last executing test programs: 47.784259782s ago: executing program 1 (id=4729): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socket$kcm(0x29, 0x5, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x3) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x1008, 0x4) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b38ff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) listen(r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@dellink={0x28, 0x11, 0x101, 0x0, 0xfffffffe, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r3, @ANYRES8=r3], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000140), &(0x7f0000000040)=@tcp6, 0x1000000}, 0x20) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x10000, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x20) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw\nw'], 0xa) 47.662059009s ago: executing program 1 (id=4732): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2000049) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000013000100010000000000000007000000", @ANYRES32=r2, @ANYBLOB="06a00000000000000c001a800800058004000280"], 0x2c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000013000100010000000000000007000000", @ANYRES32=r2, @ANYBLOB="06a00000000000000c001a800800058004000280"], 0x2c}}, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 47.496249592s ago: executing program 1 (id=4734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10) bind$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) 47.123583555s ago: executing program 1 (id=4739): r0 = epoll_create1(0x0) syz_emit_ethernet(0x4e, &(0x7f0000000880)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x18, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0xff, '\x00', @empty}}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@file={0x1, './file0/file0\x00'}, 0x6e) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) 46.915505407s ago: executing program 1 (id=4743): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'veth1\x00', @random="4a54001000"}) 46.80399794s ago: executing program 1 (id=4745): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000440)=[{0x2, 0x2, {0x1, 0xf, 0x6}, {0x2, 0xf0, 0x1}, 0xfd, 0xff}, {0x0, 0x1, {0x0, 0xf0}, {0x2, 0x1, 0x2}, 0x0, 0xfe}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24011}, 0x6004084) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x54, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001280)={&(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES16=r8, @ANYBLOB="040026bd7000fddbdf250900000024000180080009003a000000060004004e220000060004004e230000060002008400000008000500020000003400028006000f00d8d90000080004000100000006000b0002000000060002004e24000005000d0000000000080005000100000058000380050008000000000005000800cc000000080005006401010108000500000000000500080081000000060007004e24000005000800e7000000140002006272696467655f736c6176655f30000006000400080000000800040006000000"], 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000280)={'wpan0\x00'}) r10 = socket$inet6(0xa, 0x805, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000001080)={'batadv0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r10, 0x29, 0xcb, &(0x7f0000001100)={0x1, 0x0, 0x5, r11, 0x2}, 0xc) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4620, @private=0xa010101}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r10, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) (async) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x104) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x7000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d0600000000000000000280050003000e000000"], 0x3c}}, 0x0) 31.638012109s ago: executing program 32 (id=4745): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000440)=[{0x2, 0x2, {0x1, 0xf, 0x6}, {0x2, 0xf0, 0x1}, 0xfd, 0xff}, {0x0, 0x1, {0x0, 0xf0}, {0x2, 0x1, 0x2}, 0x0, 0xfe}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24011}, 0x6004084) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x54, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001280)={&(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES16=r8, @ANYBLOB="040026bd7000fddbdf250900000024000180080009003a000000060004004e220000060004004e230000060002008400000008000500020000003400028006000f00d8d90000080004000100000006000b0002000000060002004e24000005000d0000000000080005000100000058000380050008000000000005000800cc000000080005006401010108000500000000000500080081000000060007004e24000005000800e7000000140002006272696467655f736c6176655f30000006000400080000000800040006000000"], 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000280)={'wpan0\x00'}) r10 = socket$inet6(0xa, 0x805, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000001080)={'batadv0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r10, 0x29, 0xcb, &(0x7f0000001100)={0x1, 0x0, 0x5, r11, 0x2}, 0xc) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4620, @private=0xa010101}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r10, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) (async) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x104) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x7000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d0600000000000000000280050003000e000000"], 0x3c}}, 0x0) 2.454113786s ago: executing program 2 (id=5123): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) r3 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) getsockopt(r3, 0x200000000114, 0x2714, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0)='4', 0x1) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000002c80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x100, @remote, 0x10}, 0x1c, 0x0}}], 0x1, 0x4000000) tee(r4, r2, 0xffffffffffffffff, 0x2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300351841ccf5b0b00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b0000000000"], 0x30}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000300)="8e6aed1d40ed3e21384fc8ac16ab294b4d481c8e343cb92c53f65ece4288c9a11ecffa25bd9abfc6a2d828821b9692da9619f01c20f67832c72a273a2da5f436f86b801ced7929d482bd23d163075b1e6c322e9d95851b25e0512aa50204534575c9ba29b4981c4a32553caf2ff93081f05ad638c8231eaf5ae57f7b6d8c2c8bf05389ca206eeb48ca9ab4ea25c522f96f694bdf2e", 0x95, 0x4, &(0x7f0000000240)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r8, 0x800442d3, &(0x7f0000000140)={0x1, 0x5, 0x3, @broadcast, 'macvtap0\x00'}) 2.326026068s ago: executing program 2 (id=5128): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000004c0)) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000cc0)=ANY=[], 0x390) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@deltclass={0x24, 0x29, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x7}, {0xfffc, 0xb}, {0xe, 0x1}}}, 0x24}}, 0x4) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$packet(0x11, 0xa, 0x300) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0xdc, &(0x7f0000000bc0)={@remote, @local, @void, {@llc_tr={0x11, {@snap={0xff, 0xaa, "0b9b", 'P(9', 0x6001, "147e3c82803f1ece1bfdecbeb0047a2d01a5770f51218ace1c49a4b05392ff75c8fba57c103d963f61067d56d11d9add6d069f24bd588900649d8e5d20bd82e79023df4f0bed832a14b9b861c6055d4af42634d8f6d5047e730636d75c110aafa0b7019df3eeb6b0475a2c3436c8c211dd78dc47553a0929e1ff2ede134c07941842f28e3abd77b396385fee0e25b0f97c0b97df1453bd305fbaf863620674d7751347f178d94111e11129dff4fb4c6b322c5e0d900a5c4f8e54ebe034a23b68d4fd9c631d"}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4400000010000305000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00200600952805001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r7, @ANYBLOB="b9699b41e9b476e78732271fb2fc891d814030647f95fdfabd448ea2b35aa0f211c02cc76301b6be9febaa1ab9d90d889d0899d88ccc44b47eea84390e8e03fed938bd240b927d58ab6f7669d32042b8b5bbacddc36c3a44d095c5a5a87cffffffffffffffff82304705d35b906bdfc4c530cb1aa3ae6805b96ea545223e79b02fecf6b464b01f7b16293a605e1f6fff458c97eb38549de82177736378b44ebdd1bd711d6b46ddd43fae4c2e332f7cbc3809651b782aa26fed031473235b905be9bd7c5072860be698b33df853295340"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448c9, 0x0) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r9 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000180)) getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.002643071s ago: executing program 5 (id=5129): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r1, 0x800442d3, 0x200000f3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00'}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 1.735265496s ago: executing program 5 (id=5132): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000000)='XK', 0x2}, {0x0}], 0x2}}], 0x1, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000bfd850a9159a765b51520c8444dafc6da200000000000007020000f8e9ffffb708000000b70400000000000085000000630000009500"/87], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000b9520001000000"], 0x18}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = getpid() ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000380)=r4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r6, &(0x7f0000001b40)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1c041}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x10270000}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000000)={r12, 0x4}, 0x8) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) close(r13) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={r4, r5, r14}, 0xc) 1.734321161s ago: executing program 2 (id=5133): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) 1.667912888s ago: executing program 2 (id=5134): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto, @volatile={0x8, 0x0, 0x0, 0x9, 0x1}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}]}}, 0x0, 0x3e}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}]}}}]}, 0x40}}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, &(0x7f0000000240), &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, r2, 0x3e}, 0x94) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="78000000b03e078bc1145924a1e94d06282981b5eacb2ecc9c1b8d", @ANYRES16=r7, @ANYBLOB="01000000000000000000047409062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004000000000014000600626f6e6430000000000000000000000008000300ff020000000000000000000000000001"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r9, @ANYBLOB="01002dbd7000fbdbdf250100000014000200776731000000000000000000000000007400088070000080"], 0x9c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000010) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) sendmsg$IPSET_CMD_DEL(r10, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f00000000a0601080000000000000000020000041c0007801800028014000240200100000000000000000000000000006c000780ce000a40000000020c0019400000000000000005060004404e2200000c00028008000140ac1414bb1800028014000240fe80000000000000000000000000001e0a001a00696e6e65720000000a001100ffffffffffff0000060005404e24000005000300010000002c000780060005404e2400001800028014000240fc010000000000000000000000000001060005404e23000028000880180007801400170065727370616e300000000000000000000c000780050003000e000000de6c96dac984e538bb0f08358a5a2c48fbebbc54395d4428cbf3d0ebfd987006c7721d92b303b18118ba175840fc298e73999ade93624743fbe59ef5d5c4cd6991905be6e8b432e89d1ac4bd1cad16d1a232b72f776c04ba683f06eb4cea78d3018be9c3bf483d798db2cadb46e7af3b82bce956e1c331a99387b864150b729b53"], 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040051) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="3de415e9b5fd99faf4b0323a68893349564a2715dfef20f4719e6c121b0d963f9516855c458387f017b064fbb4afe09cfce2d7eed7"], 0x48) ioctl$SIOCSIFHWADDR(r12, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r14 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r14, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfff7fffd, 0x2}, 0x10) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010699b7b6eb6b60001045bf102004de8", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r16, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r16, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) poll(&(0x7f0000000400)=[{r14, 0x2000}, {r13, 0xb040}, {r10, 0x8414}, {r11, 0x104}], 0x4, 0x77) 1.665911335s ago: executing program 4 (id=5135): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x278, 0x16, 0x10, 0x70bd26, 0x25dfdbfb, {0x1e}, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x250, 0xa1, 0x0, 0x1, [@nested={0x4, 0xec}, @generic="46243ef115d52ff7a9625718f513a2081535ed5400d49bbec06e8931fe69810790d8e4d1bea63456aa7168af5c98e38ec44f4d02d6e56e5a80ff91c59537551839e224df7f30638aed19f4337976635f9163c8f03231f80cf3996b64790264a7213a40cfe94adfbe7ac9f168fe9f475daad7659947a802dbe478eb72f1d14bd877b1f7503f9dc4570de91f1a9d6c02a4c0e3f64d298881d58900c86de8646319ae1307c7958aa7794ad8afe9269e21946aebd431bf3e7e85343725648143dc1e594629f6b00796d44682ec91faf4419222f8cf1581d3cb95b690ec0f0aa6f9e1ecf91c4fc40c", @generic="04222cbf3a755c0df876e669e5e4c8cf2647bcdfc842fb4b4f78d40249f2426931488c97713079155817c57e8a1ce3c09413a66d11b67e3b47e9cf23387168c5667aff4dd7b072b917d7ea69474cd1a415d60ad67f9cb58fd3a1431bb29ea20d0f78435cfdd356f0cf24d6c2c1b12a530cc72cdeabacc6389d9119ae8db50760fce787ca23ded2d70b03d4b2e864e5f463cb721749449d90043aea5eefebc9e49c3e50f77081b1fbb7b59eca1146ee12430cbc38d978cc545beae9600cbad7c9b070aba61745c217aa66789027a0fc0d1cc950f05508241b56d6d1e01b083698c7da27ee2a8f58", @generic="2b2baa5458ee7b102b0db4c2d4c08b9cfff197b915a6a507f52c297b91229de7a582fdf5074af9567fef2ce273e32962c027c2e469eef48687517266cb7c22957248cd0989e3a460c105d50a5a6ea81d55e814018dcc613d9e069c2c2338ba06f5432c767455233a9de58c", @typed={0x8, 0x29, 0x0, 0x0, @uid=r2}, @typed={0x8, 0xc0, 0x0, 0x0, @fd=r3}]}]}, 0x278}, 0x1, 0x0, 0x0, 0xc0}, 0x6000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), r4) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r6, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000000c0)={r4, 0x4c, 0x80000001, 0x3}) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x48, 0x8, 0x6, 0x503, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40400c5}, 0x14) r8 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @loopback, 0x1}, 0x1c) syz_init_net_socket$ax25(0x3, 0x5, 0x6) close(r4) 1.507371339s ago: executing program 0 (id=5137): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00'}) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000000)="80", 0x1}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8}]}, 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.392210681s ago: executing program 3 (id=5138): r0 = socket$inet6(0xa, 0x3, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x10, @mcast1, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xfdef}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x400, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) getsockopt$inet_int(r3, 0x0, 0xe, 0x0, &(0x7f0000000040)) 1.391759827s ago: executing program 2 (id=5139): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffe5bbc5500000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fc7fffff000000002abd700004350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030cbf7e6d646215e9f45bae1090d5880e2f7ccb6d666f6cf8ab57e03e15aaf7a84fcd8a953215d85c59f89a49d51d6378f324d6816e6f37b42b1a1e611d562c7899bcb283dcbac9cd00ad49f71a46261c7848c78791a161c90c4514367ce2c6dbae59486dd"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1.364422129s ago: executing program 0 (id=5140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x5, 0x0, {0x5, 0x4, 0x0, 0x25, 0x9b0d, 0x67, 0x3, 0x80, 0x0, 0x5, @multicast1, @multicast2}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x24, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd, 0x9}, {0x6}, {0x0, 0x1}}}, 0x24}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x60, 0x2c, 0xd27, 0x170bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x24, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.33589568s ago: executing program 3 (id=5141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0xfffffffd) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000240)={0x32}, 0x8) sendmmsg$inet6(r1, &(0x7f00000015c0), 0x0, 0x24009c80) r4 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800) setsockopt$inet_tcp_buf(r4, 0x6, 0xe, &(0x7f0000000280)="7c5631f3f7dc03d5f74a69b2ae9adec6f4dc88610dbc2b647029f3450209473da6ea2c79162369e781e43505f362aae78c0bb18dd4fac91f79252aa530793c27c3bfec04cec2c4664dbd004e1ed61fd02fb9a774ff1e1699efe16b3b9be2861b3dfc9540db0ca150572ce405db0de5a5b7cce9851b70353a796889e491290be3ac7f75d468511dd50e62e77458f496898ec0360084499c3e106420cef5ce3a120075cef7adf7da0fd1afa240a4699591e91f181f60cd2d55dd0d3e37c4", 0xbd) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x40047452, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a4c000000060a0b04000000000000000002000000200004801c0001800b00010065787468647200000c00028008000640000000020900010073797a30000000000900020073797a3200000020140000001100010000000000000000000000000a"], 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="80010000100001000000000000000000ac574400000000000000007f000001000000000000000000000000000000000000000002000000000a00ff8000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000006c000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x180}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000540)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000040a010100000000000000000100000bc8fdf30f6b39a1d1c862c4f450e5e24d98a2d998aad5f5fdb6df712856"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000480)) 1.196251122s ago: executing program 2 (id=5142): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='oom_score_adj_update\x00', r2, 0x0, 0x4}, 0x18) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x84) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x800, '\x00', 0x0, r0, 0x5, 0x3, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r5], 0x0, 0x10, 0x5}, 0x94) 1.111828217s ago: executing program 0 (id=5143): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x44, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd}]}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x1c, 0x68, 0x601, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 1.08442864s ago: executing program 3 (id=5144): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/28], 0x48) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000003edf0701feab00ff0061aa00017c000000c280e1321ae600995c2941b40597af00b8dc0c00018006000600800a0000080002800400148000"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000200)=r2}, 0x20) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x4, {{0xa, 0x4e24, 0x4, @empty, 0x7}}}, 0x88) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40841}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0xfffffffc, {0xa, 0x0, 0x0, 0xfe}}, 0x18}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000efffffff00000000", @ANYRES32=r6, @ANYBLOB="870401006772657461700000140002806f3367fa53a02b68060010004e21000008000700ac00"/49], 0x44}}, 0x20008884) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x6, @local, 0xa}, 0x1c, 0x0}}], 0x1, 0x2008c0c0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0x5, 0xf}}}, 0x24}}, 0x0) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0xa) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, 0x0, 0x0) (async, rerun: 32) r9 = socket(0x2b, 0x3, 0x1) (rerun: 32) getpeername$packet(r9, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000b020000000000000000000001053f0000000000000000000001000005000000000000000001"], 0x0, 0x4e}, 0x20) (async) socket$netlink(0x10, 0x3, 0xa) 796.251814ms ago: executing program 5 (id=5145): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xb8c9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)=r1}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'xfrm0\x00', 0x2}, 0x18) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f00000001c0)={0x0, 0x0, 0xf5, 0x6, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010102}, 0x10) (async) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f00000001c0)={0x0, 0x0, 0xf5, 0x6, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010102}, 0x10) socket(0xb, 0x3, 0xdc) (async) r5 = socket(0xb, 0x3, 0xdc) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1c8, r6, 0x91f, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x43}}}}, [@NL80211_ATTR_FRAME_MATCH={0x87, 0x5b, "d523a3b70bf6ba8d8f18dd75318256c58335e3cd703086a7a500d6c1517d4a5d2c4e16c0996e5891008df952daab92c2d7eb71db9f688939e19d52a852ee2ed8872eaf70b5de778915460f87b9b7f13093a0114d84f5be77369b13c79de423c60573fc7104e9189ea7303e3f5f1f326d6e5f6313956063ed15e62413a23b004a59e8bc"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3ff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0xc2, 0x5b, "2b0dd8615058e077c15406e266c70d3a31f9f2c0f8d6d1978f9a443d40b75876391ee85b7bce36bcdfe0d0ca0f76170ce0c249d3095c7d5ca267c32453b00b9ecca0004c90fd136f7e7f8c477954ac4c48f4b97c2234df340670ca5cd65fb156d5cd216ac88146855f49db1a4a18c4402d2274998eb5679bebe39d01d8f670a7ef138de1a84e1e8620481352ae93e27eb4c89847017628518a560708bc654162292cb068bfbf4880e9967b63e3b50ec5f178c9af4a95f2fedba65cd89eb4"}, @NL80211_ATTR_FRAME_MATCH={0x21, 0x5b, "5f0545662fbcaabdf19d050ab84056f21d94ee21ecf9fa311cf0344f0d"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x701}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000540)={0x1, [0x0]}, &(0x7f0000000580)=0x8) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000540)={0x1, [0x0]}, &(0x7f0000000580)=0x8) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000005c0)=0x72) (async) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000005c0)=0x72) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000700)={0x1, 0xfffffffffffffff9, 0xe3, &(0x7f0000000600)=""/227}) getsockname$unix(0xffffffffffffffff, &(0x7f0000000740)=@abs, &(0x7f00000007c0)=0x6e) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000800), r8) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x84, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x62}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xd]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8001}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x517}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x141}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x6}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10001}, 0x8000) (async) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x84, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x62}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xd]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8001}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x517}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x141}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x6}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x800}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10001}, 0x8000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r0}, &(0x7f00000009c0), &(0x7f0000000a00)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r0, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)=r1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000001b00)={'wg0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x5, &(0x7f0000000a80)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r9}, @jmp={0x5, 0x0, 0x2, 0x5, 0x9, 0xffffffffffffffb8, 0x4}, @ldst={0x3, 0x3, 0x6, 0xf3d11c8bc7c18fc3, 0xb, 0xffffffffffffffff, 0x4}, @ldst={0x1, 0x0, 0x7, 0x5, 0xb, 0x10, 0x10}], &(0x7f0000000ac0)='GPL\x00', 0x5, 0x1000, &(0x7f0000000b00)=""/4096, 0x40f00, 0x10, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001b80)={0x0, 0x7, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[r2], 0x0, 0x10, 0x7}, 0x94) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001d00), r8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x68, r11, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xaf}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1f7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x8c04}, 0x804) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x68, r11, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xaf}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1f7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x8c04}, 0x804) syz_emit_ethernet(0xd9, &(0x7f0000001e40)={@empty, @remote, @void, {@mpls_mc={0x8848, {[{0x4, 0x0, 0x1}, {0xffff8, 0x0, 0x1}], @llc={@llc={0xaa, 0xff, 'E', "f24d27d1fadb4c32efb7796baaf414d696f80b4bea7fc4b497422620eaf5d9647ae00d6a427b1c7ca5fc0f7aff9a6448fa5cd2987f289c87fece706a4d39c69589b31b0de6c57ae13bf3e9afa737a1408ab8883ffdfa10d81c7cbec61b2e41664fc850f3889c439df151594d46e5d50ea5ddd57cae77efc308a7c82583abdf93ed33fd924090abbe8b0ce7578be569bb5e2128386dc6f25017787fefb95d9ed4d4412b58fa2140b3797797fda08471871a63c25764636ced19103e47e4354f8c"}}}}}}, &(0x7f0000001f40)={0x5, 0x1, [0x992, 0x62a, 0xbed, 0x7fc]}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001fc0), r5) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r12, &(0x7f00000020c0)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x78, r13, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x78}}, 0x24000000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000021c0)={&(0x7f0000002100), 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x14, r13, 0x300, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x40001) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x5c, r6, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x818, 0x64}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2eff744790db626ff07fd188f5"}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x5c, r6, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x818, 0x64}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2eff744790db626ff07fd188f5"}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000002340), 0x4) (async) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000002340), 0x4) 783.138699ms ago: executing program 3 (id=5146): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x28002, 0x7}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x44, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x94d}]}]}, 0x44}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000140)=@ethtool_regs={0x4, 0x4}}) 770.328667ms ago: executing program 5 (id=5147): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r0, 0x702, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4e}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8d}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x174, r2, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d7289caf6b3c951a8d51f889cbb2866b433a112f231d9af6"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5dc05f11c32531da885441d1284b8d1487589602b609a86d"}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "65e40f3d4ab199001f14e3814e27187970c46678f6f7fe44"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "082296e17d5be9fdc6be8711b77e4854925b5b16f5014350"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "172aa2f0f65306963aa9890275dfdcbc6f883883200325dd"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x174}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) bind$tipc(r1, &(0x7f0000000480)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x3}}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x140a, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x16d8a4d589a1ffef}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20048090) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000700)={'wg2\x00', {0x2, 0x4e24, @private=0xa010101}}) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000740)) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r4) getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000000840)={@private1, 0x0}, &(0x7f0000000880)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r5, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000900)=[0x0, 0x0], &(0x7f0000000940)=[0x0], 0x0, 0x81, &(0x7f0000000980)=[{}, {}], 0x10, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0xf0, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) getpeername$packet(r5, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000c00)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000cc0)={'gre0\x00', &(0x7f0000000c40)={'tunl0\x00', 0x0, 0x8000, 0x2, 0x8, 0x81, {{0xd, 0x4, 0x1, 0x6, 0x34, 0x64, 0x0, 0x2, 0x29, 0x0, @loopback, @private=0xa010101, {[@rr={0x7, 0x1f, 0xbc, [@broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x1f}, @broadcast, @private=0xa010102, @remote, @local]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000e40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xcc, r6, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x48, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000001600)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000015c0)={&(0x7f0000001040)={0x580, r2, 0x300, 0x70bd2a, 0x4, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x4, 0x43}}}}, [@crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac06, 0xfac02, 0xfac01]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88a8}], @NL80211_ATTR_P2P_OPPPS={0x5}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0xfb, 0xf, [@peer_mgmt={0x75, 0x6, {0x0, 0x7, @void, @val=0xb, @void}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @peer_mgmt={0x75, 0x4, {0x1, 0x0, @void, @void, @void}}, @preq={0x82, 0x20, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0x4, 0x5, 0x8, @broadcast, 0x8001, @value, 0xfffffffb, 0xa}}, @channel_switch={0x25, 0x3, {0x0, 0xaf, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x6, 0x6, 0xa}}, @fast_bss_trans={0x37, 0xb7, {0xcb, 0x4, "7928378410ce9249d70827e8c415cb22", "f9cb5eb8e0a9cba6b908c9dfe6917e7285f57ab2fc32405db914716ada24456b", "a3464390d24b6a277c95aa82049aa9467f9e7d89b8566806a17ca4caccc857bb", [{0x3, 0x1f, "eb2623349b689762e95ccec58054fb7621aa85a345a9ce294041554f2cb861"}, {0x1, 0x1b, "26d0e20d3b928a04e66b4da762906e2a9013d0ff2c6053e650aef8"}, {0x1, 0x15, "2cab05bc0625d63d1d9222c0337ddd4712cf53b12c"}, {0x3, 0xe, "341ccade72f4b81747d76847631e"}]}}]}], @NL80211_ATTR_TWT_RESPONDER={0x4}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac05, 0xfac03]}, @NL80211_ATTR_PMK={0x24, 0xfe, "e99bf41f1deadd457f1b8cd6bb6aa6af4516b824215e6102485849739854056a"}, @NL80211_ATTR_SAE_PASSWORD={0x73, 0x115, "839367c2d174e683ddbff3235bbe600ff4958af952fd586dd8d832dd9f402dd3e10edf907db50ae45839123321989e35de94bed39a889b0019668143898b5414ca397cb6914230c171c2946d4554fbdd2362f327da7a9a372eb33ef964fd531ab3f0bd878671c40b7189baf57ef247"}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x6}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x3b, 0x115, "28ffc86085db60f91edeb58dea9c90bae3ef16f788ee19747cd8d744583b19162daa7c6940f9b05c4620b7d12017560b295eafd830be5e"}, @NL80211_ATTR_SAE_PASSWORD={0x3a, 0x115, "b2a62e7b8042b0b484b82cadafb2be0e2f8369c5b0e73d7fbf65e9f04b677636d1edeb24cdfdcb18ae6c4cd7f5df3e01885487918a62"}], @beacon=[@NL80211_ATTR_BEACON_TAIL={0x10, 0xf, [@ibss={0x6, 0x2, 0x1000}, @mesh_id={0x72, 0x6}]}], @NL80211_ATTR_TX_RATES={0x2fc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x48, 0x1b, 0x2, 0x18, 0x3, 0x12, 0xc, 0x16, 0x5, 0x60]}]}, @NL80211_BAND_5GHZ={0xf8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x2, 0x5}, {0x4, 0x9}, {0x2, 0x2}, {0x3, 0x6}, {0x1}, {0x6}, {0x2, 0x1}, {0x5, 0x3}, {0x3, 0xa}, {0x0, 0x6}, {0x7, 0xa}, {0x3, 0x7}, {0x7, 0x2}, {0x6, 0x9}, {0x7}, {0x0, 0x6}, {0x1, 0x3}, {0x6, 0x1}, {0x2}, {0x7, 0x2}, {0x0, 0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x7, 0x9}, {0x5, 0x8}, {0x3, 0x7}, {0x2, 0x8}, {0x1}, {0x2, 0xa}, {0x2, 0x9}, {0x1, 0x2}, {0x1, 0x8}, {0x6, 0x8}, {0x7, 0x4}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x1}, {0x2, 0x7}, {0x0, 0x1}, {0x3}, {0x1, 0x8}, {0x0, 0x6}, {0x1, 0x3}, {0x0, 0xa}, {0x2, 0x1}, {0x0, 0x5}, {0x2, 0x6}, {0x7, 0x8}, {0x0, 0x9}, {0x5, 0x9}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xeb89, 0x9, 0x2, 0x1000, 0x80, 0x716, 0x7, 0x554]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xfff7, 0x5, 0x3d2, 0x0, 0x7, 0x7, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x7ff0, 0xdf50, 0x70, 0x7, 0x2, 0x3, 0x9]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5, 0x24, 0x12, 0x6c, 0x0]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x0, 0x5}, {0x4, 0x7}, {0x4, 0x2}, {0x1, 0x2}, {0x2, 0x9}, {0x7}, {0x2, 0x5}, {0x2, 0x8}, {0x3, 0x9}, {0x1, 0x8}, {0x2}, {0x1}, {0x5, 0x8}, {0x6, 0x5}, {0x6, 0xa}, {0x3, 0x3}, {0x4, 0x2}, {0x7, 0x9}, {0x1, 0x5}, {0x7, 0x9}, {0x0, 0x7}, {0x0, 0x5}, {0x5, 0x5}, {0x7, 0x3}, {0x7, 0x5}, {0x4, 0x1}, {0x7, 0x3}, {0x0, 0xa}, {0x1}, {0x3, 0x7}, {0x6, 0x7}, {0x6, 0x4}, {0x7, 0x6}, {0x1, 0x9}, {0x7, 0xa}, {0x2}, {0x6, 0x8}, {0x5, 0x3}, {0x3, 0x7}, {0x5}, {0x4, 0x7}, {0x1, 0x5}, {0x5, 0x4}, {0x6, 0x2}, {0x6, 0x5}, {0x3, 0x6}, {0x0, 0x5}, {0x1, 0x7}, {0x5, 0x6}, {0x7, 0x3}, {0x6, 0x4}, {0x0, 0x9}, {0x0, 0x9}, {0x6, 0x9}, {0x6, 0x8}, {0x1, 0x9}, {0x4, 0x3}, {0x1, 0x8}, {0x7, 0x3}, {0x6, 0x6}, {0x4, 0x1}, {0x1}, {0x0, 0x8}, {0x0, 0x3}, {0x3, 0x9}, {0x1, 0x4}, {0x4, 0x1}, {0x1, 0x8}, {0x2, 0x2}, {0x7, 0x3}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x9, 0x5, 0x4, 0x16, 0x24, 0x1, 0x30, 0x5, 0x1, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x3, 0x749e, 0x8, 0x9, 0x0, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd914, 0x9ff0, 0xb, 0x80, 0x2, 0x6, 0x40, 0xfffe]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x3, 0xd, 0x12, 0x36, 0x40, 0x12, 0x4, 0x60, 0x16, 0x9, 0x6, 0x6c, 0x2, 0x12, 0x16, 0xc, 0x24]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xffff, 0x0, 0x7f, 0x8000, 0x9, 0x2fa6, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x4, 0xc, 0x25]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0xb, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xd00, 0x1, 0x9, 0xff80, 0x100, 0x1000, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5162, 0x3, 0xcaf3, 0x6, 0x6, 0x3, 0x9]}}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0x4, 0x8, 0x5, 0x6, 0x8, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x7, 0x5, 0x80, 0x6, 0x9a, 0x7]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0x12, 0x36, 0x24, 0x5, 0xb, 0x16, 0x30, 0x6c, 0x9, 0x12, 0x24, 0x16, 0x4, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0x6, 0x3, 0x1a0, 0x3, 0xa8, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xc, 0xe3, 0x8, 0xf0dc, 0x5, 0xff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x0, 0x8, 0x6, 0x3, 0xd933, 0x1]}}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1ff, 0x3, 0x0, 0x4, 0x100, 0xd8f, 0xc]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x4, 0x5, 0xa, 0x1, 0x4, 0xbdc]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x9, 0x9, 0x0, 0x9, 0xfffc, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xe35, 0x79, 0x97a2, 0xa, 0x7, 0x7f, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4450, 0x3, 0x100, 0xb9, 0x9, 0x10, 0x9f6, 0xb]}}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x580}}, 0xc000) socket$alg(0x26, 0x5, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001680), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r12, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x7c, r13, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x13, 0x7, '/sbin/dhclient\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:hald_sonypic_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x40800) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001800), r1) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x64, r14, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001980)={&(0x7f0000001940)='bcache_write\x00', r5, 0x0, 0x1}, 0x18) 676.28263ms ago: executing program 0 (id=5148): r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 'team0\x00'}}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000000000084"], 0x10}}], 0x2, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100000086dd60fec00000403afffc00000000000000000000000000000102009078000000006010b1a00000000000000000000000000000000000000000fe8000000000000000000000000000aa2b0004000408aaadfafb17c133d11e5900"/122], 0x0) socket$inet(0x2, 0x4000000805, 0x0) (async) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 'team0\x00'}}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000000000084"], 0x10}}], 0x2, 0x0) (async) syz_emit_ethernet(0x7a, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100000086dd60fec00000403afffc00000000000000000000000000000102009078000000006010b1a00000000000000000000000000000000000000000fe8000000000000000000000000000aa2b0004000408aaadfafb17c133d11e5900"/122], 0x0) (async) 625.255218ms ago: executing program 5 (id=5149): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) clock_gettime(0x23eaa8d54bacd65c, 0x0) r2 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="3504000040000511d25a35400c0002000200002037153e370c04018006041000450000002a560000e7ff00000000", 0x2e}, {&(0x7f0000000a40)="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"/1031, 0x407}], 0x2}, 0x10049014) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x812, r4, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, &(0x7f00000001c0)=0xffff, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010004b0428bd7000000000007a000000", @ANYRES32=0x0, @ANYBLOB="5a4f9fc900000000120000001c0012800b00010062726964676500a04b390780080003001b000000ad84bc3ce32c86e40a71b40d3c03e44d6b238d94ece769e650726a4bded5cf102b838714af19148778ef2d6a3d015e7c7ef3fccaa275e2408653d25dd3a13f7a580ead20"], 0x3c}, 0x1, 0x0, 0x0, 0x30008095}, 0x0) r6 = socket(0x2d, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000300)={0x2a, 0xffffffffffffffff, 0x4001}, 0xc) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) 600.694963ms ago: executing program 3 (id=5150): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x14, 0x3a, 0x200, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4000c000}, 0x2000c000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002e80), r3) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002ec0)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000840) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000006540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000006640)={0x0, 0x0, &(0x7f0000006600)={&(0x7f0000006580)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xb}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x4c060) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x13, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYRES64=r7, @ANYRES16=r9, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r10, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)={0x13c, r6, 0x908, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_KEY={0x120, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "93f958da807fb2f4572243269dbd4314735cdeab5a70c584ae6c94444408db20"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "92d2dff4efac95d1c5d6a0faed778e3e"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3f76a7ec3f45a4a444ae4273d3098417"}, @NL802154_KEY_ATTR_ID={0xd0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4400}, 0x40080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000007000000100000000000000085000000750000009500000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 491.931927ms ago: executing program 0 (id=5151): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)={0x0, 0x11b9, 0xe4, "3787617186d7a25fd4abfb2473515016831e446904c9ba39a452043d9900ffc6009270b9c76b08daf2a8ca41e9db13ad32486d61a44cc06bf6ebcd62089aa58730e35ef07908e39ae1ae517bad3681b44cf971085c8a5b3aa7317fea055ceada09f6cc2bd6cbb011cde03e0ad8a770c7619e457950c0b00e1a3fc87f35b7625899771785e493da609ebdf9ee94026ac3b4eca9816d37e3121db081be7059b96720cf18ff5ec52329d1fa01011fec623f44a2f4744fea6f52200720df6ab8252fe1c70e11cab712f7ba0635d679b95836a08b0c435d46ac618620a295355fe8f2dd2bad4c"}, 0xec) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e21, @rand_addr=0x64010100}, @in6={0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in6={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x28}, 0x18c}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e23, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}], 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x18000a00}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r2, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xa}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1e}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x19}, @IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10004010}, 0x44008800) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x68, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x66, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfff}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e23, @private=0xa010100}, @in6={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfff}, @in={0x2, 0x4e23, @remote}]}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000400)={r3, 0x3}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x65}, @void, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x40) r5 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000540), 0x800) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000580)={{0x0, 0x100000001, 0xf69, 0x1, 0x2, 0x1e0ecc57, 0x6, 0x20000000, 0x8, 0x6, 0x5, 0x5, 0xfff, 0x38f, 0x6}, 0x10, [0x0, 0x0]}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000680)=""/239, 0xef}, {&(0x7f0000000780)=""/74, 0x4a}, {&(0x7f0000000800)=""/141, 0x8d}, {&(0x7f00000008c0)=""/199, 0xc7}, {&(0x7f00000009c0)=""/248, 0xf8}, {&(0x7f0000000ac0)=""/111, 0x6f}, {&(0x7f0000000b40)=""/46, 0x2e}, {&(0x7f0000000b80)=""/43, 0x2b}], 0x8, &(0x7f0000000c40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}, 0x2001) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000d40)={r3, @in={{0x2, 0x4e22, @local}}, 0x2, 0x1}, &(0x7f0000000e00)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000e40)={r12, 0xc0}, 0x8) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQNSD(r13, 0x894b, &(0x7f0000000e80)) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f00), r7) sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000001100)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f40)={0x14c, r14, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff8}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x43}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3ff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x26}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40}, 0x44005) sendmsg$IPVS_CMD_ZERO(r8, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001280)={&(0x7f0000001180)={0xd4, r14, 0x8, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb2}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xd}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3c9c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x777}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000805}, 0x4000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000001300)={r12, 0x180}, &(0x7f0000001340)=0x8) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f00000013c0), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001480)={r9, 0x58, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r11, &(0x7f00000015c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0xa8, r15, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7ea}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r16}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x200}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x48000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002680)={r10, &(0x7f0000001600)="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", &(0x7f0000002600)=""/117}, 0x20) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f00000026c0)={r3, 0x78, "67507ae79d4b15d59d104e1fde23126bf92177a9bfe5b4ea494a5b4d2a2a861dd9264e87f13778e4f26987e984a283f7dad952fe9e67bc500a5ba9360546b625685128739b4791e5e10af750d4fac3be458f7c099a33574b02c79c9dcb624e3fabf543472f8e72d915e5377c69079288aee63ce5ff18d573"}, &(0x7f0000002740)=0x80) r17 = openat$cgroup_ro(r6, &(0x7f0000002780)='blkio.bfq.time\x00', 0x0, 0x0) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r7) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r17, &(0x7f0000002900)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x28, r18, 0x2, 0x70bd25, 0x2, {{}, {@val={0x8, 0x3, r19}, @val={0xc, 0x99, {0x9, 0x1c}}}}, ["", "", "", "", ""]}, 0x28}}, 0x44010) 430.187461ms ago: executing program 5 (id=5152): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000500)="3e1d58ae61a1e78e3895ce0c208a", 0xe) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00'}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000500000000000000000000000000000000000000c6f29b3ae17cdcc2dafac7e609b9466cedde3b34f3821acb4348ae9c850a720901d76dfe54ebec96882ef6d2e15ce8a4a24334201c58cdfd08b7ea169db7a112e906ade4656d6662246958b8011a375fbbb5a104487145190818703034c6fd72829e6c5c1229bd9993027a44c585c80d681c13856c12cf9be3b02fc46d3dbfee921711ae4c66dbffa48047fb69a913c33897b6adda0bc911c70a4c"], &(0x7f00000004c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000001d00010000000000ffdbdf2507000000", @ANYRES32=r3, @ANYBLOB="800007000a0002000180c2000003000095bcb2c6870371fa82402346ca1065c4f9a5a5db4b3009f8a28f01d507c67493c691ed669f1271709912feb67260592d55896c1ee5b0884a241bdd9c7b531af88aaec30e1de72e533c92164305077b59060c23015e431b1e3616bd243dbb1b2c8f844a0c53b62068f9a8e0707f3caa54ffb2ea977d75c0546438bec39eb26add6b3c7b371c116b826dc6da591769040cf2a6b0440579ffc97abe85e88111d30e375371"], 0x28}}, 0x48080) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$alg(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="dcc4", 0x2}], 0x1, 0x0, 0x0, 0x40010}, 0x8020) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280040018"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="020000000000005a00000080140001801000020001000080770200000001000008001b0000000000660afa36b59d97f7e1207742d64e1a0ea8b3afbac859eb3acdab14567951173182c4eb4cf14ab8ec21a1a3fccfd45a51b154163723f60f1bc8afb3cf74817c09bb066c51317b262c15678fd8b3fcbe71e0e2e0ec8275c4b87727bf5d0fd3179c70e65aa4e5fae5ef8a8fed70278e"], 0x40}}, 0x0) setsockopt$inet6_int(r5, 0x29, 0x10, &(0x7f0000000180), 0x4) getsockopt$inet6_int(r5, 0x29, 0x10, 0x0, &(0x7f0000000080)) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000800)="ca7a", 0x2}], 0x1) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r8, 0x29, 0x3e, 0x0, 0x0) recvfrom$x25(r4, &(0x7f0000001300)=""/4096, 0x1000, 0x2, &(0x7f0000000300), 0x12) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009ef55be464f3ff1d0f7d74fa45c0a0cb346156977af4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="120000005400012c000000000000000007"], 0x18}}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r9, r10}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003ccb46120c0000000a000000070000000000000a010000000030001e2e00002e0000"], &(0x7f0000000240)=""/142, 0x2e, 0x8e, 0x0, 0x3}, 0x28) 405.469278ms ago: executing program 0 (id=5153): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffff9, 0x55}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x8084) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x800, @mcast2, 0xf78}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={r3, @in6={{0xa, 0x4e21, 0x3ff, @mcast1, 0x1}}, 0x7, 0x8}, 0x90) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x1) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x7800, 0x8, 0x0, 0x5, {{0xb, 0x4, 0x0, 0xc, 0x2c, 0x68, 0x0, 0x8, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}, {[@generic={0x89, 0x11, "15a2734047a2b0046e8d65605c8439"}, @rr={0x7, 0x7, 0x36, [@rand_addr=0x64010101]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'sit0\x00', 0x0, 0x10, 0x80, 0x6, 0x0, {{0x9, 0x4, 0x2, 0x2f, 0x24, 0x64, 0x0, 0x2, 0x2f, 0x0, @multicast1, @loopback, {[@end, @end, @generic={0x94, 0xb, "891b2c9b56aa8d5a73"}, @noop, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000700)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'ip6tnl0\x00', 0x0, 0x8, 0x3, 0x2, 0x101, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x8007, 0x700, 0x176220, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x7, 0x9, 0x14, @private1, @local, 0x7, 0xbabf848991da6654, 0xa5ec, 0xa5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'ip6gre0\x00', 0x0, 0x4, 0x40, 0xc7, 0x2f, 0x4, @local, @private2, 0x7, 0x700, 0x4, 0xc}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000980)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x8, 0xfb, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x20, 0x1, 0x34, 0x6}}) getsockname$packet(r0, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000ac0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000b40)={0x0, @multicast1}, &(0x7f0000000b80)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000014c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001480)={&(0x7f0000000c40)={0x80c, r5, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xff, 0x1, 0x9, 0x6}]}}}]}}, {{0x8, 0x1, r6}, {0x1d4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x178, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x4, 0xe, 0x3283}, {0x0, 0xfc, 0x1, 0x3}, {0x7, 0x2, 0x7, 0x4}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f8}}}]}}, {{0x8, 0x1, r16}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5ac031c8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x5, 0xfe, 0xff, 0x7}, {0x0, 0xfc, 0x7, 0xb59}, {0x9, 0x3, 0x6b, 0x7}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r18}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r19}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x80c}}, 0x40000) r20 = socket$inet_sctp(0x2, 0x5, 0x84) r21 = socket$nl_netfilter(0x10, 0x3, 0xc) r22 = gettid() ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000002780)=0x0) sendmsg$netlink(r21, &(0x7f00000035c0)={&(0x7f0000001500)=@proc={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc, &(0x7f0000003300)=[{&(0x7f0000001540)={0x1214, 0x1f, 0x200, 0x70bd29, 0x25dfdbfd, "", [@nested={0x10f1, 0x93, 0x0, 0x1, [@typed={0x8, 0x83, 0x0, 0x0, @pid=r22}, @nested={0x4, 0xab}, @generic="9b82c8ace29229ff12e3a26f6d99fe87aa9bca72c2f6448eb8d2a88d79d821bae02e1eae30e21df17e035ea2ed64dbc0c408e4ae549870fa96d69995f23f300273e73d68365a302be21da85301d654590a4c2e2deb1eafea4f0450ec9d9d33df1282001a6f54d466fe9d720f2e8b13d9735a3cdde998c201558d16c53a512aff859528eb9c982107bfa27d79c44849a5b85e1244540064e2559ad7ac355b9d9ffcb5c0e0af258102425fa2ad5d02e4419535e2d3d8e2363a7447b10e6a44d458ad800f4ee7012892a80ce9d87dd3d11fc8fa85498e53159df13523306e", @nested={0x4, 0x6a}, @generic="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"]}, @generic="8386cc4f7422fda7a2c5094eb8feb4c380d66ecd2ce58b881c0e07ce2bc4246a1128db8cb7c0584cb505e4b78d59c8044c1f4c54d13e02186066a40c1ec9191333d77a2ec69f5250057f0b3d88daca32d6d380bb340589c00e94f7238666ba026aab3faad0c0cb1b42777a1830a155aa9eb5e68505163a22e24af96a578eabc7253644fa41e79735bbd9edeb51d90423de0b26b9f526f7b1", @typed={0x14, 0x81, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @generic="4f2bf308910b42a019c79e30b6fdfc7996381dcd5dfbce0b5af28eb75f828e011830071052618c8b8f2cc9898dd26f009195234cd8dfa81a82e511e295e28547a411556bb06a48caf284cd437d161f7d60bc5866fdde0601f3193f537d460a76a8"]}, 0x1214}, {&(0x7f00000027c0)={0x18, 0x1e, 0x8, 0x70bd25, 0x25dfdbfe, "", [@typed={0x8, 0x13e, 0x0, 0x0, @uid=r23}]}, 0x18}, {&(0x7f0000002800)={0xc8, 0x3c, 0x400, 0x70bd28, 0x25dfdbff, "", [@generic="745362e5830e0cd652bb734d47c578b5a45374d32f13c7c667e30f409ecb3825e2ca971d3238c3562e49331dfd15911ca656b614fa47f936d8398d37c9f6361de1093aeeed2df7ba0eb4c790430374944d33243039fd9c41c95f4b08e789dbb107d35341bd0e23afa18fb7ae277c1b0afeb19b0a8ffc1e68fca5db0f6a38e4d11f0eb8e95d1e3b9fed32d8657a6cebaff14e3d367fdc9fef56a9c54765fc2e9d28c1ee29d3b6f6e766454af827f150b0", @typed={0x8, 0x2e, 0x0, 0x0, @u32}]}, 0xc8}, {&(0x7f0000002900)={0x38, 0x16, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@nested={0x4, 0x121, 0x0, 0x1, [@generic]}, @typed={0x24, 0x44, 0x0, 0x0, @binary="928810ab3083d1c2fbac5e5f4842c3c1ad799dce1b626834abaf9a89f3c463ab"}]}, 0x38}, {&(0x7f0000002a80)={0x410, 0x31, 0x400, 0x70bd26, 0x25dfdbfb, "", [@typed={0x94, 0x128, 0x0, 0x0, @binary="a17435e1eea2d4553164a70feaaf09712ef8e9fa9a636e461383f60799580a122e1eced5f2ef6a88fc96fc0e007b94da8c32a3d50024a84cd42ff49a28b594132db73ade62440f7cdbe77b849a29b06725dcbb16a3f9e0487820f5678d8760c344df9267bbf61ee9f8de10e8751da4cc87290981b8cd842aada7d813df573d70916cf4b95bbb427038569aafaa314ef7"}, @typed={0x8, 0x1f, 0x0, 0x0, @ipv4=@local}, @nested={0x90, 0xe2, 0x0, 0x1, [@typed={0x8, 0x12e, 0x0, 0x0, @uid}, @typed={0x8, 0x13f, 0x0, 0x0, @fd=r20}, @typed={0x7c, 0xda, 0x0, 0x0, @binary="5a81ea0466dea398e928a97672bd74ee2fb796263ca5cbcb99d07725a934508858643e3afacb5efd5137a7ae8e4d0f369d59da495eeaa998a9de6643b1a0890c9dc1c0ec2a57349891f01e4f492bb639a294ce65cdd3b5ec5d0964d51be79c33fca9d3a18a3861b9f36a9971084ac72919461561bfc6d98f"}]}, @typed={0x8, 0xd2, 0x0, 0x0, @u32=0x8000}, @nested={0x155, 0xed, 0x0, 0x1, [@typed={0x14, 0xbd, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0x71}, @nested={0x4, 0xf1}, @generic="b011b6a902570ab7dfdf4ac8a4361bec6b8f395910e2949885b92b1a7bf73b7701a4c278b5330590d654b65f898d4c60726a899d4270a3754929d2164d9d37ece2f6e070e964e17cd811facb37801ac924ea5586115c23001086712ca894592d4835b8204c8f00d8eafd52456968ebd98ddedfff23e157029ea54fd797b749743570a49c6b3311ad2e8fe8cc0c1f24cd2f33bd712f4e05c2cb336b9b8c63856ba0f60a2d5b32d3ea220cc7468ed23f45c3bdbcf2646151e28c3a42d3e8eb54930b6cb90e3d9d3d1dfb17d1ebbd661bf48288a5963471f4298f2c0c07", @nested={0x4, 0x2b}, @generic="cd955fe254a058d79080870af78fb091eabca520605ec96e9fa99975239c706fb9863fda2197a72fa0a1e067f32cfd841750cd409ca438136306b7bba878ddf69babe8ecf4d3bce633b00bcdb4", @typed={0x8, 0x110, 0x0, 0x0, @fd}]}, @generic="85b9de7b7da88d3f95732e783a5cdeee3393132d8d09960443e727935f31aed45c44159c7a70c3a463074d0d2a56ccb0c23574039f4932c57b15800f93978b84fd278e22a93a02648403b22a2d94ac18f319536ba16fcc55c436daf82814e43ae5f2590f90edd7611605f8e87914461456a39c4baeeb38930a8f9ae2e11aa35767", @generic="07a4b07ac924a9cc950c954258f55e1f81c3c59ef7764e36a3ea657d357ba8e839ee76abd7fa34fe3b3d8bd43a5329952ff16a8455561629ab26f387e5befb34ea75ffb706a5cf735ba5df0b98bd6f196b59c95160f30147cff711278bd2c8906132459d44212600bce76286c223005596bd9f6c13074f3d18d09cddab766feb169d8584655b69d7986a0b26d99071bd5ac7713276b05f990774b5", @typed={0x8, 0x51, 0x0, 0x0, @fd=r20}, @generic="32b068c078b4f30e2065aabe2c715f8063b3026305740874e9dea36733a3053ae49ecdd615821abd74171a63f2129b74e91d63222de13531c9e5cb430de23241c901df85c7591469f6aea53bf1"]}, 0x410}, {&(0x7f0000002ec0)={0x11c, 0x27, 0x10, 0x70bd26, 0x25dfdbfd, "", [@generic="ed5f51017de2ef2cae18c1af0866caf50034047e1640f8bcf82ff0358b36b6cf71c45270a9ea22956434302522dbf64cbb60bc1d229a52fc003c137d8de7fe45776122504c6b3574aa98bf6aa637011aaf00da", @nested={0x14, 0x6d, 0x0, 0x1, [@nested={0x4, 0x2b}, @typed={0x8, 0x103, 0x0, 0x0, @fd=r20}, @nested={0x4, 0x141}]}, @generic="76dd54cefae87332e61e555a6ed61610f394df8ee29f3be12cdce0ad70236d5102508f000d893ab6c52af68e2ec75a200fc1e39bad13170733f3704e518744a76d8817df5c11b0c254dbb59175df8245b4d1879648170f0adc9309d69e6ab1458423c33ee4cc639767df0ab435199c6e502d54f5c14c181e6dac6b71dfe4c959981f422387db750b0310e9fdb30818f6b8cc614a0976ffba0d020c8693d2d7e4a20805cf"]}, 0x11c}, {&(0x7f0000003000)={0x78, 0x35, 0x410, 0x70bd2b, 0x25dfdbff, "", [@generic="d7d53126b104e468b23638624a8170acfdb2285c13d4fa0e5404725585805b3d5db194b3d7a65dd4a36a775aeef8842f3fb400fe1cfbe443638e6e1dd2d7bc7b98ef20e8301a48a5177e6f2bacce9300f29532dc54b1c9ba8c24e0", @typed={0x4, 0x2b}, @typed={0x8, 0x118, 0x0, 0x0, @u32=0x5}]}, 0x78}, {&(0x7f0000003080)={0x260, 0x29, 0x400, 0x70bd2d, 0x25dfdbfe, "", [@typed={0xf7, 0x104, 0x0, 0x0, @binary="93d981d012556739948e232ea1876adf88f948bc6b33942c41ebfea3ec3941b3e27e4c26d8eb0e2b4ce9fcc613216c0234390dc9e264d75023e6dae052f34646150d22e9d30ab9d018d3a0ef82dc56d4f2c1040156225c16d67b8fafbd379bd7d6a1de83712495d9ee152ae2a934d59e3e6cee32bc46c31da79d4af178082b3477df68a241e1185a7f4ce6afd8e371513151759f6559a6808c1f3673c694a3ae09c6703882d79778c065e741c4922bb3e4990031d376ef1226fee1e4db200e31adbfec6b0945949a34d777df9c2a7d5810a23e4093c742f31098117f3b54a488ce86229708b45f95fbd1ee21063a59ae94095b"}, @generic="829204649f7d124daa9b2b2f46e4b1b02c9df49401fd82baedf99091f5f0154cab96562111d5bc66cca0b5448213f03ef2ae537fa2cab79264c401f7608256425bf3d85a1df80a6de67f92eca5a3bc1c877d41c05da87b60b1", @typed={0x39, 0x107, 0x0, 0x0, @binary="b8bc1a9d219845e4f24c8692bfa6354ee0ef979650d26e9f4feecf37e5b6ba69701551903ac115a5283369872933a4734035c3029e"}, @typed={0xbe, 0x9a, 0x0, 0x0, @binary="38aa7bb33f200f2e554cee62ddc198375fc9ddaf6ca9e616eb262c4461eb47e482a28073a13a8212b5dfea7512a403446dc647a3462fe7af1d3d70cde7cf6a9136c5c207f7f40fb40d637eb732f7ec59f953834d4fb5e3010869ac52d71ec0b529520849a83436d644cd1f2ba2f25d2e89b4053b402711ffbdc4e5d11c2240a1e211854f3c23f8ca123e0353eb3a87f80045df9671ab79da9352be60bd025ed83b85161ac8071ae3b1a7fc47345497c5367791cc94a34bf189b0"}]}, 0x260}], 0x8, &(0x7f0000003540)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r0, r20, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r20, r20]}}], 0x60, 0x4}, 0x20040054) 351.93052ms ago: executing program 4 (id=5154): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x7c, 0x30, 0xb, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MAX={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010100}, 0x10) (async) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x6}, &(0x7f0000000180)=0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)={@cgroup=r2, r2, 0x16, 0x20, 0x4}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="20a59ec737f34d2d5c00000000010200000000ffffffffffffff7f478b76b6676a6ac5a1c183ccfb122fa8f88954c113be8bf24abb8dbc5c3e56fb2ee460d7a76476d6f36b214d85fc0ed17f7d20e4be409da21b06c41e1b76d2c7be7e0ecadb1f4f69db592f759f20c43521509d851ec370440974ab3922b7e6ca601a5f", @ANYRES32=r7, @ANYBLOB="0002000000000000"], 0x20}}, 0x4000000) (async) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140), &(0x7f0000000240)) 351.358095ms ago: executing program 3 (id=5155): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b70000000000000007000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f269a9e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22230e4321cc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08e2fbd404e41e0058aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd8019ef7bb4ef4fa6ee08d81797570578f2e8198e687012f25a69a90e7515e35f8abbddfa96c3f0485f01f0e9e144a2bd31c1b594c50de7c9efd826f1e19b7bd89ca4052b1985287bd13957a48467e0eeddf564d175bf4340885b63976df609806c3b2a3667539dfd66a7400000000003be6026e60205f761ce85cdf75cdb95ca5d32b5bf87eed4184d49f8f48181ef2419efe82ebb18ee55772d562b3b49551714e805a5211a3f4e8e703c03e23b2074bc573dbb66d59e269b722637c4a2efb5241cae2f14774609ad91d66724c438455dc4fcf0b4c8fc235f6c190b4c82bb2556d1fbcd4468369e98e989986dcbc900c743162ce2c7e60610acf0c8e4ba94a7e7127c7de0e6c35acecee1b8434fdca4579f9ebc6a515f7d910b466eb583fb0a7e65fbecb2b8ee0e9da33afb88aa5da8da3a5e0e58fcb48de6f165826b046a8951a47e040bd419d0efa0f54e8e3694085a7bde6f6494968d820"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES8=0x0, @ANYRESOCT=r0, @ANYBLOB="f4571b9733acb55c3d61a21a75a4c6e648d0622c4288a43b5ee2fac0de276a7ee3c5035b2df4b23fadc2522b6e7f5133", @ANYBLOB="521f05d2531327487dcf76bd3ebbb097cad3fadb5a03f51e657bd229f33a8161cf7a16a514a5807ea884c4d531448672a3f28a59c1997508119c7b8f74162a2887a380921b1c0d3d3f13da71fb19ef9e253c101346a5126aaae2347db243638d160c2a7fa54a18b9849de1dd877018e62d955951b56dfd36c7f6cda0cf245ced170da1b89864736ef46dffb9f2288319a10d024ece7945", @ANYRES32=r0, @ANYRES64=r3, @ANYRESDEC=r2], 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="cc020000", @ANYRES16=r6, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x2cc}}, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000740)={0x401, 0x8a, 0xf566, 0x0, 0x7}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00001f00000073013b00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) sendto$netrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000018140100000000000000000008003d000400000008001d"], 0x38}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r11, 0x0) r12 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r12, 0x114, 0x5, &(0x7f0000000000), 0x4) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="00040000f5ffbfe2298d0b5f0000"], 0x14}}, 0x0) 195.146784ms ago: executing program 4 (id=5156): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) (async, rerun: 64) accept$alg(r2, 0x0, 0x0) (async, rerun: 64) close(0x4) (async, rerun: 64) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (rerun: 64) openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0xefff, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) (rerun: 32) 140.254603ms ago: executing program 4 (id=5157): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000203000000020000000000000700000000000000000000000d02000000000051"], 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) (async) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xff03, 0x0) 32.384978ms ago: executing program 4 (id=5158): r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x81800) accept$alg(r0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r1, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @rand_addr=0x64010101, @multicast1}, "040022eb00000000"}}}}}, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000040)=0x20, 0x4) 0s ago: executing program 4 (id=5159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001500010000200000000000000a"], 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r3, 0x400, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x24000000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x10c, 0x17, 0xa, 0xa00, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0xf8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x24004000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@dellinkprop={0x28, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) kernel console output (not intermixed with test programs): [ 327.372107][T17032] team0: Port device team_slave_0 added [ 327.410930][T17032] team0: Port device team_slave_1 added [ 327.593058][T17032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.617542][T17032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.657043][T17032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.711786][T17032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.718797][T17032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.828571][T17032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.018553][T17253] ipvlan0: mtu greater than device maximum [ 328.035990][T17252] netlink: 'syz.0.3178': attribute type 21 has an invalid length. [ 328.061780][T17032] hsr_slave_0: entered promiscuous mode [ 328.078739][T17032] hsr_slave_1: entered promiscuous mode [ 328.094866][T17032] debugfs: 'hsr0' already exists in 'hsr' [ 328.109331][T17032] Cannot create hsr debugfs directory [ 328.116228][T17252] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3178'. [ 328.161140][ T5881] Bluetooth: hci0: command tx timeout [ 328.229003][T15212] : left promiscuous mode [ 328.371562][T17279] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3188'. [ 328.406915][T17279] netlink: 'syz.2.3188': attribute type 10 has an invalid length. [ 328.518081][T15212] tipc: Disabling bearer [ 328.544205][T15212] tipc: Disabling bearer [ 328.569163][T17279] veth0_vlan: entered allmulticast mode [ 328.577554][T15212] tipc: Left network mode [ 328.618132][T17279] veth0_vlan: left promiscuous mode [ 328.650821][T17279] veth0_vlan: entered promiscuous mode [ 328.671471][T17279] team0: Device veth0_vlan failed to register rx_handler [ 328.710493][T17281] IPVS: Error joining to the multicast group [ 328.777471][T17285] netlink: 'syz.0.3190': attribute type 1 has an invalid length. [ 328.786165][T17285] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3190'. [ 328.796744][T17285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3190'. [ 328.946649][T17303] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 328.954203][T17303] IPv6: NLM_F_CREATE should be set when creating new route [ 328.961508][T17303] IPv6: NLM_F_CREATE should be set when creating new route [ 328.972728][T17304] "syz.2.3194" (17304) uses obsolete ecb(arc4) skcipher [ 328.990315][T17303] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 329.290476][T17323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3199'. [ 329.426289][T17327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3200'. [ 329.458259][T17327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3200'. [ 330.034939][T17350] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3206'. [ 330.058618][T17350] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3206'. [ 330.158702][T15212] dummy0: left promiscuous mode [ 330.180413][T15212] batadv_slave_1: left promiscuous mode [ 330.221121][T15212] hsr_slave_0: left promiscuous mode [ 330.239483][T15212] hsr_slave_1: left promiscuous mode [ 330.786928][T15212] team_slave_1 (unregistering): left promiscuous mode [ 330.795644][T15212] team0 (unregistering): Port device team_slave_1 removed [ 330.847447][T15212] team_slave_0 (unregistering): left promiscuous mode [ 330.855226][T15212] team0 (unregistering): Port device team_slave_0 removed [ 331.538596][T17377] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 331.757000][T17382] __nla_validate_parse: 6 callbacks suppressed [ 331.757018][T17382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3217'. [ 331.791288][T17390] netlink: 'syz.4.3219': attribute type 16 has an invalid length. [ 331.799772][T17390] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3219'. [ 331.808512][T17032] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 331.825835][T17384] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3218'. [ 331.917668][T17032] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 331.967130][T17032] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 332.054449][T17401] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3221'. [ 332.131493][T17032] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 332.267158][T17413] netlink: 'syz.4.3226': attribute type 4 has an invalid length. [ 332.282381][T17402] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3222'. [ 332.289106][T17421] netlink: 'syz.4.3226': attribute type 4 has an invalid length. [ 332.306608][T15212] IPVS: stop unused estimator thread 0... [ 332.322453][T17413] netlink: 'syz.4.3226': attribute type 4 has an invalid length. [ 332.336882][T17421] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3226'. [ 332.373095][T17422] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3225'. [ 332.557671][T17422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3225'. [ 332.693473][T17032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.749108][T17032] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.787101][T15224] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.794363][T15224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.819755][T17437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3230'. [ 332.845522][T15220] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.852723][T15220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.923734][T17032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.082690][T17450] macvtap1: entered allmulticast mode [ 333.093110][T17450] veth0_macvtap: entered allmulticast mode [ 333.418204][T17470] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3240'. [ 333.433954][T17032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.558492][T17032] veth0_vlan: entered promiscuous mode [ 333.618254][T17032] veth1_vlan: entered promiscuous mode [ 333.729110][T17032] veth0_macvtap: entered promiscuous mode [ 333.754165][T17032] veth1_macvtap: entered promiscuous mode [ 333.827791][T17032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.873125][T17032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.909554][T15212] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.934443][T15212] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.969125][T15212] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.021661][T15212] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.098780][T15224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.114664][T15224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.172774][T15220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.188416][T15220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.262623][T17510] veth5: entered allmulticast mode [ 334.288955][T17513] Bluetooth: MGMT ver 1.23 [ 335.391482][T17568] sctp: [Deprecated]: syz.2.3265 (pid 17568) Use of int in max_burst socket option deprecated. [ 335.391482][T17568] Use struct sctp_assoc_value instead [ 335.894433][ T5867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 335.917088][ T5867] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 335.926893][ T5867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 335.952883][ T5867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 335.967942][T17588] netlink: 'syz.1.3268': attribute type 21 has an invalid length. [ 335.996553][T17204] IPVS: starting estimator thread 0... [ 336.004239][ T5867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 336.015073][T17594] IPVS: set_ctl: invalid protocol: 72 24.0.1.0:10941 [ 336.023462][T17596] IPv6: NLM_F_CREATE should be specified when creating new route [ 336.123166][T17586] hsr0 speed is unknown, defaulting to 1000 [ 336.154363][T17595] IPVS: using max 37 ests per chain, 88800 per kthread [ 336.358824][T17614] netlink: 'syz.2.3275': attribute type 1 has an invalid length. [ 336.727613][T17586] chnl_net:caif_netlink_parms(): no params data found [ 336.743982][T17635] netlink: 'syz.0.3280': attribute type 1 has an invalid length. [ 336.757964][T17635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 336.792276][T17635] __nla_validate_parse: 11 callbacks suppressed [ 336.792302][T17635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3280'. [ 336.943002][T15220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.960606][T15220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.117257][T17586] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.173305][T17586] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.196361][T17586] bridge_slave_0: entered allmulticast mode [ 337.233075][T17586] bridge_slave_0: entered promiscuous mode [ 337.246291][T17586] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.265520][T17586] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.299880][T17586] bridge_slave_1: entered allmulticast mode [ 337.318697][T17586] bridge_slave_1: entered promiscuous mode [ 337.374905][T17659] netlink: 'syz.2.3285': attribute type 23 has an invalid length. [ 337.434278][T17586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.465724][T17586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.583589][T17669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3290'. [ 337.617216][T17586] team0: Port device team_slave_0 added [ 337.634021][T17586] team0: Port device team_slave_1 added [ 337.722068][T17669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3290'. [ 337.738821][T17586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.780050][T17586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.813301][T17586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.826791][T17586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.860315][T17586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.912712][T17586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.984315][T17669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3290'. [ 338.090210][ T5867] Bluetooth: hci1: command tx timeout [ 338.131850][T17586] hsr_slave_0: entered promiscuous mode [ 338.138599][T17586] hsr_slave_1: entered promiscuous mode [ 338.145466][T17586] debugfs: 'hsr0' already exists in 'hsr' [ 338.151647][T17586] Cannot create hsr debugfs directory [ 338.179677][T17693] tipc: Started in network mode [ 338.192080][T17693] tipc: Node identity 2e3820677a02, cluster identity 4711 [ 338.199967][T17693] tipc: Enabled bearer , priority 0 [ 338.260657][T17695] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 338.268858][T17693] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 338.325647][T17692] tipc: Disabling bearer [ 338.407046][T17703] netlink: 'syz.0.3299': attribute type 2 has an invalid length. [ 338.455646][T17705] tipc: Started in network mode [ 338.477208][T17705] tipc: Node identity fffff001, cluster identity 4711 [ 338.488127][T17705] tipc: Node number set to 4294963201 [ 338.537698][T17710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3302'. [ 338.555217][T17705] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3300'. [ 338.670873][T17715] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 338.788027][T17723] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3306'. [ 338.812298][T17727] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3308'. [ 338.859167][T17586] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.889387][T17586] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.949496][T17733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3311'. [ 339.016911][T17737] netlink: 'syz.2.3312': attribute type 24 has an invalid length. [ 339.064952][T17586] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.094228][T17586] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.224923][T17744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3314'. [ 339.286090][T17586] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.293522][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 339.297392][T17586] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.394973][T17586] netdevsim netdevsim4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.411144][T17586] netdevsim netdevsim4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.432332][T17748] hsr0 speed is unknown, defaulting to 1000 [ 339.822363][T17771] xt_limit: Overflow, try lower: 604147548/4200216962 [ 340.162163][ T5867] Bluetooth: hci1: command tx timeout [ 340.417828][T17586] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 340.509999][T17586] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 340.551045][T17586] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 340.584298][T17586] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 340.872337][T17820] netlink: 'syz.3.3330': attribute type 4 has an invalid length. [ 340.884262][T17822] netlink: 'syz.1.3331': attribute type 3 has an invalid length. [ 341.117765][T17586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.201734][T17586] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.228003][T17836] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 341.247041][T15223] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.254297][T15223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.281632][T17836] tipc: Started in network mode [ 341.297597][T17836] tipc: Node identity 1edb824163dc, cluster identity 4711 [ 341.306405][T17836] tipc: Enabled bearer , priority 0 [ 341.314489][T17844] netlink: 'syz.3.3338': attribute type 4 has an invalid length. [ 341.318062][T15219] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.329457][T15219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.366950][T17850] netlink: 'syz.3.3338': attribute type 4 has an invalid length. [ 341.383343][T17849] syzkaller0: entered promiscuous mode [ 341.390089][T17849] syzkaller0: entered allmulticast mode [ 341.409740][T17836] tipc: Resetting bearer [ 341.418344][T17835] tipc: Resetting bearer [ 341.442573][T17835] tipc: Disabling bearer [ 341.477527][T17850] IPVS: fo: FWM 3 0x00000003 - no destination available [ 341.485292][T10752] IPVS: starting estimator thread 0... [ 341.491854][T17854] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 341.579430][T17855] IPVS: using max 35 ests per chain, 84000 per kthread [ 341.594055][T15223] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x7d [ 341.677092][T17866] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 341.854042][T17586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.184476][T17586] veth0_vlan: entered promiscuous mode [ 342.197770][T17586] veth1_vlan: entered promiscuous mode [ 342.232234][T17586] veth0_macvtap: entered promiscuous mode [ 342.240707][ T5867] Bluetooth: hci1: command tx timeout [ 342.257798][T17586] veth1_macvtap: entered promiscuous mode [ 342.289880][T17586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.311589][T17844] __nla_validate_parse: 6 callbacks suppressed [ 342.311610][T17844] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3338'. [ 342.341729][T17844] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3338'. [ 342.344742][T17586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.411138][T15223] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.442684][T15223] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.475950][T15223] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.498455][T17884] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3344'. [ 342.526473][T15223] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.753848][T17894] netlink: 'syz.1.3348': attribute type 1 has an invalid length. [ 342.779143][T17900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3349'. [ 342.779921][T15221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.807418][T17894] netlink: 'syz.1.3348': attribute type 1 has an invalid length. [ 342.838404][T15221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.871221][T17894] netlink: 'syz.1.3348': attribute type 1 has an invalid length. [ 342.879083][T17894] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3348'. [ 342.880914][T15222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.919427][T15222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.100182][T17911] netlink: 'syz.1.3354': attribute type 2 has an invalid length. [ 343.100743][T17909] netlink: 'syz.2.3353': attribute type 1 has an invalid length. [ 343.148263][T17914] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 343.154777][T17914] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 343.175256][T17909] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3353'. [ 343.221014][T17920] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3353'. [ 343.435828][T17927] syz.1.3355: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 343.493088][T17927] CPU: 0 UID: 0 PID: 17927 Comm: syz.1.3355 Not tainted syzkaller #0 PREEMPT(full) [ 343.493115][T17927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 343.493133][T17927] Call Trace: [ 343.493141][T17927] [ 343.493149][T17927] dump_stack_lvl+0x189/0x250 [ 343.493176][T17927] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 343.493201][T17927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.493220][T17927] ? __pfx__printk+0x10/0x10 [ 343.493242][T17927] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 343.493262][T17927] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 343.493290][T17927] warn_alloc+0x214/0x310 [ 343.493321][T17927] ? __pfx_warn_alloc+0x10/0x10 [ 343.493354][T17927] ? __get_vm_area_node+0x28f/0x300 [ 343.493377][T17927] ? xskq_create+0xbf/0x170 [ 343.493403][T17927] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 343.493459][T17927] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 343.493495][T17927] ? __kasan_kmalloc+0x93/0xb0 [ 343.493520][T17927] vmalloc_user_noprof+0xad/0xf0 [ 343.493542][T17927] ? xskq_create+0xbf/0x170 [ 343.493565][T17927] xskq_create+0xbf/0x170 [ 343.493589][T17927] xsk_init_queue+0xb0/0x110 [ 343.493614][T17927] xsk_setsockopt+0x4dc/0x8d0 [ 343.493639][T17927] ? __pfx_xsk_setsockopt+0x10/0x10 [ 343.493659][T17927] ? __pfx_aa_sk_perm+0x10/0x10 [ 343.493687][T17927] ? aa_sock_opt_perm+0xff/0x1b0 [ 343.493707][T17927] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 343.493724][T17927] ? __pfx_xsk_setsockopt+0x10/0x10 [ 343.493747][T17927] do_sock_setsockopt+0x179/0x1b0 [ 343.493771][T17927] __x64_sys_setsockopt+0x13f/0x1b0 [ 343.493796][T17927] do_syscall_64+0xfa/0x3b0 [ 343.493811][T17927] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.493832][T17927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.493849][T17927] ? clear_bhb_loop+0x60/0xb0 [ 343.493870][T17927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.493887][T17927] RIP: 0033:0x7f2319d8ebe9 [ 343.493907][T17927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.493923][T17927] RSP: 002b:00007f231abb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 343.493942][T17927] RAX: ffffffffffffffda RBX: 00007f2319fc5fa0 RCX: 00007f2319d8ebe9 [ 343.493955][T17927] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 343.493966][T17927] RBP: 00007f2319e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 343.493977][T17927] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 343.493988][T17927] R13: 00007f2319fc6038 R14: 00007f2319fc5fa0 R15: 00007fff1d186de8 [ 343.494019][T17927] [ 343.494030][T17927] Mem-Info: [ 343.794478][T17927] active_anon:8921 inactive_anon:0 isolated_anon:0 [ 343.794478][T17927] active_file:2565 inactive_file:39947 isolated_file:0 [ 343.794478][T17927] unevictable:768 dirty:61 writeback:0 [ 343.794478][T17927] slab_reclaimable:12508 slab_unreclaimable:125972 [ 343.794478][T17927] mapped:28910 shmem:2740 pagetables:1390 [ 343.794478][T17927] sec_pagetables:0 bounce:0 [ 343.794478][T17927] kernel_misc_reclaimable:0 [ 343.794478][T17927] free:1291720 free_pcp:11921 free_cma:0 [ 343.854302][T17927] Node 0 active_anon:34884kB inactive_anon:0kB active_file:10260kB inactive_file:159588kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115640kB dirty:240kB writeback:0kB shmem:8724kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16052kB pagetables:5304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 343.956170][T17944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3361'. [ 343.966642][T17945] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3361'. [ 343.975910][T17927] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 344.028108][T17927] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 344.060204][T17927] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 344.066007][T17927] Node 0 DMA32 free:1262272kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30064kB inactive_anon:0kB active_file:10260kB inactive_file:158016kB unevictable:1536kB writepending:244kB present:3129332kB managed:2557452kB mlocked:0kB bounce:0kB free_pcp:35508kB local_pcp:14908kB free_cma:0kB [ 344.118013][T17927] lowmem_reserve[]: 0 0 1 1 1 [ 344.126842][T17927] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 344.157520][T17927] lowmem_reserve[]: 0 0 0 0 0 [ 344.164790][T17927] Node 1 Normal free:3890548kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16692kB local_pcp:7668kB free_cma:0kB [ 344.197990][T17927] lowmem_reserve[]: 0 0 0 0 0 [ 344.215325][T17927] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 344.240446][T17927] Node 0 DMA32: 228*4kB (UME) 36*8kB (UME) 7*16kB (UM) 151*32kB (UM) 65*64kB (UM) 63*128kB (UM) 589*256kB (UM) 337*512kB (UME) 151*1024kB (UME) 2*2048kB (UM) 186*4096kB (M) = 1262272kB [ 344.248809][T17955] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3363'. [ 344.269163][T17927] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 344.286608][T17927] Node 1 Normal: 221*4kB (UME) 44*8kB (UME) 46*16kB (UME) 138*32kB (UME) 38*64kB (UME) 18*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3890548kB [ 344.320926][ T5867] Bluetooth: hci1: command tx timeout [ 344.326730][T17927] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 344.344154][T17927] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 344.398952][T17927] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 344.428512][T17927] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 344.442391][T17962] sctp: [Deprecated]: syz.3.3365 (pid 17962) Use of int in maxseg socket option. [ 344.442391][T17962] Use struct sctp_assoc_value instead [ 344.470551][T17927] 43867 total pagecache pages [ 344.475738][T17927] 0 pages in swap cache [ 344.495120][T17963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.496110][T17927] Free swap = 124996kB [ 344.515334][T17965] IPv6: sit1: Disabled Multicast RS [ 344.519236][T17927] Total swap = 124996kB [ 344.524834][T17927] 2097051 pages RAM [ 344.528863][T17927] 0 pages HighMem/MovableOnly [ 344.536231][T17965] sit1: entered allmulticast mode [ 344.556447][T17927] 425662 pages reserved [ 344.579514][T17927] 0 pages cma reserved [ 344.938904][T17989] ipvlan0: entered promiscuous mode [ 344.957411][T17989] ipvlan0: entered allmulticast mode [ 344.970287][T17989] veth0_vlan: entered allmulticast mode [ 345.301442][T18012] bridge_slave_0: invalid flags given to default FDB implementation [ 345.507757][T18009] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 345.643044][T18009] netlink: 'syz.2.3383': attribute type 1 has an invalid length. [ 346.207691][T18071] unknown channel width for channel at 909000KHz? [ 346.215543][T18071] unknown channel width for channel at 909000KHz? [ 346.224013][T18071] unknown channel width for channel at 909000KHz? [ 346.281659][T18075] netlink: 'syz.3.3402': attribute type 4 has an invalid length. [ 346.333283][T18076] netlink: 'syz.3.3402': attribute type 4 has an invalid length. [ 346.377619][T18075] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 346.549104][T13001] hid-generic 0005:046D:0009.0004: unknown main item tag 0x0 [ 346.585327][T18091] syzkaller1: entered promiscuous mode [ 346.598910][T18091] syzkaller1: entered allmulticast mode [ 346.634679][T13001] hid-generic 0005:046D:0009.0004: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 346.888169][T18105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.918985][T18106] vxcan3: entered promiscuous mode [ 347.055829][T18116] netlink: 'syz.2.3416': attribute type 1 has an invalid length. [ 347.069496][T18116] netlink: 'syz.2.3416': attribute type 4 has an invalid length. [ 347.105977][T18116] NCSI netlink: No device for ifindex 458760 [ 347.339895][T18123] __nla_validate_parse: 19 callbacks suppressed [ 347.339915][T18123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3417'. [ 347.382597][T18123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.563540][T18123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.581793][T18137] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3423'. [ 347.668509][T18139] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3424'. [ 347.730096][T18147] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 347.912768][T18156] 8021q: VLANs not supported on ip6gre0 [ 348.011979][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 348.047757][T18164] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3435'. [ 348.067767][T18164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.121343][T18164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3435'. [ 348.158633][T18169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.175397][T18166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3433'. [ 348.188718][T18173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3433'. [ 348.385917][T18188] validate_nla: 3 callbacks suppressed [ 348.385935][T18188] netlink: 'syz.2.3441': attribute type 10 has an invalid length. [ 348.415040][T18188] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 348.565920][T18203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.621131][T18205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3445'. [ 348.653467][T18207] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3448'. [ 348.694182][T18207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.802499][T18213] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3449'. [ 349.032631][T18229] netlink: 'syz.0.3453': attribute type 10 has an invalid length. [ 349.060551][T18229] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 349.096864][T18229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.404246][T18251] netlink: 'syz.4.3462': attribute type 2 has an invalid length. [ 349.413623][T18251] nbd: must specify at least one socket [ 349.420708][T18251] netlink: 'syz.4.3462': attribute type 1 has an invalid length. [ 349.575406][T18260] netlink: 'syz.0.3464': attribute type 1 has an invalid length. [ 349.755062][T18269] bond0: (slave bridge2): making interface the new active one [ 349.786233][T18273] netlink: 'syz.4.3471': attribute type 1 has an invalid length. [ 349.801555][T18269] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 350.448264][T18313] hsr0 speed is unknown, defaulting to 1000 [ 350.468177][T18315] netlink: 'syz.2.3486': attribute type 25 has an invalid length. [ 350.563533][T18321] team_slave_0: mtu greater than device maximum [ 350.793825][T18336] openvswitch: netlink: Actions may not be safe on all matching packets [ 350.826531][T18313] hsr0 speed is unknown, defaulting to 1000 [ 351.056525][T18313] hsr0 speed is unknown, defaulting to 1000 [ 351.842918][T18393] veth1_to_bond: entered allmulticast mode [ 351.975571][T18393] bond0: (slave bond_slave_1): Releasing backup interface [ 352.036490][T18393] veth1_to_bond (unregistering): left allmulticast mode [ 352.066915][T18400] veth1_macvtap: left promiscuous mode [ 352.107885][T18401] netlink: set zone limit has 8 unknown bytes [ 352.355142][T18417] netlink: 'syz.2.3522': attribute type 4 has an invalid length. [ 352.406243][T18422] netlink: 'syz.2.3522': attribute type 4 has an invalid length. [ 352.441893][T18423] __nla_validate_parse: 18 callbacks suppressed [ 352.441911][T18423] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3524'. [ 352.465775][T18426] netlink: 'syz.2.3522': attribute type 7 has an invalid length. [ 352.489160][T15221] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.498762][T18428] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3524'. [ 352.518038][T15222] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.595653][T15222] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.607046][T15222] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.746497][T18440] syzkaller0: entered promiscuous mode [ 352.753257][T18440] syzkaller0: entered allmulticast mode [ 352.772606][T18444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3530'. [ 352.782624][T18444] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3530'. [ 352.800712][T18444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3530'. [ 352.810255][T18444] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3530'. [ 352.823385][T18445] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 352.851958][ T5867] block nbd3: Receive control failed (result -32) [ 353.061152][T18464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3534'. [ 353.890895][T18508] netlink: 404 bytes leftover after parsing attributes in process `syz.1.3547'. [ 353.915701][T18508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3547'. [ 353.992328][T18516] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3546'. [ 354.001610][T18516] validate_nla: 2 callbacks suppressed [ 354.001626][T18516] netlink: 'syz.4.3546': attribute type 7 has an invalid length. [ 354.022367][T18516] netlink: 'syz.4.3546': attribute type 8 has an invalid length. [ 354.719026][T18559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.821394][T18565] team0: Device ip6gre1 is of different type [ 355.048607][T18575] Bluetooth: MGMT ver 1.23 [ 355.615754][T18609] netlink: 'syz.2.3579': attribute type 2 has an invalid length. [ 355.651719][T18609] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 355.713816][T18609] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.722234][T18609] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.810545][T18641] hsr_slave_0 (unregistering): left promiscuous mode [ 357.721524][T18673] __nla_validate_parse: 14 callbacks suppressed [ 357.721542][T18673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3599'. [ 357.743995][T18673] netlink: 'syz.0.3599': attribute type 30 has an invalid length. [ 357.804438][T15222] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.852923][T15222] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.870290][T18685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3600'. [ 357.882442][T15222] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.935446][T15222] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.949742][T18685] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3600'. [ 358.028638][T18687] sctp: [Deprecated]: syz.3.3602 (pid 18687) Use of int in max_burst socket option deprecated. [ 358.028638][T18687] Use struct sctp_assoc_value instead [ 358.161952][T18694] syzkaller0: entered promiscuous mode [ 358.167465][T18694] syzkaller0: entered allmulticast mode [ 358.194698][T18697] macsec0: entered promiscuous mode [ 358.207066][T18697] macsec0: entered allmulticast mode [ 358.342228][T18703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3608'. [ 358.483586][T18698] team0 (unregistering): Port device team_slave_0 removed [ 358.507339][T18698] team0 (unregistering): Port device team_slave_1 removed [ 358.534738][T18701] veth1_macvtap: entered promiscuous mode [ 358.541268][T18701] veth1_macvtap: entered allmulticast mode [ 358.547370][T18701] macsec0: left promiscuous mode [ 358.558575][T18701] macsec0: left allmulticast mode [ 358.571739][T18701] veth1_macvtap: left allmulticast mode [ 358.711516][T18720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.925504][T18737] netlink: 'syz.0.3617': attribute type 2 has an invalid length. [ 359.053095][T18745] nbd: nbd3 already in use [ 359.153080][T18754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.177808][T18754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.209803][T18761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3625'. [ 359.326030][T18765] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3626'. [ 360.051788][T18780] delete_channel: no stack [ 360.057675][T18780] lo: entered allmulticast mode [ 360.062901][T18780] lo: left allmulticast mode [ 360.080364][ T5867] Bluetooth: hci1: command tx timeout [ 360.273468][T18793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3637'. [ 360.326386][T18796] netlink: 'syz.2.3639': attribute type 4 has an invalid length. [ 360.404730][T18802] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3639'. [ 360.576794][T18813] netlink: 'syz.1.3644': attribute type 1 has an invalid length. [ 360.595466][T18813] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3644'. [ 360.605862][T18813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3644'. [ 360.627560][T18815] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 360.968158][T18835] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 361.034481][T18834] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 361.219661][T18846] netlink: 'syz.3.3654': attribute type 1 has an invalid length. [ 361.257423][T18851] netlink: 'syz.3.3654': attribute type 1 has an invalid length. [ 362.870512][T18883] __nla_validate_parse: 14 callbacks suppressed [ 362.870533][T18883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3667'. [ 362.875220][T18885] netlink: 'syz.2.3669': attribute type 15 has an invalid length. [ 362.894173][T18883] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 362.919491][T18883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.942543][T18887] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3668'. [ 362.988251][T18890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3670'. [ 363.238333][T18902] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3673'. [ 363.321179][T18911] netlink: 'syz.1.3676': attribute type 9 has an invalid length. [ 363.406812][T18915] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3678'. [ 363.526844][T18924] tipc: Enabling of bearer rejected, failed to enable media [ 363.657972][T18934] netlink: 'syz.4.3682': attribute type 1 has an invalid length. [ 363.706176][T18934] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3682'. [ 363.841082][T18934] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3682'. [ 364.130063][T18952] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 364.303634][T18957] tipc: Enabled bearer , priority 0 [ 364.311506][T18957] syzkaller0: entered promiscuous mode [ 364.317082][T18957] syzkaller0: entered allmulticast mode [ 364.383984][T18962] tipc: Resetting bearer [ 364.392824][T18959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3690'. [ 364.418651][T18959] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3690'. [ 364.436778][T18956] tipc: Resetting bearer [ 364.471931][T18956] tipc: Disabling bearer [ 364.541157][T18968] netlink: 'syz.1.3693': attribute type 10 has an invalid length. [ 364.625045][T18968] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.682348][T18968] bond0: (slave team0): Enslaving as an active interface with an up link [ 364.713183][T18975] vlan1: entered promiscuous mode [ 364.718610][T18975] vlan1: entered allmulticast mode [ 364.732103][T18975] veth0_vlan: entered allmulticast mode [ 365.034649][T18999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3702'. [ 365.208522][T19012] bond2: entered promiscuous mode [ 365.259635][T19012] bond2: entered allmulticast mode [ 365.265214][T19012] 8021q: adding VLAN 0 to HW filter on device bond2 [ 365.266640][T19028] netlink: 'syz.3.3706': attribute type 1 has an invalid length. [ 365.638028][T19046] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 365.906432][T19055] gretap0: entered promiscuous mode [ 366.222676][T19073] netlink: 'syz.1.3724': attribute type 1 has an invalid length. [ 366.262636][T19076] macvlan2: entered promiscuous mode [ 366.268156][T19076] macvlan2: entered allmulticast mode [ 366.735371][T19107] netlink: 'syz.0.3733': attribute type 10 has an invalid length. [ 366.796245][T19107] team0: Port device dummy0 added [ 367.010805][T19115] bridge_slave_1 (unregistering): left allmulticast mode [ 367.021145][T19115] bridge_slave_1 (unregistering): left promiscuous mode [ 367.028309][T19115] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.463109][T19148] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 367.941948][T19177] netlink: 'syz.1.3755': attribute type 4 has an invalid length. [ 367.962140][T19176] netlink: 'syz.2.3756': attribute type 6 has an invalid length. [ 368.242308][T19188] vlan0: entered allmulticast mode [ 368.255003][T19188] hsr0: entered allmulticast mode [ 368.265242][T19192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.274614][T19188] hsr_slave_0: entered allmulticast mode [ 368.283038][T19188] hsr_slave_1: entered allmulticast mode [ 368.511556][T19206] __nla_validate_parse: 12 callbacks suppressed [ 368.511574][T19206] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3767'. [ 368.592532][T19208] bridge0: entered promiscuous mode [ 368.645746][T19208] macsec1: entered promiscuous mode [ 368.671691][T19208] bridge0: port 3(macsec1) entered blocking state [ 368.678563][T19208] bridge0: port 3(macsec1) entered disabled state [ 368.702470][T19208] macsec1: entered allmulticast mode [ 368.708003][T19208] bridge0: entered allmulticast mode [ 368.741874][T19208] macsec1: left allmulticast mode [ 368.763188][T19208] bridge0: left allmulticast mode [ 368.781335][T19208] bridge0: left promiscuous mode [ 368.997134][T19227] netlink: 'syz.4.3776': attribute type 10 has an invalid length. [ 369.048371][T19229] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3775'. [ 369.146950][T19229] tipc: Started in network mode [ 369.166616][T19229] tipc: Node identity 9a3459240311, cluster identity 4711 [ 369.182687][T19229] tipc: Enabled bearer , priority 0 [ 369.201578][T19238] syzkaller0: entered promiscuous mode [ 369.209479][T19237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3779'. [ 369.217405][T19238] syzkaller0: entered allmulticast mode [ 369.259983][T19225] tipc: Resetting bearer [ 369.315866][T19225] tipc: Disabling bearer [ 369.319753][T19241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3781'. [ 369.410607][T19248] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 369.431556][T19241] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 369.453952][T19249] netlink: 'syz.1.3783': attribute type 11 has an invalid length. [ 369.496953][T19249] netlink: 'syz.1.3783': attribute type 15 has an invalid length. [ 369.596844][T19253] tipc: Started in network mode [ 369.602123][T19253] tipc: Node identity 42e549f9baf6, cluster identity 4711 [ 369.620831][T19253] tipc: Enabled bearer , priority 0 [ 369.664350][T19253] syzkaller0: entered promiscuous mode [ 369.690796][T19253] syzkaller0: entered allmulticast mode [ 369.703743][T19261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3789'. [ 369.761060][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.770346][T19253] tipc: Resetting bearer [ 369.770568][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.776892][T19259] netlink: 'syz.0.3788': attribute type 29 has an invalid length. [ 369.795777][T19253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.804333][T19253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.821503][T19267] netlink: 'syz.4.3785': attribute type 21 has an invalid length. [ 369.908842][T19267] netlink: 'syz.4.3785': attribute type 6 has an invalid length. [ 369.929404][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.975097][T19267] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3785'. [ 370.033608][T19252] tipc: Resetting bearer [ 370.101928][T19252] tipc: Disabling bearer [ 370.380507][T19291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3798'. [ 370.452688][T19291] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3798'. [ 370.707587][T19304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 370.866460][T19316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3805'. [ 371.049417][T19334] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 2, id = 0 [ 371.092844][T19336] syzkaller1: entered promiscuous mode [ 371.118488][T19336] syzkaller1: entered allmulticast mode [ 371.168310][T19343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3813'. [ 371.282385][T19347] validate_nla: 3 callbacks suppressed [ 371.282403][T19347] netlink: 'syz.0.3815': attribute type 1 has an invalid length. [ 371.348787][T19348] tipc: Enabled bearer , priority 0 [ 371.527357][T19344] tipc: Disabling bearer [ 371.962342][T19379] netlink: 'syz.3.3825': attribute type 9 has an invalid length. [ 372.461525][T19360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.516452][T19360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.833486][T19360] veth0_macvtap: left allmulticast mode [ 372.922804][T15219] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.961194][T15219] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.994700][T15219] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.036875][T15219] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.305762][T19415] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 373.399398][T19421] nft_compat: unsupported protocol 0 [ 373.657505][T19435] __nla_validate_parse: 7 callbacks suppressed [ 373.657523][T19435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3841'. [ 373.695402][T19435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3841'. [ 373.721773][T19440] netlink: 'syz.4.3843': attribute type 6 has an invalid length. [ 373.797276][T19435] bridge0: port 3(vlan3) entered blocking state [ 373.829643][T19435] bridge0: port 3(vlan3) entered disabled state [ 373.840972][T19435] vlan3: entered allmulticast mode [ 373.850777][T19435] bridge0: entered allmulticast mode [ 373.865391][T19435] vlan3: left allmulticast mode [ 373.872212][T19444] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3844'. [ 373.899073][T19435] bridge0: left allmulticast mode [ 374.138130][T15222] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.151787][T19461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3847'. [ 374.169812][T15222] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.181265][T19462] netlink: 'syz.0.3849': attribute type 21 has an invalid length. [ 374.189329][T19462] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3849'. [ 374.212169][T15222] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.241725][T15222] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.423368][T19468] tipc: Enabling of bearer rejected, failed to enable media [ 374.457952][T19469] tipc: Enabling of bearer rejected, failed to enable media [ 374.970179][T19468] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.977784][T19468] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.254441][T19468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.271216][T19468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.679555][T15218] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.688984][T15219] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.701242][T19511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3860'. [ 375.714189][T19513] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3861'. [ 375.718821][T15219] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.755659][T15218] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.011606][T19539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3864'. [ 376.216709][T19545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3870'. [ 376.246723][T19547] netlink: 'syz.3.3871': attribute type 10 has an invalid length. [ 376.301323][T19547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3871'. [ 376.342560][T19547] netlink: 'syz.3.3871': attribute type 10 has an invalid length. [ 376.827732][T19573] sctp: [Deprecated]: syz.1.3879 (pid 19573) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.827732][T19573] Use struct sctp_sack_info instead [ 376.840584][T19568] syzkaller1: entered promiscuous mode [ 376.874347][T19568] syzkaller1: entered allmulticast mode [ 377.200918][T19595] netlink: zone id is out of range [ 377.229139][T19595] netlink: zone id is out of range [ 377.250576][T19595] netlink: del zone limit has 4 unknown bytes [ 377.677863][T19627] netlink: 'syz.4.3896': attribute type 1 has an invalid length. [ 377.693508][T19629] netlink: 'syz.4.3896': attribute type 1 has an invalid length. [ 378.150454][T19662] sctp: [Deprecated]: syz.1.3904 (pid 19662) Use of int in maxseg socket option. [ 378.150454][T19662] Use struct sctp_assoc_value instead [ 378.565730][T19683] erspan0: entered allmulticast mode [ 378.689781][T19686] __nla_validate_parse: 103 callbacks suppressed [ 378.689801][T19686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3912'. [ 378.728578][T19686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3912'. [ 378.752375][T19686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3912'. [ 378.883632][T19683] syz.4.3910 (19683) used greatest stack depth: 17864 bytes left [ 378.992110][T19700] netlink: 'syz.3.3916': attribute type 1 has an invalid length. [ 379.044887][T19700] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3916'. [ 379.157295][T19719] ip6gre2: entered allmulticast mode [ 379.247038][T19719] hsr0 speed is unknown, defaulting to 1000 [ 379.283031][T19728] netlink: 'syz.1.3924': attribute type 19 has an invalid length. [ 379.326081][T19713] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 379.343014][T19728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3924'. [ 379.418856][T19742] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3924'. [ 380.050791][T19769] syzkaller0: entered promiscuous mode [ 380.056736][T19769] syzkaller0: entered allmulticast mode [ 382.212948][T19798] tipc: Enabled bearer , priority 0 [ 382.255070][T19808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3947'. [ 382.282562][T19798] tipc: Disabling bearer [ 382.340456][T19805] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3944'. [ 382.405330][T19813] netlink: 'syz.4.3948': attribute type 83 has an invalid length. [ 382.467829][T19818] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 382.498200][T19818] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3950'. [ 382.547303][T19822] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3951'. [ 382.720151][T19822] netlink: 'syz.1.3951': attribute type 1 has an invalid length. [ 382.783684][T19822] bond1 (unregistering): Released all slaves [ 382.791330][T19833] netlink: 'syz.2.3954': attribute type 2 has an invalid length. [ 382.805215][T19833] netlink: 'syz.2.3954': attribute type 1 has an invalid length. [ 383.188596][T19854] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode [ 383.484228][T19877] wg1: entered promiscuous mode [ 383.516834][T19877] wg1: entered allmulticast mode [ 384.278492][T19923] IPv6: addrconf: prefix option has invalid lifetime [ 384.717909][T19946] __nla_validate_parse: 5 callbacks suppressed [ 384.717928][T19946] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3993'. [ 384.765885][T19946] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3993'. [ 384.847823][T19962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3997'. [ 385.264522][T19993] pim6reg1: entered promiscuous mode [ 385.311190][T19993] pim6reg1: entered allmulticast mode [ 385.414791][T19997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4009'. [ 385.698940][T20002] tipc: Enabled bearer , priority 0 [ 385.706708][T20002] syzkaller0: entered promiscuous mode [ 385.713698][T20002] syzkaller0: entered allmulticast mode [ 385.772016][T20002] tipc: Resetting bearer [ 385.830702][T20001] tipc: Resetting bearer [ 385.872712][T20018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4017'. [ 385.888301][T20001] tipc: Disabling bearer [ 385.965017][T20022] netlink: 'syz.2.4019': attribute type 1 has an invalid length. [ 386.067971][T20024] bond3: (slave geneve2): making interface the new active one [ 386.076666][T20024] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 386.087143][T15212] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 386.183436][T15212] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 386.231372][T15212] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 386.252878][T15212] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 386.451834][T20046] netlink: 'syz.0.4025': attribute type 1 has an invalid length. [ 386.647281][T20046] bond1: entered promiscuous mode [ 386.660452][T20046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 386.683599][T20031] infiniband syz2: set active [ 386.694808][T20031] infiniband syz2: added bond0 [ 386.733663][T20052] 8021q: adding VLAN 0 to HW filter on device bond1 [ 386.764935][T20052] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 386.779685][T20052] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 386.831365][T20052] bond1: (slave wireguard0): making interface the new active one [ 386.839599][T20052] wireguard0: entered promiscuous mode [ 386.846756][T20052] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 386.852074][T20031] RDS/IB: syz2: added [ 386.898453][T20031] smc: adding ib device syz2 with port count 1 [ 386.922283][T20031] smc: ib device syz2 port 1 has pnetid [ 387.012298][T20074] netlink: 'syz.1.4032': attribute type 2 has an invalid length. [ 387.069798][T20079] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 387.195188][T20082] netlink: 'syz.0.4035': attribute type 4 has an invalid length. [ 387.463335][T20098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.915970][T20109] team0: Device vti0 is of different type [ 388.090723][T20113] openvswitch: netlink: EtherType 0 is less than min 600 [ 388.125785][T20113] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 388.320838][T20119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4050'. [ 388.376540][T20119] 8021q: adding VLAN 0 to HW filter on device bond3 [ 388.387261][T20123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4049'. [ 388.678471][T20141] netlink: 'syz.0.4053': attribute type 1 has an invalid length. [ 388.722173][T20141] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4053'. [ 388.783000][T20141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4053'. [ 389.088075][T20154] bond4: entered allmulticast mode [ 389.094151][T20154] 8021q: adding VLAN 0 to HW filter on device bond4 [ 389.101674][T20154] bridge0: port 3(bond4) entered blocking state [ 389.108330][T20154] bridge0: port 3(bond4) entered disabled state [ 389.119096][T20154] bond4: entered promiscuous mode [ 389.279820][T20163] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 389.412936][T20169] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4062'. [ 389.890115][T20188] __nla_validate_parse: 3 callbacks suppressed [ 389.890135][T20188] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4068'. [ 390.558523][T20224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4077'. [ 390.815511][T20238] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4081'. [ 390.930208][T20241] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4082'. [ 390.974937][T20241] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4082'. [ 390.996453][T20241] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4082'. [ 391.028088][T20241] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4082'. [ 391.038602][T20241] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4082'. [ 391.049512][T20241] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4082'. [ 391.060081][T20241] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4082'. [ 391.256431][T20253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.488588][T20261] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 391.496813][T20261] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 392.030665][T20287] netlink: 'syz.4.4099': attribute type 1 has an invalid length. [ 392.234671][T20293] ip6tnl0: entered promiscuous mode [ 392.244417][T20133] siw: device registration error -23 [ 392.861255][T20321] netlink: 'syz.4.4108': attribute type 4 has an invalid length. [ 392.901724][T20321] netlink: 'syz.4.4108': attribute type 11 has an invalid length. [ 393.211591][T20337] tipc: Enabled bearer , priority 0 [ 393.239078][T20337] syzkaller0: entered promiscuous mode [ 393.244891][T20337] syzkaller0: entered allmulticast mode [ 393.365475][T20345] tipc: Resetting bearer [ 393.400395][T20334] tipc: Resetting bearer [ 393.428848][T20334] tipc: Disabling bearer [ 393.613167][T20359] netlink: 'syz.2.4119': attribute type 25 has an invalid length. [ 393.623766][T20360] netlink: 'syz.2.4119': attribute type 25 has an invalid length. [ 394.108415][T20384] netlink: 'syz.0.4126': attribute type 1 has an invalid length. [ 394.675159][T20410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.723338][T20410] netlink: 'syz.0.4134': attribute type 10 has an invalid length. [ 395.013662][T20426] __nla_validate_parse: 75 callbacks suppressed [ 395.013682][T20426] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4138'. [ 395.065370][T20423] netlink: 'syz.0.4137': attribute type 1 has an invalid length. [ 395.082147][T20431] openvswitch: netlink: IP tunnel dst address not specified [ 395.083679][T20426] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4138'. [ 395.102049][T20431] netlink: 'syz.1.4138': attribute type 6 has an invalid length. [ 395.126231][T20433] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4139'. [ 395.149279][T20431] netlink: 'syz.1.4138': attribute type 1 has an invalid length. [ 395.173372][T20431] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.4138'. [ 395.291120][T20438] netlink: 'syz.0.4141': attribute type 1 has an invalid length. [ 395.309377][T20438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4141'. [ 395.335342][T20438] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 395.342684][T20438] IPv6: NLM_F_CREATE should be set when creating new route [ 395.420086][T20442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4143'. [ 395.442224][T20442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4143'. [ 395.564413][T20451] netlink: 'syz.1.4146': attribute type 1 has an invalid length. [ 395.650914][T20464] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4148'. [ 395.689705][T20451] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4146'. [ 395.733444][T20460] 8021q: adding VLAN 0 to HW filter on device bond2 [ 395.745323][T20460] bond1: (slave bond2): making interface the new active one [ 395.755703][T20460] bond1: (slave bond2): Enslaving as an active interface with an up link [ 395.777099][T20451] bond1: entered promiscuous mode [ 395.782289][T20451] bond2: entered promiscuous mode [ 395.787552][T20451] bond1: entered allmulticast mode [ 395.798436][T20451] bond2: entered allmulticast mode [ 395.809171][T20451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 396.057317][T20489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4155'. [ 396.273623][T20507] netlink: 'syz.2.4161': attribute type 1 has an invalid length. [ 396.299619][T20507] netlink: 'syz.2.4161': attribute type 11 has an invalid length. [ 396.795287][T20537] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 397.058044][T20552] netlink: 'syz.3.4178': attribute type 8 has an invalid length. [ 397.091941][T20552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.640221][T20591] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 398.055927][T20603] gretap1: entered promiscuous mode [ 398.108284][T20604] veth1_macvtap: left promiscuous mode [ 398.304701][T20619] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 398.437180][T20632] bridge0: port 3(vlan3) entered blocking state [ 398.444362][T20632] bridge0: port 3(vlan3) entered disabled state [ 398.455343][T20632] vlan3: entered allmulticast mode [ 398.475216][T20632] bridge0: entered allmulticast mode [ 398.491288][T20632] vlan3: left allmulticast mode [ 398.496180][T20632] bridge0: left allmulticast mode [ 398.720569][T20646] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 398.788911][T20654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.125459][T20675] Bluetooth: MGMT ver 1.23 [ 399.562591][T20699] team0: Device wireguard0 is of different type [ 399.792439][T20709] bridge_slave_0: left allmulticast mode [ 399.798239][T20709] bridge_slave_0: left promiscuous mode [ 399.815227][T20709] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.872072][T20709] bridge_slave_1: left allmulticast mode [ 399.877763][T20709] bridge_slave_1: left promiscuous mode [ 399.916649][T20709] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.958767][T20709] bond0: (slave bond_slave_0): Releasing backup interface [ 399.977603][T20709] bond0: (slave bond_slave_1): Releasing backup interface [ 399.992811][T20709] team0: Port device team_slave_0 removed [ 400.013098][T20709] team0: Port device team_slave_1 removed [ 400.032306][T20709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.048982][T20709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.073894][T20709] bond4: left promiscuous mode [ 400.078948][T20709] bridge0: port 3(bond4) entered disabled state [ 400.107358][T20716] syzkaller0: entered promiscuous mode [ 400.113420][T20716] syzkaller0: entered allmulticast mode [ 400.366549][T20728] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 400.420315][T20731] validate_nla: 1 callbacks suppressed [ 400.420331][T20731] netlink: 'syz.0.4226': attribute type 7 has an invalid length. [ 400.450199][T20731] __nla_validate_parse: 24 callbacks suppressed [ 400.450218][T20731] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4226'. [ 400.481083][T20731] tipc: Invalid UDP bearer configuration [ 400.481144][T20731] tipc: Enabling of bearer rejected, failed to enable media [ 400.625435][T20746] veth1_macvtap: left promiscuous mode [ 400.636520][T20749] sctp: [Deprecated]: syz.4.4232 (pid 20749) Use of int in maxseg socket option. [ 400.636520][T20749] Use struct sctp_assoc_value instead [ 400.717723][T20749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4232'. [ 400.857322][T20753] hsr0 speed is unknown, defaulting to 1000 [ 401.034496][T20765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4235'. [ 401.148760][T20774] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4237'. [ 401.340992][T20780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4240'. [ 401.381050][T20780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4240'. [ 401.447741][T20782] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4241'. [ 401.676714][T20793] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4243'. [ 401.839014][T20798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4247'. [ 402.071476][T20803] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4249'. [ 402.298760][T20819] netlink: 'syz.2.4255': attribute type 1 has an invalid length. [ 402.337806][T20820] veth7: entered allmulticast mode [ 402.378485][T20822] tipc: Enabled bearer , priority 0 [ 402.457403][T20824] 8021q: adding VLAN 0 to HW filter on device bond5 [ 402.468607][T20824] bond4: (slave bond5): making interface the new active one [ 402.477076][T20824] bond4: (slave bond5): Enslaving as an active interface with an up link [ 402.487207][T20815] tipc: Resetting bearer [ 403.473940][ T24] tipc: Node number set to 4162013689 [ 404.403453][T20815] tipc: Disabling bearer [ 404.421470][T20819] bond4: entered promiscuous mode [ 404.426517][T20819] bond5: entered promiscuous mode [ 404.433673][T20819] bond4: entered allmulticast mode [ 404.439877][T20819] bond5: entered allmulticast mode [ 404.445973][T20819] 8021q: adding VLAN 0 to HW filter on device bond4 [ 404.596000][T20845] tipc: Enabling of bearer rejected, failed to enable media [ 405.215485][T20876] syzkaller0: entered promiscuous mode [ 405.245482][T20876] syzkaller0: entered allmulticast mode [ 405.274050][T20885] tipc: Enabled bearer , priority 0 [ 405.344607][T20875] tipc: Resetting bearer [ 405.598489][T20903] netlink: 'syz.2.4278': attribute type 1 has an invalid length. [ 405.648098][T20906] __nla_validate_parse: 4 callbacks suppressed [ 405.648117][T20906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4277'. [ 405.765424][T20911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4279'. [ 405.786664][T20911] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4279'. [ 406.340039][ T56] tipc: Node number set to 1413095527 [ 407.451987][T20875] tipc: Disabling bearer [ 407.477358][T20903] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 407.893944][T20922] netlink: 191164 bytes leftover after parsing attributes in process `syz.2.4282'. [ 407.959857][T20911] bond0 (unregistering): Released all slaves [ 407.969690][T20939] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4285'. [ 408.103370][T20946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4287'. [ 408.347890][T20957] netlink: 216 bytes leftover after parsing attributes in process `syz.4.4292'. [ 408.364444][T20959] netlink: 81 bytes leftover after parsing attributes in process `syz.3.4293'. [ 408.388222][T20957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4292'. [ 408.442738][T20960] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 408.500884][T20960] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 408.802810][T20978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4296'. [ 409.114877][T20988] pim6reg527: entered allmulticast mode [ 409.441491][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 409.854794][T21019] netlink: 'syz.0.4311': attribute type 14 has an invalid length. [ 409.911521][T21022] netlink: 'syz.0.4311': attribute type 3 has an invalid length. [ 409.948463][T21026] netlink: 'syz.4.4313': attribute type 10 has an invalid length. [ 410.108479][T21040] netlink: 'syz.4.4316': attribute type 10 has an invalid length. [ 410.148417][T21040] team0: Port device dummy0 added [ 410.675942][T21077] __nla_validate_parse: 8 callbacks suppressed [ 410.675960][T21077] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4327'. [ 410.753689][T21083] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4329'. [ 410.763490][T21083] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4329'. [ 410.773646][T21082] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4329'. [ 410.788445][T21082] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4329'. [ 411.286494][T21098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4334'. [ 411.295916][T21098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4334'. [ 411.306467][T21098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4334'. [ 411.315731][T21098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4334'. [ 411.585156][T21114] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.4337'. [ 412.128967][T21147] hsr0 speed is unknown, defaulting to 1000 [ 412.728052][T21178] netlink: 'syz.2.4358': attribute type 11 has an invalid length. [ 413.028922][T21188] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 413.080047][T21194] "syz.4.4361" (21194) uses obsolete ecb(arc4) skcipher [ 413.096391][T21193] "syz.4.4361" (21193) uses obsolete ecb(arc4) skcipher [ 413.827159][T21228] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 414.265531][T21248] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 414.409085][T21254] syzkaller0: entered promiscuous mode [ 414.430685][T21254] syzkaller0: entered allmulticast mode [ 414.478523][T21262] openvswitch: netlink: Message has 5 unknown bytes. [ 414.583151][T21263] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 414.594211][T17199] IPVS: starting estimator thread 0... [ 414.664862][T21274] C: renamed from team_slave_0 (while UP) [ 414.697618][T21274] netlink: 'syz.1.4389': attribute type 1 has an invalid length. [ 414.699725][T21266] IPVS: using max 29 ests per chain, 69600 per kthread [ 414.718100][T21274] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 415.021902][T21294] netlink: 'syz.1.4396': attribute type 11 has an invalid length. [ 415.148097][T21299] tap0: tun_chr_ioctl cmd 2148553947 [ 415.226908][T21304] veth0: entered promiscuous mode [ 415.248636][T21301] veth0: left promiscuous mode [ 415.257606][T21310] netlink: 'syz.3.4398': attribute type 1 has an invalid length. [ 415.354706][T21310] netlink: 'syz.3.4398': attribute type 10 has an invalid length. [ 415.374948][T21310] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.382747][T21310] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.444062][T21310] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.451416][T21310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.458986][T21310] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.466223][T21310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.513072][T21310] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 415.846590][T21345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.647777][ T5867] Bluetooth: hci5: command 0x0406 tx timeout [ 426.879347][ T5881] Bluetooth: hci3: command 0x0406 tx timeout [ 431.999941][ T5881] Bluetooth: hci2: command 0x0406 tx timeout [ 442.244965][ T5867] Bluetooth: hci0: command 0x0406 tx timeout [ 458.770937][T21376] netlink: 'syz.3.4415': attribute type 2 has an invalid length. [ 458.798328][T21376] __nla_validate_parse: 7 callbacks suppressed [ 458.798343][T21376] netlink: 119 bytes leftover after parsing attributes in process `syz.3.4415'. [ 458.862225][T21384] openvswitch: netlink: Message has 8 unknown bytes. [ 458.950804][T21384] gtp1: entered promiscuous mode [ 458.960752][T21384] gtp1: entered allmulticast mode [ 459.135003][T21397] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4421'. [ 459.350016][T21409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4425'. [ 459.371719][T21409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4425'. [ 459.374242][T21405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4424'. [ 459.391172][T21405] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4424'. [ 459.420159][T21409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4425'. [ 459.472543][T21405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4424'. [ 459.474698][T15218] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.500098][T21409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4425'. [ 459.524148][T15218] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.543765][T21405] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4424'. [ 459.559901][T15218] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.589452][T15218] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.140625][T21440] netlink: 'syz.2.4434': attribute type 11 has an invalid length. [ 460.208623][T21449] netlink: 'syz.4.4437': attribute type 2 has an invalid length. [ 460.264104][T21458] netlink: 'syz.3.4439': attribute type 2 has an invalid length. [ 460.289968][T21458] nbd: must specify at least one socket [ 460.897539][T21502] netlink: 'syz.1.4451': attribute type 10 has an invalid length. [ 460.916614][T21502] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 460.930390][T21502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 461.434670][T21534] rdma_rxe: rxe_newlink: failed to add bond0 [ 461.495167][T21535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 461.937347][T21566] netlink: 'syz.3.4474': attribute type 9 has an invalid length. [ 462.162480][T21584] netlink: 'syz.1.4481': attribute type 1 has an invalid length. [ 462.208320][T21584] netlink: 'syz.1.4481': attribute type 2 has an invalid length. [ 462.236096][T21587] delete_channel: no stack [ 462.350960][T21598] syzkaller0: entered promiscuous mode [ 462.356476][T21598] syzkaller0: entered allmulticast mode [ 462.435384][T21603] netlink: 'syz.1.4487': attribute type 6 has an invalid length. [ 462.481138][T21604] netlink: 'syz.1.4487': attribute type 6 has an invalid length. [ 462.554036][T21608] netlink: 'syz.1.4488': attribute type 1 has an invalid length. [ 462.691836][T21615] batadv2: entered allmulticast mode [ 462.830696][T21601] tipc: Enabled bearer , priority 0 [ 462.837826][T21605] syzkaller0: entered promiscuous mode [ 462.861263][T21605] syzkaller0: entered allmulticast mode [ 462.922884][T21600] tipc: Resetting bearer [ 462.937150][T21625] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 462.986978][T21600] tipc: Disabling bearer [ 463.336002][T21642] hsr0 speed is unknown, defaulting to 1000 [ 463.347479][T21644] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 463.448658][T21649] geneve3: entered promiscuous mode [ 463.467329][T21649] geneve3: entered allmulticast mode [ 463.475699][T15218] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 463.499123][T15218] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 463.534797][T15218] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 463.550876][T15218] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 463.587280][T21657] bridge0: entered promiscuous mode [ 463.593919][T21657] bridge0: entered allmulticast mode [ 463.615355][T21656] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 463.868156][T21663] validate_nla: 3 callbacks suppressed [ 463.868173][T21663] netlink: 'syz.3.4504': attribute type 1 has an invalid length. [ 464.793529][T21674] tipc: Enabled bearer , priority 0 [ 464.803545][T21683] __nla_validate_parse: 152 callbacks suppressed [ 464.803562][T21683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4510'. [ 464.848904][T21683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4510'. [ 464.946610][T21694] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 465.010932][T21701] netlink: 'syz.0.4513': attribute type 16 has an invalid length. [ 465.014060][T21692] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.051856][T21701] netlink: 'syz.0.4513': attribute type 17 has an invalid length. [ 465.073427][T21692] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.191431][T21674] tipc: Disabling bearer [ 465.355859][T21701] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 466.378232][T21762] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4531'. [ 466.542032][T21769] netlink: 'syz.4.4533': attribute type 11 has an invalid length. [ 466.551827][T21769] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4533'. [ 466.837561][T21783] tipc: Enabled bearer , priority 0 [ 466.848006][T21780] tipc: Resetting bearer [ 467.503980][T21808] netlink: 'syz.2.4542': attribute type 1 has an invalid length. [ 467.512683][T21808] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4542'. [ 467.523447][T21808] nbd: illegal input index 1048576 [ 468.958904][T21780] tipc: Disabling bearer [ 469.086749][T21815] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4545'. [ 469.107240][T21815] nbd: must specify at least one socket [ 469.128371][T21817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4544'. [ 469.179566][T21817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4544'. [ 469.221889][T21817] bridge0: port 3(vlan0) entered blocking state [ 469.228351][T21817] bridge0: port 3(vlan0) entered disabled state [ 469.256202][T21817] vlan0: entered allmulticast mode [ 469.271591][T21817] vlan0: left allmulticast mode [ 469.308273][T21829] netlink: 'syz.0.4549': attribute type 1 has an invalid length. [ 469.337148][T21829] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4549'. [ 469.529787][T21843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4552'. [ 469.601934][T21843] netlink: 'syz.1.4552': attribute type 1 has an invalid length. [ 469.652676][T21843] sctp: [Deprecated]: syz.1.4552 (pid 21843) Use of int in maxseg socket option. [ 469.652676][T21843] Use struct sctp_assoc_value instead [ 469.795411][T21854] IPv6: NLM_F_CREATE should be specified when creating new route [ 469.906594][T21861] netlink: 'syz.2.4558': attribute type 16 has an invalid length. [ 469.932123][T21861] netlink: 'syz.2.4558': attribute type 17 has an invalid length. [ 469.967780][T21861] tunl0: left promiscuous mode [ 469.984292][T21861] gretap0: left promiscuous mode [ 469.994410][T21868] __nla_validate_parse: 4 callbacks suppressed [ 469.994427][T21868] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4558'. [ 470.012438][T21868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4558'. [ 470.056618][T21861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.144462][T21861] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.167850][T21861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 470.267439][T21869] veth11: entered allmulticast mode [ 470.380468][T21883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4564'. [ 470.406374][T21883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4564'. [ 470.421260][T21888] netlink: 'syz.3.4566': attribute type 39 has an invalid length. [ 470.495808][T21883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4564'. [ 470.514849][T21890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4567'. [ 470.583512][T21892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4568'. [ 470.607548][T21892] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4568'. [ 470.643883][T21895] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4567'. [ 470.887759][T21907] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4573'. [ 471.074112][T21918] netlink: 'syz.2.4576': attribute type 1 has an invalid length. [ 471.095862][T21918] netlink: 'syz.2.4576': attribute type 10 has an invalid length. [ 471.118153][T21918] netlink: 'syz.2.4576': attribute type 4 has an invalid length. [ 471.150281][T21918] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 471.365174][T21936] netlink: 'syz.2.4582': attribute type 10 has an invalid length. [ 471.376731][T21936] bridge0: port 2(team0) entered blocking state [ 471.386762][T21936] bridge0: port 2(team0) entered disabled state [ 471.395793][T21936] team0: entered allmulticast mode [ 471.406656][T21936] team_slave_0: entered allmulticast mode [ 471.419930][T21936] team_slave_1: entered allmulticast mode [ 471.428207][T21936] team0: left allmulticast mode [ 471.436935][T21936] team_slave_0: left allmulticast mode [ 471.444099][T21936] team_slave_1: left allmulticast mode [ 471.450351][T21938] smc: net device erspan0 applied user defined pnetid SYZ0 [ 472.348978][T22003] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 472.453256][T22004] netlink: 'syz.3.4602': attribute type 4 has an invalid length. [ 472.471063][T22012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.863671][T22034] bond0: (slave syz_tun): Releasing backup interface [ 472.885669][T22034] bridge_slave_0: left allmulticast mode [ 472.913275][T22034] bridge_slave_0: left promiscuous mode [ 472.925690][T22034] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.938388][T22034] bond0: (slave bond_slave_0): Releasing backup interface [ 472.956477][T22034] team0: Port device team_slave_0 removed [ 472.982938][T22034] team0: Port device team_slave_1 removed [ 472.993753][T22034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.003550][T22034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.012651][T22034] bond1: left promiscuous mode [ 473.017693][T22034] bridge0: port 3(bond1) entered disabled state [ 473.028802][T22034] bond3: (slave geneve2): Releasing active interface [ 473.052918][T22034] bond4: (slave bond5): Releasing backup interface [ 473.060208][T22034] bond5: left promiscuous mode [ 473.065144][T22034] bond5: left allmulticast mode [ 473.106005][T15220] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 473.126572][T15220] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 473.138252][T15220] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 473.147972][T15220] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 473.229996][T22060] digital: digital_start_poll: Unknown protocol [ 473.413005][T22071] syzkaller0: entered promiscuous mode [ 473.421104][T22071] syzkaller0: entered allmulticast mode [ 473.508318][T22075] delete_channel: no stack [ 473.510963][T22073] vlan2: entered promiscuous mode [ 473.518200][T22073] vlan2: entered allmulticast mode [ 473.524344][T22073] hsr_slave_1: entered allmulticast mode [ 473.711728][T22077] 8021q: adding VLAN 0 to HW filter on device bond2 [ 473.937446][T22091] tc_dump_action: action bad kind [ 474.142525][T22106] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 474.357118][T22116] validate_nla: 3 callbacks suppressed [ 474.357137][T22116] netlink: 'syz.1.4639': attribute type 1 has an invalid length. [ 474.398440][T22116] 8021q: adding VLAN 0 to HW filter on device bond3 [ 474.487551][T22116] bond3: (slave veth9): Enslaving as an active interface with a down link [ 474.522123][T22124] netlink: 'syz.3.4640': attribute type 4 has an invalid length. [ 474.560739][T22116] veth11: entered promiscuous mode [ 474.574065][T22116] bond3: (slave veth11): Enslaving as an active interface with a down link [ 474.604808][T22129] vlan3: entered allmulticast mode [ 474.611071][T22129] hsr0: entered allmulticast mode [ 474.659451][T22124] `: renamed from bond0 (while UP) [ 474.774961][T22136] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 474.941476][T22144] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 475.071570][T22151] netlink: 'syz.4.4650': attribute type 16 has an invalid length. [ 475.100127][T22151] netlink: 'syz.4.4650': attribute type 17 has an invalid length. [ 475.161526][T22151] erspan0: left allmulticast mode [ 475.190288][T22151] ip6tnl0: left promiscuous mode [ 475.206690][T22151] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.221851][T22151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.268789][T22151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 475.287054][T22151] veth1_vlan: left promiscuous mode [ 475.305536][T22151] veth0_vlan: left promiscuous mode [ 475.312590][T22151] veth0_vlan: entered promiscuous mode [ 475.323391][T22151] veth1_vlan: entered promiscuous mode [ 475.332439][T22151] ipvlan0: left promiscuous mode [ 475.337601][T22151] ipvlan0: left allmulticast mode [ 475.349501][T22151] veth0_vlan: left allmulticast mode [ 475.379991][T22151] veth1_macvtap: left promiscuous mode [ 475.402790][T22151] veth0_macvtap: left promiscuous mode [ 475.443818][T22151] veth0_macvtap: entered promiscuous mode [ 475.464638][T22151] veth1_macvtap: entered promiscuous mode [ 475.488616][T22151] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 475.521864][T22151] 8021q: adding VLAN 0 to HW filter on device bond1 [ 475.532485][T22151] bond2: left promiscuous mode [ 475.537381][T22151] bond2: left allmulticast mode [ 475.547510][T22151] 8021q: adding VLAN 0 to HW filter on device bond2 [ 475.561501][T22151] bond4: left allmulticast mode [ 475.574709][T22151] gtp1: left promiscuous mode [ 475.579757][T22151] gtp1: left allmulticast mode [ 475.591931][T22151] vlan2: left promiscuous mode [ 475.597015][T22151] vlan2: left allmulticast mode [ 475.713550][T22174] netlink: 'syz.1.4653': attribute type 178 has an invalid length. [ 475.751655][T22176] netlink: 'syz.0.4654': attribute type 21 has an invalid length. [ 475.761289][T22176] __nla_validate_parse: 53 callbacks suppressed [ 475.761307][T22176] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4654'. [ 475.798042][T15222] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.806593][T22178] netlink: 'syz.0.4654': attribute type 21 has an invalid length. [ 475.817753][T15222] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.830489][T15222] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.848251][T22178] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4654'. [ 475.857776][T15222] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.885684][T22182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4655'. [ 475.898813][T22182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4655'. [ 475.908756][T22182] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 475.916875][T22182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.935311][T22176] netlink: 'syz.0.4654': attribute type 4 has an invalid length. [ 475.943652][T22176] netlink: 'syz.0.4654': attribute type 5 has an invalid length. [ 475.951690][T22176] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4654'. [ 475.962325][T22178] netlink: 'syz.0.4654': attribute type 4 has an invalid length. [ 475.970784][T22178] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4654'. [ 475.980844][T15222] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.009344][T15222] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.028687][T15222] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.048903][T15222] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.084635][ T3553] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 476.113247][T13000] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 476.121610][ T3553] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 476.146572][ T3553] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 476.173349][T10750] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 476.182759][ T3553] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 476.519607][T10750] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 476.560907][T10750] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 476.607466][T22215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4664'. [ 476.737154][T22220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4666'. [ 476.871189][T22228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4670'. [ 476.906012][T22228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4670'. [ 476.956637][T22233] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 477.044609][T10750] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 477.080016][T10750] IPVS: starting estimator thread 0... [ 477.120484][T10750] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 477.179354][T22247] IPVS: using max 36 ests per chain, 86400 per kthread [ 477.454607][T22269] veth0: entered promiscuous mode [ 477.559122][T22275] veth0_to_team: entered promiscuous mode [ 477.573817][T22275] veth0_to_team: entered allmulticast mode [ 477.614867][T22269] veth0: left promiscuous mode [ 477.948083][T22294] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 478.684648][T22331] bridge0: entered promiscuous mode [ 478.704672][T22331] macsec1: entered promiscuous mode [ 478.717953][T22331] bridge0: port 1(macsec1) entered blocking state [ 478.761655][T22331] bridge0: port 1(macsec1) entered disabled state [ 478.768392][T22331] macsec1: entered allmulticast mode [ 478.809111][T22331] bridge0: entered allmulticast mode [ 478.932373][T22331] macsec1: left allmulticast mode [ 478.939079][T22331] bridge0: left allmulticast mode [ 478.968253][T22331] bridge0: left promiscuous mode [ 479.486100][T22376] tipc: Enabled bearer , priority 0 [ 479.501681][T22376] syzkaller0: entered promiscuous mode [ 479.516952][T22376] syzkaller0: entered allmulticast mode [ 479.642627][T22376] tipc: Resetting bearer [ 479.658763][T22372] tipc: Resetting bearer [ 479.665945][T22390] openvswitch: netlink: Flow actions attr not present in new flow. [ 479.711292][T22372] tipc: Disabling bearer [ 479.721279][T22393] validate_nla: 3 callbacks suppressed [ 479.721296][T22393] netlink: 'syz.1.4717': attribute type 10 has an invalid length. [ 479.757523][T22392] geneve3: entered promiscuous mode [ 479.781999][T22392] geneve3: entered allmulticast mode [ 479.803321][T22393] batadv0: entered promiscuous mode [ 479.808801][T22393] batadv0: entered allmulticast mode [ 479.827798][T22393] bridge0: port 3(batadv0) entered blocking state [ 479.869836][T22393] bridge0: port 3(batadv0) entered disabled state [ 479.883499][T22393] bridge0: port 3(batadv0) entered blocking state [ 479.890142][T22393] bridge0: port 3(batadv0) entered forwarding state [ 479.921134][T15219] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 479.931645][T15219] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 480.026261][T22392] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.123215][T15219] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 480.134520][T22414] IPVS: set_ctl: invalid protocol: 43 172.30.0.4:20000 [ 480.167775][T22404] hsr0 speed is unknown, defaulting to 1000 [ 480.177029][T22410] tipc: Enabled bearer , priority 10 [ 480.374258][T15223] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 480.383880][T15223] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 480.526817][T22434] netlink: 'syz.1.4728': attribute type 1 has an invalid length. [ 480.653837][T22439] netlink: 'syz.4.4727': attribute type 64 has an invalid length. [ 481.099800][T22459] __nla_validate_parse: 13 callbacks suppressed [ 481.099820][T22459] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4735'. [ 481.557984][T22477] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 481.578349][T22474] netlink: 'syz.3.4741': attribute type 1 has an invalid length. [ 481.588700][T22476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4740'. [ 481.594210][T22474] netlink: 'syz.3.4741': attribute type 2 has an invalid length. [ 481.610255][T22479] JT: renamed from veth1 (while UP) [ 481.620043][T22474] netlink: 'syz.3.4741': attribute type 1 has an invalid length. [ 481.627945][T22474] netlink: 'syz.3.4741': attribute type 2 has an invalid length. [ 481.653746][T22481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4742'. [ 481.821397][T22490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4745'. [ 481.873514][T22392] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.903426][T22392] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 481.975504][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 481.982066][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 481.990045][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 481.997873][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.005797][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.013630][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.021529][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.029360][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.037296][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.045172][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.053132][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.061019][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.068912][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.076735][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.084673][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.092527][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.100512][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.108325][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.116220][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.124061][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.132106][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.139949][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.147842][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.155691][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.163663][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.171604][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.179604][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.187423][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.195410][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.203250][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.211200][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.219018][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.226925][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.234755][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.242824][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.250680][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.258642][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.266475][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.274433][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.282283][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.290232][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.298043][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.305939][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.313771][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.321731][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.329668][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.337643][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.345519][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.353519][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.361378][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.369332][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.377149][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.385230][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.393350][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.401358][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.409217][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.417127][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.424993][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.433005][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.440866][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.448766][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.456585][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.464484][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.472314][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.480297][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.488115][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.496224][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.504082][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.512067][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.519923][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.527823][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.535675][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.543588][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.551416][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.559374][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.567188][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.575232][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.583167][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.591133][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 482.598945][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 482.715739][T22392] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.773365][T22392] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 482.822462][T22506] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4750'. [ 482.880594][T22392] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.891246][T22392] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 483.061383][T15219] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.070107][T15219] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 483.078409][T15219] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.087628][T15219] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 483.102187][T22516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4752'. [ 483.152152][T15219] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.160875][T15219] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 483.195548][T22516] bridge7: port 1(veth13) entered blocking state [ 483.203170][T22516] bridge7: port 1(veth13) entered disabled state [ 483.210558][T22516] veth13: entered allmulticast mode [ 483.218206][T22516] veth13: entered promiscuous mode [ 483.225345][T15219] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.234183][T15219] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 483.262664][T22521] bridge7: port 2(veth0_to_bond) entered blocking state [ 483.296294][T22521] bridge7: port 2(veth0_to_bond) entered disabled state [ 483.309800][T22521] veth0_to_bond: entered allmulticast mode [ 483.318490][T22521] veth0_to_bond: entered promiscuous mode [ 483.478830][T22536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4757'. [ 483.667428][T22542] sctp: [Deprecated]: syz.2.4760 (pid 22542) Use of struct sctp_assoc_value in delayed_ack socket option. [ 483.667428][T22542] Use struct sctp_sack_info instead [ 483.699527][T22545] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4762'. [ 483.818952][T22553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4765'. [ 483.844128][T22553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4765'. [ 483.902943][T22553] gre0: entered promiscuous mode [ 484.890920][T22578] netlink: 'syz.4.4770': attribute type 1 has an invalid length. [ 484.910524][T22578] nbd: couldn't find device at index 1048576 [ 485.406681][T22616] netlink: 'syz.3.4784': attribute type 3 has an invalid length. [ 485.730558][T22644] netdevsim netdevsim3 netdevsim3: left allmulticast mode [ 486.367250][T22675] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 486.544336][T22683] netlink: 'syz.2.4802': attribute type 11 has an invalid length. [ 486.569940][T22683] __nla_validate_parse: 9 callbacks suppressed [ 486.569958][T22683] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4802'. [ 486.618263][T22683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4802'. [ 486.644606][T22688] netlink: 'syz.2.4802': attribute type 11 has an invalid length. [ 486.668914][T22688] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4802'. [ 486.693206][T22687] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 486.713936][T22687] syzkaller0: mtu less than device minimum [ 487.032327][T22705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4809'. [ 487.118731][T22709] syzkaller0: entered promiscuous mode [ 487.135272][T22709] syzkaller0: entered allmulticast mode [ 487.227839][T22712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4812'. [ 487.464163][T22722] syzkaller1: entered promiscuous mode [ 487.470326][T22722] syzkaller1: entered allmulticast mode [ 487.566761][T22727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4818'. [ 487.597724][T22727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4818'. [ 487.639939][T22725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4817'. [ 488.159904][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 488.159924][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 488.390645][T22779] tipc: Enabled bearer , priority 0 [ 488.404371][T22780] syzkaller0: entered promiscuous mode [ 488.421685][T22783] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4832'. [ 488.441367][T22780] syzkaller0: entered allmulticast mode [ 488.483510][T22783] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4832'. [ 488.587809][T22780] tipc: Resetting bearer [ 488.656076][T22780] tipc: Disabling bearer [ 488.742162][T22795] sctp: [Deprecated]: syz.3.4835 (pid 22795) Use of int in maxseg socket option. [ 488.742162][T22795] Use struct sctp_assoc_value instead [ 488.799559][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 489.569664][T22844] sctp: [Deprecated]: syz.3.4852 (pid 22844) Use of int in maxseg socket option. [ 489.569664][T22844] Use struct sctp_assoc_value instead [ 489.593478][T22842] netlink: 'syz.4.4850': attribute type 12 has an invalid length. [ 489.926190][T22868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.633530][T22913] openvswitch: netlink: Message has -1 unknown bytes. [ 490.892135][T22934] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 491.064779][T22946] syzkaller1: entered promiscuous mode [ 491.079826][T22946] syzkaller1: entered allmulticast mode [ 491.490267][T22982] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 491.998164][T22999] __nla_validate_parse: 8 callbacks suppressed [ 491.998180][T22999] netlink: 576 bytes leftover after parsing attributes in process `syz.3.4897'. [ 492.306659][T23013] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4901'. [ 492.348088][T23016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4902'. [ 492.394978][T23016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4902'. [ 492.400192][T23018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4903'. [ 492.514094][T23022] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4905'. [ 492.605619][T23029] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4906'. [ 492.734257][T23035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4908'. [ 492.781222][T23040] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 493.073265][T23056] netlink: 'syz.0.4914': attribute type 1 has an invalid length. [ 493.083365][T23058] netlink: 'syz.4.4915': attribute type 1 has an invalid length. [ 493.105320][T23058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4915'. [ 493.141358][T23056] 8021q: adding VLAN 0 to HW filter on device bond3 [ 493.263691][T23070] netlink: 'syz.0.4919': attribute type 13 has an invalid length. [ 493.276449][T23070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4919'. [ 493.574716][T23087] vlan2: entered allmulticast mode [ 493.580741][T23087] erspan0: entered allmulticast mode [ 494.005696][T23122] netlink: 'syz.2.4936': attribute type 3 has an invalid length. [ 494.448901][T23146] netlink: 'syz.2.4942': attribute type 11 has an invalid length. [ 495.374509][ T3553] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.394730][ T3553] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.431056][ T3553] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.438202][T23189] openvswitch: netlink: Actions may not be safe on all matching packets [ 495.461911][ T3553] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.481385][ T3553] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.503280][T23189] openvswitch: netlink: Actions may not be safe on all matching packets [ 495.503589][ T3553] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.545414][T23189] openvswitch: netlink: Actions may not be safe on all matching packets [ 495.582345][ T3553] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.602054][ T3553] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.867126][T23208] syzkaller1: left promiscuous mode [ 495.883818][T23208] syzkaller1: left allmulticast mode [ 496.035781][T23216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.047663][T23217] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 496.145517][T23217] bond7: entered promiscuous mode [ 496.152021][T23217] bond7: entered allmulticast mode [ 496.157591][T23217] 8021q: adding VLAN 0 to HW filter on device bond7 [ 496.327422][T23217] bond7 (unregistering): Released all slaves [ 496.741179][T23249] hsr_slave_1 (unregistering): left promiscuous mode [ 496.843363][T23252] netlink: 'syz.0.4975': attribute type 1 has an invalid length. [ 497.015972][T23262] team1: entered promiscuous mode [ 497.022506][T23265] __nla_validate_parse: 107 callbacks suppressed [ 497.022524][T23265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4978'. [ 497.025523][T23262] team1: entered allmulticast mode [ 497.630716][ T5881] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 497.645410][ T5881] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 497.653975][ T5881] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 497.663833][ T5881] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 497.672521][ T5881] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 497.903080][T23284] netlink: 'syz.4.4984': attribute type 2 has an invalid length. [ 497.922532][T15218] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.949428][T15218] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 497.979304][T15218] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.987694][T15218] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 498.015399][T15218] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.040835][T23301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4988'. [ 498.054125][T15218] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 498.062960][T15218] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.072615][T15218] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 498.084202][T23308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4989'. [ 498.088846][T23294] hsr0 speed is unknown, defaulting to 1000 [ 498.110146][T23301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4988'. [ 498.156190][T23308] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 498.168509][T23302] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4988'. [ 498.191747][T23308] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 498.201090][T23308] gretap1: entered promiscuous mode [ 498.209429][T23308] gretap1: entered allmulticast mode [ 498.360283][T23314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.482883][T23318] veth0_to_bridge: entered promiscuous mode [ 498.547816][T23318] veth0_to_bridge: left promiscuous mode [ 498.562329][T23323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4995'. [ 498.582176][T23323] netlink: 'syz.0.4995': attribute type 30 has an invalid length. [ 498.600142][T23323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4995'. [ 498.783188][T23334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5000'. [ 499.130178][T23349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5002'. [ 499.174273][T23294] chnl_net:caif_netlink_parms(): no params data found [ 499.462602][T23294] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.470460][T23294] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.477752][T23294] bridge_slave_0: entered allmulticast mode [ 499.503909][T23294] bridge_slave_0: entered promiscuous mode [ 499.530373][T23294] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.547833][T23294] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.565809][T23294] bridge_slave_1: entered allmulticast mode [ 499.567381][T23374] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 499.585911][T23294] bridge_slave_1: entered promiscuous mode [ 499.620854][T23376] bridge6: entered promiscuous mode [ 499.626281][T23376] bridge6: entered allmulticast mode [ 499.760204][ T5867] Bluetooth: hci4: command tx timeout [ 499.847448][T23294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.873270][T23294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.007223][T23398] openvswitch: netlink: IP tunnel TTL not specified. [ 500.034184][T23294] team0: Port device team_slave_0 added [ 500.050295][T23401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5022'. [ 500.078702][T23294] team0: Port device team_slave_1 added [ 500.185172][T23294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.195796][T23294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.222846][T23294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.238819][T23294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.247263][T23294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.274915][T23294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.367241][T23294] hsr_slave_0: entered promiscuous mode [ 500.374437][T23294] hsr_slave_1: entered promiscuous mode [ 500.381277][T23294] debugfs: 'hsr0' already exists in 'hsr' [ 500.387207][T23294] Cannot create hsr debugfs directory [ 500.573133][T23294] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 500.584683][T23294] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 500.597034][T23294] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 500.608124][T23294] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 500.702038][T23294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.727398][T23294] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.744297][T15219] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.751499][T15219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.768313][T15222] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.775555][T15222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.020316][T23294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.264606][T23294] veth0_vlan: entered promiscuous mode [ 501.281481][T23294] veth1_vlan: entered promiscuous mode [ 501.318379][T23294] veth0_macvtap: entered promiscuous mode [ 501.330085][T23294] veth1_macvtap: entered promiscuous mode [ 501.355084][T23294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.384099][T23294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.407385][ T3553] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.418450][ T3553] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.442872][ T3553] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.466314][ T3553] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.544208][ T3553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.564292][ T3553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.594198][T15224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.606481][T15224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.840743][ T5867] Bluetooth: hci4: command tx timeout [ 503.920129][ T5867] Bluetooth: hci4: command tx timeout [ 506.000017][ T5867] Bluetooth: hci4: command tx timeout [ 520.741502][T23440] __nla_validate_parse: 1 callbacks suppressed [ 520.741522][T23440] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5030'. [ 520.916491][T23455] netlink: 'syz.3.5031': attribute type 21 has an invalid length. [ 520.950819][T23460] netlink: 'syz.4.5033': attribute type 1 has an invalid length. [ 520.969823][T23460] netlink: 'syz.4.5033': attribute type 3 has an invalid length. [ 520.977874][T23460] netlink: 216 bytes leftover after parsing attributes in process `syz.4.5033'. [ 521.002109][T23460] NCSI netlink: No device for ifindex 813332851 [ 521.049672][T23463] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5035'. [ 521.342527][T23484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5041'. [ 521.389999][T23488] tipc: Enabled bearer , priority 0 [ 521.490136][T23492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5043'. [ 521.518092][T23495] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 521.656746][T23503] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 521.734491][T10750] IPVS: starting estimator thread 0... [ 521.760639][T23507] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 521.790573][T23507] IPVS: length: 42 != 8 [ 521.889980][T23508] IPVS: using max 33 ests per chain, 79200 per kthread [ 521.904198][T23516] netlink: 'syz.3.5051': attribute type 1 has an invalid length. [ 522.041974][T23524] netem: change failed [ 522.071018][T23525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5055'. [ 522.223661][T23534] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 522.256898][T23534] netlink: 212364 bytes leftover after parsing attributes in process `syz.0.5059'. [ 522.285895][T23534] openvswitch: netlink: Message has 5 unknown bytes. [ 522.495412][T23552] Can't find ip_set type bitmap:ip,mac [ 522.525485][T23561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5067'. [ 522.811990][T23579] netlink: 'syz.3.5071': attribute type 1 has an invalid length. [ 522.855933][T23574] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 522.934531][T23583] netlink: 'syz.4.5073': attribute type 1 has an invalid length. [ 522.976698][T23583] netlink: 'syz.4.5073': attribute type 1 has an invalid length. [ 523.009859][T23587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5074'. [ 523.067362][T23583] netlink: 'syz.4.5073': attribute type 16 has an invalid length. [ 523.094833][T23583] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5073'. [ 524.044679][T23638] netlink: 'syz.3.5088': attribute type 10 has an invalid length. [ 524.057583][T23638] veth0_vlan: entered allmulticast mode [ 525.237793][T23702] veth0: entered promiscuous mode [ 525.260960][T23701] veth0: left promiscuous mode [ 525.401271][T23714] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20001 [ 525.803458][T23742] __nla_validate_parse: 11 callbacks suppressed [ 525.803477][T23742] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5118'. [ 525.825480][T23742] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5118'. [ 525.838195][T23744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5119'. [ 525.862564][T23746] netlink: 'syz.2.5116': attribute type 7 has an invalid length. [ 525.924834][T23746] : entered promiscuous mode [ 526.035257][T23751] IPv6: NLM_F_REPLACE set, but no existing node found! [ 526.223830][T23767] netlink: 'syz.4.5126': attribute type 10 has an invalid length. [ 526.238223][T23765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5127'. [ 526.280718][T23767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5126'. [ 526.303490][T23771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5124'. [ 526.475054][T23770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5128'. [ 526.696540][T23794] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5131'. [ 526.865121][T23803] syz_tun: entered promiscuous mode [ 526.882455][T23803] batadv_slave_0: entered promiscuous mode [ 526.895203][T23803] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 526.905556][T23803] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 526.917591][T23803] hsr1: entered allmulticast mode [ 526.923436][T23803] syz_tun: entered allmulticast mode [ 526.928967][T23803] batadv_slave_0: entered allmulticast mode [ 526.948789][T23808] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5134'. [ 527.294144][T23819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5141'. [ 527.303959][T23819] netlink: 'syz.3.5141': attribute type 5 has an invalid length. [ 527.704244][T23821] tipc: Resetting bearer [ 528.202186][T23821] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 528.209522][T23821] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 528.275967][T23821] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 528.295219][T23821] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 528.325439][T23821] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 528.340471][T23821] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 528.397031][T23821] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 528.429648][T23821] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 528.523442][T23821] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 528.537497][T23821] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 528.555686][T20846] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 528.567610][T20846] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 528.576024][T20846] CPU: 1 UID: 0 PID: 20846 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 528.585555][T20846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 528.595607][T20846] RIP: 0010:klist_del+0x49/0x110 [ 528.600649][T20846] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 39 33 b3 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 1b 33 b3 f6 4d 8b 7e 58 4c 89 f7 e8 bf 73 [ 528.620266][T20846] RSP: 0018:ffffc900101cf768 EFLAGS: 00010202 [ 528.626328][T20846] RAX: 000000000000000b RBX: ffff888044f5d060 RCX: ffff888062629e00 [ 528.634288][T20846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 528.642253][T20846] RBP: ffffc900101cf890 R08: ffff8880383015a3 R09: 1ffff110070602b4 [ 528.650214][T20846] R10: dffffc0000000000 R11: ffffed10070602b5 R12: dffffc0000000000 [ 528.658175][T20846] R13: 1ffff110089eba0c R14: 0000000000000000 R15: ffff888047838750 [ 528.666137][T20846] FS: 0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 528.675058][T20846] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 528.681627][T20846] CR2: 00007f2163af56c0 CR3: 000000007e790000 CR4: 00000000003526f0 [ 528.689588][T20846] Call Trace: [ 528.692858][T20846] [ 528.695790][T20846] device_del+0x280/0x8e0 [ 528.700138][T20846] ? _raw_spin_unlock_irq+0x2e/0x50 [ 528.705337][T20846] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 528.711396][T20846] ? __pfx_device_del+0x10/0x10 [ 528.716243][T20846] ? netdev_unregister_kobject+0x344/0x450 [ 528.722047][T20846] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 528.728454][T20846] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 528.735206][T20846] ? rtnl_net_dev_lock+0x257/0x2f0 [ 528.740314][T20846] unregister_netdevice_queue+0x33c/0x380 [ 528.746022][T20846] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 528.752248][T20846] ? rtnl_net_dev_lock+0x36/0x2f0 [ 528.757354][T20846] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 528.762458][T20846] unregister_netdev+0x1f/0x60 [ 528.767213][T20846] bnep_session+0x294d/0x2b40 [ 528.771875][T20846] ? rcu_is_watching+0x15/0xb0 [ 528.776624][T20846] ? trace_sched_exit_tp+0x36/0x110 [ 528.781810][T20846] ? __lock_acquire+0xab9/0xd20 [ 528.786666][T20846] ? __pfx_bnep_session+0x10/0x10 [ 528.791677][T20846] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 528.797648][T20846] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 528.803964][T20846] ? __pfx_woken_wake_function+0x10/0x10 [ 528.809593][T20846] ? __kthread_parkme+0x7b/0x200 [ 528.814523][T20846] ? __kthread_parkme+0x1a1/0x200 [ 528.819549][T20846] kthread+0x70e/0x8a0 [ 528.823605][T20846] ? __pfx_bnep_session+0x10/0x10 [ 528.828644][T20846] ? __pfx_kthread+0x10/0x10 [ 528.833222][T20846] ? _raw_spin_unlock_irq+0x23/0x50 [ 528.838412][T20846] ? lockdep_hardirqs_on+0x9c/0x150 [ 528.843595][T20846] ? __pfx_kthread+0x10/0x10 [ 528.848173][T20846] ret_from_fork+0x3f9/0x770 [ 528.852788][T20846] ? __pfx_ret_from_fork+0x10/0x10 [ 528.857884][T20846] ? __switch_to_asm+0x39/0x70 [ 528.862632][T20846] ? __switch_to_asm+0x33/0x70 [ 528.867383][T20846] ? __pfx_kthread+0x10/0x10 [ 528.871985][T20846] ret_from_fork_asm+0x1a/0x30 [ 528.876743][T20846] [ 528.879775][T20846] Modules linked in: [ 528.884890][T20846] ---[ end trace 0000000000000000 ]--- [ 528.891236][T20846] RIP: 0010:klist_del+0x49/0x110 [ 528.896319][T20846] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 39 33 b3 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 1b 33 b3 f6 4d 8b 7e 58 4c 89 f7 e8 bf 73 [ 528.911237][ T5881] Bluetooth: hci4: command 0x0405 tx timeout [ 528.916694][T20846] RSP: 0018:ffffc900101cf768 EFLAGS: 00010202 [ 528.928181][T20846] RAX: 000000000000000b RBX: ffff888044f5d060 RCX: ffff888062629e00 [ 528.936417][T20846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 528.945268][T20846] RBP: ffffc900101cf890 R08: ffff8880383015a3 R09: 1ffff110070602b4 [ 528.953403][T20846] R10: dffffc0000000000 R11: ffffed10070602b5 R12: dffffc0000000000 [ 528.961732][T20846] R13: 1ffff110089eba0c R14: 0000000000000000 R15: ffff888047838750 [ 528.970237][T20846] FS: 0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 528.979246][T20846] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 528.985840][T20846] CR2: 00007f2163c20f98 CR3: 000000005c3b0000 CR4: 00000000003526f0 [ 528.993956][T20846] Kernel panic - not syncing: Fatal exception [ 529.000320][T20846] Kernel Offset: disabled [ 529.004647][T20846] Rebooting in 86400 seconds..