last executing test programs: 1m9.440430799s ago: executing program 1 (id=319): r0 = socket$inet6(0xa, 0x80000, 0x6) (async, rerun: 64) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) listen(r1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0xb) accept(r1, 0x0, 0x0) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) (async) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) (async, rerun: 64) r2 = socket$inet(0xa, 0x801, 0x84) (rerun: 64) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async, rerun: 32) listen(r2, 0x8) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async, rerun: 64) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f00000002c0)={0x5, 0x3ff}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async, rerun: 64) close(r5) (rerun: 64) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES64=r5, @ANYRES8=r5, @ANYRES32=r4, @ANYBLOB="0a0018000303030303030000100070001e7f985d05000800fd1b1cf02e1b602c1051b9f97d463716b8f37c92012fffcfbf285ca545be0b1dfa9a239e0799db5f8490c2667e635c6b27e36f962baa8e9dab667267a3a9e0ce25bac2e351024af88ff9a4db94b7e0199c030670e56599c5c16dca0f5224cb90701f94cdc9589903fd8327b6d4056caca388e47fb8045552605d0707aa006ef4488064b32a9e184267e4d242a1880cf3022e962912cd290d73cb193f0bc035e78b6514662ac9fafd016f31d40d6c9b47113fb9607d"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r6 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x10}, &(0x7f00000000c0)=0xc) recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0) 1m9.230252929s ago: executing program 1 (id=320): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@fwd={0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x5f]}}, 0x0, 0x3f, 0x0, 0x1}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x337}]}]}, 0x38}}, 0x0) socket$inet(0x2, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) setsockopt$inet6_tcp_int(r4, 0x11a, 0x3, &(0x7f0000000100)=0x304, 0x4) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00%\x00'/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="200100001c100300"], 0x48}}, 0x8000) 1m8.718728471s ago: executing program 1 (id=323): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) (async) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1}, 0x2000) (async) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1}, 0x2000) 1m7.94989704s ago: executing program 1 (id=328): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'geneve1\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048014}, 0x40000) 1m7.944933553s ago: executing program 1 (id=331): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) (async) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) (async) sendmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x38, 0x1, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1bbab2b6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xea5a}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x80, 0x2, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xe3b}]}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x400c805) (async) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x15}, 0x2000000}], 0x2, 0x0, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x24, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x7079, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 1m7.943484155s ago: executing program 1 (id=333): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r4, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYRES64=r0, @ANYRESOCT=r4], 0x30}, 0x1, 0x0, 0x0, 0x400c804}, 0x24048890) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r6}, 0x10, &(0x7f0000000280)={&(0x7f0000000000)={0x1, 0x59b, 0x5, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0xb, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x41, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r7 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10, 0x800) unshare(0x26020480) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) close(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x1d, r11, 0x3, {0x1, 0x0, 0x3}, 0xfe}, 0x18, &(0x7f0000000180)={&(0x7f0000000580)="6f0ac8de4bedd92d6a04dc7b9ca6a2c73a4cdd6ea959c7e4d1925338c335dbc7b2fb6820273226d8e2e04f51cd6dedf7742c0808530ac6a12f1faeb61e0a4d2c1e42be7e95b3ac243d5bb6dc456e8e1e95a85d49872b774ed9980b6c827733ed37fd2a49c413033e70b0d8cb74fe31c8b887d72a06721bc0ba73864764612e05d05778d16dbc8be63b34a5252b7747c50bd8eca38b1fd572c529d60aa73ce9ede2dd8e369c606d512904a5bc5a10aaf6b15304e09e76c760bf66ec7757e89744d02d58983245142e27fe76805c899d4a", 0xd0}, 0x1, 0x0, 0x0, 0x8005}, 0x4040001) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000340)={0x1d, r12, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000540)="81b651f1f3e7200923", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r10, &(0x7f0000000000)={0x1d, r12, 0x0, {0x1, 0xf1, 0x2}, 0xfe}, 0x18) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r12, {0xfffd, 0xffeb}, {0x1, 0xb}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="ac1414bb0a0101010101000003000000ac1414aa0000000064010101"], 0x1c) 58.368195006s ago: executing program 3 (id=379): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000730107000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b704000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee01}) (async) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000040)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8c1c}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 53.231620814s ago: executing program 32 (id=333): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r4, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYRES64=r0, @ANYRESOCT=r4], 0x30}, 0x1, 0x0, 0x0, 0x400c804}, 0x24048890) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r6}, 0x10, &(0x7f0000000280)={&(0x7f0000000000)={0x1, 0x59b, 0x5, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0xb, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x41, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r7 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10, 0x800) unshare(0x26020480) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) close(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x1d, r11, 0x3, {0x1, 0x0, 0x3}, 0xfe}, 0x18, &(0x7f0000000180)={&(0x7f0000000580)="6f0ac8de4bedd92d6a04dc7b9ca6a2c73a4cdd6ea959c7e4d1925338c335dbc7b2fb6820273226d8e2e04f51cd6dedf7742c0808530ac6a12f1faeb61e0a4d2c1e42be7e95b3ac243d5bb6dc456e8e1e95a85d49872b774ed9980b6c827733ed37fd2a49c413033e70b0d8cb74fe31c8b887d72a06721bc0ba73864764612e05d05778d16dbc8be63b34a5252b7747c50bd8eca38b1fd572c529d60aa73ce9ede2dd8e369c606d512904a5bc5a10aaf6b15304e09e76c760bf66ec7757e89744d02d58983245142e27fe76805c899d4a", 0xd0}, 0x1, 0x0, 0x0, 0x8005}, 0x4040001) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000340)={0x1d, r12, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000540)="81b651f1f3e7200923", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r10, &(0x7f0000000000)={0x1d, r12, 0x0, {0x1, 0xf1, 0x2}, 0xfe}, 0x18) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r12, {0xfffd, 0xffeb}, {0x1, 0xb}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="ac1414bb0a0101010101000003000000ac1414aa0000000064010101"], 0x1c) 50.356707134s ago: executing program 3 (id=379): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000730107000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b704000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee01}) (async) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000040)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8c1c}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 40.871547608s ago: executing program 3 (id=379): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000730107000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b704000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee01}) (async) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000040)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8c1c}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 31.065014229s ago: executing program 3 (id=379): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000730107000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b704000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee01}) (async) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000040)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8c1c}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 20.030601926s ago: executing program 3 (id=379): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000730107000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b704000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee01}) (async) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000040)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8c1c}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 9.29458176s ago: executing program 3 (id=379): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000730107000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b704000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee01}) (async) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000040)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8c1c}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 2.218995518s ago: executing program 4 (id=1076): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000090000200000008000000000000000000e93466ab72728af11dc53797aff145e903ed50a5b3283f3438411cc68fd905c49e5612b6b5a9f16d99a8520561329f1907f0b19767a1744ddcb9b26cdcc7c0c5d04c3803dd3e69bfca1d96ab6ae5aaa8fd4ad70201328df5177bda1e3fc39"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) tee(r1, r2, 0x528, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.878006754s ago: executing program 4 (id=1080): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$int_out(r0, 0x5460, &(0x7f0000000000)) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x943d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x4}, 0x20) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000013c0)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001400)={0x0, 0x0}, &(0x7f0000001440)=0xc) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001680)=0x0) r9 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000016c0)={0x0, 0x0, 0x0}, &(0x7f0000001700)=0xc) sendmsg$netlink(r3, &(0x7f00000017c0)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x2000000}, 0xc, &(0x7f0000001640)=[{&(0x7f0000000280)={0x1110, 0x31, 0x200, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x8, 0x89, 0x0, 0x0, @pid=r4}, @generic="9c44d9f6426dc42639deda84de074d3bd4ddb41f0282c274e8a598cead0822c36568216e5c674e4d5c6a90023706dc5955f122db512fee2fbda80734ef2c901733a9c88d183109bbba964b947726df4829cd297a4fb676ae4a88728f610e84c64296b3350f32c1103da10e", @nested={0x8, 0xb0, 0x0, 0x1, [@nested={0x4, 0x89}]}, @generic="8466730e511d03ab067f59313af4c88f211b1ae1cfa44a59e8206ecdc05808b008723dc5b22f74e4f8f1f4139fc14ad362b151da89a1f6418ebce42daf39c7c408d660b01af6e17316ec8efbeb081b7c7e45cbc34d133dcb371884c5067dea1720a05041e7b52c5da1d0c5fa184721", @typed={0x1004, 0x11d, 0x0, 0x0, @binary="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"}, @typed={0xc, 0xf5, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0x132}]}, 0x1110}, {&(0x7f0000001480)={0x1b4, 0x1c, 0x10, 0x70bd2b, 0x25dfdbfe, "", [@nested={0xdd, 0x39, 0x0, 0x1, [@generic="5d4618abece1535d30bb6fc98097726cea4e8c3ad6a00612f1c2b471ec3dd7cdb8bc", @typed={0x8, 0xa7, 0x0, 0x0, @fd=r3}, @typed={0x8, 0xb1, 0x0, 0x0, @u32=0xe}, @typed={0x8, 0x13c, 0x0, 0x0, @u32=0x8}, @generic="ddd7161a71b368181eeff2a99fbf076fc7f0950f67b1b1ab51d727786f7ecca73afd755fe73465ee2325bc4b34365a5379ebdb8275bb3e89f0084a7ff908806c8e22bd4aa4b90ec17a9d9825d12a34c7c20032c3221c6411afe65f455dfa4e7ac91842662d808f53bcd2d46e6568d71e0a830cecbd40693a28484ba54a53ac5f5d53345987bbd195979065", @typed={0x11, 0x87, 0x0, 0x0, @str='+]][/,\x9e\\\\%::\x00'}]}, @typed={0x8, 0xfd, 0x0, 0x0, @pid=r5}, @nested={0x14, 0x71, 0x0, 0x1, [@typed={0x8, 0x59, 0x0, 0x0, @u32=0x10}, @typed={0x8, 0xb2, 0x0, 0x0, @pid=r6}]}, @generic="2615acd57aee35da28cbc1c46b1772d5d2617a325484e2aa1cc42d63c571345ce74bb323665fd671839a412aadbdb1cee110020753834ee0d9dbae78ca441f57645fc6fc31455afcb0eec6a01ca033900bdbb4c9e96dc3d6b084ecac181465603ce7b47db4b63a01c8bd65ab5fbdf1b9ad01efca4f3a7f188e39b764480f0900df703f22eb1b3374764b04afcfb9e932eda2cabc6a640985bae9c959cb4ee699db2592ef99d3"]}, 0x1b4}], 0x2, &(0x7f0000001740)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r11}}}, @rights={{0x10}}], 0x48, 0x20060000}, 0x800) syz_extract_tcp_res$synack(&(0x7f0000001800)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x14f, &(0x7f0000001840)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x1, 0x1}}, {@mpls_mc={0x8848, {[{0xbec, 0x0, 0x1}], @ipv6=@tcp={0x2, 0x6, "e71921", 0x10d, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, {[@routing={0x2b, 0xc, 0x2, 0xf, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @remote, @remote]}, @dstopts={0x2, 0x9, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}, @pad1, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @private0}, @jumbo={0xc2, 0x4, 0x80}, @ra={0x5, 0x2, 0x8001}]}], {{0x4e22, 0x4e21, r12, 0x41424344, 0x0, 0x0, 0xc, 0x10, 0x4, 0x0, 0x90, {[@fastopen={0x22, 0xf, "dda53c7328b74878e0eea82fed"}, @exp_fastopen={0xfe, 0x7, 0xf989, "0645aa"}, @mptcp=@generic={0x2, 0x6, "81ae2b39"}]}}, {"acd14c2d6ac1ee8a81e4f03f9f9406bb4dc263c877d1f22b2908b99c66"}}}}}}}}, &(0x7f00000019c0)={0x1, 0x2, [0x63, 0x4ec, 0x837, 0x301]}) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r13, &(0x7f0000001ec0)=[{{&(0x7f0000001a00)=@phonet, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001a80)}, {&(0x7f0000001ac0)=""/10, 0xa}, {&(0x7f0000001b00)=""/237, 0xed}, {&(0x7f0000001c00)=""/111, 0x6f}, {&(0x7f0000001c80)=""/168, 0xa8}], 0x5, &(0x7f0000001dc0)=""/217, 0xd9}, 0x6}], 0x1, 0x2040, &(0x7f0000001f00)) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000002080)={0x1, 0x0, 0x1000, 0xa3, &(0x7f0000001f40)="b7410ae8854cc64f0528bdbf126180a47ae66e951dc623d3b22d91f3a56d635e551558dc1f9e7c98f35616446f9097c5a0cc80f5857c835379cc07bdc4e4dd90936946691d0ebdb81e8410bc180e907fe7d817be525d6fa8f4220d03dddb6879c2a12d955d2b93c34907ec9ad9d3ec1c2f515c5251fca8231edbc7fc21101134a99a3a1aa71d0587721b5046905aed711d5a40529f100949fe5fa65334bc8486ccdc37", 0x7c, 0x0, &(0x7f0000002000)="8d928bbfe108f6aa60cb22d53f471ec3d3cc932ea2532cded59c646512a527de8b0ab5cdef5503f120994e088de3ea9776981930f049cf50f36e85c64c8f723d15987f32fd1990ae996870824ba22313a6c4b647f580666a43653c661acdc6342aa40b99d038caede8a93cae4db2ea4b39e0db2527f504eb8ca8761c"}) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(r14, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x48, 0x1409, 0x800, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) r15 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002280), r3) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000002480)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002440)={&(0x7f00000022c0)={0x180, r15, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_DEST={0x70, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa8b}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffc}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xffff}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2d}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x20}}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x800}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x8090}, 0x20000880) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000024c0)={r13}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r16, &(0x7f00000025c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x34, 0x2, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x1004) r17 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000002740)={0x0}, &(0x7f0000002780)=0xc) r19 = socket$inet(0x2, 0x6, 0x9) sendmsg$netlink(r17, &(0x7f0000005300)={0x0, 0x0, &(0x7f0000005200)=[{&(0x7f0000002600)={0x2c, 0x17, 0x100, 0x10001, 0x25dfdbfd, "", [@nested={0x8, 0xd3, 0x0, 0x1, [@nested={0x4, 0x88}]}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x2c}, {&(0x7f0000002640)={0xc4, 0x33, 0x2, 0x70bd2a, 0x25dfdbfd, "", [@nested={0xb4, 0x14b, 0x0, 0x1, [@nested={0x4, 0x118}, @nested={0x4, 0xa8}, @typed={0x8, 0x7, 0x0, 0x0, @uid=r2}, @nested={0x4, 0x6e}, @typed={0x9, 0x37, 0x0, 0x0, @str='\xaa\xaa\xaa\xaa\xaa'}, @nested={0x4, 0x7f}, @nested={0x4, 0x2e}, @typed={0x87, 0x12e, 0x0, 0x0, @binary="cabb5ad222420c7ac9b6fde5ea5d1602b45c9f9a3830eb773f74d105ae5363f652f7c3f294c36e07da7369f5cec2616014d286f5f34f996b5b1754d035d6b6b5692ed7814914a50c7a154dc40b01f81928a9df95265c19683861c92c76987c79aef55d8626d20b720854584e29ad19269171a0d210722f6b66ea6c32bbfe1388c68a64"}]}]}, 0xc4}, {&(0x7f00000027c0)={0x1c4, 0x2b, 0x200, 0x70bd27, 0x25dfdbfc, "", [@typed={0x8, 0xf6, 0x0, 0x0, @pid=r18}, @nested={0xd5, 0xc1, 0x0, 0x1, [@generic="aec984a351934e064b07cb320c9485908e4d53b20b5842330c98e3ffff3e9d62ddfe71eb4e62dce118", @typed={0x8, 0xf6, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0xe3, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="017fa2bd1871aefb38098222f1dd766a9b6800ffe5", @generic="bceaeae30984c61a3dcbf211ceaaba933dfca2238b6a2dc775ad326182d88d350cc77ea62a0e584ddd35a84f0e0f5bf72bff22b296ac41fc9cf455d9b73efb699c4cff1a705e9de862a4f29284d541eb884d77f889133924ea5c8d3c5cbbb1db5994d541187dfd386d58424e6e135c2a46c6bf68f8fa655dbe9311", @typed={0x8, 0x4e, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @generic="e4c94a190a7017", @typed={0xc, 0x12e, 0x0, 0x0, @u64}, @generic="2206e1a80d01c628bd18f64a3ed31e1a8881ee5e2f3fbc19b80436bd08c79ae7949cba86201439d6f99ff7a634d51da138090cfad334d86c89307df7c9649c91c20e200ad2a481ced8e9cc1a4fddfb2575875813c4a99301abae3ce84ec692465927789b", @generic="12780a7a0ff95ffd4550fc5fb033c3d98da1df31fc1dddaaaf781842485c28f343abf3385dacada993271776612767b2f050ffeba7d07b308f2d0a53d98dd9536caac40506640bcb353b21b9d20fdde46efaa011f66a333dfaf0fea050"]}, 0x1c4}, {&(0x7f00000029c0)={0x1e4, 0x35, 0x100, 0x70bd25, 0x25dfdbfb, "", [@nested={0x9c, 0xa4, 0x0, 0x1, [@nested={0x4, 0x11a}, @typed={0x91, 0x8e, 0x0, 0x0, @binary="88db84b068dbd0fbc1e43ff945a2628d4eabab4175ee07518de9e253fc205bd15f90a6cdbab3feaba773d3bf6a3e7c970461bee5c1080ae00fbb76347f06ee4c07a7829ce7fa949638fa029a1af7ea970d16ec3ddf39065f66371fcd5a353e5882203c12c4e7316388acadd49d286f2871cabb08a682f5061ec34b9c64b72e8565f9d2bfbd9410a12473fc9a04"}]}, @nested={0xd0, 0x106, 0x0, 0x1, [@nested={0x4, 0xa}, @typed={0xa1, 0xe8, 0x0, 0x0, @binary="d5d4b11f9f0831dd45453c3da4591c2c0194cef86949c26ea5cb5eafb3203ee3b5807a5344d482a812c5a50abec3d04a15c4fe22d9b68b30a66d7ab6dc8c710d05851d45b87ac91afc44c4a59700e0d569eef15369eb9563c9f402aea148283d105253556fe9284cb6a4a5a6d2ad9a62befb756b5ba1e5e5232c8170280dd862399ef22a9a13cce18668a2ae0c21145026e65ffdd22acc5ed28854d8ac"}, @typed={0xc, 0x145, 0x0, 0x0, @u64=0x1}, @nested={0x4, 0x4b}, @typed={0xc, 0x136, 0x0, 0x0, @u64=0x3ff}, @typed={0x4, 0x13c}, @nested={0x4, 0xa1}]}, @generic="15de8e69002eca7f1f69f5bdfe11d39f7dfd94394e973eb85014f3b39032bb656c9bb2accf33ae64ef04908d780816cb45394e281e7179a8e26205b602f351f25f137641612e23e66cecf90a392c57fb0fc3bbf2e6402fb207c0de0a3447ce22875077136a90e87a"]}, 0x1e4}, {&(0x7f0000002bc0)={0x254, 0x3a, 0x300, 0x70bd2c, 0x25dfdbfe, "", [@generic="f64957457f66cc82c8e8a722e56b90a98c2ee2023b21ab3d4380d9aa3c6be4a63c168892f1dcb932544ea786c874f1ff60b3a8e283f130a8a72782916d6434b70d689c24f899dd0b5984083804731447471d4feead0a2ecd8947a96d051fb3eb1cc26ca1ddacd94c5d8a5075fa7727a852f6df15fcb3012cc0563a21b65758212d62cad712fba293c77c16ad365b6408d8a18931cfc3f9040206a9420eebc0aee0c1deafbb37b5b06c8b5efe4833eaddea54fe624d369d266c6aac4ac323041f71abacc9c29b3146b4adc4c710bcd8058416256149d7ffa5", @generic="8c9e57361c2d1faf3c68883b5f5a24264cc5892ff0acd1e2c72949c60230bea3869acb8c7811c88f0112cf0e65f6bf621a225ce5d15b9f5c1cea8a25905313fd6c2108454635bcd54f7cf2fd37af50865ec882235e6f5713cd569674b9132ab796781cdedd95c47c9de4319278d0e537d5e4c3d41de0591f41ca9e6b8aa6bc4304ae6fceb52d2d417c6f1e333ba5eb80475f2fbac6b8fe48d5448bb8fa61adb136d5f74a5174b0c9676ad46067ca12c959b20bd77312a619eec5160499b21d2d8da1", @generic="c82081d9ac9ea0993a9c4c5fb87c707db9c3b9c97ffdb531456b50561f0239da167db4", @typed={0x8, 0x116, 0x0, 0x0, @u32=0x101}, @nested={0x7b, 0x65, 0x0, 0x1, [@generic="79d324721d767ca2e8991023dd0f863020d2406f23eea7fb0dd0f57f73ee1ff53d5e5bd03f150c3b7ee7c2f814736eda167f91f563c26d786c01c449464351bd54a99549418535530e05e3ac50bb4c0714c609964b1485882764f0efb0fc16fbf1431fefffaa065b05f68bb9a76b38", @nested={0x4, 0x101}, @typed={0x4, 0x12f}]}]}, 0x254}, {&(0x7f0000002e40)={0x90, 0x1b, 0x400, 0x70bd26, 0x25dfdbfb, "", [@nested={0x80, 0x3c, 0x0, 0x1, [@nested={0x4, 0x3e}, @nested={0x4, 0x25}, @generic="00b56b1841170e2ee4db6b2ae0e309517f6c688d3f26659676584912bc96e04acd46aa8cd0f592b07d6a122011a1ac3c42", @nested={0x4, 0xbb}, @generic="f04e1f5be31498f8aba2e76c2179824c2ba7fce38bef480fcf8e7724d45a335a0b19296a51d974f3a0ac916d668277e8c9aae5fd34e51986e0412c", @nested={0x4, 0xea}]}]}, 0x90}, {&(0x7f0000002f00)={0x22d4, 0x15, 0x100, 0x70bd28, 0x25dfdbfe, "", [@generic="dbc4", @generic="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", @typed={0x4, 0x85}, @typed={0x8, 0xb6, 0x0, 0x0, @fd=r19}, @nested={0x1218, 0x102, 0x0, 0x1, [@typed={0x14, 0x13b, 0x0, 0x0, @ipv6=@remote}, @generic="82118145909f7664a0fa53c3d25b91ad0790162ecb56e889ddad4f8da1f841784b7f187fabb07b2b6cb354f9abe739b0b981ebfa15edfba9b4f54d0eb4fe7315c756e216c73ab662662aaa845c20d205dab89568bdcbf3d71cf91d970e5f0465e1f173c85fd45f5400ce46", @typed={0x11, 0xda, 0x0, 0x0, @str='+]][/,\x9e\\\\%::\x00'}, @generic="5b9e36c0924ba1ee14dd76df54d9fabcec1b9ae448182b55a768b1042d96eedf8beb91c96ed31085a7bf92a4980824e40b38f647fec43effc2c0e245f7d9b0ff7b8894f395dfcef8", @generic="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", @generic="694ec463b891e173d16e39afeee23d8454b1205b07618d0175554483d3857a4c11c3ddcac731d8d410c82972cee2a06b739a05e76b4fa11063671fbe0c3e723afa983904426166093bc89968f33f716c702b7eeb13885f0f9bcbc2fc54b388507c1e25b166f9a6374adf97aceda33f7611c3d6f5116e7f996e97ad6cd8739e26081773c886fe518eee37baba9610867d60f5ddc4f880b35715a6e1ceb90350786110e0a0f90e6c5cbd8b58dd85f647d9e906ee4776160485a35334fc2ad7c91d3586cc50f27f923679da641f7c33a0e8cfb7b3d8", @nested={0x4, 0xa2}, @typed={0x9, 0x120, 0x0, 0x0, @str='syz1\x00'}, @generic="6fbc1b42ac7ee11ba9b90102d2996001e2b499a56197adbf1f47fc", @generic="dd0283aec725732cc3df55d504e43aa0f76993d273e3c2bde9e7c2308c76aa8110fb96a8d99597da6fa4c1546567ff484793719d2f80ead5fa80"]}, @nested={0x8c, 0x3, 0x0, 0x1, [@typed={0x7, 0x9, 0x0, 0x0, @str='%/\x00'}, @generic="c6567b48933c0964391145dab64f8d9a8b1e5cc0eaa788fce3b2ea06d25edd3bf93956a9a846974d3caf559f08ac8395b164223982a800d13ffb1680e91a9b48f1efcda58b398779f4b9ed5939caea4fa3ffe6401e5e77d4819c4ef4d02353581db8d6ba1a334b740e2efadd6df710c23bb508b4037f48d37d1c29d52f0166c4"]}, @generic="d4235c056367b7c9b54b505e77bc5af4"]}, 0x22d4}], 0x7, &(0x7f0000005280)=[@rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r7, r11}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}], 0x58}, 0x40000) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_int(r16, 0x107, 0xa, &(0x7f0000005340)=0x6, 0x4) 1.690821119s ago: executing program 5 (id=1084): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) write(r0, &(0x7f0000000000)="3b000300010000", 0x7) 1.514683009s ago: executing program 4 (id=1086): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @broadcast, 'macvlan1\x00'}}, 0x1e) socket(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x20000004) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x21, 0x7ff}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) pipe(&(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f0000000280)=0x1, 0x4) socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) 1.421123372s ago: executing program 5 (id=1088): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0xfff2, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10000008}}}]}, 0x48}}, 0x0) r1 = epoll_create1(0x0) write(r1, &(0x7f0000000080)="29749c3b4faa86fe726780329202cddf9da29ae5aa422c44e40973f721ff4257a923f9960118495fa1fb5c7b84964c08bea0b7f118e2d2b6dcc0a6cb0483e2df9c9c8bfdb6cb55c950fbf728d75eb2b0d0c75ccbc5593ff5e27832a6809e410118783060345bc385a8497e4de6f467e244d8a1ee8886ed65e12c0658df1266edf214335332f0926b9fa968cf00d243797e3871c3dedf5967976bfe44f92d183706a0f06bae6abda6190314f9212ed78b651ee7fa55d4d41c75f1", 0xba) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x10000000}) 1.333280944s ago: executing program 5 (id=1090): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x6c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @broadcast, @random="05670680c4c9"}, 0x0, @default, 0x30, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x33}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0xd0, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0xff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xc40}, {0x8, 0x15, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xa77a}, {0x6, 0x11, 0x7}, {0x8}}]}, 0xd0}}, 0x20000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1.247887979s ago: executing program 4 (id=1091): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fddbdf25010000000c0005002f010000040000000c0002000000000000000000100007800c00018008000100"], 0x3c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x24}}, 0x400c0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800008a1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r3, 0x223, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x20084150}, 0x4000) 1.179161237s ago: executing program 2 (id=1092): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000001340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4040010}, 0x20000c04) r2 = socket$caif_stream(0x25, 0x1, 0x4) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000000280)={{r3}, "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"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x141842, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000380)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$PPPIOCSACTIVE(r5, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="b2ff", 0x2}], 0x1) readv(r5, &(0x7f0000000040), 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r4, 0x40305828, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x12, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1.177320337s ago: executing program 5 (id=1093): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000e9ac87fc183ccee30000000000000000000000000022000000"], 0x16) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x801, 0x84) (async) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r5, &(0x7f0000000080)}, 0x20) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @local}, 0x2}}, 0x2e) (async) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @local}, 0x2}}, 0x2e) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e24, 0x81, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, 0x800}, 0x1c) (async) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e24, 0x81, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, 0x800}, 0x1c) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x404, 0x4}}, 0x2e) (async) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x404, 0x4}}, 0x2e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x68, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x0, 0x0, @private}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000400)=@sco, 0x80, &(0x7f0000000340)=[{&(0x7f0000000480)=""/98, 0x62}, {&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000580)=""/76, 0x4c}, {&(0x7f0000000600)=""/129, 0x81}], 0x4, &(0x7f00000006c0)=""/146, 0x92}, 0x121) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23, 0x3f, 0x0, 0xfd}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x18, 0x0, 0x0, 0x8000}, 0x50) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002300)=ANY=[@ANYBLOB="2c0000001000030400e075f8d11a246727395da7", @ANYRES32=r12, @ANYBLOB="15020000000000000a000100aaaaaaaaaa1c0000"], 0x2c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0) (async) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002300)=ANY=[@ANYBLOB="2c0000001000030400e075f8d11a246727395da7", @ANYRES32=r12, @ANYBLOB="15020000000000000a000100aaaaaaaaaa1c0000"], 0x2c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r9, &(0x7f0000000180), 0x0}, 0x20) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r9, &(0x7f0000000180), 0x0}, 0x20) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x2, 0x5, 0x8}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0}, 0x18) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58}, 0x10) 1.056609994s ago: executing program 4 (id=1095): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x2) recvmmsg(r0, &(0x7f000000c980)=[{{&(0x7f0000000180)=@phonet, 0x80, &(0x7f0000001880)=[{&(0x7f0000000380)=""/239, 0xef}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/122, 0x7a}, {&(0x7f0000001540)=""/244, 0xf4}, {&(0x7f0000001640)=""/170, 0xaa}, {&(0x7f0000001700)=""/212, 0xd4}, {&(0x7f0000001800)=""/75, 0x4b}], 0x7, &(0x7f0000001940)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000002940)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000200)=[{&(0x7f00000029c0)=""/245, 0xf5}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/169, 0xa9}, {&(0x7f0000003b80)=""/192, 0xc0}], 0x4, &(0x7f00000002c0)}, 0x5}, {{&(0x7f0000003c40), 0x80, &(0x7f0000004200)=[{&(0x7f0000003cc0)=""/53, 0x35}, {&(0x7f0000003d00)=""/17, 0x11}, {&(0x7f0000003d40)=""/21, 0x15}, {&(0x7f0000003d80)=""/182, 0xb6}, {&(0x7f0000003e40)=""/249, 0xf9}, {&(0x7f0000003f40)=""/121, 0x79}, {&(0x7f0000003fc0)=""/228, 0xe4}, {&(0x7f00000040c0)=""/9, 0x9}, {&(0x7f0000004100)=""/221, 0xdd}], 0x9, &(0x7f00000042c0)=""/232, 0xe8}, 0x55}, {{&(0x7f00000043c0)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000005700)=[{&(0x7f0000004440)=""/187, 0xbb}, {&(0x7f0000004500)=""/170, 0xaa}, {&(0x7f00000045c0)=""/4096, 0x1000}, {&(0x7f00000055c0)=""/133, 0x85}, {&(0x7f0000005680)=""/112, 0x70}], 0x5, &(0x7f0000005780)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006780)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000009b80)=[{&(0x7f0000006800)=""/76, 0x4c}, {&(0x7f0000006880)=""/3, 0x3}, {&(0x7f00000068c0)=""/4096, 0x1000}, {&(0x7f00000078c0)=""/4096, 0x1000}, {&(0x7f00000088c0)=""/82, 0x52}, {&(0x7f0000008940)=""/252, 0xfc}, {&(0x7f0000008a40)=""/4096, 0x1000}, {&(0x7f0000009a40)}, {&(0x7f0000009a80)=""/208, 0xd0}], 0x9, &(0x7f0000009c40)=""/35, 0x23}, 0xdd}, {{&(0x7f0000009c80)=@xdp, 0x80, &(0x7f000000a0c0)=[{&(0x7f0000009d00)=""/77, 0x4d}, {&(0x7f0000009d80)=""/117, 0x75}, {&(0x7f0000009e00)=""/100, 0x64}, {&(0x7f0000009e80)=""/81, 0x51}, {&(0x7f0000009f00)=""/200, 0xc8}, {&(0x7f000000a000)=""/135, 0x87}], 0x6, &(0x7f000000a140)=""/129, 0x81}, 0xf10}, {{0x0, 0x0, &(0x7f000000a680)=[{&(0x7f000000a200)=""/29, 0x1d}, {&(0x7f000000a240)}, {&(0x7f000000a280)=""/210, 0xd2}, {&(0x7f000000a380)=""/145, 0x91}, {&(0x7f000000a440)=""/22, 0x16}, {&(0x7f000000a480)=""/94, 0x5e}, {&(0x7f000000a500)=""/156, 0x9c}, {&(0x7f000000a5c0)=""/130, 0x82}], 0x8, &(0x7f000000a700)=""/4096, 0x1000}, 0xed4}, {{0x0, 0x0, &(0x7f000000c840)=[{&(0x7f000000b700)=""/111, 0x6f}, {&(0x7f000000b780)=""/4096, 0x1000}, {&(0x7f000000c780)=""/15, 0xf}, {&(0x7f000000c7c0)=""/94, 0x5e}], 0x4, &(0x7f000000c880)=""/228, 0xe4}, 0x10000}], 0x8, 0x0, &(0x7f000000cb80)={0x77359400}) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffe7a}, 0x0) close(0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, 0x1}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='contention_end\x00', r2}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r3, &(0x7f0000001900)={0xa, 0x0, 0x10001, @empty}, 0x1c) poll(0x0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 910.973432ms ago: executing program 0 (id=1096): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1398, 0x0, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x23, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00'}, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2}, 0x18) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001500)='rdma.current\x00', 0x0, 0x0) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r7 = socket$inet(0x2, 0x3, 0x8d) (rerun: 32) setsockopt$inet_msfilter(r7, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) (async, rerun: 64) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) (async, rerun: 64) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7c, r8}) (async) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000001a00)={@empty, 0x1c, r8}) (async) r10 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) (async) ioctl(r9, 0x8916, &(0x7f0000000000)) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r10, 0x89f8, &(0x7f00000019c0)={'tunl0\x00', &(0x7f0000001940)={'tunl0\x00', r8, 0x7800, 0x0, 0x584, 0x0, {{0x10, 0x4, 0x2, 0x3e, 0x40, 0x66, 0x0, 0x0, 0x29, 0x0, @local, @multicast1, {[@timestamp={0x44, 0x8, 0x27, 0x0, 0x6, [0x10]}, @lsrr={0x83, 0x13, 0x5b, [@remote, @private=0xa010102, @empty, @broadcast]}, @lsrr={0x83, 0xf, 0x3c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty]}]}}}}}) ioctl(r10, 0x8936, &(0x7f0000000000)) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) (async, rerun: 32) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r5, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0xc008}, 0x4008010) (rerun: 32) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000001900)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0xa2d3e5c15fd0a0b7}, 0xc, &(0x7f00000018c0)={&(0x7f0000001580)={0x318, r5, 0x10, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x62c}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x9d7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xb}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8001}, {0x8, 0xb, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x100}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x7fff}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0xffff67c1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x8001}, {0x5}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0xf}, {0x5}, {0x6, 0x11, 0x7}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xd}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0xfffe}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xa430}, {0x6, 0x16, 0x7fff}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x10000}}]}, 0x318}, 0x1, 0x0, 0x0, 0x48000}, 0x800) 857.505358ms ago: executing program 0 (id=1097): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="05005b"], 0x24}}, 0x0) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r11, 0x113, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="030000000400000004000000280000000e010000", @ANYRES32, @ANYBLOB="00004a7eb5e8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r13, &(0x7f0000000300)={0x0, 0xffffffffffffff20, &(0x7f00000002c0)={&(0x7f0000001740)={0x2c, r12, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) r14 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r14, 0x0, 0x41, &(0x7f0000000140)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 835.251325ms ago: executing program 5 (id=1098): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2}, 0x10) (async) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x40}}, 0x4000) 766.964368ms ago: executing program 2 (id=1099): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000880)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)={0x248, 0x41, 0x100, 0x70bd2b, 0x25dfdbfc, {0x5}, [@nested={0x35, 0xb4, 0x0, 0x1, [@generic="4a76b771df65f3c85b29ef38ac99212b10c306b4b58114e0ce9a667ef03b73d1ec0f6a0170fc2c0b8d8b9d975f23ce8ddb"]}, @typed={0x8, 0xd6, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x1f3, 0x2f, 0x0, 0x1, [@generic="5194caa42777558b2ef04584374673fc82dc95008b9c6a01091eabaca060bc3390255a05cc0cbc7a57c1a259578a1517895fc731d8b7335a7ebbed42e3f8320717da559696a0edfe205bad495ac415b681a9b0bcb1eb81e61c1c6241bfa32af8f0ce5bd63bb80e9c8d54e338d5422054daf3d46964ab7b301d5582067611fb2c4bddbcee32157a5a650d494643452f6873d1cf92a5531c72e94c235c89dad2d8ef21108a2365f5e6", @nested={0x4, 0x57}, @nested={0x4, 0x13f}, @generic="5a5ff693613a7be0a154befe8ad9be2347b2d4c95a3a9320497a363b6616af28796eacf3bf471e2f62eef8345595bce975c84f8a3684e60209b9762de3147f319b9dbc5b5f8eaed336ee4290de9ecace491cbb0607b65137645174759be2f03c5187aaf5c01be86ca583969b353039ebf36f6c7a9318284476838ceebe3612daef5f64e9c75d00200c21f3a0055ebe6b3dd3399fa2cdd1e4dbe5a9a78db67f8d05b9bd6d90124906c1ce9669d1a8b9b744187548fd3a24c31a9088100ac8f01d5faf705ef0622dae59cad91ced5c02", @typed={0x7, 0x73, 0x0, 0x0, @str=':+\x00'}, @nested={0x4, 0xb2}, @generic="65ee07f57e835805da68f5ecfbdbc1a23ac6791b91b1ca194e3f6a89faace87b2c5602a7bba73285c04bc6a3cba157b1cc9071235ba5b8af72d5e8fb6e1d2bf739c4721d76ecee5f190d97b0657ac6cbf99a00edf6c568fd", @typed={0xc, 0xb, 0x0, 0x0, @u64=0x7f}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x8}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000e0ff00000000000000000000630100000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000b000000000008000500", @ANYRES32=r6, @ANYBLOB="24a205c8c487d2ebf4a4c1e5dfc6d06d237aa971a0eb98c77cb449992e19bdd6e841cd67b87aaa322a21819624646a0ef0cf7c97e6289c36dd65330e06bacfa088503b4c7958b9e9c1fbd90f0000b242e89435c634"], 0x44}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xac, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x5c, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "f6053922bc04e62ed91a1c27d9"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "c62e28fedd"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "2dd1896396"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9c5d9d8d3f316ed008a78b7a4f"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "4ef89732e1"}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00"/27], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000020ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 657.968576ms ago: executing program 2 (id=1100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) r3 = socket(0x2, 0x80805, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x31, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000240)={r5, 0x3}, 0x8) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="84010000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054"], 0x184}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000040)=0xfffff49b, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf250400000004000d8008000c"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) 618.907596ms ago: executing program 0 (id=1101): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000080)="e3710f00217d24965647c62556fdfd5a1c8fa69473fa99bc395b70edf18e3d94a3c2d0f4fdf009c830bb0000000000006e37126edf502069303187fde7bf2ad4841bdac1a83d6b8519b298517c", 0x4d, 0x24000884, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000001401"], 0x30}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000080)="e3710f00217d24965647c62556fdfd5a1c8fa69473fa99bc395b70edf18e3d94a3c2d0f4fdf009c830bb0000000000006e37126edf502069303187fde7bf2ad4841bdac1a83d6b8519b298517c", 0x4d, 0x24000884, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000001401"], 0x30}}, 0x0) (async) 510.956232ms ago: executing program 5 (id=1102): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) getsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000100)={'veth0\x00', @random="31a41fe668cb"}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x44840}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)={0x290, r4, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010102}}}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4ca}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdb}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc2c8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff9}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x10}, 0x44) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x9, 0x7, [0x6, 0xe, 0x8000, 0x7ff, 0x3, 0x1, 0x6]}, 0x16) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680)=0x10, 0x80800) r5 = socket(0x18, 0x1, 0xd30) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000700)={0x0, @private, @local}, &(0x7f0000000740)=0xc) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x148, 0x12, 0x200, 0x70bd28, 0x25dfdbff, {0x1, 0x1, 0xf, 0x2, {0x4e21, 0x4e21, [0x2, 0xa, 0x9, 0x5], [0x9, 0x9, 0xc47, 0x5], r6, [0x1ff, 0xfffffffa]}, 0x3, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "04c179aff263a0681bd49f40f8492308092e6bb79d5000dd54902c0efc62c47bcc2f9c59a8fbaf13ce700acd54e6480118d37b598256383e5d16bcad775ea6649da8bf9263a2e11246daa4f8a302b177bb908bcb1c01d0507897a77388f1f5d3d32cb43f8b848dc8659d9314ef4d80abea6d7db76f3edb82103264c8ae263ef8de0fb1455663523bfe3469f3a65deb0dec6bd925ae3d08f487ad5d178a6329ffc38fde8b528590ec6212c791ad57caae7947f23e3d7a04a75791a20535b7a8bdef4c567f71891dd1ae0798f189c46d04a9b3b4a212cb8c3d69107f0c059fa4194615f9b19869d71cc97e3233cad6b3f4dbfb0054aea4d41b"}]}, 0x148}, 0x1, 0x0, 0x0, 0x6004005}, 0x4040040) connect$packet(r5, &(0x7f0000000980)={0x11, 0x17, r6, 0x1, 0xf8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x14) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000009c0)='ns/pid\x00') ioctl$BTRFS_IOC_DEFRAG(r7, 0x50009402, 0x0) accept4(r0, &(0x7f0000000a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000a80)=0x80, 0x80800) r9 = socket$inet6(0xa, 0x5, 0x4) ioctl(r3, 0x5, &(0x7f0000000ac0)="b5ed0ca093d71c7252b52aed40e3b7f2147436355b756d8fc029fa9bf19e1421f5d802bc7f0e544a6ed3163e1c1f9e542f48789eb9db1d2be10f2cd60204b5e09db5c2ac47d8d24662857666a76d7f2dfcbcb14f0684de0d30cd2fbfb6091493ae639aae6c9358db89bbeedba452a971978d98193a6246713c5c9eda96790e5bbb3dc7024a1bf258873fcfab157670bc8bcf01b98010ed484afc49d976ee9394a4d0cb") sendto$l2tp(r5, &(0x7f0000000b80)="82b89c96b1c4af680c0ceef01310f26d9e163aa84eb1d0392c4d1b4415b4fd412bda407969af6f8f6f649d58264b74d2201eeb2213ffc883", 0x38, 0x400c044, &(0x7f0000000bc0)={0x2, 0x0, @multicast2, 0x2}, 0x10) bind$can_raw(r9, &(0x7f0000000c00)={0x1d, r6}, 0x10) readv(r0, &(0x7f0000000e80)=[{&(0x7f0000000c40)=""/136, 0x88}, {&(0x7f0000000d00)=""/10, 0xa}, {&(0x7f0000000d40)=""/62, 0x3e}, {&(0x7f0000000d80)=""/139, 0x8b}, {&(0x7f0000000e40)}], 0x5) pipe(&(0x7f0000000f00)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000f40)={0x0, 0x37, "41d1237bfa2c55a9f900023a92ced0e21f35bd93dc0f63b34abd62542e50c6b71f9b0b3ce2e277a1b4dacd0adc0758252a345d43aee142"}, &(0x7f0000000f80)=0x3f) setsockopt$inet_sctp6_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000000fc0)=@assoc_id=r11, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r8) sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x3c, r12, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x751}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0xdd, 0x200]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x30f]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x1) 459.133481ms ago: executing program 0 (id=1103): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) clock_gettime(0x0, &(0x7f0000000cc0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)=""/245, 0xf5}, {&(0x7f0000000140)=""/69, 0x45}, {&(0x7f00000000c0)=""/11, 0xb}], 0x3, &(0x7f0000000380)=""/135, 0x87}, 0x7fffffff}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/112, 0x70}, {&(0x7f00000004c0)=""/255, 0xff}, {&(0x7f00000005c0)=""/6, 0x6}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/138, 0x8a}, {&(0x7f0000000740)=""/23, 0x17}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000000780)=""/209, 0xd1}, {&(0x7f0000000880)=""/43, 0x2b}], 0xa, &(0x7f0000000980)=""/115, 0x73}, 0x2}, {{&(0x7f0000000a00)=@caif=@dbg, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a80)=""/34, 0x22}], 0x1, &(0x7f0000000b00)=""/208, 0xd0}, 0x2}], 0x3, 0x40002040, &(0x7f0000000d00)={r1, r2+10000000}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB="080004004440"], 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) 303.784079ms ago: executing program 2 (id=1104): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x0, 0xb55, 0x0, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40440c4}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)={0x28, r5, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="fe"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x40080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000bc8020"], &(0x7f0000000300)='GPL\x00', 0xb}, 0x90) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 195.04829ms ago: executing program 0 (id=1105): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xfe93, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRESDEC=0x0], 0x24}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc89000000000000b5090100000000009500000000000000b509000002000000639af0ff000000008709000000000000c39af0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000000000000b70000050000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x4004004) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x5, 0x28e3, 0x3, 0x201}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x23c, 0x30, 0x51b, 0x0, 0x0, {}, [{0x228, 0x1, [@m_skbmod={0x6c, 0x6, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3}, 0x4}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x0, 0x92ab}}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x110, 0x0, 0x0, 0x0, {{0xf}, {0x78, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r0) 176.135938ms ago: executing program 2 (id=1106): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000280)={r2, 0x11, 0x6}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async, rerun: 64) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x58}}, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd24, 0x0, {0x0, 0x0, 0x0, r2, {0xfff1}, {0x2}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) bind$packet(r0, &(0x7f0000000300)={0x11, 0x8, r2, 0x1, 0x5c, 0x6, @local}, 0x14) (async) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 32) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) (async, rerun: 32) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x3e, 0x9d, 0x62}, 0x2c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1500000078000100000000000000000007"], 0x18}, 0x1, 0x5502000000000000, 0x0, 0x40001}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r7, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4) (async, rerun: 32) sendto$unix(r6, &(0x7f0000000640)="00a8", 0x2, 0xd1, 0x0, 0x0) (async, rerun: 32) readv(0xffffffffffffffff, 0x0, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_type(r9, &(0x7f0000000280), 0x2, 0x0) read(r10, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async, rerun: 64) r11 = socket$inet_icmp(0x2, 0x2, 0x1) (rerun: 64) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r11, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) 146.045975ms ago: executing program 0 (id=1107): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000c1c39df3ac55541f2100"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x8, 0x8, 0x0, 0x0, 0x101}}]}, &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) r1 = socket$inet6(0xa, 0x4, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a32000000000500050000000000050004000000000014000780080008400000009008000640000000030d0003006c6973743a736574"], 0x5c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x1d) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x80000000}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000) sendto$inet6(r1, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0xc9, @mcast1}, 0x1c) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x2, 0x4, 0x400, 0xffffffff, 0x138, 0x228, 0x0, 0xfeffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x110, 0x138, 0x0, {}, [@common=@unspec=@devgroup={{0x38}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f00}}]}, @REJECT={0x28}}, {{@ipv6={@dev, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r6) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000000180)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000080)=ANY=[], 0x40}}, 0x4000001) close(r1) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000980)=ANY=[@ANYRESOCT=r4, @ANYRES16=r7, @ANYRESDEC=r3], 0x44}, 0x1, 0x0, 0x0, 0x4901}, 0x0) 27.203512ms ago: executing program 4 (id=1108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80600}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x88, 0x5, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x101}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xea6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2b9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) 0s ago: executing program 2 (id=1109): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f0000050007"], 0x54}, 0x1, 0x0, 0x0, 0x10000006}, 0x80) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r3 = gettid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f00000006c0)=0xe8) r5 = gettid() pipe(&(0x7f0000000340)={0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={r5, r6, 0x0, 0x0, 0x0}, 0x30) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000007c0)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f00000008c0)=0xe8) sendmsg$netlink(r2, &(0x7f0000000e00)={&(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc, &(0x7f0000000dc0)=[{&(0x7f0000000900)={0x4bc, 0x2b, 0x8, 0x70bd26, 0x25dfdbfe, "", [@typed={0x8, 0xc1, 0x0, 0x0, @u32=0x7ff}, @typed={0xc, 0x14c, 0x0, 0x0, @u64=0x8}, @generic="5b9bd22ce88298dc1f4bbcff53b799a6819fb60f43c425e4242cad010502ad6dab1ee4852836bf77db", @nested={0x98, 0x112, 0x0, 0x1, [@typed={0x49, 0xa8, 0x0, 0x0, @binary="268520c00869cd411d83c99e189cd45c75fcf710c189f50bfdca9da7ee3e0e84dc73ee1bdeea146a6b38c139d984bba45ad0a80ae392ce42696ec8d209fc78699ddaeb9a78"}, @typed={0x8, 0x88, 0x0, 0x0, @u32=0x7ff}, @typed={0x6, 0x103, 0x0, 0x0, @str='[\x00'}, @typed={0x4, 0x53}, @typed={0x14, 0xd8, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x4b, 0x0, 0x0, @u32=0xb2ba}, @nested={0x4, 0x83}, @typed={0x8, 0x41, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x8, 0x150, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x6b}]}, @typed={0x8, 0x77, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0xe9, 0xa2, 0x0, 0x1, [@typed={0x4, 0x2e}, @typed={0x8, 0x149, 0x0, 0x0, @uid=r4}, @typed={0xc, 0x90, 0x0, 0x0, @u64=0x7fff}, @generic="d8605a6f45e5931260598bd3ffb7f487cbabec550517dc9c86bc245de5cb28eb210fe43051a4ff9f4b460c2775b390e96412e555a18aa7f5a9619dbf0db68ea78d6c2d6a00d1071bb79facbc48b05b30055e6c94a570146f9ce3872970e71be13e6cfd1edcd29edd20a2f1c9b936ea2d6a588bc674ee5a8f4994b8584f328d0feb02021b4d160fd4fd7b66049fa280bb12a7064c612f6b2597a6fd09edf37571a6be4a4f5b90c2732c4454eed3", @typed={0x8, 0x4e, 0x0, 0x0, @pid=r5}, @typed={0x4, 0x48}, @typed={0xc, 0xa0, 0x0, 0x0, @str='nl80211\x00'}, @typed={0x8, 0xbe, 0x0, 0x0, @fd=r2}]}, @generic="0538f863bc30c1564f34105db8e5fe06ab0648b3e9dd0bcb88f0d748d0dd4eb75d58bc790dc5cb23679b77a14e2b0dadec89147da5056b4d9305c3c78bfe824a5b7e04df647bd7b680a9d452e7", @typed={0xf0, 0x96, 0x0, 0x0, @binary="dafe55cd3ae7e98e0580c5a2496f8a9c5888a5167e6756ce897c762ba50a9db404e6665ff35cd8a16600b53b188536b53b23c251f225285c0e8a2965e2657539b68d53811f1b8597cffb0827fcd58b5d01623d72a6932af8dbead4cc525005a16221133cf715c2d32822c210620be15c89dc5888d95cd8e1a2c34f2fb0aeee6af45ae8a55075ffe02b9aff68fc1a484b6170cee2077e04e95d6f88b3248b94f624c46a768a714ec0783ffd85e2a0e90d7a92569b42cee715c18f418615db51c1e98d8064570c27e774ad02f333b4ee9ac1fdc1bf00967a4caf6d3fbb613f7d9407ddf95c83b597b5dc40ecd6"}, @generic="78090d7c544d67523279e5456edb4c659b517fb3ed09d8bef6ae6a652b8b00f512dd0989b8b0cc8d994653d69feca32dd196c450e2adfd", @nested={0x16a, 0x9, 0x0, 0x1, [@typed={0x8, 0x4c, 0x0, 0x0, @uid=r7}, @generic="c65bccacd1f4bc9a6609ec86eb4f68fa2b716b5648422ad22df0d603fa323704671519db90a34448eeac8e6f7ef0652178dfa4a5b82f1b3c865ccaa68180831f57f74708c60e935a27d74829a16dcf1d6e19891408784306d90be187f20e8eddef471d780423bcce4cf91c7a517144c342cd12519073f1c6ca9b399b220319023f221ac6500e2cf498cbd81088a1d20c90b32af51cd186381fd02942218ae3bff1097a7116267add3776ae77605a818c45cb0e623b3c95a3ebaa1d8050855f", @generic="a8d3ba36ed1b6348c5f02cc0e6116d459b5f11773e3a63457cfca3723d6cc27ad1f0abe6214abd73feef68f89de9231ba0f923efd9bf3a3ce42abcd5a048304c882cf0f112557ebf8ca8644409373f8cfd151b5c9015220b1f6bed421df276a29c1161e6f62fb9934fca60d3d49d041c503160c7587f6cb0fd8195a64c73aba245860b2e69d1cad9dde9c2", @typed={0xc, 0xf8, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x126, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x4bc}], 0x1, 0x0, 0x0, 0x20000091}, 0x24000040) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r11, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r11, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="20000000150001000000000000000000020000fd", @ANYRES32=r12, @ANYBLOB="ffe5021cc7ffaf3f"], 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) kernel console output (not intermixed with test programs): U to 1560 would solve the problem. [ 73.794670][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.794710][ T5835] Bluetooth: hci2: command tx timeout [ 73.810819][ T5838] Bluetooth: hci4: command tx timeout [ 73.810848][ T5841] Bluetooth: hci3: command tx timeout [ 73.822376][ T5845] Bluetooth: hci0: command tx timeout [ 73.831290][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.838362][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.864481][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.894105][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.901149][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.927481][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.945556][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.952925][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.978953][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.990633][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.998089][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.025087][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.044478][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.051569][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.077735][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.090551][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.097605][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.123672][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.146760][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.154008][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.180414][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.285538][ T5837] hsr_slave_0: entered promiscuous mode [ 74.291948][ T5837] hsr_slave_1: entered promiscuous mode [ 74.333245][ T5830] hsr_slave_0: entered promiscuous mode [ 74.340098][ T5830] hsr_slave_1: entered promiscuous mode [ 74.346567][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.354312][ T5830] Cannot create hsr debugfs directory [ 74.365196][ T5832] hsr_slave_0: entered promiscuous mode [ 74.373540][ T5832] hsr_slave_1: entered promiscuous mode [ 74.379815][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.387463][ T5832] Cannot create hsr debugfs directory [ 74.438403][ T5842] hsr_slave_0: entered promiscuous mode [ 74.444627][ T5842] hsr_slave_1: entered promiscuous mode [ 74.451614][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.459880][ T5842] Cannot create hsr debugfs directory [ 74.489088][ T5836] hsr_slave_0: entered promiscuous mode [ 74.495390][ T5836] hsr_slave_1: entered promiscuous mode [ 74.501723][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.509550][ T5836] Cannot create hsr debugfs directory [ 75.073607][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.089584][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.121171][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.139489][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.183976][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.203900][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.227602][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.249027][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.270907][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.292776][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.326286][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.342424][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.395170][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.405735][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.418819][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.435312][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.555651][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.574140][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.593583][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.603393][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.705940][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.748645][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.789533][ T5845] Bluetooth: hci1: command tx timeout [ 75.798727][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.817633][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.843732][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.866703][ T5845] Bluetooth: hci0: command tx timeout [ 75.872165][ T5841] Bluetooth: hci3: command tx timeout [ 75.873228][ T5838] Bluetooth: hci4: command tx timeout [ 75.883903][ T5835] Bluetooth: hci2: command tx timeout [ 75.893039][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.900365][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.921294][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.932438][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.939569][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.954444][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.961562][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.977427][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.984564][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.007996][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.015249][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.032709][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.040019][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.059904][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.134398][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.160347][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.213982][ T993] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.221271][ T993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.258559][ T993] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.265746][ T993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.294373][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.342435][ T993] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.349679][ T993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.439564][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.446842][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.653347][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.792183][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.980460][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.110899][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.137938][ T5837] veth0_vlan: entered promiscuous mode [ 77.214418][ T5837] veth1_vlan: entered promiscuous mode [ 77.255702][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.311383][ T5830] veth0_vlan: entered promiscuous mode [ 77.332763][ T5836] veth0_vlan: entered promiscuous mode [ 77.360497][ T5830] veth1_vlan: entered promiscuous mode [ 77.383742][ T5837] veth0_macvtap: entered promiscuous mode [ 77.400577][ T5836] veth1_vlan: entered promiscuous mode [ 77.421967][ T5837] veth1_macvtap: entered promiscuous mode [ 77.431088][ T5832] veth0_vlan: entered promiscuous mode [ 77.460356][ T5832] veth1_vlan: entered promiscuous mode [ 77.480866][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.513812][ T5830] veth0_macvtap: entered promiscuous mode [ 77.533834][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.557676][ T5836] veth0_macvtap: entered promiscuous mode [ 77.574356][ T5830] veth1_macvtap: entered promiscuous mode [ 77.582368][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.591497][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.600420][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.609906][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.634751][ T5832] veth0_macvtap: entered promiscuous mode [ 77.648082][ T5832] veth1_macvtap: entered promiscuous mode [ 77.660618][ T5836] veth1_macvtap: entered promiscuous mode [ 77.680876][ T5842] veth0_vlan: entered promiscuous mode [ 77.694330][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.722618][ T5842] veth1_vlan: entered promiscuous mode [ 77.745339][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.775404][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.804893][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.819483][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.829021][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.837891][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.848314][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.863351][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.872580][ T5835] Bluetooth: hci1: command tx timeout [ 77.893258][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.913121][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.922149][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.931553][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.940534][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.949254][ T5835] Bluetooth: hci2: command tx timeout [ 77.949294][ T5835] Bluetooth: hci4: command tx timeout [ 77.949427][ T5835] Bluetooth: hci3: command tx timeout [ 77.949451][ T5835] Bluetooth: hci0: command tx timeout [ 77.987755][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.995810][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.018683][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.029205][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.038393][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.047820][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.119065][ T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.130355][ T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.142847][ T5842] veth0_macvtap: entered promiscuous mode [ 78.204088][ T5842] veth1_macvtap: entered promiscuous mode [ 78.250849][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.291980][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.323696][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.338967][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.401212][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.455564][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.471101][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.480243][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.491106][ T5842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.518595][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.529743][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.567472][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.575350][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.621912][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.658193][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.701971][ T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.713918][ T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.750350][ T5956] Zero length message leads to an empty skb [ 78.887023][ T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.922429][ T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.042281][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.095565][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.169506][ T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.200865][ T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.374064][ T5977] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9'. [ 79.554962][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 79.584655][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 79.630774][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 79.673846][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 79.678281][ T5987] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 79.695596][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 79.705220][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 79.725550][ T5987] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 79.737835][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 79.758717][ T5987] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4'. [ 79.761082][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 79.794358][ T5995] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 79.811920][ T5995] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 79.947274][ T5838] Bluetooth: hci1: command tx timeout [ 80.029750][ T5838] Bluetooth: hci0: command tx timeout [ 80.035263][ T5838] Bluetooth: hci3: command tx timeout [ 80.044503][ T5835] Bluetooth: hci4: command tx timeout [ 80.044692][ T5841] Bluetooth: hci2: command tx timeout [ 80.105041][ T6001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.155494][ T6003] xt_TPROXY: Can be used only with -p tcp or -p udp [ 80.796813][ T6030] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 82.296725][ T6110] syz.2.46 uses obsolete (PF_INET,SOCK_PACKET) [ 84.033997][ T6149] netlink: 'syz.0.61': attribute type 1 has an invalid length. [ 84.383645][ T6169] __nla_validate_parse: 101 callbacks suppressed [ 84.383664][ T6169] netlink: 36 bytes leftover after parsing attributes in process `syz.2.68'. [ 84.432507][ T6169] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 84.455414][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'. [ 84.464790][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'. [ 84.613785][ T6177] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 84.650637][ T6177] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 84.741066][ T6184] IPv6: NLM_F_REPLACE set, but no existing node found! [ 84.865249][ T6193] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.72'. [ 85.158329][ T6199] netlink: 16 bytes leftover after parsing attributes in process `syz.3.75'. [ 85.239767][ T6201] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 85.251775][ T1216] IPVS: starting estimator thread 0... [ 85.346486][ T6204] IPVS: using max 34 ests per chain, 81600 per kthread [ 85.496969][ T6212] netlink: 20 bytes leftover after parsing attributes in process `syz.3.79'. [ 85.758051][ T6228] sctp: [Deprecated]: syz.4.85 (pid 6228) Use of int in maxseg socket option. [ 85.758051][ T6228] Use struct sctp_assoc_value instead [ 85.811344][ T6231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.88'. [ 85.825796][ T6224] netlink: 'syz.4.85': attribute type 21 has an invalid length. [ 85.887132][ T6228] netlink: 52 bytes leftover after parsing attributes in process `syz.4.85'. [ 86.308372][ T6248] bond1: entered promiscuous mode [ 86.313623][ T6248] bond1: entered allmulticast mode [ 86.319752][ T6248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.545037][ T6269] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.781444][ T43] cfg80211: failed to load regulatory.db [ 87.065571][ T6296] SET target dimension over the limit! [ 87.162099][ T6298] netlink: 20 bytes leftover after parsing attributes in process `syz.3.105'. [ 87.196913][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.105'. [ 87.295508][ T6298] veth3: entered allmulticast mode [ 87.782374][ T6322] netlink: 'syz.2.111': attribute type 1 has an invalid length. [ 87.890152][ T6330] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 87.911107][ T6324] dvmrp0: entered allmulticast mode [ 88.282381][ T6350] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 88.325019][ T6350] bridge0: entered allmulticast mode [ 88.338927][ T6354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 88.346240][ T6354] IPv6: NLM_F_CREATE should be set when creating new route [ 88.577299][ T6367] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 88.590104][ T6366] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 88.637318][ T6373] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.069941][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 89.272054][ T6403] Driver unsupported XDP return value 0 on prog (id 34) dev N/A, expect packet loss! [ 89.919088][ T6433] netlink: 'syz.4.141': attribute type 4 has an invalid length. [ 89.948512][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 89.961094][ T6435] netlink: 'syz.4.141': attribute type 4 has an invalid length. [ 89.978472][ T6441] __nla_validate_parse: 10 callbacks suppressed [ 89.978490][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.143'. [ 90.076528][ T6441] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 90.100533][ T6444] xt_TCPMSS: Only works on TCP SYN packets [ 90.132679][ T6444] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 90.177044][ T6444] bridge0: entered allmulticast mode [ 90.202078][ T6444] netlink: 'syz.3.144': attribute type 10 has an invalid length. [ 90.253255][ T6444] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.261866][ T6444] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.324332][ T6444] bridge0: left allmulticast mode [ 90.343964][ T6444] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.351219][ T6444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.359360][ T6444] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.366578][ T6444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.395179][ T6444] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 90.432247][ T6462] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.500981][ T6462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.150'. [ 90.544806][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.151'. [ 90.561709][ T6465] netlink: 20 bytes leftover after parsing attributes in process `syz.4.151'. [ 90.715047][ T6477] ip6gre1: entered allmulticast mode [ 90.804127][ T6483] netlink: 'syz.3.156': attribute type 21 has an invalid length. [ 90.843365][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.158'. [ 90.880820][ T6488] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 90.899258][ T6488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.937212][ T6488] netlink: 32 bytes leftover after parsing attributes in process `syz.2.158'. [ 91.050891][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.161'. [ 91.157943][ T6500] netlink: 'syz.2.162': attribute type 10 has an invalid length. [ 91.205204][ T6500] team0: Device hsr_slave_0 failed to register rx_handler [ 91.265280][ T6504] xt_CT: You must specify a L4 protocol and not use inversions on it [ 91.366585][ T6504] netlink: 24 bytes leftover after parsing attributes in process `syz.4.164'. [ 91.409272][ T6510] netlink: 'syz.3.167': attribute type 6 has an invalid length. [ 91.817805][ T6523] netlink: 'syz.4.169': attribute type 10 has an invalid length. [ 91.844437][ T6523] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.861804][ T6526] netlink: 'syz.3.173': attribute type 1 has an invalid length. [ 91.872446][ T6523] bond0: (slave team0): Enslaving as an active interface with an up link [ 91.900170][ T6526] netlink: 224 bytes leftover after parsing attributes in process `syz.3.173'. [ 92.019755][ T6535] syz.1.175: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 92.069633][ T6535] CPU: 0 UID: 0 PID: 6535 Comm: syz.1.175 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 92.069659][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.069676][ T6535] Call Trace: [ 92.069684][ T6535] [ 92.069692][ T6535] dump_stack_lvl+0x189/0x250 [ 92.069732][ T6535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.069757][ T6535] ? __pfx__printk+0x10/0x10 [ 92.069776][ T6535] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 92.069795][ T6535] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 92.069816][ T6535] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 92.069837][ T6535] warn_alloc+0x214/0x310 [ 92.069857][ T6535] ? stack_depot_save_flags+0x40/0x900 [ 92.069883][ T6535] ? __pfx_warn_alloc+0x10/0x10 [ 92.069904][ T6535] ? kasan_save_track+0x4f/0x80 [ 92.069929][ T6535] ? xskq_create+0x56/0x170 [ 92.069950][ T6535] ? xsk_init_queue+0xb0/0x110 [ 92.069969][ T6535] ? xsk_setsockopt+0x43f/0x710 [ 92.069987][ T6535] ? do_sock_setsockopt+0x25a/0x3e0 [ 92.070005][ T6535] ? __x64_sys_setsockopt+0x18b/0x220 [ 92.070022][ T6535] ? do_syscall_64+0xfa/0x3b0 [ 92.070044][ T6535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.070068][ T6535] __vmalloc_node_range_noprof+0x125/0x12f0 [ 92.070113][ T6535] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 92.070136][ T6535] ? __kasan_kmalloc+0x93/0xb0 [ 92.070156][ T6535] vmalloc_user_noprof+0xad/0xf0 [ 92.070173][ T6535] ? xskq_create+0xbf/0x170 [ 92.070196][ T6535] xskq_create+0xbf/0x170 [ 92.070220][ T6535] xsk_init_queue+0xb0/0x110 [ 92.070244][ T6535] xsk_setsockopt+0x43f/0x710 [ 92.070268][ T6535] ? __pfx_xsk_setsockopt+0x10/0x10 [ 92.070294][ T6535] ? __lock_acquire+0xab9/0xd20 [ 92.070326][ T6535] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 92.070347][ T6535] ? __pfx_xsk_setsockopt+0x10/0x10 [ 92.070369][ T6535] do_sock_setsockopt+0x25a/0x3e0 [ 92.070391][ T6535] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 92.070416][ T6535] ? __fget_files+0x2a/0x420 [ 92.070443][ T6535] __x64_sys_setsockopt+0x18b/0x220 [ 92.070469][ T6535] do_syscall_64+0xfa/0x3b0 [ 92.070492][ T6535] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.070514][ T6535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.070530][ T6535] ? clear_bhb_loop+0x60/0xb0 [ 92.070551][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.070568][ T6535] RIP: 0033:0x7f205258e929 [ 92.070589][ T6535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.070603][ T6535] RSP: 002b:00007f20533d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 92.070621][ T6535] RAX: ffffffffffffffda RBX: 00007f20527b5fa0 RCX: 00007f205258e929 [ 92.070634][ T6535] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 92.070645][ T6535] RBP: 00007f2052610b39 R08: 0000000000000004 R09: 0000000000000000 [ 92.070655][ T6535] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.070665][ T6535] R13: 0000000000000000 R14: 00007f20527b5fa0 R15: 00007ffcec414498 [ 92.070694][ T6535] [ 92.070753][ T6535] Mem-Info: [ 92.389740][ T6535] active_anon:5391 inactive_anon:0 isolated_anon:0 [ 92.389740][ T6535] active_file:1130 inactive_file:39824 isolated_file:0 [ 92.389740][ T6535] unevictable:768 dirty:417 writeback:0 [ 92.389740][ T6535] slab_reclaimable:10012 slab_unreclaimable:97305 [ 92.389740][ T6535] mapped:30172 shmem:1388 pagetables:1137 [ 92.389740][ T6535] sec_pagetables:0 bounce:0 [ 92.389740][ T6535] kernel_misc_reclaimable:0 [ 92.389740][ T6535] free:1333942 free_pcp:15921 free_cma:0 [ 92.439696][ T6535] Node 0 active_anon:21564kB inactive_anon:0kB active_file:4520kB inactive_file:159100kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120688kB dirty:1660kB writeback:0kB shmem:4016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12720kB pagetables:4372kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 92.473848][ T6535] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 92.515856][ T6535] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 92.546563][ T6535] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 92.555180][ T6535] Node 0 DMA32 free:1414092kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21520kB inactive_anon:0kB active_file:4520kB inactive_file:157280kB unevictable:1536kB writepending:1652kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:47036kB local_pcp:20660kB free_cma:0kB [ 92.599985][ T6535] lowmem_reserve[]: 0 0 1 1 1 [ 92.604779][ T6535] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:8kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 92.634084][ T6535] lowmem_reserve[]: 0 0 0 0 0 [ 92.638911][ T6535] Node 1 Normal free:3906288kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16832kB local_pcp:6464kB free_cma:0kB [ 92.675240][ T6535] lowmem_reserve[]: 0 0 0 0 0 [ 92.684615][ T6535] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 92.700465][ T6535] Node 0 DMA32: 1141*4kB (UME) 327*8kB (UM) 102*16kB (UM) 94*32kB (UM) 69*64kB (UM) 16*128kB (UME) 14*256kB (UME) 15*512kB (UM) 4*1024kB (UM) 4*2048kB (ME) 335*4096kB (M) = 1413996kB [ 92.720562][ T6535] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 92.733307][ T6535] Node 1 Normal: 160*4kB (UM) 36*8kB (UME) 43*16kB (UME) 69*32kB (UME) 28*64kB (UME) 8*128kB (UME) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 951*4096kB (M) = 3906288kB [ 92.754655][ T6535] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 92.764527][ T6535] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 92.774552][ T6535] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 92.784341][ T6535] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 92.794257][ T6535] 42329 total pagecache pages [ 92.799045][ T6535] 0 pages in swap cache [ 92.803212][ T6535] Free swap = 124996kB [ 92.807990][ T6535] Total swap = 124996kB [ 92.812221][ T6535] 2097051 pages RAM [ 92.816109][ T6535] 0 pages HighMem/MovableOnly [ 92.820784][ T6535] 424694 pages reserved [ 92.824920][ T6535] 0 pages cma reserved [ 92.853804][ T6533] syzkaller1: entered promiscuous mode [ 92.866488][ T6533] syzkaller1: entered allmulticast mode [ 93.085924][ T6562] netlink: 20 bytes leftover after parsing attributes in process `syz.4.181'. [ 93.625121][ T6587] warning: `syz.0.188' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.998210][ T6613] syzkaller1: entered promiscuous mode [ 94.016192][ T6613] syzkaller1: entered allmulticast mode [ 94.501741][ T6649] bridge_slave_0: left allmulticast mode [ 94.530748][ T6649] bridge_slave_0: left promiscuous mode [ 94.534004][ T6655] x_tables: duplicate underflow at hook 3 [ 94.542322][ T6649] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.570016][ T6649] bridge_slave_1: left allmulticast mode [ 94.585942][ T6649] bridge_slave_1: left promiscuous mode [ 94.592400][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.650320][ T6649] bond0: (slave bond_slave_0): Releasing backup interface [ 94.692894][ T6649] bond0: (slave bond_slave_1): Releasing backup interface [ 94.760836][ T6649] team0: Port device team_slave_0 removed [ 94.792269][ T6649] team0: Port device team_slave_1 removed [ 94.799378][ T6649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.807014][ T6649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.815592][ T6649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.825791][ T6649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.103835][ T6680] __nla_validate_parse: 6 callbacks suppressed [ 95.103853][ T6680] netlink: 9 bytes leftover after parsing attributes in process `syz.4.211'. [ 96.457543][ T6680] gretap0: entered promiscuous mode [ 96.477011][ T6694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.215'. [ 96.604032][ T6700] x_tables: duplicate underflow at hook 1 [ 96.696999][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'. [ 96.734828][ T6711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.220'. [ 96.793052][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'. [ 96.836882][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'. [ 97.098990][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.224'. [ 97.352421][ T6743] netlink: 'syz.3.227': attribute type 10 has an invalid length. [ 97.419479][ T6743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.438238][ T6743] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 97.727130][ T6764] netlink: 56 bytes leftover after parsing attributes in process `syz.0.233'. [ 97.756461][ T6764] (unnamed net_device) (uninitialized): (slave ip6gre0): Device is not bonding slave [ 97.769776][ T6764] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip6gre0) [ 97.780512][ T6771] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 97.792330][ T6772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.808764][ T6768] netlink: 'syz.1.234': attribute type 10 has an invalid length. [ 97.843661][ T6768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.875232][ T6768] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 97.993627][ T6786] tipc: Started in network mode [ 98.004016][ T6786] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 98.031032][ T6786] tipc: Enabled bearer , priority 0 [ 98.063983][ T6787] netlink: 'syz.2.241': attribute type 1 has an invalid length. [ 98.087703][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.242'. [ 98.095272][ T6796] netlink: 20 bytes leftover after parsing attributes in process `syz.1.244'. [ 98.408286][ T6813] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 98.812136][ T6839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.904482][ T6839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.148151][ T43] tipc: Node number set to 11578026 [ 99.299311][ T6875] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 99.592389][ T6889] netlink: 'syz.2.269': attribute type 13 has an invalid length. [ 99.603802][ T6889] veth0_macvtap: left promiscuous mode [ 99.614950][ T6889] macvtap0: entered allmulticast mode [ 99.631690][ T6889] macvtap0: refused to change device tx_queue_len [ 99.859600][ T6901] xt_hashlimit: overflow, rate too high: 0 [ 100.008660][ T6910] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 100.073633][ T6912] netlink: 'syz.2.274': attribute type 7 has an invalid length. [ 100.126254][ T6912] netlink: 'syz.2.274': attribute type 8 has an invalid length. [ 100.133950][ T6912] __nla_validate_parse: 3 callbacks suppressed [ 100.133965][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'. [ 100.218955][ T6918] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 100.233405][ T6918] netlink: 40 bytes leftover after parsing attributes in process `syz.0.276'. [ 100.561978][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'. [ 100.610812][ T6940] netlink: 224 bytes leftover after parsing attributes in process `syz.0.283'. [ 100.625155][ T6939] netlink: 224 bytes leftover after parsing attributes in process `syz.0.283'. [ 100.648975][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.280'. [ 100.658457][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'. [ 100.723021][ T6944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.284'. [ 100.736282][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'. [ 100.751258][ T6946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.285'. [ 100.849688][ T6948] netlink: 'syz.2.286': attribute type 10 has an invalid length. [ 100.919962][ T6948] team0: Port device geneve0 added [ 101.250966][ T6970] sock: sock_timestamping_bind_phc: sock not bind to device [ 101.324775][ T6975] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 101.331490][ T6975] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 101.470819][ T6970] syz.4.295 (6970) used greatest stack depth: 17992 bytes left [ 101.634660][ T7000] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 101.716594][ T7007] netlink: 'syz.4.306': attribute type 1 has an invalid length. [ 101.756351][ T7007] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.894679][ T7014] IPVS: set_ctl: invalid protocol: 50 172.30.0.3:20004 [ 102.156843][ T7039] veth0: entered promiscuous mode [ 102.324422][ T7048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.337544][ T7048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.682221][ T7048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.689840][ T7048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.042002][ T7048] bond0: (slave batadv0): Releasing backup interface [ 103.500517][ T7086] Bluetooth: MGMT ver 1.23 [ 103.649115][ T7108] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 104.305009][ T7143] syzkaller1: entered promiscuous mode [ 104.313565][ T7143] syzkaller1: entered allmulticast mode [ 104.384426][ T7157] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.393639][ T7157] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.402529][ T7157] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.411408][ T7157] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.236206][ T7209] raw_sendmsg: syz.3.368 forgot to set AF_INET. Fix it! [ 105.309693][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 105.371389][ T7215] netlink: 'syz.2.367': attribute type 1 has an invalid length. [ 105.414348][ T7215] __nla_validate_parse: 17 callbacks suppressed [ 105.414364][ T7215] netlink: 224 bytes leftover after parsing attributes in process `syz.2.367'. [ 105.449560][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 105.507805][ T7211] trusted_key: syz.2.367 sent an empty control message without MSG_MORE. [ 105.518750][ T7225] netlink: 76 bytes leftover after parsing attributes in process `syz.4.369'. [ 105.961899][ T7251] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 105.970001][ T7250] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 106.108975][ T6049] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.251626][ T6049] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.359800][ T6049] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.481912][ T6049] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.639033][ T7276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.385'. [ 106.657402][ T7274] netlink: 'syz.0.386': attribute type 10 has an invalid length. [ 106.769867][ T6049] bridge_slave_1: left allmulticast mode [ 106.775817][ T6049] bridge_slave_1: left promiscuous mode [ 106.797358][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.847278][ T6049] bridge_slave_0: left allmulticast mode [ 106.855696][ T6049] bridge_slave_0: left promiscuous mode [ 106.861702][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.872101][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 106.881609][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 106.890850][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 106.899085][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 106.924738][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 106.973697][ T7293] Unsupported ieee802154 address type: 0 [ 107.005441][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.389'. [ 107.131997][ T6049] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 107.223055][ T7298] openvswitch: netlink: Missing key (keys=40, expected=80) [ 107.311888][ T6049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.324445][ T6049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.334843][ T6049] bond0 (unregistering): Released all slaves [ 107.351289][ T6049] bond1 (unregistering): Released all slaves [ 107.371834][ T7293] tap0: tun_chr_ioctl cmd 1074025676 [ 107.378988][ T7293] tap0: owner set to 0 [ 107.385440][ T7299] netlink: 28 bytes leftover after parsing attributes in process `syz.2.390'. [ 107.894754][ T7316] netlink: 14 bytes leftover after parsing attributes in process `syz.2.395'. [ 107.904947][ T6049] hsr_slave_0: left promiscuous mode [ 107.911742][ T6049] hsr_slave_1: left promiscuous mode [ 107.932446][ T6049] veth1_macvtap: left promiscuous mode [ 107.938775][ T6049] veth0_macvtap: left promiscuous mode [ 107.944547][ T6049] veth1_vlan: left promiscuous mode [ 107.952435][ T6049] veth0_vlan: left promiscuous mode [ 108.366361][ T6049] team0 (unregistering): Port device team_slave_1 removed [ 108.403548][ T6049] team0 (unregistering): Port device team_slave_0 removed [ 108.833923][ T7331] Bluetooth: MGMT ver 1.23 [ 108.879021][ T7316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.891411][ T7316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.905231][ T7316] bond0 (unregistering): Released all slaves [ 108.933338][ T43] infiniband syz1: ib_query_port failed (-19) [ 108.983089][ T7288] chnl_net:caif_netlink_parms(): no params data found [ 108.996153][ T5845] Bluetooth: hci4: command tx timeout [ 109.222197][ T7346] netlink: 16 bytes leftover after parsing attributes in process `syz.4.402'. [ 109.242132][ T7288] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.267444][ T7288] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.274702][ T7288] bridge_slave_0: entered allmulticast mode [ 109.283792][ T7288] bridge_slave_0: entered promiscuous mode [ 109.291338][ T7348] netlink: 52 bytes leftover after parsing attributes in process `syz.2.403'. [ 109.336877][ T7288] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.352577][ T7288] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.360437][ T7352] netlink: 76 bytes leftover after parsing attributes in process `syz.4.404'. [ 109.370566][ T7288] bridge_slave_1: entered allmulticast mode [ 109.380334][ T7288] bridge_slave_1: entered promiscuous mode [ 109.513672][ T7288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.549896][ T7288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.664693][ T7288] team0: Port device team_slave_0 added [ 109.677814][ T7288] team0: Port device team_slave_1 added [ 109.747299][ T7288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.766207][ T7288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.825263][ T7288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.851875][ T7288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.862950][ T7288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.891893][ T7288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.993969][ T7288] hsr_slave_0: entered promiscuous mode [ 110.001616][ T7288] hsr_slave_1: entered promiscuous mode [ 110.014165][ T7288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.023218][ T7288] Cannot create hsr debugfs directory [ 110.372792][ T7412] netlink: 'syz.0.424': attribute type 2 has an invalid length. [ 110.717742][ T7288] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 110.738650][ T7431] __nla_validate_parse: 2 callbacks suppressed [ 110.738666][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.429'. [ 110.767899][ T7288] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 110.786766][ T7288] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 110.828260][ T7288] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 110.878354][ T7440] netlink: 44 bytes leftover after parsing attributes in process `syz.4.432'. [ 110.902344][ T7440] netlink: 21 bytes leftover after parsing attributes in process `syz.4.432'. [ 110.921007][ T7440] netlink: 21 bytes leftover after parsing attributes in process `syz.4.432'. [ 110.941440][ T7447] netlink: 28 bytes leftover after parsing attributes in process `syz.0.433'. [ 110.968950][ T7447] netlink: 28 bytes leftover after parsing attributes in process `syz.0.433'. [ 110.992250][ T7454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.433'. [ 111.072987][ T5845] Bluetooth: hci4: command tx timeout [ 111.170018][ T7288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.214483][ T7288] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.262882][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.270094][ T6053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.324054][ T6053] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.331253][ T6053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.426155][ T7475] bridge_slave_0: mtu less than device minimum [ 111.473446][ T7475] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.443'. [ 111.687060][ T7487] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 111.695774][ T7487] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€ [ 111.797082][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'. [ 111.830476][ T7501] tipc: Started in network mode [ 111.835399][ T7501] tipc: Node identity ac14140f, cluster identity 4711 [ 111.846400][ T7501] tipc: New replicast peer: 255.255.255.255 [ 111.853467][ T7501] tipc: Enabled bearer , priority 10 [ 111.893608][ T7288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.970241][ T7288] veth0_vlan: entered promiscuous mode [ 112.007451][ T7288] veth1_vlan: entered promiscuous mode [ 112.061978][ T7288] veth0_macvtap: entered promiscuous mode [ 112.091401][ T7288] veth1_macvtap: entered promiscuous mode [ 112.097633][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.450'. [ 112.131728][ T7506] netlink: 'syz.4.450': attribute type 33 has an invalid length. [ 112.160840][ T7288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.197640][ T7288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.213431][ T7288] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.239763][ T7288] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.248950][ T7288] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.259096][ T7288] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.365912][ T6056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.387323][ T6056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.452614][ T6056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.461333][ T6056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.846253][ T24] tipc: Node number set to 2886997007 [ 113.123608][ T7543] netlink: 'syz.2.460': attribute type 1 has an invalid length. [ 113.184480][ T7544] vxcan3: entered allmulticast mode [ 113.692192][ T6049] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.233355][ T6049] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.531402][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.540495][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.548961][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.557472][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.565133][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.719649][ T6049] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.788024][ T7627] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 114.822062][ T7627] macsec1: entered allmulticast mode [ 114.831269][ T7627] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 114.851514][ T7627] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 114.859197][ T7627] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 114.897414][ T6049] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.040644][ T7612] chnl_net:caif_netlink_parms(): no params data found [ 115.234893][ T7654] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 115.274912][ T7612] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.282375][ T7612] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.290200][ T7612] bridge_slave_0: entered allmulticast mode [ 115.298748][ T7612] bridge_slave_0: entered promiscuous mode [ 115.312008][ T7612] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.321092][ T7612] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.328770][ T7612] bridge_slave_1: entered allmulticast mode [ 115.337455][ T7612] bridge_slave_1: entered promiscuous mode [ 115.355058][ T7656] netlink: 'syz.0.488': attribute type 3 has an invalid length. [ 115.414281][ T7660] netlink: 'syz.4.489': attribute type 18 has an invalid length. [ 115.449729][ T7660] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.458913][ T7660] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.467860][ T7660] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.476623][ T7660] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.491027][ T6049] bridge_slave_1: left allmulticast mode [ 115.497208][ T6049] bridge_slave_1: left promiscuous mode [ 115.504955][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.523128][ T6049] bridge_slave_0: left allmulticast mode [ 115.530635][ T6049] bridge_slave_0: left promiscuous mode [ 115.539537][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.854844][ T6049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.866399][ T6049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.877105][ T6049] bond0 (unregistering): Released all slaves [ 115.891488][ T7612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.905779][ T7612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.061271][ T7612] team0: Port device team_slave_0 added [ 116.071818][ T7612] team0: Port device team_slave_1 added [ 116.104750][ T7675] netlink: 'syz.2.494': attribute type 24 has an invalid length. [ 116.154487][ T7612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.163093][ T7612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.191145][ T7612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.192271][ T7676] __nla_validate_parse: 8 callbacks suppressed [ 116.192295][ T7676] netlink: 28 bytes leftover after parsing attributes in process `syz.2.494'. [ 116.204906][ T7612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.227560][ T7612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.254326][ T7612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.418221][ T6049] hsr_slave_0: left promiscuous mode [ 116.431617][ T6049] hsr_slave_1: left promiscuous mode [ 116.461404][ T6049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.471726][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.507949][ T6049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.515417][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.567786][ T6049] veth1_macvtap: left promiscuous mode [ 116.574206][ T6049] veth0_macvtap: left promiscuous mode [ 116.580542][ T6049] veth1_vlan: left promiscuous mode [ 116.585905][ T6049] veth0_vlan: left promiscuous mode [ 116.592667][ T5845] Bluetooth: hci4: command tx timeout [ 116.602083][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.497'. [ 116.704917][ T7689] netlink: 'syz.0.495': attribute type 1 has an invalid length. [ 116.716173][ T7689] netlink: 224 bytes leftover after parsing attributes in process `syz.0.495'. [ 116.991827][ T6049] team0 (unregistering): Port device team_slave_1 removed [ 117.028923][ T6049] team0 (unregistering): Port device team_slave_0 removed [ 117.389792][ T7612] hsr_slave_0: entered promiscuous mode [ 117.396750][ T7612] hsr_slave_1: entered promiscuous mode [ 117.403338][ T7612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.411113][ T7612] Cannot create hsr debugfs directory [ 117.432015][ T7687] veth0: entered promiscuous mode [ 117.539029][ T7681] veth0: left promiscuous mode [ 117.742697][ T7703] xt_hashlimit: max too large, truncated to 1048576 [ 117.828825][ T7704] syzkaller1: entered promiscuous mode [ 117.848607][ T7704] syzkaller1: entered allmulticast mode [ 117.891768][ T7713] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 117.903113][ T7713] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 117.956577][ T7717] SET target dimension over the limit! [ 118.013698][ T7719] netlink: 'syz.2.507': attribute type 7 has an invalid length. [ 118.033995][ T7719] : entered promiscuous mode [ 118.101679][ T7721] netlink: 184 bytes leftover after parsing attributes in process `syz.2.508'. [ 118.112892][ T7721] team_slave_0: entered allmulticast mode [ 118.150543][ T7612] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 118.172086][ T7612] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 118.193058][ T7612] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 118.204032][ T7612] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 118.310814][ T7612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.336629][ T7612] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.352298][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.359454][ T6053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.393729][ T6053] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.400856][ T6053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.419596][ T7731] netlink: 48 bytes leftover after parsing attributes in process `syz.2.510'. [ 118.431509][ T7612] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 118.455056][ T7612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.668744][ T5845] Bluetooth: hci4: command tx timeout [ 118.801963][ T7612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.929205][ T7751] syzkaller1: entered promiscuous mode [ 118.949356][ T7751] syzkaller1: entered allmulticast mode [ 119.092165][ T7612] veth0_vlan: entered promiscuous mode [ 119.138731][ T7612] veth1_vlan: entered promiscuous mode [ 119.248787][ T7612] veth0_macvtap: entered promiscuous mode [ 119.273338][ T7612] veth1_macvtap: entered promiscuous mode [ 119.317435][ T7768] openvswitch: netlink: Flow key attr not present in new flow. [ 119.346986][ T7612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.407574][ T7612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.438490][ T7612] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.453609][ T7612] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.481485][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 119.495285][ T7612] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.510975][ T7612] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.522608][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 119.531447][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 119.545603][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 119.565719][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 119.762719][ T7786] netlink: 198792 bytes leftover after parsing attributes in process `syz.2.529'. [ 120.182312][ T6054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.205758][ T6054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.355832][ T7811] netlink: 71 bytes leftover after parsing attributes in process `syz.2.536'. [ 120.564335][ T6052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.608254][ T6052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.643812][ T7773] chnl_net:caif_netlink_parms(): no params data found [ 120.683827][ T7818] xt_ecn: cannot match TCP bits for non-tcp packets [ 120.698160][ T7818] xt_ecn: cannot match TCP bits for non-tcp packets [ 120.746301][ T5845] Bluetooth: hci4: command tx timeout [ 120.895361][ T7773] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.906749][ T7773] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.914098][ T7773] bridge_slave_0: entered allmulticast mode [ 120.923304][ T7773] bridge_slave_0: entered promiscuous mode [ 120.935607][ T7773] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.939445][ T7834] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 120.943028][ T7773] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.958493][ T7773] bridge_slave_1: entered allmulticast mode [ 120.965512][ T7773] bridge_slave_1: entered promiscuous mode [ 121.019131][ T6045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.023780][ T7773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.041653][ T7773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.051973][ T6045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.183708][ T7773] team0: Port device team_slave_0 added [ 121.208635][ T7773] team0: Port device team_slave_1 added [ 121.243758][ T7773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.256779][ T7773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.294435][ T7773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.313731][ T7773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.324046][ T7849] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 121.324977][ T7773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.363075][ T7773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.453938][ T7773] hsr_slave_0: entered promiscuous mode [ 121.465532][ T7773] hsr_slave_1: entered promiscuous mode [ 121.472398][ T7773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.483277][ T7773] Cannot create hsr debugfs directory [ 121.572214][ T6055] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.626423][ T5845] Bluetooth: hci5: command tx timeout [ 121.863277][ T7773] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 121.910501][ T6055] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.958159][ T7773] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 121.983547][ T7773] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 122.020129][ T7773] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 122.100509][ T6055] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.142270][ T7867] netem: incorrect gi model size [ 122.165190][ T7867] netem: change failed [ 122.268946][ T6055] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.422270][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 122.432146][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 122.441977][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 122.451124][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 122.459772][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 122.629588][ T7773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.637903][ T7895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.560'. [ 122.650842][ T7895] netlink: 'syz.2.560': attribute type 11 has an invalid length. [ 122.661525][ T7899] netlink: 'syz.0.559': attribute type 4 has an invalid length. [ 122.674071][ T7897] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 122.788720][ T7773] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.801888][ T7901] Bluetooth: MGMT ver 1.23 [ 122.808061][ T7903] delete_channel: no stack [ 122.860448][ T6055] bridge_slave_1: left allmulticast mode [ 122.877168][ T6055] bridge_slave_1: left promiscuous mode [ 122.883332][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.920142][ T6055] bridge_slave_0: left allmulticast mode [ 122.936846][ T6055] bridge_slave_0: left promiscuous mode [ 122.942642][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.135524][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.567'. [ 123.328365][ T6055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.339842][ T6055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.352081][ T6055] bond0 (unregistering): Released all slaves [ 123.365839][ T6060] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.373030][ T6060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.451709][ T6060] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.458943][ T6060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.717909][ T5845] Bluetooth: hci5: command 0x041b tx timeout [ 123.825943][ T6055] hsr_slave_0: left promiscuous mode [ 123.837478][ T6055] hsr_slave_1: left promiscuous mode [ 123.843379][ T6055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.867691][ T6055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.881570][ T6055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.902689][ T6055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.942342][ T6055] veth1_macvtap: left promiscuous mode [ 123.952497][ T6055] veth0_macvtap: left promiscuous mode [ 123.953014][ T7942] sctp: [Deprecated]: syz.4.572 (pid 7942) Use of int in max_burst socket option deprecated. [ 123.953014][ T7942] Use struct sctp_assoc_value instead [ 123.959258][ T6055] veth1_vlan: left promiscuous mode [ 123.979435][ T6055] veth0_vlan: left promiscuous mode [ 124.418569][ T6055] team0 (unregistering): Port device team_slave_1 removed [ 124.465240][ T6055] team0 (unregistering): Port device team_slave_0 removed [ 124.509354][ T5845] Bluetooth: hci4: command tx timeout [ 124.655406][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.576'. [ 125.103114][ T7887] chnl_net:caif_netlink_parms(): no params data found [ 125.123941][ T7964] netlink: 'syz.0.578': attribute type 17 has an invalid length. [ 125.153589][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.578'. [ 125.169296][ T7964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.578'. [ 125.451672][ T7976] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 125.475822][ T7887] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.514484][ T7887] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.529299][ T7887] bridge_slave_0: entered allmulticast mode [ 125.537738][ T7887] bridge_slave_0: entered promiscuous mode [ 125.574984][ T7887] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.587503][ T7887] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.594847][ T7887] bridge_slave_1: entered allmulticast mode [ 125.620513][ T7887] bridge_slave_1: entered promiscuous mode [ 125.662967][ T7773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.796795][ T5845] Bluetooth: hci5: command 0x041b tx timeout [ 125.848673][ T7887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.885384][ T7887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.025846][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'. [ 126.054172][ T8008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.586'. [ 126.068306][ T7887] team0: Port device team_slave_0 added [ 126.083996][ T8008] netlink: 'syz.2.586': attribute type 3 has an invalid length. [ 126.091615][ T7887] team0: Port device team_slave_1 added [ 126.228362][ T7887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.235357][ T7887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.277789][ T7887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.296302][ T7887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.303294][ T7887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.333430][ T7887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.479068][ T7773] veth0_vlan: entered promiscuous mode [ 126.500461][ T7887] hsr_slave_0: entered promiscuous mode [ 126.518551][ T8028] netlink: 'syz.2.593': attribute type 1 has an invalid length. [ 126.522449][ T7887] hsr_slave_1: entered promiscuous mode [ 126.537528][ T7887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.545620][ T7887] Cannot create hsr debugfs directory [ 126.586491][ T5841] Bluetooth: hci4: command tx timeout [ 126.595579][ T7773] veth1_vlan: entered promiscuous mode [ 126.642231][ T8038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.596'. [ 126.651841][ T8034] bond0: (slave gretap1): making interface the new active one [ 126.661110][ T8034] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 126.771619][ T8043] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 126.972471][ T7773] veth0_macvtap: entered promiscuous mode [ 127.052471][ T7773] veth1_macvtap: entered promiscuous mode [ 127.094977][ T7773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.143519][ T7773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.162025][ T7773] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.171542][ T7773] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.187859][ T7773] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.197221][ T7773] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.232700][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 127.369188][ T6060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.398900][ T6060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.440784][ T8064] netlink: 24 bytes leftover after parsing attributes in process `syz.4.606'. [ 127.448116][ T6054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.462545][ T6054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.579157][ T7887] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 127.593877][ T7887] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 127.611995][ T7887] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 127.643482][ T7887] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 127.866412][ T5841] Bluetooth: hci5: command 0x041b tx timeout [ 127.941283][ T7887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.015533][ T7887] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.035141][ T8095] tipc: New replicast peer: 255.255.255.255 [ 128.052575][ T8095] tipc: Enabled bearer , priority 10 [ 128.065617][ T8097] x_tables: duplicate underflow at hook 2 [ 128.092814][ T6060] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.100041][ T6060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.113870][ T6060] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.121079][ T6060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.304632][ T8101] __nla_validate_parse: 1 callbacks suppressed [ 128.304652][ T8101] netlink: 14 bytes leftover after parsing attributes in process `syz.4.614'. [ 128.536566][ T8101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.553722][ T8101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.564645][ T8101] bond0 (unregistering): (slave team0): Releasing backup interface [ 128.578490][ T8101] bond0 (unregistering): Released all slaves [ 128.666778][ T5841] Bluetooth: hci4: command tx timeout [ 128.791195][ T8121] netlink: 'syz.0.619': attribute type 7 has an invalid length. [ 128.816591][ T8121] netlink: 140 bytes leftover after parsing attributes in process `syz.0.619'. [ 128.897632][ T7887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.016792][ T8130] netlink: 'syz.0.622': attribute type 1 has an invalid length. [ 129.027487][ T7887] veth0_vlan: entered promiscuous mode [ 129.077836][ T8130] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.104924][ T8134] gretap1: entered promiscuous mode [ 129.116610][ T8134] bond2: (slave gretap1): making interface the new active one [ 129.130573][ T8134] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 129.155298][ T8130] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 129.224981][ T7887] veth1_vlan: entered promiscuous mode [ 129.335188][ T7887] veth0_macvtap: entered promiscuous mode [ 129.352296][ T7887] veth1_macvtap: entered promiscuous mode [ 129.379669][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'. [ 129.401481][ T7887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.455750][ T7887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.471534][ T7887] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.485017][ T7887] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.494134][ T7887] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.516181][ T7887] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.681159][ T6055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.699461][ T6055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.776932][ T8162] netlink: 20 bytes leftover after parsing attributes in process `syz.4.634'. [ 129.835036][ T6055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.870938][ T6055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.922978][ T8166] netlink: 128 bytes leftover after parsing attributes in process `syz.4.638'. [ 129.950409][ T5841] Bluetooth: hci5: command 0x041b tx timeout [ 129.962497][ T8166] netlink: 20 bytes leftover after parsing attributes in process `syz.4.638'. [ 129.975264][ T8171] C: renamed from team_slave_0 (while UP) [ 130.005306][ T8171] netlink: 'syz.4.638': attribute type 1 has an invalid length. [ 130.029123][ T8171] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 130.075356][ T8174] netlink: 24 bytes leftover after parsing attributes in process `syz.2.639'. [ 130.210033][ T8179] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 130.516196][ T8197] netlink: 36 bytes leftover after parsing attributes in process `syz.4.643'. [ 130.540514][ T8199] netlink: 188 bytes leftover after parsing attributes in process `syz.5.645'. [ 130.639679][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.643'. [ 130.715259][ T8199] x_tables: duplicate underflow at hook 3 [ 130.722414][ T8199] Cannot find set identified by id 0 to match [ 131.139994][ T6050] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.410860][ T6050] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.630033][ T6050] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.793412][ T6050] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.817699][ T8228] tipc: Started in network mode [ 131.823867][ T8228] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 131.844845][ T8228] tipc: Enabled bearer , priority 10 [ 132.024436][ T6050] bridge_slave_1: left allmulticast mode [ 132.047770][ T6050] bridge_slave_1: left promiscuous mode [ 132.057080][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.075208][ T6050] bridge_slave_0: left allmulticast mode [ 132.094690][ T6050] bridge_slave_0: left promiscuous mode [ 132.101687][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.231501][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 132.245662][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 132.264012][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 132.273656][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 132.288138][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 132.376358][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033c4c400: rx timeout, send abort [ 132.385992][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888033c4f400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 132.500338][ T6050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.514313][ T6050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.524861][ T6050] bond0 (unregistering): Released all slaves [ 132.689193][ T8249] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 132.782169][ T8249] lo speed is unknown, defaulting to 1000 [ 132.802523][ T8249] lo speed is unknown, defaulting to 1000 [ 132.870481][ T8249] lo speed is unknown, defaulting to 1000 [ 132.885495][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033c4c400: abort rx timeout. Force session deactivation [ 132.966183][ T43] tipc: Node number set to 10136234 [ 133.126734][ T8266] netlink: 'syz.5.662': attribute type 10 has an invalid length. [ 133.132590][ T8249] infiniband syz0: set active [ 133.139517][ T8249] infiniband syz0: added lo [ 133.199393][ T8249] RDS/IB: syz0: added [ 133.204417][ T8249] smc: adding ib device syz0 with port count 1 [ 133.211318][ T8249] smc: ib device syz0 port 1 has pnetid [ 133.253544][ T8260] geneve2: entered promiscuous mode [ 133.265957][ T8260] geneve2: entered allmulticast mode [ 133.283772][ T8266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.307380][ T8266] team0: Port device batadv0 added [ 133.313988][ T10] lo speed is unknown, defaulting to 1000 [ 133.321192][ T1216] lo speed is unknown, defaulting to 1000 [ 133.329774][ T8249] lo speed is unknown, defaulting to 1000 [ 133.367262][ T8246] chnl_net:caif_netlink_parms(): no params data found [ 133.535781][ T8276] __nla_validate_parse: 5 callbacks suppressed [ 133.535798][ T8276] netlink: 104 bytes leftover after parsing attributes in process `syz.2.665'. [ 133.717674][ T8287] nftables ruleset with unbound chain [ 133.733145][ T8287] netlink: 744 bytes leftover after parsing attributes in process `syz.2.668'. [ 133.758199][ T8287] netlink: 8000 bytes leftover after parsing attributes in process `syz.2.668'. [ 133.769225][ T8246] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.785493][ T8246] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.794800][ T8287] netlink: 11736 bytes leftover after parsing attributes in process `syz.2.668'. [ 133.809380][ T8246] bridge_slave_0: entered allmulticast mode [ 133.834085][ T8246] bridge_slave_0: entered promiscuous mode [ 133.848740][ T8249] lo speed is unknown, defaulting to 1000 [ 133.857115][ T8246] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.876158][ T8246] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.883433][ T8246] bridge_slave_1: entered allmulticast mode [ 133.913435][ T8246] bridge_slave_1: entered promiscuous mode [ 134.057702][ T8303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.670'. [ 134.083008][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.5.671'. [ 134.347935][ T5845] Bluetooth: hci4: command tx timeout [ 134.491130][ T8246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.493127][ T8249] lo speed is unknown, defaulting to 1000 [ 134.520471][ T8311] macvtap1: entered promiscuous mode [ 134.525899][ T8311] vlan0: entered promiscuous mode [ 134.531851][ T8311] macvtap1: entered allmulticast mode [ 134.537472][ T8311] vlan0: entered allmulticast mode [ 134.542771][ T8311] veth0_vlan: entered allmulticast mode [ 134.562525][ T8311] vlan0: left allmulticast mode [ 134.601077][ T8311] veth0_vlan: left allmulticast mode [ 134.628996][ T8311] vlan0: left promiscuous mode [ 134.695865][ T8246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.799881][ T8246] team0: Port device team_slave_0 added [ 134.832724][ T8246] team0: Port device team_slave_1 added [ 134.994972][ T8246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.006990][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'. [ 135.029307][ T8246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.057323][ T8246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.114105][ T8246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.128897][ T8246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.160362][ T8246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.190889][ T8249] lo speed is unknown, defaulting to 1000 [ 135.191978][ T8323] syzkaller1: entered promiscuous mode [ 135.202205][ T8323] syzkaller1: entered allmulticast mode [ 135.211511][ T8328] netlink: 28 bytes leftover after parsing attributes in process `syz.5.676'. [ 135.232725][ T8328] netlink: 'syz.5.676': attribute type 7 has an invalid length. [ 135.245253][ T8328] netlink: 'syz.5.676': attribute type 8 has an invalid length. [ 135.261530][ T8328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.676'. [ 135.399654][ T8331] ipt_REJECT: TCP_RESET invalid for non-tcp [ 135.400554][ T8246] hsr_slave_0: entered promiscuous mode [ 135.422243][ T8246] hsr_slave_1: entered promiscuous mode [ 135.433911][ T8246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.443389][ T8246] Cannot create hsr debugfs directory [ 135.687236][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.680'. [ 135.745780][ T8249] lo speed is unknown, defaulting to 1000 [ 135.842720][ T8347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.436301][ T5845] Bluetooth: hci4: command tx timeout [ 136.463789][ T8249] lo speed is unknown, defaulting to 1000 [ 136.472372][ T8246] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 136.528452][ T8246] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 136.567326][ T8246] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 136.588755][ T8246] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 136.629457][ T8390] xt_TCPMSS: Only works on TCP SYN packets [ 136.668438][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 136.743243][ T8396] netlink: 'syz.2.696': attribute type 1 has an invalid length. [ 136.986882][ T8249] lo speed is unknown, defaulting to 1000 [ 137.061154][ T8246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.123481][ T8246] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.185786][ T6054] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.193044][ T6054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.263009][ T6054] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.270256][ T6054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.835014][ T8246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.044434][ T6050] hsr_slave_0: left promiscuous mode [ 138.051880][ T6050] hsr_slave_1: left promiscuous mode [ 138.058426][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.065888][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.084788][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.096831][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.141659][ T6050] veth1_macvtap: left promiscuous mode [ 138.148806][ T6050] veth0_macvtap: left promiscuous mode [ 138.155304][ T6050] veth1_vlan: left promiscuous mode [ 138.161959][ T6050] veth0_vlan: left promiscuous mode [ 138.506338][ T5845] Bluetooth: hci4: command tx timeout [ 138.653646][ T6050] team0 (unregistering): Port device team_slave_1 removed [ 138.692952][ T6050] team0 (unregistering): Port device team_slave_0 removed [ 139.078528][ T8458] netlink: 'syz.5.714': attribute type 7 has an invalid length. [ 139.171167][ T8246] veth0_vlan: entered promiscuous mode [ 139.222872][ T8246] veth1_vlan: entered promiscuous mode [ 139.268055][ T8467] __nla_validate_parse: 2 callbacks suppressed [ 139.268070][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.5.717'. [ 139.330913][ T8467] netlink: 116 bytes leftover after parsing attributes in process `syz.5.717'. [ 139.359405][ T8465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.716'. [ 139.390167][ T8246] veth0_macvtap: entered promiscuous mode [ 139.423682][ T8246] veth1_macvtap: entered promiscuous mode [ 139.463798][ T8465] netlink: 24 bytes leftover after parsing attributes in process `syz.0.716'. [ 139.517163][ T8246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.529048][ T8475] netlink: 'syz.5.719': attribute type 1 has an invalid length. [ 139.544233][ T8246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.560199][ T8475] netlink: 220 bytes leftover after parsing attributes in process `syz.5.719'. [ 139.585778][ T8246] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.601770][ T8246] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.610694][ T8246] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.615802][ T8475] netlink: 'syz.5.719': attribute type 1 has an invalid length. [ 139.628238][ T8246] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.652383][ T8486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.721'. [ 139.712319][ T8485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.722'. [ 139.926996][ T8493] netlink: 68 bytes leftover after parsing attributes in process `syz.5.724'. [ 140.056753][ T6060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.064612][ T6060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.090582][ T6060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.100791][ T6060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.284068][ T8511] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 140.290868][ T8511] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 140.619591][ T8527] netlink: 28 bytes leftover after parsing attributes in process `syz.4.737'. [ 140.628900][ T8527] geneve0: entered allmulticast mode [ 140.801244][ T8536] netlink: 104 bytes leftover after parsing attributes in process `syz.2.739'. [ 140.844267][ T6050] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.010588][ T6050] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.132103][ T6050] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.191670][ T6050] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.365547][ T6050] bridge_slave_1: left allmulticast mode [ 141.371493][ T6050] bridge_slave_1: left promiscuous mode [ 141.377425][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.388747][ T6050] bridge_slave_0: left allmulticast mode [ 141.394403][ T6050] bridge_slave_0: left promiscuous mode [ 141.400595][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.653525][ T8546] netlink: 'syz.0.741': attribute type 21 has an invalid length. [ 141.974292][ T6050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.992477][ T6050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.008048][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 142.017765][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 142.029480][ T6050] bond0 (unregistering): Released all slaves [ 142.035645][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 142.043749][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 142.053357][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 142.374166][ T8542] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.384684][ T8542] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.393951][ T8542] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.403180][ T8542] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.496954][ T24] lo speed is unknown, defaulting to 1000 [ 142.503509][ T24] syz0: Port: 1 Link DOWN [ 142.604583][ T5945] lo speed is unknown, defaulting to 1000 [ 142.649418][ T8558] lo speed is unknown, defaulting to 1000 [ 142.728523][ T8582] sctp: [Deprecated]: syz.2.753 (pid 8582) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.728523][ T8582] Use struct sctp_sack_info instead [ 142.757249][ T8580] veth0: entered promiscuous mode [ 142.786309][ T8580] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20003 [ 143.866951][ T6050] hsr_slave_0: left promiscuous mode [ 143.882191][ T6050] hsr_slave_1: left promiscuous mode [ 143.890290][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.897995][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.920027][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.952962][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.019215][ T8635] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 144.024532][ T6050] veth1_macvtap: left promiscuous mode [ 144.052130][ T6050] veth0_macvtap: left promiscuous mode [ 144.064031][ T6050] veth1_vlan: left promiscuous mode [ 144.075361][ T6050] veth0_vlan: left promiscuous mode [ 144.108652][ T5845] Bluetooth: hci4: command tx timeout [ 144.258867][ T8647] netlink: 'syz.5.771': attribute type 2 has an invalid length. [ 144.285349][ T8648] netlink: 'syz.5.771': attribute type 2 has an invalid length. [ 144.763571][ T6050] team0 (unregistering): Port device team_slave_1 removed [ 144.810258][ T6050] team0 (unregistering): Port device team_slave_0 removed [ 145.352388][ T8666] netlink: 'syz.4.773': attribute type 1 has an invalid length. [ 145.360414][ T8666] __nla_validate_parse: 6 callbacks suppressed [ 145.360429][ T8666] netlink: 224 bytes leftover after parsing attributes in process `syz.4.773'. [ 145.381331][ T8670] netlink: 236 bytes leftover after parsing attributes in process `syz.0.774'. [ 145.467608][ T8674] netlink: 'syz.0.774': attribute type 1 has an invalid length. [ 145.539862][ T8674] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.774'. [ 145.605980][ T8558] chnl_net:caif_netlink_parms(): no params data found [ 145.651466][ T8683] netlink: 'syz.5.778': attribute type 13 has an invalid length. [ 145.704594][ T8683] lo: entered promiscuous mode [ 145.709809][ T8683] lo: entered allmulticast mode [ 145.720346][ T8683] tunl0: entered promiscuous mode [ 145.732338][ T8683] tunl0: entered allmulticast mode [ 145.759347][ T8683] gre0: entered promiscuous mode [ 145.764609][ T8683] gre0: entered allmulticast mode [ 145.783398][ T8683] gretap0: entered promiscuous mode [ 145.789314][ T8683] gretap0: entered allmulticast mode [ 145.799560][ T8683] gretap0: refused to change device tx_queue_len [ 145.848818][ T8683] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 145.878036][ T8688] netlink: 'syz.4.780': attribute type 10 has an invalid length. [ 145.956836][ T8688] veth0_vlan: entered allmulticast mode [ 146.003485][ T8688] veth0_vlan: left promiscuous mode [ 146.035978][ T8688] veth0_vlan: entered promiscuous mode [ 146.050630][ T8690] netlink: 'syz.5.781': attribute type 1 has an invalid length. [ 146.051403][ T8688] team0: Device veth0_vlan failed to register rx_handler [ 146.071557][ T8690] netlink: 'syz.5.781': attribute type 11 has an invalid length. [ 146.096495][ T8690] netlink: 220 bytes leftover after parsing attributes in process `syz.5.781'. [ 146.186157][ T5845] Bluetooth: hci4: command tx timeout [ 146.296909][ T8558] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.304606][ T8558] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.341521][ T8703] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 146.363930][ T8558] bridge_slave_0: entered allmulticast mode [ 146.397099][ T8558] bridge_slave_0: entered promiscuous mode [ 146.417442][ T8558] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.424797][ T8558] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.458088][ T8558] bridge_slave_1: entered allmulticast mode [ 146.465825][ T8558] bridge_slave_1: entered promiscuous mode [ 146.597342][ T8709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.784'. [ 146.616150][ T8709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.784'. [ 146.650248][ T8558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.687824][ T8558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.794398][ T8715] batman_adv: batadv0: Adding interface: ipvlan2 [ 146.802244][ T8715] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.835697][ T8715] batman_adv: batadv0: Interface activated: ipvlan2 [ 146.855682][ T8558] team0: Port device team_slave_0 added [ 146.865177][ T8558] team0: Port device team_slave_1 added [ 146.912565][ T8558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.919872][ T8558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.946860][ T8558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.964000][ T8558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.971212][ T8558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.997698][ T8558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.071812][ T8558] hsr_slave_0: entered promiscuous mode [ 147.078488][ T8558] hsr_slave_1: entered promiscuous mode [ 147.084854][ T8558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.093359][ T8558] Cannot create hsr debugfs directory [ 147.152795][ T8737] tipc: Enabling of bearer rejected, already enabled [ 147.223766][ T8739] veth0: entered promiscuous mode [ 147.244613][ T8738] veth0: left promiscuous mode [ 147.329387][ T8741] bond0: entered allmulticast mode [ 147.334718][ T8741] gretap1: entered allmulticast mode [ 147.474632][ T8743] netlink: 'syz.2.794': attribute type 1 has an invalid length. [ 147.552139][ T8743] bond2: entered promiscuous mode [ 147.562178][ T8746] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.571404][ T8743] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.593088][ T8746] netlink: 32 bytes leftover after parsing attributes in process `syz.5.795'. [ 147.607664][ T8746] netlink: 32 bytes leftover after parsing attributes in process `syz.5.795'. [ 147.679546][ T8751] lo: entered promiscuous mode [ 147.685096][ T8751] tunl0: entered promiscuous mode [ 147.691520][ T8751] gre0: entered promiscuous mode [ 147.702640][ T8751] gretap0: entered promiscuous mode [ 147.708564][ T8751] erspan0: entered promiscuous mode [ 147.714368][ T8751] ip_vti0: entered promiscuous mode [ 148.060611][ T8558] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 148.088284][ T8558] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 148.107759][ T8558] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 148.192070][ T8558] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 148.223374][ T8769] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.803'. [ 148.252638][ T8769] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 148.266303][ T5845] Bluetooth: hci4: command tx timeout [ 148.302436][ T8769] openvswitch: netlink: Duplicate key (type 0). [ 148.344895][ T8790] netlink: 'syz.2.807': attribute type 33 has an invalid length. [ 148.347878][ T5845] Bluetooth: hci0: command tx timeout [ 148.411069][ T8790] tipc: Resetting bearer [ 148.481094][ T8558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.505738][ T8558] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.532494][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.539676][ T6055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.585490][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.592731][ T6045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.685702][ T8809] IPv6: NLM_F_REPLACE set, but no existing node found! [ 149.083821][ T8829] netlink: 16 bytes leftover after parsing attributes in process `syz.2.818'. [ 149.115505][ T6049] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 149.133977][ T6049] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 149.142619][ T5945] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 149.291028][ T8839] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 149.337519][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 149.362792][ T8558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.513601][ T8851] netlink: 'syz.4.824': attribute type 13 has an invalid length. [ 149.552820][ T8851] lo: entered promiscuous mode [ 149.566501][ T8851] lo: entered allmulticast mode [ 149.599845][ T8851] tunl0: entered promiscuous mode [ 149.605522][ T8851] tunl0: entered allmulticast mode [ 149.638370][ T8851] gre0: entered promiscuous mode [ 149.647321][ T5945] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 149.656435][ T8851] gre0: entered allmulticast mode [ 149.683113][ T8851] gretap0: entered allmulticast mode [ 149.704420][ T8851] gretap0: refused to change device tx_queue_len [ 149.731747][ T8851] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 149.763669][ T8865] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 149.772723][ T8860] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 149.872134][ T8558] veth0_vlan: entered promiscuous mode [ 149.909253][ T8558] veth1_vlan: entered promiscuous mode [ 150.004064][ T8558] veth0_macvtap: entered promiscuous mode [ 150.035197][ T8875] dvmrp0: entered allmulticast mode [ 150.080239][ T8558] veth1_macvtap: entered promiscuous mode [ 150.099301][ T8875] dvmrp0: left allmulticast mode [ 150.312923][ T8558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.346567][ T5845] Bluetooth: hci4: command tx timeout [ 150.373940][ T8558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.422017][ T8558] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.442420][ T8558] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.466973][ T8558] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.481338][ T8558] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.544274][ T8894] bridge_slave_0: left allmulticast mode [ 150.554952][ T8894] bridge_slave_0: left promiscuous mode [ 150.591174][ T5845] block nbd0: Receive control failed (result -32) [ 150.593166][ T8894] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.668392][ T8894] bridge_slave_1: left allmulticast mode [ 150.674212][ T8894] bridge_slave_1: left promiscuous mode [ 150.680815][ T8894] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.702399][ T8894] team0: Port device C removed [ 150.719346][ T8894] team0: Port device team_slave_1 removed [ 150.754142][ T8894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.778895][ T8894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.796782][ T8894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.804512][ T8894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.814046][ T8908] __nla_validate_parse: 3 callbacks suppressed [ 150.814062][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.837'. [ 151.008721][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.843'. [ 151.031688][ T8912] netlink: 12 bytes leftover after parsing attributes in process `syz.5.844'. [ 151.133246][ T6049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.164233][ T6049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.229385][ T8923] netlink: 20 bytes leftover after parsing attributes in process `syz.5.847'. [ 151.248692][ T6053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.261785][ T6053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.543508][ T8937] netlink: 'syz.4.852': attribute type 2 has an invalid length. [ 151.603518][ T8939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.661399][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.856'. [ 151.686461][ T8950] netlink: 40 bytes leftover after parsing attributes in process `syz.4.856'. [ 151.781390][ T8953] netlink: 16 bytes leftover after parsing attributes in process `syz.0.857'. [ 151.924109][ T8962] netlink: 'syz.0.861': attribute type 10 has an invalid length. [ 151.962098][ T8962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.979514][ T8962] team0: Port device bond0 added [ 152.052136][ T6049] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.193153][ T6049] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.221896][ T8968] syzkaller1: entered promiscuous mode [ 152.227654][ T8968] syzkaller1: entered allmulticast mode [ 152.520824][ T6049] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.670461][ T6049] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.745400][ T6049] bridge_slave_1: left allmulticast mode [ 152.752355][ T6049] bridge_slave_1: left promiscuous mode [ 152.758347][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.770060][ T6049] bridge_slave_0: left allmulticast mode [ 152.775732][ T6049] bridge_slave_0: left promiscuous mode [ 152.782015][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.907249][ T8979] netlink: 8 bytes leftover after parsing attributes in process `syz.5.865'. [ 152.944950][ T8980] x_tables: duplicate underflow at hook 1 [ 153.429919][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.440851][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.457782][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.471100][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 153.483984][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.500365][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.579199][ T6049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.590716][ T6049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.601302][ T6049] bond0 (unregistering): Released all slaves [ 153.730450][ T9010] veth1: entered allmulticast mode [ 153.824168][ T9015] Cannot find del_set index 17 as target [ 153.869189][ T9018] sit0: entered promiscuous mode [ 153.884991][ T9018] netlink: 'syz.0.872': attribute type 1 has an invalid length. [ 153.917254][ T9018] netlink: 1 bytes leftover after parsing attributes in process `syz.0.872'. [ 153.939377][ T9003] lo speed is unknown, defaulting to 1000 [ 153.997169][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.5.875'. [ 154.817282][ T6049] hsr_slave_0: left promiscuous mode [ 154.839601][ T6049] hsr_slave_1: left promiscuous mode [ 154.845161][ T9067] sctp: [Deprecated]: syz.2.888 (pid 9067) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.845161][ T9067] Use struct sctp_sack_info instead [ 154.868611][ T6049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.876616][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.888868][ T6049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.896966][ T9076] sctp: [Deprecated]: syz.2.888 (pid 9076) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.896966][ T9076] Use struct sctp_sack_info instead [ 154.913949][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.945983][ T6049] veth1_macvtap: left promiscuous mode [ 154.953940][ T6049] veth0_macvtap: left promiscuous mode [ 154.959974][ T6049] veth1_vlan: left promiscuous mode [ 154.965626][ T6049] veth0_vlan: left promiscuous mode [ 154.988872][ T9081] netlink: 'syz.0.892': attribute type 1 has an invalid length. [ 155.011120][ T9081] netlink: 'syz.0.892': attribute type 10 has an invalid length. [ 155.550372][ T5845] Bluetooth: hci4: command tx timeout [ 155.583634][ T6049] team0 (unregistering): Port device team_slave_1 removed [ 155.622944][ T6049] team0 (unregistering): Port device team_slave_0 removed [ 156.010180][ T9081] veth0_vlan: entered allmulticast mode [ 156.016325][ T9081] veth0_vlan: left promiscuous mode [ 156.023387][ T9081] veth0_vlan: entered promiscuous mode [ 156.042462][ T9081] team0: Device veth0_vlan failed to register rx_handler [ 156.054341][ T9081] tipc: Resetting bearer [ 156.225426][ T9003] chnl_net:caif_netlink_parms(): no params data found [ 156.453778][ T9119] netlink: 'syz.2.900': attribute type 3 has an invalid length. [ 156.527106][ T9003] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.546223][ T9003] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.553647][ T9003] bridge_slave_0: entered allmulticast mode [ 156.571418][ T9003] bridge_slave_0: entered promiscuous mode [ 156.586494][ T9003] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.606459][ T9003] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.624069][ T9129] __nla_validate_parse: 3 callbacks suppressed [ 156.624085][ T9129] netlink: 32 bytes leftover after parsing attributes in process `syz.4.906'. [ 156.628368][ T9003] bridge_slave_1: entered allmulticast mode [ 156.667656][ T9125] netlink: 56 bytes leftover after parsing attributes in process `syz.5.904'. [ 156.692276][ T9003] bridge_slave_1: entered promiscuous mode [ 156.705782][ T9124] tap0: tun_chr_ioctl cmd 1074025677 [ 156.713114][ T9131] netlink: 96 bytes leftover after parsing attributes in process `syz.0.907'. [ 156.715477][ T9124] tap0: linktype set to 65534 [ 156.794437][ T9131] vlan2: entered allmulticast mode [ 156.807747][ T9131] gretap0: entered allmulticast mode [ 156.859718][ T9003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.879254][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.910'. [ 156.894882][ T9003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.922358][ T9140] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 156.953472][ T9140] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 157.004206][ T9140] netlink: 'syz.4.910': attribute type 1 has an invalid length. [ 157.033370][ T9003] team0: Port device team_slave_0 added [ 157.074162][ T9140] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 157.078498][ T9003] team0: Port device team_slave_1 added [ 157.107711][ T9154] netlink: 28 bytes leftover after parsing attributes in process `syz.5.914'. [ 157.117875][ T9154] netlink: 28 bytes leftover after parsing attributes in process `syz.5.914'. [ 157.218514][ T9003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.236551][ T9003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.264028][ T9003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.276515][ T9158] netlink: 14 bytes leftover after parsing attributes in process `syz.2.915'. [ 157.287435][ T9003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.294589][ T9003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.321707][ T9003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.511918][ T9003] hsr_slave_0: entered promiscuous mode [ 157.521607][ T9003] hsr_slave_1: entered promiscuous mode [ 157.528075][ T9003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.535775][ T9003] Cannot create hsr debugfs directory [ 157.609839][ T9177] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 157.630067][ T5845] Bluetooth: hci4: command tx timeout [ 157.841234][ T9192] netlink: 'syz.2.922': attribute type 11 has an invalid length. [ 157.850872][ T9192] netlink: 224 bytes leftover after parsing attributes in process `syz.2.922'. [ 158.058628][ T9201] netlink: 20 bytes leftover after parsing attributes in process `syz.0.930'. [ 158.090639][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.930'. [ 158.190191][ T9201] veth7: entered allmulticast mode [ 158.226427][ T9209] tipc: Enabling of bearer rejected, failed to enable media [ 158.418326][ T9227] Cannot find set identified by id 752 to match [ 159.021287][ T9003] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 159.054055][ T9003] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 159.293531][ T9003] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 159.326610][ T9003] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 159.476427][ T9273] netlink: 'syz.2.951': attribute type 1 has an invalid length. [ 159.520657][ T9275] tipc: Started in network mode [ 159.540986][ T9275] tipc: Node identity 3a8648f1240a, cluster identity 4711 [ 159.554249][ T9275] tipc: Enabled bearer , priority 0 [ 159.562648][ T9275] syzkaller0: entered promiscuous mode [ 159.571716][ T9275] syzkaller0: entered allmulticast mode [ 159.598796][ T9278] netlink: 'syz.0.953': attribute type 4 has an invalid length. [ 159.653406][ T9274] tipc: Resetting bearer [ 159.684765][ T9274] tipc: Disabling bearer [ 159.704954][ T9003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.712649][ T5845] Bluetooth: hci4: command tx timeout [ 159.731891][ T9003] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.755357][ T6050] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.762575][ T6050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.824533][ T6050] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.831761][ T6050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.895274][ T9288] netlink: 'syz.5.957': attribute type 2 has an invalid length. [ 160.442266][ T9312] vlan1: entered promiscuous mode [ 160.447906][ T9312] vlan1: entered allmulticast mode [ 160.453033][ T9312] hsr_slave_1: entered allmulticast mode [ 160.642556][ T9003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.842624][ T9003] veth0_vlan: entered promiscuous mode [ 160.878058][ T9333] netlink: 'syz.2.969': attribute type 20 has an invalid length. [ 160.894959][ T9003] veth1_vlan: entered promiscuous mode [ 161.011257][ T9003] veth0_macvtap: entered promiscuous mode [ 161.039975][ T9003] veth1_macvtap: entered promiscuous mode [ 161.105540][ T9003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.129715][ T9003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.145056][ T9003] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.155413][ T9003] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.181332][ T9003] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.191796][ T9003] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.220971][ T9348] netlink: 'syz.2.975': attribute type 1 has an invalid length. [ 161.262018][ T9358] lo: left promiscuous mode [ 161.267410][ T9358] lo: left allmulticast mode [ 161.274901][ T9358] tunl0: left promiscuous mode [ 161.293462][ T9358] tunl0: left allmulticast mode [ 161.299270][ T9358] gre0: left promiscuous mode [ 161.305054][ T9358] gre0: left allmulticast mode [ 161.311054][ T9358] gretap0: left promiscuous mode [ 161.316430][ T9358] gretap0: left allmulticast mode [ 161.401686][ T9358] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.409499][ T9358] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.448019][ T9358] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 161.647478][ T6050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.665314][ T6050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.696953][ T9373] netlink: 'syz.4.981': attribute type 11 has an invalid length. [ 161.704991][ T6049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.714489][ T6049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.790615][ T5841] Bluetooth: hci4: command tx timeout [ 162.185558][ T9394] netlink: 'syz.4.986': attribute type 3 has an invalid length. [ 162.234789][ T9398] netlink: 'syz.0.987': attribute type 1 has an invalid length. [ 162.257775][ T9398] netlink: 'syz.0.987': attribute type 11 has an invalid length. [ 162.262885][ T9402] __nla_validate_parse: 9 callbacks suppressed [ 162.262903][ T9402] netlink: 32 bytes leftover after parsing attributes in process `syz.4.988'. [ 162.271933][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 162.295640][ T9398] netlink: 220 bytes leftover after parsing attributes in process `syz.0.987'. [ 162.297719][ T9402] netlink: 32 bytes leftover after parsing attributes in process `syz.4.988'. [ 162.462083][ T9416] netlink: 'syz.0.990': attribute type 24 has an invalid length. [ 162.706428][ T6053] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.804043][ T6053] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.081939][ T6053] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.271522][ T6053] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.409663][ T6053] bridge_slave_1: left allmulticast mode [ 163.415316][ T6053] bridge_slave_1: left promiscuous mode [ 163.421508][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.431001][ T6053] bridge_slave_0: left allmulticast mode [ 163.437382][ T6053] bridge_slave_0: left promiscuous mode [ 163.443098][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.742677][ T9443] netlink: 48 bytes leftover after parsing attributes in process `syz.5.998'. [ 164.037792][ T6053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.050618][ T6053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.061623][ T6053] bond0 (unregistering): Released all slaves [ 164.090717][ T9453] tipc: Enabling not permitted [ 164.096829][ T9453] tipc: Enabling of bearer rejected, failed to enable media [ 164.142294][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 164.151808][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 164.186985][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 164.214170][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 164.230902][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 164.275792][ T9461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.299427][ T9460] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 164.431617][ T9469] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 164.595823][ T9454] lo speed is unknown, defaulting to 1000 [ 164.683471][ T9478] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1012'. [ 164.802255][ T9481] SET target dimension over the limit! [ 164.941243][ T9485] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 164.981860][ T9485] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 165.278605][ T9509] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1022'. [ 165.296674][ T9511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1024'. [ 165.574209][ T9519] netlink: 'syz.2.1027': attribute type 39 has an invalid length. [ 165.592182][ T6053] hsr_slave_0: left promiscuous mode [ 165.600342][ T6053] hsr_slave_1: left promiscuous mode [ 165.609582][ T6053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.621010][ T6053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.634379][ T6053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.643879][ T6053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.673599][ T6053] veth1_macvtap: left promiscuous mode [ 165.679975][ T6053] veth0_macvtap: left promiscuous mode [ 165.687442][ T6053] veth1_vlan: left promiscuous mode [ 165.692946][ T6053] veth0_vlan: left promiscuous mode [ 166.167656][ T6053] team0 (unregistering): Port device team_slave_1 removed [ 166.205905][ T6053] team0 (unregistering): Port device team_slave_0 removed [ 166.266326][ T5841] Bluetooth: hci4: command tx timeout [ 166.795258][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1035'. [ 166.812773][ T9541] netlink: 'syz.5.1034': attribute type 2 has an invalid length. [ 167.043935][ T9553] netlink: 'syz.2.1038': attribute type 10 has an invalid length. [ 167.145310][ T9559] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1041'. [ 167.241788][ T30] audit: type=1107 audit(1751030606.047:2): pid=9557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='±34¥– ƒk¨ÉûæñvÔÕ›JÌ%8Nbf1xj"àÿBJÏ…GvñíÑ›ÕÀLPÐOÍ¹ãÆ Ù¢ÿxSÞk߃¸à6$LDALé¼ÜVòV{àðΪ›5Ø M' [ 167.272951][ T9454] chnl_net:caif_netlink_parms(): no params data found [ 167.284745][ T9565] netlink: 'syz.2.1042': attribute type 10 has an invalid length. [ 167.298646][ T9565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.307252][ T9565] team0: Port device batadv0 added [ 167.453675][ T9568] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1043'. [ 167.698198][ T9454] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.705382][ T9454] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.721998][ T9454] bridge_slave_0: entered allmulticast mode [ 167.737342][ T9454] bridge_slave_0: entered promiscuous mode [ 167.757760][ T9454] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.775571][ T9454] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.795483][ T9454] bridge_slave_1: entered allmulticast mode [ 167.825687][ T9454] bridge_slave_1: entered promiscuous mode [ 167.924843][ T9454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.990022][ T9454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.124895][ T9454] team0: Port device team_slave_0 added [ 168.158821][ T9454] team0: Port device team_slave_1 added [ 168.238604][ T9454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.245764][ T9454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.280728][ T9454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.301016][ T9454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.309229][ T9454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.340876][ T9454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.352311][ T5841] Bluetooth: hci4: command tx timeout [ 168.455052][ T9454] hsr_slave_0: entered promiscuous mode [ 168.474171][ T9454] hsr_slave_1: entered promiscuous mode [ 168.489299][ T9454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.503283][ T9454] Cannot create hsr debugfs directory [ 168.526276][ T9627] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 168.902718][ T9644] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1065'. [ 168.919098][ T9644] bridge_slave_0: default FDB implementation only supports local addresses [ 169.638529][ T9454] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 169.663975][ T9454] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 169.684226][ T9454] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 169.712770][ T9454] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 169.883256][ T9697] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20002 [ 169.906776][ T9697] netlink: 'syz.5.1078': attribute type 1 has an invalid length. [ 170.033537][ T9454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.104243][ T9454] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.124257][ T9706] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1082'. [ 170.145483][ T6045] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.152719][ T6045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.204115][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.211355][ T6045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.364929][ T9454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.427896][ T5841] Bluetooth: hci4: command tx timeout [ 170.434743][ T9722] netlink: 'syz.2.1087': attribute type 4 has an invalid length. [ 170.494815][ T9722] netlink: 'syz.2.1087': attribute type 4 has an invalid length. [ 170.774706][ T9741] netlink: 'syz.5.1093': attribute type 2 has an invalid length. [ 170.811119][ T9742] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.818553][ T9742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.826080][ T9742] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.833231][ T9742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.893430][ T9742] bridge0: entered allmulticast mode [ 170.954913][ T9754] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.984898][ T9454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.157533][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1097'. [ 171.172849][ T9454] veth0_vlan: entered promiscuous mode [ 171.199573][ T9454] veth1_vlan: entered promiscuous mode [ 171.320446][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 171.347246][ T9454] veth0_macvtap: entered promiscuous mode [ 171.357291][ T9769] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1100'. [ 171.371590][ T9454] veth1_macvtap: entered promiscuous mode [ 171.391291][ T9769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1100'. [ 171.447856][ T9454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.514969][ T9454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.563638][ T9454] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.573615][ T9454] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.586727][ T9454] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.605660][ T9454] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.814050][ T6045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.833633][ T6045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.908088][ T6045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.923574][ T6045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.028211][ T9807] ip6t_srh: unknown srh invflags 5F00 [ 172.058898][ T9806] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1109'. [ 172.101691][ T9454] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 172.113616][ T9454] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 172.122017][ T9454] CPU: 0 UID: 0 PID: 9454 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 172.134162][ T9454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.144233][ T9454] RIP: 0010:klist_remove+0x14a/0x340 [ 172.149534][ T9454] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 e9 c6 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a e9 c6 f6 49 8b 44 24 58 48 89 44 24 08 [ 172.169138][ T9454] RSP: 0018:ffffc9000b7f7840 EFLAGS: 00010202 [ 172.175198][ T9454] RAX: 000000000000000b RBX: ffff88802ceb9e00 RCX: 0000000000000000 [ 172.183163][ T9454] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 172.191123][ T9454] RBP: ffffc9000b7f7928 R08: ffffffff8f8794c3 R09: 1ffffffff1f0f298 [ 172.199097][ T9454] R10: dffffc0000000000 R11: fffffbfff1f0f299 R12: 0000000000000000 [ 172.207066][ T9454] R13: 1ffff1100639fa8c R14: ffff888031cfd460 R15: dffffc0000000000 [ 172.215034][ T9454] FS: 0000000000000000(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 172.223955][ T9454] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.230531][ T9454] CR2: 000000110c34e66c CR3: 0000000029d68000 CR4: 00000000003526f0 [ 172.238499][ T9454] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 172.246471][ T9454] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 172.254440][ T9454] Call Trace: [ 172.257712][ T9454] [ 172.260636][ T9454] ? __pfx_klist_remove+0x10/0x10 [ 172.265659][ T9454] ? __pfx_kobject_move+0x10/0x10 [ 172.270670][ T9454] ? get_device_parent+0x366/0x3a0 [ 172.275775][ T9454] device_move+0x193/0x700 [ 172.280180][ T9454] hci_conn_del_sysfs+0xb8/0x170 [ 172.285109][ T9454] hci_conn_del+0x8ff/0xcb0 [ 172.289603][ T9454] hci_conn_hash_flush+0x191/0x230 [ 172.294704][ T9454] hci_dev_close_sync+0xaef/0x1330 [ 172.299813][ T9454] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 172.305348][ T9454] ? up_write+0x1c4/0x420 [ 172.309685][ T9454] hci_unregister_dev+0x21a/0x510 [ 172.314719][ T9454] vhci_release+0x80/0xd0 [ 172.319051][ T9454] ? __pfx_vhci_release+0x10/0x10 [ 172.324088][ T9454] __fput+0x449/0xa70 [ 172.328080][ T9454] task_work_run+0x1d1/0x260 [ 172.332670][ T9454] ? __pfx_task_work_run+0x10/0x10 [ 172.337778][ T9454] ? kmem_cache_free+0x18f/0x400 [ 172.342716][ T9454] do_exit+0x6b5/0x22e0 [ 172.346872][ T9454] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 172.352248][ T9454] ? __pfx_do_exit+0x10/0x10 [ 172.356832][ T9454] ? _raw_spin_unlock_irq+0x23/0x50 [ 172.362030][ T9454] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.367222][ T9454] do_group_exit+0x21c/0x2d0 [ 172.371812][ T9454] __x64_sys_exit_group+0x3f/0x40 [ 172.376829][ T9454] x64_sys_call+0x21ba/0x21c0 [ 172.381501][ T9454] do_syscall_64+0xfa/0x3b0 [ 172.386001][ T9454] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.391199][ T9454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.397256][ T9454] ? clear_bhb_loop+0x60/0xb0 [ 172.401923][ T9454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.407805][ T9454] RIP: 0033:0x7f236818e929 [ 172.412207][ T9454] Code: Unable to access opcode bytes at 0x7f236818e8ff. [ 172.419214][ T9454] RSP: 002b:00007ffea808a158 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 172.427616][ T9454] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f236818e929 [ 172.435577][ T9454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 172.443540][ T9454] RBP: 00007f23681ee8f0 R08: 00007ffea8087ef7 R09: 0000000000000003 [ 172.451509][ T9454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.459476][ T9454] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffea808a310 [ 172.467447][ T9454] [ 172.470463][ T9454] Modules linked in: [ 172.476295][ T9454] ---[ end trace 0000000000000000 ]--- [ 172.497068][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1109'. [ 172.503216][ T9454] RIP: 0010:klist_remove+0x14a/0x340 [ 172.512081][ T5841] Bluetooth: hci4: command tx timeout [ 172.516697][ T9454] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 e9 c6 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a e9 c6 f6 49 8b 44 24 58 48 89 44 24 08 [ 172.542708][ T9454] RSP: 0018:ffffc9000b7f7840 EFLAGS: 00010202 [ 172.548980][ T9454] RAX: 000000000000000b RBX: ffff88802ceb9e00 RCX: 0000000000000000 [ 172.560376][ T9813] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1109'. [ 172.562634][ T9454] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 172.579430][ T9454] RBP: ffffc9000b7f7928 R08: ffffffff8f8794c3 R09: 1ffffffff1f0f298 [ 172.589032][ T9454] R10: dffffc0000000000 R11: fffffbfff1f0f299 R12: 0000000000000000 [ 172.597253][ T9454] R13: 1ffff1100639fa8c R14: ffff888031cfd460 R15: dffffc0000000000 [ 172.605329][ T9454] FS: 0000000000000000(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 172.615164][ T9454] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.622199][ T9454] CR2: 00007f651a8f5e9c CR3: 0000000061c3e000 CR4: 00000000003526f0 [ 172.630447][ T9454] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 172.638619][ T9454] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 172.647446][ T9454] Kernel panic - not syncing: Fatal exception [ 172.653761][ T9454] Kernel Offset: disabled [ 172.658077][ T9454] Rebooting in 86400 seconds..