. [ 152.492864][ T6745] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.503624][ T6745] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.533429][ T6745] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.565533][ T6745] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.872104][ T5824] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.881424][ T5824] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.892045][ T5824] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.900612][ T5824] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.920677][ T5824] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 152.997032][ T9187] veth0_vlan: entered promiscuous mode [ 153.053987][ T9361] netlink: 'syz.3.933': attribute type 7 has an invalid length. [ 153.060316][ T9359] netlink: 'syz.0.932': attribute type 11 has an invalid length. [ 153.064951][ T9361] netlink: 'syz.3.933': attribute type 8 has an invalid length. [ 153.075699][ T9187] veth1_vlan: entered promiscuous mode [ 153.121236][ T9359] netlink: 'syz.0.932': attribute type 11 has an invalid length. [ 153.141601][ T9359] netlink: 224 bytes leftover after parsing attributes in process `syz.0.932'. [ 153.208386][ T9359] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.219678][ T9359] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 153.235810][ T9366] syzkaller0: entered promiscuous mode [ 153.241997][ T9366] syzkaller0: entered allmulticast mode [ 153.278531][ T9366] netlink: 20 bytes leftover after parsing attributes in process `syz.4.934'. [ 153.301894][ T9359] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.312708][ T9359] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 153.359328][ T5824] Bluetooth: hci5: command tx timeout [ 153.426475][ T9372] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 153.443788][ T9187] veth0_macvtap: entered promiscuous mode [ 153.472785][ T9359] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.483502][ T9359] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 153.612033][ T9187] veth1_macvtap: entered promiscuous mode [ 153.651734][ T9359] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.664002][ T9359] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 153.704298][ T9374] netlink: 20 bytes leftover after parsing attributes in process `syz.3.935'. [ 153.745939][ T9187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.786519][ T9347] chnl_net:caif_netlink_parms(): no params data found [ 153.826871][ T9187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.861525][ T6745] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.968835][ T6745] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.978163][ T6745] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.026308][ T6745] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.035483][ T6745] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.044525][ T6745] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 154.104905][ T6745] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.119577][ T6745] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 154.252902][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.263157][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 154.314077][ T9347] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.339988][ T9347] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.361024][ T9347] bridge_slave_0: entered allmulticast mode [ 154.378709][ T9347] bridge_slave_0: entered promiscuous mode [ 154.391976][ T6745] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.404599][ T6745] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 154.432923][ T9347] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.451608][ T9347] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.461215][ T9347] bridge_slave_1: entered allmulticast mode [ 154.471060][ T9347] bridge_slave_1: entered promiscuous mode [ 154.544017][ T9412] tipc: Enabled bearer , priority 0 [ 154.569295][ T9412] tipc: Enabling of bearer rejected, already enabled [ 154.582244][ T9416] syzkaller0: entered promiscuous mode [ 154.586456][ T9419] netlink: 'syz.0.947': attribute type 6 has an invalid length. [ 154.588373][ T9416] syzkaller0: entered allmulticast mode [ 154.614082][ T9347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.631695][ T9347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.641525][ T9419] netlink: 'syz.0.947': attribute type 6 has an invalid length. [ 154.686988][ T9421] netlink: 'syz.0.947': attribute type 6 has an invalid length. [ 154.694817][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.704790][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.745379][ T9411] tipc: Resetting bearer [ 154.760261][ T9411] tipc: Disabling bearer [ 154.789966][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'. [ 154.791817][ T9347] team0: Port device team_slave_0 added [ 154.807706][ T9424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.948'. [ 154.829088][ T9347] team0: Port device team_slave_1 added [ 154.870686][ T2914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.889919][ T2914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.898288][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'. [ 154.907161][ T9424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.948'. [ 154.942023][ T9347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.955821][ T9347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.984406][ T5824] Bluetooth: hci6: command tx timeout [ 155.016040][ T9347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.028931][ T9347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.035910][ T9347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.062758][ T9347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.138877][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'. [ 155.184577][ T9347] hsr_slave_0: entered promiscuous mode [ 155.193457][ T9347] hsr_slave_1: entered promiscuous mode [ 155.201152][ T9347] debugfs: 'hsr0' already exists in 'hsr' [ 155.212677][ T9347] Cannot create hsr debugfs directory [ 155.284658][ T9447] netlink: 'syz.5.888': attribute type 1 has an invalid length. [ 155.438092][ T5824] Bluetooth: hci5: command tx timeout [ 155.562434][ T9347] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 155.595272][ T9347] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 155.624310][ T9347] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 155.642402][ T9347] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 155.830463][ T9347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.886353][ T9347] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.915193][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.922512][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.981328][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.988540][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.333839][ T9492] tipc: Enabled bearer , priority 0 [ 156.350047][ T9492] syzkaller0: entered promiscuous mode [ 156.358225][ T9492] syzkaller0: entered allmulticast mode [ 156.508443][ T9492] tipc: Resetting bearer [ 156.546359][ T9489] tipc: Resetting bearer [ 156.581869][ T9489] tipc: Disabling bearer [ 156.611340][ T9347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.794195][ T9521] __nla_validate_parse: 4 callbacks suppressed [ 156.794212][ T9521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.969'. [ 156.957637][ T9529] netlink: 'syz.3.971': attribute type 4 has an invalid length. [ 157.038942][ T5824] Bluetooth: hci6: command tx timeout [ 157.136889][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.973'. [ 157.155109][ T9539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.973'. [ 157.174758][ T9347] veth0_vlan: entered promiscuous mode [ 157.183784][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.973'. [ 157.200293][ T9347] veth1_vlan: entered promiscuous mode [ 157.208724][ T9539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.973'. [ 157.246019][ T9347] veth0_macvtap: entered promiscuous mode [ 157.259746][ T9347] veth1_macvtap: entered promiscuous mode [ 157.302632][ T9542] netlink: 300 bytes leftover after parsing attributes in process `syz.3.975'. [ 157.314610][ T9347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.372766][ T9347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.410679][ T6745] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.452481][ T6745] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.474322][ T9551] netlink: 'syz.5.977': attribute type 25 has an invalid length. [ 157.499544][ T9551] netlink: 'syz.5.977': attribute type 25 has an invalid length. [ 157.511955][ T6745] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.522384][ T5824] Bluetooth: hci5: command tx timeout [ 157.530422][ T6745] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.549113][ T9551] netlink: 'syz.5.977': attribute type 25 has an invalid length. [ 157.630528][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.645643][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.690668][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.700521][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.059314][ T9567] netlink: 36 bytes leftover after parsing attributes in process `syz.4.982'. [ 158.187215][ T9573] validate_nla: 62 callbacks suppressed [ 158.187231][ T9573] netlink: 'syz.3.983': attribute type 21 has an invalid length. [ 158.207635][ T9573] netlink: 128 bytes leftover after parsing attributes in process `syz.3.983'. [ 158.216721][ T9573] netlink: 'syz.3.983': attribute type 5 has an invalid length. [ 158.226588][ T9573] netlink: 3 bytes leftover after parsing attributes in process `syz.3.983'. [ 158.467650][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.988'. [ 158.494999][ T9586] netlink: 'syz.0.987': attribute type 4 has an invalid length. [ 158.648177][ T9595] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 158.710268][ T9599] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 158.724308][ T9598] sctp: [Deprecated]: syz.4.993 (pid 9598) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.724308][ T9598] Use struct sctp_sack_info instead [ 158.983283][ T9612] tipc: Enabled bearer , priority 0 [ 159.087892][ T9612] syzkaller0: entered promiscuous mode [ 159.093407][ T9612] syzkaller0: entered allmulticast mode [ 159.118501][ T5824] Bluetooth: hci6: command tx timeout [ 159.176724][ T9632] veth7: entered promiscuous mode [ 159.183389][ T9632] veth7: entered allmulticast mode [ 159.230047][ T9625] tipc: Resetting bearer [ 159.283655][ T9611] tipc: Resetting bearer [ 159.340736][ T9643] netlink: 'syz.0.1007': attribute type 10 has an invalid length. [ 159.355642][ T9611] tipc: Disabling bearer [ 159.363434][ T9646] sctp: [Deprecated]: syz.5.1008 (pid 9646) Use of int in max_burst socket option. [ 159.363434][ T9646] Use struct sctp_assoc_value instead [ 159.389071][ T9643] bridge0: port 3(team0) entered blocking state [ 159.395854][ T9643] bridge0: port 3(team0) entered disabled state [ 159.427730][ T9643] team0: entered allmulticast mode [ 159.432890][ T9643] team_slave_0: entered allmulticast mode [ 159.460589][ T9643] team_slave_1: entered allmulticast mode [ 159.482801][ T9643] team0: entered promiscuous mode [ 159.500062][ T9643] team_slave_0: entered promiscuous mode [ 159.509389][ T9643] team_slave_1: entered promiscuous mode [ 159.726833][ T9654] bond3: left allmulticast mode [ 159.734032][ T9654] vlan2: left allmulticast mode [ 159.739291][ T9654] hsr_slave_1: left allmulticast mode [ 159.829448][ T9662] netlink: 'syz.4.1010': attribute type 23 has an invalid length. [ 159.936890][ T9664] netlink: 'syz.0.1012': attribute type 13 has an invalid length. [ 159.947663][ T9664] netlink: 'syz.0.1012': attribute type 27 has an invalid length. [ 160.213939][ T9686] tipc: Failed to obtain node identity [ 160.228666][ T9686] tipc: Enabling of bearer rejected, failed to enable media [ 160.382119][ T9693] veth1_to_bond: entered allmulticast mode [ 160.498920][ T9698] veth1_to_bond: left allmulticast mode [ 160.726628][ T9714] xt_TCPMSS: Only works on TCP SYN packets [ 160.995411][ T9731] xt_hashlimit: size too large, truncated to 1048576 [ 161.010669][ T9734] xt_HMARK: proto mask must be zero with L3 mode [ 161.047865][ T9738] netlink: 'syz.0.1039': attribute type 10 has an invalid length. [ 161.126761][ T9744] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 161.170347][ T9739] netlink: 'syz.3.1038': attribute type 21 has an invalid length. [ 161.186874][ T9739] netlink: 'syz.3.1038': attribute type 64 has an invalid length. [ 161.203536][ T5824] Bluetooth: hci6: command tx timeout [ 161.858223][ T9786] xt_hashlimit: size too large, truncated to 1048576 [ 161.899025][ T9792] __nla_validate_parse: 18 callbacks suppressed [ 161.899042][ T9792] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1056'. [ 161.923947][ T9795] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1054'. [ 162.185239][ T9815] raw_sendmsg: syz.5.1062 forgot to set AF_INET. Fix it! [ 162.251689][ T9816] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1062'. [ 162.307975][ T9816] nbd: couldn't find a device at index 0 [ 162.809153][ T9846] syzkaller1: entered promiscuous mode [ 162.825421][ T9846] syzkaller1: entered allmulticast mode [ 163.014151][ T9867] IPv6: NLM_F_CREATE should be specified when creating new route [ 163.027850][ T9867] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.035110][ T9867] IPv6: NLM_F_CREATE should be set when creating new route [ 163.040373][ T9869] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1080'. [ 163.042421][ T9867] IPv6: NLM_F_CREATE should be set when creating new route [ 163.058584][ T9867] IPv6: NLM_F_CREATE should be set when creating new route [ 163.194457][ T9874] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1082'. [ 163.387097][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1085'. [ 163.436540][ T9889] lo: entered promiscuous mode [ 163.449607][ T9889] validate_nla: 1 callbacks suppressed [ 163.449622][ T9889] netlink: 'syz.5.1086': attribute type 2 has an invalid length. [ 163.464606][ T9889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.487735][ T9887] netlink: 'syz.5.1086': attribute type 1 has an invalid length. [ 163.563326][ T9895] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1089'. [ 163.607624][ T9897] x_tables: duplicate entry at hook 1 [ 163.768163][ T9904] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1093'. [ 163.783923][ T9904] tc_dump_action: action bad kind [ 163.936141][ T9909] syzkaller0: entered promiscuous mode [ 163.943983][ T9909] syzkaller0: entered allmulticast mode [ 164.062107][ T9909] tipc: Enabled bearer , priority 0 [ 164.121841][ T9908] tipc: Resetting bearer [ 164.178963][ T9908] tipc: Disabling bearer [ 164.364613][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1101'. [ 164.431740][ T9932] syzkaller0: entered promiscuous mode [ 164.447381][ T9932] syzkaller0: entered allmulticast mode [ 164.511381][ T9938] bond5: option mode: invalid value (133) [ 164.522421][ T9938] bond5 (unregistering): Released all slaves [ 164.555670][ T9943] netlink: 'syz.0.1106': attribute type 83 has an invalid length. [ 164.868850][ T9962] tipc: Enabled bearer , priority 0 [ 164.945501][ T9962] syzkaller0: entered promiscuous mode [ 164.998676][ T9962] syzkaller0: entered allmulticast mode [ 165.004993][ T9962] tipc: Resetting bearer [ 165.019308][ T9973] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 165.052756][ T9961] tipc: Resetting bearer [ 165.071013][ T9977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1114'. [ 166.208916][ T9961] tipc: Disabling bearer [ 166.341160][ T5936] tipc: Node number set to 3211316526 [ 166.440816][ T9998] team0: Device vti0 is of different type [ 166.700104][T10014] sock: sock_timestamping_bind_phc: sock not bind to device [ 166.761033][T10017] IPVS: dh: FWM 3 0x00000003 - no destination available [ 166.773887][ T5879] IPVS: starting estimator thread 0... [ 166.788542][ C1] IPVS: dh: FWM 3 0x00000003 - no destination available [ 166.806052][T10017] IPVS: dh: FWM 3 0x00000003 - no destination available [ 166.838417][ C1] IPVS: dh: FWM 3 0x00000003 - no destination available [ 166.848554][T10017] netlink: 'syz.3.1126': attribute type 11 has an invalid length. [ 166.867418][T10018] IPVS: using max 33 ests per chain, 79200 per kthread [ 166.885081][T10027] netlink: 'syz.4.1124': attribute type 64 has an invalid length. [ 166.927474][T10027] __nla_validate_parse: 4 callbacks suppressed [ 166.927489][T10027] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1124'. [ 167.002461][T10027] netlink: 'syz.4.1124': attribute type 64 has an invalid length. [ 167.024907][T10027] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1124'. [ 167.124249][T10037] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 167.136784][T10037] bond5 (unregistering): Released all slaves [ 167.566377][T10045] netlink: 'syz.6.1130': attribute type 1 has an invalid length. [ 167.575188][T10049] netlink: 'syz.6.1130': attribute type 1 has an invalid length. [ 167.643809][T10053] bridge1: entered promiscuous mode [ 167.650938][T10053] bridge1: entered allmulticast mode [ 167.668166][T10053] team0: Port device bridge1 added [ 167.673980][T10054] bridge0: port 3(team0) entered blocking state [ 167.681346][T10054] bridge0: port 3(team0) entered disabled state [ 167.685850][T10061] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 167.691315][T10054] team0: entered allmulticast mode [ 167.695395][T10061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.701628][T10054] team_slave_0: entered allmulticast mode [ 167.723697][T10054] team_slave_1: entered allmulticast mode [ 167.732469][T10054] team0: entered promiscuous mode [ 167.737941][T10054] team_slave_0: entered promiscuous mode [ 167.743909][T10054] team_slave_1: entered promiscuous mode [ 167.752415][T10054] bridge0: port 3(team0) entered blocking state [ 167.759031][T10054] bridge0: port 3(team0) entered forwarding state [ 167.974583][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1136'. [ 167.999640][T10070] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1136'. [ 168.112131][ T7252] IPVS: starting estimator thread 0... [ 168.179222][T10083] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1141'. [ 168.226630][T10083] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1141'. [ 168.238393][T10081] IPVS: using max 35 ests per chain, 84000 per kthread [ 168.371736][T10097] syz.0.1145: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 168.387700][T10097] CPU: 1 UID: 0 PID: 10097 Comm: syz.0.1145 Not tainted syzkaller #0 PREEMPT(full) [ 168.387725][T10097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.387737][T10097] Call Trace: [ 168.387744][T10097] [ 168.387752][T10097] dump_stack_lvl+0x189/0x250 [ 168.387785][T10097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.387808][T10097] ? __pfx__printk+0x10/0x10 [ 168.387828][T10097] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 168.387851][T10097] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 168.387875][T10097] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 168.387901][T10097] warn_alloc+0x214/0x310 [ 168.387925][T10097] ? stack_depot_save_flags+0x40/0x860 [ 168.387955][T10097] ? __pfx_warn_alloc+0x10/0x10 [ 168.387981][T10097] ? kasan_save_track+0x3e/0x80 [ 168.388002][T10097] ? __kasan_kmalloc+0x93/0xb0 [ 168.388027][T10097] ? xsk_setsockopt+0x4dc/0x8d0 [ 168.388045][T10097] ? do_sock_setsockopt+0x17c/0x1b0 [ 168.388058][T10097] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 168.388073][T10097] ? do_syscall_64+0xfa/0xfa0 [ 168.388096][T10097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.388119][T10097] __vmalloc_node_range_noprof+0x125/0x12d0 [ 168.388169][T10097] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 168.388197][T10097] ? __kasan_kmalloc+0x93/0xb0 [ 168.388227][T10097] vmalloc_user_noprof+0xad/0xf0 [ 168.388250][T10097] ? xskq_create+0xbf/0x170 [ 168.388273][T10097] xskq_create+0xbf/0x170 [ 168.388295][T10097] xsk_init_queue+0xb0/0x110 [ 168.388319][T10097] xsk_setsockopt+0x4dc/0x8d0 [ 168.388343][T10097] ? __pfx_xsk_setsockopt+0x10/0x10 [ 168.388368][T10097] ? __pfx_aa_sk_perm+0x10/0x10 [ 168.388393][T10097] ? aa_sock_opt_perm+0xff/0x1b0 [ 168.388428][T10097] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 168.388446][T10097] ? __pfx_xsk_setsockopt+0x10/0x10 [ 168.388468][T10097] do_sock_setsockopt+0x17c/0x1b0 [ 168.388491][T10097] __x64_sys_setsockopt+0x13f/0x1b0 [ 168.388513][T10097] do_syscall_64+0xfa/0xfa0 [ 168.388535][T10097] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.388558][T10097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.388576][T10097] ? clear_bhb_loop+0x60/0xb0 [ 168.388596][T10097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.388613][T10097] RIP: 0033:0x7fe56818f6c9 [ 168.388630][T10097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.388644][T10097] RSP: 002b:00007fe568f68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 168.388668][T10097] RAX: ffffffffffffffda RBX: 00007fe5683e5fa0 RCX: 00007fe56818f6c9 [ 168.388680][T10097] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 168.388690][T10097] RBP: 00007fe568211f91 R08: 0000000000000004 R09: 0000000000000000 [ 168.388701][T10097] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.388712][T10097] R13: 00007fe5683e6038 R14: 00007fe5683e5fa0 R15: 00007ffcbcdef258 [ 168.388743][T10097] [ 168.388751][T10097] Mem-Info: [ 168.476133][T10095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1144'. [ 168.487173][T10097] active_anon:7349 inactive_anon:0 isolated_anon:0 [ 168.487173][T10097] active_file:2825 inactive_file:39912 isolated_file:0 [ 168.487173][T10097] unevictable:768 dirty:69 writeback:0 [ 168.487173][T10097] slab_reclaimable:11255 slab_unreclaimable:105044 [ 168.487173][T10097] mapped:39540 shmem:1356 pagetables:1353 [ 168.487173][T10097] sec_pagetables:0 bounce:0 [ 168.487173][T10097] kernel_misc_reclaimable:0 [ 168.487173][T10097] free:1291281 free_pcp:17245 free_cma:0 [ 168.746421][T10097] Node 0 active_anon:29496kB inactive_anon:0kB active_file:11300kB inactive_file:159448kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158260kB dirty:276kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14840kB pagetables:5368kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 168.779941][T10097] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 168.822908][T10097] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 168.867537][T10097] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 168.873349][T10097] Node 0 DMA32 free:1253404kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29476kB inactive_anon:0kB active_file:11300kB inactive_file:159456kB unevictable:1536kB writepending:292kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:51440kB local_pcp:23232kB free_cma:0kB [ 168.930970][T10097] lowmem_reserve[]: 0 0 0 0 0 [ 168.935908][T10097] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 169.012859][T10097] lowmem_reserve[]: 0 0 0 0 0 [ 169.047403][T10097] Node 1 Normal free:3896216kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17696kB local_pcp:6496kB free_cma:0kB [ 169.117477][T10097] lowmem_reserve[]: 0 0 0 0 0 [ 169.146961][T10097] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 169.197514][T10097] Node 0 DMA32: 1017*4kB (UM) 474*8kB (UME) 264*16kB (UM) 281*32kB (UME) 72*64kB (UME) 35*128kB (UM) 13*256kB (UME) 13*512kB (UME) 14*1024kB (UM) 13*2048kB (UME) 288*4096kB (UM) = 1260756kB [ 169.257611][T10097] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 169.338544][T10097] Node 1 Normal: 186*4kB (UME) 52*8kB (UME) 41*16kB (UME) 60*32kB (UME) 20*64kB (UME) 10*128kB (UME) 3*256kB (ME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3896216kB [ 169.373463][T10129] syzkaller1: entered promiscuous mode [ 169.380415][T10129] syzkaller1: entered allmulticast mode [ 169.407188][T10097] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 169.417943][T10097] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 169.447472][T10097] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 169.495283][T10097] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 169.515648][T10097] 44103 total pagecache pages [ 169.552349][T10142] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1156'. [ 169.556749][T10097] 0 pages in swap cache [ 169.581652][T10097] Free swap = 124996kB [ 169.585847][T10097] Total swap = 124996kB [ 169.616130][T10097] 2097051 pages RAM [ 169.626804][T10097] 0 pages HighMem/MovableOnly [ 169.632039][T10097] 424119 pages reserved [ 169.675330][T10097] 0 pages cma reserved [ 169.897113][T10160] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1161'. [ 169.930703][T10160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.963967][T10162] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.971785][T10162] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.037515][T10164] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1163'. [ 170.095198][T10172] xt_TPROXY: Can be used only with -p tcp or -p udp [ 170.261476][T10181] openvswitch: netlink: Flow actions attr not present in new flow. [ 170.382044][T10186] netlink: 'syz.4.1170': attribute type 16 has an invalid length. [ 170.417887][T10186] netlink: 'syz.4.1170': attribute type 3 has an invalid length. [ 170.442602][T10191] netlink: 'syz.5.1171': attribute type 10 has an invalid length. [ 170.482178][T10191] team0: Port device dummy0 added [ 170.508142][T10191] netlink: 'syz.5.1171': attribute type 10 has an invalid length. [ 170.530838][T10191] netlink: 'syz.5.1171': attribute type 10 has an invalid length. [ 170.563922][T10191] netlink: 'syz.5.1171': attribute type 10 has an invalid length. [ 170.582475][T10191] netlink: 'syz.5.1171': attribute type 10 has an invalid length. [ 170.612124][T10191] netlink: 'syz.5.1171': attribute type 10 has an invalid length. [ 170.630872][T10191] netlink: 'syz.5.1171': attribute type 10 has an invalid length. [ 170.660597][T10191] netlink: 'syz.5.1171': attribute type 10 has an invalid length. [ 170.710405][T10196] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 171.844192][T10268] syzkaller0: entered promiscuous mode [ 171.852863][T10268] syzkaller0: entered allmulticast mode [ 171.911495][T10271] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.956632][T10274] No such timeout policy "syz0" [ 172.412485][T10300] bond1: option min_links: invalid value (18446744073709551614) [ 172.421068][T10300] bond1: option min_links: allowed values 0 - 2147483647 [ 172.435627][T10300] bond1 (unregistering): Released all slaves [ 172.473574][T10308] __nla_validate_parse: 71 callbacks suppressed [ 172.473591][T10308] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1209'. [ 172.477119][T10301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1206'. [ 172.528393][T10311] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 172.619615][T10316] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1211'. [ 172.672272][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1211'. [ 172.919049][T10336] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1215'. [ 172.991355][T10344] erspan0: entered promiscuous mode [ 173.007396][T10344] erspan0: entered allmulticast mode [ 173.030579][T10344] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1217'. [ 173.222871][T10354] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1220'. [ 173.243492][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'. [ 173.257998][T10356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1221'. [ 173.271110][T10354] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1220'. [ 173.525913][T10378] Cannot find del_set index 0 as target [ 173.592638][T10374] veth3: entered allmulticast mode [ 173.787785][T10371] bond1: option coupled_control: invalid value (254) [ 173.819728][T10371] bond1 (unregistering): Released all slaves [ 173.921190][ T5830] Bluetooth: hci6: command 0x0405 tx timeout [ 173.983608][T10410] C: renamed from team_slave_0 (while UP) [ 173.995092][T10410] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 174.280553][T10370] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 174.286772][T10370] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 174.509836][T10370] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 174.531857][T10370] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 174.601132][T10370] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 174.621462][T10370] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 174.711368][T10370] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 174.741308][T10450] 0: reclassify loop, rule prio 0, protocol 800 [ 174.753898][T10370] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 174.916732][T10472] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 175.786363][T10370] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 175.847429][T10370] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 175.914593][T10507] xt_CT: No such helper "pptp" [ 175.926700][T10370] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 175.951814][T10370] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 176.318057][T10541] validate_nla: 262 callbacks suppressed [ 176.318075][T10541] netlink: 'syz.6.1262': attribute type 2 has an invalid length. [ 176.914428][T10577] netlink: 'syz.0.1271': attribute type 1 has an invalid length. [ 176.999350][T10577] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.012529][T10581] bond4: entered promiscuous mode [ 177.126403][T10577] bond4: (slave ip6gretap1): making interface the new active one [ 177.176439][T10577] ip6gretap1: entered promiscuous mode [ 177.189536][T10593] netlink: 'syz.6.1275': attribute type 29 has an invalid length. [ 177.201422][T10577] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 177.819342][T10627] tipc: Started in network mode [ 177.837665][T10627] tipc: Node identity be1660e7d85a, cluster identity 4711 [ 177.845164][T10627] tipc: Enabled bearer , priority 0 [ 177.863308][T10627] syzkaller0: entered promiscuous mode [ 177.877479][T10627] syzkaller0: entered allmulticast mode [ 177.889851][T10627] tipc: Resetting bearer [ 178.613498][T10625] tipc: Resetting bearer [ 178.876312][T10625] tipc: Disabling bearer [ 179.437513][T10683] netlink: 'syz.5.1292': attribute type 1 has an invalid length. [ 179.476943][T10683] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 179.685576][T10702] xt_hashlimit: size too large, truncated to 1048576 [ 180.049429][T10732] __nla_validate_parse: 73 callbacks suppressed [ 180.049448][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1302'. [ 180.436381][T10754] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1306'. [ 180.624924][T10761] netlink: 'syz.6.1309': attribute type 1 has an invalid length. [ 180.671051][T10763] tipc: Started in network mode [ 180.677080][T10763] tipc: Node identity 4, cluster identity 4711 [ 180.683522][T10763] tipc: Node number set to 4 [ 180.757915][T10763] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 180.766695][T10763] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 181.079549][T10782] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 181.107736][T10782] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 181.416978][T10799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1316'. [ 181.512191][T10799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.545099][T10803] lo: Caught tx_queue_len zero misconfig [ 181.552789][T10803] netlink: 'syz.0.1319': attribute type 14 has an invalid length. [ 181.742306][T10812] netlink: 'syz.0.1321': attribute type 6 has an invalid length. [ 181.890182][T10810] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1320'. [ 182.379680][T10841] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1332'. [ 182.733467][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1336'. [ 183.054377][T10889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1343'. [ 183.350221][T10906] tipc: Enabled bearer , priority 0 [ 183.384344][T10908] netlink: 'syz.6.1350': attribute type 32 has an invalid length. [ 183.412650][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1350'. [ 183.458153][T10908] bond1: Setting coupled_control to off (0) [ 183.478053][T10904] tipc: Disabling bearer [ 183.516657][T10919] netlink: 'syz.0.1353': attribute type 4 has an invalid length. [ 183.539093][T10919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1353'. [ 183.631807][T10922] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1355'. [ 183.990148][T10945] vlan4: entered promiscuous mode [ 183.995505][T10945] geneve1: entered promiscuous mode [ 184.020185][T10945] vlan4: entered allmulticast mode [ 184.025340][T10945] geneve1: entered allmulticast mode [ 184.142266][T10962] netlink: 'syz.5.1367': attribute type 11 has an invalid length. [ 184.302556][T10968] veth1_macvtap: left promiscuous mode [ 184.308395][T10968] macsec0: entered promiscuous mode [ 184.313807][T10968] macsec0: entered allmulticast mode [ 184.336591][T10968] veth1_macvtap: entered promiscuous mode [ 184.346005][T10968] veth1_macvtap: entered allmulticast mode [ 184.352735][T10968] macsec0: left promiscuous mode [ 184.357956][T10968] macsec0: left allmulticast mode [ 184.363247][T10968] veth1_macvtap: left allmulticast mode [ 184.451268][T10972] syzkaller0: entered promiscuous mode [ 184.456769][T10972] syzkaller0: entered allmulticast mode [ 184.683921][T10978] bridge6: port 1(veth5) entered blocking state [ 184.690563][T10978] bridge6: port 1(veth5) entered disabled state [ 184.697011][T10978] veth5: entered allmulticast mode [ 184.704121][T10978] veth5: entered promiscuous mode [ 185.073120][T10997] netlink: 'syz.4.1380': attribute type 22 has an invalid length. [ 185.082581][T10997] __nla_validate_parse: 3 callbacks suppressed [ 185.082595][T10997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1380'. [ 185.083002][T10989] bond5: entered promiscuous mode [ 185.103658][T10989] bond5: entered allmulticast mode [ 185.109239][T10989] 8021q: adding VLAN 0 to HW filter on device bond5 [ 185.129957][T10997] netlink: 'syz.4.1380': attribute type 22 has an invalid length. [ 185.140998][T10997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1380'. [ 185.174240][T10996] ip6tnl2: entered promiscuous mode [ 185.180059][T10996] ip6tnl2: entered allmulticast mode [ 185.199835][T10992] v: renamed from vlan0 (while UP) [ 185.250880][T10992] tipc: Enabled bearer , priority 0 [ 185.254521][T11003] xt_cgroup: invalid path, errno=-2 [ 185.357450][T10990] tipc: Resetting bearer [ 185.368535][T11009] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1384'. [ 185.743519][T11028] netlink: 'syz.0.1386': attribute type 4 has an invalid length. [ 185.801770][T11031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1387'. [ 185.818618][T11032] netlink: 'syz.0.1386': attribute type 4 has an invalid length. [ 186.970627][T10990] tipc: Disabling bearer [ 186.995203][ T5879] tipc: Node number set to 1716281575 [ 187.123256][T11041] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1390'. [ 187.159233][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1390'. [ 187.187541][T11041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1390'. [ 187.217840][T11045] netlink: 'syz.6.1392': attribute type 1 has an invalid length. [ 187.237864][T11049] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1393'. [ 187.257608][T11048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1390'. [ 187.281162][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1390'. [ 187.308463][T11045] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 187.327932][T11049] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.335645][T11049] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.438070][T11045] veth5: entered promiscuous mode [ 187.447204][T11045] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 187.469453][T11057] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.477541][ T6746] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 187.610042][ T44] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 187.702472][T11071] netlink: 'syz.0.1398': attribute type 27 has an invalid length. [ 188.099566][T11102] netlink: 'syz.6.1408': attribute type 21 has an invalid length. [ 188.112358][T11107] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 188.121625][T11098] Cannot find add_set index 0 as target [ 188.147534][T11111] netlink: 'syz.6.1408': attribute type 21 has an invalid length. [ 188.382352][T11126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.508902][T11130] bridge_slave_0: invalid flags given to default FDB implementation [ 188.577806][T11131] tipc: Enabled bearer , priority 0 [ 188.585644][T11131] syzkaller0: entered promiscuous mode [ 188.591227][T11131] syzkaller0: entered allmulticast mode [ 188.679452][T11131] tipc: Resetting bearer [ 188.730986][T11127] tipc: Resetting bearer [ 188.761704][T11127] tipc: Disabling bearer [ 189.083256][T11174] tipc: Enabled bearer , priority 0 [ 189.101336][T11178] IPVS: dh: FWM 3 0x00000003 - no destination available [ 189.116135][T11178] IPVS: dh: FWM 3 0x00000003 - no destination available [ 189.132295][T11176] syzkaller0: entered promiscuous mode [ 189.139754][T11176] syzkaller0: entered allmulticast mode [ 189.223648][T11188] can: request_module (can-proto-0) failed. [ 189.252914][T11176] tipc: Resetting bearer [ 189.330712][T11197] netlink: 'syz.5.1431': attribute type 58 has an invalid length. [ 189.342307][T11176] tipc: Disabling bearer [ 189.451866][T11200] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 189.645937][T11214] netlink: 'syz.4.1435': attribute type 1 has an invalid length. [ 189.656951][T11214] netlink: 'syz.4.1435': attribute type 2 has an invalid length. [ 190.190376][T11244] __nla_validate_parse: 14 callbacks suppressed [ 190.190393][T11244] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1443'. [ 190.229340][T11244] netlink: 21 bytes leftover after parsing attributes in process `syz.6.1443'. [ 190.242750][T11244] netlink: 21 bytes leftover after parsing attributes in process `syz.6.1443'. [ 190.476248][T11257] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1446'. [ 217.183544][T11262] ip6tnl0: Caught tx_queue_len zero misconfig [ 217.235325][T11269] bond6: option all_slaves_active: invalid value (222) [ 217.246958][T11269] bond6 (unregistering): Released all slaves [ 217.305429][T11282] tipc: Enabled bearer , priority 0 [ 217.373817][T11268] syzkaller0: entered promiscuous mode [ 217.401996][T11268] syzkaller0: entered allmulticast mode [ 217.559169][T11268] tipc: Resetting bearer [ 217.588774][T11267] tipc: Resetting bearer [ 217.625695][T11267] tipc: Disabling bearer [ 217.805137][T11322] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1460'. [ 217.914223][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1463'. [ 218.006208][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1466'. [ 218.216546][T11350] batadv_slave_1: entered promiscuous mode [ 218.232915][T11348] xt_TCPMSS: Only works on TCP SYN packets [ 218.246427][T11349] batadv_slave_1: left promiscuous mode [ 218.414090][T11363] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1472'. [ 218.466422][T11364] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1472'. [ 218.479578][T11359] bond5: entered allmulticast mode [ 218.484895][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1472'. [ 218.494846][T11359] 8021q: adding VLAN 0 to HW filter on device bond5 [ 218.502602][T11359] bridge0: port 4(bond5) entered blocking state [ 218.509513][T11359] bridge0: port 4(bond5) entered disabled state [ 218.518681][T11359] bond5: entered promiscuous mode [ 218.695302][T11378] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1478'. [ 218.734459][T11378] netlink: 'syz.5.1478': attribute type 7 has an invalid length. [ 218.744701][T11378] netlink: 'syz.5.1478': attribute type 8 has an invalid length. [ 218.768394][T11378] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1478'. [ 218.823398][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1481'. [ 218.981889][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1482'. [ 219.049640][T11395] bridge0: port 3(team0) entered disabled state [ 219.345647][T11408] x_tables: duplicate underflow at hook 3 [ 219.406558][T11395] team0 (unregistering): left allmulticast mode [ 219.419702][T11395] team_slave_0: left allmulticast mode [ 219.437421][T11395] team_slave_1: left allmulticast mode [ 219.443043][T11395] team0 (unregistering): left promiscuous mode [ 219.449410][T11395] team_slave_0: left promiscuous mode [ 219.455146][T11395] team_slave_1: left promiscuous mode [ 219.461863][T11395] bridge0: port 3(team0) entered disabled state [ 219.462282][T11413] netlink: 'syz.4.1490': attribute type 8 has an invalid length. [ 219.483297][T11395] team0 (unregistering): Port device team_slave_0 removed [ 219.498634][T11395] team0 (unregistering): Port device team_slave_1 removed [ 219.511268][T11395] team0 (unregistering): Port device bridge1 removed [ 219.772258][T11430] Cannot find set identified by id 4 to match [ 220.162171][T11451] vlan1: entered promiscuous mode [ 220.183816][T11447] syzkaller1: entered promiscuous mode [ 220.192007][T11447] syzkaller1: entered allmulticast mode [ 220.207405][T11447] wg2: entered promiscuous mode [ 220.229506][T11447] wg2: entered allmulticast mode [ 220.259355][T11458] tipc: Enabled bearer , priority 0 [ 220.300973][T11458] syzkaller0: entered promiscuous mode [ 220.306544][T11458] syzkaller0: entered allmulticast mode [ 220.328623][T11458] tipc: Resetting bearer [ 220.348633][T11457] tipc: Resetting bearer [ 220.398288][T11457] tipc: Disabling bearer [ 220.745581][T11483] netlink: 'syz.0.1513': attribute type 4 has an invalid length. [ 220.761741][T11483] netlink: 'syz.0.1513': attribute type 4 has an invalid length. [ 220.791969][T11483] netlink: 'syz.0.1513': attribute type 4 has an invalid length. [ 220.875419][T11483] netlink: 'syz.0.1513': attribute type 4 has an invalid length. [ 220.898957][T11483] netlink: 'syz.0.1513': attribute type 4 has an invalid length. [ 220.920340][T11483] netlink: 'syz.0.1513': attribute type 4 has an invalid length. [ 220.940552][T11483] netlink: 'syz.0.1513': attribute type 4 has an invalid length. [ 220.973246][T11491] xt_CT: No such helper "syz1" [ 221.088859][T11504] x_tables: duplicate underflow at hook 3 [ 221.293482][T11518] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 221.401591][T11522] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 221.412911][T11522] bond6 (unregistering): Released all slaves [ 221.438987][T11523] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 221.892294][T11550] xt_ipcomp: unknown flags 1D [ 221.927352][T11548] dvmrp6: entered allmulticast mode [ 222.028008][ T5824] block nbd1: Receive control failed (result -32) [ 222.310169][T11572] vlan3: entered allmulticast mode [ 223.049651][T11610] __nla_validate_parse: 13 callbacks suppressed [ 223.049669][T11610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1550'. [ 223.206849][T11610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1550'. [ 223.748764][T11630] vlan0: entered promiscuous mode [ 223.754010][T11630] vlan0: entered allmulticast mode [ 223.759866][T11630] hsr_slave_1: entered allmulticast mode [ 223.828233][T11632] syzkaller0: entered promiscuous mode [ 223.833833][T11632] syzkaller0: entered allmulticast mode [ 223.856768][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1560'. [ 223.956711][T11638] vlan2: entered allmulticast mode [ 223.983306][T11638] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 224.003403][T11641] validate_nla: 29 callbacks suppressed [ 224.003443][T11641] netlink: 'syz.0.1562': attribute type 10 has an invalid length. [ 224.018886][T11641] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1562'. [ 224.157061][T11646] tipc: Enabling of bearer rejected, media not registered [ 224.721272][T11676] bond6: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 224.776324][T11676] bond6 (unregistering): Released all slaves [ 225.056115][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1573'. [ 225.298339][T11715] netlink: 'syz.4.1579': attribute type 1 has an invalid length. [ 225.533415][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1585'. [ 225.575341][T11733] netlink: 'syz.6.1585': attribute type 1 has an invalid length. [ 225.625507][T11733] netlink: 'syz.6.1585': attribute type 2 has an invalid length. [ 225.687385][T11740] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1587'. [ 225.882965][T11747] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 225.899429][T11749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1591'. [ 226.201163][T11768] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1594'. [ 226.213173][T11768] netlink: 'syz.5.1594': attribute type 7 has an invalid length. [ 226.223903][T11768] netlink: 'syz.5.1594': attribute type 8 has an invalid length. [ 226.233769][T11768] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1594'. [ 226.288248][T11768] gretap0: entered promiscuous mode [ 226.298495][T11768] batadv_slave_1: entered promiscuous mode [ 226.318138][T11768] batadv_slave_1: left promiscuous mode [ 226.370933][T11768] gretap0: left promiscuous mode [ 226.474392][T11782] syz.0.1597: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 226.496209][T11782] CPU: 0 UID: 0 PID: 11782 Comm: syz.0.1597 Not tainted syzkaller #0 PREEMPT(full) [ 226.496232][T11782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 226.496243][T11782] Call Trace: [ 226.496250][T11782] [ 226.496257][T11782] dump_stack_lvl+0x189/0x250 [ 226.496299][T11782] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.496321][T11782] ? __pfx__printk+0x10/0x10 [ 226.496340][T11782] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 226.496363][T11782] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 226.496388][T11782] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 226.496411][T11782] warn_alloc+0x214/0x310 [ 226.496435][T11782] ? stack_depot_save_flags+0x40/0x860 [ 226.496464][T11782] ? __pfx_warn_alloc+0x10/0x10 [ 226.496489][T11782] ? kasan_save_track+0x3e/0x80 [ 226.496509][T11782] ? __kasan_kmalloc+0x93/0xb0 [ 226.496533][T11782] ? xsk_setsockopt+0x4dc/0x8d0 [ 226.496551][T11782] ? do_sock_setsockopt+0x17c/0x1b0 [ 226.496566][T11782] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 226.496582][T11782] ? do_syscall_64+0xfa/0xfa0 [ 226.496611][T11782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.496642][T11782] __vmalloc_node_range_noprof+0x125/0x12d0 [ 226.496696][T11782] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 226.496723][T11782] ? __kasan_kmalloc+0x93/0xb0 [ 226.496752][T11782] vmalloc_user_noprof+0xad/0xf0 [ 226.496776][T11782] ? xskq_create+0xbf/0x170 [ 226.496797][T11782] xskq_create+0xbf/0x170 [ 226.496822][T11782] xsk_init_queue+0xb0/0x110 [ 226.496845][T11782] xsk_setsockopt+0x4dc/0x8d0 [ 226.496869][T11782] ? __pfx_xsk_setsockopt+0x10/0x10 [ 226.496892][T11782] ? __pfx_aa_sk_perm+0x10/0x10 [ 226.496917][T11782] ? aa_sock_opt_perm+0xff/0x1b0 [ 226.496943][T11782] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 226.496960][T11782] ? __pfx_xsk_setsockopt+0x10/0x10 [ 226.496982][T11782] do_sock_setsockopt+0x17c/0x1b0 [ 226.497005][T11782] __x64_sys_setsockopt+0x13f/0x1b0 [ 226.497029][T11782] do_syscall_64+0xfa/0xfa0 [ 226.497050][T11782] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.497073][T11782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.497089][T11782] ? clear_bhb_loop+0x60/0xb0 [ 226.497110][T11782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.497127][T11782] RIP: 0033:0x7fe56818f6c9 [ 226.497150][T11782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.497163][T11782] RSP: 002b:00007fe568f68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 226.497182][T11782] RAX: ffffffffffffffda RBX: 00007fe5683e5fa0 RCX: 00007fe56818f6c9 [ 226.497195][T11782] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 226.497206][T11782] RBP: 00007fe568211f91 R08: 0000000000000004 R09: 0000000000000000 [ 226.497216][T11782] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.497227][T11782] R13: 00007fe5683e6038 R14: 00007fe5683e5fa0 R15: 00007ffcbcdef258 [ 226.497254][T11782] [ 226.859059][T11782] Mem-Info: [ 226.862361][T11782] active_anon:6534 inactive_anon:0 isolated_anon:0 [ 226.862361][T11782] active_file:2825 inactive_file:39930 isolated_file:0 [ 226.862361][T11782] unevictable:768 dirty:67 writeback:0 [ 226.862361][T11782] slab_reclaimable:11451 slab_unreclaimable:107669 [ 226.862361][T11782] mapped:39440 shmem:1357 pagetables:1459 [ 226.862361][T11782] sec_pagetables:0 bounce:0 [ 226.862361][T11782] kernel_misc_reclaimable:0 [ 226.862361][T11782] free:1203372 free_pcp:14749 free_cma:0 [ 226.949877][T11782] Node 0 active_anon:26164kB inactive_anon:0kB active_file:11300kB inactive_file:159524kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:157736kB dirty:264kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14740kB pagetables:5640kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 226.982331][T11782] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 227.015243][T11782] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 227.049583][T11782] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 227.055385][T11782] Node 0 DMA32 free:869812kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26264kB inactive_anon:0kB active_file:11300kB inactive_file:159524kB unevictable:1536kB writepending:264kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:49260kB local_pcp:18552kB free_cma:0kB [ 227.091414][T11782] lowmem_reserve[]: 0 0 0 0 0 [ 227.096191][T11782] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 227.126049][T11782] lowmem_reserve[]: 0 0 0 0 0 [ 227.131001][T11782] Node 1 Normal free:3896984kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16928kB local_pcp:5984kB free_cma:0kB [ 227.172887][T11782] lowmem_reserve[]: 0 0 0 0 0 [ 227.178243][T11782] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 227.215947][T11782] Node 0 DMA32: 613*4kB (M) 63*8kB (M) 19*16kB (ME) 27*32kB (UME) 43*64kB (UME) 28*128kB (UM) 7*256kB (UM) 5*512kB (M) 10*1024kB (M) 9*2048kB (UME) 196*4096kB (M) = 846300kB [ 227.240940][T11782] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 227.253105][T11782] Node 1 Normal: 186*4kB (UME) 52*8kB (UME) 41*16kB (UME) 68*32kB (UME) 28*64kB (UME) 10*128kB (UME) 3*256kB (ME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3896984kB [ 227.274143][T11782] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 227.285079][T11782] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 227.299969][T11782] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 227.310324][T11782] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 227.319842][T11782] 44109 total pagecache pages [ 227.324697][T11782] 0 pages in swap cache [ 227.329194][T11782] Free swap = 124996kB [ 227.333543][T11782] Total swap = 124996kB [ 227.337773][T11782] 2097051 pages RAM [ 227.341755][T11782] 0 pages HighMem/MovableOnly [ 227.346441][T11782] 424119 pages reserved [ 227.351257][T11782] 0 pages cma reserved [ 228.985807][T11810] netlink: 'syz.0.1604': attribute type 1 has an invalid length. [ 229.017673][T11810] __nla_validate_parse: 1 callbacks suppressed [ 229.017690][T11810] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1604'. [ 229.080579][T11810] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1604'. [ 229.135980][T11818] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1607'. [ 229.155988][T11820] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1606'. [ 229.170621][T11820] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 229.180848][T11821] netlink: 'syz.6.1608': attribute type 13 has an invalid length. [ 229.205986][T11822] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1607'. [ 229.207666][T11821] netlink: 'syz.6.1608': attribute type 17 has an invalid length. [ 229.484010][T11821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.486001][T11835] xt_hashlimit: size too large, truncated to 1048576 [ 229.721384][T11849] 0: reclassify loop, rule prio 0, protocol 800 [ 229.731553][T11850] syzkaller1: entered promiscuous mode [ 229.739350][T11850] syzkaller1: entered allmulticast mode [ 230.034195][ T30] audit: type=1107 audit(1763109629.284:2): pid=11862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Np$@-s?"}ɝT[M+8R'JMS-/+r, priority 0 [ 243.158429][T12392] tipc: Disabling bearer [ 243.461633][ T5199] udevd[5199]: worker [11299] terminated by signal 33 (Unknown signal 33) [ 243.480778][ T5199] udevd[5199]: worker [11299] failed while handling '/devices/virtual/nfc/nfc2/rfkill57' [ 243.674811][T12427] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1781'. [ 243.693386][T12432] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 243.710079][T12431] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1783'. [ 243.732536][T12427] team0: Device vti0 is up. Set it down before adding it as a team port [ 243.811453][T12436] geneve0: mtu less than device minimum [ 245.374835][T12464] netlink: 'syz.4.1792': attribute type 2 has an invalid length. [ 245.400882][T12464] netlink: 'syz.4.1792': attribute type 2 has an invalid length. [ 245.500821][T12471] netlink: 'syz.4.1795': attribute type 1 has an invalid length. [ 245.525436][T12471] netlink: 'syz.4.1795': attribute type 4 has an invalid length. [ 245.543944][T12471] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1795'. [ 245.557836][T12477] netlink: 'syz.4.1795': attribute type 1 has an invalid length. [ 245.565714][T12477] netlink: 'syz.4.1795': attribute type 4 has an invalid length. [ 245.586951][T12478] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1797'. [ 245.595528][T12477] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1795'. [ 245.700213][T12481] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1798'. [ 245.722846][T12482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1798'. [ 245.934272][T12493] block nbd2: Unsupported socket: should be TCP or UNIX. [ 246.029322][T12492] macvtap1: entered allmulticast mode [ 246.034892][T12492] veth0_macvtap: entered allmulticast mode [ 246.135027][T12498] openvswitch: netlink: Message has -2 unknown bytes. [ 246.196425][T12503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1807'. [ 246.361750][T12511] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1810'. [ 246.506761][T12521] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1812'. [ 246.804443][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1819'. [ 247.122142][T12555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.163880][T12559] netlink: 'syz.3.1824': attribute type 1 has an invalid length. [ 247.199896][T12559] bond0: (slave syz_tun): Releasing backup interface [ 247.256558][T12559] bridge_slave_0: left allmulticast mode [ 247.263771][T12559] bridge_slave_0: left promiscuous mode [ 247.274223][T12559] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.304515][T12559] bridge_slave_1: left allmulticast mode [ 247.336142][T12559] bridge_slave_1: left promiscuous mode [ 247.351565][T12559] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.365972][T12559] bond0: (slave bond_slave_0): Releasing backup interface [ 247.376531][T12559] bond0: (slave bond_slave_1): Releasing backup interface [ 247.391491][T12559] team0: Port device team_slave_1 removed [ 247.398768][T12559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.406162][T12559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.420862][T12559] netdevsim netdevsim3 : left promiscuous mode [ 247.429402][T12559] gretap1: left promiscuous mode [ 247.435641][T12559] bond1: (slave geneve2): Releasing active interface [ 247.446081][T12559] bond2: left allmulticast mode [ 247.451201][T12559] bond2: left promiscuous mode [ 247.456175][T12559] bridge0: port 3(bond2) entered disabled state [ 247.466627][T12559] bond3: left promiscuous mode [ 247.472340][T12559] vlan2: left promiscuous mode [ 247.477196][T12559] hsr_slave_1: left promiscuous mode [ 247.484682][T12559] vlan4: left promiscuous mode [ 247.489882][T12559] geneve1: left promiscuous mode [ 247.495197][T12559] ip6tnl2: left promiscuous mode [ 247.502370][T12559] bond5: left promiscuous mode [ 247.507864][T12559] bridge0: port 4(bond5) entered disabled state [ 247.517117][T12563] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1827'. [ 247.546817][ T1161] netdevsim netdevsim3 : unset [1, 1] type 2 family 0 port 20004 - 0 [ 247.586793][ T1161] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 247.618336][ T1161] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 247.647042][ T1161] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 248.244550][T12618] netlink: 'syz.5.1847': attribute type 11 has an invalid length. [ 248.494664][T12634] chnl_net:caif_netlink_parms(): no params data found [ 249.005869][T12665] Cannot find add_set index 65532 as target [ 249.265721][T12685] IPv6: Can't replace route, no match found [ 249.272746][T12681] netlink: 'syz.6.1866': attribute type 16 has an invalid length. [ 249.291515][T12681] netlink: 'syz.6.1866': attribute type 17 has an invalid length. [ 249.400699][T12681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.434044][T12681] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.484001][T12691] wlan0 speed is unknown, defaulting to 1000 [ 249.500757][T12681] syzkaller0: entered promiscuous mode [ 249.506289][T12681] syzkaller0: entered allmulticast mode [ 249.513369][T12694] netlink: 'syz.5.1872': attribute type 1 has an invalid length. [ 249.525153][T12691] wlan0 speed is unknown, defaulting to 1000 [ 249.542846][T12691] wlan0 speed is unknown, defaulting to 1000 [ 249.561075][T12691] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 249.587711][T12691] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 249.634642][T12691] wlan0 speed is unknown, defaulting to 1000 [ 249.649563][T12691] wlan0 speed is unknown, defaulting to 1000 [ 249.668881][T12691] wlan0 speed is unknown, defaulting to 1000 [ 249.676701][T12691] wlan0 speed is unknown, defaulting to 1000 [ 249.685566][T12691] wlan0 speed is unknown, defaulting to 1000 [ 249.709396][T12691] wlan0 speed is unknown, defaulting to 1000 [ 249.728926][T12691] wlan0 speed is unknown, defaulting to 1000 [ 250.610710][T12751] pim6reg: entered allmulticast mode [ 250.622351][T12751] openvswitch: netlink: IP tunnel dst address not specified [ 251.173926][T12776] vlan3: entered allmulticast mode [ 251.188603][T12776] bridge_slave_0: entered allmulticast mode [ 251.445912][T12788] netlink: 'syz.6.1899': attribute type 4 has an invalid length. [ 251.463396][T12788] netlink: 'syz.6.1899': attribute type 1 has an invalid length. [ 251.482665][T12788] __nla_validate_parse: 15 callbacks suppressed [ 251.484234][T12788] netlink: 228 bytes leftover after parsing attributes in process `syz.6.1899'. [ 251.740129][T12811] netlink: 'syz.6.1904': attribute type 30 has an invalid length. [ 251.757854][T12806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1903'. [ 252.425011][T12853] netlink: 'syz.5.1918': attribute type 17 has an invalid length. [ 252.433865][T12853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1918'. [ 252.439611][T12851] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1916'. [ 252.452524][T12853] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1918'. [ 252.544869][T12859] netlink: 'syz.4.1919': attribute type 2 has an invalid length. [ 252.559482][T12859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1919'. [ 252.790801][T12870] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1924'. [ 252.802952][T12870] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1924'. [ 253.136810][T12892] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1931'. [ 253.146428][T12892] netlink: 'syz.4.1931': attribute type 7 has an invalid length. [ 253.155410][T12892] netlink: 'syz.4.1931': attribute type 8 has an invalid length. [ 253.191328][T12892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1931'. [ 253.450691][T12913] syzkaller0: entered promiscuous mode [ 253.462353][T12913] syzkaller0: entered allmulticast mode [ 253.782337][T12933] netlink: 'syz.3.1941': attribute type 1 has an invalid length. [ 253.819845][T12933] 0: reclassify loop, rule prio 0, protocol 800 [ 254.063961][T12948] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.305264][T12965] netlink: 'syz.4.1954': attribute type 3 has an invalid length. [ 254.321819][T12965] gre2: entered promiscuous mode [ 254.326953][T12965] gre2: entered allmulticast mode [ 254.418183][T12970] xt_TPROXY: Can be used only with -p tcp or -p udp [ 254.502551][T12976] nbd: couldn't find a device at index 0 [ 254.996662][T13013] xt_hashlimit: size too large, truncated to 1048576 [ 255.166143][T13020] mac80211_hwsim hwsim9 : renamed from wlan1 [ 255.556686][T13041] netlink: 'syz.6.1975': attribute type 83 has an invalid length. [ 255.727810][T13050] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 255.735098][T13050] IPv6: NLM_F_CREATE should be set when creating new route [ 255.772000][T13050] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 257.328543][T13064] macvtap0: entered allmulticast mode [ 257.348331][T13064] macvtap0: refused to change device tx_queue_len [ 257.424382][T13070] validate_nla: 2 callbacks suppressed [ 257.424398][T13070] netlink: 'syz.3.1983': attribute type 21 has an invalid length. [ 257.458274][T13070] __nla_validate_parse: 17 callbacks suppressed [ 257.458291][T13070] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1983'. [ 257.531699][T13081] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1986'. [ 257.546198][T13079] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1987'. [ 257.628812][T13090] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1989'. [ 257.809364][T13106] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1995'. [ 257.825988][T13102] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1996'. [ 257.833411][T13106] netlink: 'syz.6.1995': attribute type 5 has an invalid length. [ 257.854027][T13106] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1995'. [ 257.866172][T13105] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1994'. [ 257.895472][T13107] netlink: 'syz.6.1995': attribute type 39 has an invalid length. [ 257.909264][T13106] geneve2: entered promiscuous mode [ 257.914553][T13106] geneve2: entered allmulticast mode [ 257.929684][ T6746] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 257.951700][T13109] netlink: 'syz.5.1997': attribute type 10 has an invalid length. [ 258.024501][ T6746] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 258.044248][T13109] veth0_virt_wifi: entered allmulticast mode [ 258.071593][T13109] team0: Port device veth0_virt_wifi added [ 258.086020][ T6746] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 258.105585][ T6746] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 258.223143][T13119] wlan0 speed is unknown, defaulting to 1000 [ 258.255238][ T30] audit: type=1800 audit(1763109657.514:3): pid=13115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1999" name="memory.events" dev="tmpfs" ino=2203 res=0 errno=0 [ 258.284717][T13125] openvswitch: netlink: Duplicate or invalid key (type 0). [ 258.328305][T13125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.399600][ T5830] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 258.416854][ T5830] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 258.440928][ T5830] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 258.452405][ T5830] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 258.470320][ T5830] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 258.513507][ T5824] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 258.521268][ T5824] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 258.529036][ T5824] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 258.548074][ T5824] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 258.556833][ T5824] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 258.576874][T13136] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2002'. [ 258.589836][T13144] xt_l2tp: v2 doesn't support IP mode [ 258.710758][T13150] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2007'. [ 258.748209][T13126] wlan0 speed is unknown, defaulting to 1000 [ 259.259803][T13175] netlink: 'syz.6.2014': attribute type 1 has an invalid length. [ 259.374844][T13175] 8021q: adding VLAN 0 to HW filter on device bond4 [ 259.434539][T13184] veth7: entered allmulticast mode [ 259.456970][T13175] veth9: entered promiscuous mode [ 259.466295][T13175] bond4: (slave veth9): Enslaving as an active interface with a down link [ 259.491921][T13189] vlan0: entered allmulticast mode [ 259.497383][T13189] bond4: entered allmulticast mode [ 259.504437][T13189] bond4: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 259.554173][T13126] chnl_net:caif_netlink_parms(): no params data found [ 259.582717][T13195] x_tables: unsorted entry at hook 2 [ 259.768454][T13206] syz.3.2022 uses old SIOCAX25GETINFO [ 259.944188][T13219] tipc: Enabling of bearer rejected, failed to enable media [ 259.983921][T13219] netlink: 'syz.6.2024': attribute type 13 has an invalid length. [ 260.001443][T13126] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.009155][T13126] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.018910][T13126] bridge_slave_0: entered allmulticast mode [ 260.026994][T13126] bridge_slave_0: entered promiscuous mode [ 260.038369][T13126] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.045759][T13126] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.055368][T13126] bridge_slave_1: entered allmulticast mode [ 260.063885][T13126] bridge_slave_1: entered promiscuous mode [ 260.191826][T13126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.211102][T13126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.246056][T13229] tipc: Enabled bearer , priority 0 [ 260.448877][T13126] team0: Port device team_slave_0 added [ 260.459135][T13126] team0: Port device team_slave_1 added [ 260.482116][T13229] syzkaller0: entered promiscuous mode [ 260.488890][T13229] syzkaller0: entered allmulticast mode [ 260.514927][T13229] siw: device registration error -23 [ 260.580944][T13126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.598811][T13126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.635929][T13126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.646914][ T5830] Bluetooth: hci7: command tx timeout [ 260.655940][T13126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.663503][T13126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.690010][T13126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.800213][T13126] hsr_slave_0: entered promiscuous mode [ 260.813150][T13126] hsr_slave_1: entered promiscuous mode [ 260.824972][T13126] debugfs: 'hsr0' already exists in 'hsr' [ 260.834065][T13126] Cannot create hsr debugfs directory [ 261.385017][T13228] tipc: Resetting bearer [ 261.413011][T13228] tipc: Disabling bearer [ 261.448280][ T1161] netdevsim netdevsim3 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.456941][ T1161] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.474844][ T1161] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.497524][ T1161] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.559756][ T1161] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.571031][ T1161] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.580890][ T1161] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.602741][ T1161] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.677602][T13276] tipc: Enabled bearer , priority 0 [ 261.685821][T13276] syzkaller0: entered promiscuous mode [ 261.708558][T13276] syzkaller0: entered allmulticast mode [ 261.862205][T13289] tipc: Resetting bearer [ 261.868909][T13289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.877490][T13289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.941668][T13274] tipc: Resetting bearer [ 261.980465][T13274] tipc: Disabling bearer [ 262.334816][T13126] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 262.359637][T13126] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 262.398421][T13126] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 262.451429][T13126] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 262.533578][T13323] __nla_validate_parse: 13 callbacks suppressed [ 262.533595][T13323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2053'. [ 262.605454][T13332] netlink: 212 bytes leftover after parsing attributes in process `syz.6.2050'. [ 262.718073][ T5830] Bluetooth: hci7: command tx timeout [ 262.756328][T13337] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 262.777668][T13337] bond3 (unregistering): Released all slaves [ 262.893841][T13337] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 262.909676][T13337] bond3 (unregistering): Released all slaves [ 262.964672][T13360] netlink: 'syz.4.2060': attribute type 1 has an invalid length. [ 262.991053][T13360] 8021q: VLANs not supported on team0 [ 263.043388][T13337] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 263.055168][T13337] bond3 (unregistering): Released all slaves [ 263.076696][T13363] tipc: Enabling of bearer rejected, failed to enable media [ 263.186599][T13337] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 263.202553][T13337] bond3 (unregistering): Released all slaves [ 263.312699][T13337] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 263.328930][T13337] bond3 (unregistering): Released all slaves [ 263.376796][T13126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.426407][T13337] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 263.439888][T13337] bond3 (unregistering): Released all slaves [ 263.523111][T13390] No such timeout policy "syz0" [ 263.526631][T13337] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 263.535495][T13390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2066'. [ 263.551410][T13337] bond3 (unregistering): Released all slaves [ 263.570517][T13126] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.577987][T13385] syzkaller0: entered promiscuous mode [ 263.583471][T13385] syzkaller0: entered allmulticast mode [ 263.590695][T13390] hsr_slave_1: left promiscuous mode [ 263.639594][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.646758][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.672549][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.679721][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.041771][T13421] netlink: 'syz.4.2075': attribute type 11 has an invalid length. [ 264.060556][T13422] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2075'. [ 264.166468][T13126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.448449][T13451] netlink: 'syz.6.2083': attribute type 39 has an invalid length. [ 264.566567][T13126] veth0_vlan: entered promiscuous mode [ 264.583854][T13451] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2083'. [ 264.587067][T13126] veth1_vlan: entered promiscuous mode [ 264.706407][T13462] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2086'. [ 264.749954][T13126] veth0_macvtap: entered promiscuous mode [ 264.777019][T13126] veth1_macvtap: entered promiscuous mode [ 264.798133][ T5830] Bluetooth: hci7: command tx timeout [ 264.810819][T13126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.861837][T13464] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2087'. [ 264.862577][T13126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.873363][T13471] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2089'. [ 264.921886][T13471] nbd: couldn't find a device at index 0 [ 264.942890][ T6746] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.005169][ T6746] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.035036][T13471] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2089'. [ 265.058346][ T6746] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.087411][ T6746] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.311093][T13501] netlink: 294 bytes leftover after parsing attributes in process `syz.3.2095'. [ 265.322358][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.342845][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.351456][T13501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.484764][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.501746][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.345789][T13557] tipc: Enabled bearer , priority 0 [ 266.426229][T13557] syzkaller0: entered promiscuous mode [ 266.439750][T13561] IPv6: NLM_F_CREATE should be specified when creating new route [ 266.447821][T13557] syzkaller0: entered allmulticast mode [ 266.505542][T13559] bond1: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 266.542513][T13559] bond1: entered promiscuous mode [ 266.548024][T13559] bond1: entered allmulticast mode [ 266.554586][T13559] 8021q: adding VLAN 0 to HW filter on device bond1 [ 266.766636][T13575] tipc: Resetting bearer [ 266.866932][T13556] tipc: Resetting bearer [ 266.877401][ T5830] Bluetooth: hci7: command tx timeout [ 266.934175][T13556] tipc: Disabling bearer [ 267.115407][T13592] netem: change failed [ 267.433349][T13614] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 267.442180][T13614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.865316][T13595] __nla_validate_parse: 5 callbacks suppressed [ 267.865335][T13595] netlink: 116 bytes leftover after parsing attributes in process `syz.7.2121'. [ 268.110693][T13628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.383754][T13645] x_tables: duplicate underflow at hook 1 [ 268.406356][T13643] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2133'. [ 268.427603][T13648] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2135'. [ 268.442544][T13650] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2133'. [ 268.471655][T13648] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2135'. [ 268.485641][T13657] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 268.511282][T13654] tap0: tun_chr_ioctl cmd 1074025673 [ 268.516866][T13653] tap0: tun_chr_ioctl cmd 1074025676 [ 268.536991][T13653] tap0: owner set to 0 [ 268.605375][T13661] netlink: 'syz.7.2139': attribute type 1 has an invalid length. [ 268.641329][T13661] bond2: entered promiscuous mode [ 268.646815][T13661] 8021q: adding VLAN 0 to HW filter on device bond2 [ 268.686203][T13667] macsec0: entered promiscuous mode [ 268.700633][T13667] macsec0: entered allmulticast mode [ 268.708661][T13667] veth1_macvtap: entered allmulticast mode [ 268.714838][T13667] macsec0: left promiscuous mode [ 268.720578][T13667] macsec0: left allmulticast mode [ 268.730216][T13667] veth1_macvtap: left allmulticast mode [ 268.755212][T13671] netlink: 'syz.7.2142': attribute type 10 has an invalid length. [ 268.851094][T13676] netlink: 'syz.7.2143': attribute type 1 has an invalid length. [ 268.859788][T13678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.869134][T13676] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2143'. [ 268.886815][T13676] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2143'. [ 268.908976][T13676] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2143'. [ 268.918765][T13676] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2143'. [ 268.946860][T13676] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2143'. [ 269.083072][T13692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.321822][T13706] batadv_slave_0: entered promiscuous mode [ 269.591812][T13720] x_tables: duplicate underflow at hook 2 [ 269.664363][T13730] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 269.845632][T13739] netlink: 'syz.3.2163': attribute type 4 has an invalid length. [ 269.890358][T13742] netlink: 'syz.7.2165': attribute type 32 has an invalid length. [ 269.901229][T13743] netlink: 'syz.3.2163': attribute type 4 has an invalid length. [ 270.098926][T13757] syzkaller0: entered promiscuous mode [ 270.104437][T13757] syzkaller0: entered allmulticast mode [ 270.465541][T13782] rdma_op ffff888023bc19f0 conn xmit_rdma 0000000000000000 [ 270.690289][T13799] lo: entered allmulticast mode [ 271.145154][ T12] nci: nci_rsp_packet: unsupported rsp opcode 0xf02 [ 271.524775][T13856] xt_addrtype: ipv6 does not support BROADCAST matching [ 271.534676][T13855] xt_addrtype: ipv6 does not support BROADCAST matching [ 272.108761][T13883] syzkaller0: entered promiscuous mode [ 272.114345][T13883] syzkaller0: entered allmulticast mode [ 272.227996][T13894] lo: MTU too low for tipc bearer [ 272.233090][T13894] tipc: Enabling of bearer rejected, failed to enable media [ 272.641741][T13924] IPVS: length: 171 != 8 [ 272.679313][T13919] bridge0: port 3(batadv0) entered disabled state [ 272.719134][T13919] bridge_slave_0: left allmulticast mode [ 272.737591][T13919] bridge_slave_0: left promiscuous mode [ 272.752753][T13919] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.781505][T13919] bridge_slave_1: left allmulticast mode [ 272.794024][T13919] bridge_slave_1: left promiscuous mode [ 272.805930][T13919] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.834083][T13919] bond0: (slave bond_slave_0): Releasing backup interface [ 272.854354][T13919] bond0: (slave bond_slave_1): Releasing backup interface [ 272.906486][T13919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.921652][T13919] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 272.921898][T13940] __nla_validate_parse: 16 callbacks suppressed [ 272.921911][T13940] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2225'. [ 273.186176][T13952] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 273.202981][T13954] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2229'. [ 273.214743][T13954] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2229'. [ 273.313779][T13949] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.2229'. [ 273.426268][T13964] netlink: 'syz.7.2232': attribute type 11 has an invalid length. [ 273.459224][T13964] netlink: 199828 bytes leftover after parsing attributes in process `syz.7.2232'. [ 273.619154][T13975] netlink: 'syz.7.2235': attribute type 29 has an invalid length. [ 273.631034][T13975] netlink: 'syz.7.2235': attribute type 29 has an invalid length. [ 273.639754][T13975] netlink: 500 bytes leftover after parsing attributes in process `syz.7.2235'. [ 273.682674][T13978] tipc: Enabling of bearer rejected, failed to enable media [ 273.702630][T13975] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2235'. [ 273.948938][T14000] netlink: 'syz.6.2242': attribute type 10 has an invalid length. [ 274.016303][T14000] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 274.030041][ T6746] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 274.039445][ T6746] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 274.053142][ T6746] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 274.086987][ T6746] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 274.274083][T14014] netlink: 596 bytes leftover after parsing attributes in process `syz.6.2246'. [ 274.358867][T14019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.371603][T14019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2247'. [ 274.382246][T14022] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2249'. [ 274.546082][T14031] sit0: entered promiscuous mode [ 274.587973][T14031] netlink: 'syz.7.2252': attribute type 1 has an invalid length. [ 274.693720][T14036] netlink: 'syz.4.2254': attribute type 9 has an invalid length. [ 275.378234][T14079] tun0: tun_chr_ioctl cmd 1074025675 [ 275.409380][T14079] tun0: persist disabled [ 275.468482][T14093] tipc: Enabling of bearer rejected, failed to enable media [ 275.601922][T14099] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input6 [ 275.627445][T14102] netlink: 'syz.4.2272': attribute type 2 has an invalid length. [ 275.655549][T14104] netlink: 'syz.4.2272': attribute type 2 has an invalid length. [ 275.723217][T14103] sit1: entered promiscuous mode [ 275.733735][T14103] sit1: entered allmulticast mode [ 276.034229][T14124] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 276.483964][T14162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.493591][T14162] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.539405][ T6745] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 276.790378][T14175] infiniband syz2: set active [ 276.795776][T14175] infiniband syz2: added veth0 [ 276.834569][T14175] RDS/IB: syz2: added [ 276.844115][T14175] smc: adding ib device syz2 with port count 1 [ 276.854964][T14175] smc: ib device syz2 port 1 has no pnetid [ 277.130411][T14193] syzkaller0: entered promiscuous mode [ 277.135915][T14193] syzkaller0: entered allmulticast mode [ 277.219708][T14174] netlink: 'syz.5.2292': attribute type 1 has an invalid length. [ 277.641413][T14214] pim6reg1: entered promiscuous mode [ 277.650889][T14214] pim6reg1: entered allmulticast mode [ 277.999784][T14230] __nla_validate_parse: 12 callbacks suppressed [ 277.999804][T14230] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2308'. [ 279.274215][T14274] macvtap1: entered promiscuous mode [ 279.289486][T14274] macvtap1: entered allmulticast mode [ 279.301220][T14276] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 279.454154][T14281] openvswitch: netlink: Duplicate or invalid key (type 0). [ 279.473054][T14281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.521014][T14285] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 279.590207][T14284] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2325'. [ 279.861142][T14296] sctp: [Deprecated]: syz.7.2329 (pid 14296) Use of int in max_burst socket option. [ 279.861142][T14296] Use struct sctp_assoc_value instead [ 279.970909][T14302] netlink: 'syz.6.2330': attribute type 58 has an invalid length. [ 279.989291][T14302] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2330'. [ 280.004780][T14305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2332'. [ 280.217735][T14317] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 280.588792][T14335] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2342'. [ 280.611203][T14338] netlink: 'syz.4.2343': attribute type 1 has an invalid length. [ 280.682315][T14338] 8021q: adding VLAN 0 to HW filter on device bond6 [ 280.694306][T14344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.813994][T14343] veth19: entered promiscuous mode [ 280.833595][T14343] bond6: (slave veth19): Enslaving as an active interface with a down link [ 280.865249][T14338] veth21: entered promiscuous mode [ 280.873705][T14338] bond6: (slave veth21): Enslaving as an active interface with a down link [ 280.907073][T14351] bond6: entered allmulticast mode [ 281.026145][T14358] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2350'. [ 281.152543][T14368] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2350'. [ 281.175819][T14368] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2350'. [ 281.226036][T14368] geneve3: entered promiscuous mode [ 281.240540][T14368] geneve3: entered allmulticast mode [ 281.328730][T14385] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2357'. [ 281.564670][T14397] netlink: 'syz.7.2362': attribute type 1 has an invalid length. [ 281.573803][T14397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.585013][T14397] netlink: 'syz.7.2362': attribute type 12 has an invalid length. [ 281.598985][T14399] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 281.615729][T14399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.631667][T14399] netlink: 'syz.4.2363': attribute type 1 has an invalid length. [ 281.672875][T14403] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2365'. [ 281.684378][T14399] 8021q: adding VLAN 0 to HW filter on device bond7 [ 281.728552][T14399] veth23: entered promiscuous mode [ 281.751783][T14399] bond7: (slave veth23): Enslaving as an active interface with a down link [ 281.796692][T14409] veth25: entered promiscuous mode [ 281.816524][T14409] bond7: (slave veth25): Enslaving as an active interface with a down link [ 281.843076][T14399] bond7: entered allmulticast mode [ 282.033664][T14428] x_tables: duplicate underflow at hook 3 [ 282.227142][T14442] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 282.256221][T14445] bridge_slave_0: default FDB implementation only supports local addresses [ 282.323556][T14449] netlink: 'syz.4.2378': attribute type 11 has an invalid length. [ 282.484178][T14467] gre0: entered promiscuous mode [ 282.485761][T14464] netlink: 'syz.4.2383': attribute type 1 has an invalid length. [ 282.520563][T14464] netlink: 'syz.4.2383': attribute type 2 has an invalid length. [ 283.203314][T14565] SET target dimension over the limit! [ 283.294363][T14578] netlink: 'syz.6.2394': attribute type 29 has an invalid length. [ 283.515038][T14614] __nla_validate_parse: 4 callbacks suppressed [ 283.515056][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2398'. [ 283.550512][T14614] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2398'. [ 283.563825][T14614] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2398'. [ 283.573496][T14617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2399'. [ 283.602741][T14622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2398'. [ 283.620711][T14622] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2398'. [ 283.635302][T14622] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2398'. [ 283.881461][T14662] netlink: 'syz.6.2405': attribute type 1 has an invalid length. [ 283.892752][T14662] netlink: 'syz.6.2405': attribute type 1 has an invalid length. [ 283.905220][T14663] openvswitch: netlink: IP tunnel dst address not specified [ 283.946490][T14667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2403'. [ 284.087194][T14667] bridge0: entered promiscuous mode [ 284.101105][T14667] macsec1: entered promiscuous mode [ 284.107050][T14667] macsec1: entered allmulticast mode [ 284.116430][T14667] bridge0: entered allmulticast mode [ 284.123768][T14667] bridge0: port 1(macsec1) entered blocking state [ 284.147886][T14667] bridge0: port 1(macsec1) entered disabled state [ 284.196988][T14667] bridge0: left allmulticast mode [ 284.215957][T14667] bridge0: left promiscuous mode [ 284.445485][T14693] bond5 (unregistering): Released all slaves [ 284.555823][T14456] workqueue: Failed to create a rescuer kthread for wq "nfc34_nci_rx_wq": -EINTR [ 284.622806][T14656] wlan0 speed is unknown, defaulting to 1000 [ 284.648580][T14726] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2409'. [ 284.700187][T14726] unsupported nlmsg_type 40 [ 284.726853][T14726] syz_tun: entered allmulticast mode [ 284.788606][T14738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2411'. [ 284.814570][T14732] dvmrp8: entered allmulticast mode [ 284.869801][T14724] syz_tun: left allmulticast mode [ 284.875381][ T5830] block nbd2: Receive control failed (result -32) [ 285.185197][T14754] IPv6: sit2: Disabled Multicast RS [ 285.233231][T14754] sit2: entered allmulticast mode [ 286.384084][T14800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.890305][T14823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.235387][T14846] bridge2: entered allmulticast mode [ 287.393124][T14852] tipc: Enabling of bearer rejected, failed to enable media [ 287.455545][ T6733] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.519161][ T6733] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.560249][ T6733] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.578633][ T6733] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.696615][T14877] validate_nla: 31 callbacks suppressed [ 287.696635][T14877] netlink: 'syz.4.2444': attribute type 21 has an invalid length. [ 287.912852][T14894] netlink: 'syz.6.2449': attribute type 1 has an invalid length. [ 287.936801][T14888] C: renamed from lo (while UP) [ 287.944568][T14894] netlink: 'syz.6.2449': attribute type 2 has an invalid length. [ 287.958124][T14894] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 289.168105][T14957] syzkaller0: entered promiscuous mode [ 289.192175][T14957] syzkaller0: entered allmulticast mode [ 289.231823][T14953] tipc: Enabled bearer , priority 0 [ 289.309789][T14963] __nla_validate_parse: 14 callbacks suppressed [ 289.309807][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2466'. [ 289.356938][T14953] tipc: Resetting bearer [ 289.426625][T14953] tipc: Disabling bearer [ 289.536669][T14974] netlink: 'syz.6.2470': attribute type 29 has an invalid length. [ 289.742596][T14988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2475'. [ 289.843791][T14995] macsec0: entered promiscuous mode [ 289.872067][T14995] macsec0: entered allmulticast mode [ 289.923765][T14998] veth1_macvtap: entered allmulticast mode [ 289.931748][T14998] macsec0: left promiscuous mode [ 289.941592][T14998] macsec0: left allmulticast mode [ 289.948849][T14998] veth1_macvtap: left allmulticast mode [ 289.969373][T15000] dvmrp1: entered allmulticast mode [ 289.982524][T15004] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 290.071949][T15010] IPVS: set_ctl: invalid protocol: 23234 172.30.0.6:20002 [ 290.086402][T15010] dvmrp0: entered allmulticast mode [ 290.242552][T15017] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.2483'. [ 290.254916][ T31] INFO: task syz.2.726:8585 blocked for more than 143 seconds. [ 290.298911][ T31] Not tainted syzkaller #0 [ 290.336126][T15021] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2482'. [ 290.371767][T15017] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2483'. [ 290.414939][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 290.424260][ T31] task:syz.2.726 state:D stack:26792 pid:8585 tgid:8581 ppid:5829 task_flags:0x400140 flags:0x00080002 [ 290.437113][ T31] Call Trace: [ 290.441785][ T31] [ 290.444809][ T31] __schedule+0x1798/0x4cc0 [ 290.449925][ T31] ? __lock_acquire+0xab9/0xd20 [ 290.454875][ T31] ? __lock_acquire+0xab9/0xd20 [ 290.461056][ T31] ? __pfx___schedule+0x10/0x10 [ 290.467876][ T31] ? schedule+0x91/0x360 [ 290.472353][ T31] schedule+0x165/0x360 [ 290.476610][ T31] schedule_preempt_disabled+0x13/0x30 [ 290.484370][ T31] __mutex_lock+0x7e6/0x1350 [ 290.489641][ T31] ? __mutex_lock+0x5bb/0x1350 [ 290.494747][ T31] ? nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 290.502079][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 290.507661][ T31] ? __nlmsg_put+0xef/0x1b0 [ 290.512279][ T31] ? genlmsg_put+0x137/0x2e0 [ 290.516955][ T31] nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 290.529602][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 290.535909][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 290.541942][ T31] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 290.550217][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 290.555993][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 290.562688][ T31] genl_rcv_msg+0x60e/0x790 [ 290.568189][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 290.573391][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 290.580320][ T31] ? __asan_memcpy+0x40/0x70 [ 290.585070][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 290.592245][ T31] netlink_rcv_skb+0x208/0x470 [ 290.597163][ T31] ? __lock_acquire+0xab9/0xd20 [ 290.602678][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 290.609426][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 290.614984][ T31] ? down_read+0x1ad/0x2e0 [ 290.619638][ T31] genl_rcv+0x28/0x40 [ 290.623627][ T31] netlink_unicast+0x82f/0x9e0 [ 290.628717][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 290.634163][ T31] ? netlink_sendmsg+0x642/0xb30 [ 290.639778][ T31] ? skb_put+0x11b/0x210 [ 290.644045][ T31] netlink_sendmsg+0x805/0xb30 [ 290.648950][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.654242][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 290.659469][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 290.664769][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.670440][ T31] __sock_sendmsg+0x21c/0x270 [ 290.675165][ T31] ____sys_sendmsg+0x505/0x830 [ 290.680157][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 290.685643][ T31] ? import_iovec+0x74/0xa0 [ 290.690314][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 290.695030][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.700882][ T31] ? __fget_files+0x2a/0x420 [ 290.705666][ T31] ? __fget_files+0x3a0/0x420 [ 290.710447][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 290.715462][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 290.724077][ T31] ? do_syscall_64+0xbe/0xfa0 [ 290.729176][ T31] do_syscall_64+0xfa/0xfa0 [ 290.733814][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.739241][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.745312][ T31] ? clear_bhb_loop+0x60/0xb0 [ 290.750085][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.755980][ T31] RIP: 0033:0x7fae6dd8f6c9 [ 290.760717][ T31] RSP: 002b:00007fae6ec19038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.769312][ T31] RAX: ffffffffffffffda RBX: 00007fae6dfe6090 RCX: 00007fae6dd8f6c9 [ 290.777362][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 290.785336][ T31] RBP: 00007fae6de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 290.793632][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.801791][ T31] R13: 00007fae6dfe6128 R14: 00007fae6dfe6090 R15: 00007ffc2daaadf8 [ 290.811118][ T31] [ 290.814418][ T31] [ 290.814418][ T31] Showing all locks held in the system: [ 290.822745][ T31] 1 lock held by khungtaskd/31: [ 290.828624][ T31] #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 290.835501][T15023] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2482'. [ 290.839852][ T31] 2 locks held by getty/5585: [ 290.852658][ T31] #0: ffff88814cece0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 290.862990][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 290.873273][ T31] 2 locks held by syz.1.669/8405: [ 290.880197][ T31] #0: ffffffff8f331590 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.895866][ T31] #1: ffffffff8e226ee8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 290.906502][ T31] 2 locks held by syz.2.726/8585: [ 290.911902][ T31] #0: ffffffff8f331590 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.920270][ T31] #1: ffffffff8e226ee8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 290.930427][ T31] 2 locks held by syz.0.1767/12383: [ 290.935625][ T31] #0: ffffffff8f331590 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 290.944191][ T31] #1: ffffffff8e226ee8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 290.954394][ T31] 2 locks held by syz.3.2481/15014: [ 290.959785][ T31] #0: ffffffff8f2cb708 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 290.969264][ T31] #1: ffffffff8df430f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 290.980555][ T31] [ 290.982901][ T31] ============================================= [ 290.982901][ T31] [ 290.995144][ T31] NMI backtrace for cpu 1 [ 290.995161][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 290.995180][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 290.995190][ T31] Call Trace: [ 290.995198][ T31] [ 290.995205][ T31] dump_stack_lvl+0x189/0x250 [ 290.995235][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.995257][ T31] ? __pfx__printk+0x10/0x10 [ 290.995286][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 290.995309][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 290.995330][ T31] ? __pfx__printk+0x10/0x10 [ 290.995352][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 290.995378][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 290.995400][ T31] watchdog+0xf60/0xfa0 [ 290.995421][ T31] ? watchdog+0x1e2/0xfa0 [ 290.995444][ T31] kthread+0x711/0x8a0 [ 290.995468][ T31] ? __pfx_watchdog+0x10/0x10 [ 290.995484][ T31] ? __pfx_kthread+0x10/0x10 [ 290.995506][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.995527][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.995548][ T31] ? __pfx_kthread+0x10/0x10 [ 290.995570][ T31] ret_from_fork+0x4bc/0x870 [ 290.995591][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 290.995615][ T31] ? __switch_to_asm+0x39/0x70 [ 290.995629][ T31] ? __switch_to_asm+0x33/0x70 [ 290.995642][ T31] ? __pfx_kthread+0x10/0x10 [ 290.995671][ T31] ret_from_fork_asm+0x1a/0x30 [ 290.995701][ T31] [ 290.995708][ T31] Sending NMI from CPU 1 to CPUs 0: [ 291.142513][ C0] NMI backtrace for cpu 0 [ 291.142529][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 291.142547][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 291.142556][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 291.142582][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 d1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 291.142595][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 291.142609][ C0] RAX: 5924e7618f1edb00 RBX: ffffffff81967bf7 RCX: 5924e7618f1edb00 [ 291.142621][ C0] RDX: 0000000000000001 RSI: ffffffff8d70dd33 RDI: ffffffff8bbf0760 [ 291.142631][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 291.142649][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ce470 [ 291.142661][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 291.142671][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 291.142684][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.142694][ C0] CR2: 00007ff6015b4858 CR3: 0000000071bce000 CR4: 00000000003526f0 [ 291.142708][ C0] Call Trace: [ 291.142715][ C0] [ 291.142721][ C0] default_idle+0x13/0x20 [ 291.142735][ C0] default_idle_call+0x73/0xb0 [ 291.142751][ C0] do_idle+0x1e7/0x510 [ 291.142770][ C0] ? __pfx_do_idle+0x10/0x10 [ 291.142793][ C0] cpu_startup_entry+0x44/0x60 [ 291.142809][ C0] rest_init+0x2de/0x300 [ 291.142825][ C0] start_kernel+0x3ae/0x410 [ 291.142842][ C0] x86_64_start_reservations+0x24/0x30 [ 291.142862][ C0] x86_64_start_kernel+0x143/0x1c0 [ 291.142881][ C0] common_startup_64+0x13e/0x147 [ 291.142908][ C0]