last executing test programs: 8m21.584736395s ago: executing program 3 (id=823): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x8001, 0x700, 0x2c42d49c, 0x1000, {{0x8, 0x4, 0x1, 0x8, 0x20, 0x65, 0x0, 0x1, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0x97, 0x3, 0xc, [{@multicast2}]}]}}}}}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xf, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x3206, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x33}, @remote}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="06"], 0x9) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001380)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4030015}, 0x10004800) 8m21.308741267s ago: executing program 3 (id=827): r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8001}, 0x1c) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xa, 0xe, [@ext_channel_switch={0x1c, 0x4, {0x1, 0x0, 0x9d, 0x7}}]}]}, 0x20}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[{0x3, 0x4, 0x1, 0x7}, {0x1, 0x2, 0xc, 0x3}], 0x10, 0x80000000}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r6, 0x0) recvmsg$unix(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r7, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040), 0x4) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}], 0x18) 8m21.155925511s ago: executing program 3 (id=829): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff0800450000300000000000679078000000c9f6ffffff0c009078f20b00004518010010650f309439d804ff0004e0000002e0"], 0x0) socket$inet(0x2b, 0x801, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="28ece866e18aac65cd6e36b2ff83b5e3ca9a58b13e15cd8a82e6ce203df1b8f25258a763078a26cbaae80fdd00e3240200cb589a32e061f2d5876294852bcb801f044feb6ac1970653da4e5fb25a3810968473615da3aefbac30de933befdf172ac67d57e01553840f27302f828758d47337f35b7a62439a75ff884158eca5e17bd779745ff86370e0d14be32cc1462037b07dc18815b4001d098536abe5595b15d762ed7acf3654d7dc4a43d25ead8b40e0f0d06f44391a88fe61ead0df17b319137e078868709eff0ea352d54a681f763a7923d916e8ac789a6b807ad1a58bee6b5733a45f93c2e0139d6d22b38e2213967ede768d2968ab8ca18d0b9771", @ANYBLOB="b47a4e10ef646e8762b4749074377be78645dc54d43c675e9ae28a498adeb2ee6c9b1ca17442aa0d882142e61dc36aa906630c204415f45ab6a4e080d945be10b48307496e422a1ec180fa57aca076bbb300"/91, @ANYRESHEX, @ANYRES64=r0], 0x68}, 0x1, 0x0, 0x0, 0x404e880}, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x83, &(0x7f0000000080)={r8, 0x2}, 0x8) openat$cgroup_ro(r4, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r9 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000680)=""/242, 0xf2}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x2}, 0xebea}], 0x1, 0x40000001, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xcdbe5c5b94e10c47}}}, 0x24}}, 0x0) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_emit_ethernet(0x96, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004e16008800640000035c9078ac14141e640101009404000001440c93200000000e0000e4f5837dcfac14144200000000e000000164010101830b1564010101ac1414aa071fa40a0101006401010164010100ac1414bbe000000200bc0000ac1414bb89131effffffffac1414aa0a010100e0000001000000b388260d40183a5b00ac844e8a7c3d31"], 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000001400000100000000000000002bfa0a00010079e09aaa8aad0000000023738375920fb03c1bc119025090afd6da7154497f25e263fb2546fed7ca223ba494c7c2ddbfa0cf19afc1cfd0d070c676accb830db72138e1a85de0eb3b41e45aabfb3a9ec232b96a567e0e469a5f32b378ed8907df780d2b521f285ee183e9ecaf96280790bd0f7e3de0e7a0289c00000000000000"], 0x20}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r12 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffff27, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010002000feffffff0000000000000000e096bf581d3b056a0afc2c85", @ANYRES32=0x0, @ANYBLOB="00000000086401001c002b8008000800", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) 8m20.088974027s ago: executing program 3 (id=840): r0 = socket(0x10, 0x803, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80000001, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x98, 0x10, 0x100, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MTU={0x8, 0x4, 0x8000}, @IFLA_GROUP={0x8, 0x1b, 0x7}, @IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dvmrp0\x00'}, {0x14, 0x35, 'wg0\x00'}, {0x14, 0x35, 'pim6reg1\x00'}]}, @IFLA_NET_NS_PID={0x8}, @IFLA_CARRIER={0x5, 0x21, 0xf}]}, 0x98}}, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/uts\x00') ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) write(r0, &(0x7f0000000000)="00c4180ec19d23d6e87a0386e4f4928a4c076d4d15b832a1f52c79f9515130abfccd9de70c23ce13803ab88bf4fb5e34b1b91ec87cf1e74c49a18e2b6a1a7513b3492dc2", 0x44) 8m19.86477874s ago: executing program 3 (id=843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dvmrp1\x00', 0x0}) (async) r2 = socket(0x2a, 0x2, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x880, 0x2c, 0xd27, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xa}}, @filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffd, 0xbea9, 0x8, 0x87, 0x9, 0xb, 0x0, 0x9, 0x0, 0x8001, 0x0, 0x80, 0x6, 0x0, 0xde, 0x7, 0xf6aa, 0x5, 0x9, 0x3ff, 0x7233, 0x8, 0xa26a, 0x6, 0xffff, 0x0, 0x4, 0x9, 0x8, 0x7fffffff, 0x8000, 0x0, 0x3, 0x0, 0x0, 0x3, 0x68f7, 0x400, 0x7fffffff, 0x9, 0x1ff, 0x624a, 0x5, 0xf9, 0x9, 0x5, 0x81, 0x400, 0x8, 0x800, 0x7ff, 0xffff, 0x5, 0xfffffff7, 0x8000, 0xb19, 0x6, 0xc7, 0x9, 0x0, 0x8, 0x0, 0x6, 0x0, 0x200, 0x5, 0x1, 0x3, 0x3, 0x101, 0x5, 0x8001, 0x4719, 0xfffff5cb, 0x1, 0x1d79, 0x6, 0x5, 0x8000, 0x3, 0x2, 0x9, 0x45dd, 0x0, 0x4, 0x1, 0xc, 0x6, 0x3, 0x1, 0x9, 0x81, 0xfffffffe, 0x6, 0x4647, 0xe0e5, 0x800, 0x5, 0x8, 0x2, 0x5, 0x2, 0x3, 0x1, 0xffff8001, 0x8, 0x1, 0x7fffffff, 0x83d8, 0x8000, 0x3, 0x101, 0x8000, 0x0, 0x3ff, 0x6e3, 0x52, 0x7fff, 0x4, 0x9, 0x7, 0xfffffff5, 0x40, 0x101, 0x5, 0x5, 0x80000000, 0x1, 0xffffffff, 0x1, 0x0, 0xfffffffc, 0xfffffffb, 0x2, 0x8, 0x8000000, 0x1, 0x4, 0x9, 0x7, 0x4, 0xd, 0x9, 0xfffffffa, 0x8, 0xfffffff2, 0x0, 0x2651, 0x800, 0xc319, 0x1, 0x0, 0x80000001, 0x6, 0x8, 0x6, 0x400, 0x4, 0x3ff, 0x501b5b55, 0x7fffffff, 0x2, 0x1, 0x3, 0x7ae, 0x2, 0x9, 0xb, 0xfff, 0x8, 0x101, 0x8000, 0x8, 0x2, 0x9, 0xe2c9, 0x1, 0x0, 0x1005, 0x0, 0x7, 0x2, 0x1f, 0x0, 0xf, 0xc, 0x1, 0x84f, 0x8, 0x94f7, 0x7, 0x5, 0xec38f52e, 0x7, 0x4, 0xc, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7fff, 0xff, 0x9, 0xfffffffc, 0x1ff, 0x3, 0x4, 0x6, 0x8, 0x100, 0x26e2, 0x800, 0x39, 0x3, 0x4, 0x3, 0x7, 0x8000, 0x800, 0x6, 0x0, 0x0, 0xc4, 0x8, 0x6, 0x3, 0x302, 0x1, 0x195, 0x543f, 0x7, 0x4, 0x1, 0x7, 0x81, 0x7, 0x9, 0x40, 0x101, 0x7f, 0x2, 0x2, 0x81, 0xfffffff9, 0x4, 0x1f2, 0xe9a, 0x0, 0x0, 0xdf85, 0xf, 0x4, 0x23, 0x6c, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x6, 0xfffffff7, 0x0, 0xfcbe, {0xe, 0x0, 0xdfb, 0x7, 0xc, 0x7aefe6b8}, {0x1, 0x0, 0x3, 0xd, 0x1, 0x9}, 0x5, 0x4, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x4, 0xffffffff, 0x9, 0x4, 0x9, 0x2, 0x40, 0x308, 0x1, 0x1000000, 0xffffff74, 0x1, 0x80, 0xe, 0x3, 0x3, 0x1, 0x6, 0x7ff, 0x5, 0x380, 0x7, 0x9, 0xc, 0xa70, 0x3, 0x5c05, 0x1, 0x3, 0x0, 0x4, 0x1, 0x57, 0x39800000, 0x8, 0x0, 0x9, 0xff, 0x1ff, 0x7, 0x3, 0x9, 0x6, 0xa94, 0x8, 0x5, 0x80, 0x0, 0x100, 0xebf, 0x69, 0x1ff, 0xcda2, 0x401, 0xfffffffc, 0x5ed755fb, 0x318d, 0x101, 0x8, 0x6, 0x3d75, 0xe48e, 0x1, 0x80000001, 0x9b, 0xffffff07, 0xfffffffe, 0x5, 0x0, 0x7, 0x7, 0x8, 0x3, 0x8, 0x6, 0x1, 0x1000, 0x1, 0x1f, 0xfffffffb, 0x8000, 0x6, 0x1, 0xaef, 0x9, 0x7f, 0x3, 0x6, 0x5, 0x0, 0x0, 0xccdd, 0xe0b, 0x6, 0x3, 0x8, 0x2, 0x4, 0x3f7, 0x4, 0x101, 0x3, 0x2, 0x3, 0x6, 0x8, 0x0, 0x2dbb9dea, 0x6, 0x80000001, 0xffffff8a, 0x3ff, 0x0, 0x0, 0x9, 0x4, 0x9, 0x1, 0x4, 0xad71, 0x39, 0x8, 0x4, 0x1, 0xd, 0x9, 0x1, 0x10000, 0xf0, 0xfffffffb, 0x5, 0x2fc3, 0x5, 0xb, 0xc4, 0x1ff, 0x80000001, 0x0, 0x5, 0x70000, 0xd85, 0x1603, 0xfffffffc, 0x40, 0x3ff, 0x8000, 0xbae, 0x1, 0x4, 0x1ff, 0x7ac7, 0x8, 0xc8, 0x53, 0xfffffe00, 0x7fffffff, 0x1000, 0x0, 0x3, 0x3, 0x9, 0x0, 0x8, 0x1ff, 0x9, 0x23, 0x7, 0x7ff, 0x0, 0xdbd, 0x2, 0x5, 0x101, 0x2, 0x3, 0x5, 0x9e, 0x9, 0x0, 0x7, 0xc1, 0x5, 0x9, 0x4, 0x7, 0xfffffff2, 0x81, 0x3, 0x1, 0x2, 0x0, 0x1, 0x9, 0x2, 0x13e3, 0x180000, 0x9, 0x0, 0xfff, 0x1fb0, 0x4ae, 0x80, 0xc, 0xb1, 0x2, 0x3, 0x8, 0x2, 0x6, 0x1, 0x200, 0x98e0, 0x3, 0x2, 0x0, 0xfffffffe, 0x8de0, 0x5, 0xfffffffe, 0x1, 0x4, 0x4, 0xec, 0x9, 0x6, 0x6, 0x0, 0x19, 0x9, 0x7e, 0x7, 0x5, 0x1, 0x9, 0xc, 0x1, 0x5, 0xffff, 0x2, 0x8, 0x9, 0x1, 0x5, 0x4, 0x58, 0x7f, 0x223, 0x7, 0x8000, 0x5, 0x2, 0x1ff, 0x2, 0x7, 0x8]}]}]}}]}, 0x880}}, 0x24000000) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}]}, 0x38}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r8 = accept$netrom(0xffffffffffffffff, &(0x7f0000000140)={{}, [@netrom, @remote, @null, @null, @netrom, @netrom, @rose, @null]}, &(0x7f00000001c0)=0x48) getsockopt$netrom_NETROM_T2(r8, 0x103, 0x2, &(0x7f0000000440)=0x732, &(0x7f0000000500)=0x4) (async) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001800010000000000000000001d01000008000a00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=0x0, @ANYBLOB="08203f10", @ANYRES32=r7, @ANYBLOB="15000400030000e00a0100000325175362eb4cf204000000"], 0x44}}, 0x0) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@remote, @in=@multicast1, 0x4e24, 0x3, 0x4e24, 0x5, 0xa, 0xc46e41817de819ec, 0xa0, 0x3b, r1, r7}, {0x0, 0x3, 0x5, 0x5, 0x4b, 0x1, 0x1ff, 0x80}, {0x2, 0x11a5, 0x9, 0x8000000000000000}, 0x1000, 0x6e6bbc, 0x2, 0x1, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x4d6, 0x3c}, 0x2, @in=@broadcast, 0x3507, 0x4, 0x2, 0x2, 0x8, 0x11, 0x1b1fa000}}, 0xe8) (async) r9 = socket$key(0xf, 0x3, 0x2) close(r9) (async) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r10, 0x0, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r12, 0x84, 0xa, &(0x7f0000000080)={0x10, 0x3, 0x1, 0x7fff, 0x4, 0x5, 0xffffffff, 0x3}, &(0x7f0000000140)=0x20) (async) setsockopt$sock_int(r10, 0x1, 0x24, &(0x7f0000000100), 0x4) (async) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000105000300030000000900010073797a30000000000900020073797a32"], 0x84}}, 0x0) 8m19.153629157s ago: executing program 3 (id=851): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x65}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000040)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x7, 0x1e10, 0x4, 0x5, 0x30, 0x8, 0x8a}, &(0x7f00000004c0)=0x9c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', 0xfffffffffffffffd}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x0, 0x6, 0x1, 0x0, 0x0, [{{r1}, 0x10001}]}) 8m18.726398777s ago: executing program 32 (id=851): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x65}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000040)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x7, 0x1e10, 0x4, 0x5, 0x30, 0x8, 0x8a}, &(0x7f00000004c0)=0x9c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', 0xfffffffffffffffd}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x0, 0x6, 0x1, 0x0, 0x0, [{{r1}, 0x10001}]}) 2.964809415s ago: executing program 1 (id=4959): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000005440)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20008004}, 0x884) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89fa, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @multicast1}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(0x0) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x5) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x104}}, 0x0) (async) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="38b7ef7084f0a18f1f1500000007060101000000000000000002000002080006400000009105000100070000000900020073797a31000000000800064000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) 2.517101302s ago: executing program 0 (id=4965): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) recvmmsg(r1, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}, 0xd}], 0x1, 0x40000000, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x8927, &(0x7f0000000000)={0xfffffffffffffffb, 0xd93a, 0x0, 0x0, 0x0, [0x0, 0x0, 0xd]}) 2.227948221s ago: executing program 5 (id=4969): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000000c0)="30291213850fc7343b0d1df6", 0xc}, {&(0x7f0000000100)=' \n{\n', 0x4}, {&(0x7f0000000180)="91098f4feddd690acecc7d4a9338236e8cc2e5d12535292ae644055c6e9b616db53514b9d137ca65e0ba0531322186e33ae988a4e6f06a83ddfd4f99b49d77014162ae70aaa1ef251992614e1bff1e9a3d3b906bfb579abd950dbec6b6edaed4b2ea03a2b59b16092445b59d2a24d244d06071f0fff49b028256d7ee91ec0fc155a7", 0x82}, {&(0x7f00000002c0)="66648e2f3ff22c51611885e009daa2a72dc0c17b23101439f077efab00b3785b5ea91aa416b90f75c099b3e82e2c0e267108e6efe39da2e2401e98f52ad87637fdfb53d1d53992bcd13c5c1191b947bd784e8840a7a0f7dad2f248757ca7b681236e3bec2b61c4a5c5f54a07790c5af9582b413a305e7181fbcb7a16f7490bc1819752cfdfb38b7763a15793f42032b092e538936564278f1f987ab13438a464d526487b4fd434876936b99e9eaa294131d6b43f0a60dcdcafe2374451c99722f8ee879d90d41fbd6e3c15434af48ece4e2ca19806bff9fdebd846beaabaac1e24def6c0e79747a2e82e8c699b98632f0afd26", 0xf3}], 0x4, &(0x7f0000000400)="1ecbf1909643d0fbdeec1b8d67246633f96c626dcadc07ee2764b841d03abca940259365191823fba941040908fd8e6b9e2290d3d2db3bed63ff3f5b0dfd54b3c6e1888752e9536edeb14ccbe7d72809eef2646f6cbc376057ff1e33d0bb6ffb61ae7bc66dc7ae68ae509d5f24499cdf2e37659eff014164c444b7e27d571a0c4ec249026c9f5645a521c084496a5e4234842a6080cfae94cd61f8fd6b8862a6e7366b4a9b9d533e060352d808be91a488258de0affa66df3428d6fd0d613445290636340eee61a1d8e856cec0703372ef61beaa6c805fe68d0755f3a8a80cdeeb14f1cd1ed39ae16c3859fb6e16515332", 0xf1, 0x40}, 0x20008000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076"], 0xe8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) 2.065025151s ago: executing program 0 (id=4971): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) epoll_create1(0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="1800979adc000000000000000000000200000073011500000200009500000000000000a7be95556dabb99bc4283e60072a683db313cf408a74b6d90700558100000000000000a0c491e03a0ba2638153a16e2a00370af957dd3d646bd7e1a4f176bfe4bc7637beb1"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000520001000000000000000000020300000c00010001"], 0x20}}, 0x80) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @multicast1}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0xe, 0x0, 0x4}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}}, 0x0, 0x0, 0x16, 0x0, "0af5a21200000000000000065dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d3cb0f147c6d33a097d2269351b3ed30000000000491bd4321a93bf05"}, 0xd8) r7 = socket(0x2, 0x80805, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c"], 0x1c}}, 0x0) getsockopt$bt_hci(r7, 0x84, 0x1a, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) 1.780966667s ago: executing program 5 (id=4973): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0xc1ddfe9aa4c8d4f8, 0xffffffffffffffff, 0xfffff000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 1.649257209s ago: executing program 5 (id=4974): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x6, 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}}], 0x10) bind$can_raw(r1, &(0x7f0000000040), 0x9) close(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}}], 0x1c) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) recvfrom$inet(r3, 0x0, 0xa8fe, 0x40000002, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0xfea8, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113e00000000008510000002000000850000000500000095003300000000009500250500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) 1.615890514s ago: executing program 2 (id=4975): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc880) (async) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x541b, &(0x7f0000000240)={'sit0\x00', 0x0}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async, rerun: 32) r2 = socket$inet(0x2, 0x80001, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x1d) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r3, 0xfffffffc}, &(0x7f0000000180)=0x8) socket$packet(0x11, 0x3, 0x300) 1.395914233s ago: executing program 4 (id=4976): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x7}, 0x10) bind$netlink(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@type_tag={0xc, 0x0, 0x0, 0x12, 0x3}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x5f]}}, &(0x7f0000000280)=""/238, 0x33, 0xee, 0x1, 0x3, 0x10000}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0x34, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@printk={@u}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7ff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @snprintf, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xdbb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @tail_call, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0xffffff81, 0x1d, &(0x7f0000000640)=""/29, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x7, 0x8, 0xbd}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000700)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000740)=[{0x0, 0x1, 0xc, 0x5}], 0x10, 0x9}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x12, &(0x7f0000000000)=0x3, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @jmp={0x5, 0x1, 0x3, 0x3, 0x16, 0x2, 0x10}, @ringbuf_query, @generic={0xe, 0xd, 0x2, 0x1096, 0xffffffff}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, &(0x7f0000000080), 0x41100, 0x20, '\x00', r1, 0x0, r2, 0x8, &(0x7f00000003c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x5, 0x6, 0x5}, 0x10, 0xc24a, r3, 0x1, 0x0, &(0x7f0000000840)=[{0x5, 0x4, 0x4, 0xe}], 0x10, 0x3}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010429bd7000fddbdf2505000000200001800d0001007564701e735c6d8d99"], 0x34}, 0x1, 0x0, 0x0, 0x4c444}, 0x4000140) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000002040)={0x420, r7, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7d12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x944}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010100}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7fff, @mcast2, 0x4}}}}]}, @TIPC_NLA_NODE={0xcc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x28, 0x3, "951c58549618cbb23fa8dc0715093d2176d825e990d354acfa55a79ed444c0e536c9f90b"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "8f327978d8eb207bdbda55b149bf7d5d388dbb62988a45283f77c505b229806d88"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "5f403d75d68739abfbbf7d2861bd2fc4a944136e85456f6f73687162241708"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_BEARER={0x138, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcdcb}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xffffff7c, @private0={0xfc, 0x0, '\x00', 0xa}, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x518, @dev={0xfe, 0x80, '\x00', 0xf}, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @mcast1, 0x81}}}}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb0}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x502}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x506e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa90}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf75}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x598000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}]}]}]}, 0x420}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000500000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000000900010073797a30000000002c0004802800018008000100647570001c000280080002"], 0xc8}}, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="80000000", @ANYRES16=r10, @ANYBLOB="01000000000007ca1e638c5773e608000300", @ANYRES32=r11], 0x80}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000b00)={0x1510, 0x3b, 0x202, 0x70bd2c, 0x25dfdbfc, {0x19}, [@nested={0x155, 0xd1, 0x0, 0x1, [@generic="4cda6b83b21983f0397bb09f758e12fbbd879e26fb931392b66b1994440e0195181f7d743cd2e8f788af347ba73f3317049240ac3aa415bbf8e51a40c538e8ee0c864a92a9e27c5707c4b021f4f560847de43fe47085b70e5093148f96237bf2c1cdc2506a251fc35a", @typed={0xe7, 0xdb, 0x0, 0x0, @binary="d0733c49c72e3b2941bfba308ffaa5f69e70cdba9ca59140a8085c8f505dbc74454ec5c4f47cd9b10041b2d19985c9ab855dd517c9cb2a2d73a15a41800f6eb17842c802f2b4a3120ff7040638a8e33706c7754e3a4231f79a02eb3e1317ea084e76c26a1d20e99785c710bbf5b74e240f88d4983a6575f55f33876e3eaf92ab0337a92b76d9df56d17ee52dda2bc616118f268bf533177664345124c1c528474c931edee8edec4245e9f5ab4cd8594ecd7c8aad2f953957f24254b9bdb268e18529d272b0202779dbc864aca964af7043bed017f81438a2c5335605def99d43d33738"}]}, @typed={0x4, 0xb9}, @generic="a0454cfa14d9fa2aede3dd56fb1925ad537596525abbc2d7f94fd35cb1fda30087e0320e24ca04e9b13cf7c409220ddd0dcf807a788306f43e0a733f4703d11e390faba449146d0653aed5d260dec07709dd9f34c46b46b36e23726a43e1514aac64d19e87c62f1758e21decaacbe55a3a41522ba9e30d43eeaf0838d1c29e0a85e33c4415c6d122f5d6274ae2d55416fc014b2c6508b8dda6692c7d934ec699e59e5b8379eb0473eb23eff30149d0395867c59d68407d1161085564e1cdd6dbdfeaf11d4cbe53513912bfa730d9947967d39d6fc4c19c6d3c0a798165b08c4a34f65ad4781860192678db2f7f307162acb6c6c470b4b403", @nested={0x11b4, 0x24, 0x0, 0x1, [@generic="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", @typed={0x8, 0xf, 0x0, 0x0, @pid}, @generic="c48a5dd0c1e91908131e177141b23c7a465daa9e546d202050429ce08a35ebb145bb7e393924ab5234e1878ebe12aadea75a235dfade0e7d0ec49c079a2e440572ee238cb252b27e5614f21de121a49b7f5652071a90c582bea2c6ec17744507308effe50f5299c05f4c05001fda953c1f3ed825ae1027d4b23c6c1dfb32887cf212b8", @generic="6f338dafdec8ea1b580a3712c8a71701e5056ead85933b2dab4e055901076260bf623ef37d56d406b6adb5f7720c02d509c294b86f11ef4b2d2000131af2c36363959f8328bb361ad84f169a2858580a910498754f9d2c108cde2b7e5344cae5a162490e96a7695757c5e1a098ff215a086079dc37e11ebc29289fe53c057d53d00d4cca0eefa09b184fc49c5e9bda5f5c79e30b6cee8fddbb36c699996f357dc41964c441c3a12248caa1faf7fb12a86172a5f2e03a9b9f537908fa50bc10970458e237f72c8149f71b081cc97b1c3fce65cb42e7bfa08cc1a360e1d25bc2e0e6", @typed={0xc, 0x4c, 0x0, 0x0, @u64=0x10001}, @generic="456526eaf46226411df31a27fdfa449b31fb01ece25cafcdb5c713568a6b4ca694f086a9ae40102fd1fa067bbca60e8ce34a5d508f527120"]}, @nested={0xf3, 0x25, 0x0, 0x1, [@generic, @generic="798f73715b040fadcd04b57c4b4bdcc43e335764106dc599a29922310ccdebb77f02ba2877d345b876d4a10934283c2b1da1688c6e9279d3dd03fe410dc94dfa86fa22d2a5e621b945a047d8af7d664acf7f881b74cfb538ec64d87677a9be2fb92ed315e108c7d8740687925dc76eba5bd4f4c79d30c7abbdb5c7e9d9137ac7a81cbc56aa8487b587ae798abdeb9e4633b4f953eab9cdbca665ed8b643548e284e2b42971dc0608000b7f26c8e300378c136a89e2494dd06b9d5aa9d3ed2b9dad8d784f3a77a8e09f8983e5d371a350e18f22c22b3e490d1f1e8d9e350f2e23caba3038ac0fe8", @typed={0x8, 0xc9, 0x0, 0x0, @u32}]}]}, 0x1510}, 0x1, 0x0, 0x0, 0x4000011}, 0x4004) 1.348753513s ago: executing program 2 (id=4977): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000630000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x34, r1, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x34}, 0x1, 0x0, 0x0, 0x24000045}, 0x10) 1.276649466s ago: executing program 2 (id=4978): r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000004380)=[{{&(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010100}}}], 0x20}}, {{&(0x7f0000000300)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0x40000c4) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) ioctl$FICLONE(r2, 0x40049409, r2) r4 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000100)={0x2, 0xff, 0x7, 0x4, 0xf, 0x4, 0x4, 0x10, r5}, 0x20) r6 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12}, 0x48) connect$can_bcm(r6, &(0x7f00000005c0), 0x10) recvmmsg(r6, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000480)=""/214, 0xd6}], 0x2}, 0x7}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x40000000, {}, [{0x54, 0x1, [@m_mpls={0x1b, 0x1, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf47eb}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0) 1.144780498s ago: executing program 4 (id=4979): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket(0x2, 0x2, 0x1) bind$can_j1939(r1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) socket$packet(0x11, 0x3, 0x300) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000c00)=ANY=[@ANYBLOB="50000000100003050000", @ANYRES32=0x0, @ANYRES32=r4], 0x50}}, 0x0) sendmmsg$inet(r0, &(0x7f0000003e00)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000280)="6285bc8e55ff77e20b162b3eb33b53b4c57adefe2f1878aaa21fe3eff2fdabe947806c53ebaa87867709ed647f7e4757cdb146ce7270d106f681e234088bddb9d1b0e37ea04f500cf89569eb13ae97eaf72be5b27517664cfbb6cee1ea1071f4b84430c3ab92e92ca9b7d101160dbbfb453b856d", 0x74}], 0x1, &(0x7f0000000540)=[@ip_retopts={{0x90, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0x3c, 0x3a, 0x3, 0x2, [{@multicast2, 0xfe5}, {@empty, 0x1}, {@multicast2, 0x9}, {@rand_addr=0x64010100, 0x7}, {@private=0xa010101, 0x1}, {@private=0xffff, 0x8}, {@broadcast}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x7d, 0x0, 0xf, [0x6]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0x26, 0x3, 0x7, [{@broadcast, 0x9a}]}, @rr={0x7, 0xf, 0x7b, [@loopback, @multicast2, @multicast2]}, @timestamp_addr={0x44, 0x14, 0x9e, 0x1, 0x8, [{@multicast1, 0x9}, {@multicast1, 0x9}]}]}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@rr={0x7, 0x2b, 0x31, [@rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @multicast2, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast, @multicast2]}]}}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@generic={0x44, 0x4, "d99e"}, @timestamp_prespec={0x44, 0x1c, 0x67, 0x3, 0x3, [{@remote}, {@broadcast, 0x81}, {@remote, 0x1}]}, @timestamp={0x44, 0x10, 0x9b, 0x0, 0x5, [0x9, 0xa, 0xc]}, @noop, @cipso={0x86, 0x2e, 0x1, [{0x2, 0x12, "de2e99b1daf08f72eeb01b63d64cd68a"}, {0x1, 0x6, "bdd01ba6"}, {0x5, 0x6, '7Un3'}, {0x7, 0xa, "64a013c7b4a8bce6"}]}, @timestamp={0x44, 0x14, 0xd3, 0x0, 0xc, [0x6, 0x7, 0x909, 0x5]}, @timestamp={0x44, 0x8, 0x7, 0x0, 0x4, [0x8]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @remote}}}], 0x180}}, {{&(0x7f00000003c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000940)=[{&(0x7f00000006c0)="3772a8146dabca5e7c5d368366f168edf5ed4e1a4015b43c7d3f4add2be083625c99f896ff9ac8e8ab8ab729358903840d8e0bceb5332595c5b852b6d4db9e332901b936b2347be82fad21737588b8bbcd618008961b230337513cba0324a754563f6f0b4f942833e33d3e051e38bec84f472bb01da0fd87e69364be485ac1ff6ae362abf9bc4ccb8b72542a0c993a9e29e4c73d81", 0x95}, {&(0x7f0000000780)="23fdb65a3c72349a0fd80aec4461f9807f76aed9b948ba83f841023cfe434cdbb195b757c9951e8d24015309703aa415677dc522fd43e9eb52da4e8a18fde40bd199257f527238c3e651e6e496a8f33c940151bd01cb631f0641e4674972ced9cb9e9c6ebb1605e9ab3cc7157bc373ee738d7ad1275b4cf58239f359", 0x7c}, {&(0x7f0000000800)="5e7c72aecb1da3db60ef02c214f4de35b51eb10d1ff3ba9a00c2d257099ae0f3b97efc912d09f428d011bce849928af79026197551a11ac204e3a80579ed6119ee26872e60664a17590f31d4b5d3c2276e94d04c5992d39714a4356e08bd2a84b7a5d1ed5a69f4849452003dc67c61689f45b6ae0b83cca5a167a16f9a0167ef238edb8e94a076fedbb1f19970fa68a6351f8913e73e4667414b9e3cd4c12ef794ed", 0xa2}, {&(0x7f00000008c0)="df1884f66ed8f76db9da8ccc6ebfcae2e1e43ca2c0240d2a7750ec19d489f5c771273dd1a96a4df0d27e327dee3966cb279cc8a886ff3ceef22e2016e75ff2518c6ad24883b6ec", 0x47}], 0x4, &(0x7f0000000d80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x400}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000dc0)="ff8cce9f1692427b529f489907eda761e3de5ee5f93d02922e7bcac07a00a047664649f4f3dd039a52037d1f3e9302e3fedf715b2298a494ed24bc5eea98b58a1e14ce2daffa778bbc7325b7bf954c5d0b9452ce380d465d4b14cb87fea5aedfae783a1636f3ad9ccb6ea285122f415cfb23e46d7892225ecff2f9a1f62d58986d83e62200cfa220d721ce7c501fd1af4e031d5832cc3c32f92f8b1e6bdd875c44160ce59abe80baaa8c69ea61dad12c0b5c809de0d43d9989150db762725fd37d123ca2e3a78622d007e6c41b788c29b30261acc566b671a8cebc2bfa567ba593a33e5b36d781", 0xe7}, {&(0x7f0000000ec0)="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", 0x7a6}, {0x0}], 0x3, &(0x7f0000002280)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x1b, 0x0, 0xe, [0x2]}, @generic={0x83, 0x2}, @cipso={0x86, 0x3b, 0x1, [{0x5, 0x3, "0f"}, {0x1, 0x4, "c5b6"}, {0x5, 0xa, "df5e1ebf595566ee"}, {0x0, 0xb, "db43ce0e29432694d0"}, {0x7, 0xa, "0bc2b727ffcddc91"}, {0x7, 0xf, "72df037c76097d5f909411f7be"}]}, @rr={0x7, 0xb, 0xa0, [@broadcast, @private=0xa010101]}, @generic={0x89, 0xc, "a2cb98bdbe0f1ae16da2"}, @ssrr={0x89, 0xf, 0xf2, [@multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x36}]}, @rr={0x7, 0x23, 0x4e, [@dev={0xac, 0x14, 0x14, 0x13}, @loopback, @rand_addr=0x64010102, @broadcast, @loopback, @private=0xa010101, @remote, @rand_addr=0x64010102]}]}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x64, 0x3, 0x2, [{@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x176}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@remote}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x44a}, {@local}]}, @ssrr={0x89, 0x23, 0x8d, [@remote, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local, @local]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xac99}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010100}}}], 0x188}}, {{0x0, 0x0, &(0x7f00000036c0)=[{0x0}, {&(0x7f0000002540)}, {0x0}], 0x3, &(0x7f00000038c0)}}, {{&(0x7f0000003980)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000003d40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80}}], 0x48}}], 0x5, 0x40) 1.078417106s ago: executing program 0 (id=4980): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) write$ppp(r1, &(0x7f00000000c0)="102d104e9b00feff0a6becfce2a732a973858bc8d29542", 0x17) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x1) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x6044080}, 0x4800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x16, 0x701, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x854) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}]}, 0x38}}, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000080)={0x4}) 1.026872216s ago: executing program 2 (id=4981): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x3, 0x4}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x4a}, 0x20) r0 = socket(0x10, 0xa, 0x0) r1 = socket(0x2b, 0x1, 0x0) listen(r1, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x8, 0x4, 0x20, 0x0, 0x1, 0x0, 0x6, 0x7, 0x0, 0xa}}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000119ca000000000000000000000a30000000160a01080000000000000000020000000900020073797a32000000000900010073797a300000000004000380140000001100010000000000000000000000000a"], 0x58}}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f00000005c0)={&(0x7f00000000c0)=@can={{}, 0x80, 0x3, 0x4, 0x2}, 0x210}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000000000000000a0000000000000006000700080000000c000880080004006401010008000500", @ANYRES32=r3, @ANYBLOB], 0x34}}, 0x4000) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000040), 0x4) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000200)) 972.845136ms ago: executing program 1 (id=4982): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="120000ff0b000000000000f507000000000000004397d1c35fc333da473250c317dad61900000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r1}, 0x20) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, 0x0, 0x43059294f10fa146) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r7, 0x106, 0x1, &(0x7f0000000400), 0x4) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000015b40)={0x0, 0x0, &(0x7f0000015b00)={&(0x7f0000015a40)=ANY=[@ANYBLOB="38000000130a0500000000000000000005000003040008000900010073797a30000000f40ab118db4e72ee31000000000800034000000006"], 0x38}}, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x4}}}}]}, 0x40}}, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRESOCT=0x0], &(0x7f00000019c0)=""/4111, 0x2a, 0x100f, 0x1, 0x7}, 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000004000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000057ccbf18e14461a4f7b90e54050e0b8ffb200e7c70cb23ac3339cc4e2618b796a253a2ba3557007cc254ce13d1137ab757eb8f29233cd1651f3214ee6f1df379869c00723688f0b053df21814845dce3cbfc6b6e8b8c57fcf6b36343c4874e3ae1c2c462434e064162fde59602176473461c701f680588b909d5172ae9743ef2442342e7d81a03805196155460fa69e8aecbdb83a1f712ed09726893b3f14f460b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) getsockname$packet(r14, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r15, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r15, {0xffe0, 0x8}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r16 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x8, &(0x7f00000017c0)=ANY=[@ANYRES16=r6, @ANYRES32=r3, @ANYRES32=0x0], &(0x7f0000000040)='GPL\x00', 0x80, 0x4b, &(0x7f0000000100)=""/75, 0x41000, 0x30, '\x00', r8, 0x0, r9, 0x8, &(0x7f00000001c0)={0xa, 0x6}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x8, 0x0, 0x43}, 0x2, 0x2c712, r11, 0x0, 0x0, &(0x7f0000000300), 0x10, 0x4}, 0x94) connect(r2, &(0x7f0000000680)=@llc={0x1a, 0x110, 0x2, 0xf2, 0xb, 0x1, @random="97aca522b187"}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r16, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 913.288173ms ago: executing program 4 (id=4983): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x5c, r4, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x191}], @NL80211_ATTR_FRAME={0x2e, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2}, @device_a, @device_b, @initial, {0xe, 0x503}}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x0, 0xac, 0xc}}, @val={0x3e, 0x1, 0x1}, @val={0x76, 0x6, {0x3, 0x0, 0x12, 0x6}}}}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) setsockopt(r1, 0x84, 0x81, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004380)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000001c0)='K', 0x1}], 0x1}}], 0x2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 0x4e21, 0x0, 0x0, 0xa0, 0x10, 0x33, 0x0, r6}, {0x9, 0x100000001, 0xff, 0x23, 0xffffffffffffc7e4, 0xc, 0x6, 0x7fffffffffffffff}, {0x2782, 0xb, 0x5, 0x6}, 0x4, 0x6e6bb3, 0x2, 0x1, 0x1, 0x2}, {{@in=@remote, 0x804d3, 0x6c}, 0x2, @in=@rand_addr=0x64010101, 0x3501, 0x1, 0x0, 0x3, 0xba1, 0x21, 0x8}}, 0xe8) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={0x0, 0xfffffffe}, &(0x7f0000000380)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711219000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 883.724331ms ago: executing program 1 (id=4984): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @dev={0xac, 0x14, 0x14, 0x3d}}, @address_request}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4005) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000003c0)=0x10, 0x800) recvfrom$llc(r1, &(0x7f0000000400)=""/28, 0x1c, 0x40, &(0x7f0000000440)={0x1a, 0x10e, 0xc1, 0x4, 0xbf, 0xab, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2}, [@map_fd={0x18, 0x8, 0x1, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0xd, &(0x7f0000000140)=""/13, 0x41000, 0x2e, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x4, 0xf5, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000200)=[{0x4, 0x5, 0x5, 0x2}, {0x1, 0x3, 0xf, 0xa}, {0x0, 0x5, 0xa, 0x7}, {0x1, 0x4, 0xa, 0x4}, {0x5, 0x1, 0xc, 0xc}, {0x4, 0x4, 0x5, 0xa}, {0x1, 0x2, 0x7, 0xa}], 0x10, 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) 882.352213ms ago: executing program 2 (id=4985): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f0000001140)=""/4096, 0x1000, 0x0, &(0x7f00000005c0)=""/151, 0x97}}, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0xb, &(0x7f0000000700)=@raw=[@call={0x85, 0x0, 0x0, 0x22}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x9, 0xb, 0x9, 0x4}, @generic={0xb, 0xc, 0x6, 0x3ff, 0x8}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000780)='GPL\x00', 0x1, 0x1a, &(0x7f00000007c0)=""/26, 0x41100, 0x1, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000000800)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0x4, 0x72d, 0x1}, 0x10, 0x1867c, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{0x1, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x18, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x4, 0x0, 0xb, 0x1, 0x9, 0x6, 0x1}, @ldst={0x1, 0x0, 0x6, 0xb, 0x8, 0xffffffffffffffe0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0xfffffffa, 0x8, &(0x7f0000000500)=""/8, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2e, r4, 0x8, &(0x7f0000000580)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, r5, r6, 0x1, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, r7], &(0x7f0000000ac0)=[{0x0, 0x2, 0xe, 0x4}], 0x10, 0xb91e}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$isdn(0x22, 0x2, 0x24) close(r9) r10 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$can_bcm(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x3, 0x546, 0xffffffff, {0x77359400}, {0x0, 0xea60}, {0x1, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "3c6327bb9b1a100465d91530bdcf59a443b21c875a3ba725d0572b240bf9c1787f0491668b8dbfd897c3fa2795a17655d788bfb07a7bec9520023e52d910be31"}}, 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x40050) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001100)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff2, 0xffff}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 761.04898ms ago: executing program 0 (id=4986): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendto$inet6(r0, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001300010000000002ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="5b2a1087f4aa0100000000000000000a0001004780d850641600001400350064756d6d7930000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 760.142636ms ago: executing program 1 (id=4987): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004415}, 0x20000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000010c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000c00000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ac0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)={0x4c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004415}, 0x20000000) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000010c0)={r0}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000c00000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 758.139339ms ago: executing program 4 (id=4988): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000340)={0x0, {{0xa, 0x2000, 0x2080000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, {{0xa, 0xfffe, 0x0, @mcast2, 0x200}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(0xffffffffffffffff) close(r0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', r3, 0x0, 0x417}, 0x18) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001780)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) 645.420252ms ago: executing program 5 (id=4989): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x44, r1, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0xffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0xe, 0x0, 0x0, 0x80}, 0x94) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000780)={0x0, 0x226, 0xffffffff, 0x1323, 0xe, 0xdf0, 0x4, 0x10000, {0x0, @in6={{0xa, 0x4e21, 0x7, @loopback, 0x9}}, 0x80000001, 0x4b, 0x7fffffff, 0x2, 0x3}}, &(0x7f0000000840)=0xb0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000500), &(0x7f0000000540)=0x4) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x100, 0x9}}}}, [@NL80211_ATTR_COOKIE={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a300000000009000100737a300000000014000380080002400000000008000140000000001400000011000100000000000000e8ffffff000a00"], 0x68}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0xd, 0x1, 'batadv_slave_1\x00'}]}]}]}], {0xfffffffffffffc4a}}, 0x70}}, 0x24040880) sendmsg$nl_generic(r3, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003800010000ffdb49bad9086adf250a000000b06fdb7c12222c1a0008cb91716ca03285b5e0f7a04e119a9983b77cde070000003010082e09776e7a4a2eabd94ebf2a6fc469b918cdfa8d58f74b048f6d1bc75ad5f8f652ccb3000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRESOCT=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 618.178256ms ago: executing program 4 (id=4990): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff80}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xee, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xc7, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8881}], 0x1, 0x20006850) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x10000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'sit0\x00', &(0x7f00000006c0)={'syztnl0\x00', r2, 0x80, 0x10, 0x8, 0xaa, {{0x2c, 0x4, 0x3, 0x1, 0xb0, 0x65, 0x0, 0x10, 0x4, 0x0, @empty, @private=0xa010100, {[@rr={0x7, 0x1b, 0x88, [@rand_addr=0x64010101, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xf}, @loopback, @rand_addr=0x64010100, @local]}, @timestamp_addr={0x44, 0xc, 0x17, 0x1, 0xb, [{@loopback, 0x5}]}, @timestamp={0x44, 0x24, 0x82, 0x0, 0x5, [0x7ff, 0xffff1f25, 0x3, 0x4138, 0x5, 0x2, 0x1ff, 0xd]}, @end, @cipso={0x86, 0x50, 0x3, [{0x7, 0xf, "ac2e3730428b45d562760686ea"}, {0x0, 0x6, "2765aeed"}, {0x1, 0xf, "044211213d56f121a0f9c23427"}, {0x5, 0x8, "49779898b1da"}, {0x0, 0x8, "08303643dc36"}, {0x0, 0x7, "2a4664f5a9"}, {0x6, 0x4, "57dc"}, {0x5, 0xb, "054c3f0c7ac3a0aeda"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000900)={'syztnl2\x00', r2, 0x29, 0x9, 0x54, 0x79a6, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x8701, 0x7, 0x2, 0xfffffffb}}) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x4}, @ETHTOOL_A_RINGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @ETHTOOL_A_RINGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xfffffffe}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7ba4}, @ETHTOOL_A_RINGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x84}, 0x4008004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000f00000000000000960c0020180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000060000008510000006000000184500000800000000000000000000009500000000000000ca271a83a8903e84d624"], &(0x7f0000000080)='GPL\x00', 0x26a, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x6, 0x1, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000004c0)=[r0, r0, r0, r0, r0, r0], &(0x7f0000000500)=[{0x2, 0x5, 0x8, 0xc}, {0x1, 0x3, 0x5, 0x7}, {0x1, 0x3, 0xa, 0xa}, {0x2, 0x4, 0x0, 0x3}, {0x2, 0x4, 0xd, 0x6}, {0x3, 0x4, 0x2, 0x5}, {0x1, 0x4, 0x6, 0x2}], 0x10, 0x80000000}, 0x94) 497.952098ms ago: executing program 2 (id=4991): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0xf681, @none, 0x7}, 0xe) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0x8004b707, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)="a17abd7c18cf849b288a9ccf2f6cd01576a60e6a75d6095b906da81195ee210632ff5cdbe4df675c43a84cd27a40c1d374c2dd354d30bcd60c2a2b860f008238d717d6cf0b4e0ac29adfbbbc393abeb74c65354f62d57392aa528e867c9db4d77bb7f63d2527382860a9ec32c53b2899227748bff0ecff", 0x0, 0x800}, 0x38) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000000)=@base={0xa, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYRES8, @ANYRES64=r1, @ANYRESHEX=r2], 0x68}}, 0x4000) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="09000000010001", 0x7) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r7 = socket$inet6(0xa, 0x3, 0x7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="000b000000000000240012800c0001006d6163766c616e001400028008000900060000000800070009000000140035006d6163766c616e30"], 0x58}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121e000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x2000000, 0x0, 0x2}, {{@in=@local, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000ac0)={{{@in=@initdev, @in6=@private1}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8) r9 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) recvmmsg$unix(r9, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x7}}], 0x1, 0x2080, 0x0) 497.532321ms ago: executing program 0 (id=4992): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) (async) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) (async) close(r4) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x50}}, 0x0) 490.270124ms ago: executing program 1 (id=4993): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket(0x2, 0x2, 0x1) bind$can_j1939(r1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) socket$packet(0x11, 0x3, 0x300) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000c00)=ANY=[@ANYBLOB="50000000100003050000", @ANYRES32=0x0, @ANYRES32=r4], 0x50}}, 0x0) sendmmsg$inet(r0, &(0x7f0000003e00)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000280)="6285bc8e55ff77e20b162b3eb33b53b4c57adefe2f1878aaa21fe3eff2fdabe947806c53ebaa87867709ed647f7e4757cdb146ce7270d106f681e234088bddb9d1b0e37ea04f500cf89569eb13ae97eaf72be5b27517664cfbb6cee1ea1071f4b84430c3ab92e92ca9b7d101160dbbfb453b856d", 0x74}], 0x1, &(0x7f0000000540)=[@ip_retopts={{0x90, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0x3c, 0x3a, 0x3, 0x2, [{@multicast2, 0xfe5}, {@empty, 0x1}, {@multicast2, 0x9}, {@rand_addr=0x64010100, 0x7}, {@private=0xa010101, 0x1}, {@private=0xffff, 0x8}, {@broadcast}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x7d, 0x0, 0xf, [0x6]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0x26, 0x3, 0x7, [{@broadcast, 0x9a}]}, @rr={0x7, 0xf, 0x7b, [@loopback, @multicast2, @multicast2]}, @timestamp_addr={0x44, 0x14, 0x9e, 0x1, 0x8, [{@multicast1, 0x9}, {@multicast1, 0x9}]}]}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@rr={0x7, 0x2b, 0x31, [@rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @multicast2, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast, @multicast2]}]}}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@generic={0x44, 0x4, "d99e"}, @timestamp_prespec={0x44, 0x1c, 0x67, 0x3, 0x3, [{@remote}, {@broadcast, 0x81}, {@remote, 0x1}]}, @timestamp={0x44, 0x10, 0x9b, 0x0, 0x5, [0x9, 0xa, 0xc]}, @noop, @cipso={0x86, 0x2e, 0x1, [{0x2, 0x12, "de2e99b1daf08f72eeb01b63d64cd68a"}, {0x1, 0x6, "bdd01ba6"}, {0x5, 0x6, '7Un3'}, {0x7, 0xa, "64a013c7b4a8bce6"}]}, @timestamp={0x44, 0x14, 0xd3, 0x0, 0xc, [0x6, 0x7, 0x909, 0x5]}, @timestamp={0x44, 0x8, 0x7, 0x0, 0x4, [0x8]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @remote}}}], 0x180}}, {{&(0x7f00000003c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000940)=[{&(0x7f00000006c0)="3772a8146dabca5e7c5d368366f168edf5ed4e1a4015b43c7d3f4add2be083625c99f896ff9ac8e8ab8ab729358903840d8e0bceb5332595c5b852b6d4db9e332901b936b2347be82fad21737588b8bbcd618008961b230337513cba0324a754563f6f0b4f942833e33d3e051e38bec84f472bb01da0fd87e69364be485ac1ff6ae362abf9bc4ccb8b72542a0c993a9e29e4c73d81", 0x95}, {&(0x7f0000000780)="23fdb65a3c72349a0fd80aec4461f9807f76aed9b948ba83f841023cfe434cdbb195b757c9951e8d24015309703aa415677dc522fd43e9eb52da4e8a18fde40bd199257f527238c3e651e6e496a8f33c940151bd01cb631f0641e4674972ced9cb9e9c6ebb1605e9ab3cc7157bc373ee738d7ad1275b4cf58239f359", 0x7c}, {&(0x7f0000000800)="5e7c72aecb1da3db60ef02c214f4de35b51eb10d1ff3ba9a00c2d257099ae0f3b97efc912d09f428d011bce849928af79026197551a11ac204e3a80579ed6119ee26872e60664a17590f31d4b5d3c2276e94d04c5992d39714a4356e08bd2a84b7a5d1ed5a69f4849452003dc67c61689f45b6ae0b83cca5a167a16f9a0167ef238edb8e94a076fedbb1f19970fa68a6351f8913e73e4667414b9e3cd4c12ef794ed", 0xa2}, {&(0x7f00000008c0)="df1884f66ed8f76db9da8ccc6ebfcae2e1e43ca2c0240d2a7750ec19d489f5c771273dd1a96a4df0d27e327dee3966cb279cc8a886ff3ceef22e2016e75ff2518c6ad24883b6ec", 0x47}], 0x4, &(0x7f0000000d80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x400}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000dc0)="ff8cce9f1692427b529f489907eda761e3de5ee5f93d02922e7bcac07a00a047664649f4f3dd039a52037d1f3e9302e3fedf715b2298a494ed24bc5eea98b58a1e14ce2daffa778bbc7325b7bf954c5d0b9452ce380d465d4b14cb87fea5aedfae783a1636f3ad9ccb6ea285122f415cfb23e46d7892225ecff2f9a1f62d58986d83e62200cfa220d721ce7c501fd1af4e031d5832cc3c32f92f8b1e6bdd875c44160ce59abe80baaa8c69ea61dad12c0b5c809de0d43d9989150db762725fd37d123ca2e3a78622d007e6c41b788c29b30261acc566b671a8cebc2bfa567ba593a33e5b36d781", 0xe7}, {&(0x7f0000000ec0)="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", 0x7a7}, {0x0}], 0x3, &(0x7f0000002280)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x1b, 0x0, 0xe, [0x2]}, @generic={0x83, 0x2}, @cipso={0x86, 0x3b, 0x1, [{0x5, 0x3, "0f"}, {0x1, 0x4, "c5b6"}, {0x5, 0xa, "df5e1ebf595566ee"}, {0x0, 0xb, "db43ce0e29432694d0"}, {0x7, 0xa, "0bc2b727ffcddc91"}, {0x7, 0xf, "72df037c76097d5f909411f7be"}]}, @rr={0x7, 0xb, 0xa0, [@broadcast, @private=0xa010101]}, @generic={0x89, 0xc, "a2cb98bdbe0f1ae16da2"}, @ssrr={0x89, 0xf, 0xf2, [@multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x36}]}, @rr={0x7, 0x23, 0x4e, [@dev={0xac, 0x14, 0x14, 0x13}, @loopback, @rand_addr=0x64010102, @broadcast, @loopback, @private=0xa010101, @remote, @rand_addr=0x64010102]}]}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x64, 0x3, 0x2, [{@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x176}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@remote}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x44a}, {@local}]}, @ssrr={0x89, 0x23, 0x8d, [@remote, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local, @local]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xac99}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010100}}}], 0x188}}, {{0x0, 0x0, &(0x7f00000036c0)=[{0x0}, {&(0x7f0000002540)}, {0x0}], 0x3, &(0x7f00000038c0)}}, {{&(0x7f0000003980)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000003d40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80}}], 0x48}}], 0x5, 0x40) 413.061086ms ago: executing program 5 (id=4994): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{{0x4, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}], 0x10) pipe(&(0x7f0000000000)) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000040)=0x1, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x41070, 0xffffffffffffffff, 0x2000) 412.676579ms ago: executing program 4 (id=4995): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406200c5c0009003f0006180a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000780), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x80003, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x3, 0xf5, 0x0, 0x0, 0x9, 0x0, 0x1}}, {0x6, 0x2, [0x49bf]}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 119.994936ms ago: executing program 1 (id=4996): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x21, @any, 0x0, 0x1}, 0xe) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)={0x24, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x0}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r14, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) r15 = socket(0x2a, 0x2, 0x0) getsockname$packet(r15, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x69}}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r16, {0xe, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}]}}]}, 0x5c}}, 0x4000) r17 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r17, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17.024432ms ago: executing program 5 (id=4997): syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000001a1aa86dd6000000500140600fc000000000000000000000000000000ff10000000000000000000000000000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4, 0x0, @private1}}}, 0x108) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @multicast2}, 0x10) r5 = epoll_create1(0x0) epoll_wait(r5, &(0x7f0000000080)=[{}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0xfa9d22440cc8358d}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) setsockopt$inet6_group_source_req(r3, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x4e22, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x108) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000001a1aa86dd6000000500140600fc000000000000000000000000000000ff10000000000000000000000000000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00)) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4, 0x0, @private1}}}, 0x108) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @multicast2}, 0x10) (async) epoll_create1(0x0) (async) epoll_wait(r5, &(0x7f0000000080)=[{}], 0x1, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0xfa9d22440cc8358d}) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x4e22, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x108) (async) 0s ago: executing program 0 (id=4998): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2040000}, 0x40) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80000054eb", 0x2e}], 0x1}, 0x6400000c) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="04975697413104474cdfb598", 0xc}, {&(0x7f0000000240)="89d3c05e2f60dd8c0682db12", 0xc}, {&(0x7f0000001940)="a702c27bf06db98cdf8d6889422019c0b20a0a589054612bc8b9aa12732b5894b3c2d33be1f984c47d286b219241aefd3c8c01f9843c6e8fb0e19e0c0743a2532975634b87c108677948f86f35b5eecd56f3b769bcfa672442f58bd4199e03bf4ea9385cd1df984d2958938330a1cd148cde179da1e2f11ca51a529ea58803884e2b6978de1a4127626ec37a290e73ca8d6d8ddfdfd53755d167ba8b2cd2fbff86ac34b7db68e9875e4307792830f899f0c75e418f58ce82039ce193097579f3aceff36ec054c4672cc8969f69efe1015860c8ffffecec6de646fb793021c2bb996dc9f7e6a72620e7cd729f1c24e8eeb58eb51a928570468e1fb23641e00fa426f6c24450abbde87f8833f0ee367758834d877babd4a80518cdcb04d6352e52d8abd6443757bd6ca779f0e57b25698598cdf11f8b45108cb1384fccab4aec1347e71eafcfafaadd4360716c11eb4d11864131df20db52730a242f45ccd6bc3dc02589c0e2a979b752986c692a4dff8ab71c5574220ae28bdb94c7e4ecf4b04e9ca4b68db1b27d0c2e8eea02487f5df0cb948cb2520694a6cb1dee45e0ef6d10925020001e0b49e1887f2c7e7dd98a4c04578e393b8bb7827868953f7587f5262aaf9f3d0803cd7e1ebc476f9407df2a9fea1349c80e14d094e3e203b18bd5bdee5453ad7817c73c974e753cdf923e9333c001cef33d89f8882adc5b5a491baecf9deb9199fd9e4740070183159818f1d527b0c369d590ec4988b7ed124eb9b34c050d426165f3ac392f2fc0dad59578c2498a755113f1e2207312e72fad25b59c0886c1242ed416e58d8fbff8e2ccf89d1aa87cde308c36e3c53c842a661df51449bd224cd967310172ad7165e6976e47cb7d191544d54170fdabdf9482e2b24d8a58376ea7cf60b347b55a259bf2eddb9e9d3aca20422dedcc9af246ead386662fdf14735a6e0deec38d23fbcebcc30349badcfb85308bd61354451d8199d9f53db36019d3d8e0db0becc5e1439c8104414d4020fa1f7298705becf897902d550862f1630a36773f585d0b122555632b7c333282b06d99a352daa20fda91c4406778dc36dcc5e73b8fa3048c53e30c762ede7be96880a1e3229a0bf88f8cc4e1c89571182e3dbdb5df2720ddf34f111314040c2f4ed3daf234a960e19d902fe68b41701c7834d9b092132f0b189cda43512319479475623598c4d1a00787f2ef605ff9289b180bbf17b62abaa1bea1429bc468f6f5df7fffcc7784a69338701a1e0fb471d3b17dba61e22705fe087b803faae47d7e338099021461a412af3ad4f94d6cea74fd858e5f39acdd93fc59c8970e00efc6cd78311d0859fab70c7de88d099c86743c8324427c7e931c0b50f54ab2d66bfc5eb474a2efd8ba91923825bacffff39d074e018373a36b55885cc1e2bbb5f8f7b001942e9e3dfb7f35e7b44b7c513ecc91f518d0d0577b9926961bcea1b468ee5f3d50d0cf188c81790dbb156be77eb6e69f5e2b922e13d8b92baef4125d802cfed1a097e3d9abb2b03e6566c17d24f78a6a29687188f22030c4f0e75935aea670bc038cee6e7827c66b772fe3bc17e5dcb66a371cda6ab8f95c199f23c8cfb98862947604c87973540ba650de26ceeaa118af2f8d51593c0bfab9a49360c862b5d2f0cd4912d42ab3a4830700ce125195190e28c20c44700b4c547d762b9d76aae14bcae36412fb8911a385ba5bda57f8cfeadf8f6e409226534866a61ee15cb5ad80cf22110176cf59db4e82207e3a5c12fb2afc1474ac7f6dd6c3f59a1f35caf41b9c75b98e3fdcee8ba0f62e0f66049ec52252990cb74339316e2878d76e5768096d16eed915721cd4cf2fbb8740ce3a483d95b15c28037e4f08568ce29e297f0fb9178ac6a3050e3311e57567b6a43e29fda3f6fe0116dcbb9999442d92902dbd030a806284e4702b68c49012738eab4ca6917ac15c333d9956abcc259887c0d804421569f67cda25ae113bf60c763d41bc96e1bbc984681fab5c0d74a1c5934d588f6eefea6cf186fb15b0d9fc3c656504fc542a7005f7f6a621476388b3cbb1d2fa6214cc62faacb3769fc7b5826af801f59d06d19cccac68eeb050b9d7f79b6263350178024072581b17f193d9700f63f7280f09f250988532ff9fb2baf6150f8ca02723e653662430df0e1cba59535448534d8b99a4869aa0e5f5ddde36bcce7b4c5018342bc73b0bafec14f27baa86ebaa0ae465686786a59ab7e6f443dc37154f43ee6128391f074929e9ec2b02835d83e04fffc6f0eec6de6d18b8396cc73b9e7634e9ca2838ebd710be87a9fe8d5a8619891a003fcd1c2c7e71b0df7c1bbf1efc3b69ef52053d29830c38e5eb6b3355ed23212bce370c9168f5dd17d5259642946c07eacfe1288105fe0beefcbee1828e1faf5cd9e030c35749b83ff25372757cf1dc7d27d963392d403e1d02ceac641b0d297b9ad07c45584f1717e0fdc96e105bdc421c8a8ebc9af1d2862729b4bd720d73bce506b9e37aa765ca3d5875cb52c2ae76579854455035cbc91fd71bd011326f3bd1dd4fcd56b9fe052336b85b4ed79c3c2a40f57a3dedacc9154b3cbbdf766c7d916d5aed0ba2c2724bcd97ec20da3e40b7e9a724d513f9ef6ed94c8afcc25c38ec2eb9267ef4dd07c7783decc2bc3e8b67e71dd54472b67e5bbe614856b96e1a3951b0c34668269116147b349b8ca5efd06e88a46c4dabf81c11cc1b46ffb9b9f7a8911fc8ad8b489f03f6faf9f231553cb4ad74470c330715781c9544ab48c38369265513952cc9f1063f43077390dbc59d704336e5f504e683ce34d1b02e76d4d2a689d2b401172245e3165a98e74e2aab0c7251cf8d59d377df853795c3fced7998025d5f851fdfb797a3a8dffff9b7fab792dfb60dcace3aada03c58baa51d79e0b8cd04017d9b193a2f9d732c1cef477c1683d923f70718d4be2deba348a418f1453414e4482b79813e34e1b7dfd5ac854b80e412d1d642f5a7f6132ad6c6eae847d6900a0efefa7a73ade315c25c1c0ec843394d315c10cc8b775b61c42507cc12b323a8734cd70bb1608be5355544009cd739e3d11701bf861901f40c7575093f8b619188303161100aa828f3d8fff2ba09b4d98ecbfd86d649f8b8224403921b8c0045a0cf501792c92d7571fb6f4137149b3f2b564c8d59cd2274cfa8e2caeeb4e6c47120a5a1cb6f3b9f817b12fc2a960a9aec82569bd0397cc3b686363c74672fe6627f69ba74f23f8093de16fa9e01694d81dec03a26c2573bd9dae8bd0edb97f6ff1e41af299118d6e17f81b20df90b22034b487e553dc6efc6ec6b8dd4659af003f4d187e519092ebfd332d58b37069b0b71df37f34ca89d9ce58e9000f3e5af502a4c0e486aa489826f1b2f397da15929e51aca8ba61c1fe6a0acea6481423f7168146c1b6213988b051a8209ff5fedbebe8993ea28cc0877a3af310c3e9aab2f9fafeee0605741abf51d9ade538450ff627dbc5ed266e11521922671afe6bca00709e9499387831f0961d9d78d437ea05f30996d4c3748aec2ab32879f3b2c553fd28028e57211443d3187373c60dfe083edc1e8ca29f4962a0c32c4d822523aef785094c36bd1006b33ab84819b36fbdb9bfefe1f3b0203fc056c0d332e323f881e04419a533201764a2bf4f4d09cdc82ed7581d9c08eaab4250a85c2fa2344492f5fd8ee25141972f8dedfa4f2f4c37bd356be7bdd061c396c3533ebbc267bc30983dfd34ba255979d206fb600b07d8ad7ec4aa12449a6fb50d3fd3d7e1ff542204a67ffd2390e2e1cc26d3ea43946893cd39906055c3ca4f660b71ee4a818383fc7c7cce0abde2428fbb1f1516b82719556e4f38b2e0896de65706e5d924ff9dcf16941e7293d312f5a69aafc1819b1d49461a5f44ca927d6748cfb36b6cb786be2f9f8316d9ef3c24709c0830d4457fe59992ada7f87ba46701298cde81012e5fdcc90f31ccd951cc73b79b1b01e37764f998d7b8e1503fd4e3785c63c054cf22ec82c94acfd733e3c81a87359898b1577d1630e22dbe34139e0dbb941bc8223b8e5bc784109bcb050a0905de7a59be4ff9855b1db9a50ae6d460f8a55742d354748fefb71e532340b379c393d053bfd3045370f247c3e54acfc07ac00cfbf39017e627706c927ae5ecd095f826a3ec076872eee99257abcf128082ea82d171022eda335c5306f798298bdbaf019f86f3314706a7c916cb428ef97a0a196ce7fdec1897c0d9e23c517e211c7867869c468978660cecae91c94dbacea6d812d1deff6753d8051c4aae074ece8f574540b560ac601a8104e24ce86a36cb2adf446debaf06b8675a55424c497e8cc4a8dce43cf3371083e5fbc8d76223652b82821bfe221109b9877dcd5dc7a03679c36e5607a0075436ea8a5c5dbbdd5c8995c0b3e5d447552600c6b787540bb9ac5a9430b830fb10f6b16ee7528c2e297d61eeb79c20426b146cefb33eee2458630102b34668300ff6dea9e413f66cf78c623403eca9869109bc66a49a0cca38882bc35badb3ef121baef323320c72ca4cb999d9964ad42070b1e589c961bfcf224016ecf9dcaa951fe9da5ac6e54e435b3237b4e066012bf132e8d23dff0481e2b6ebaca7fe5d32308eef7c2546130bcc998b32b676abf6ffde6ac89d280e531f7bd01b6f6fbd17a25482461ff5994012db41cd222ea72dfcc384ad6bfd80fef24424a2ad2451f741c530ac493212938c5277e3885b75caf3a6eb92638733a4f038cbc8264d76db9c36fec68d01231cedf0718df59ab6d133730f0ae865fca192098b5a46837c3fc0da67c7d104329cbacaaa6109c772c7ea588dd29eed97301cf4d6d85063e923cb5441c33b8b51e4bd2233ef361fb2ffe72ab2620eab2bf5903db9a11a2d9bb45f4dd004a24590e5f0ba6741b775480fbdd6b3fd2c37daed23fb09936ee1688dd58ba8c9eab2070711f5948b7cd983b8e8332a8dd49a792e970b153c18515858efd68da892b8bf017dd656f392df7ec9c4ab74dc4ccb4e39bfa890f3b595503e5e9bad8d4910129124808e0ee592bc002e99ecbbc1eb94aaefa9ce730438c67044c8061396e6079a6bda4210cb44e52bd97e26aedd65aa8a2a1898f16bee6862699560295d222e0bb7d217bb2f7a257bf7e6d4f6155b907a523ea5e22a55b547d625bff7752f311780d66766f95d4be38a261cb4114f90f73597bed75430e7f6bdd6116544b252b2b29f00c50a717da2ab4911af8aebc1dba81b884b9f3d63f9ea6177102ddc07a59b50f19f756172c1b515f55758bdff3d3094fb1f82b2864ec11cce06895a61585f02b295c3a15c8cfab53ee7b81f1a6a1814b8eaf3bce97a9782274e7431920580cb1ef1d5aef26205568b17b56ce1472d3131f4b771e18a68b7cea6d8cf859af35982373e89c5d0f0442576eef8ef34d14b7d87db9037cbfa08f4b391103eefed276eaee90554c7b32daa44029b67ea514786ea1f187715bac8ea5bf4f0717723b55b5f6807e55830d46dfd515b754d8797ed772aec91c7c08a2ce4fbbe9ba35593fbd800d173b20b6ac32bf4f62e336bb589148b4b448da8cad255e633e31d59bd8b3732da0bebad997874ec786742fb8e673712714d19d99a1faeb0bdf8bfcc29997dd6560ea76ce97c6f861a8d99bf16bb4822f1a1439c2cedd66b9b4aba07eaf5f4e6f57a60975eff5cf4109a8e4d25eb12f9bcc527d14c886a6319f3d79c4c03eefab6acc0a559f425f9a03722333a7", 0xfe9}], 0x3, 0x0, 0x0, 0x805}, 0x0) socket(0x40000000015, 0x5, 0x0) (async) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2040000}, 0x40) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80000054eb", 0x2e}], 0x1}, 0x6400000c) (async) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="04975697413104474cdfb598", 0xc}, {&(0x7f0000000240)="89d3c05e2f60dd8c0682db12", 0xc}, {&(0x7f0000001940)="a702c27bf06db98cdf8d6889422019c0b20a0a589054612bc8b9aa12732b5894b3c2d33be1f984c47d286b219241aefd3c8c01f9843c6e8fb0e19e0c0743a2532975634b87c108677948f86f35b5eecd56f3b769bcfa672442f58bd4199e03bf4ea9385cd1df984d2958938330a1cd148cde179da1e2f11ca51a529ea58803884e2b6978de1a4127626ec37a290e73ca8d6d8ddfdfd53755d167ba8b2cd2fbff86ac34b7db68e9875e4307792830f899f0c75e418f58ce82039ce193097579f3aceff36ec054c4672cc8969f69efe1015860c8ffffecec6de646fb793021c2bb996dc9f7e6a72620e7cd729f1c24e8eeb58eb51a928570468e1fb23641e00fa426f6c24450abbde87f8833f0ee367758834d877babd4a80518cdcb04d6352e52d8abd6443757bd6ca779f0e57b25698598cdf11f8b45108cb1384fccab4aec1347e71eafcfafaadd4360716c11eb4d11864131df20db52730a242f45ccd6bc3dc02589c0e2a979b752986c692a4dff8ab71c5574220ae28bdb94c7e4ecf4b04e9ca4b68db1b27d0c2e8eea02487f5df0cb948cb2520694a6cb1dee45e0ef6d10925020001e0b49e1887f2c7e7dd98a4c04578e393b8bb7827868953f7587f5262aaf9f3d0803cd7e1ebc476f9407df2a9fea1349c80e14d094e3e203b18bd5bdee5453ad7817c73c974e753cdf923e9333c001cef33d89f8882adc5b5a491baecf9deb9199fd9e4740070183159818f1d527b0c369d590ec4988b7ed124eb9b34c050d426165f3ac392f2fc0dad59578c2498a755113f1e2207312e72fad25b59c0886c1242ed416e58d8fbff8e2ccf89d1aa87cde308c36e3c53c842a661df51449bd224cd967310172ad7165e6976e47cb7d191544d54170fdabdf9482e2b24d8a58376ea7cf60b347b55a259bf2eddb9e9d3aca20422dedcc9af246ead386662fdf14735a6e0deec38d23fbcebcc30349badcfb85308bd61354451d8199d9f53db36019d3d8e0db0becc5e1439c8104414d4020fa1f7298705becf897902d550862f1630a36773f585d0b122555632b7c333282b06d99a352daa20fda91c4406778dc36dcc5e73b8fa3048c53e30c762ede7be96880a1e3229a0bf88f8cc4e1c89571182e3dbdb5df2720ddf34f111314040c2f4ed3daf234a960e19d902fe68b41701c7834d9b092132f0b189cda43512319479475623598c4d1a00787f2ef605ff9289b180bbf17b62abaa1bea1429bc468f6f5df7fffcc7784a69338701a1e0fb471d3b17dba61e22705fe087b803faae47d7e338099021461a412af3ad4f94d6cea74fd858e5f39acdd93fc59c8970e00efc6cd78311d0859fab70c7de88d099c86743c8324427c7e931c0b50f54ab2d66bfc5eb474a2efd8ba91923825bacffff39d074e018373a36b55885cc1e2bbb5f8f7b001942e9e3dfb7f35e7b44b7c513ecc91f518d0d0577b9926961bcea1b468ee5f3d50d0cf188c81790dbb156be77eb6e69f5e2b922e13d8b92baef4125d802cfed1a097e3d9abb2b03e6566c17d24f78a6a29687188f22030c4f0e75935aea670bc038cee6e7827c66b772fe3bc17e5dcb66a371cda6ab8f95c199f23c8cfb98862947604c87973540ba650de26ceeaa118af2f8d51593c0bfab9a49360c862b5d2f0cd4912d42ab3a4830700ce125195190e28c20c44700b4c547d762b9d76aae14bcae36412fb8911a385ba5bda57f8cfeadf8f6e409226534866a61ee15cb5ad80cf22110176cf59db4e82207e3a5c12fb2afc1474ac7f6dd6c3f59a1f35caf41b9c75b98e3fdcee8ba0f62e0f66049ec52252990cb74339316e2878d76e5768096d16eed915721cd4cf2fbb8740ce3a483d95b15c28037e4f08568ce29e297f0fb9178ac6a3050e3311e57567b6a43e29fda3f6fe0116dcbb9999442d92902dbd030a806284e4702b68c49012738eab4ca6917ac15c333d9956abcc259887c0d804421569f67cda25ae113bf60c763d41bc96e1bbc984681fab5c0d74a1c5934d588f6eefea6cf186fb15b0d9fc3c656504fc542a7005f7f6a621476388b3cbb1d2fa6214cc62faacb3769fc7b5826af801f59d06d19cccac68eeb050b9d7f79b6263350178024072581b17f193d9700f63f7280f09f250988532ff9fb2baf6150f8ca02723e653662430df0e1cba59535448534d8b99a4869aa0e5f5ddde36bcce7b4c5018342bc73b0bafec14f27baa86ebaa0ae465686786a59ab7e6f443dc37154f43ee6128391f074929e9ec2b02835d83e04fffc6f0eec6de6d18b8396cc73b9e7634e9ca2838ebd710be87a9fe8d5a8619891a003fcd1c2c7e71b0df7c1bbf1efc3b69ef52053d29830c38e5eb6b3355ed23212bce370c9168f5dd17d5259642946c07eacfe1288105fe0beefcbee1828e1faf5cd9e030c35749b83ff25372757cf1dc7d27d963392d403e1d02ceac641b0d297b9ad07c45584f1717e0fdc96e105bdc421c8a8ebc9af1d2862729b4bd720d73bce506b9e37aa765ca3d5875cb52c2ae76579854455035cbc91fd71bd011326f3bd1dd4fcd56b9fe052336b85b4ed79c3c2a40f57a3dedacc9154b3cbbdf766c7d916d5aed0ba2c2724bcd97ec20da3e40b7e9a724d513f9ef6ed94c8afcc25c38ec2eb9267ef4dd07c7783decc2bc3e8b67e71dd54472b67e5bbe614856b96e1a3951b0c34668269116147b349b8ca5efd06e88a46c4dabf81c11cc1b46ffb9b9f7a8911fc8ad8b489f03f6faf9f231553cb4ad74470c330715781c9544ab48c38369265513952cc9f1063f43077390dbc59d704336e5f504e683ce34d1b02e76d4d2a689d2b401172245e3165a98e74e2aab0c7251cf8d59d377df853795c3fced7998025d5f851fdfb797a3a8dffff9b7fab792dfb60dcace3aada03c58baa51d79e0b8cd04017d9b193a2f9d732c1cef477c1683d923f70718d4be2deba348a418f1453414e4482b79813e34e1b7dfd5ac854b80e412d1d642f5a7f6132ad6c6eae847d6900a0efefa7a73ade315c25c1c0ec843394d315c10cc8b775b61c42507cc12b323a8734cd70bb1608be5355544009cd739e3d11701bf861901f40c7575093f8b619188303161100aa828f3d8fff2ba09b4d98ecbfd86d649f8b8224403921b8c0045a0cf501792c92d7571fb6f4137149b3f2b564c8d59cd2274cfa8e2caeeb4e6c47120a5a1cb6f3b9f817b12fc2a960a9aec82569bd0397cc3b686363c74672fe6627f69ba74f23f8093de16fa9e01694d81dec03a26c2573bd9dae8bd0edb97f6ff1e41af299118d6e17f81b20df90b22034b487e553dc6efc6ec6b8dd4659af003f4d187e519092ebfd332d58b37069b0b71df37f34ca89d9ce58e9000f3e5af502a4c0e486aa489826f1b2f397da15929e51aca8ba61c1fe6a0acea6481423f7168146c1b6213988b051a8209ff5fedbebe8993ea28cc0877a3af310c3e9aab2f9fafeee0605741abf51d9ade538450ff627dbc5ed266e11521922671afe6bca00709e9499387831f0961d9d78d437ea05f30996d4c3748aec2ab32879f3b2c553fd28028e57211443d3187373c60dfe083edc1e8ca29f4962a0c32c4d822523aef785094c36bd1006b33ab84819b36fbdb9bfefe1f3b0203fc056c0d332e323f881e04419a533201764a2bf4f4d09cdc82ed7581d9c08eaab4250a85c2fa2344492f5fd8ee25141972f8dedfa4f2f4c37bd356be7bdd061c396c3533ebbc267bc30983dfd34ba255979d206fb600b07d8ad7ec4aa12449a6fb50d3fd3d7e1ff542204a67ffd2390e2e1cc26d3ea43946893cd39906055c3ca4f660b71ee4a818383fc7c7cce0abde2428fbb1f1516b82719556e4f38b2e0896de65706e5d924ff9dcf16941e7293d312f5a69aafc1819b1d49461a5f44ca927d6748cfb36b6cb786be2f9f8316d9ef3c24709c0830d4457fe59992ada7f87ba46701298cde81012e5fdcc90f31ccd951cc73b79b1b01e37764f998d7b8e1503fd4e3785c63c054cf22ec82c94acfd733e3c81a87359898b1577d1630e22dbe34139e0dbb941bc8223b8e5bc784109bcb050a0905de7a59be4ff9855b1db9a50ae6d460f8a55742d354748fefb71e532340b379c393d053bfd3045370f247c3e54acfc07ac00cfbf39017e627706c927ae5ecd095f826a3ec076872eee99257abcf128082ea82d171022eda335c5306f798298bdbaf019f86f3314706a7c916cb428ef97a0a196ce7fdec1897c0d9e23c517e211c7867869c468978660cecae91c94dbacea6d812d1deff6753d8051c4aae074ece8f574540b560ac601a8104e24ce86a36cb2adf446debaf06b8675a55424c497e8cc4a8dce43cf3371083e5fbc8d76223652b82821bfe221109b9877dcd5dc7a03679c36e5607a0075436ea8a5c5dbbdd5c8995c0b3e5d447552600c6b787540bb9ac5a9430b830fb10f6b16ee7528c2e297d61eeb79c20426b146cefb33eee2458630102b34668300ff6dea9e413f66cf78c623403eca9869109bc66a49a0cca38882bc35badb3ef121baef323320c72ca4cb999d9964ad42070b1e589c961bfcf224016ecf9dcaa951fe9da5ac6e54e435b3237b4e066012bf132e8d23dff0481e2b6ebaca7fe5d32308eef7c2546130bcc998b32b676abf6ffde6ac89d280e531f7bd01b6f6fbd17a25482461ff5994012db41cd222ea72dfcc384ad6bfd80fef24424a2ad2451f741c530ac493212938c5277e3885b75caf3a6eb92638733a4f038cbc8264d76db9c36fec68d01231cedf0718df59ab6d133730f0ae865fca192098b5a46837c3fc0da67c7d104329cbacaaa6109c772c7ea588dd29eed97301cf4d6d85063e923cb5441c33b8b51e4bd2233ef361fb2ffe72ab2620eab2bf5903db9a11a2d9bb45f4dd004a24590e5f0ba6741b775480fbdd6b3fd2c37daed23fb09936ee1688dd58ba8c9eab2070711f5948b7cd983b8e8332a8dd49a792e970b153c18515858efd68da892b8bf017dd656f392df7ec9c4ab74dc4ccb4e39bfa890f3b595503e5e9bad8d4910129124808e0ee592bc002e99ecbbc1eb94aaefa9ce730438c67044c8061396e6079a6bda4210cb44e52bd97e26aedd65aa8a2a1898f16bee6862699560295d222e0bb7d217bb2f7a257bf7e6d4f6155b907a523ea5e22a55b547d625bff7752f311780d66766f95d4be38a261cb4114f90f73597bed75430e7f6bdd6116544b252b2b29f00c50a717da2ab4911af8aebc1dba81b884b9f3d63f9ea6177102ddc07a59b50f19f756172c1b515f55758bdff3d3094fb1f82b2864ec11cce06895a61585f02b295c3a15c8cfab53ee7b81f1a6a1814b8eaf3bce97a9782274e7431920580cb1ef1d5aef26205568b17b56ce1472d3131f4b771e18a68b7cea6d8cf859af35982373e89c5d0f0442576eef8ef34d14b7d87db9037cbfa08f4b391103eefed276eaee90554c7b32daa44029b67ea514786ea1f187715bac8ea5bf4f0717723b55b5f6807e55830d46dfd515b754d8797ed772aec91c7c08a2ce4fbbe9ba35593fbd800d173b20b6ac32bf4f62e336bb589148b4b448da8cad255e633e31d59bd8b3732da0bebad997874ec786742fb8e673712714d19d99a1faeb0bdf8bfcc29997dd6560ea76ce97c6f861a8d99bf16bb4822f1a1439c2cedd66b9b4aba07eaf5f4e6f57a60975eff5cf4109a8e4d25eb12f9bcc527d14c886a6319f3d79c4c03eefab6acc0a559f425f9a03722333a7", 0xfe9}], 0x3, 0x0, 0x0, 0x805}, 0x0) (async) kernel console output (not intermixed with test programs): attributes in process `syz.0.3135'. [ 413.816117][T17659] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.847779][T17389] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.855029][T17389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.916584][T17389] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.923866][T17389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.969391][T17877] netlink: 'syz.4.3138': attribute type 4 has an invalid length. [ 414.599329][T17907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3145'. [ 414.679419][T17911] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3145'. [ 415.208589][T17659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.401157][ T5158] Bluetooth: hci4: command tx timeout [ 415.592522][T17940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3150'. [ 415.969668][T17949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3153'. [ 415.997583][T17952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3154'. [ 416.045734][T17659] veth0_vlan: entered promiscuous mode [ 416.075447][T17659] veth1_vlan: entered promiscuous mode [ 416.204938][T17959] 8021q: adding VLAN 0 to HW filter on device bond7 [ 416.229479][T17956] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 416.266831][T17959] vlan4: entered allmulticast mode [ 416.278895][T17959] bond7: entered allmulticast mode [ 416.327445][T17962] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 416.394594][T17659] veth0_macvtap: entered promiscuous mode [ 416.508816][T17659] veth1_macvtap: entered promiscuous mode [ 416.565968][T17659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.603245][T17659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.672179][T17388] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.705179][T17388] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.705478][T17976] netlink: 'syz.5.3163': attribute type 1 has an invalid length. [ 416.747252][T17388] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.755472][T17976] netlink: 'syz.5.3163': attribute type 3 has an invalid length. [ 416.788582][T17388] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.794011][T17976] NCSI netlink: No device for ifindex 131080 [ 416.976067][T17381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.003027][T17381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.077705][T17996] pimreg3: entered allmulticast mode [ 417.206480][T17374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.226961][T17374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.324522][T18004] tipc: Enabled bearer , priority 0 [ 417.334286][T18004] syzkaller0: entered promiscuous mode [ 417.339802][T18004] syzkaller0: entered allmulticast mode [ 417.365558][T18006] netlink: zone id is out of range [ 417.380558][T18006] netlink: get zone limit has 8 unknown bytes [ 417.393974][T18004] tipc: Resetting bearer [ 417.436844][T18006] netlink: zone id is out of range [ 417.469390][T18006] netlink: get zone limit has 8 unknown bytes [ 417.480820][ T5158] Bluetooth: hci4: command tx timeout [ 417.499661][T18003] tipc: Resetting bearer [ 417.557597][T18003] tipc: Disabling bearer [ 417.600683][T18015] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 417.967305][T18028] __nla_validate_parse: 10 callbacks suppressed [ 417.967354][T18028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3176'. [ 418.027694][T18028] netlink: 'syz.2.3176': attribute type 29 has an invalid length. [ 418.040995][T18028] netlink: 'syz.2.3176': attribute type 29 has an invalid length. [ 418.599398][T18051] netlink: 'syz.2.3181': attribute type 2 has an invalid length. [ 418.631631][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 418.648707][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 418.661414][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 418.674596][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 418.683695][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 418.867127][T18059] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3183'. [ 419.079851][T18052] chnl_net:caif_netlink_parms(): no params data found [ 419.361869][T18052] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.380665][T18052] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.408680][T18052] bridge_slave_0: entered allmulticast mode [ 419.421060][T18052] bridge_slave_0: entered promiscuous mode [ 419.434321][T18052] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.441974][T18052] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.449334][T18052] bridge_slave_1: entered allmulticast mode [ 419.463366][T18052] bridge_slave_1: entered promiscuous mode [ 419.578665][T18052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.616915][T18052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.737287][T18052] team0: Port device team_slave_0 added [ 419.747134][T18052] team0: Port device team_slave_1 added [ 419.765880][T18079] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3187'. [ 419.970421][T18052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.977916][T18052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.013749][T18052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.047192][T18052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.057184][T18052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.099240][T18052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.349189][T18052] hsr_slave_0: entered promiscuous mode [ 420.395955][T18052] hsr_slave_1: entered promiscuous mode [ 420.411670][T18052] debugfs: 'hsr0' already exists in 'hsr' [ 420.419711][T18052] Cannot create hsr debugfs directory [ 420.458685][T18105] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 420.604139][T18116] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3197'. [ 420.645979][T18114] Bluetooth: MGMT ver 1.23 [ 420.671630][T18114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3199'. [ 420.688218][T18121] geneve2: entered promiscuous mode [ 420.694501][T18121] geneve2: entered allmulticast mode [ 420.725878][T18115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3199'. [ 420.751728][T18123] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3201'. [ 420.764570][ T5158] Bluetooth: hci5: command tx timeout [ 420.952928][T18127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3202'. [ 420.962680][T18127] netlink: 'syz.2.3202': attribute type 1 has an invalid length. [ 420.972255][T18127] netlink: 'syz.2.3202': attribute type 2 has an invalid length. [ 421.003138][T18132] C: renamed from lo (while UP) [ 421.013960][T18132] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 421.051121][T18138] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 421.205579][T18142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3207'. [ 421.338177][T18147] netlink: 'syz.2.3209': attribute type 1 has an invalid length. [ 421.546645][T18157] tls_set_device_offload: netdev not found [ 421.659226][T18052] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 421.683838][T18052] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 421.718151][T18052] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 421.761530][T18052] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 422.027084][T18183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3216'. [ 422.168408][T18052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.209450][T18052] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.234963][T17376] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.242242][T17376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.297664][T17376] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.304968][T17376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.396011][T18052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 422.759790][T18052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.832710][ T5158] Bluetooth: hci5: command tx timeout [ 422.894982][T18052] veth0_vlan: entered promiscuous mode [ 422.919687][T18052] veth1_vlan: entered promiscuous mode [ 422.986017][T18052] veth0_macvtap: entered promiscuous mode [ 423.029137][T18052] veth1_macvtap: entered promiscuous mode [ 423.127754][T18052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.146708][T17383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.185510][T17383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.191268][T18052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.233230][T17383] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.274765][T17383] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.281052][T18221] __nla_validate_parse: 4 callbacks suppressed [ 423.281073][T18221] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3230'. [ 423.309282][T17383] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.348575][T17383] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.418659][T18226] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3228'. [ 423.456296][T18226] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3228'. [ 423.512137][T18226] netlink: 'syz.4.3228': attribute type 6 has an invalid length. [ 423.546638][T18226] netlink: 'syz.4.3228': attribute type 5 has an invalid length. [ 423.568842][T18226] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3228'. [ 423.924992][T18228] tap0: tun_chr_ioctl cmd 1074025678 [ 423.942966][T18228] tap0: group set to 0 [ 424.208761][T18261] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 424.233128][T17388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.282811][T17388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.414552][T18267] tipc: Enabled bearer , priority 0 [ 424.443219][T18267] syzkaller0: entered promiscuous mode [ 424.453549][T18267] syzkaller0: entered allmulticast mode [ 424.483235][T17381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.504521][T17381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.912167][ T5158] Bluetooth: hci5: command tx timeout [ 424.941977][T18283] team_slave_0: entered promiscuous mode [ 424.948736][T18283] team_slave_1: entered promiscuous mode [ 424.991289][T18286] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3244'. [ 425.024513][T18254] tipc: Resetting bearer [ 425.106598][T18254] tipc: Disabling bearer [ 425.504590][T18310] syzkaller1: entered promiscuous mode [ 425.542570][T18310] syzkaller1: entered allmulticast mode [ 425.560904][T18314] bond0: (slave bond_slave_1): Releasing backup interface [ 425.597440][T18312] IPVS: set_ctl: invalid protocol: 60 100.1.1.1:20003 [ 425.620059][T18310] IPVS: set_ctl: invalid protocol: 60 100.1.1.1:20003 [ 426.095166][T18341] netlink: 'syz.2.3259': attribute type 1 has an invalid length. [ 426.151931][T18341] gretap1: entered promiscuous mode [ 426.990984][ T5158] Bluetooth: hci5: command tx timeout [ 427.163301][T18375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3266'. [ 427.386931][T18379] netlink: 'syz.1.3268': attribute type 1 has an invalid length. [ 427.423618][T18379] netlink: 'syz.1.3268': attribute type 2 has an invalid length. [ 429.072105][ T5158] Bluetooth: hci5: command tx timeout [ 429.963960][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 430.056269][T18407] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3272'. [ 430.073931][T18407] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3272'. [ 430.089761][T18407] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3272'. [ 431.028550][T18460] netlink: 'syz.1.3287': attribute type 1 has an invalid length. [ 431.192614][T18468] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3289'. [ 431.509135][T18487] netlink: 'syz.0.3293': attribute type 1 has an invalid length. [ 431.565954][T18488] macvlan0: entered allmulticast mode [ 431.571875][T18488] veth1_vlan: entered allmulticast mode [ 431.585849][T18487] netlink: 'syz.0.3293': attribute type 2 has an invalid length. [ 431.590816][T18488] veth1_vlan: left allmulticast mode [ 431.803104][T18488] macvlan0 (unregistering): left allmulticast mode [ 431.936588][T18499] netlink: 'syz.4.3298': attribute type 21 has an invalid length. [ 431.963761][T18499] netlink: 'syz.4.3298': attribute type 1 has an invalid length. [ 432.154668][T18510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.218120][T18514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3305'. [ 432.286603][T18522] netlink: 'syz.4.3307': attribute type 2 has an invalid length. [ 432.317733][T18522] netlink: 'syz.4.3307': attribute type 2 has an invalid length. [ 432.347967][T18514] bond0: entered promiscuous mode [ 432.369005][T18514] bond_slave_0: entered promiscuous mode [ 432.383592][T18514] bond_slave_1: entered promiscuous mode [ 432.394102][T18514] bond0: left promiscuous mode [ 432.399253][T18514] bond_slave_0: left promiscuous mode [ 432.417881][T18514] bond_slave_1: left promiscuous mode [ 432.627058][T18533] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3311'. [ 432.639539][T18526] can: request_module (can-proto-5) failed. [ 432.647932][T18533] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3311'. [ 432.815996][T18542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3313'. [ 432.826151][T18542] netlink: 'syz.0.3313': attribute type 30 has an invalid length. [ 432.838514][T18542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3313'. [ 433.361678][T18572] sctp: [Deprecated]: syz.2.3324 (pid 18572) Use of int in maxseg socket option. [ 433.361678][T18572] Use struct sctp_assoc_value instead [ 433.516159][T18578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3327'. [ 433.527587][T18580] netlink: 'syz.0.3328': attribute type 2 has an invalid length. [ 433.633341][T18587] sctp: [Deprecated]: syz.1.3330 (pid 18587) Use of int in max_burst socket option deprecated. [ 433.633341][T18587] Use struct sctp_assoc_value instead [ 434.051587][T18601] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 434.168492][T18612] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode [ 434.503655][T18630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.543836][T18628] 8021q: adding VLAN 0 to HW filter on device bond2 [ 434.687938][T18639] netlink: 'syz.1.3347': attribute type 1 has an invalid length. [ 435.041581][T18647] tipc: Enabled bearer , priority 0 [ 435.129765][T18647] tipc: Resetting bearer [ 435.425489][T18662] __nla_validate_parse: 9 callbacks suppressed [ 435.425511][T18662] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3351'. [ 435.495185][T18662] delete_channel: no stack [ 435.523576][ T30] audit: type=1804 audit(1753994909.558:4): pid=18662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3351" name="/newroot/37/cgroup.controllers" dev="tmpfs" ino=208 res=1 errno=0 [ 435.576742][ T30] audit: type=1800 audit(1753994909.558:5): pid=18662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3351" name="cgroup.controllers" dev="tmpfs" ino=208 res=0 errno=0 [ 435.719635][T18673] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3354'. [ 435.741215][T18650] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 435.839340][T18649] mpoa:mpoad_close: () going down [ 435.878233][T18678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3355'. [ 436.112564][T18690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3357'. [ 436.131386][ T980] tipc: Node number set to 3182909328 [ 436.679275][T18720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3367'. [ 436.859000][T18727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.867657][T18727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.885399][T18727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.893635][T18727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.127168][T18733] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3373'. [ 437.276800][T18747] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 437.336223][T18746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3376'. [ 437.409036][T18753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3379'. [ 437.424080][T18756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3379'. [ 437.463049][T18759] netlink: 'syz.4.3380': attribute type 1 has an invalid length. [ 437.480909][T18759] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3380'. [ 437.693263][T18763] tipc: Started in network mode [ 437.704481][T18763] tipc: Node identity 0ad33b57b599, cluster identity 4711 [ 437.715707][T18763] tipc: Enabled bearer , priority 0 [ 437.725974][T18771] netlink: 'syz.2.3384': attribute type 1 has an invalid length. [ 437.778109][T18767] syzkaller0: entered promiscuous mode [ 437.797375][T18767] syzkaller0: entered allmulticast mode [ 438.082159][T18786] tipc: Resetting bearer [ 438.118801][T18762] tipc: Resetting bearer [ 438.178171][T18762] tipc: Disabling bearer [ 438.645317][T18808] 8021q: adding VLAN 0 to HW filter on device bond3 [ 438.757671][T18810] bond_slave_0: entered promiscuous mode [ 438.763883][T18810] bond_slave_1: entered promiscuous mode [ 438.782513][T18810] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 438.795981][T18810] bond3: (slave macvlan3): Enslaving as a backup interface with an up link [ 439.022601][T18837] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 439.036052][T18837] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 439.048201][T18837] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 439.059633][T18837] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 439.136091][T18847] netlink: 'syz.4.3406': attribute type 5 has an invalid length. [ 439.173291][T18847] geneve2: entered promiscuous mode [ 439.178662][T18847] geneve2: entered allmulticast mode [ 439.194886][T17387] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 439.241318][T17387] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 439.317081][T17387] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 439.347711][T18853] erspan0: vlans aren't supported yet for dev_uc|mc_add() [ 439.391030][T17387] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 440.135059][T18899] veth0: entered promiscuous mode [ 440.207177][T18899] veth0: left promiscuous mode [ 440.301883][T18908] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 440.367352][T18908] bridge_slave_0: left allmulticast mode [ 440.373884][T18908] bridge_slave_0: left promiscuous mode [ 440.379901][T18908] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.407103][T18912] netlink: 'syz.1.3427': attribute type 10 has an invalid length. [ 440.422967][T18908] bridge_slave_1: left allmulticast mode [ 440.431635][T18908] bridge_slave_1: left promiscuous mode [ 440.437732][T18908] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.464135][T18908] bond0: (slave bond_slave_0): Releasing backup interface [ 440.478298][T18908] bond0: (slave bond_slave_1): Releasing backup interface [ 440.506441][T18908] team0: Port device team_slave_0 removed [ 440.519790][T18908] team0: Port device team_slave_1 removed [ 440.528507][T18908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.537136][T18908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.547696][T18908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.548158][T18920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.571020][T18908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.607284][T18912] mac80211_hwsim hwsim38 wlan1: left allmulticast mode [ 440.655761][T18912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.709041][T18912] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 440.781543][T18925] __nla_validate_parse: 12 callbacks suppressed [ 440.781565][T18925] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3431'. [ 440.888771][T18915] bond0: (slave wlan1): Releasing backup interface [ 441.216742][T18940] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 441.242077][T18940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3434'. [ 441.766821][T18971] veth0: entered promiscuous mode [ 441.821993][T18971] veth0: left promiscuous mode [ 441.869545][T18975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3442'. [ 441.892286][T18977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3442'. [ 442.361478][T19002] 8021q: adding VLAN 0 to HW filter on device bond2 [ 442.377915][T19002] team0: Failed to send options change via netlink (err -105) [ 442.387414][T19002] team0: Port device bond2 added [ 442.567906][T19023] netlink: 'syz.1.3452': attribute type 21 has an invalid length. [ 442.576659][T19023] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3452'. [ 442.747668][T19028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3454'. [ 442.759084][T19028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3454'. [ 442.782545][T17386] team0: Failed to send port change of device bond2 via netlink (err -105) [ 443.063481][T19032] netlink: 'syz.1.3455': attribute type 11 has an invalid length. [ 443.080853][T19032] netlink: 'syz.1.3455': attribute type 11 has an invalid length. [ 443.125821][T19032] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3455'. [ 443.277506][T19035] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3457'. [ 443.281660][T19037] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3458'. [ 443.838774][T19071] lo: entered allmulticast mode [ 443.936446][T19075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 443.966660][T19078] lo: left allmulticast mode [ 444.001796][T19080] netlink: 'syz.1.3473': attribute type 2 has an invalid length. [ 444.027347][T19075] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 444.062199][T19075] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 444.082150][T19075] gretap1: entered promiscuous mode [ 444.087899][T19075] gretap1: entered allmulticast mode [ 444.133159][T19077] bridge0: port 1(batadv1) entered blocking state [ 444.142873][T19077] bridge0: port 1(batadv1) entered disabled state [ 444.151522][T19077] batadv1: entered allmulticast mode [ 444.182046][T19077] batadv1: entered promiscuous mode [ 444.270350][T19089] tipc: Enabling of bearer rejected, already enabled [ 444.287211][T19090] openvswitch: netlink: Flow key attribute not present in set flow. [ 444.297350][T19089] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 444.310985][T19089] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 444.581165][T19108] netlink: 'syz.4.3484': attribute type 1 has an invalid length. [ 444.611932][T19107] netlink: 'syz.4.3484': attribute type 1 has an invalid length. [ 444.633983][T17386] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 444.644655][T17386] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 444.812208][T19107] 8021q: adding VLAN 0 to HW filter on device bond4 [ 444.881347][T19111] 8021q: adding VLAN 0 to HW filter on device bond4 [ 444.893863][T19111] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 444.911792][T19111] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 444.956778][T19123] 8021q: VLANs not supported on ip6gre0 [ 445.331032][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 445.885665][T19176] __nla_validate_parse: 7 callbacks suppressed [ 445.885685][T19176] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3502'. [ 446.299271][T19191] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 446.332369][T19198] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 446.348296][T19208] netlink: 'syz.0.3510': attribute type 10 has an invalid length. [ 446.412475][T19208] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 446.625648][T19220] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3516'. [ 446.986393][T19247] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3522'. [ 447.128225][T19254] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3523'. [ 447.134601][T19255] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3523'. [ 447.279289][T19261] openvswitch: netlink: IP tunnel TTL not specified. [ 447.832270][T19303] syz.1.3531: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 447.865052][T19305] netlink: 'syz.2.3532': attribute type 1 has an invalid length. [ 447.933315][T19303] CPU: 1 UID: 0 PID: 19303 Comm: syz.1.3531 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 447.933350][T19303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 447.933370][T19303] Call Trace: [ 447.933380][T19303] [ 447.933394][T19303] dump_stack_lvl+0x189/0x250 [ 447.933430][T19303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.933454][T19303] ? __pfx__printk+0x10/0x10 [ 447.933483][T19303] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 447.933509][T19303] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 447.933537][T19303] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 447.933565][T19303] warn_alloc+0x214/0x310 [ 447.933587][T19303] ? stack_depot_save_flags+0x40/0x900 [ 447.933614][T19303] ? __pfx_warn_alloc+0x10/0x10 [ 447.933639][T19303] ? kasan_save_track+0x4f/0x80 [ 447.933671][T19303] ? xskq_create+0x56/0x170 [ 447.933700][T19303] ? xsk_init_queue+0xb0/0x110 [ 447.933727][T19303] ? xsk_setsockopt+0x4dc/0x8d0 [ 447.933752][T19303] ? do_sock_setsockopt+0x179/0x1b0 [ 447.933785][T19303] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 447.933805][T19303] ? do_syscall_64+0xfa/0x3b0 [ 447.933837][T19303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.933870][T19303] __vmalloc_node_range_noprof+0x125/0x12f0 [ 447.933928][T19303] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 447.933958][T19303] ? __kasan_kmalloc+0x93/0xb0 [ 447.933996][T19303] vmalloc_user_noprof+0xad/0xf0 [ 447.934017][T19303] ? xskq_create+0xbf/0x170 [ 447.934047][T19303] xskq_create+0xbf/0x170 [ 447.934081][T19303] xsk_init_queue+0xb0/0x110 [ 447.934113][T19303] xsk_setsockopt+0x4dc/0x8d0 [ 447.934144][T19303] ? __pfx_xsk_setsockopt+0x10/0x10 [ 447.934174][T19303] ? __pfx_aa_sk_perm+0x10/0x10 [ 447.934211][T19303] ? aa_sock_opt_perm+0x74/0x110 [ 447.934241][T19303] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 447.934266][T19303] ? __pfx_xsk_setsockopt+0x10/0x10 [ 447.934296][T19303] do_sock_setsockopt+0x179/0x1b0 [ 447.934323][T19303] __x64_sys_setsockopt+0x13f/0x1b0 [ 447.934352][T19303] do_syscall_64+0xfa/0x3b0 [ 447.934383][T19303] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.934414][T19303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.934435][T19303] ? clear_bhb_loop+0x60/0xb0 [ 447.934462][T19303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.934484][T19303] RIP: 0033:0x7ffb22b8eb69 [ 447.934504][T19303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.934524][T19303] RSP: 002b:00007ffb23a8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 447.934549][T19303] RAX: ffffffffffffffda RBX: 00007ffb22db6080 RCX: 00007ffb22b8eb69 [ 447.934565][T19303] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 447.934579][T19303] RBP: 00007ffb22c11df1 R08: 0000000000000004 R09: 0000000000000000 [ 447.934592][T19303] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.934607][T19303] R13: 0000000000000000 R14: 00007ffb22db6080 R15: 00007ffd09b1ef78 [ 447.934643][T19303] [ 447.936425][T19303] Mem-Info: [ 448.294840][T19303] active_anon:6833 inactive_anon:0 isolated_anon:0 [ 448.294840][T19303] active_file:1651 inactive_file:39999 isolated_file:0 [ 448.294840][T19303] unevictable:768 dirty:47 writeback:0 [ 448.294840][T19303] slab_reclaimable:12798 slab_unreclaimable:119483 [ 448.294840][T19303] mapped:29252 shmem:1394 pagetables:1344 [ 448.294840][T19303] sec_pagetables:0 bounce:0 [ 448.294840][T19303] kernel_misc_reclaimable:0 [ 448.294840][T19303] free:1301609 free_pcp:11777 free_cma:0 [ 448.387034][T19303] Node 0 active_anon:27132kB inactive_anon:0kB active_file:6604kB inactive_file:159792kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117108kB dirty:184kB writeback:0kB shmem:4040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:15916kB pagetables:5028kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 448.424443][T19303] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 448.520706][T19303] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 448.542483][T19320] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3537'. [ 448.591011][T19303] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 448.607974][T19303] Node 0 DMA32 free:1280680kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27188kB inactive_anon:0kB active_file:6604kB inactive_file:157956kB unevictable:1536kB writepending:180kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:35300kB local_pcp:17644kB free_cma:0kB [ 448.634835][T19322] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3536'. [ 448.665756][T19303] lowmem_reserve[]: 0 0 1 1 1 [ 448.682445][T19303] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1836kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 448.733692][T19303] lowmem_reserve[]: 0 0 0 0 0 [ 448.738599][T19303] Node 1 Normal free:3910392kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:12672kB local_pcp:7328kB free_cma:0kB [ 448.807967][T19303] lowmem_reserve[]: 0 0 0 0 0 [ 448.818139][T19303] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 448.833644][T19303] Node 0 DMA32: 946*4kB (UME) 174*8kB (UM) 55*16kB (UM) 7*32kB (UME) 46*64kB (UM) 23*128kB (UM) 11*256kB (UME) 10*512kB (UME) 9*1024kB (UM) 3*2048kB (UME) 304*4096kB (UM) = 1280648kB [ 448.864541][T19303] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 448.877087][T19303] Node 1 Normal: 190*4kB (UME) 58*8kB (UME) 55*16kB (UME) 198*32kB (UME) 64*64kB (UME) 12*128kB (UME) 4*256kB (UME) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 950*4096kB (M) = 3910392kB [ 448.897861][T19303] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 448.909352][T19303] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 448.919009][T19303] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 448.929548][T19303] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 448.939680][T19303] 43040 total pagecache pages [ 448.947502][T19303] 0 pages in swap cache [ 448.952110][T19303] Free swap = 124996kB [ 448.958031][T19303] Total swap = 124996kB [ 448.965984][T19303] 2097051 pages RAM [ 448.970870][T19303] 0 pages HighMem/MovableOnly [ 448.975771][T19303] 424872 pages reserved [ 448.984183][T19303] 0 pages cma reserved [ 449.022092][T19337] tipc: Enabling of bearer rejected, already enabled [ 449.439244][T19360] tc_dump_action: action bad kind [ 449.480508][T19364] team0: Device gtp0 is up. Set it down before adding it as a team port [ 449.792658][T19378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.849303][T19382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.868411][T19386] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 450.421580][T19411] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3566'. [ 450.450456][T19411] openvswitch: netlink: Flow actions attr not present in new flow. [ 450.719555][T19425] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.3568'. [ 450.813666][T19431] netlink: 'syz.1.3570': attribute type 24 has an invalid length. [ 451.030882][T19440] bridge6: entered promiscuous mode [ 451.061555][T19440] bridge6: entered allmulticast mode [ 451.288869][T19451] netlink: 'syz.5.3576': attribute type 14 has an invalid length. [ 451.483005][T19466] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3579'. [ 451.493491][T19466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3579'. [ 451.503677][T19466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3579'. [ 451.624788][T19470] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3582'. [ 451.722235][T19482] netlink: 'syz.5.3584': attribute type 1 has an invalid length. [ 451.775475][T19482] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3584'. [ 452.069016][T19493] pimreg: entered allmulticast mode [ 452.070357][T19495] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3587'. [ 452.085725][T19493] pimreg: left allmulticast mode [ 452.424424][T19509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.481037][T19511] tipc: Started in network mode [ 452.486091][T19511] tipc: Node identity 7, cluster identity 4711 [ 452.505251][T19511] tipc: Node number set to 7 [ 452.622652][T19515] team0: Mode changed to "broadcast" [ 452.649007][T19517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3596'. [ 452.704070][T19517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3596'. [ 452.964740][T19531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3599'. [ 452.977007][T19531] openvswitch: netlink: Flow key attr not present in new flow. [ 452.989746][T17387] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d [ 453.094153][T19543] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3602'. [ 453.829568][T19575] pim6reg527: entered allmulticast mode [ 453.861495][T19579] netlink: 'syz.4.3612': attribute type 1 has an invalid length. [ 453.968917][T19583] netlink: 'syz.1.3616': attribute type 19 has an invalid length. [ 454.024965][T19579] 8021q: adding VLAN 0 to HW filter on device bond5 [ 454.074962][T19577] 8021q: adding VLAN 0 to HW filter on device bond5 [ 454.084116][T19577] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 454.112938][T19577] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 454.212416][T19583] dvmrp0: entered allmulticast mode [ 454.218288][T19595] syzkaller1: entered promiscuous mode [ 454.242759][T19595] syzkaller1: entered allmulticast mode [ 454.476998][T19609] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 454.579243][T19609] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 455.634876][T19661] syzkaller0: entered promiscuous mode [ 455.656288][T19661] syzkaller0: entered allmulticast mode [ 455.712943][T19671] IPVS: Unknown mcast interface: veth1_to_hsr [ 456.074096][T19683] netlink: 'syz.5.3634': attribute type 10 has an invalid length. [ 457.518354][T19691] tls_set_device_offload: netdev not found [ 458.548134][T19683] mac80211_hwsim hwsim17 ÿ: left allmulticast mode [ 458.557223][T19689] __nla_validate_parse: 4 callbacks suppressed [ 458.557247][T19689] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3636'. [ 458.626108][T19687] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 458.688539][T19695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3638'. [ 458.732089][T19698] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3639'. [ 458.835221][T19695] hsr_slave_0 (unregistering): left promiscuous mode [ 459.171127][T19722] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3643'. [ 459.218255][T19723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3648'. [ 459.241606][T19725] pimreg: entered allmulticast mode [ 459.247465][T19727] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 459.263458][T19725] pimreg: left allmulticast mode [ 459.365566][T19725] netlink: 'syz.0.3647': attribute type 10 has an invalid length. [ 459.387047][T19725] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3647'. [ 459.429634][T19737] block nbd1: Unsupported socket: shutdown callout must be supported. [ 459.436175][T19725] dummy0: entered promiscuous mode [ 459.462700][T19725] bridge0: port 3(dummy0) entered blocking state [ 459.469481][T19725] bridge0: port 3(dummy0) entered disabled state [ 459.480514][T19737] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3652'. [ 459.491542][T19725] dummy0: entered allmulticast mode [ 459.509242][T19725] bridge0: port 3(dummy0) entered blocking state [ 459.515907][T19725] bridge0: port 3(dummy0) entered forwarding state [ 460.328133][T19779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3666'. [ 460.372345][T19783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3667'. [ 460.454669][T19783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3667'. [ 460.670991][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 460.856968][T19807] tipc: Started in network mode [ 460.866890][T19807] tipc: Node identity 862aab0a612f, cluster identity 4711 [ 460.879741][T19807] tipc: Enabled bearer , priority 0 [ 460.937449][T19807] syzkaller0: entered promiscuous mode [ 460.957892][T19817] netlink: 'syz.1.3679': attribute type 39 has an invalid length. [ 460.981353][T19807] syzkaller0: entered allmulticast mode [ 461.042300][T19817] veth0_macvtap: left promiscuous mode [ 461.236770][T19823] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 461.317484][T19829] tipc: Resetting bearer [ 461.346749][T19806] tipc: Resetting bearer [ 461.416592][T19806] tipc: Disabling bearer [ 461.833182][T19856] netlink: 'syz.1.3689': attribute type 1 has an invalid length. [ 461.978471][T19867] netlink: 'syz.1.3691': attribute type 21 has an invalid length. [ 462.705644][T19887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.764911][T19895] netlink: 'syz.5.3702': attribute type 1 has an invalid length. [ 462.781844][T19895] netlink: 'syz.5.3702': attribute type 1 has an invalid length. [ 463.411656][T19923] delete_channel: no stack [ 463.665083][T19940] __nla_validate_parse: 14 callbacks suppressed [ 463.665106][T19940] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3715'. [ 463.716865][T19940] gretap0: entered promiscuous mode [ 463.958468][T19949] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3719'. [ 463.996317][T19949] netlink: 'syz.2.3719': attribute type 21 has an invalid length. [ 464.023488][T19952] veth0: entered promiscuous mode [ 464.043107][T19952] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3718'. [ 464.086200][T19952] openvswitch: netlink: Flow key attr not present in new flow. [ 464.504891][T19946] veth0: left promiscuous mode [ 465.291544][T20008] netlink: 'syz.2.3736': attribute type 1 has an invalid length. [ 465.316651][T20008] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3736'. [ 465.537302][T20022] netlink: 'syz.2.3740': attribute type 1 has an invalid length. [ 465.555592][T20022] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3740'. [ 465.884433][T20045] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3746'. [ 465.975813][T20048] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3747'. [ 465.994279][T20048] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3747'. [ 466.441765][T20063] netlink: 'syz.4.3753': attribute type 1 has an invalid length. [ 466.455691][T20063] netlink: 'syz.4.3753': attribute type 1 has an invalid length. [ 466.776112][T20081] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3757'. [ 466.815223][T20083] netlink: 'syz.2.3758': attribute type 29 has an invalid length. [ 466.887318][T20088] netlink: 'syz.2.3758': attribute type 29 has an invalid length. [ 466.934333][T20090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3759'. [ 466.957759][T20083] netlink: 'syz.2.3758': attribute type 29 has an invalid length. [ 467.014640][T20083] netlink: 'syz.2.3758': attribute type 29 has an invalid length. [ 467.191280][T20096] netlink: 'syz.5.3761': attribute type 10 has an invalid length. [ 467.225504][T20096] team0: Device veth1_macvtap failed to register rx_handler [ 506.758518][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 513.951173][ T5158] Bluetooth: hci3: command 0x0405 tx timeout [ 519.071466][ T5158] Bluetooth: hci2: command 0x0406 tx timeout [ 521.906992][T20123] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3763'. [ 522.052896][T20129] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3768'. [ 522.134584][T20132] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3768'. [ 522.269369][T20139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3767'. [ 522.484398][T20151] netlink: 'syz.5.3770': attribute type 10 has an invalid length. [ 522.592510][T17388] batman_adv: batadv1: IGMP Querier appeared [ 522.598661][T17388] batman_adv: batadv1: MLD Querier appeared [ 523.064035][T20177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3776'. [ 523.253640][T20179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3777'. [ 523.417444][T20181] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 523.481385][T20181] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€ [ 523.988499][T20194] syzkaller0: entered promiscuous mode [ 523.995756][T20194] syzkaller0: entered allmulticast mode [ 524.006672][T20203] netlink: 'syz.4.3788': attribute type 4 has an invalid length. [ 524.041371][T20203] netlink: 'syz.4.3788': attribute type 4 has an invalid length. [ 526.572222][T20235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3795'. [ 526.588392][T20236] netlink: 'syz.4.3795': attribute type 10 has an invalid length. [ 526.668124][T20236] team0: Port device dummy0 added [ 526.739181][T20244] tipc: Enabled bearer , priority 0 [ 526.826191][T20243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3796'. [ 526.855551][T20248] tipc: Resetting bearer [ 527.006331][T20252] netlink: 'syz.5.3800': attribute type 1 has an invalid length. [ 527.108702][T20259] netlink: 'syz.4.3801': attribute type 150 has an invalid length. [ 527.166746][T20243] tipc: Disabling bearer [ 527.591896][T20284] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 527.705928][T20291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3812'. [ 527.949690][T20306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3815'. [ 528.207172][T20314] netlink: 'syz.0.3815': attribute type 29 has an invalid length. [ 528.235078][T20312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3818'. [ 528.254392][T20312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3818'. [ 528.293840][T20312] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3818'. [ 528.332953][T20306] netlink: 'syz.0.3815': attribute type 29 has an invalid length. [ 528.352045][T20324] netlink: 'syz.0.3815': attribute type 29 has an invalid length. [ 528.374430][T20324] netlink: 'syz.0.3815': attribute type 29 has an invalid length. [ 528.393209][T20327] netlink: 'syz.5.3821': attribute type 21 has an invalid length. [ 528.441716][T20327] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3821'. [ 528.458953][T20327] netlink: 'syz.5.3821': attribute type 4 has an invalid length. [ 528.481632][T20327] netlink: 'syz.5.3821': attribute type 5 has an invalid length. [ 528.494263][T20327] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3821'. [ 528.588763][T20340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3825'. [ 528.669470][T20340] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3825'. [ 528.681401][T20337] delete_channel: no stack [ 528.724323][T20344] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3828'. [ 528.843870][T20355] netlink: 'syz.0.3827': attribute type 1 has an invalid length. [ 528.852503][T20355] netlink: 'syz.0.3827': attribute type 1 has an invalid length. [ 528.863892][T20355] netlink: 'syz.0.3827': attribute type 1 has an invalid length. [ 528.963288][T20357] tap0: tun_chr_ioctl cmd 1074025677 [ 528.971389][T20357] tap0: linktype set to 65534 [ 529.172624][T20364] sock: sock_set_timeout: `syz.4.3834' (pid 20364) tries to set negative timeout [ 529.194055][T20364] openvswitch: netlink: EtherType 257 is less than min 600 [ 529.276428][T20369] delete_channel: no stack [ 529.296132][T20369] delete_channel: no stack [ 530.188208][T20398] veth7: entered promiscuous mode [ 530.219133][T20398] veth7: entered allmulticast mode [ 531.313149][T20451] sctp: [Deprecated]: syz.1.3862 (pid 20451) Use of struct sctp_assoc_value in delayed_ack socket option. [ 531.313149][T20451] Use struct sctp_sack_info instead [ 532.021034][T20482] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 532.439698][T20503] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 532.458307][T20503] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 532.468615][T20503] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 532.488612][T20503] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 532.505274][T20503] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 532.662176][T20512] nbd: socks must be embedded in a SOCK_ITEM attr [ 532.688672][T20512] tipc: Enabling of bearer rejected, failed to enable media [ 532.934813][T20518] __nla_validate_parse: 6 callbacks suppressed [ 532.934837][T20518] netlink: 596 bytes leftover after parsing attributes in process `syz.1.3875'. [ 532.998776][ T1155] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.041313][ T1155] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.083507][T20527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3878'. [ 533.420791][T20546] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 533.759281][ T1155] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.825969][ T1155] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.944584][T20547] tipc: Enabled bearer , priority 0 [ 533.968342][T20548] syzkaller0: entered promiscuous mode [ 533.979238][T20548] syzkaller0: entered allmulticast mode [ 533.994284][T20555] validate_nla: 4 callbacks suppressed [ 533.994305][T20555] netlink: 'syz.1.3883': attribute type 3 has an invalid length. [ 534.073784][T20558] bond0: Master is either lo or non-ether device [ 534.157291][ T1155] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.176454][ T1155] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.206826][T20563] netlink: 'syz.4.3885': attribute type 1 has an invalid length. [ 534.216393][T20563] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3885'. [ 534.261087][T20565] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3886'. [ 534.362387][T20548] tipc: Resetting bearer [ 534.435953][T20503] Bluetooth: hci4: command 0x0406 tx timeout [ 534.445299][T20548] tipc: Disabling bearer [ 534.593346][ T5844] Bluetooth: hci1: command tx timeout [ 534.965122][ T1155] batadv1: left allmulticast mode [ 534.971053][ T1155] batadv1: left promiscuous mode [ 534.981095][ T1155] bridge0: port 1(batadv1) entered disabled state [ 535.728275][ T1155] dvmrp1 (unregistering): left allmulticast mode [ 536.208834][ T1155] bond1 (unregistering): Released all slaves [ 536.349562][ T1155] bond2 (unregistering): Released all slaves [ 536.368680][ T1155] bond3 (unregistering): Released all slaves [ 536.388274][ T1155] bond4 (unregistering): Released all slaves [ 536.405875][ T1155] bond5 (unregistering): Released all slaves [ 536.549793][ T1155] bond6 (unregistering): Released all slaves [ 536.676368][ T1155] bond0 (unregistering): Released all slaves [ 536.680962][ T5844] Bluetooth: hci1: command tx timeout [ 536.805843][ T1155] bond7 (unregistering): Released all slaves [ 536.825562][ T1155] bond8 (unregistering): Released all slaves [ 536.843774][ T1155] bond9 (unregistering): Released all slaves [ 536.887962][T20613] veth0: entered promiscuous mode [ 536.907954][T20615] veth0: left promiscuous mode [ 537.092210][ T1155] tipc: Disabling bearer [ 537.099462][ T1155] tipc: Left network mode [ 537.116930][T20629] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 537.292826][ T1155] IPVS: stopping master sync thread 13577 ... [ 537.318362][T20501] chnl_net:caif_netlink_parms(): no params data found [ 537.421134][T20644] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3912'. [ 537.468456][T20646] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 537.505580][T20648] netlink: 'syz.2.3913': attribute type 10 has an invalid length. [ 537.531614][T20646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3912'. [ 537.571501][T20648] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 537.602888][T20650] IPVS: Error connecting to the multicast addr [ 537.635553][T20643] netdevsim netdevsim0: Direct firmware load for /.€ failed with error -2 [ 537.648665][T20643] netdevsim netdevsim0: Falling back to sysfs fallback for: /.€ [ 537.704036][T20655] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3915'. [ 537.843243][T20646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3912'. [ 537.938504][T20646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3912'. [ 538.007370][T20646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3912'. [ 538.064604][T20646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3912'. [ 538.143086][T20646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3912'. [ 538.216823][T20501] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.227189][T20501] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.235655][T20501] bridge_slave_0: entered allmulticast mode [ 538.244935][T20501] bridge_slave_0: entered promiscuous mode [ 538.255784][T20501] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.263745][T20501] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.276279][T20501] bridge_slave_1: entered allmulticast mode [ 538.287237][T20501] bridge_slave_1: entered promiscuous mode [ 538.579727][ T1155] veth1_vlan: left promiscuous mode [ 538.717467][T20686] netlink: 'syz.0.3920': attribute type 21 has an invalid length. [ 538.727661][T20686] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3920'. [ 538.756648][ T5844] Bluetooth: hci1: command tx timeout [ 538.777154][T20688] netlink: 'syz.0.3920': attribute type 21 has an invalid length. [ 538.793126][T20688] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3920'. [ 538.930949][ T1155] pim6reg527 (unregistering): left allmulticast mode [ 538.958034][ T1155] pimreg3 (unregistering): left allmulticast mode [ 540.364181][T20501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.384325][T20501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.396323][T20686] netlink: 'syz.0.3920': attribute type 4 has an invalid length. [ 540.406726][T20686] netlink: 'syz.0.3920': attribute type 5 has an invalid length. [ 540.416857][T20686] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3920'. [ 540.429639][T20688] netlink: 'syz.0.3920': attribute type 4 has an invalid length. [ 540.464904][T20688] netlink: 'syz.0.3920': attribute type 5 has an invalid length. [ 540.476496][T20688] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3920'. [ 540.563439][T20692] tipc: Enabled bearer , priority 0 [ 540.578157][T20697] syzkaller0: entered promiscuous mode [ 540.587041][T20697] syzkaller0: entered allmulticast mode [ 540.797991][T20501] team0: Port device team_slave_0 added [ 540.808419][T20697] tipc: Resetting bearer [ 540.831777][ T5844] Bluetooth: hci1: command tx timeout [ 540.886649][T20697] tipc: Disabling bearer [ 540.978883][T20501] team0: Port device team_slave_1 added [ 541.160935][T20731] netlink: 'syz.4.3928': attribute type 28 has an invalid length. [ 541.168899][T20731] netlink: 'syz.4.3928': attribute type 3 has an invalid length. [ 541.195698][T20731] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3928'. [ 541.242549][T20501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.251106][T20501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.279191][T20501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.349595][T20735] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3930'. [ 541.366500][T20501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.375058][T20501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.397661][T20740] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3931'. [ 541.403029][T20501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.479520][ T1155] IPVS: stop unused estimator thread 0... [ 541.587446][T20746] delete_channel: no stack [ 541.618139][T20501] hsr_slave_0: entered promiscuous mode [ 541.627149][T20501] hsr_slave_1: entered promiscuous mode [ 541.636110][T20501] debugfs: 'hsr0' already exists in 'hsr' [ 541.647549][T20501] Cannot create hsr debugfs directory [ 541.762400][T20746] syzkaller0: entered promiscuous mode [ 541.768020][T20746] syzkaller0: entered allmulticast mode [ 543.884580][T20755] geneve2: entered promiscuous mode [ 543.892087][T20755] geneve2: entered allmulticast mode [ 544.134463][T20773] sock: sock_set_timeout: `syz.4.3940' (pid 20773) tries to set negative timeout [ 544.147710][T20773] sock: sock_set_timeout: `syz.4.3940' (pid 20773) tries to set negative timeout [ 544.159530][T20773] sock: sock_set_timeout: `syz.4.3940' (pid 20773) tries to set negative timeout [ 544.170333][T20773] sock: sock_set_timeout: `syz.4.3940' (pid 20773) tries to set negative timeout [ 544.179570][T20773] sock: sock_set_timeout: `syz.4.3940' (pid 20773) tries to set negative timeout [ 544.871100][T20813] delete_channel: no stack [ 544.877543][T20807] __nla_validate_parse: 3 callbacks suppressed [ 544.877563][T20807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3949'. [ 545.008465][T20815] netlink: 'syz.0.3952': attribute type 4 has an invalid length. [ 545.093875][T20501] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 545.135114][T20501] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 545.199110][T20501] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 545.224960][T20501] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 545.363428][T20835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3957'. [ 545.518951][T20841] bridge3: port 1(veth0_to_bond) entered blocking state [ 545.532389][T20835] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3957'. [ 545.567606][T20841] bridge3: port 1(veth0_to_bond) entered disabled state [ 545.582695][T20841] veth0_to_bond: entered allmulticast mode [ 545.592962][T20848] Unsupported ieee802154 address type: 0 [ 545.602143][T20850] Unsupported ieee802154 address type: 0 [ 545.608209][T20841] veth0_to_bond: entered promiscuous mode [ 545.643644][T20841] vlan2: entered allmulticast mode [ 545.653354][T20851] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000 [ 545.683449][T20841] veth1: entered allmulticast mode [ 545.689161][T20841] bridge3: port 2(vlan2) entered blocking state [ 545.711524][T20841] bridge3: port 2(vlan2) entered disabled state [ 545.728856][T20841] vlan2: entered promiscuous mode [ 545.736167][T20841] veth1: entered promiscuous mode [ 545.924798][T20857] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3964'. [ 545.974776][T20501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.048515][T20501] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.119022][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.126325][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.147366][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.155022][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.703431][T20894] netlink: 'syz.0.3973': attribute type 16 has an invalid length. [ 546.757686][T20894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3973'. [ 547.065334][T20914] netlink: 'syz.2.3979': attribute type 6 has an invalid length. [ 547.129606][T20501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.644553][T20935] syzkaller1: entered promiscuous mode [ 547.690712][T20935] syzkaller1: entered allmulticast mode [ 547.713493][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 547.862337][T20946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3984'. [ 547.895912][T20946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3984'. [ 547.927346][T20944] netlink: 'syz.2.3985': attribute type 3 has an invalid length. [ 547.943908][T20944] netlink: 'syz.2.3985': attribute type 3 has an invalid length. [ 547.961010][T20944] netlink: 'syz.2.3985': attribute type 3 has an invalid length. [ 547.977237][T20944] netlink: 'syz.2.3985': attribute type 3 has an invalid length. [ 547.998580][T20944] netlink: 'syz.2.3985': attribute type 3 has an invalid length. [ 548.017128][T20946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3984'. [ 548.018955][T20944] netlink: 'syz.2.3985': attribute type 3 has an invalid length. [ 548.034081][T20946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3984'. [ 548.055593][T20944] netlink: 'syz.2.3985': attribute type 3 has an invalid length. [ 548.075500][T20944] netlink: 'syz.2.3985': attribute type 3 has an invalid length. [ 548.235799][T20954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 548.266587][T20946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3984'. [ 548.496672][T20965] tipc: Enabling of bearer rejected, already enabled [ 548.562572][T20965] bridge0: port 3(dummy0) entered disabled state [ 548.571435][T20965] dummy0: left allmulticast mode [ 548.576530][T20965] dummy0: left promiscuous mode [ 548.585207][T20965] bridge0: port 3(dummy0) entered disabled state [ 548.611441][T20965] team0: Port device dummy0 added [ 548.635001][T20971] team0: Port device dummy0 removed [ 548.646357][T20971] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 548.666932][T20501] veth0_vlan: entered promiscuous mode [ 548.683094][T20501] veth1_vlan: entered promiscuous mode [ 548.763205][T20501] veth0_macvtap: entered promiscuous mode [ 548.794618][T20501] veth1_macvtap: entered promiscuous mode [ 549.149531][T20501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.187623][T20501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.275207][T21000] openvswitch: netlink: Flow key attribute not present in set flow. [ 549.278572][T17386] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.326684][T17386] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.344110][T17386] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.376812][T17386] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.979335][T21027] pimreg3: entered allmulticast mode [ 550.041607][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.062968][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.161687][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.175110][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.318144][T21040] openvswitch: netlink: IP tunnel dst address not specified [ 550.409796][T21047] __nla_validate_parse: 7 callbacks suppressed [ 550.409821][T21047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4013'. [ 550.494084][T21053] 8021q: VLANs not supported on sit0 [ 551.056679][T21078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4023'. [ 551.185924][T21086] veth0_vlan: entered allmulticast mode [ 551.269758][T21089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4025'. [ 551.283861][T21092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4027'. [ 551.315742][T21096] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4026'. [ 551.327709][T21086] veth0_vlan: left promiscuous mode [ 551.345972][T21089] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4025'. [ 551.350849][T21086] veth0_vlan: entered promiscuous mode [ 551.356934][T21089] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4025'. [ 551.386651][T21086] team0: Device veth0_vlan failed to register rx_handler [ 551.433846][T21087] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.862299][T21113] sit0: entered promiscuous mode [ 551.884915][T21113] validate_nla: 44 callbacks suppressed [ 551.884937][T21113] netlink: 'syz.4.4032': attribute type 1 has an invalid length. [ 551.902402][T21120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4035'. [ 551.917020][T21121] openvswitch: netlink: Actions may not be safe on all matching packets [ 551.921762][T21113] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4032'. [ 552.359745][T21142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4041'. [ 552.748156][T21162] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 552.778386][T21165] bridge1: entered promiscuous mode [ 552.787568][T21165] bridge1: entered allmulticast mode [ 553.461673][T21196] netlink: 'syz.1.4062': attribute type 10 has an invalid length. [ 553.520863][T21201] netlink: 'syz.2.4065': attribute type 2 has an invalid length. [ 553.542012][T21196] netlink: 'syz.1.4062': attribute type 10 has an invalid length. [ 553.578861][T21196] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 553.638958][T21205] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 553.829248][T21221] syz.5.4069: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 553.902218][T21221] CPU: 1 UID: 0 PID: 21221 Comm: syz.5.4069 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 553.902253][T21221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 553.902268][T21221] Call Trace: [ 553.902278][T21221] [ 553.902288][T21221] dump_stack_lvl+0x189/0x250 [ 553.902322][T21221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 553.902344][T21221] ? __pfx__printk+0x10/0x10 [ 553.902373][T21221] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 553.902398][T21221] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 553.902426][T21221] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 553.902455][T21221] warn_alloc+0x214/0x310 [ 553.902477][T21221] ? stack_depot_save_flags+0x40/0x900 [ 553.902504][T21221] ? __pfx_warn_alloc+0x10/0x10 [ 553.902528][T21221] ? kasan_save_track+0x4f/0x80 [ 553.902559][T21221] ? xskq_create+0x56/0x170 [ 553.902587][T21221] ? xsk_init_queue+0xb0/0x110 [ 553.902612][T21221] ? xsk_setsockopt+0x4dc/0x8d0 [ 553.902637][T21221] ? do_sock_setsockopt+0x179/0x1b0 [ 553.902657][T21221] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 553.902677][T21221] ? do_syscall_64+0xfa/0x3b0 [ 553.902707][T21221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.902739][T21221] __vmalloc_node_range_noprof+0x125/0x12f0 [ 553.902796][T21221] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 553.902826][T21221] ? __kasan_kmalloc+0x93/0xb0 [ 553.902861][T21221] vmalloc_user_noprof+0xad/0xf0 [ 553.902882][T21221] ? xskq_create+0xbf/0x170 [ 553.902932][T21221] xskq_create+0xbf/0x170 [ 553.902979][T21221] xsk_init_queue+0xb0/0x110 [ 553.903012][T21221] xsk_setsockopt+0x4dc/0x8d0 [ 553.903043][T21221] ? __pfx_xsk_setsockopt+0x10/0x10 [ 553.903071][T21221] ? __pfx_aa_sk_perm+0x10/0x10 [ 553.903104][T21221] ? aa_sock_opt_perm+0x74/0x110 [ 553.903135][T21221] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 553.903160][T21221] ? __pfx_xsk_setsockopt+0x10/0x10 [ 553.903190][T21221] do_sock_setsockopt+0x179/0x1b0 [ 553.903217][T21221] __x64_sys_setsockopt+0x13f/0x1b0 [ 553.903245][T21221] do_syscall_64+0xfa/0x3b0 [ 553.903279][T21221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.903299][T21221] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 553.903321][T21221] ? clear_bhb_loop+0x60/0xb0 [ 553.903348][T21221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.903368][T21221] RIP: 0033:0x7f26d6f8eb69 [ 553.903388][T21221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.903407][T21221] RSP: 002b:00007f26d7d4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 553.903432][T21221] RAX: ffffffffffffffda RBX: 00007f26d71b5fa0 RCX: 00007f26d6f8eb69 [ 553.903447][T21221] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 553.903460][T21221] RBP: 00007f26d7011df1 R08: 0000000000000004 R09: 0000000000000000 [ 553.903473][T21221] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 553.903487][T21221] R13: 0000000000000000 R14: 00007f26d71b5fa0 R15: 00007ffd8c817b98 [ 553.903521][T21221] [ 553.903530][T21221] Mem-Info: [ 554.002963][T21226] netlink: 'syz.4.4070': attribute type 10 has an invalid length. [ 554.033933][T21221] active_anon:6728 inactive_anon:0 isolated_anon:0 [ 554.033933][T21221] active_file:1668 inactive_file:40028 isolated_file:0 [ 554.033933][T21221] unevictable:768 dirty:31 writeback:0 [ 554.033933][T21221] slab_reclaimable:12862 slab_unreclaimable:121438 [ 554.033933][T21221] mapped:29239 shmem:1394 pagetables:1326 [ 554.033933][T21221] sec_pagetables:0 bounce:0 [ 554.033933][T21221] kernel_misc_reclaimable:0 [ 554.033933][T21221] free:1296918 free_pcp:12038 free_cma:0 [ 554.034051][T21221] Node 0 active_anon:26912kB inactive_anon:0kB active_file:6672kB inactive_file:159908kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116956kB dirty:120kB writeback:0kB shmem:4040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:15856kB pagetables:5156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 554.034112][T21221] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 554.034169][T21221] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 554.034236][T21221] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 554.034291][T21221] Node 0 [ 554.132362][T21226] team0: Device C is loopback device. Loopback devices can't be added as a team port [ 554.178447][T21221] DMA32 free:1260796kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26976kB inactive_anon:0kB active_file:6672kB inactive_file:158076kB unevictable:1536kB writepending:112kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:36456kB local_pcp:19960kB free_cma:0kB [ 554.186219][T21226] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 554.279947][T21221] lowmem_reserve[]: 0 0 1 1 1 [ 554.535440][T21221] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1836kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 554.608318][T21221] lowmem_reserve[]: 0 0 0 0 0 [ 554.632902][T21221] Node 1 Normal free:3911416kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:11680kB local_pcp:4576kB free_cma:0kB [ 554.688470][T21221] lowmem_reserve[]: 0 0 0 0 0 [ 554.707630][T21221] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 554.748578][T21221] Node 0 DMA32: 1439*4kB (UME) 882*8kB (UM) 69*16kB (UM) 323*32kB (UME) 91*64kB (UME) 57*128kB (UM) 17*256kB (UM) 3*512kB (UM) 1*1024kB (U) 2*2048kB (ME) 296*4096kB (UM) = 1260796kB [ 554.818819][T21252] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 554.828256][T13082] IPVS: starting estimator thread 0... [ 554.899520][T21221] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 554.930944][T21255] IPVS: using max 26 ests per chain, 62400 per kthread [ 554.980635][T21221] Node 1 Normal: 190*4kB (UME) 58*8kB (UME) 55*16kB (UME) 210*32kB (UME) 72*64kB (UME) 13*128kB (UME) 4*256kB (UME) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 950*4096kB (M) = 3911416kB [ 555.022660][T21221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 555.075884][T21221] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 555.135507][T21221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 555.169223][T21221] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 555.206957][T21270] netlink: 'syz.2.4084': attribute type 10 has an invalid length. [ 555.224568][T21270] team0: Device veth1_macvtap failed to register rx_handler [ 555.245310][T21221] 44478 total pagecache pages [ 555.261498][T21269] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 555.299941][T21221] 0 pages in swap cache [ 555.311460][T21221] Free swap = 124996kB [ 555.315693][T21221] Total swap = 124996kB [ 555.330436][T21221] 2097051 pages RAM [ 555.334302][T21221] 0 pages HighMem/MovableOnly [ 555.339648][T21221] 424872 pages reserved [ 555.352118][T21221] 0 pages cma reserved [ 555.448162][T21277] __nla_validate_parse: 6 callbacks suppressed [ 555.448182][T21277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4087'. [ 555.448493][T21276] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4086'. [ 555.594306][T21285] netlink: 'syz.1.4088': attribute type 2 has an invalid length. [ 555.667363][T21285] bond0: (slave dummy0): Releasing backup interface [ 555.914123][T21302] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4094'. [ 556.008243][T21305] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4095'. [ 556.195677][T21304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.259178][T21321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4099'. [ 556.446023][T21327] tipc: Started in network mode [ 556.452089][T21327] tipc: Node identity 321d6a22b32a, cluster identity 4711 [ 556.462034][T21327] tipc: Enabled bearer , priority 0 [ 556.483184][T21327] tipc: Resetting bearer [ 556.526947][T21326] tipc: Disabling bearer [ 556.916761][T21358] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4109'. [ 556.986569][T21358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4109'. [ 557.053458][T21358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4109'. [ 557.367483][T21378] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4114'. [ 557.428551][T21382] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4114'. [ 558.221309][T21415] netlink: 'syz.5.4123': attribute type 1 has an invalid length. [ 558.313529][T21416] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 558.320909][T21416] IPv6: NLM_F_CREATE should be set when creating new route [ 558.328290][T21416] IPv6: NLM_F_CREATE should be set when creating new route [ 558.345922][T21416] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 559.179359][T21470] netlink: 'syz.0.4140': attribute type 21 has an invalid length. [ 559.189128][T21470] netlink: 'syz.0.4140': attribute type 22 has an invalid length. [ 559.198627][T21470] netlink: 'syz.0.4140': attribute type 23 has an invalid length. [ 559.208200][T21470] netlink: 'syz.0.4140': attribute type 25 has an invalid length. [ 560.928057][T21565] __nla_validate_parse: 11 callbacks suppressed [ 560.928078][T21565] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4167'. [ 560.956770][T21563] bond8 (unregistering): Released all slaves [ 561.025715][T21567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4166'. [ 561.105001][T21573] netlink: 'syz.2.4168': attribute type 27 has an invalid length. [ 561.296463][T21573] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.357148][T21573] team_slave_0: left promiscuous mode [ 561.379595][T21573] team_slave_1: left promiscuous mode [ 561.414318][T21581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4169'. [ 561.634812][T21573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.733061][T21573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.815594][T21586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4170'. [ 562.007694][T21573] veth0_vlan: left allmulticast mode [ 562.047994][T21573] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 562.157113][T17374] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.202825][T17374] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.226423][T17374] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.266429][T17374] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.347066][T21604] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 562.916485][T21640] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4182'. [ 563.043782][T21634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 563.252102][T21658] IPVS: sync thread started: state = MASTER, mcast_ifn = vxcan1, syncid = 2, id = 0 [ 563.257361][T21653] IPVS: length: 214 != 24 [ 563.315351][T21664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4189'. [ 563.463677][T21669] netlink: 'syz.5.4193': attribute type 29 has an invalid length. [ 563.487604][T21669] netlink: 'syz.5.4193': attribute type 29 has an invalid length. [ 563.505318][T21669] netlink: 500 bytes leftover after parsing attributes in process `syz.5.4193'. [ 563.536234][T21669] unsupported nla_type 58 [ 563.606677][T21677] netlink: 'syz.2.4196': attribute type 5 has an invalid length. [ 563.988424][T21689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4198'. [ 563.990984][T21688] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4197'. [ 564.000549][T21692] netlink: 'syz.4.4198': attribute type 1 has an invalid length. [ 564.016335][T21692] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4198'. [ 564.352946][ T5844] Bluetooth: hci0: command tx timeout [ 564.687106][T21726] smc: net device erspan0 erased user defined pnetid SYZ0 [ 564.773065][T21726] netlink: 'syz.4.4207': attribute type 5 has an invalid length. [ 565.215790][T21746] netlink: 'syz.1.4213': attribute type 21 has an invalid length. [ 565.238366][T21746] netlink: 'syz.1.4213': attribute type 4 has an invalid length. [ 565.272039][T21746] netlink: 'syz.1.4213': attribute type 5 has an invalid length. [ 566.076838][T21791] __nla_validate_parse: 14 callbacks suppressed [ 566.076904][T21791] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4227'. [ 566.218450][T21793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4228'. [ 566.357052][T21798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4229'. [ 566.402535][T21806] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.4230'. [ 566.441477][T21809] : renamed from hsr0 (while UP) [ 566.466588][T21809] : failed to rename [ 566.494466][T21811] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4232'. [ 566.508752][T21811] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4232'. [ 566.522946][T21811] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 566.693569][T21826] netlink: 'syz.1.4238': attribute type 1 has an invalid length. [ 566.767583][T21823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4235'. [ 566.846946][T21831] bond8: (slave gretap1): making interface the new active one [ 566.859380][T21831] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 567.433471][T21845] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4240'. [ 568.142687][T21875] netlink: 'syz.0.4247': attribute type 12 has an invalid length. [ 568.154879][T21873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4247'. [ 568.165421][T21875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4247'. [ 568.218822][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 569.291352][T21939] sctp: [Deprecated]: syz.5.4268 (pid 21939) Use of int in maxseg socket option. [ 569.291352][T21939] Use struct sctp_assoc_value instead [ 569.439609][T21943] validate_nla: 3 callbacks suppressed [ 569.439643][T21943] netlink: 'syz.1.4270': attribute type 16 has an invalid length. [ 569.843712][T21964] IPVS: ip_vs_edit_dest(): server weight less than zero [ 569.860875][T21968] sctp: [Deprecated]: syz.0.4275 (pid 21968) Use of int in maxseg socket option. [ 569.860875][T21968] Use struct sctp_assoc_value instead [ 570.245054][T21991] netlink: 'syz.0.4284': attribute type 11 has an invalid length. [ 570.278793][T21991] netlink: 'syz.0.4284': attribute type 11 has an invalid length. [ 570.344968][T21994] rdma_op ffff88807cc701f0 conn xmit_rdma 0000000000000000 [ 570.351955][T21996] openvswitch: netlink: Flow actions attr not present in new flow. [ 570.374008][T21994] delete_channel: no stack [ 570.439712][T21999] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 570.525692][T21999] bond3: entered promiscuous mode [ 570.531323][T21999] bond3: entered allmulticast mode [ 570.537593][T21999] 8021q: adding VLAN 0 to HW filter on device bond3 [ 570.632660][T22008] team0: Port device dummy0 removed [ 570.665145][T22008] bridge_slave_0: left allmulticast mode [ 570.690591][T22008] bridge_slave_0: left promiscuous mode [ 570.708180][T22008] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.736667][T22008] bridge_slave_1: left allmulticast mode [ 570.765695][T22008] bridge_slave_1: left promiscuous mode [ 570.776871][T22008] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.806872][T22008] bond0: (slave bond_slave_0): Releasing backup interface [ 570.856594][T22008] bond_slave_0: left promiscuous mode [ 570.882348][T22008] bond0: (slave bond_slave_1): Releasing backup interface [ 570.899759][T22008] bond_slave_1: left promiscuous mode [ 570.966384][T22008] team0: Port device team_slave_0 removed [ 570.996865][T22008] team0: Port device team_slave_1 removed [ 571.019682][T22008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.051495][T22008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.064624][T22008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.078370][T22008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.119198][T22008] bond3: (slave macvlan3): Removing an active aggregator [ 571.131802][T22008] bond3: (slave macvlan3): Releasing backup interface [ 571.497182][T22036] __nla_validate_parse: 9 callbacks suppressed [ 571.497206][T22036] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4296'. [ 571.577291][T22042] netlink: 'syz.1.4299': attribute type 6 has an invalid length. [ 571.733272][T22063] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4304'. [ 571.734610][T22064] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4304'. [ 571.788674][T22063] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 572.055674][T13083] hid-generic 0005:16C0:5505.0004: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 572.521614][T22102] netlink: 'syz.2.4314': attribute type 3 has an invalid length. [ 572.553300][T22102] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4314'. [ 572.561259][T22105] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4315'. [ 572.680895][T22110] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 572.783905][T22119] sctp: [Deprecated]: syz.4.4319 (pid 22119) Use of int in max_burst socket option deprecated. [ 572.783905][T22119] Use struct sctp_assoc_value instead [ 572.800986][T22125] netlink: 'syz.2.4320': attribute type 83 has an invalid length. [ 572.822839][T22126] delete_channel: no stack [ 573.021629][T22133] tipc: Enabled bearer , priority 10 [ 573.257945][T22149] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4325'. [ 573.551208][T22162] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4331'. [ 573.673312][T22156] netlink: 'syz.0.4330': attribute type 75 has an invalid length. [ 573.914221][T22177] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4335'. [ 573.924763][T22179] veth0_to_team: entered promiscuous mode [ 573.945169][T22179] veth0_to_team: entered allmulticast mode [ 574.224270][T22194] syzkaller1: entered promiscuous mode [ 574.237000][T22194] syzkaller1: entered allmulticast mode [ 574.416545][T22204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4342'. [ 574.632707][T22211] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4345'. [ 574.819529][T22221] tipc: Enabled bearer , priority 0 [ 574.861748][T22222] syzkaller0: entered promiscuous mode [ 574.867911][T22222] syzkaller0: entered allmulticast mode [ 574.906596][T22226] NCSI netlink: No device for ifindex 16845312 [ 575.026877][T22222] tipc: Resetting bearer [ 575.102709][T22222] tipc: Disabling bearer [ 575.371976][T22247] tipc: Enabling of bearer rejected, already enabled [ 575.474537][T22254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 575.512571][T22254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 576.209495][T22295] netlink: 'syz.4.4366': attribute type 11 has an invalid length. [ 576.230091][T22295] netlink: 'syz.4.4366': attribute type 4 has an invalid length. [ 576.337510][T22309] sctp: [Deprecated]: syz.2.4370 (pid 22309) Use of int in max_burst socket option deprecated. [ 576.337510][T22309] Use struct sctp_assoc_value instead [ 576.642734][T22325] netlink: 'syz.1.4377': attribute type 62 has an invalid length. [ 577.004815][T22346] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 577.252228][T22362] __nla_validate_parse: 7 callbacks suppressed [ 577.252251][T22362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4389'. [ 577.285777][T22363] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.4388'. [ 577.331997][T22367] netlink: 'syz.1.4390': attribute type 10 has an invalid length. [ 577.351935][T22363] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 577.352325][T22367] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4390'. [ 577.426899][T22367] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 577.632668][T22384] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4396'. [ 577.655455][T22386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4395'. [ 577.656293][T22384] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4396'. [ 578.064654][T22406] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4400'. [ 578.429831][T22421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4405'. [ 578.433842][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.617931][T22386] netlink: 'syz.2.4395': attribute type 6 has an invalid length. [ 579.083807][T17384] dvmrp1 (unregistering): left allmulticast mode [ 579.278899][T17384] bond0 (unregistering): Released all slaves [ 579.297234][T17384] bond1 (unregistering): Released all slaves [ 579.461384][T17384] bond2 (unregistering): Released all slaves [ 579.623485][T17384] bond3 (unregistering): Released all slaves [ 579.840889][T17384] tipc: Disabling bearer [ 579.857000][T17384] tipc: Disabling bearer [ 579.877605][T17384] tipc: Left network mode [ 579.900447][T22437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4411'. [ 580.306022][T22455] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4416'. [ 580.874912][T17384] hsr_slave_0: left promiscuous mode [ 580.926140][T17384] pimreg3 (unregistering): left allmulticast mode [ 582.143290][T22504] tipc: Enabled bearer , priority 0 [ 582.151762][T22504] syzkaller0: entered promiscuous mode [ 582.157739][T22504] syzkaller0: entered allmulticast mode [ 582.246089][T22511] openvswitch: netlink: Key type 10512 is out of range max 32 [ 582.281056][T22513] netlink: 'syz.4.4432': attribute type 4 has an invalid length. [ 582.315208][T22504] tipc: Resetting bearer [ 582.376694][T22504] netlink: 'syz.1.4431': attribute type 1 has an invalid length. [ 582.409061][T17384] IPVS: stop unused estimator thread 0... [ 582.728714][T22507] 8021q: adding VLAN 0 to HW filter on device bond10 [ 582.786866][T22507] bond9: (slave bond10): making interface the new active one [ 582.817345][T22534] __nla_validate_parse: 5 callbacks suppressed [ 582.817365][T22534] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4435'. [ 582.842377][T22507] bond9: (slave bond10): Enslaving as an active interface with an up link [ 582.906433][T22517] 8021q: adding VLAN 0 to HW filter on device bond11 [ 582.919692][T22517] bond9: (slave bond11): Enslaving as a backup interface with an up link [ 582.932892][T22503] tipc: Resetting bearer [ 582.959013][T22503] tipc: Disabling bearer [ 583.369684][T22550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4440'. [ 583.383464][T22550] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4440'. [ 583.395590][T22550] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4440'. [ 583.857649][T22571] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4447'. [ 583.873853][T22566] netlink: 'syz.1.4443': attribute type 10 has an invalid length. [ 583.902362][T22566] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 584.028766][T22576] veth1_macvtap: left promiscuous mode [ 584.052045][T22576] macsec0: entered promiscuous mode [ 584.057332][T22576] macsec0: entered allmulticast mode [ 584.139633][T22582] veth1_macvtap: entered promiscuous mode [ 584.151949][T22582] veth1_macvtap: entered allmulticast mode [ 584.158752][T22582] macsec0: left promiscuous mode [ 584.168168][T22576] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4450'. [ 584.199596][T22582] macsec0: left allmulticast mode [ 584.220956][T22582] veth1_macvtap: left allmulticast mode [ 584.247038][T22576] netlink: 'syz.0.4450': attribute type 1 has an invalid length. [ 584.269111][T22576] netlink: 'syz.0.4450': attribute type 1 has an invalid length. [ 584.305157][T22593] netlink: 'syz.4.4453': attribute type 21 has an invalid length. [ 584.360966][T22593] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4453'. [ 584.605775][T22604] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4456'. [ 584.781505][T22614] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4459'. [ 584.918751][T22621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 584.931015][T22620] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 585.113420][T22623] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 585.156503][T22623] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 585.382853][T22647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4468'. [ 585.556734][T22653] tipc: Enabled bearer , priority 0 [ 585.638626][T22653] syzkaller0: entered promiscuous mode [ 585.645251][T22653] syzkaller0: entered allmulticast mode [ 585.652919][T22653] tipc: Resetting bearer [ 585.677492][T22652] tipc: Resetting bearer [ 587.898331][T22652] tipc: Disabling bearer [ 588.182480][T22680] __nla_validate_parse: 3 callbacks suppressed [ 588.182501][T22680] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4479'. [ 588.322125][T22691] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4484'. [ 588.353188][T22692] netlink: 'syz.5.4482': attribute type 10 has an invalid length. [ 588.363542][T22693] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4483'. [ 588.373440][T22692] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4482'. [ 588.395850][T22691] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4484'. [ 588.453665][T22692] team0: Port device geneve0 added [ 588.464836][T22700] tipc: Enabled bearer , priority 0 [ 588.565295][T22687] syzkaller0: entered promiscuous mode [ 588.611982][T22687] syzkaller0: entered allmulticast mode [ 588.655840][T22705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4485'. [ 588.657502][T22703] tipc: Resetting bearer [ 588.742833][T22682] tipc: Resetting bearer [ 588.917267][T22722] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4488'. [ 589.591532][T13083] tipc: Node number set to 3209313111 [ 590.825159][T22682] tipc: Disabling bearer [ 590.844945][T22713] tipc: Enabled bearer , priority 0 [ 590.975511][T22713] tipc: Disabling bearer [ 591.026163][T22729] netlink: 'syz.2.4489': attribute type 83 has an invalid length. [ 591.048860][T22730] netlink: ct family unspecified [ 591.052869][T22732] netlink: 'syz.4.4492': attribute type 1 has an invalid length. [ 591.065593][T22726] netdevsim netdevsim5 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 591.091929][T22730] openvswitch: netlink: Actions may not be safe on all matching packets [ 591.188515][T22733] bond7 (unregistering): Released all slaves [ 591.214117][T22742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4494'. [ 591.223974][T22743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4493'. [ 591.237859][T22741] netlink: zone id is out of range [ 591.271038][T22742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4494'. [ 591.281970][T22732] bond7: entered promiscuous mode [ 591.287367][T22742] netlink: 'syz.2.4494': attribute type 9 has an invalid length. [ 591.298014][T22732] 8021q: adding VLAN 0 to HW filter on device bond7 [ 591.371237][T17381] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.416378][T17381] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.480712][T17381] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.508943][T22755] sctp: [Deprecated]: syz.4.4497 (pid 22755) Use of int in max_burst socket option. [ 591.508943][T22755] Use struct sctp_assoc_value instead [ 591.531864][T17381] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 592.281599][T22806] tipc: Enabled bearer , priority 0 [ 592.371259][T22802] tipc: Disabling bearer [ 592.402514][T22816] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 592.956794][T22844] netlink: 'syz.4.4521': attribute type 3 has an invalid length. [ 592.991081][T22845] netlink: 'syz.4.4521': attribute type 3 has an invalid length. [ 593.646749][T22891] ksmbd: Unknown IPC event: 3, ignore. [ 593.756339][T22894] netlink: 'syz.5.4538': attribute type 10 has an invalid length. [ 593.790172][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 593.802931][T22894] bond0: (slave ÿÿÿÿÿÿ): Enslaving as an active interface with an up link [ 594.053983][T22898] __nla_validate_parse: 7 callbacks suppressed [ 594.054003][T22898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4540'. [ 594.085520][T22916] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 594.108652][T22918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4544'. [ 595.024321][T22954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4557'. [ 595.344804][T22973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.682144][T22994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4568'. [ 595.871568][T20503] Bluetooth: hci5: command 0x0405 tx timeout [ 595.976690][T23010] netdevsim netdevsim2: Direct firmware load for /.€ failed with error -2 [ 595.985848][T23010] netdevsim netdevsim2: Falling back to sysfs fallback for: /.€ [ 595.997882][T23014] netlink: 71 bytes leftover after parsing attributes in process `syz.4.4573'. [ 596.064456][T23004] veth0_to_bond: entered allmulticast mode [ 596.122860][T23022] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 596.296189][T23028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4574'. [ 596.477448][T23039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4578'. [ 596.608020][T23044] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 597.069590][T23066] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4585'. [ 597.278255][T23079] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4591'. [ 597.397913][T23088] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4593'. [ 597.965735][T23111] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 597.966393][T23113] netlink: 'syz.1.4603': attribute type 1 has an invalid length. [ 597.997518][T23117] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 598.007035][T23116] gretap0: entered promiscuous mode [ 598.007318][T23113] netlink: 'syz.1.4603': attribute type 1 has an invalid length. [ 598.025659][T23116] 0ªî{X¹¦: renamed from gretap0 [ 598.063406][T23116] 0ªî{X¹¦: left promiscuous mode [ 598.073542][T23116] 0ªî{X¹¦: entered allmulticast mode [ 598.097543][T23116] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 598.179016][T23125] tipc: Enabling of bearer rejected, failed to enable media [ 598.768334][T23161] lo: entered allmulticast mode [ 598.776269][T23161] tunl0: entered allmulticast mode [ 598.796443][T23161] gre0: entered allmulticast mode [ 598.803228][T23161] gretap0: entered allmulticast mode [ 598.809024][T23161] erspan0: entered allmulticast mode [ 598.822540][T23161] ip_vti0: entered allmulticast mode [ 598.828626][T23161] ip6_vti0: entered allmulticast mode [ 598.844995][T23161] sit0: entered allmulticast mode [ 598.851404][T23161] ip6tnl0: entered allmulticast mode [ 598.857059][T23161] ip6gre0: entered allmulticast mode [ 598.867216][T23161] syz_tun: entered allmulticast mode [ 598.894848][T23161] ip6gretap0: entered allmulticast mode [ 598.907175][T23161] bridge0: entered allmulticast mode [ 598.932049][T23161] bond0: entered allmulticast mode [ 598.942789][T23161] bond_slave_0: entered allmulticast mode [ 598.948866][T23161] team0: entered allmulticast mode [ 598.983889][T23161] team_slave_0: entered allmulticast mode [ 598.991207][T23161] team_slave_1: entered allmulticast mode [ 598.997321][T23161] dummy0: entered allmulticast mode [ 599.004012][T23161] nlmon0: entered allmulticast mode [ 599.009577][T23161] caif0: entered allmulticast mode [ 599.028351][T23161] batadv0: entered allmulticast mode [ 599.037153][T23161] vxcan0: entered allmulticast mode [ 599.055117][T23161] vxcan1: entered allmulticast mode [ 599.061560][T23161] veth0: entered allmulticast mode [ 599.067789][T23161] wg0: entered allmulticast mode [ 599.076655][T23161] wg1: entered allmulticast mode [ 599.087728][T23161] wg2: entered allmulticast mode [ 599.122487][T23161] veth0_to_bridge: entered allmulticast mode [ 599.129251][T23161] veth1_to_bridge: entered allmulticast mode [ 599.143410][T23161] veth1_to_bond: entered allmulticast mode [ 599.149650][T23161] bond_slave_1: entered allmulticast mode [ 599.164437][T23161] veth0_to_team: entered allmulticast mode [ 599.172925][T23161] veth1_to_team: entered allmulticast mode [ 599.179281][T23161] veth0_to_batadv: entered allmulticast mode [ 599.198056][T23161] batadv_slave_0: entered allmulticast mode [ 599.207721][T23161] veth1_to_batadv: entered allmulticast mode [ 599.216556][T23161] batadv_slave_1: entered allmulticast mode [ 599.223843][T23161] xfrm0: entered allmulticast mode [ 599.229461][T23161] veth0_to_hsr: entered allmulticast mode [ 599.241443][T23161] hsr_slave_0: entered allmulticast mode [ 599.248305][T23161] veth1_to_hsr: entered allmulticast mode [ 599.255695][T23161] hsr_slave_1: entered allmulticast mode [ 599.263094][T23161] hsr0: entered allmulticast mode [ 599.269116][T23161] veth1_vlan: entered allmulticast mode [ 599.286977][T23161] veth0_vlan: entered allmulticast mode [ 599.296041][T23161] vlan0: entered allmulticast mode [ 599.307047][T23161] vlan1: entered allmulticast mode [ 599.333668][T23161] macvlan0: entered allmulticast mode [ 599.355569][T23161] macvlan1: entered allmulticast mode [ 599.379217][T23161] ipvlan0: entered allmulticast mode [ 599.415980][T23161] ipvlan1: entered allmulticast mode [ 599.440255][T23161] veth1_macvtap: entered allmulticast mode [ 599.457773][T23161] veth0_macvtap: entered allmulticast mode [ 599.466655][T23161] macvtap0: entered allmulticast mode [ 599.479233][T23161] macsec0: entered allmulticast mode [ 599.486370][T23161] geneve0: entered allmulticast mode [ 599.495508][T23161] geneve1: entered allmulticast mode [ 599.503361][T23161] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 599.512379][T23161] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 599.521486][T23161] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 599.529422][T23161] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 599.543327][T23161] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode [ 599.555370][T23161] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode [ 599.563933][T23161] bridge1: entered allmulticast mode [ 599.569697][T23161] ip6tnl1: entered allmulticast mode [ 599.576061][T23161] ipip0: entered allmulticast mode [ 599.582318][T23161] bond1: entered allmulticast mode [ 599.587626][T23161] mac80211_hwsim hwsim39 wlan2: entered allmulticast mode [ 599.596985][T23161] bridge2: entered allmulticast mode [ 599.604307][T23161] batadv0.0: entered allmulticast mode [ 599.611164][T23161] bond2: entered allmulticast mode [ 599.616606][T23161] vcan1: entered allmulticast mode [ 599.622615][T23161] veth2: entered allmulticast mode [ 599.627940][T23161] veth3: entered allmulticast mode [ 599.634639][T23161] macsec1: entered allmulticast mode [ 599.644292][T23161] bridge3: entered allmulticast mode [ 599.650077][T23161] veth0_vlan.1: entered allmulticast mode [ 599.656833][T23161] bond3: left promiscuous mode [ 599.663654][T23161] bridge4: entered allmulticast mode [ 599.669542][T23161] bridge5: entered allmulticast mode [ 599.675840][T23161] xfrm1: entered allmulticast mode [ 599.681937][T23161] veth4: entered allmulticast mode [ 599.687318][T23161] veth5: entered allmulticast mode [ 599.695602][T23161] vxlan0: entered allmulticast mode [ 599.743749][T17384] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.804483][ T1155] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.865426][ T1155] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.896632][ T1155] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.087492][T23212] __nla_validate_parse: 84 callbacks suppressed [ 600.087513][T23212] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4631'. [ 600.102230][T23214] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4632'. [ 600.142319][T23214] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 600.163808][T23214] 0ªî{X¹¦: entered allmulticast mode [ 600.181633][T23214] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 600.303563][T23224] veth0: entered promiscuous mode [ 600.315945][T23220] veth0: left promiscuous mode [ 600.612049][T23244] bridge_slave_0: default FDB implementation only supports local addresses [ 600.623092][T23234] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4639'. [ 600.633065][T23234] netlink: 'syz.5.4639': attribute type 1 has an invalid length. [ 600.653882][T23234] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4639'. [ 600.674692][T23247] syzkaller1: entered promiscuous mode [ 600.695397][T23247] syzkaller1: entered allmulticast mode [ 600.728783][T23247] syzkaller1: left promiscuous mode [ 600.736074][T23244] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 600.736573][ T5897] IPVS: starting estimator thread 0... [ 600.747583][T23247] syzkaller1: left allmulticast mode [ 600.777029][T23247] 8021q: VLANs not supported on syzkaller1 [ 600.844804][T23261] IPVS: using max 24 ests per chain, 57600 per kthread [ 601.141597][T23281] netlink: 'syz.0.4650': attribute type 39 has an invalid length. [ 601.178388][T23282] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4651'. [ 601.247736][T23294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4652'. [ 601.497580][T23295] team0: Mode changed to "loadbalance" [ 601.949049][T23320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4661'. [ 601.971067][T23320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4661'. [ 602.189486][T23328] netlink: 'syz.4.4663': attribute type 21 has an invalid length. [ 602.199425][T23329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4664'. [ 602.211610][T23333] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4665'. [ 602.255803][T23329] xfrm2: entered promiscuous mode [ 602.287581][T23329] xfrm2: entered allmulticast mode [ 602.308766][T23333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 602.955794][T23364] netlink: 'syz.4.4672': attribute type 10 has an invalid length. [ 602.978331][T23363] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 603.016381][T23363] netlink: 'syz.0.4671': attribute type 14 has an invalid length. [ 603.065710][T23368] netlink: 'syz.2.4674': attribute type 1 has an invalid length. [ 603.135609][T23368] 8021q: adding VLAN 0 to HW filter on device bond4 [ 603.147918][T23376] netlink: zone id is out of range [ 603.154969][T23376] netlink: get zone limit has 8 unknown bytes [ 603.233550][T23368] bond4: (slave gretap1): making interface the new active one [ 603.244065][T23368] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 603.673668][T23390] can: request_module (can-proto-0) failed. [ 603.884588][T23413] dummy0: entered promiscuous mode [ 603.912748][T23413] dummy0: left promiscuous mode [ 603.977292][T23417] netlink: 'syz.2.4684': attribute type 1 has an invalid length. [ 604.005142][T23417] netlink: 'syz.2.4684': attribute type 11 has an invalid length. [ 604.005731][T23419] 8021q: VLANs not supported on lo [ 604.398431][T23426] netlink: 'syz.5.4688': attribute type 4 has an invalid length. [ 604.421562][T23434] tap0: tun_chr_ioctl cmd 1074025676 [ 604.427318][T23434] tap0: owner set to 0 [ 604.674884][ T49] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea [ 605.196152][T23483] __nla_validate_parse: 13 callbacks suppressed [ 605.196174][T23483] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4708'. [ 605.639662][T23514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4717'. [ 605.724011][T23514] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4717'. [ 605.885817][T23522] netlink: 'syz.4.4719': attribute type 1 has an invalid length. [ 606.182748][T23532] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4721'. [ 606.465382][T23536] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4722'. [ 607.176052][T23576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4733'. [ 607.185942][T23576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4733'. [ 607.784954][T23597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.959051][T23601] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 608.126677][T23606] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4742'. [ 608.424655][T23622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4749'. [ 608.554563][T23629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4753'. [ 608.662993][T23631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 608.694737][T23631] rdma_op ffff88804baa39f0 conn xmit_rdma 0000000000000000 [ 608.929386][T23648] netlink: 'syz.0.4759': attribute type 29 has an invalid length. [ 608.965675][T23648] netlink: 'syz.0.4759': attribute type 29 has an invalid length. [ 609.055054][T23654] team0: Device vti0 is of different type [ 609.472303][T23668] syzkaller1: entered promiscuous mode [ 609.495118][T23668] syzkaller1: entered allmulticast mode [ 610.398423][T23729] __nla_validate_parse: 1 callbacks suppressed [ 610.398445][T23729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4779'. [ 610.416129][T23729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4779'. [ 610.434237][T23729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4779'. [ 610.627968][T23736] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4781'. [ 610.645341][T23739] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 610.736191][T23743] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4784'. [ 610.974749][T23754] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4787'. [ 610.986831][T23754] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 611.186858][T23761] veth0: entered promiscuous mode [ 611.195228][T23759] veth0: left promiscuous mode [ 611.282880][T23767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4790'. [ 611.442856][T23774] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4794'. [ 612.161206][T23810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4804'. [ 612.212495][T23810] syzkaller1: entered promiscuous mode [ 612.227422][T23810] syzkaller1: entered allmulticast mode [ 612.262985][T23817] sctp: [Deprecated]: syz.5.4803 (pid 23817) Use of struct sctp_assoc_value in delayed_ack socket option. [ 612.262985][T23817] Use struct sctp_sack_info instead [ 612.699642][T23832] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.787007][T23839] netlink: 'syz.4.4811': attribute type 83 has an invalid length. [ 613.008664][T23832] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.216771][T23853] macvlan2: entered promiscuous mode [ 613.257253][T23853] macvlan2: entered allmulticast mode [ 613.407344][T23832] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.430883][T23863] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4818'. [ 613.646712][T23832] bond0: (slave ÿÿÿÿÿÿ): Releasing backup interface [ 613.681850][T23832] netdevsim netdevsim5 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.114731][ T49] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.347287][T17381] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.391002][T17381] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.408196][T17381] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.462359][T23912] netlink: 'syz.0.4829': attribute type 2 has an invalid length. [ 614.495204][T23912] netlink: 'syz.0.4829': attribute type 1 has an invalid length. [ 614.786430][T23938] netlink: 'syz.0.4834': attribute type 7 has an invalid length. [ 614.863585][T23940] tap0: tun_chr_ioctl cmd 1074025676 [ 614.895718][T23940] tap0: owner set to 0 [ 615.308424][T23961] IPVS: Unknown mcast interface: vcan0 [ 615.452864][T23966] __nla_validate_parse: 10 callbacks suppressed [ 615.452887][T23966] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4843'. [ 615.495679][T23966] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4843'. [ 615.886106][T17384] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.936308][T23996] tipc: Enabling of bearer rejected, already enabled [ 616.777913][T24020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.009337][T24039] tipc: Enabled bearer , priority 0 [ 617.031981][T24039] syzkaller0: entered promiscuous mode [ 617.037518][T24039] syzkaller0: entered allmulticast mode [ 617.074719][T24046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4855'. [ 617.114060][T24039] tipc: Resetting bearer [ 617.171547][T24036] tipc: Resetting bearer [ 617.212646][T24036] tipc: Disabling bearer [ 617.240811][T24038] netlink: 81 bytes leftover after parsing attributes in process `syz.2.4855'. [ 617.252779][T24053] hsr0: entered promiscuous mode [ 617.258131][T24053] hsr0: entered allmulticast mode [ 617.271125][T24053] hsr_slave_1: entered allmulticast mode [ 617.331241][T24057] netlink: 'syz.1.4860': attribute type 11 has an invalid length. [ 617.381090][T24057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4860'. [ 617.453978][T24057] bond0: entered promiscuous mode [ 617.478366][T24057] bond0: left promiscuous mode [ 617.833275][T24085] netlink: 'syz.5.4865': attribute type 10 has an invalid length. [ 617.983288][T24090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.035820][T24090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.472328][T24119] netlink: 'syz.0.4873': attribute type 13 has an invalid length. [ 618.499032][T24119] netlink: 'syz.0.4873': attribute type 58 has an invalid length. [ 618.519702][T24119] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4873'. [ 618.882323][T24139] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4877'. [ 618.893811][T24141] openvswitch: netlink: IPv6 tunnel dst address is zero [ 619.114223][T24158] openvswitch: netlink: Multiple metadata blocks provided [ 619.208847][T24167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4882'. [ 619.219149][T24167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4882'. [ 619.246816][T24169] netlink: 'syz.2.4885': attribute type 1 has an invalid length. [ 619.286470][T24169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4885'. [ 619.525813][T24177] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 619.560980][T24177] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 629.638831][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 660.504086][T17386] bond4 (unregistering): (slave ip6erspan0): Releasing active interface [ 661.489230][T17386] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 661.500316][T17386] bridge_slave_1: left allmulticast mode [ 661.508034][T17386] bond0 (unregistering): (slave bond9): Releasing backup interface [ 661.518250][T17386] bond9 (unregistering): left allmulticast mode [ 661.527446][T17386] bond0 (unregistering): Released all slaves [ 661.676977][T17386] bond1 (unregistering): Released all slaves [ 661.694248][T17386] bond2 (unregistering): Released all slaves [ 661.820685][T17386] bond3 (unregistering): Released all slaves [ 661.945250][T17386] bond4 (unregistering): Released all slaves [ 661.962976][T17386] bond5 (unregistering): (slave bond6): Releasing backup interface [ 661.972916][T17386] bond5 (unregistering): Released all slaves [ 662.095422][T17386] bond6 (unregistering): Released all slaves [ 662.222043][T17386] bond7 (unregistering): Released all slaves [ 662.344436][T17386] bond8 (unregistering): Released all slaves [ 662.467179][T17386] bond9 (unregistering): Released all slaves [ 662.483801][T17386] bond10 (unregistering): Released all slaves [ 662.617610][T17386] : left promiscuous mode [ 662.726420][T17386] tipc: Disabling bearer [ 662.742873][T17386] tipc: Left network mode [ 662.934423][T17386] dummy0: left promiscuous mode [ 662.947352][T17386] hsr_slave_0: left promiscuous mode [ 662.954372][T17386] hsr_slave_1: left promiscuous mode [ 662.961513][T17386] batman_adv: batadv0: Removing interface: team0 [ 662.979012][T17386] veth1_macvtap: left promiscuous mode [ 662.986540][T17386] veth1_vlan: left promiscuous mode [ 663.197221][T24196] openvswitch: netlink: Actions may not be safe on all matching packets [ 663.214147][T24203] sctp: [Deprecated]: syz.4.4898 (pid 24203) Use of int in maxseg socket option. [ 663.214147][T24203] Use struct sctp_assoc_value instead [ 663.443285][T17386] pimreg3 (unregistering): left allmulticast mode [ 663.645386][T17386] team0 (unregistering): Port device vlan0 removed [ 663.652544][T24217] __nla_validate_parse: 1 callbacks suppressed [ 663.652565][T24217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4903'. [ 663.655371][T24217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4903'. [ 663.816426][T24220] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4904'. [ 664.472472][T24194] lo: left allmulticast mode [ 664.487595][T24194] tunl0: left allmulticast mode [ 664.499326][T24194] gre0: left allmulticast mode [ 664.509427][T24194] gretap0: left allmulticast mode [ 664.526609][T24194] erspan0: left allmulticast mode [ 664.537874][T24194] ip_vti0: left allmulticast mode [ 664.556150][T24194] ip6_vti0: left allmulticast mode [ 664.575656][T24194] sit0: left allmulticast mode [ 664.587019][T24194] ip6tnl0: left allmulticast mode [ 664.595204][T24194] ip6gre0: left allmulticast mode [ 664.604061][T24194] syz_tun: left allmulticast mode [ 664.612805][T24194] ip6gretap0: left allmulticast mode [ 664.622481][T24194] bridge0: left allmulticast mode [ 664.628942][T24194] bond0: left allmulticast mode [ 664.637416][T24194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.646671][T24194] team0: left allmulticast mode [ 664.653841][T24194] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.662487][T24194] dummy0: left allmulticast mode [ 664.671402][T24194] nlmon0: left allmulticast mode [ 664.677665][T24194] caif0: left allmulticast mode [ 664.683352][T24194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 664.691454][T24225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4905'. [ 664.709294][T24197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 664.739427][T24196] 8021q: VLANs not supported on ip6gre0 [ 664.793721][T24225] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 664.871125][T24225] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 664.889430][T24225] gretap0: entered promiscuous mode [ 664.925923][T24225] gretap0: entered allmulticast mode [ 664.959063][T24235] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4908'. [ 665.183890][T24252] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 665.217719][T24251] tipc: Enabled bearer , priority 0 [ 665.265490][T24253] syzkaller0: entered promiscuous mode [ 665.298676][T24253] syzkaller0: entered allmulticast mode [ 665.306686][T24259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4915'. [ 665.367124][T17386] IPVS: stop unused estimator thread 0... [ 665.384642][T24262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4915'. [ 665.441071][T24253] tipc: Resetting bearer [ 665.524942][T24253] tipc: Disabling bearer [ 665.712578][T24285] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4921'. [ 665.956662][T24293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4925'. [ 666.121256][T24308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4928'. [ 666.283096][T24316] netlink: 'syz.0.4933': attribute type 1 has an invalid length. [ 666.303980][T24316] netlink: 'syz.0.4933': attribute type 1 has an invalid length. [ 666.396077][T24323] team_slave_0: entered promiscuous mode [ 666.402219][T24323] team_slave_1: entered promiscuous mode [ 666.624737][T24333] tipc: Enabled bearer , priority 0 [ 666.684796][T24339] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 666.731416][T24330] tipc: Disabling bearer [ 666.857423][T24346] geneve2: entered promiscuous mode [ 666.876359][T24346] geneve2: entered allmulticast mode [ 667.359747][T24378] tipc: Enabled bearer , priority 0 [ 667.393843][T24373] tipc: Resetting bearer [ 667.414939][T24372] tipc: Disabling bearer [ 668.132599][T24419] lo: entered promiscuous mode [ 668.170755][T24419] netlink: 'syz.0.4962': attribute type 2 has an invalid length. [ 668.223448][T24419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 668.618653][T24438] can: request_module (can-proto-4) failed. [ 668.769788][T24448] __nla_validate_parse: 14 callbacks suppressed [ 668.794284][T24448] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4969'. [ 668.873565][T24450] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4969'. [ 668.964938][T24451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4970'. [ 669.085531][T24451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4970'. [ 669.327189][T24462] sctp: [Deprecated]: syz.2.4975 (pid 24462) Use of struct sctp_assoc_value in delayed_ack socket option. [ 669.327189][T24462] Use struct sctp_sack_info instead [ 669.703792][T24474] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4978'. [ 669.721006][T24474] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4978'. [ 669.811580][T24476] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4979'. [ 670.088443][T24488] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4985'. [ 670.189659][T24493] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4986'. [ 670.211499][T24498] delete_channel: no stack [ 670.363777][T24505] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4989'. [ 670.408085][T24509] netlink: 'syz.0.4992': attribute type 1 has an invalid length. [ 670.579403][T24509] bond4 (unregistering): Released all slaves [ 670.665194][T24510] ip6tnl4: entered promiscuous mode [ 670.679230][T24510] ip6tnl4: entered allmulticast mode [ 670.724888][T24528] macvlan0: entered promiscuous mode [ 670.724917][T24520] netlink: 'syz.4.4995': attribute type 27 has an invalid length. [ 670.777736][T24520] gretap0: left promiscuous mode [ 670.816439][T24520] sit0: left promiscuous mode [ 670.937398][T24538] netlink: 'syz.0.4998': attribute type 10 has an invalid length. [ 670.975717][T24520] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe1ac: 0000 [#1] SMP KASAN PTI [ 670.987739][T24520] KASAN: probably user-memory-access in range [0x00000000ffff0d60-0x00000000ffff0d67] [ 670.997328][T24520] CPU: 0 UID: 0 PID: 24520 Comm: syz.4.4995 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 671.009218][T24520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 671.019480][T24520] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 [ 671.025253][T24520] Code: 99 e8 c4 f7 c6 05 23 96 8f 05 01 48 c7 c7 a0 f7 9b 8c be 97 05 00 00 48 c7 c2 20 f8 9b 8c e8 ea d2 a2 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 54 0b 28 f8 4d 8b 2c 24 4d 39 f5 [ 671.045449][T24520] RSP: 0018:ffffc9000b0c68f8 EFLAGS: 00010206 [ 671.051858][T24520] RAX: ffffffff89fac7de RBX: 000000001fffe1ac RCX: 0000000000080000 [ 671.059864][T24520] RDX: ffffc9001c451000 RSI: 000000000007ffff RDI: 0000000000080000 [ 671.067878][T24520] RBP: ffff888031d00020 R08: ffffffff8f508fa7 R09: 1ffffffff1ea11f4 [ 671.076086][T24520] R10: dffffc0000000000 R11: fffffbfff1ea11f5 R12: 00000000ffff0d60 [ 671.084206][T24520] R13: dffffc0000000000 R14: ffff8881404b8e00 R15: 1ffff110063a0004 [ 671.092407][T24520] FS: 00007f2b9de6a6c0(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 671.101391][T24520] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 671.108208][T24520] CR2: 00007f26d4df5f98 CR3: 000000007f8d4000 CR4: 00000000003526f0 [ 671.116295][T24520] Call Trace: [ 671.119604][T24520] [ 671.122555][T24520] inetdev_event+0x2a7/0x15b0 [ 671.127290][T24520] ? __pfx_inetdev_event+0x10/0x10 [ 671.132443][T24520] notifier_call_chain+0x1b3/0x3e0 [ 671.137580][T24520] __dev_notify_flags+0x18d/0x2e0 [ 671.142664][T24520] ? __pfx___dev_notify_flags+0x10/0x10 [ 671.148231][T24520] ? __dev_change_flags+0x4cc/0x6d0 [ 671.153538][T24520] ? __pfx___dev_change_flags+0x10/0x10 [ 671.159110][T24520] ? netif_state_change+0x256/0x3a0 [ 671.164328][T24520] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 671.170335][T24520] ? __pfx_netif_state_change+0x10/0x10 [ 671.175916][T24520] ? irq_work_queue+0xbc/0x140 [ 671.180714][T24520] netif_change_flags+0xe8/0x1a0 [ 671.185673][T24520] do_setlink+0xc55/0x41c0 [ 671.190211][T24520] ? __pfx_do_setlink+0x10/0x10 [ 671.195082][T24520] ? _printk+0xcf/0x120 [ 671.199253][T24520] ? __pfx____ratelimit+0x10/0x10 [ 671.204312][T24520] ? __lock_acquire+0xab9/0xd20 [ 671.209190][T24520] ? __mutex_trylock_common+0x153/0x260 [ 671.214792][T24520] ? __pfx___mutex_trylock_common+0x10/0x10 [ 671.220788][T24520] ? rcu_is_watching+0x15/0xb0 [ 671.225574][T24520] ? trace_contention_end+0x39/0x120 [ 671.231047][T24520] ? __mutex_lock+0x335/0x1340 [ 671.236280][T24520] ? __pfx_aa_get_newest_label+0x10/0x10 [ 671.241944][T24520] ? __pfx_aa_get_newest_label+0x10/0x10 [ 671.247619][T24520] ? rtnl_newlink+0x8db/0x1c70 [ 671.252407][T24520] ? rcu_is_watching+0x15/0xb0 [ 671.257204][T24520] ? __pfx___mutex_lock+0x10/0x10 [ 671.262252][T24520] ? ns_capable+0x8a/0xf0 [ 671.266609][T24520] ? rtnl_link_get_net_capable+0x16a/0x350 [ 671.272520][T24520] rtnl_newlink+0x149f/0x1c70 [ 671.277227][T24520] ? netlink_sendmsg+0x805/0xb30 [ 671.282195][T24520] ? __pfx_rtnl_newlink+0x10/0x10 [ 671.287263][T24520] ? kasan_quarantine_put+0xdd/0x220 [ 671.292564][T24520] ? lockdep_hardirqs_on+0x9c/0x150 [ 671.297785][T24520] ? nlmon_xmit+0xb0/0x100 [ 671.302209][T24520] ? kmem_cache_free+0x18f/0x400 [ 671.307198][T24520] ? __local_bh_enable_ip+0x12d/0x1c0 [ 671.312591][T24520] ? lockdep_hardirqs_on+0x9c/0x150 [ 671.317804][T24520] ? __local_bh_enable_ip+0x12d/0x1c0 [ 671.323193][T24520] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 671.339067][T24520] ? __dev_queue_xmit+0x27b/0x3b50 [ 671.344409][T24520] ? __lock_acquire+0xab9/0xd20 [ 671.349312][T24520] ? __pfx_rtnl_newlink+0x10/0x10 [ 671.354368][T24520] rtnetlink_rcv_msg+0x7cf/0xb70 [ 671.359424][T24520] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 671.364557][T24520] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 671.370062][T24520] ? ref_tracker_free+0x63a/0x7d0 [ 671.375223][T24520] ? __asan_memcpy+0x40/0x70 [ 671.379924][T24520] ? __pfx_ref_tracker_free+0x10/0x10 [ 671.385440][T24520] netlink_rcv_skb+0x208/0x470 [ 671.390260][T24520] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 671.395747][T24520] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 671.401155][T24520] ? netlink_deliver_tap+0x2e/0x1b0 [ 671.406466][T24520] netlink_unicast+0x82c/0x9e0 [ 671.411255][T24520] ? __pfx_netlink_unicast+0x10/0x10 [ 671.416556][T24520] ? netlink_sendmsg+0x642/0xb30 [ 671.421513][T24520] ? skb_put+0x11b/0x210 [ 671.425769][T24520] netlink_sendmsg+0x805/0xb30 [ 671.430562][T24520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 671.436135][T24520] ? aa_sock_msg_perm+0x94/0x160 [ 671.441112][T24520] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 671.446697][T24520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 671.452078][T24520] __sock_sendmsg+0x21c/0x270 [ 671.456807][T24520] ____sys_sendmsg+0x505/0x830 [ 671.461605][T24520] ? __pfx_____sys_sendmsg+0x10/0x10 [ 671.466920][T24520] ? import_iovec+0x74/0xa0 [ 671.471458][T24520] ___sys_sendmsg+0x21f/0x2a0 [ 671.476160][T24520] ? __pfx____sys_sendmsg+0x10/0x10 [ 671.481393][T24520] ? __fget_files+0x2a/0x420 [ 671.486004][T24520] ? __fget_files+0x3a0/0x420 [ 671.490830][T24520] __x64_sys_sendmsg+0x19b/0x260 [ 671.495787][T24520] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 671.501273][T24520] ? rcu_is_watching+0x15/0xb0 [ 671.506071][T24520] ? do_syscall_64+0xbe/0x3b0 [ 671.510869][T24520] do_syscall_64+0xfa/0x3b0 [ 671.515770][T24520] ? lockdep_hardirqs_on+0x9c/0x150 [ 671.521004][T24520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.527097][T24520] ? clear_bhb_loop+0x60/0xb0 [ 671.531797][T24520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.537715][T24520] RIP: 0033:0x7f2b9cf8eb69 [ 671.542152][T24520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.561868][T24520] RSP: 002b:00007f2b9de6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 671.570837][T24520] RAX: ffffffffffffffda RBX: 00007f2b9d1b5fa0 RCX: 00007f2b9cf8eb69 [ 671.578911][T24520] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 671.586910][T24520] RBP: 00007f2b9d011df1 R08: 0000000000000000 R09: 0000000000000000 [ 671.594910][T24520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 671.602998][T24520] R13: 0000000000000000 R14: 00007f2b9d1b5fa0 R15: 00007ffcac350898 [ 671.611024][T24520] [ 671.614081][T24520] Modules linked in: [ 671.620592][T24520] ---[ end trace 0000000000000000 ]--- [ 671.628725][T24520] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 [ 671.636008][T24520] Code: 99 e8 c4 f7 c6 05 23 96 8f 05 01 48 c7 c7 a0 f7 9b 8c be 97 05 00 00 48 c7 c2 20 f8 9b 8c e8 ea d2 a2 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 54 0b 28 f8 4d 8b 2c 24 4d 39 f5 [ 671.657486][T24520] RSP: 0018:ffffc9000b0c68f8 EFLAGS: 00010206 [ 671.664291][T24520] RAX: ffffffff89fac7de RBX: 000000001fffe1ac RCX: 0000000000080000 [ 671.673032][T24520] RDX: ffffc9001c451000 RSI: 000000000007ffff RDI: 0000000000080000 [ 671.682706][T24520] RBP: ffff888031d00020 R08: ffffffff8f508fa7 R09: 1ffffffff1ea11f4 [ 671.690983][T24520] R10: dffffc0000000000 R11: fffffbfff1ea11f5 R12: 00000000ffff0d60 [ 671.699285][T24520] R13: dffffc0000000000 R14: ffff8881404b8e00 R15: 1ffff110063a0004 [ 671.707499][T24520] FS: 00007f2b9de6a6c0(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 671.717237][T24520] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 671.725408][T24520] CR2: 0000000000000000 CR3: 000000007f8d4000 CR4: 00000000003526f0 [ 671.735720][T24520] Kernel panic - not syncing: Fatal exception [ 671.742230][T24520] Kernel Offset: disabled [ 671.746605][T24520] Rebooting in 86400 seconds..