last executing test programs: 4m33.749220296s ago: executing program 0 (id=171): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(r4, 0x4010744d, 0x20000000) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x3, 0x3], 0x0, [0x8, 0x4, 0x0, 0x10, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x8, 0x0, 0x0, 0x0, 0x8a]}}]}}]}, 0x8c}}, 0x0) 4m33.505982888s ago: executing program 2 (id=174): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, &(0x7f0000000040)) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="08000517020000002cfec8542de6537856305059ee7c9a3f22d279e9e1a93cce438a1737c3a2c26b80da0964da599f50bdd3cf7bc39a8cba76f48b2e0aa7214b6165e276eaa74c8276d352a5c257fd9af9c98e45c3b000843262e7458fb41a13c19ace773d0cced3da44638218ba761a8a2d18bfc9df6b9ef7a8706180"], 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f00000001c0)=0x8, 0x4) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, 0x0, 0x18}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r7) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ZERO(r8, 0x0, 0x48f, &(0x7f00000000c0)={0x0, @empty, 0x0, 0x0, 'sed\x00'}, 0x2c) (async) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000005f80)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000005f40)={&(0x7f0000003a00)={0x64, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0x1a, 0x1, 'blkio.bfq.io_serviced\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x64}, 0x1, 0x0, 0x0, 0x48080}, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000005fc0)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, 0x0, &(0x7f0000001080)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, 0x0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000240)=0x7, 0x4) (async) recvmmsg(r0, &(0x7f0000005c80)=[{{&(0x7f00000002c0)=@generic, 0x80, &(0x7f0000000840)=[{&(0x7f0000000480)=""/175, 0xaf}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000540)=""/133, 0x85}, {&(0x7f0000000600)=""/90, 0x5a}, {&(0x7f0000000680)=""/58, 0x3a}, {&(0x7f00000006c0)=""/175, 0xaf}, {&(0x7f0000000780)=""/142, 0x8e}], 0x7, &(0x7f00000008c0)=""/134, 0x86}}, {{&(0x7f0000000980)=@isdn, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000a00)=""/201, 0xc9}, {&(0x7f0000000b00)=""/20, 0x14}, {&(0x7f0000000b40)=""/64, 0x40}, {&(0x7f0000000b80)=""/222, 0xde}, {&(0x7f0000000c80)=""/97, 0x61}, {&(0x7f0000000d00)=""/6, 0x6}, {&(0x7f0000000d40)=""/25, 0x19}, {&(0x7f0000000dc0)=""/224, 0xe0}, {&(0x7f0000000ec0)=""/240, 0xf0}], 0x9}, 0x4}, {{&(0x7f00000010c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001140)=""/220, 0xdc}], 0x1, &(0x7f0000001280)=""/212, 0xd4}, 0x9d}, {{&(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001400)=""/211, 0xd3}, {&(0x7f0000001500)}], 0x2}, 0x2}, {{&(0x7f0000001580)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002900)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/16, 0x10}, {&(0x7f0000002640)=""/31, 0x1f}, {&(0x7f0000002680)=""/30, 0x1e}, {&(0x7f00000026c0)=""/106, 0x6a}, {&(0x7f0000002740)=""/240, 0xf0}, {&(0x7f0000002840)=""/176, 0xb0}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x8, &(0x7f0000005ec0)=""/72, 0x48}, 0x8}, {{&(0x7f0000003a80)=@isdn, 0x80, &(0x7f0000004e40)=[{&(0x7f0000003b00)=""/192, 0xc0}, {&(0x7f0000002980)=""/23, 0x17}, {&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/40, 0x28}, {&(0x7f0000004c00)=""/231, 0xe7}, {&(0x7f0000004d00)=""/177, 0xb1}, {&(0x7f0000004dc0)=""/94, 0x5e}], 0x7, &(0x7f0000004ec0)=""/39, 0x27}, 0x401}, {{&(0x7f0000004f00)=@hci, 0x80, &(0x7f0000005300)=[{&(0x7f0000004f80)=""/251, 0xfb}, {&(0x7f0000005080)=""/127, 0x7f}, {&(0x7f0000005100)=""/102, 0x66}, {&(0x7f0000005180)=""/231, 0xe7}, {&(0x7f0000005280)=""/120, 0x78}], 0x5, &(0x7f0000005380)=""/215, 0xd7}, 0x400}, {{&(0x7f0000005480)=@caif=@util, 0x80, &(0x7f0000005780)=[{&(0x7f0000005500)=""/119, 0x77}, {&(0x7f0000005580)=""/198, 0xc6}, {&(0x7f0000005680)=""/45, 0x2d}, {&(0x7f00000056c0)=""/176, 0xb0}], 0x4}, 0x6}, {{0x0, 0x0, &(0x7f0000005b40)=[{&(0x7f00000057c0)=""/107, 0x6b}, {&(0x7f0000005840)=""/20, 0x14}, {&(0x7f0000005880)=""/26, 0x1a}, {&(0x7f00000058c0)=""/70, 0x46}, {&(0x7f0000005940)=""/219, 0xdb}, {&(0x7f0000005a40)=""/223, 0xdf}], 0x6, &(0x7f0000005bc0)=""/177, 0xb1}, 0x6}], 0x9, 0x0, 0x0) 4m33.451671643s ago: executing program 0 (id=175): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xffe}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x400}, @NFTA_QUEUE_FLAGS={0x6}]}}}]}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) 4m33.344133593s ago: executing program 1 (id=176): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0000f6ff00a9343ce6457bd1575b783b3a060000000000000071b8b2cb4149c9d27f7a7caadcdb6fd864d6f6be001b5cd8d04fb1fc133652a1fb5c14088c13c0a7a731e3d29835760f32b5be9ed2ac62", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c0001800800010003000100200001"], 0x44}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af80000000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4m33.321065929s ago: executing program 1 (id=177): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x8001, 0x4, 0x0, 0x1e4c, 0x7, 0x0, [{0x5, 0x6, 0x589, '\x00', 0x3304}, {0x8, 0x6, 0x1, '\x00', 0x106}, {0x3, 0xfffffffffffffff6, 0x970, '\x00', 0x2000}, {0x8, 0x200000000000, 0x2, '\x00', 0x100}, {0x9, 0x6, 0x3, '\x00', 0x1002}, {0x5, 0x7, 0x8001}, {0x1, 0xffffffffffff7fff, 0x5, '\x00', 0x1101}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000abb0000000000000073013b20ec1b2ced33c69d7ff78b25000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m33.251956426s ago: executing program 2 (id=178): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@RTM_DELMDB={0x38, 0x55, 0x701, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x2002, {@in6_addr=@loopback}}}]}, 0x38}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf253f00008008000300", @ANYRES32=r4, @ANYBLOB="20005e8004000100080005005b000000080006000200000008000700ad040000"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x5765, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map=r6, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x20, r5, 0x2, 0x2, 0x0, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x200040d0}, 0x5) 4m33.121515137s ago: executing program 1 (id=181): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611200000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x7c}}, 0x0) 4m33.099330677s ago: executing program 2 (id=182): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080)=0x2, 0x4) r1 = accept4(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80, 0x80800) setsockopt$inet6_dccp_int(r1, 0x21, 0x3, &(0x7f0000000180)=0x1000, 0x4) (async) setsockopt$inet6_dccp_int(r1, 0x21, 0x3, &(0x7f0000000180)=0x1000, 0x4) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000001c0)=@int=0x800, 0x4) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000240)=0xffffffffffffff7f, 0x12) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000280)={0x0, 0x3}) r4 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r4, &(0x7f0000000640)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)=""/246, 0xf6}, {&(0x7f0000000480)=""/12, 0xc}, {&(0x7f00000004c0)=""/61, 0x3d}], 0x3, &(0x7f0000000540)=""/250, 0xfa}, 0x2) (async) recvmsg$kcm(r4, &(0x7f0000000640)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)=""/246, 0xf6}, {&(0x7f0000000480)=""/12, 0xc}, {&(0x7f00000004c0)=""/61, 0x3d}], 0x3, &(0x7f0000000540)=""/250, 0xfa}, 0x2) pipe(&(0x7f0000000680)) (async) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, r0, 0x4, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, r0, 0x4, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x61, 0x34b90f749ef983ed, 0x2e, 0x2e, 0x0, 0x0]}}, &(0x7f0000000940)=""/25, 0x2c, 0x19, 0x1, 0xffffffff, 0x10000, @value}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r3, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000a40)=[0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0], 0x0, 0x72, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x92, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001f00)={0x11, 0x3, &(0x7f0000000d40)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0x6, 0xa, 0xb, 0xfffffffffffffffc, 0x1}, @generic={0xf, 0x1, 0x5, 0x1b6, 0x1}], &(0x7f0000000d80)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000dc0)=""/4096, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001dc0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001e00)={0x5, 0x6, 0x5, 0xc}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001e40)=[0xffffffffffffffff], &(0x7f0000001e80)=[{0x0, 0x1, 0x6, 0xb}, {0x3, 0x2, 0x7, 0x4}, {0x5, 0x1, 0x0, 0x7}, {0x2, 0x5, 0xa, 0x3}, {0x2, 0x1, 0x6, 0x7}, {0x0, 0x4, 0x6, 0x2}, {0x4, 0x4, 0xc, 0x8}, {0x5, 0x3, 0x0, 0x2}], 0x10, 0xffff, @void, @value}, 0x94) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001fc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002040)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002040)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000020c0)={0x0, 0x4, 0x18}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000002100)=@base={0x10, 0x2, 0x1, 0x1, 0x22200, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000002100)=@base={0x10, 0x2, 0x1, 0x1, 0x22200, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002180), &(0x7f00000021c0)}, 0x20) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=@base={0x19, 0x3, 0xff, 0xffffff00, 0x442a0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002300)={0x14, 0x1c, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbe, 0x0, 0x0, 0x0, 0x17f}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x0, 0x4, 0x0, 0xb, 0xfffffffffffffffe}, @map_val={0x18, 0x4, 0x2, 0x0, r7}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @jmp={0x5, 0x0, 0x7, 0xb, 0x3, 0x6, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='GPL\x00', 0xb, 0x16, &(0x7f0000000880)=""/22, 0x41100, 0x28, '\x00', r8, @fallback=0x15, r9, 0x8, &(0x7f00000009c0)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, r10, r11, 0x0, &(0x7f00000022c0)=[r12, r13, r14, r15, r16, r17], 0x0, 0x10, 0x1, @void, @value}, 0x94) setsockopt$sock_int(r6, 0x1, 0xa0beb2f12648de80, &(0x7f00000023c0)=0x1, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0xa0beb2f12648de80, &(0x7f00000023c0)=0x1, 0x4) socket$inet6_dccp(0xa, 0x6, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000002480)={'ip6gre0\x00', &(0x7f0000002400)={'syztnl2\x00', r8, 0x4, 0xf8, 0xbd, 0x5, 0x31, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x700, 0x8, 0x2, 0x2}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000002480)={'ip6gre0\x00', &(0x7f0000002400)={'syztnl2\x00', r8, 0x4, 0xf8, 0xbd, 0x5, 0x31, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x700, 0x8, 0x2, 0x2}}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x50010, r15, 0xbc43a000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000002540)={0x0, 0x19, "ea95104ef3351be5f63c729fda39fcc2422b2d01dd8a29d473"}, &(0x7f0000002580)=0x21) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000002540)={0x0, 0x19, "ea95104ef3351be5f63c729fda39fcc2422b2d01dd8a29d473"}, &(0x7f0000002580)=0x21) 4m33.075857513s ago: executing program 0 (id=183): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="400000002c0001000000000000000000040000802b001a80"], 0x40}], 0x1}, 0x24000800) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x6, 0x9, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}) 4m32.974519022s ago: executing program 1 (id=184): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000300)="5bb09bfee0d8c70c3c2bebd2c347d63b3995caa85b294165f2a878bf68dacb12c695bad26772e9a08ba6e7f2cbfc4f294a2a45a461b0717b85b9fe43f86ba235748f444946", 0x45, 0x4800, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @local, 0x1}, 0x1c) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x31) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m32.855451291s ago: executing program 0 (id=186): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1, @ANYRES32=r0, @ANYRES16=r1], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m32.723599548s ago: executing program 2 (id=187): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x101) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 4m32.715632059s ago: executing program 0 (id=189): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000500)=r2, 0x4) epoll_create1(0x0) close(r3) r4 = socket(0xa, 0x2, 0x3a) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa) setsockopt$MRT6_DONE(r4, 0x29, 0xc9, 0x12, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4m32.631820308s ago: executing program 1 (id=190): socketpair(0x22, 0x800, 0x5, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x2c, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x10}]}]}, 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@multicast1}, {@in=@multicast2, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x17, {0x0, 0x4e22, 0x0, @in=@multicast1}}]}, 0x154}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYRESHEX=r5, @ANYRES32=r7, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r4], 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x84, r1, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xfffffffc, 0x74}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xd6d}, @NL80211_ATTR_PMKID={0x14, 0x55, "34f4e3801bb5b0a089c8e72c9b014c3d"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_PMKID={0x14, 0x55, "69ef3a54c80dbbfb4431e890d0792150"}, @NL80211_ATTR_PMKID={0x14, 0x55, "93ffa1e427850f9eb9bc9a87749e8fad"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x104}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xbe1}]}, 0x84}, 0x1, 0x0, 0x0, 0x81}, 0x20044004) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r8, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r8, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) unshare(0x26020480) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r10) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r12, 0x1, 0x4, &(0x7f0000000180)=0x2, 0x4) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x100}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x21}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x2c, r11, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x10, 0x17, {0xe, 0x6, @l2={'ib', 0x3a, '\x00'}}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0x138, 0x30, 0x25, 0x0, 0x0, {}, [{0x124, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x138}}, 0x0) r14 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="4c00000014006b03000000d86e6c1d00104c250002000f00000017d34460bc24feb556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) 4m32.63116301s ago: executing program 2 (id=191): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) recvmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000140)=@qipcrtr, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/193, 0xc1}, {&(0x7f00000002c0)=""/117, 0x75}, {&(0x7f0000000440)=""/113, 0x71}, {&(0x7f00000009c0)=""/236, 0xec}, {&(0x7f0000000680)=""/178, 0xb2}, {&(0x7f0000000ac0)=""/200, 0xc8}], 0x6}, 0x3}, {{&(0x7f0000000bc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000840)=[{&(0x7f0000001080)=""/155}], 0x0, &(0x7f0000001000)=""/120, 0x78}, 0x8f}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/15, 0xf}, {&(0x7f0000000cc0)=""/248, 0xc9}, {&(0x7f00000004c0)=""/56, 0x38}, {&(0x7f0000000940)=""/26, 0x1a}], 0x5, &(0x7f0000000e40)=""/149, 0x95}, 0x4}], 0x3, 0x2020, &(0x7f0000000fc0)={0x77359400}) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="b4f6c2150641a6f6cb116365b5bdef00000000000000", @ANYRESDEC, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000100003042abd70009da1d2b900000004", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b0001006272696467650000400002800800050000000000050029000100000006002700040000000c00220006000000000000000c002100690e0000000000000c002100"], 0x70}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=';', 0x1}], 0x1}, 0x24008011) (async) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64) write$tun(r6, &(0x7f0000000040)={@val, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x1}, {0x8100, 0x7, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x64, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x4e22, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffa888}}}}}}}, 0x46) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r5}, 0x20) (async) r9 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000740), 0x80000) setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, &(0x7f0000000780)={0x7f, 0x10}, 0x2) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000400000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7030000000a0000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x5, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (rerun: 32) 4m32.03188621s ago: executing program 1 (id=197): syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d285b6da3b00dc44c6910c1d66f8841a"}, @md5sig={0x13, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004dc0)={0x6, 0x5, &(0x7f0000004a80)=@raw=[@tail_call], &(0x7f0000004b80)='syzkaller\x00', 0x0, 0xed, &(0x7f0000004bc0)=""/237, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x90) (async) unshare(0x2c060000) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20) (async) sendmmsg$alg(r0, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="febbcec27c309941f63f71cd6d2c0f8aa44ab0abc0889522b7b0186711e85e22e6fe565a0931210270f2ca2ec3e5492e4a54b7061c015cf446fe910383c67ce56109c5677891971ae3a8eede581e399c1fa25fd406cfe137c28a016d6cf76f65e118c757c51b87a4633d292dec02c70f42f94ff9cb6ddb69277278916c9c8010e5b289361d85a08f85bbe5ada7d50eb680e3a45d629f6e586bdae414f1200c4fe015af", 0xa3}, {&(0x7f0000000280)="67acb99e7f1d6c122ec5772482ed9741ee96978d5f3aca7e0c5f7d829a836dccc2f6dbe53431c855a847a3859fb1e69f222e3b2ac8de38dbae10182e345ddee4d2ce8d446244e8fd22a1690029460725d4bbcb233e270b1dccadef857eb92e82aade4b501a4d97766b01fa3829556b58fb4a3d1a3e9ea8fa82d9bd13d702dbb2f82a8f94ce8bff8e45d8a4b0e4fb3b2206fd42d9aeab65", 0x97}, {&(0x7f00000000c0)="14fc16d222fd62b6ef790f4c1dbb61361a8aa789ad133d43149e525930c22aa6102314935f1d2aea8f5ce3a22a94b1dcf4f12e36143f665e2cfefb2f5d9d93ca46a3cbbecf7c698c99a378eb1ff698e77ea32b091fc3a8c2de7a40", 0x5b}, {&(0x7f00000005c0)="a93f6c4e7fd40903cfeb868a3ee11f2cd3051a21084f002ac2fb3830f95a6d1b91f297fe3ddc0ffc56d492f55127c3a6c1bd324177f66b50a804abcd421685ebf6f5dace63e5ee32a219249a65b667ddab152dba2a3f183f307e0e4878f253bc7da45f038b859d01ea48e6b32eed83636d3a96289be6bde14e0dea65612908644eeac5cce340df7a0f683c91cd7169f8775f261e17770ca6cafd84c4452a5d5430797ce9c99b6aadcd4b55e1ab7fe8182009396933a85c5f3aacab731469c5415f5ff2e84c23b946543483866bbf86404ccef0c1cfd51cf440e19ba7c4f58b89b797da4b4b37683641d651f62dbf15a7cbde1efdaa", 0xf5}], 0x4, 0x0, 0x0, 0x24000050}, {0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)="a4ea3b927587f7abd98f91b41ee279ce6b87ce2638615ee65c342ad3ece6f8084aeb667d470b87bdc344b6a670bb77947b0be02dc0917beaec94a177d87e2cc5855c8b0df309ae57d6732c8b2add68a9d780ece91d8e65e5058282f5c9e1f122c78c9781d646eef86c90c2ebbd31ab08b280d72af31e962a7fb0acf270657ec9df01a94b92", 0x85}, {&(0x7f00000003c0)="4c1809908d", 0x5}], 0x2, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x48, 0x117, 0x2, 0x2e, "287ff69a79a530d1c13e68986e9409b79db4c5108fb822622b073d85fdc6c0ace031425a981b3db87cb491924ec1"}, @iv={0xd0, 0x117, 0x2, 0xb9, "081909e2c8c4aa87141fd0756932c483d0625c47be46875a6f3383af00a2926e5803dfdb35d0cde522e15f289a77c4b713d1f68498ccb8b7d8faf32abd26895bd9dba2ecf65f81a3ced5caef582a223f8a6c86a64d198e0dd2e6fa253490bb83f0fe7177b7a5c784b3770020bff7a6b35c2c34499cc5975824cebea7012276e095d40dc5585336c95547119731eace83a97947ad322c69d49a7b241916e9d200967419f306be001f1d612a77276db29e2d4df42c342717595b"}, @op={0x18, 0x117, 0x3, 0x1}], 0x148, 0x20000000}], 0x2, 0x8000) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)) (async) accept4(r1, &(0x7f0000000900)=@ethernet={0x0, @broadcast}, &(0x7f0000000980)=0x80, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000002280)={@private0, 0x200000, 0x2, 0x0, 0x0, 0x96}, 0x20) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r4, &(0x7f00000000c0)}, 0x20) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x402e78}, [@printk={@llx, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfe7, &(0x7f0000001e00)=""/4071, 0x41100, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) unshare(0xc020400) 4m32.031212678s ago: executing program 0 (id=198): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x82c}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40894) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000e00005800c00028008000100000000000c00028000000100000000004c00028008000100000000000800010000000000080003000000000008000200000000000000020000000000080004000000000000000400000000000800040000000000080001"], 0x23c}}, 0x4895) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250400000020000a"], 0xc0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x82c}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40894) (async) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000e00005800c00028008000100000000000c00028000000100000000004c00028008000100000000000800010000000000080003000000000008000200000000000000020000000000080004000000000000000400000000000800040000000000080001"], 0x23c}}, 0x4895) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250400000020000a"], 0xc0}}, 0x0) (async) 4m31.582626083s ago: executing program 32 (id=197): syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d285b6da3b00dc44c6910c1d66f8841a"}, @md5sig={0x13, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004dc0)={0x6, 0x5, &(0x7f0000004a80)=@raw=[@tail_call], &(0x7f0000004b80)='syzkaller\x00', 0x0, 0xed, &(0x7f0000004bc0)=""/237, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x90) (async) unshare(0x2c060000) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20) (async) sendmmsg$alg(r0, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="febbcec27c309941f63f71cd6d2c0f8aa44ab0abc0889522b7b0186711e85e22e6fe565a0931210270f2ca2ec3e5492e4a54b7061c015cf446fe910383c67ce56109c5677891971ae3a8eede581e399c1fa25fd406cfe137c28a016d6cf76f65e118c757c51b87a4633d292dec02c70f42f94ff9cb6ddb69277278916c9c8010e5b289361d85a08f85bbe5ada7d50eb680e3a45d629f6e586bdae414f1200c4fe015af", 0xa3}, {&(0x7f0000000280)="67acb99e7f1d6c122ec5772482ed9741ee96978d5f3aca7e0c5f7d829a836dccc2f6dbe53431c855a847a3859fb1e69f222e3b2ac8de38dbae10182e345ddee4d2ce8d446244e8fd22a1690029460725d4bbcb233e270b1dccadef857eb92e82aade4b501a4d97766b01fa3829556b58fb4a3d1a3e9ea8fa82d9bd13d702dbb2f82a8f94ce8bff8e45d8a4b0e4fb3b2206fd42d9aeab65", 0x97}, {&(0x7f00000000c0)="14fc16d222fd62b6ef790f4c1dbb61361a8aa789ad133d43149e525930c22aa6102314935f1d2aea8f5ce3a22a94b1dcf4f12e36143f665e2cfefb2f5d9d93ca46a3cbbecf7c698c99a378eb1ff698e77ea32b091fc3a8c2de7a40", 0x5b}, {&(0x7f00000005c0)="a93f6c4e7fd40903cfeb868a3ee11f2cd3051a21084f002ac2fb3830f95a6d1b91f297fe3ddc0ffc56d492f55127c3a6c1bd324177f66b50a804abcd421685ebf6f5dace63e5ee32a219249a65b667ddab152dba2a3f183f307e0e4878f253bc7da45f038b859d01ea48e6b32eed83636d3a96289be6bde14e0dea65612908644eeac5cce340df7a0f683c91cd7169f8775f261e17770ca6cafd84c4452a5d5430797ce9c99b6aadcd4b55e1ab7fe8182009396933a85c5f3aacab731469c5415f5ff2e84c23b946543483866bbf86404ccef0c1cfd51cf440e19ba7c4f58b89b797da4b4b37683641d651f62dbf15a7cbde1efdaa", 0xf5}], 0x4, 0x0, 0x0, 0x24000050}, {0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)="a4ea3b927587f7abd98f91b41ee279ce6b87ce2638615ee65c342ad3ece6f8084aeb667d470b87bdc344b6a670bb77947b0be02dc0917beaec94a177d87e2cc5855c8b0df309ae57d6732c8b2add68a9d780ece91d8e65e5058282f5c9e1f122c78c9781d646eef86c90c2ebbd31ab08b280d72af31e962a7fb0acf270657ec9df01a94b92", 0x85}, {&(0x7f00000003c0)="4c1809908d", 0x5}], 0x2, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x48, 0x117, 0x2, 0x2e, "287ff69a79a530d1c13e68986e9409b79db4c5108fb822622b073d85fdc6c0ace031425a981b3db87cb491924ec1"}, @iv={0xd0, 0x117, 0x2, 0xb9, "081909e2c8c4aa87141fd0756932c483d0625c47be46875a6f3383af00a2926e5803dfdb35d0cde522e15f289a77c4b713d1f68498ccb8b7d8faf32abd26895bd9dba2ecf65f81a3ced5caef582a223f8a6c86a64d198e0dd2e6fa253490bb83f0fe7177b7a5c784b3770020bff7a6b35c2c34499cc5975824cebea7012276e095d40dc5585336c95547119731eace83a97947ad322c69d49a7b241916e9d200967419f306be001f1d612a77276db29e2d4df42c342717595b"}, @op={0x18, 0x117, 0x3, 0x1}], 0x148, 0x20000000}], 0x2, 0x8000) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)) (async) accept4(r1, &(0x7f0000000900)=@ethernet={0x0, @broadcast}, &(0x7f0000000980)=0x80, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000002280)={@private0, 0x200000, 0x2, 0x0, 0x0, 0x96}, 0x20) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r4, &(0x7f00000000c0)}, 0x20) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x402e78}, [@printk={@llx, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfe7, &(0x7f0000001e00)=""/4071, 0x41100, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) unshare(0xc020400) 4m31.520388775s ago: executing program 33 (id=198): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x82c}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40894) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000e00005800c00028008000100000000000c00028000000100000000004c00028008000100000000000800010000000000080003000000000008000200000000000000020000000000080004000000000000000400000000000800040000000000080001"], 0x23c}}, 0x4895) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250400000020000a"], 0xc0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x82c}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40894) (async) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000e00005800c00028008000100000000000c00028000000100000000004c00028008000100000000000800010000000000080003000000000008000200000000000000020000000000080004000000000000000400000000000800040000000000080001"], 0x23c}}, 0x4895) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250400000020000a"], 0xc0}}, 0x0) (async) 4m31.482970672s ago: executing program 2 (id=201): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xc, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc081}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x1, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0xffffffffffffff7a}}]}, 0x30}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$sock(r4, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)='N', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)='If', 0x2}, {0x0}], 0x2}}], 0x2, 0x8004) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x2a, 0x2, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xc, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc081}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x1, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0xffffffffffffff7a}}]}, 0x30}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) (async) accept4(r3, 0x0, 0x0, 0x800) (async) sendmmsg$sock(r4, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)='N', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)='If', 0x2}, {0x0}], 0x2}}], 0x2, 0x8004) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 4m31.41651788s ago: executing program 34 (id=201): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xc, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc081}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x1, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0xffffffffffffff7a}}]}, 0x30}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$sock(r4, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)='N', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)='If', 0x2}, {0x0}], 0x2}}], 0x2, 0x8004) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x2a, 0x2, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xc, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc081}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x1, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0xffffffffffffff7a}}]}, 0x30}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) (async) accept4(r3, 0x0, 0x0, 0x800) (async) sendmmsg$sock(r4, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)='N', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)='If', 0x2}, {0x0}], 0x2}}], 0x2, 0x8004) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 4.662468788s ago: executing program 6 (id=2967): recvmmsg(0xffffffffffffffff, &(0x7f0000002680)=[{{&(0x7f0000000080)=@alg, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/38, 0x26}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f0000000240)=""/139, 0x8b}, {&(0x7f0000000300)=""/21, 0x15}, {&(0x7f0000000340)=""/104, 0x68}], 0x7}, 0x4}, {{&(0x7f0000000440)=@alg, 0x80, &(0x7f0000001a80)=[{&(0x7f00000004c0)=""/54, 0x36}, {&(0x7f00000027c0)=""/222, 0xde}, {&(0x7f0000000500)=""/50, 0x32}, {&(0x7f00000016c0)=""/234, 0xea}, {&(0x7f00000017c0)=""/131, 0x83}, {&(0x7f0000001880)=""/127, 0x7f}, {&(0x7f0000001900)=""/227, 0xe3}, {&(0x7f0000001a00)=""/124, 0x7c}], 0x8, &(0x7f0000001b00)=""/239, 0xef}, 0x9}, {{&(0x7f0000001c00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001c80)=""/66, 0x42}, {&(0x7f0000001d00)=""/244, 0xf4}, {&(0x7f0000001e00)=""/168, 0xa8}, {&(0x7f0000001ec0)=""/131, 0x83}, {&(0x7f0000001f80)=""/83, 0x53}, {&(0x7f0000002000)=""/80, 0x50}, {&(0x7f0000002080)=""/211, 0xd3}, {&(0x7f0000002180)=""/132, 0x84}, {&(0x7f0000002240)=""/83, 0x53}], 0x9, &(0x7f0000002380)=""/196, 0xc4}, 0x4}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002480)=""/208, 0xd0}, {&(0x7f0000002580)=""/200, 0xc8}], 0x2}, 0x81}], 0x4, 0x0, &(0x7f0000002780)={0x77359400}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000001f40)=""/4089, 0x3e, 0xff9, 0xa, 0x0, 0x0, @void, @value}, 0x28) syz_emit_ethernet(0x3b, &(0x7f0000000040)={@random="9e717a7fd66c", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @val={@val={0x88a8, 0x5, 0x0, 0x2}}, {@arp={0x806, @generic={0x325, 0x9200, 0x6, 0xc, 0x9, @empty, "60be5ef932b7405243e6625b", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, "10a2bff396"}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), r0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000001e008d2af6ffffff000000000a0000", @ANYBLOB="00df"], 0x30}}, 0x4044) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xf, @mcast1, 0x520f}, 0x1c) 4.431915774s ago: executing program 6 (id=2971): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec42fbfe0ee8528500000075000000a70000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800120000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) epoll_create1(0x0) (async) r3 = epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) (async) r5 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f00000000c0)='FREEZING\x00', 0x9) close(r4) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa0028000}) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r6, 0x103, 0x2, &(0x7f0000000080), 0x4) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000040)={0x20, 0x1402, 0x1, 0x70bd21, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x7, 0x8000, 0x1, 0x4, {{0xf, 0x4, 0x1, 0x3f, 0x3c, 0x66, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010102, @local, {[@timestamp_addr={0x44, 0x14, 0x6e, 0x1, 0x3, [{@private=0xa010102, 0x7}, {@local, 0x94}]}, @end, @lsrr={0x83, 0x13, 0xee, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x7, 0x8000, 0x1, 0x4, {{0xf, 0x4, 0x1, 0x3f, 0x3c, 0x66, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010102, @local, {[@timestamp_addr={0x44, 0x14, 0x6e, 0x1, 0x3, [{@private=0xa010102, 0x7}, {@local, 0x94}]}, @end, @lsrr={0x83, 0x13, 0xee, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="920000000000000000", @ANYRES16=r7, @ANYBLOB="080228bd7000fcdbdf25090000005c000180140002007369743000000000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="1400020070696d367265673000000000000000001400020076657468315f746f5f627269646765001400020076657468305f746f5f7465616d000000"], 0x70}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000020) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r10) 4.282225736s ago: executing program 4 (id=2973): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', "bcbd13b603e0f7b3bfa8909ef43c0aeb", '\x00', "b08068ebce17ab00"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket(0x3, 0x4, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$phonet(0x23, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000040000000050900010073797a31000000004c000000050a01160000100000000000010020000c00024000000000000000010900010073797a3100000000200004801400033345b89bfbaf00777b5e406d0fab92d26a63ab522ea949a724705465c11a"], 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmmsg$inet6(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000040) 4.223335062s ago: executing program 6 (id=2975): r0 = socket(0x2e, 0x6, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x84, &(0x7f00000001c0)={0x0, 0x0, 0xa, 0x800, 0x0, 0x0, 0x0, 0x4, {0x0, @in6={{0xa, 0x0, 0x0, @mcast2, 0x7}}, 0x20002, 0x6, 0x0, 0xfffffffd, 0xfffffff8}}, &(0x7f0000000080)=0xb0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r2, 0x7}, &(0x7f0000000100)=0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) r7 = socket(0x1, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x2, 0x20004, 0x12, 0x0, 0xffffffffffffffff, 0xb9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r7}, 0x20) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x41}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340016008fb4ef722bad965c21c27b76a7", @ANYRES16=r9, @ANYBLOB="040000002000ffdbdf251400000018000180140002006e657464657673696d300000000000000800040003000000"], 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x4000) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0xe, 0x4, 0x2c8, 0xffffffff, 0x0, 0xe8, 0xe8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan0\x00', 'veth0_to_team\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x50}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ip={@loopback, @local, 0x0, 0x0, 'sit0\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r10 = socket$inet_sctp(0x2, 0x5, 0x84) close(r10) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r4) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=r3, @ANYRES16=r11, @ANYRESHEX=r9], 0x60}, 0x1, 0x0, 0x0, 0x4000081}, 0x6008090) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000440)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000680)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000a80)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r14, @ANYBLOB="18012cbd7000fbdbdf250200000054000180080003007f0000010500020003000000060001000a000000060005004e20000014000400fe8000000000000000000000000000bb1400040020010000000000000000000000000002060005004e20000020000680060001000a00000014000400fc0200000000000000000000000000c304000680080004000600000038000180080006000400000014000400fe8000000000000000000000000000bb08000300ac1414aa08000300ffffffff05000200100000000801000000000000"], 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$inet_sctp(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='l', 0x1}], 0x1, &(0x7f00000005c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x5, 0x200000b, r12}}], 0x20, 0x2000000}, 0x6) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r12, 0x6}, &(0x7f0000000180)=0x8) 4.104205483s ago: executing program 4 (id=2978): unshare(0x6a040000) unshare(0xcd558cf759cef191) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) (async) r0 = socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x2000c046, &(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x4, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @rand_addr=0x64010100}, 0x10) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) (async) r3 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) (async) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffff08004500005c0000000000019078ac1e0001ac1414aa05009078000000004000fa00020000000002000000000000ac1414bb940400008625000000000010f79eb4cf020000008fc15a45b5b1000f749018c9a54b61394327f115350000006b35bfba3dd41d3da17e49e68d5ffba8a21288e385921a4b7de0b9ea3d90d7917f8e4830"], 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000900)={&(0x7f0000000180)={0xa, 0x4e22, 0x80000000, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000029000000050000000002010200080000fe8000000000000000000044000000aa"], 0x28}, 0x20004004) 4.050337033s ago: executing program 7 (id=2979): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x3ed, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x94, 0x18, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x3ea}}, 0xdc}}, 0x41) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) recvmmsg(r3, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001d80)=""/45, 0x2d}], 0x1}}], 0x1, 0x0, 0x0) bind$inet(r1, &(0x7f0000000c80)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) 3.939087087s ago: executing program 3 (id=2980): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xf7, &(0x7f0000000000), &(0x7f0000000080)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x1e, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x20008050) unshare(0x2000400) r2 = socket(0x23, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x0, @host}, 0x10) close(0x3) 3.8558778s ago: executing program 7 (id=2981): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1f4, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x19c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x180, 0x6, [@m_connmark={0x88, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xfffffffe}}}]}, {0x1e, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df71"}, {0xc}, {0xc}}}, @m_nat={0xf4, 0x1c, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xcd2, 0x2, 0x1, 0x5ac9178a}, @broadcast, @local, 0xffffff00, 0x1}}]}, {0xa1, 0x6, "d0f346aeaa9620720495b4b930720d41355c68330b9be57a9b3c056d5fb75a8b4dc35bdef68d86987108831a763cc38a2a838ebc3d93c94ad04f694fd2b271af185ba4890394f622f28adaba3bc3c735136c58cc6703df0eacc72149acd40ad88cc6c25ad179537d30d2379af788b3a024d4426a7d444fd9b14142d983935638cf31f6d1cc1492e1e3d741f0ef371e4808009a9e64fa5a6a3dadbedfc9"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x1f4}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1f4, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x19c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x180, 0x6, [@m_connmark={0x88, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xfffffffe}}}]}, {0x1e, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df71"}, {0xc}, {0xc}}}, @m_nat={0xf4, 0x1c, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xcd2, 0x2, 0x1, 0x5ac9178a}, @broadcast, @local, 0xffffff00, 0x1}}]}, {0xa1, 0x6, "d0f346aeaa9620720495b4b930720d41355c68330b9be57a9b3c056d5fb75a8b4dc35bdef68d86987108831a763cc38a2a838ebc3d93c94ad04f694fd2b271af185ba4890394f622f28adaba3bc3c735136c58cc6703df0eacc72149acd40ad88cc6c25ad179537d30d2379af788b3a024d4426a7d444fd9b14142d983935638cf31f6d1cc1492e1e3d741f0ef371e4808009a9e64fa5a6a3dadbedfc9"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x1f4}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000000)="7f07", 0x2}}, 0x0) (async) sendmsg$can_j1939(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000000)="7f07", 0x2}}, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000), 0x8) sendto$inet(r1, &(0x7f0000000040)="6213", 0x2, 0x200000d0, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 3.834417623s ago: executing program 3 (id=2982): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) socket$inet_dccp(0x2, 0x6, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) accept4(r0, &(0x7f0000000300)=@rc={0x1f, @none}, &(0x7f0000000000)=0x80, 0x80800) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022bbd7000fbdbdf25050000000800090004b190000000050007000500000005000200fb000000"], 0x2c}, 0x1, 0x0, 0x0, 0x100}, 0x4000) socket(0x1d, 0x3, 0xd0) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket$packet(0x11, 0x2, 0x300) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) socket$netlink(0x10, 0x3, 0x4) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) (async) accept4(r0, &(0x7f0000000300)=@rc={0x1f, @none}, &(0x7f0000000000)=0x80, 0x80800) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022bbd7000fbdbdf25050000000800090004b190000000050007000500000005000200fb000000"], 0x2c}, 0x1, 0x0, 0x0, 0x100}, 0x4000) (async) socket(0x1d, 0x3, 0xd0) (async) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) 3.668140742s ago: executing program 7 (id=2984): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000280)=0x80000001, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="4a7c09994f400a", 0x7}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002600)=ANY=[@ANYBLOB="1a8a00001000f5a400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e00010069703665727370616e0000000c00028006000200d0a50000"], 0x40}}, 0x0) 3.619010941s ago: executing program 3 (id=2986): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000), 0x10) (async) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) (async) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000), 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000f4ff000000000000000000001800000000000000000000000700000085100000fbffffff95"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x68, &(0x7f0000000340)=""/104, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 32) 3.356179637s ago: executing program 5 (id=2987): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x800) 3.285157707s ago: executing program 6 (id=2988): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000140)=0x81f, 0x4) sendmmsg$sock(r0, &(0x7f0000000000)=[{{&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x0, 0x0, 0x0, 0xfffd}}, 0x80, 0x0}}], 0x1, 0x20001084) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, 0x0, &(0x7f0000000380)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x4c, r3, 0x1, 0x1000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @restrict={0x4, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x30, 0x2e]}}, &(0x7f0000000500)=""/65, 0x38, 0x41, 0x0, 0x5, 0x10000, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1d, 0x0, 0x0, 0x8000, 0x24, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000620decb4825c752b00001b9af9581c7c3ce50d61086afd970900"/43], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000009c0), 0xfffffffffffffffc, 0xadb0, r5}, 0x38) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000e70000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010067656e657665300000000000000000000c000540000000000000000114000000110001"], 0x8c}}, 0x0) close(r4) 3.182177042s ago: executing program 5 (id=2989): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0xc0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @remote, 0x40}, 0x1c, 0x0}}], 0x1, 0xc0c0) 3.136187021s ago: executing program 3 (id=2990): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000280), 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @private=0xa010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) 3.121938239s ago: executing program 6 (id=2991): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000100400"/20, @ANYRES32=r2, @ANYBLOB="000000000000010020001280080001006772650014000280060010004e240000060011004e210000"], 0x40}}, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xf, 0x3, 0xffffffffffffffff, 0x1, 0x7c2}, 0x40000002}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x240400c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xfff1, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5c840}, 0x2000c005) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x7f}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x80, 0x40, 0x6, 0x8001, {{0xa, 0x4, 0x3, 0x24, 0x28, 0x65, 0x0, 0x40, 0x2f, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0x7, 0xcf, [@local]}, @end, @lsrr={0x83, 0xb, 0x67, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x700, 0x8, 0x7, 0xb23, {{0x21, 0x4, 0x1, 0x3, 0x84, 0x66, 0x0, 0x6, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @remote, {[@timestamp_addr={0x44, 0x1c, 0x91, 0x1, 0x5, [{@rand_addr=0x64010100, 0x7}, {@rand_addr=0x64010101, 0x200}, {@broadcast, 0xaf1}]}, @timestamp_prespec={0x44, 0x3c, 0x7a, 0x3, 0x0, [{@local, 0x8}, {@remote, 0x6}, {@broadcast, 0xfd}, {@remote, 0xfca2}, {@multicast1, 0x1}, {@broadcast, 0x10}, {@local, 0x5}]}, @generic={0x83, 0x5, "690aa2"}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x6c, 0x1, 0x5, [{@empty, 0x2}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x44, 0x6, 0x1, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x700, 0xa8a67647c2d68c69, 0x7, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000340)={'wg2\x00'}) socket$nl_route(0x10, 0x3, 0x0) unshare(0x28000400) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x4a301, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) unshare(0x62040200) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r12) 3.066095264s ago: executing program 5 (id=2992): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) socket$kcm(0x10, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000140), &(0x7f0000000240)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000100)=0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x20}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 2.867999716s ago: executing program 3 (id=2993): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="050000000e80006558", 0x9}, {&(0x7f0000000080)="f24bff20", 0x4}], 0x3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast1}], 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x22, &(0x7f0000000180)={@empty, @empty, @void, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @link_local, "", @remote}}}}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r8, 0x80487436, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x3ec0) close(0x3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'ip6gre0\x00', @multicast}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r11, 0x325}, 0x14}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x14) 2.816160322s ago: executing program 4 (id=2994): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x48}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@loopback, @remote, r0}, 0xc) r4 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x10000000}) 2.711656393s ago: executing program 5 (id=2995): r0 = socket(0x11, 0x3, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp={0x8, 0x300}, @timestamp, @timestamp, @timestamp], 0x20000149) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r2, 0x0, 0x8000000000000008}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) getpeername$tipc(r0, &(0x7f0000000040), &(0x7f00000001c0)=0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) 2.710319043s ago: executing program 7 (id=2996): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x4f) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc02000000000000000000000000000004001200", @ANYRES16, @ANYBLOB="0800040000000200080015"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x44, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @TCA_RATE={0x6, 0x5, {0x5c, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x2c, 0x2e, 0x1, 0x4002, 0x25dfdbfa, {0x0, 0x0, 0x0, r5, {0xfff1, 0x8}, {}, {0xa, 0x8}}, [{0x8, 0xb, 0x8e}]}, 0x2c}}, 0x4c800) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="1996a37930b5d2b5f3ef18489f6e7d1b1c56f57f78e0f4697627db7fb9e671c44d87eb747f5ebdd8a25782adcbbc91aa11637a6cf0cf81b61be68602ac47d8ef1770c0e125dfc61b6b6de8a1185aa71e678a80cd5e81b9ad4bf07207b6872a53f526ef80444cee9b8e62dcd3734bbee0fcd0687f072a9a0fb8aa376708bbfcd9e9391d9398ea01cc016696c733e7e4e988fa52021761eec2036d1ace8ad549dbdd7adc22b7cd33f27a46a5061aacfeab1beb9c7ccbd3adf8e71f18bd71e3d00133920a7005d331", 0xc7, 0x40, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0xa00}, 0x20) 648.17197ms ago: executing program 6 (id=2997): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r2, 0x0, 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, 0x0, 0x20000000}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYRES8=r3], 0xfdef) 510.225807ms ago: executing program 7 (id=2998): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x4f) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc02000000000000000000000000000004001200", @ANYRES16, @ANYBLOB="0800040000000200080015"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x44, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @TCA_RATE={0x6, 0x5, {0x5c, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x2c, 0x2e, 0x1, 0x4002, 0x25dfdbfa, {0x0, 0x0, 0x0, r5, {0xfff1, 0x8}, {}, {0xa, 0x8}}, [{0x8, 0xb, 0x8e}]}, 0x2c}}, 0x4c800) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="1996a37930b5d2b5f3ef18489f6e7d1b1c56f57f78e0f4697627db7fb9e671c44d87eb747f5ebdd8a25782adcbbc91aa11637a6cf0cf81b61be68602ac47d8ef1770c0e125dfc61b6b6de8a1185aa71e678a80cd5e81b9ad4bf07207b6872a53f526ef80444cee9b8e62dcd3734bbee0fcd0687f072a9a0fb8aa376708bbfcd9e9391d9398ea01cc016696c733e7e4e988fa52021761eec2036d1ace8ad549dbdd7adc22b7cd33f27a46a5061aacfeab1beb9c7ccbd3adf8e71f18bd71e3d00133920a7005d331", 0xc7, 0x40, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0xa00}, 0x20) 502.590578ms ago: executing program 4 (id=2999): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x0, 0xfffe}, 0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000001f40)=""/4089, 0x0, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x28) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000002a40)={0x4, {{0x2, 0x4e23, @multicast1}}}, 0x88) (async) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000002a40)={0x4, {{0x2, 0x4e23, @multicast1}}}, 0x88) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0xd, 0xfffffffffffffcd1, "b5b9f52e40b008c05cdf7bdc83e45061713d0f006e88f383cdb3acf70b150000000000000008000000000000000000"}, 0x1d) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={r2, 0x2, 0x3}, 0x8) 380.068ms ago: executing program 5 (id=3000): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x20, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001740)={0x14, 0xd, 0x6, 0x201}, 0x14}}, 0x0) 330.811433ms ago: executing program 4 (id=3001): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="15000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000500"/28], 0x48) unshare(0x20400) pipe(&(0x7f0000000100)={0xffffffffffffffff}) tee(r2, 0xffffffffffffffff, 0x3, 0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0xf, &(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000000000bf0900000000000055090100000000009500000000000000bf91000000000000f35d06b7020000000000008500000005000000b7000000000000009500"/96, @ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000017c0)={r3, 0x0, 0x17, 0xfffffeb9, &(0x7f0000000380)="e0b98f7ed3877d97ddc05be13889c46f0e0e307bc79172", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000180)=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="240000002e0001002aab70000000000008000000"], 0x24}], 0x1}, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e2000"}}}]}, 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000f3437b00001e3b"], 0x1c}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)=""/19, 0x13}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000003700)=""/4099, 0x1003}, {&(0x7f00000000c0)=""/160, 0xa0}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10000, 0x0) 189.780811ms ago: executing program 5 (id=3002): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0xc0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @remote, 0x40}, 0x1c, &(0x7f00000002c0)}}], 0x1, 0xc0c0) 149.013828ms ago: executing program 7 (id=3003): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10) r1 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) (async, rerun: 32) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x10) (async, rerun: 32) recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 143.490267ms ago: executing program 3 (id=3004): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f00000096c0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000001400)={0xe0000017}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000001c0)={0xf}) epoll_wait(r3, &(0x7f0000001940)=[{}, {}], 0x2, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000480)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private2, [@dstopts={0x0, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x4800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 0s ago: executing program 4 (id=3005): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0xffffffff, @loopback, 0x54}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x11, @rand_addr=0x64010101, 0x4e23, 0x1, 'dh\x00', 0x28, 0x7, 0x23}, 0x2c) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x28, r2, 0x221, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}}, 0x0) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) write(r0, &(0x7f0000000340)='\x00', 0xffe0) kernel console output (not intermixed with test programs): [T10162] netlink: 'syz.5.1134': attribute type 10 has an invalid length. [ 195.031984][T10166] lo speed is unknown, defaulting to 1000 [ 195.329132][T10182] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 195.338782][T10184] netlink: 'syz.7.1141': attribute type 10 has an invalid length. [ 195.508464][T10193] netem: incorrect gi model size [ 195.513830][T10193] netem: change failed [ 195.574006][T10182] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.597485][T10166] lo speed is unknown, defaulting to 1000 [ 195.617386][T10166] ip6gre0 speed is unknown, defaulting to 1000 [ 195.625153][T10190] lo speed is unknown, defaulting to 1000 [ 195.891922][T10202] IPVS: set_ctl: invalid protocol: 25965 114.121.46.101:30309 [ 196.105963][T10190] lo speed is unknown, defaulting to 1000 [ 196.141922][T10190] ip6gre0 speed is unknown, defaulting to 1000 [ 196.381339][T10214] 8021q: adding VLAN 0 to HW filter on device bond6 [ 196.439182][T10203] siw: device registration error -23 [ 196.470436][T10214] __nla_validate_parse: 7 callbacks suppressed [ 196.470459][T10214] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1146'. [ 196.500201][T10219] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1148'. [ 196.669106][T10224] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1150'. [ 196.700016][T10222] netlink: 'syz.6.1149': attribute type 1 has an invalid length. [ 196.919719][T10229] netlink: 232 bytes leftover after parsing attributes in process `syz.6.1152'. [ 197.045440][T10234] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1153'. [ 197.095286][T10234] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1153'. [ 197.333839][T10244] bond0: (slave vlan5): Opening slave failed [ 197.377930][T10246] netlink: 260 bytes leftover after parsing attributes in process `syz.7.1157'. [ 197.697145][T10257] netlink: 'syz.6.1162': attribute type 10 has an invalid length. [ 197.699530][T10256] netlink: 'syz.6.1162': attribute type 10 has an invalid length. [ 197.738251][T10257] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1162'. [ 197.747103][T10256] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1162'. [ 197.843434][T10263] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1164'. [ 198.020445][T10271] lo speed is unknown, defaulting to 1000 [ 198.271199][T10271] lo speed is unknown, defaulting to 1000 [ 198.283193][T10271] ip6gre0 speed is unknown, defaulting to 1000 [ 198.588173][T10291] syzkaller1: entered promiscuous mode [ 198.593717][T10291] syzkaller1: entered allmulticast mode [ 199.025413][T10301] lo speed is unknown, defaulting to 1000 [ 199.033667][T10304] tun0: tun_chr_ioctl cmd 35108 [ 199.432430][T10301] lo speed is unknown, defaulting to 1000 [ 199.443649][T10301] ip6gre0 speed is unknown, defaulting to 1000 [ 200.130974][T10335] lo speed is unknown, defaulting to 1000 [ 200.550200][T10335] lo speed is unknown, defaulting to 1000 [ 200.604839][T10335] ip6gre0 speed is unknown, defaulting to 1000 [ 200.962129][T10355] netlink: 'syz.3.1181': attribute type 10 has an invalid length. [ 200.985487][T10355] bridge0: port 1(batadv0) entered blocking state [ 201.013283][T10366] xt_hashlimit: overflow, rate too high: 0 [ 201.020803][T10355] bridge0: port 1(batadv0) entered disabled state [ 201.060246][T10355] batadv0: entered allmulticast mode [ 201.090229][T10355] batadv0: entered promiscuous mode [ 201.189115][T10381] netlink: 'syz.7.1191': attribute type 4 has an invalid length. [ 201.396799][T10388] netlink: 'syz.7.1193': attribute type 2 has an invalid length. [ 201.522984][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 201.532865][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 201.599095][T10393] 8021q: adding VLAN 0 to HW filter on device bond7 [ 201.655077][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 201.725899][T10402] syz.6.1195[10402] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.726010][T10402] syz.6.1195[10402] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.761780][T10337] __nla_validate_parse: 6 callbacks suppressed [ 201.761803][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1181'. [ 201.799642][T10394] syz.6.1195[10394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.799754][T10394] syz.6.1195[10394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.806855][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1181'. [ 201.954806][T10412] wg1: entered promiscuous mode [ 202.332724][T10424] netlink: 'syz.5.1204': attribute type 10 has an invalid length. [ 202.389303][T10424] team0: Port device netdevsim0 added [ 202.477814][T10424] netlink: 'syz.5.1204': attribute type 10 has an invalid length. [ 202.526056][T10424] team0: Port device netdevsim0 removed [ 202.535921][T10424] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 202.551419][T10434] lo speed is unknown, defaulting to 1000 [ 202.669112][T10434] lo speed is unknown, defaulting to 1000 [ 202.679751][T10434] ip6gre0 speed is unknown, defaulting to 1000 [ 202.868169][T10445] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1210'. [ 202.881574][T10445] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1210'. [ 203.187410][T10456] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1212'. [ 203.202273][T10457] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1212'. [ 203.730300][T10478] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1219'. [ 203.742914][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1219'. [ 203.790549][T10479] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1220'. [ 204.259182][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1226'. [ 204.361018][T10504] netlink: 'syz.4.1229': attribute type 15 has an invalid length. [ 204.721909][T10529] netlink: 'syz.3.1235': attribute type 1 has an invalid length. [ 204.743083][T10529] tipc: Invalid UDP bearer configuration [ 204.743129][T10529] tipc: Enabling of bearer rejected, failed to enable media [ 205.136168][T10558] syzkaller1: entered promiscuous mode [ 205.143368][T10558] syzkaller1: entered allmulticast mode [ 205.256321][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 205.393395][T10573] nbd: illegal input index -1 [ 205.399432][T10573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.648785][T10581] sctp: [Deprecated]: syz.4.1248 (pid 10581) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.648785][T10581] Use struct sctp_sack_info instead [ 205.811361][T10596] team0: Unable to change to the same mode the team is in [ 206.226701][T10626] xt_hashlimit: overflow, rate too high: 0 [ 206.384788][T10640] netlink: 'syz.7.1259': attribute type 1 has an invalid length. [ 206.692615][T10659] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 206.990190][T10680] xt_hashlimit: Unknown mode mask 40030000, kernel too old? [ 207.147705][T10686] xt_TCPMSS: Only works on TCP SYN packets [ 207.157005][T10686] netlink: 'syz.5.1275': attribute type 3 has an invalid length. [ 207.176256][T10686] __nla_validate_parse: 10 callbacks suppressed [ 207.176279][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1275'. [ 207.201895][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1275'. [ 207.218697][T10686] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1275'. [ 207.251771][T10694] gtp0: entered promiscuous mode [ 207.739289][T10715] netlink: 'syz.3.1283': attribute type 29 has an invalid length. [ 207.768473][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1283'. [ 207.789643][T10715] netlink: 'syz.3.1283': attribute type 29 has an invalid length. [ 207.927683][T10729] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1286'. [ 208.161721][T10741] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 208.262320][T10751] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1292'. [ 208.459578][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1296'. [ 208.469180][T10769] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 208.579562][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1295'. [ 208.610219][T10778] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1295'. [ 208.838326][T10795] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1302'. [ 209.038753][T10811] team0: Mode changed to "loadbalance" [ 209.359829][T10832] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 210.603523][T10883] macsec1: entered promiscuous mode [ 210.634717][T10883] ip6gretap0: entered promiscuous mode [ 210.640427][T10883] macsec1: entered allmulticast mode [ 210.659764][T10883] ip6gretap0: entered allmulticast mode [ 210.684881][T10883] ip6gretap0: left allmulticast mode [ 210.712408][T10883] ip6gretap0: left promiscuous mode [ 211.096179][T10901] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ÿÿÿÿ [ 211.269955][T10919] ip6gre2: entered allmulticast mode [ 211.479229][T10926] netlink: 'syz.6.1335': attribute type 1 has an invalid length. [ 211.523254][T10929] bridge6: entered promiscuous mode [ 211.530203][T10929] bridge6: entered allmulticast mode [ 211.553579][T10929] team0: Port device bridge6 added [ 211.576457][T10935] netlink: 'syz.5.1337': attribute type 10 has an invalid length. [ 211.636431][T10929] bridge0: port 3(ip6gretap0) entered blocking state [ 211.653601][T10929] bridge0: port 3(ip6gretap0) entered disabled state [ 211.661771][T10929] ip6gretap0: entered allmulticast mode [ 211.684304][T10929] ip6gretap0: entered promiscuous mode [ 211.701494][T10929] bridge0: port 3(ip6gretap0) entered blocking state [ 211.709829][T10929] bridge0: port 3(ip6gretap0) entered forwarding state [ 211.814959][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 211.864901][T10941] syzkaller0: entered promiscuous mode [ 211.871204][T10941] syzkaller0: entered allmulticast mode [ 211.928849][T10952] netlink: 'syz.6.1343': attribute type 39 has an invalid length. [ 211.962255][T10941] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 211.999507][T10950] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.008749][T10950] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.017725][T10950] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.026572][T10950] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.822187][T10964] __nla_validate_parse: 12 callbacks suppressed [ 213.822215][T10964] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1347'. [ 213.860957][T10964] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1347'. [ 213.873415][T10964] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1347'. [ 213.883242][T10966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1348'. [ 213.945659][T10968] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1349'. [ 213.994924][T10968] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1349'. [ 214.068106][T10977] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1351'. [ 214.130796][T10979] syzkaller0: entered promiscuous mode [ 214.136643][T10979] syzkaller0: entered allmulticast mode [ 214.184040][T10981] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1354'. [ 214.192218][T10979] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1353'. [ 214.219662][T10985] netlink: 'syz.3.1355': attribute type 30 has an invalid length. [ 214.281589][T10982] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1353'. [ 215.198145][T11010] netlink: 'syz.7.1359': attribute type 7 has an invalid length. [ 216.394135][T10999] syzkaller0: entered allmulticast mode [ 216.746959][T11043] Cannot find del_set index 4 as target [ 216.857095][T11046] pim6reg: entered allmulticast mode [ 216.962842][T11055] netlink: 'syz.3.1369': attribute type 1 has an invalid length. [ 217.159644][T11062] lo speed is unknown, defaulting to 1000 [ 217.286711][T11073] netlink: 'syz.5.1375': attribute type 7 has an invalid length. [ 217.295284][T11073] netlink: 'syz.5.1375': attribute type 7 has an invalid length. [ 217.374666][T11062] lo speed is unknown, defaulting to 1000 [ 217.382167][T11062] ip6gre0 speed is unknown, defaulting to 1000 [ 217.454389][T11079] netlink: 'syz.5.1378': attribute type 4 has an invalid length. [ 217.551064][T11082] bridge2: entered promiscuous mode [ 217.629838][T11086] veth3: entered promiscuous mode [ 217.794286][T11093] netlink: 'syz.4.1382': attribute type 10 has an invalid length. [ 217.961042][T11090] lo speed is unknown, defaulting to 1000 [ 218.249989][T11105] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 218.275233][T11090] lo speed is unknown, defaulting to 1000 [ 218.298581][T11090] ip6gre0 speed is unknown, defaulting to 1000 [ 218.312279][T11107] netlink: 'syz.7.1386': attribute type 30 has an invalid length. [ 218.566860][T11115] xt_recent: Unsupported userspace flags (00000042) [ 218.700960][T11119] tipc: Enabling of bearer rejected, failed to enable media [ 218.868383][T11124] sctp: [Deprecated]: syz.6.1392 (pid 11124) Use of int in max_burst socket option. [ 218.868383][T11124] Use struct sctp_assoc_value instead [ 218.895847][T11130] Bluetooth: MGMT ver 1.23 [ 218.910032][T11121] __nla_validate_parse: 10 callbacks suppressed [ 218.910053][T11121] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1391'. [ 218.986897][T11130] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1391'. [ 219.276301][T11121] batman_adv: batadv0: Removing interface: dummy0 [ 219.359942][T11146] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1396'. [ 219.645973][T11158] veth1_macvtap: left promiscuous mode [ 219.725972][T11161] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1399'. [ 219.770669][T11164] FAULT_INJECTION: forcing a failure. [ 219.770669][T11164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.814507][T11164] CPU: 0 UID: 0 PID: 11164 Comm: syz.4.1402 Not tainted 6.13.0-rc2-syzkaller-00389-g2c27c7663390 #0 [ 219.825599][T11164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 219.835705][T11164] Call Trace: [ 219.838998][T11164] [ 219.841938][T11164] dump_stack_lvl+0x241/0x360 [ 219.846650][T11164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.851867][T11164] ? __pfx__printk+0x10/0x10 [ 219.856513][T11164] ? __pfx_lock_release+0x10/0x10 [ 219.861574][T11164] should_fail_ex+0x3b0/0x4e0 [ 219.866277][T11164] _copy_from_user+0x2f/0xc0 [ 219.870892][T11164] sk_getsockopt+0x1d2/0x3890 [ 219.875590][T11164] ? __pfx_sk_getsockopt+0x10/0x10 [ 219.880731][T11164] ? __pfx___might_resched+0x10/0x10 [ 219.886045][T11164] ? __might_fault+0xaa/0x120 [ 219.890746][T11164] ? __pfx_lock_release+0x10/0x10 [ 219.895803][T11164] ? __might_fault+0xc6/0x120 [ 219.900521][T11164] do_sock_getsockopt+0x2d5/0x7e0 [ 219.905581][T11164] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 219.911142][T11164] ? __fget_files+0x2a/0x410 [ 219.915750][T11164] ? __fget_files+0x395/0x410 [ 219.920444][T11164] ? __fget_files+0x2a/0x410 [ 219.925052][T11164] __x64_sys_getsockopt+0x2a1/0x370 [ 219.930262][T11164] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 219.935993][T11164] ? do_syscall_64+0x100/0x230 [ 219.940766][T11164] ? do_syscall_64+0xb6/0x230 [ 219.945453][T11164] do_syscall_64+0xf3/0x230 [ 219.949966][T11164] ? clear_bhb_loop+0x35/0x90 [ 219.954656][T11164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.960562][T11164] RIP: 0033:0x7f3b1af85d19 [ 219.964988][T11164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.984697][T11164] RSP: 002b:00007f3b1bd9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 219.993129][T11164] RAX: ffffffffffffffda RBX: 00007f3b1b175fa0 RCX: 00007f3b1af85d19 [ 220.001112][T11164] RDX: 0000000000000053 RSI: 0000000000000001 RDI: 0000000000000003 [ 220.009097][T11164] RBP: 00007f3b1bd9a090 R08: 00000000200095c0 R09: 0000000000000000 [ 220.017081][T11164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.025061][T11164] R13: 0000000000000000 R14: 00007f3b1b175fa0 R15: 00007fffbf059908 [ 220.033052][T11164] [ 220.089562][T11170] netlink: del zone limit has 4 unknown bytes [ 220.156201][T11172] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1406'. [ 220.184816][T11172] IPv6: NLM_F_CREATE should be specified when creating new route [ 220.193239][T11172] IPv6: Can't replace route, no match found [ 220.202263][T11176] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1408'. [ 220.345404][T11178] syzkaller1: entered promiscuous mode [ 220.350947][T11178] syzkaller1: entered allmulticast mode [ 220.594325][T11192] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1413'. [ 220.646506][T11197] FAULT_INJECTION: forcing a failure. [ 220.646506][T11197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.682141][T11197] CPU: 1 UID: 0 PID: 11197 Comm: syz.3.1417 Not tainted 6.13.0-rc2-syzkaller-00389-g2c27c7663390 #0 [ 220.693171][T11197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 220.703277][T11197] Call Trace: [ 220.706606][T11197] [ 220.709576][T11197] dump_stack_lvl+0x241/0x360 [ 220.714313][T11197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.719566][T11197] ? __pfx__printk+0x10/0x10 [ 220.724270][T11197] ? snprintf+0xda/0x120 [ 220.728556][T11197] should_fail_ex+0x3b0/0x4e0 [ 220.733255][T11197] _copy_to_user+0x31/0xb0 [ 220.737711][T11197] simple_read_from_buffer+0xca/0x150 [ 220.743155][T11197] proc_fail_nth_read+0x1e9/0x250 [ 220.748230][T11197] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.753804][T11197] ? rw_verify_area+0x55e/0x6f0 [ 220.758687][T11197] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.764292][T11197] vfs_read+0x1fc/0xb70 [ 220.768575][T11197] ? __pfx___mutex_lock+0x10/0x10 [ 220.773633][T11197] ? __pfx_vfs_read+0x10/0x10 [ 220.778335][T11197] ? __fget_files+0x2a/0x410 [ 220.782952][T11197] ? __fget_files+0x395/0x410 [ 220.787650][T11197] ? __fget_files+0x2a/0x410 [ 220.792283][T11197] ksys_read+0x18f/0x2b0 [ 220.796544][T11197] ? __pfx_ksys_read+0x10/0x10 [ 220.801318][T11197] ? do_syscall_64+0x100/0x230 [ 220.806099][T11197] ? do_syscall_64+0xb6/0x230 [ 220.810790][T11197] do_syscall_64+0xf3/0x230 [ 220.815306][T11197] ? clear_bhb_loop+0x35/0x90 [ 220.819996][T11197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.825903][T11197] RIP: 0033:0x7fc88bb8472c [ 220.830415][T11197] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 220.850050][T11197] RSP: 002b:00007fc88ca67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 220.858500][T11197] RAX: ffffffffffffffda RBX: 00007fc88bd75fa0 RCX: 00007fc88bb8472c [ 220.866506][T11197] RDX: 000000000000000f RSI: 00007fc88ca670a0 RDI: 0000000000000004 [ 220.874520][T11197] RBP: 00007fc88ca67090 R08: 0000000000000000 R09: 0000000000000000 [ 220.882510][T11197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.890516][T11197] R13: 0000000000000000 R14: 00007fc88bd75fa0 R15: 00007fffbc7dbe18 [ 220.898601][T11197] [ 222.707589][T11301] netlink: 'syz.5.1444': attribute type 2 has an invalid length. [ 222.716212][T11301] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1444'. [ 222.880465][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1447'. [ 222.941583][T11315] xt_hashlimit: overflow, rate too high: 0 [ 222.951210][T11315] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1448'. [ 223.154608][T11328] netlink: 'syz.4.1452': attribute type 13 has an invalid length. [ 223.162978][T11328] netlink: 'syz.4.1452': attribute type 11 has an invalid length. [ 224.758159][T11337] netlink: 'syz.6.1454': attribute type 12 has an invalid length. [ 225.330356][T11367] netlink: 'syz.5.1464': attribute type 21 has an invalid length. [ 225.405929][T11374] __nla_validate_parse: 3 callbacks suppressed [ 225.405951][T11374] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1463'. [ 225.430103][T11374] netlink: 'syz.6.1463': attribute type 3 has an invalid length. [ 225.579705][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1469'. [ 225.687932][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1471'. [ 225.704484][T11391] netlink: 'syz.5.1471': attribute type 1 has an invalid length. [ 226.022050][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1472'. [ 226.284031][T11400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1474'. [ 226.548750][T11410] xt_hashlimit: invalid rate [ 226.899363][T11430] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1484'. [ 226.937658][T11420] xt_CT: You must specify a L4 protocol and not use inversions on it [ 227.151955][T11445] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1487'. [ 227.183632][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1487'. [ 227.227503][T11445] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 227.333828][T11452] netlink: 'syz.7.1489': attribute type 11 has an invalid length. [ 227.364634][T11452] netlink: 140 bytes leftover after parsing attributes in process `syz.7.1489'. [ 227.523126][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1492'. [ 228.611158][T11513] vlan0: entered promiscuous mode [ 228.632907][T11513] hsr0: entered promiscuous mode [ 228.641188][T11513] hsr0: left promiscuous mode [ 228.709304][T11522] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.799946][T11524] Bluetooth: MGMT ver 1.23 [ 228.959729][T11536] netlink: 'syz.4.1515': attribute type 15 has an invalid length. [ 229.342141][T11557] netlink: 'syz.5.1521': attribute type 7 has an invalid length. [ 229.659077][T11574] bond0: entered promiscuous mode [ 229.665001][T11574] bond0: entered allmulticast mode [ 229.670570][T11574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.704840][T11575] netlink: 'syz.3.1526': attribute type 7 has an invalid length. [ 229.869894][T11585] gtp0: entered promiscuous mode [ 229.883027][T11585] gtp0: entered allmulticast mode [ 230.774232][T11616] __nla_validate_parse: 9 callbacks suppressed [ 230.774262][T11616] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1539'. [ 230.935336][T11622] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1540'. [ 230.951869][T11621] ipt_rpfilter: unknown options [ 231.302105][T11644] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20003 [ 231.397734][T11653] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1548'. [ 231.420736][T11653] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1548'. [ 231.451260][T11656] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1549'. [ 231.678631][T11659] netlink: 'syz.6.1551': attribute type 6 has an invalid length. [ 231.712632][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1551'. [ 231.724685][T11659] netlink: 'syz.6.1551': attribute type 7 has an invalid length. [ 231.738256][T11659] netlink: 'syz.6.1551': attribute type 8 has an invalid length. [ 231.817983][T11671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1552'. [ 231.934159][T11686] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1556'. [ 231.947397][T11686] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1556'. [ 231.962020][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1555'. [ 232.374576][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 232.381095][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 232.752645][T11730] lo speed is unknown, defaulting to 1000 [ 232.768820][ T5913] hid-generic 0005:7FFF:0008.0001: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 232.803491][T11735] veth0_to_bridge: entered promiscuous mode [ 232.897640][T11730] lo speed is unknown, defaulting to 1000 [ 232.905375][T11730] ip6gre0 speed is unknown, defaulting to 1000 [ 233.416258][T11729] veth0_to_bridge: left promiscuous mode [ 234.078727][T11785] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.248264][T11785] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.370012][T11785] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.431514][T11785] bond0: (slave netdevsim0): Releasing backup interface [ 234.448611][T11785] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.482668][T11818] netlink: 'syz.3.1592': attribute type 1 has an invalid length. [ 234.652910][T11785] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.676996][T11785] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.716397][T11785] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.743143][T11785] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.904337][T11836] netlink: 'syz.3.1597': attribute type 1 has an invalid length. [ 234.942120][T11836] lo speed is unknown, defaulting to 1000 [ 235.289744][ T51] hid-generic 0005:7FFF:0008.0002: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 235.339317][T11836] lo speed is unknown, defaulting to 1000 [ 235.346898][T11836] ip6gre0 speed is unknown, defaulting to 1000 [ 235.813848][T11875] netlink: 'syz.4.1608': attribute type 21 has an invalid length. [ 235.990502][T11881] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 235.996627][T11882] netlink: 'syz.6.1609': attribute type 1 has an invalid length. [ 236.072581][T11888] netlink: 'syz.7.1610': attribute type 7 has an invalid length. [ 236.081885][T11888] netlink: 'syz.7.1610': attribute type 8 has an invalid length. [ 236.102058][T11882] batadv0: entered promiscuous mode [ 236.124851][T11882] batadv0: entered allmulticast mode [ 236.176763][T11891] __nla_validate_parse: 18 callbacks suppressed [ 236.176787][T11891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1612'. [ 236.245320][T11893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1613'. [ 236.412226][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1614'. [ 236.467768][T11899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1616'. [ 236.630691][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1616'. [ 236.635205][T11904] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1617'. [ 237.106937][T11938] xt_l2tp: wrong L2TP version: 0 [ 237.556117][T11956] lo speed is unknown, defaulting to 1000 [ 237.563750][T11963] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 237.843254][T11974] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1632'. [ 238.151964][T11956] lo speed is unknown, defaulting to 1000 [ 238.183695][T11956] ip6gre0 speed is unknown, defaulting to 1000 [ 238.185062][T11983] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1638'. [ 238.454008][T11989] syzkaller0: entered promiscuous mode [ 238.491965][T11989] syzkaller0: entered allmulticast mode [ 238.783502][T12008] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1642'. [ 238.835692][T12009] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1642'. [ 239.835582][T12030] netlink: 'syz.5.1648': attribute type 3 has an invalid length. [ 241.200717][T12043] RDS: rds_bind could not find a transport for 1400::7269:6669:6361:7469, load rds_tcp or rds_rdma? [ 241.258425][T12037] lo speed is unknown, defaulting to 1000 [ 241.458280][T12052] __nla_validate_parse: 2 callbacks suppressed [ 241.458302][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1654'. [ 241.495887][T12037] lo speed is unknown, defaulting to 1000 [ 241.506012][T12037] ip6gre0 speed is unknown, defaulting to 1000 [ 241.557463][T12053] lo speed is unknown, defaulting to 1000 [ 241.951146][T12063] netlink: 'syz.3.1659': attribute type 1 has an invalid length. [ 242.111649][T12053] lo speed is unknown, defaulting to 1000 [ 242.121265][T12053] ip6gre0 speed is unknown, defaulting to 1000 [ 242.718800][T12071] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1661'. [ 242.911327][T12075] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1663'. [ 243.403776][T12095] gretap4: entered allmulticast mode [ 243.433867][T12095] bridge0: port 2(gretap4) entered blocking state [ 243.452431][T12095] bridge0: port 2(gretap4) entered disabled state [ 243.482496][T12095] gretap4: entered promiscuous mode [ 243.555997][T12101] netlink: 'syz.7.1670': attribute type 12 has an invalid length. [ 243.578355][T12101] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1670'. [ 243.623430][T12110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.210550][T12131] netlink: 4144 bytes leftover after parsing attributes in process `syz.7.1681'. [ 244.221590][T12132] smc: net device wg0 applied user defined pnetid SYZ0 [ 244.240359][T12131] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1681'. [ 244.880067][T12164] ipvlan0: entered promiscuous mode [ 244.889151][T12164] ipvlan0: left promiscuous mode [ 245.323618][T12176] lo speed is unknown, defaulting to 1000 [ 245.447681][T12170] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1694'. [ 245.476104][T12170] No such timeout policy "syz1" [ 245.623421][T12176] lo speed is unknown, defaulting to 1000 [ 245.700415][T12176] ip6gre0 speed is unknown, defaulting to 1000 [ 245.878712][T12205] netlink: 'syz.7.1703': attribute type 1 has an invalid length. [ 246.322785][T12226] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1709'. [ 246.360282][T12226] bridge_slave_0: entered allmulticast mode [ 246.537934][T12231] syz.4.1711[12231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.538041][T12231] syz.4.1711[12231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.572190][T12231] syz.4.1711[12231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.592647][T12235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1714'. [ 246.630753][T12235] rdma_rxe: rxe_newlink: failed to add lo [ 246.804344][T12246] netlink: 'syz.3.1716': attribute type 4 has an invalid length. [ 246.826676][T12246] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1716'. [ 246.856259][T12246] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 247.366508][T12287] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1728'. [ 247.384140][T12290] netlink: 50 bytes leftover after parsing attributes in process `syz.4.1729'. [ 247.393221][T12287] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1728'. [ 247.397507][T12289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.439430][T12289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.522592][T12296] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4. [ 247.549132][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1728'. [ 247.799925][T12317] wg1: left promiscuous mode [ 247.825017][T12317] bridge_slave_0: left allmulticast mode [ 247.969958][T12328] netlink: 'syz.7.1740': attribute type 30 has an invalid length. [ 248.397782][T12360] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1746'. [ 248.439319][T12363] netlink: 'syz.5.1748': attribute type 1 has an invalid length. [ 248.470230][T12363] bond4: (slave gretap1): making interface the new active one [ 248.478872][T12363] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 248.575484][T12370] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 248.576317][T12367] IPVS: stopping master sync thread 12370 ... [ 248.892406][T12386] netlink: 'syz.3.1756': attribute type 1 has an invalid length. [ 248.962510][T12386] bond4: entered promiscuous mode [ 248.998177][T12392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1756'. [ 248.998405][T12386] 8021q: adding VLAN 0 to HW filter on device bond4 [ 249.083348][T12400] netlink: 'syz.5.1759': attribute type 12 has an invalid length. [ 249.167890][T12406] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.1760'. [ 249.476936][T12416] xt_cluster: node mask cannot exceed total number of nodes [ 249.518823][T12418] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.1764'. [ 250.072270][T12434] bridge0: entered promiscuous mode [ 250.091998][T12434] bridge0 (unregistering): left promiscuous mode [ 250.248020][T12439] x_tables: duplicate underflow at hook 1 [ 250.261504][T12438] netlink: 'syz.7.1770': attribute type 11 has an invalid length. [ 250.386596][T12447] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 250.549381][T12456] : renamed from ipvlan1 [ 250.739351][T12466] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 251.314933][T12498] netlink: 'syz.3.1788': attribute type 10 has an invalid length. [ 251.368953][T12498] geneve0: entered promiscuous mode [ 251.405397][T12498] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.422742][T12498] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.431840][T12498] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.442434][T12498] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.457826][T12498] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 251.499005][T12513] dvmrp5: entered allmulticast mode [ 251.516113][T12512] dvmrp5: left allmulticast mode [ 251.598869][T12517] __nla_validate_parse: 9 callbacks suppressed [ 251.598895][T12517] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1792'. [ 251.821307][T12536] netlink: 'syz.6.1799': attribute type 16 has an invalid length. [ 251.850509][T12536] netlink: 'syz.6.1799': attribute type 2 has an invalid length. [ 251.870688][T12536] netlink: 64034 bytes leftover after parsing attributes in process `syz.6.1799'. [ 251.918101][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1796'. [ 252.139622][T12551] openvswitch: netlink: Message has 8 unknown bytes. [ 252.176502][T12551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1804'. [ 252.292711][T12558] atomic_op ffff888027cfb998 conn xmit_atomic 0000000000000000 [ 252.407880][T12566] netlink: 'syz.5.1807': attribute type 1 has an invalid length. [ 252.451839][T12566] netlink: 'syz.5.1807': attribute type 2 has an invalid length. [ 252.638360][T12578] netlink: 'syz.5.1811': attribute type 3 has an invalid length. [ 252.678765][T12579] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1810'. [ 252.706755][T12575] ip6erspan0: entered promiscuous mode [ 252.716535][T12575] ip6erspan0: entered allmulticast mode [ 252.908901][T12590] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1813'. [ 253.195273][T12615] IPv6: Can't replace route, no match found [ 253.375494][T12621] bond0: entered allmulticast mode [ 253.385763][T12621] bond_slave_0: entered allmulticast mode [ 253.402094][T12621] bond_slave_1: entered allmulticast mode [ 253.575314][T12636] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1825'. [ 253.599678][T12636] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1825'. [ 253.632656][T12637] gretap4: entered allmulticast mode [ 253.645857][T12636] netlink: 'syz.5.1825': attribute type 25 has an invalid length. [ 253.679883][T12637] bridge0: port 1(gretap4) entered blocking state [ 253.703284][T12637] bridge0: port 1(gretap4) entered disabled state [ 253.726813][T12637] gretap4: entered promiscuous mode [ 253.817227][T12640] gretap4: left promiscuous mode [ 253.822420][T12640] bridge0: port 1(gretap4) entered disabled state [ 254.095449][T12653] netlink: 'syz.7.1827': attribute type 2 has an invalid length. [ 254.109897][T12653] netlink: 'syz.7.1827': attribute type 9 has an invalid length. [ 254.125828][T12653] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.1827'. [ 254.240001][T12666] netlink: 'syz.7.1827': attribute type 1 has an invalid length. [ 254.271108][T12666] netlink: 200 bytes leftover after parsing attributes in process `syz.7.1827'. [ 254.509608][T12675] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.670509][T12675] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.738460][T12695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.808370][T12675] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.822615][T12690] tipc: Enabled bearer , priority 0 [ 254.878837][T12690] syzkaller0: entered promiscuous mode [ 254.885320][T12690] syzkaller0: entered allmulticast mode [ 254.891574][T12690] tipc: Resetting bearer [ 254.967199][T12689] tipc: Resetting bearer [ 256.792658][T12689] tipc: Disabling bearer [ 256.908234][T12675] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.922952][T12675] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.943650][T12675] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.972474][T12675] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.989309][T12711] xt_bpf: check failed: parse error [ 257.103681][T12724] __nla_validate_parse: 6 callbacks suppressed [ 257.103706][T12724] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1849'. [ 257.156161][T12724] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1849'. [ 257.371066][T12737] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1854'. [ 257.391044][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1855'. [ 257.412939][T12739] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1855'. [ 257.420796][T12738] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 257.433919][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1855'. [ 257.645692][T12743] validate_nla: 1 callbacks suppressed [ 257.645716][T12743] netlink: 'syz.7.1857': attribute type 30 has an invalid length. [ 257.874315][T12753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1860'. [ 257.947537][T12752] lo speed is unknown, defaulting to 1000 [ 257.983838][T12759] veth1_macvtap: left promiscuous mode [ 257.991239][T12759] macsec0: entered promiscuous mode [ 258.063903][T12761] netlink: 'syz.7.1861': attribute type 1 has an invalid length. [ 258.086375][T12761] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1861'. [ 258.196290][T12752] lo speed is unknown, defaulting to 1000 [ 258.213859][T12752] ip6gre0 speed is unknown, defaulting to 1000 [ 258.519432][T12769] siw: device registration error -23 [ 258.520224][T12775] lo speed is unknown, defaulting to 1000 [ 258.933671][T12778] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1867'. [ 258.962602][T12775] lo speed is unknown, defaulting to 1000 [ 259.004020][T12775] ip6gre0 speed is unknown, defaulting to 1000 [ 259.142383][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1870'. [ 260.715047][T12848] netlink: 'syz.6.1887': attribute type 10 has an invalid length. [ 260.764233][T12848] ipvlan1: entered promiscuous mode [ 260.782348][T12848] ipvlan1: entered allmulticast mode [ 260.803135][T12848] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 261.748107][T12914] netlink: 'syz.5.1906': attribute type 1 has an invalid length. [ 262.054330][T12930] netlink: 'syz.7.1913': attribute type 10 has an invalid length. [ 262.081793][T12930] team0: Port device macvlan1 removed [ 262.088383][T12930] bridge0: port 1(macvlan1) entered blocking state [ 262.095639][T12930] bridge0: port 1(macvlan1) entered disabled state [ 262.109979][T12930] macvlan1: entered allmulticast mode [ 262.121151][T12930] macvlan1: entered promiscuous mode [ 262.257830][T12942] __nla_validate_parse: 12 callbacks suppressed [ 262.257856][T12942] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1915'. [ 262.298896][T12942] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1915'. [ 262.319845][T12942] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1915'. [ 262.333174][T12942] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1915'. [ 262.350078][T12942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1915'. [ 262.413906][T12947] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 262.426150][T12947] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1918'. [ 262.435216][T12947] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1918'. [ 262.489660][T12949] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1919'. [ 262.714008][T12949] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1919'. [ 262.842486][T12952] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1921'. [ 262.855745][T12952] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 263.269227][T12974] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 263.548282][T12984] lo speed is unknown, defaulting to 1000 [ 263.891228][T12984] lo speed is unknown, defaulting to 1000 [ 263.911619][T12984] ip6gre0 speed is unknown, defaulting to 1000 [ 264.557900][T13032] siw: device registration error -23 [ 264.623269][T13036] lo speed is unknown, defaulting to 1000 [ 264.676262][T13041] IPVS: length: 251 != 24 [ 264.995990][T13036] lo speed is unknown, defaulting to 1000 [ 265.028807][T13036] ip6gre0 speed is unknown, defaulting to 1000 [ 265.265150][T13059] netlink: 'syz.5.1948': attribute type 9 has an invalid length. [ 265.466649][T13069] netlink: 'syz.6.1950': attribute type 2 has an invalid length. [ 265.559173][T13075] siw: device registration error -23 [ 265.731180][T13080] netlink: 'syz.6.1952': attribute type 4 has an invalid length. [ 265.783198][T13082] netlink: 'syz.6.1952': attribute type 4 has an invalid length. [ 266.190773][T13095] nbd: must specify an index to disconnect [ 266.769405][T13109] pim6reg1: entered promiscuous mode [ 266.775094][T13109] pim6reg1: entered allmulticast mode [ 266.953423][T13135] IPv6: sit4: Disabled Multicast RS [ 266.983846][T13138] syz.4.1970: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 267.037083][T13138] CPU: 0 UID: 0 PID: 13138 Comm: syz.4.1970 Not tainted 6.13.0-rc2-syzkaller-00389-g2c27c7663390 #0 [ 267.047934][T13138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 267.058044][T13138] Call Trace: [ 267.061366][T13138] [ 267.064351][T13138] dump_stack_lvl+0x241/0x360 [ 267.069098][T13138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.074378][T13138] ? __pfx__printk+0x10/0x10 [ 267.079043][T13138] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 267.085534][T13138] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 267.092113][T13138] warn_alloc+0x278/0x410 [ 267.096521][T13138] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 267.102658][T13138] ? __pfx_warn_alloc+0x10/0x10 [ 267.107566][T13138] ? kasan_save_track+0x3f/0x80 [ 267.112475][T13138] ? __kasan_kmalloc+0x98/0xb0 [ 267.117303][T13138] ? xsk_setsockopt+0x4ea/0x950 [ 267.122222][T13138] ? do_sock_setsockopt+0x3af/0x720 [ 267.127481][T13138] ? __x64_sys_setsockopt+0x1ee/0x280 [ 267.132922][T13138] ? do_syscall_64+0xf3/0x230 [ 267.137667][T13138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.143808][T13138] __vmalloc_node_range_noprof+0x126/0x1380 [ 267.149797][T13138] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 267.156186][T13138] ? __kasan_kmalloc+0x98/0xb0 [ 267.161032][T13138] vmalloc_user_noprof+0x74/0x80 [ 267.166036][T13138] ? xskq_create+0xb6/0x170 [ 267.170598][T13138] xskq_create+0xb6/0x170 [ 267.175002][T13138] xsk_init_queue+0xa1/0x100 [ 267.179659][T13138] xsk_setsockopt+0x4ea/0x950 [ 267.184398][T13138] ? __pfx_xsk_setsockopt+0x10/0x10 [ 267.189674][T13138] ? __pfx_aa_sk_perm+0x10/0x10 [ 267.194594][T13138] ? aa_sock_opt_perm+0x79/0x120 [ 267.199681][T13138] ? __pfx_xsk_setsockopt+0x10/0x10 [ 267.204940][T13138] do_sock_setsockopt+0x3af/0x720 [ 267.210040][T13138] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 267.215655][T13138] ? __fget_files+0x395/0x410 [ 267.220396][T13138] ? __fget_files+0x2a/0x410 [ 267.225062][T13138] __x64_sys_setsockopt+0x1ee/0x280 [ 267.230390][T13138] do_syscall_64+0xf3/0x230 [ 267.234948][T13138] ? clear_bhb_loop+0x35/0x90 [ 267.239688][T13138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.245635][T13138] RIP: 0033:0x7f3b1af85d19 [ 267.250101][T13138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.269762][T13138] RSP: 002b:00007f3b1bd9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 267.278243][T13138] RAX: ffffffffffffffda RBX: 00007f3b1b175fa0 RCX: 00007f3b1af85d19 [ 267.286269][T13138] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 267.294299][T13138] RBP: 00007f3b1b001a20 R08: 0000000000000004 R09: 0000000000000000 [ 267.302320][T13138] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.310349][T13138] R13: 0000000000000000 R14: 00007f3b1b175fa0 R15: 00007fffbf059908 [ 267.318398][T13138] [ 267.327788][T13138] Mem-Info: [ 267.331002][T13138] active_anon:5183 inactive_anon:0 isolated_anon:0 [ 267.331002][T13138] active_file:1736 inactive_file:38338 isolated_file:0 [ 267.331002][T13138] unevictable:768 dirty:227 writeback:0 [ 267.331002][T13138] slab_reclaimable:11974 slab_unreclaimable:117994 [ 267.331002][T13138] mapped:30175 shmem:2994 pagetables:665 [ 267.331002][T13138] sec_pagetables:0 bounce:0 [ 267.331002][T13138] kernel_misc_reclaimable:0 [ 267.331002][T13138] free:1308505 free_pcp:2833 free_cma:0 [ 267.380783][T13138] Node 0 active_anon:21132kB inactive_anon:0kB active_file:6944kB inactive_file:153280kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121200kB dirty:908kB writeback:0kB shmem:10940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11632kB pagetables:2660kB sec_pagetables:0kB all_unreclaimable? no [ 267.438168][T13138] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 267.545738][T13138] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 267.607148][T13138] lowmem_reserve[]: 0 2465 2466 0 0 [ 267.612805][T13146] netlink: 'syz.5.1972': attribute type 1 has an invalid length. [ 267.635721][T13146] __nla_validate_parse: 6 callbacks suppressed [ 267.635744][T13146] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1972'. [ 267.657567][T13138] Node 0 DMA32 free:1332968kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:23996kB inactive_anon:0kB active_file:6944kB inactive_file:152448kB unevictable:1536kB writepending:908kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:1280kB local_pcp:504kB free_cma:0kB [ 267.689610][T13151] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1975'. [ 267.698909][T13151] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 267.720048][T13138] lowmem_reserve[]: 0 0 0 0 0 [ 267.763801][T13138] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 267.803969][T13138] lowmem_reserve[]: 0 0 0 0 0 [ 267.834759][T13138] Node 1 Normal free:3901932kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 267.889277][T13138] lowmem_reserve[]: 0 0 0 0 0 [ 267.894130][T13138] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 267.910169][T13138] Node 0 DMA32: 2*4kB (UM) 15*8kB (UME) 134*16kB (UME) 59*32kB (UE) 76*64kB (UME) 110*128kB (UME) 86*256kB (UM) 52*512kB (UM) 15*1024kB (UME) 6*2048kB (UM) 298*4096kB (UM) = 1320000kB [ 267.929359][T13138] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 267.941648][T13138] Node 1 Normal: 259*4kB (UM) 74*8kB (UME) 39*16kB (UME) 193*32kB (UME) 92*64kB (UME) 26*128kB (UME) 23*256kB (UME) 13*512kB (UM) 5*1024kB (UM) 2*2048kB (UE) 943*4096kB (UM) = 3901932kB [ 267.961050][T13138] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 267.970747][T13138] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 267.982861][T13138] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 267.993096][T13138] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 268.002795][T13138] 42343 total pagecache pages [ 268.009891][T13138] 0 pages in swap cache [ 268.014160][T13138] Free swap = 124996kB [ 268.019598][T13138] Total swap = 124996kB [ 268.023808][T13138] 2097051 pages RAM [ 268.027917][T13138] 0 pages HighMem/MovableOnly [ 268.032693][T13138] 427011 pages reserved [ 268.037236][T13138] 0 pages cma reserved [ 268.146448][T13161] netlink: 'syz.5.1978': attribute type 3 has an invalid length. [ 268.235004][T13161] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 268.273749][T13175] sch_tbf: burst 0 is lower than device wg1 mtu (1420) ! [ 268.414943][T13182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1983'. [ 268.524655][T13182] ip6gretap0: left allmulticast mode [ 268.530560][T13182] ip6gretap0: left promiscuous mode [ 268.537061][T13182] bridge0: port 3(ip6gretap0) entered disabled state [ 268.590569][T13188] sctp: [Deprecated]: syz.6.1985 (pid 13188) Use of int in max_burst socket option deprecated. [ 268.590569][T13188] Use struct sctp_assoc_value instead [ 268.611615][T13182] bridge_slave_1: left allmulticast mode [ 268.624668][T13182] bridge_slave_1: left promiscuous mode [ 268.647670][T13182] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.691382][T13182] bridge_slave_0: left allmulticast mode [ 268.708790][T13182] bridge_slave_0: left promiscuous mode [ 268.727133][T13182] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.009768][T13193] lo speed is unknown, defaulting to 1000 [ 269.230069][T13201] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.279542][T13199] bond0: entered allmulticast mode [ 269.392527][T13193] lo speed is unknown, defaulting to 1000 [ 269.420621][T13193] ip6gre0 speed is unknown, defaulting to 1000 [ 269.846397][T13223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.856452][T13223] bond_slave_0: left allmulticast mode [ 269.870829][T13223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.881368][T13223] bond_slave_1: left allmulticast mode [ 269.895290][T13223] bond0 (unregistering): Released all slaves [ 270.062308][T13238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2000'. [ 270.587004][T13262] sctp: [Deprecated]: syz.5.2009 (pid 13262) Use of int in max_burst socket option. [ 270.587004][T13262] Use struct sctp_assoc_value instead [ 270.602229][T13263] sctp: [Deprecated]: syz.5.2009 (pid 13263) Use of int in max_burst socket option. [ 270.602229][T13263] Use struct sctp_assoc_value instead [ 270.637246][T13265] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2010'. [ 270.648110][T13265] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2010'. [ 270.768527][T13273] GUP no longer grows the stack in syz.5.2013 (13273): 20006000-2000a000 (20005000) [ 270.788782][T13273] CPU: 0 UID: 0 PID: 13273 Comm: syz.5.2013 Not tainted 6.13.0-rc2-syzkaller-00389-g2c27c7663390 #0 [ 270.799624][T13273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 270.809729][T13273] Call Trace: [ 270.813060][T13273] [ 270.816037][T13273] dump_stack_lvl+0x241/0x360 [ 270.820791][T13273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.826131][T13273] ? __pfx__printk+0x10/0x10 [ 270.830778][T13273] ? find_vma+0xf9/0x170 [ 270.835081][T13273] ? vma_is_secretmem+0xd/0x50 [ 270.839900][T13273] ? check_vma_flags+0x52b/0x5a0 [ 270.844894][T13273] __get_user_pages+0x4385/0x49e0 [ 270.849974][T13273] ? 0xffffffffa0000950 [ 270.854230][T13273] ? __pfx___get_user_pages+0x10/0x10 [ 270.859696][T13273] __gup_longterm_locked+0x49a/0x17f0 [ 270.865124][T13273] ? __pfx___might_resched+0x10/0x10 [ 270.870484][T13273] ? __pfx___gup_longterm_locked+0x10/0x10 [ 270.876348][T13273] ? down_read+0x82b/0xa40 [ 270.880824][T13273] ? is_valid_gup_args+0x124/0x200 [ 270.885991][T13273] pin_user_pages+0x137/0x1f0 [ 270.890818][T13273] ? __pfx_pin_user_pages+0x10/0x10 [ 270.896077][T13273] ? trace_kmalloc+0x1f/0xd0 [ 270.900737][T13273] xdp_umem_create+0x978/0xf30 [ 270.905575][T13273] xsk_setsockopt+0x732/0x950 [ 270.910319][T13273] ? __pfx_xsk_setsockopt+0x10/0x10 [ 270.915588][T13273] ? __pfx_lock_acquire+0x10/0x10 [ 270.920686][T13273] ? aa_sock_opt_perm+0x79/0x120 [ 270.925692][T13273] ? __pfx_xsk_setsockopt+0x10/0x10 [ 270.930943][T13273] do_sock_setsockopt+0x3af/0x720 [ 270.936023][T13273] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 270.941635][T13273] ? __fget_files+0x395/0x410 [ 270.946370][T13273] ? __fget_files+0x2a/0x410 [ 270.951031][T13273] __x64_sys_setsockopt+0x1ee/0x280 [ 270.956287][T13273] do_syscall_64+0xf3/0x230 [ 270.960841][T13273] ? clear_bhb_loop+0x35/0x90 [ 270.965578][T13273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.971534][T13273] RIP: 0033:0x7feb75985d19 [ 270.976002][T13273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.995668][T13273] RSP: 002b:00007feb76841038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 271.004190][T13273] RAX: ffffffffffffffda RBX: 00007feb75b75fa0 RCX: 00007feb75985d19 [ 271.012239][T13273] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000006 [ 271.020265][T13273] RBP: 00007feb75a01a20 R08: 0000000000000020 R09: 0000000000000000 [ 271.028289][T13273] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 271.036399][T13273] R13: 0000000000000000 R14: 00007feb75b75fa0 R15: 00007ffeef1327c8 [ 271.044437][T13273] [ 271.070018][T13276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.081619][T13273] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2013'. [ 271.166676][T13280] netlink: 'syz.7.2015': attribute type 11 has an invalid length. [ 271.177165][T13280] netlink: 140 bytes leftover after parsing attributes in process `syz.7.2015'. [ 271.231995][T13282] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2016'. [ 271.251946][T13282] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2016'. [ 272.170287][T13310] netlink: 'syz.6.2024': attribute type 11 has an invalid length. [ 272.262430][T13316] sctp: [Deprecated]: syz.5.2025 (pid 13316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.262430][T13316] Use struct sctp_sack_info instead [ 272.272083][T13318] xt_hashlimit: size too large, truncated to 1048576 [ 272.425885][T13325] netlink: 'syz.7.2026': attribute type 1 has an invalid length. [ 272.677524][T13332] __nla_validate_parse: 6 callbacks suppressed [ 272.677548][T13332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2031'. [ 272.944928][T13344] bridge0: entered allmulticast mode [ 273.499498][T13353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2037'. [ 273.736963][T13359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2038'. [ 274.196244][ T5833] cgroup: fork rejected by pids controller in /syz4 [ 274.476387][T13379] infiniband syz!: set down [ 274.481044][T13379] infiniband syz!: added team_slave_0 [ 274.487415][T13379] syz!: rxe_create_cq: returned err = -12 [ 274.493207][T13379] infiniband syz!: Couldn't create ib_mad CQ [ 274.500420][T13379] infiniband syz!: Couldn't open port 1 [ 274.577216][T13379] RDS/IB: syz!: added [ 274.581335][T13379] smc: adding ib device syz! with port count 1 [ 274.596091][T13379] smc: ib device syz! port 1 has pnetid [ 274.905414][ T2988] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.931204][ T2988] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.958669][ T2988] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 275.103242][ T2988] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.114565][ T2988] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.139750][ T2988] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 275.234830][T13392] lo speed is unknown, defaulting to 1000 [ 275.277977][ T2988] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.314426][ T2988] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.348771][ T2988] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 275.466445][ T2988] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.507154][ T2988] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.556928][ T2988] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 276.218076][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.227867][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.236974][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.247312][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.302871][ T5839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.377268][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.566967][T13412] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2048'. [ 277.228502][ T2988] bond0 (unregistering): Released all slaves [ 277.238948][T13392] lo speed is unknown, defaulting to 1000 [ 277.248847][T13392] ip6gre0 speed is unknown, defaulting to 1000 [ 277.302364][T13417] gretap2: entered allmulticast mode [ 277.429795][T13414] team0: Port device team_slave_0 removed [ 277.449709][T13414] team0: Port device team_slave_1 removed [ 277.463393][T13414] bond1: (slave bond2): Releasing backup interface [ 277.478956][T13414] team0: Port device bridge6 removed [ 277.496105][T13414] bond4: (slave gretap1): Releasing active interface [ 277.776063][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2054'. [ 277.907594][T13396] siw: device registration error -23 [ 277.915759][T13402] lo speed is unknown, defaulting to 1000 [ 278.014606][ T2988] : left promiscuous mode [ 278.127633][T13402] lo speed is unknown, defaulting to 1000 [ 278.134967][T13402] ip6gre0 speed is unknown, defaulting to 1000 [ 278.368447][T13437] xt_NFQUEUE: number of total queues is 0 [ 278.475099][ T54] Bluetooth: hci1: command tx timeout [ 278.982225][T13452] netlink: 'syz.6.2059': attribute type 10 has an invalid length. [ 278.990997][T13452] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2059'. [ 279.029089][T13442] lo speed is unknown, defaulting to 1000 [ 279.099450][T13402] chnl_net:caif_netlink_parms(): no params data found [ 279.271566][T13442] lo speed is unknown, defaulting to 1000 [ 279.280698][T13459] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2062'. [ 279.294112][T13459] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2062'. [ 279.403419][T13442] ip6gre0 speed is unknown, defaulting to 1000 [ 279.404452][T13402] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.465940][T13402] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.494073][T13402] bridge_slave_0: entered allmulticast mode [ 279.515796][T13402] bridge_slave_0: entered promiscuous mode [ 279.547029][T13402] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.568891][T13402] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.581353][T13402] bridge_slave_1: entered allmulticast mode [ 279.599468][T13402] bridge_slave_1: entered promiscuous mode [ 279.704113][T13402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.743507][T13465] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2063'. [ 279.776858][T13402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.828882][T13472] netlink: 'syz.3.2064': attribute type 4 has an invalid length. [ 279.910855][T13475] netlink: 'syz.3.2064': attribute type 4 has an invalid length. [ 279.982853][T13402] team0: Port device team_slave_0 added [ 280.013938][T13402] team0: Port device team_slave_1 added [ 280.047228][T13477] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2066'. [ 280.112604][T13479] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 280.121379][T13402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.129168][T13402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.158178][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2067'. [ 280.168774][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2067'. [ 280.184955][T13402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.229877][T13481] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 280.237219][T13481] IPv6: NLM_F_CREATE should be set when creating new route [ 280.269798][T13402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.287910][T13402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.350902][T13402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.454084][ T2988] hsr_slave_0: left promiscuous mode [ 280.467063][ T2988] hsr_slave_1: left promiscuous mode [ 280.485703][ T2988] veth1_macvtap: left promiscuous mode [ 280.492534][ T2988] veth0_macvtap: left promiscuous mode [ 280.535518][ T54] Bluetooth: hci1: command tx timeout [ 280.545389][T13502] Bluetooth: MGMT ver 1.23 [ 280.607166][T13503] netlink: zone id is out of range [ 280.613051][T13503] netlink: zone id is out of range [ 280.623272][T13503] netlink: del zone limit has 8 unknown bytes [ 280.765698][ T2988] hsr0 (unregistering): left allmulticast mode [ 281.391933][ T52] smc: removing ib device syz0 [ 281.418014][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2071'. [ 281.843357][T13402] hsr_slave_0: entered promiscuous mode [ 281.950273][T13402] hsr_slave_1: entered promiscuous mode [ 281.999867][T13402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.017301][T13402] Cannot create hsr debugfs directory [ 282.026078][T13510] ip6gre0 speed is unknown, defaulting to 1000 [ 282.041425][T13523] netlink: 1280 bytes leftover after parsing attributes in process `syz.6.2079'. [ 282.064232][T13523] openvswitch: netlink: Flow actions attr not present in new flow. [ 282.240388][T13526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.614766][ T54] Bluetooth: hci1: command tx timeout [ 283.004230][ T2988] IPVS: stop unused estimator thread 0... [ 283.761227][T13402] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 283.800323][T13402] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 283.833750][T13402] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 283.879499][T13567] xt_recent: Unsupported userspace flags (00000042) [ 283.895763][T13402] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 283.979453][T13569] x_tables: duplicate underflow at hook 3 [ 284.081333][T13402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.130082][T13402] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.151679][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.158876][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.197485][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.204680][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.238047][T13571] vlan2: entered promiscuous mode [ 284.252732][T13571] bond0: entered promiscuous mode [ 284.305456][T13571] bond0: left promiscuous mode [ 284.461861][T13582] netlink: 'syz.7.2096': attribute type 1 has an invalid length. [ 284.471673][T13584] netlink: 'syz.3.2095': attribute type 10 has an invalid length. [ 284.485646][T13584] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 284.585471][T13587] delete_channel: no stack [ 284.695368][ T54] Bluetooth: hci1: command tx timeout [ 284.727054][T13402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.927126][T13605] __nla_validate_parse: 1 callbacks suppressed [ 284.927148][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2102'. [ 284.969765][T13605] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2102'. [ 285.001638][T13605] gtp2: entered promiscuous mode [ 285.008275][T13605] gtp2: entered allmulticast mode [ 285.209353][T13402] veth0_vlan: entered promiscuous mode [ 285.242785][T13402] veth1_vlan: entered promiscuous mode [ 285.355611][T13620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2107'. [ 285.367969][T13402] veth0_macvtap: entered promiscuous mode [ 285.374700][T13620] netlink: 'syz.3.2107': attribute type 7 has an invalid length. [ 285.390125][T13620] netlink: 'syz.3.2107': attribute type 8 has an invalid length. [ 285.399517][T13402] veth1_macvtap: entered promiscuous mode [ 285.404697][T13620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2107'. [ 285.418037][T13402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.429910][T13402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.445302][T13402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.468657][T13620] gretap0: entered promiscuous mode [ 285.500421][T13620] batadv_slave_1: entered promiscuous mode [ 285.520625][T13628] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2108'. [ 285.537612][T13620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.557596][T13620] Cannot create hsr debugfs directory [ 285.573571][T13620] hsr0: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network [ 285.608827][T13620] hsr0: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.716037][T13402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.740180][T13402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.759165][T13402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.798313][T13402] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.815826][T13402] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.833238][T13402] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.842364][T13402] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.894122][T13634] netlink: 'syz.3.2110': attribute type 2 has an invalid length. [ 285.914255][T13634] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2110'. [ 286.017195][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.025444][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.073305][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.108621][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.211103][T13650] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2115'. [ 286.241330][T13652] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2114'. [ 286.275687][T13652] veth0_to_bridge: entered promiscuous mode [ 286.297682][T13651] veth0_to_bridge: left promiscuous mode [ 286.523985][T13660] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 286.540079][T13660] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 286.692733][T13675] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2122'. [ 286.777999][T13679] netlink: 'syz.4.2123': attribute type 1 has an invalid length. [ 287.168596][T13691] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 287.294706][T13695] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2128'. [ 287.303867][T13695] netlink: 'syz.6.2128': attribute type 7 has an invalid length. [ 287.311898][T13695] netlink: 'syz.6.2128': attribute type 8 has an invalid length. [ 287.341247][T13695] erspan0: entered promiscuous mode [ 287.358035][T13695] batadv_slave_1: entered promiscuous mode [ 287.367943][T13695] erspan0: left promiscuous mode [ 287.379054][T13695] batadv_slave_1: left promiscuous mode [ 287.843062][T13730] nbd: must specify at least one socket [ 287.863530][T13730] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.908511][T13733] netlink: 'syz.4.2135': attribute type 1 has an invalid length. [ 287.925657][T13730] bridge_slave_1 (unregistering): left allmulticast mode [ 287.933575][T13730] bridge_slave_1 (unregistering): left promiscuous mode [ 287.945240][T13735] netlink: 'syz.7.2137': attribute type 32 has an invalid length. [ 287.955527][T13730] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.989434][T13735] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 288.027069][T13736] bond1 (unregistering): Released all slaves [ 288.456788][T13757] macvtap1: entered promiscuous mode [ 288.462347][T13757] vlan0: entered promiscuous mode [ 288.479000][T13757] vlan0: left promiscuous mode [ 289.395295][T13814] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 289.530608][T13814] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.674681][T13814] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.750245][T13832] validate_nla: 1 callbacks suppressed [ 289.750266][T13832] netlink: 'syz.5.2165': attribute type 1 has an invalid length. [ 289.797815][T13814] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.937879][T13814] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.111195][T13840] __nla_validate_parse: 12 callbacks suppressed [ 290.111217][T13840] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.2166'. [ 290.123682][T13842] syzkaller1: entered promiscuous mode [ 290.143850][T13842] syzkaller1: entered allmulticast mode [ 290.157089][T13840] siw: device registration error -23 [ 290.172103][T13814] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.186082][T13842] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2167'. [ 290.211655][T13814] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.318968][T13814] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.370112][T13814] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.815316][T13876] ip6gre0 speed is unknown, defaulting to 1000 [ 290.966257][T13887] lo: entered allmulticast mode [ 291.051789][T13889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2180'. [ 291.053107][T13893] netlink: 160 bytes leftover after parsing attributes in process `syz.5.2179'. [ 291.283241][T13903] tipc: Enabling of bearer rejected, failed to enable media [ 291.328026][T13903] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2182'. [ 291.684620][T13916] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2187'. [ 291.700308][T13918] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2188'. [ 291.744064][T13918] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2188'. [ 291.745254][ T5839] Bluetooth: hci1: command 0x0405 tx timeout [ 292.301540][T13944] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 292.411825][T13944] pimreg: entered allmulticast mode [ 292.819200][T13961] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2195'. [ 292.845871][T13973] vlan6: entered allmulticast mode [ 292.851850][T13973] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 292.876616][T13973] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 292.901972][T13978] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2197'. [ 292.989206][T13951] veth0_to_team: entered promiscuous mode [ 292.995899][T13951] veth0_to_team: entered allmulticast mode [ 293.303836][T13997] bond0: (slave team0): Releasing backup interface [ 293.518097][T14005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.652355][T14012] netlink: 'syz.5.2213': attribute type 39 has an invalid length. [ 293.728378][T14012] smc: removing net device wg0 with user defined pnetid SYZ0 [ 293.962587][T14032] bond3: entered promiscuous mode [ 293.978212][T14032] gretap1: entered promiscuous mode [ 293.983756][T14032] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 293.999863][T14032] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 294.009141][T14032] gretap1: left promiscuous mode [ 294.025947][T14032] bond3 (unregistering): Released all slaves [ 295.845495][T14109] netlink: 'syz.6.2241': attribute type 1 has an invalid length. [ 295.855948][T14104] __nla_validate_parse: 8 callbacks suppressed [ 295.855969][T14104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2235'. [ 296.015925][T14124] netlink: 'syz.3.2243': attribute type 1 has an invalid length. [ 296.023914][T14124] netlink: 'syz.3.2243': attribute type 2 has an invalid length. [ 296.355087][T14136] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 296.362086][ T5883] IPVS: starting estimator thread 0... [ 296.455398][T14139] IPVS: using max 21 ests per chain, 50400 per kthread [ 298.067051][T14109] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 298.098736][T14143] netlink: 'syz.4.2246': attribute type 1 has an invalid length. [ 298.228153][T14151] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2247'. [ 298.615986][T14170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2255'. [ 298.773250][T14189] ax25_connect(): syz.7.2260 uses autobind, please contact jreuter@yaina.de [ 298.887060][T14189] ip6gre0 speed is unknown, defaulting to 1000 [ 298.895245][T14193] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 299.062837][T14192] IPVS: persistence engine module ip_vs_pe_À not found [ 299.385939][T14216] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2268'. [ 299.406091][T14216] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2268'. [ 299.935916][T14237] netlink: 'syz.4.2272': attribute type 2 has an invalid length. [ 299.945283][T14240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2274'. [ 299.966971][T14237] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2272'. [ 299.976376][T14240] delete_channel: no stack [ 300.026654][T14243] netlink: 'syz.5.2275': attribute type 64 has an invalid length. [ 300.049644][T14236] netlink: 'syz.3.2274': attribute type 21 has an invalid length. [ 300.054552][T14243] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2275'. [ 300.070954][T14236] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2274'. [ 300.083828][T14236] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2274'. [ 300.480167][T14273] SET target dimension over the limit! [ 300.639513][T14277] ip6gre2: entered allmulticast mode [ 300.945709][T14287] netlink: 'syz.6.2286': attribute type 2 has an invalid length. [ 300.968056][T14287] __nla_validate_parse: 1 callbacks suppressed [ 300.968078][T14287] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2286'. [ 301.222315][T14309] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2292'. [ 301.253707][T14311] netlink: ct family unspecified [ 301.259463][T14311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.295177][T14311] netlink: ct family unspecified [ 301.304477][T14311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.485405][T14327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2297'. [ 301.620859][T14341] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20002 [ 301.709080][T14345] netlink: 'syz.6.2302': attribute type 2 has an invalid length. [ 301.718410][T14345] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2302'. [ 302.018641][T14348] tipc: Invalid UDP bearer configuration [ 302.018682][T14348] tipc: Enabling of bearer rejected, failed to enable media [ 302.087428][T14355] bridge0: left allmulticast mode [ 302.224063][T14366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2310'. [ 302.252992][T14366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2310'. [ 302.276968][T14368] raw_sendmsg: syz.6.2311 forgot to set AF_INET. Fix it! [ 302.518287][T14382] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2316'. [ 302.571003][T14383] netlink: 'syz.5.2315': attribute type 2 has an invalid length. [ 302.579356][T14383] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2315'. [ 302.582125][T14385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2318'. [ 302.614250][T14389] ip6gre0 speed is unknown, defaulting to 1000 [ 302.944124][T14404] netlink: 'syz.3.2323': attribute type 10 has an invalid length. [ 302.981975][T14404] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.003145][T14404] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.021964][T14404] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.035176][T14404] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.268887][T14412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2324'. [ 303.284855][T14412] netlink: 'syz.3.2324': attribute type 1 has an invalid length. [ 303.383805][T14391] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 303.442065][T14421] netlink: 'syz.3.2327': attribute type 1 has an invalid length. [ 303.750882][T14438] netlink: 'syz.7.2332': attribute type 2 has an invalid length. [ 304.361101][T14471] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 304.386328][T14471] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 304.415018][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.453096][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.464778][T14474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.476185][T14474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.620562][T14483] netlink: 'syz.5.2347': attribute type 1 has an invalid length. [ 305.003803][T14495] netlink: 'syz.5.2349': attribute type 8 has an invalid length. [ 305.048376][T14494] ip6gre0 speed is unknown, defaulting to 1000 [ 305.124304][T14503] IPVS: set_ctl: invalid protocol: 8 172.20.20.22:20002 [ 305.261649][T14506] pim6reg: entered allmulticast mode [ 305.363685][T14505] pim6reg: left allmulticast mode [ 305.799754][T14531] can: request_module (can-proto-0) failed. [ 306.181692][T14553] __nla_validate_parse: 21 callbacks suppressed [ 306.181712][T14553] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2366'. [ 306.203475][T14553] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2366'. [ 306.332029][T14501] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2350'. [ 306.519039][T14566] ip6gre0 speed is unknown, defaulting to 1000 [ 307.201034][T14582] netlink: 'syz.3.2375': attribute type 21 has an invalid length. [ 307.215986][T14582] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2375'. [ 307.756804][T14590] netlink: 'syz.5.2379': attribute type 3 has an invalid length. [ 309.506583][T14597] netlink: 'syz.3.2382': attribute type 2 has an invalid length. [ 309.514554][T14597] netlink: 'syz.3.2382': attribute type 9 has an invalid length. [ 309.522328][T14597] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2382'. [ 309.543398][T14593] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2381'. [ 309.655197][T14602] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2381'. [ 310.337589][T14632] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2390'. [ 310.442720][T14634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2391'. [ 310.484500][T14634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2391'. [ 311.654763][ T5839] Bluetooth: hci1: command 0x0405 tx timeout [ 312.712674][T14634] gretap0: entered promiscuous mode [ 312.720246][T14634] batadv_slave_1: entered promiscuous mode [ 312.732778][T14634] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 312.740822][T14634] Cannot create hsr debugfs directory [ 312.788994][T14647] ip6gre0 speed is unknown, defaulting to 1000 [ 312.942834][T14674] netlink: 288 bytes leftover after parsing attributes in process `syz.7.2401'. [ 312.967101][T14677] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2402'. [ 312.994694][T14677] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2402'. [ 313.045336][T14677] netlink: 'syz.6.2402': attribute type 16 has an invalid length. [ 313.235123][T14689] xt_TCPMSS: Only works on TCP SYN packets [ 313.259702][T14692] netlink: 'syz.6.2407': attribute type 11 has an invalid length. [ 313.283058][T14692] netlink: 204 bytes leftover after parsing attributes in process `syz.6.2407'. [ 313.761188][T14715] netlink: 'syz.6.2414': attribute type 2 has an invalid length. [ 313.864843][T14718] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2415'. [ 313.874977][T14719] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2415'. [ 313.886881][T14718] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2415'. [ 314.532746][T14737] bridge_slave_0: left allmulticast mode [ 314.549177][T14737] bridge_slave_0: left promiscuous mode [ 314.563015][T14737] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.836495][T14737] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 314.871286][T14711] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 315.081007][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2421'. [ 315.293248][T14753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2426'. [ 315.654584][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 316.025515][T14785] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2435'. [ 316.317329][T14803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.387574][T14806] netlink: 'syz.4.2443': attribute type 4 has an invalid length. [ 316.417392][T14808] netlink: 'syz.6.2444': attribute type 11 has an invalid length. [ 316.466883][T14810] ipvlan2: entered promiscuous mode [ 316.598269][T14820] ÛÌî]-Ñ: renamed from lo (while UP) [ 316.707785][T14820] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 317.591001][T14887] netlink: 'syz.6.2464': attribute type 1 has an invalid length. [ 317.615669][T14887] netlink: 'syz.6.2464': attribute type 2 has an invalid length. [ 317.804946][T14898] netlink: 'syz.3.2468': attribute type 1 has an invalid length. [ 317.812739][T14898] netlink: 'syz.3.2468': attribute type 2 has an invalid length. [ 318.135792][T14912] netlink: 'syz.5.2472': attribute type 2 has an invalid length. [ 318.154747][T14912] netlink: 'syz.5.2472': attribute type 9 has an invalid length. [ 318.164703][T14912] __nla_validate_parse: 7 callbacks suppressed [ 318.164723][T14912] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2472'. [ 318.186758][T14917] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2472'. [ 318.279232][T14924] ip6gre0 speed is unknown, defaulting to 1000 [ 318.365210][T14920] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2475'. [ 318.379226][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2475'. [ 318.409828][T14927] macsec1: entered promiscuous mode [ 318.434495][T14927] macvlan1: entered promiscuous mode [ 318.440011][T14927] macsec1: entered allmulticast mode [ 318.472257][T14927] macvlan1: entered allmulticast mode [ 318.493199][T14927] macvlan1: left allmulticast mode [ 318.514463][T14927] macvlan1: left promiscuous mode [ 319.642471][T14968] lo: entered promiscuous mode [ 319.660811][T14967] lo: left promiscuous mode [ 320.083610][T14989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2496'. [ 320.159144][T14994] ipvlan2: entered promiscuous mode [ 320.175397][T14994] ipvlan2: entered allmulticast mode [ 320.194886][T14994] vlan0: entered allmulticast mode [ 320.237485][T14999] ip6gre0 speed is unknown, defaulting to 1000 [ 320.464473][T15012] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2503'. [ 320.571813][T15018] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2504'. [ 320.586636][T15004] ip6gre0 speed is unknown, defaulting to 1000 [ 320.621904][T15018] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2504'. [ 320.626891][T15020] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2504'. [ 320.674678][T15020] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2504'. [ 320.939027][T15029] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 321.041661][T15032] syzkaller0: entered promiscuous mode [ 321.074781][T15032] syzkaller0: entered allmulticast mode [ 321.088218][T15036] netlink: 'syz.4.2509': attribute type 17 has an invalid length. [ 321.109993][T15036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.127245][T15036] netlink: 'syz.4.2509': attribute type 17 has an invalid length. [ 321.140113][T15036] netlink: 'syz.4.2509': attribute type 17 has an invalid length. [ 321.148608][T15036] netlink: 'syz.4.2509': attribute type 17 has an invalid length. [ 321.162075][T15036] netlink: 'syz.4.2509': attribute type 17 has an invalid length. [ 321.170634][T15036] netlink: 'syz.4.2509': attribute type 17 has an invalid length. [ 321.185452][T15036] netlink: 'syz.4.2509': attribute type 17 has an invalid length. [ 321.252109][T15036] netlink: 'syz.4.2509': attribute type 17 has an invalid length. [ 323.431781][T15056] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2) [ 323.560403][T15059] __nla_validate_parse: 10 callbacks suppressed [ 323.560427][T15059] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2515'. [ 323.614688][T15059] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2515'. [ 323.637897][T15059] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2515'. [ 323.650058][T15057] syzkaller0: entered promiscuous mode [ 323.665508][T15057] syzkaller0: entered allmulticast mode [ 323.685488][T15059] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2515'. [ 323.725486][T15059] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2515'. [ 323.801983][T15057] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2513'. [ 326.474640][ T5836] Bluetooth: hci1: command 0x0405 tx timeout [ 326.573359][T15099] netlink: 'syz.7.2526': attribute type 15 has an invalid length. [ 326.581666][T15099] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2526'. [ 326.713732][T15108] netlink: 'syz.3.2530': attribute type 1 has an invalid length. [ 326.730026][T15108] netlink: 'syz.3.2530': attribute type 1 has an invalid length. [ 326.848467][T15109] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2529'. [ 327.209112][T15139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2539'. [ 327.350651][T15149] xt_NFQUEUE: number of total queues is 0 [ 327.479925][T15155] bond0: entered promiscuous mode [ 327.505539][T15157] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2544'. [ 327.520299][T15155] bridge0: entered promiscuous mode [ 328.041389][T15177] tipc: Started in network mode [ 328.064941][T15177] tipc: Node identity 7, cluster identity 9 [ 328.070911][T15177] tipc: Node number set to 7 [ 328.107790][T15177] tipc: Cannot configure node identity twice [ 328.470705][T15200] ip6gre0 speed is unknown, defaulting to 1000 [ 329.259476][T15217] netlink: 'syz.5.2559': attribute type 11 has an invalid length. [ 329.470608][T15222] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2561'. [ 329.522076][T15228] x_tables: duplicate underflow at hook 2 [ 330.410482][T15264] ip6gre0 speed is unknown, defaulting to 1000 [ 330.500442][T15272] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2574'. [ 330.801706][T15291] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2578'. [ 331.136515][T15301] syzkaller1: entered promiscuous mode [ 331.152975][T15301] syzkaller1: entered allmulticast mode [ 331.535894][T15320] vlan2: entered promiscuous mode [ 331.561455][T15320] bond0: entered promiscuous mode [ 331.597168][T15320] bond0: left promiscuous mode [ 331.615397][T15332] netlink: 'syz.7.2590': attribute type 4 has an invalid length. [ 331.685597][T15329] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2591'. [ 331.768751][ T1161] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 331.908818][T15341] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.2593'. [ 332.035301][T15352] netlink: 'syz.5.2592': attribute type 1 has an invalid length. [ 332.057950][T15345] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2594'. [ 332.130494][T15345] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2594'. [ 332.156522][T15345] ebt_among: dst integrity fail: 101 [ 332.562584][T15368] geneve2: entered promiscuous mode [ 332.594631][T15368] geneve2: entered allmulticast mode [ 332.632353][T15373] SET target dimension over the limit! [ 332.671928][T15375] ip6gre0 speed is unknown, defaulting to 1000 [ 332.731361][T15377] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2606'. [ 332.887133][T15383] netlink: 'syz.3.2607': attribute type 1 has an invalid length. [ 333.132855][T15385] 8021q: adding VLAN 0 to HW filter on device bond7 [ 333.174177][T15385] bond6: (slave bond7): making interface the new active one [ 333.208429][T15385] bond6: (slave bond7): Enslaving as an active interface with an up link [ 333.241005][T15387] lo: entered promiscuous mode [ 333.371499][T15393] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 333.492474][T15374] lo: left promiscuous mode [ 333.558122][T15398] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 333.582751][T15398] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2611'. [ 333.628546][T15398] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2611'. [ 333.821738][T15410] netlink: 'syz.7.2616': attribute type 1 has an invalid length. [ 334.294161][T15427] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:ffff:fffd with DS=0xb [ 334.473307][T15430] ip6gre0 speed is unknown, defaulting to 1000 [ 334.661069][T15445] x_tables: duplicate underflow at hook 1 [ 335.210722][T15471] __nla_validate_parse: 4 callbacks suppressed [ 335.210745][T15471] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2635'. [ 335.264335][T15471] nbd: must specify at least one socket [ 335.285622][T15473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2636'. [ 335.339980][T15473] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 335.507798][T15486] netlink: 'syz.3.2641': attribute type 1 has an invalid length. [ 335.553570][T15486] bond8: entered promiscuous mode [ 335.564969][T15486] 8021q: adding VLAN 0 to HW filter on device bond8 [ 335.584976][T15489] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2641'. [ 335.709866][T15495] netlink: 176 bytes leftover after parsing attributes in process `syz.7.2642'. [ 336.009494][T15519] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 336.026860][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2647'. [ 336.918658][T15558] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11 [ 337.098430][T15554] ip6gre0 speed is unknown, defaulting to 1000 [ 337.140046][T15562] xt_CT: You must specify a L4 protocol and not use inversions on it [ 337.482513][T15575] bond0: left promiscuous mode [ 337.502511][T15575] bridge0: left promiscuous mode [ 337.533558][T15575] bond0: entered allmulticast mode [ 337.558392][T15575] bridge0: entered allmulticast mode [ 337.602368][T15580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2666'. [ 337.691221][T15586] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2668'. [ 337.761895][T15593] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2668'. [ 337.912780][T15605] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2671'. [ 338.495483][T15621] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 338.856904][T15635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2681'. [ 339.330134][T15661] rdma_op ffff8880244139f0 conn xmit_rdma 0000000000000000 [ 339.524198][T15669] ip6gre0 speed is unknown, defaulting to 1000 [ 339.778636][T15684] netlink: 'syz.3.2692': attribute type 39 has an invalid length. [ 339.911917][T15691] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 340.360687][T15708] __nla_validate_parse: 3 callbacks suppressed [ 340.360711][T15708] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2700'. [ 340.653307][T15719] xt_NFQUEUE: number of total queues is 0 [ 340.819977][T15737] x_tables: duplicate underflow at hook 1 [ 340.832595][T15738] x_tables: duplicate underflow at hook 1 [ 340.938558][T15742] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 341.180254][T15751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2712'. [ 341.306602][T15744] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 341.371848][T15744] netlink: 'syz.5.2709': attribute type 2 has an invalid length. [ 341.404517][T15744] netlink: 'syz.5.2709': attribute type 1 has an invalid length. [ 341.801014][T15778] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2718'. [ 341.889291][T15770] netlink: 'syz.6.2717': attribute type 10 has an invalid length. [ 341.925702][T15781] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2719'. [ 342.008056][T15787] ip6gre0 speed is unknown, defaulting to 1000 [ 342.222092][T15786] ip6gre0 speed is unknown, defaulting to 1000 [ 342.623341][T15813] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2727'. [ 342.695806][T15820] netlink: 'syz.5.2728': attribute type 2 has an invalid length. [ 342.707817][T15823] ebt_among: src integrity fail: 30a [ 342.713801][T15820] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2728'. [ 342.840252][T15826] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2731'. [ 342.859515][T15826] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.889141][T15826] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.914906][T15826] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.940396][T15826] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.953536][T15826] geneve2: entered promiscuous mode [ 342.959764][T15826] geneve2: entered allmulticast mode [ 342.972774][T15832] tipc: Started in network mode [ 342.979845][T15832] tipc: Node identity ac1414aa, cluster identity 1 [ 342.993116][T15832] tipc: Enabling of bearer rejected, failed to enable media [ 343.475343][T15852] netlink: 'syz.3.2737': attribute type 21 has an invalid length. [ 343.697915][T15859] netlink: 'syz.7.2739': attribute type 1 has an invalid length. [ 343.759554][T15859] 8021q: adding VLAN 0 to HW filter on device bond3 [ 343.783193][T15859] lo: entered allmulticast mode [ 343.814336][T15859] tunl0: entered allmulticast mode [ 343.831275][T15861] netlink: 312 bytes leftover after parsing attributes in process `syz.6.2740'. [ 343.844918][T15859] gre0: entered allmulticast mode [ 343.856989][T15859] gretap0: entered allmulticast mode [ 343.862436][T15859] erspan0: entered allmulticast mode [ 343.880909][T15859] ip_vti0: entered allmulticast mode [ 343.886599][T15859] ip6_vti0: entered allmulticast mode [ 343.892164][T15859] sit0: entered allmulticast mode [ 343.898178][T15859] ip6tnl0: entered allmulticast mode [ 343.903574][T15859] ip6gre0: entered allmulticast mode [ 343.909063][T15859] syz_tun: entered allmulticast mode [ 343.914683][T15859] ip6gretap0: entered allmulticast mode [ 343.920464][T15859] vcan0: entered allmulticast mode [ 343.925929][T15859] team0: entered allmulticast mode [ 343.931142][T15859] vlan2: entered allmulticast mode [ 343.931782][T15867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.936748][T15859] dummy0: entered allmulticast mode [ 343.950856][T15859] nlmon0: entered allmulticast mode [ 343.956567][T15859] caif0: entered allmulticast mode [ 343.961813][T15859] vxcan0: entered allmulticast mode [ 343.967381][T15859] vxcan1: entered allmulticast mode [ 343.972691][T15859] veth0: entered allmulticast mode [ 343.979469][T15859] veth1: entered allmulticast mode [ 343.985862][T15859] wg0: entered allmulticast mode [ 343.990937][T15859] wg1: entered allmulticast mode [ 343.996675][T15859] wg2: entered allmulticast mode [ 344.001739][T15859] veth0_to_bridge: entered allmulticast mode [ 344.008147][T15859] bridge_slave_0: entered allmulticast mode [ 344.014155][T15859] veth1_to_bridge: entered allmulticast mode [ 344.020361][T15859] bridge_slave_1: entered allmulticast mode [ 344.026447][T15859] veth0_to_bond: entered allmulticast mode [ 344.032365][T15859] bond_slave_0: entered allmulticast mode [ 344.038333][T15859] veth1_to_bond: entered allmulticast mode [ 344.044298][T15859] bond_slave_1: entered allmulticast mode [ 344.050304][T15859] veth0_to_team: entered allmulticast mode [ 344.057217][T15859] team_slave_0: entered allmulticast mode [ 344.063134][T15859] veth1_to_team: entered allmulticast mode [ 344.069147][T15859] team_slave_1: entered allmulticast mode [ 344.075121][T15859] veth0_to_batadv: entered allmulticast mode [ 344.081240][T15859] batadv_slave_0: entered allmulticast mode [ 344.089460][T15859] xfrm0: entered allmulticast mode [ 344.096094][T15859] veth0_to_hsr: entered allmulticast mode [ 344.102541][T15859] hsr_slave_0: entered allmulticast mode [ 344.108474][T15859] veth1_to_hsr: entered allmulticast mode [ 344.114598][T15859] hsr_slave_1: entered allmulticast mode [ 344.120353][T15859] hsr0: entered allmulticast mode [ 344.125585][T15859] veth1_virt_wifi: entered allmulticast mode [ 344.131708][T15859] veth0_virt_wifi: entered allmulticast mode [ 344.138172][T15859] veth1_vlan: entered allmulticast mode [ 344.143849][T15859] veth0_vlan: entered allmulticast mode [ 344.149822][T15859] vlan1: entered allmulticast mode [ 344.155275][T15859] macvlan0: entered allmulticast mode [ 344.160915][T15859] ipvlan0: entered allmulticast mode [ 344.166666][T15859] ipvlan1: entered allmulticast mode [ 344.180468][T15859] veth1_macvtap: entered allmulticast mode [ 344.192201][T15859] veth0_macvtap: entered allmulticast mode [ 344.198467][T15859] macvtap0: entered allmulticast mode [ 344.204890][T15859] geneve0: entered allmulticast mode [ 344.210392][T15859] geneve1: entered allmulticast mode [ 344.216999][T15859] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 344.224284][T15859] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode [ 344.231956][T15859] bridge1: entered allmulticast mode [ 344.237641][T15859] syztnl1: entered allmulticast mode [ 344.243222][T15859] ip6gre1: entered allmulticast mode [ 344.248732][T15859] vxlan0: entered allmulticast mode [ 344.254016][T15859] wireguard0: entered allmulticast mode [ 344.259847][T15859] ip6gretap1: entered allmulticast mode [ 344.265723][T15859] sit0.0: entered allmulticast mode [ 344.271085][T15859] syztnl0: entered allmulticast mode [ 344.276719][T15859] veth2: entered allmulticast mode [ 344.281964][T15859] veth3: entered allmulticast mode [ 344.287237][T15859] veth0_to_team.1: entered allmulticast mode [ 344.293338][T15859] bridge2: entered allmulticast mode [ 344.298902][T15859] bond1: entered allmulticast mode [ 344.304658][T15859] veth4: entered allmulticast mode [ 344.314806][T15859] veth5: entered allmulticast mode [ 344.320118][T15859] bond2: entered allmulticast mode [ 344.337847][T15859] bond0.3: entered allmulticast mode [ 344.343683][T15859] vlan3: entered allmulticast mode [ 344.350037][T15859] bridge3: entered allmulticast mode [ 344.356389][T15859] bridge4: entered allmulticast mode [ 344.361890][T15859] vxlan1: entered allmulticast mode [ 344.367364][T15859] erspan1: entered allmulticast mode [ 344.372831][T15859] ip6tnl1: entered allmulticast mode [ 344.391019][T15859] ip6_vti1: entered allmulticast mode [ 344.397050][T15859] gtp0: entered allmulticast mode [ 344.402351][T15859] macvlan2: entered allmulticast mode [ 344.408658][T15859] gretap1: entered allmulticast mode [ 344.429127][T15859] netdevsim netdevsim7 eth0: entered allmulticast mode [ 344.436325][T15859] netdevsim netdevsim7 eth1: entered allmulticast mode [ 344.444800][T15859] netdevsim netdevsim7 eth2: entered allmulticast mode [ 344.451791][T15859] netdevsim netdevsim7 eth3: entered allmulticast mode [ 344.460283][T15859] ipvlan2: left promiscuous mode [ 344.465985][T15859] vxlan2: entered allmulticast mode [ 344.471386][T15859] veth6: entered allmulticast mode [ 344.477122][T15859] veth7: entered allmulticast mode [ 344.482399][T15859] bridge5: entered allmulticast mode [ 344.488047][T15859] bridge_slave_1.: entered allmulticast mode [ 344.494138][T15859] team1: entered allmulticast mode [ 344.500034][T15859] bridge6: entered allmulticast mode [ 344.505784][T15859] bridge7: entered allmulticast mode [ 344.511654][T15859] bridge8: entered allmulticast mode [ 344.520626][T15859] bond3: entered allmulticast mode [ 344.640065][T15873] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2742'. [ 344.653456][T15873] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2742'. [ 345.409560][T15908] __nla_validate_parse: 3 callbacks suppressed [ 345.409582][T15908] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2755'. [ 345.451303][T15908] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2755'. [ 345.625401][T15919] SET target dimension over the limit! [ 345.639611][T15921] rdma_rxe: rxe_newlink: failed to add ip6gre0 [ 345.868210][T15937] netlink: 'syz.4.2764': attribute type 10 has an invalid length. [ 345.916540][T15941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2763'. [ 345.950915][T15944] hsr0: entered promiscuous mode [ 346.028389][T15953] bridge0: entered promiscuous mode [ 346.041346][T15941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2763'. [ 346.064678][T15941] gretap4: left promiscuous mode [ 346.070001][T15941] bridge0: port 2(gretap4) entered disabled state [ 346.187468][T15941] batadv0: left allmulticast mode [ 346.192693][T15941] batadv0: left promiscuous mode [ 346.200078][T15941] bridge0: port 1(batadv0) entered disabled state [ 346.416080][T15941] bridge0 (unregistering): left promiscuous mode [ 346.503750][T15964] ip6gre0 speed is unknown, defaulting to 1000 [ 346.830023][T15974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2774'. [ 346.841669][T15974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2774'. [ 346.885274][T15976] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 347.608158][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.627671][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.644709][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.671780][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.680167][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 347.688506][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.768477][T15999] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2781'. [ 347.798858][T15990] ip6gre0 speed is unknown, defaulting to 1000 [ 347.831306][T15999] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2781'. [ 348.269682][T16019] netlink: 'syz.4.2786': attribute type 27 has an invalid length. [ 348.371566][T16019] syzkaller0: entered promiscuous mode [ 348.389886][T16019] syzkaller0: entered allmulticast mode [ 348.519129][T16025] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2788'. [ 348.606451][T16029] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2791'. [ 349.815179][ T5839] Bluetooth: hci0: command tx timeout [ 350.886794][T16035] __nla_validate_parse: 1 callbacks suppressed [ 350.886816][T16035] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2792'. [ 351.133680][T15990] chnl_net:caif_netlink_parms(): no params data found [ 351.436121][T16059] gretap1: entered allmulticast mode [ 351.617755][T16078] gretap1: entered allmulticast mode [ 351.618380][T16085] xt_CT: You must specify a L4 protocol and not use inversions on it [ 351.673812][T15990] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.690713][T15990] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.699324][T15990] bridge_slave_0: entered allmulticast mode [ 351.707154][T15990] bridge_slave_0: entered promiscuous mode [ 351.725405][T15990] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.732721][T15990] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.758211][T15990] bridge_slave_1: entered allmulticast mode [ 351.777956][T15990] bridge_slave_1: entered promiscuous mode [ 351.853174][T15990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.882923][T15990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.917162][ T5839] Bluetooth: hci0: command tx timeout [ 352.016949][T15990] team0: Port device team_slave_0 added [ 352.042175][T15990] team0: Port device team_slave_1 added [ 352.059471][T16101] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2806'. [ 352.226282][T15990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.245678][T15990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.292684][T16112] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2808'. [ 352.310757][T15990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.337838][T15990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.348948][T15990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.355703][T16115] xt_CONNSECMARK: invalid mode: 0 [ 352.383962][T15990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.396637][T16118] netlink: 'syz.6.2810': attribute type 5 has an invalid length. [ 352.499042][T15990] hsr_slave_0: entered promiscuous mode [ 352.516783][T15990] hsr_slave_1: entered promiscuous mode [ 352.531754][T15990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.547698][T15990] Cannot create hsr debugfs directory [ 352.642520][T16126] ip6gre0 speed is unknown, defaulting to 1000 [ 352.651590][T16128] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2813'. [ 352.666320][T16128] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2813'. [ 352.761798][T15990] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.822058][T15990] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.852063][T16133] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2814'. [ 352.882405][T15990] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.909589][T16134] pimreg3: entered allmulticast mode [ 352.959244][T15990] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.999730][T16134] pimreg3: left allmulticast mode [ 353.206698][T15990] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 353.223777][T15990] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 353.246612][T16140] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 353.248983][T15990] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 353.272472][T15990] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 353.279673][T16142] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 353.391633][T16148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2817'. [ 353.477739][T16148] tap0: tun_chr_ioctl cmd 1074025678 [ 353.483103][T16148] tap0: group set to 0 [ 353.631311][T16161] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2821'. [ 353.658948][T15990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.680344][T16162] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2821'. [ 353.728530][T16161] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2821'. [ 353.796067][T15990] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.829399][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.836635][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.852666][T16137] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 353.886356][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.893543][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.946949][T16166] netlink: 'syz.7.2823': attribute type 10 has an invalid length. [ 353.975293][ T5839] Bluetooth: hci0: command tx timeout [ 354.095578][T16174] tunl0: left allmulticast mode [ 354.329459][T16199] netlink: 'syz.6.2829': attribute type 9 has an invalid length. [ 354.520835][T15990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.619780][T15990] veth0_vlan: entered promiscuous mode [ 354.630053][T16216] netlink: 'syz.6.2834': attribute type 10 has an invalid length. [ 354.657211][T15990] veth1_vlan: entered promiscuous mode [ 354.746318][T15990] veth0_macvtap: entered promiscuous mode [ 354.756709][T15990] veth1_macvtap: entered promiscuous mode [ 354.802350][T15990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.813838][T15990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.824543][T15990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.835270][T15990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.849568][T15990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.869561][T15990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.880795][T15990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.905724][T15990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.917102][T15990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.942686][T15990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.977560][T15990] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.012896][T15990] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.041507][T15990] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.070040][T15990] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.108210][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 355.353436][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.370007][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.494191][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.529573][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.732400][T16260] netlink: 'syz.6.2847': attribute type 10 has an invalid length. [ 355.798839][T16260] syz_tun: entered promiscuous mode [ 355.859250][T16264] ip6gre0 speed is unknown, defaulting to 1000 [ 355.981541][T16271] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 356.054931][ T5839] Bluetooth: hci0: command tx timeout [ 356.090247][T16278] netlink: 'syz.4.2852': attribute type 11 has an invalid length. [ 356.342528][T16287] __nla_validate_parse: 4 callbacks suppressed [ 356.342550][T16287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2853'. [ 356.431850][T16286] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2853'. [ 356.513964][T16287] bond1: entered promiscuous mode [ 356.551792][T16292] bond1 (unregistering): Released all slaves [ 356.632584][T16290] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2855'. [ 356.981651][T16303] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2857'. [ 356.983269][T16301] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2856'. [ 357.237725][T16316] netlink: 'syz.5.2860': attribute type 1 has an invalid length. [ 357.274522][T16316] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2860'. [ 358.147909][ T5839] Bluetooth: hci0: command tx timeout [ 362.101315][T16336] ip6gre0 speed is unknown, defaulting to 1000 [ 362.212876][T16341] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2868'. [ 362.481614][T16348] xt_time: unknown flags 0x4 [ 362.559123][T16350] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2872'. [ 362.584832][T16350] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2872'. [ 362.701515][T16350] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2872'. [ 362.729393][T16350] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2872'. [ 362.976816][T16364] netlink: 'syz.7.2876': attribute type 1 has an invalid length. [ 363.005761][T16364] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2876'. [ 363.182006][T16373] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input12 [ 363.207658][T16361] sit0: left promiscuous mode [ 363.305362][T16361] syz_tun: left promiscuous mode [ 363.345325][T16381] Bluetooth: MGMT ver 1.23 [ 364.113629][T16409] x_tables: duplicate underflow at hook 2 [ 364.120145][T16361] ipvlan1: left promiscuous mode [ 364.134527][T16361] ipvlan1: left allmulticast mode [ 364.307059][T16361] bond1: left promiscuous mode [ 364.311918][T16361] bond1: left allmulticast mode [ 364.336311][T16361] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.345239][T16361] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.353604][T16361] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.362203][T16361] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.415129][T16361] ipvlan2: left allmulticast mode [ 364.420244][T16361] veth0_vlan: left allmulticast mode [ 364.658796][T16361] ip6gre2: left allmulticast mode [ 364.709738][T16361] gretap4: left allmulticast mode [ 365.228389][T16415] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 365.543590][T16419] syzkaller0: entered promiscuous mode [ 365.566231][T16419] syzkaller0: entered allmulticast mode [ 365.678229][T16434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2892'. [ 367.809153][T16437] ip6gre0 speed is unknown, defaulting to 1000 [ 367.961850][T16446] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2896'. [ 368.113925][T16452] tipc: Failed to remove unknown binding: 66,1,1/0:2220333142/2220333144 [ 368.196459][T16454] ip6gre3: entered allmulticast mode [ 368.628748][T16469] netlink: 'syz.7.2903': attribute type 1 has an invalid length. [ 368.793223][T16472] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2904'. [ 369.549738][T16493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2910'. [ 371.123145][T16493] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 371.398115][T16508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2914'. [ 371.484031][T16516] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2915'. [ 371.495356][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2915'. [ 371.505752][T16516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2915'. [ 371.593151][T16520] netlink: 'syz.5.2917': attribute type 1 has an invalid length. [ 371.601194][T16520] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2917'. [ 371.872357][T16538] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 0, id = 0 [ 371.882374][T16533] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2921'. [ 372.032456][T16521] delete_channel: no stack [ 372.815101][T16573] Cannot find del_set index 2 as target [ 372.827444][T16574] Cannot find del_set index 2 as target [ 373.395872][T16596] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2940'. [ 373.681673][T16606] ip6gre0 speed is unknown, defaulting to 1000 [ 373.988476][T16617] netlink: 'syz.5.2946': attribute type 4 has an invalid length. [ 374.038475][T16616] netlink: 'syz.5.2946': attribute type 4 has an invalid length. [ 374.129048][T16623] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2949'. [ 374.151657][T16623] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2949'. [ 374.182025][T16623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2949'. [ 374.406590][T16631] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.542931][T16631] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.601919][T16631] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.665767][T16631] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.740533][T16651] netlink: 'syz.7.2957': attribute type 2 has an invalid length. [ 374.780503][T16651] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2957'. [ 374.804689][T16651] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2957'. [ 374.909169][T16631] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.940358][T16651] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 374.940578][T16631] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.020491][T16631] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.070978][T16631] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.384941][T16663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2961'. [ 375.457312][T16678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2961'. [ 375.803864][T16693] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2970'. [ 375.819753][T16693] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2970'. [ 375.890241][T16693] team0: entered promiscuous mode [ 375.902519][T16693] team0: left promiscuous mode [ 375.943585][T16704] tipc: Failed to remove unknown binding: 66,1,1/0:121399325/121399327 [ 376.234225][T16720] ip6gre0 speed is unknown, defaulting to 1000 [ 376.283712][T16717] netlink: 'syz.5.2977': attribute type 2 has an invalid length. [ 376.732940][T16744] netlink: 'syz.3.2986': attribute type 10 has an invalid length. [ 376.787848][T16744] netlink: 'syz.3.2986': attribute type 10 has an invalid length. [ 376.828326][T16744] netlink: 'syz.3.2986': attribute type 10 has an invalid length. [ 376.878757][T16744] netlink: 'syz.3.2986': attribute type 10 has an invalid length. [ 376.911813][T16744] netlink: 'syz.3.2986': attribute type 10 has an invalid length. [ 376.960494][T16744] netlink: 'syz.3.2986': attribute type 10 has an invalid length. [ 377.189335][T16758] pim6reg: entered allmulticast mode [ 377.199003][T16756] pim6reg: left allmulticast mode [ 379.724776][T16779] bridge9: entered allmulticast mode [ 379.740510][T16777] ip6gre0: entered promiscuous mode [ 379.751481][T16777] ip6gre0: entered allmulticast mode [ 379.869923][T16786] __nla_validate_parse: 6 callbacks suppressed [ 379.869944][T16786] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2998'. [ 379.960615][T16794] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2998'. [ 380.084624][T16783] ip6gre0 speed is unknown, defaulting to 1000 [ 380.260995][T16802] ------------[ cut here ]------------ [ 380.267104][T16802] WARNING: CPU: 0 PID: 16802 at net/rxrpc/sendmsg.c:296 rxrpc_send_data+0x2969/0x2b30 [ 380.277167][T16802] Modules linked in: [ 380.281115][T16802] CPU: 0 UID: 0 PID: 16802 Comm: syz.7.3003 Not tainted 6.13.0-rc2-syzkaller-00389-g2c27c7663390 #0 [ 380.292039][T16802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 380.302332][T16802] RIP: 0010:rxrpc_send_data+0x2969/0x2b30 [ 380.308508][T16802] Code: 24 48 48 89 de e8 77 33 b3 f6 4c 39 f3 b8 00 fe ff ff 41 bf fc ff ff ff 44 0f 44 f8 45 31 f6 e9 71 fd ff ff e8 78 2e b3 f6 90 <0f> 0b 90 48 8b 7c 24 28 e8 8a f2 0d f7 e9 46 fd ff ff 89 d9 80 e1 [ 380.328393][T16802] RSP: 0018:ffffc9000c2173a0 EFLAGS: 00010293 [ 380.335242][T16802] RAX: ffffffff8aec2fc8 RBX: ffff888061620b00 RCX: ffff88805ba98000 [ 380.343265][T16802] RDX: 0000000000000000 RSI: 00000000000000ff RDI: ffff88805508c440 [ 380.351773][T16802] RBP: ffffc9000c217650 R08: ffff88805508c43f R09: 0000000000000000 [ 380.360437][T16802] R10: ffff88805508c340 R11: ffffed100aa11888 R12: ffff888061620ac8 [ 380.369087][T16802] R13: 1ffff1100c2c415f R14: ffff88805508c000 R15: 0000000000000000 [ 380.377476][T16802] FS: 00007f01d4da66c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 380.386773][T16802] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 380.393391][T16802] CR2: 0000000020001400 CR3: 000000006f3ec000 CR4: 00000000003526f0 [ 380.401971][T16802] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 380.410347][T16802] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 380.418778][T16802] Call Trace: [ 380.422092][T16802] [ 380.425693][T16802] ? __warn+0x165/0x4d0 [ 380.429896][T16802] ? rxrpc_send_data+0x2969/0x2b30 [ 380.435147][T16802] ? report_bug+0x2b3/0x500 [ 380.439701][T16802] ? rxrpc_send_data+0x2969/0x2b30 [ 380.444952][T16802] ? handle_bug+0x60/0x90 [ 380.449336][T16802] ? exc_invalid_op+0x1a/0x50 [ 380.454220][T16802] ? asm_exc_invalid_op+0x1a/0x20 [ 380.459805][T16802] ? rxrpc_send_data+0x2968/0x2b30 [ 380.465015][T16802] ? rxrpc_send_data+0x2969/0x2b30 [ 380.470251][T16802] ? __pfx_rxrpc_send_data+0x10/0x10 [ 380.475777][T16802] ? __local_bh_enable_ip+0x168/0x200 [ 380.481240][T16802] ? lockdep_hardirqs_on+0x99/0x150 [ 380.486886][T16802] ? __local_bh_enable_ip+0x168/0x200 [ 380.492322][T16802] ? __pfx_default_wake_function+0x10/0x10 [ 380.495469][T16808] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3005'. [ 380.498299][T16802] rxrpc_do_sendmsg+0x1569/0x1910 [ 380.511743][T16808] validate_nla: 27 callbacks suppressed [ 380.511763][T16808] netlink: 'syz.4.3005': attribute type 7 has an invalid length. [ 380.512149][T16802] ? __pfx_rxrpc_do_sendmsg+0x10/0x10 [ 380.517895][T16808] netlink: 'syz.4.3005': attribute type 8 has an invalid length. [ 380.517916][T16808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3005'. [ 380.548425][T16802] ? rxrpc_sendmsg+0x127/0x920 [ 380.553401][T16802] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 380.559376][T16802] ? do_raw_spin_unlock+0x13c/0x8b0 [ 380.564750][T16802] ? rxrpc_sendmsg+0x5d8/0x920 [ 380.569614][T16802] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 380.575125][T16802] __sock_sendmsg+0x221/0x270 [ 380.579856][T16802] ____sys_sendmsg+0x52a/0x7e0 [ 380.584735][T16802] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.590092][T16802] ? __fget_files+0x2a/0x410 [ 380.594801][T16802] ? __fget_files+0x2a/0x410 [ 380.599456][T16802] __sys_sendmmsg+0x36a/0x720 [ 380.604193][T16802] ? __pfx___sys_sendmmsg+0x10/0x10 [ 380.609833][T16802] ? futex_hash+0x1e/0x1f0 [ 380.614410][T16802] ? futex_wait+0x285/0x360 [ 380.618968][T16802] ? __pfx_futex_wait+0x10/0x10 [ 380.623884][T16802] ? __fget_files+0x395/0x410 [ 380.628674][T16802] ? do_futex+0x33b/0x560 [ 380.633062][T16802] ? __pfx___sys_bpf+0x10/0x10 [ 380.638287][T16802] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 380.644401][T16802] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 380.650782][T16802] ? do_syscall_64+0x100/0x230 [ 380.655749][T16802] __x64_sys_sendmmsg+0xa0/0xb0 [ 380.660665][T16802] do_syscall_64+0xf3/0x230 [ 380.665788][T16802] ? clear_bhb_loop+0x35/0x90 [ 380.670519][T16802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.676591][T16802] RIP: 0033:0x7f01d3f85d19 [ 380.681057][T16802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.701234][T16802] RSP: 002b:00007f01d4da6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 380.709771][T16802] RAX: ffffffffffffffda RBX: 00007f01d4176080 RCX: 00007f01d3f85d19 [ 380.717846][T16802] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000005 [ 380.726335][T16802] RBP: 00007f01d4001a20 R08: 0000000000000000 R09: 0000000000000000 [ 380.734432][T16802] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000000 [ 380.742439][T16802] R13: 0000000000000000 R14: 00007f01d4176080 R15: 00007ffe6a1e1dd8 [ 380.750561][T16802] [ 380.753633][T16802] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 380.760936][T16802] CPU: 0 UID: 0 PID: 16802 Comm: syz.7.3003 Not tainted 6.13.0-rc2-syzkaller-00389-g2c27c7663390 #0 [ 380.771711][T16802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 380.781775][T16802] Call Trace: [ 380.785066][T16802] [ 380.788010][T16802] dump_stack_lvl+0x241/0x360 [ 380.792716][T16802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.797943][T16802] ? __pfx__printk+0x10/0x10 [ 380.802546][T16802] ? _printk+0xd5/0x120 [ 380.806718][T16802] ? __init_begin+0x41000/0x41000 [ 380.811755][T16802] ? vscnprintf+0x5d/0x90 [ 380.816108][T16802] panic+0x349/0x880 [ 380.820022][T16802] ? __warn+0x174/0x4d0 [ 380.824194][T16802] ? __pfx_panic+0x10/0x10 [ 380.828650][T16802] __warn+0x344/0x4d0 [ 380.832679][T16802] ? rxrpc_send_data+0x2969/0x2b30 [ 380.837821][T16802] report_bug+0x2b3/0x500 [ 380.842207][T16802] ? rxrpc_send_data+0x2969/0x2b30 [ 380.847348][T16802] handle_bug+0x60/0x90 [ 380.851522][T16802] exc_invalid_op+0x1a/0x50 [ 380.856040][T16802] asm_exc_invalid_op+0x1a/0x20 [ 380.860909][T16802] RIP: 0010:rxrpc_send_data+0x2969/0x2b30 [ 380.866666][T16802] Code: 24 48 48 89 de e8 77 33 b3 f6 4c 39 f3 b8 00 fe ff ff 41 bf fc ff ff ff 44 0f 44 f8 45 31 f6 e9 71 fd ff ff e8 78 2e b3 f6 90 <0f> 0b 90 48 8b 7c 24 28 e8 8a f2 0d f7 e9 46 fd ff ff 89 d9 80 e1 [ 380.886377][T16802] RSP: 0018:ffffc9000c2173a0 EFLAGS: 00010293 [ 380.892462][T16802] RAX: ffffffff8aec2fc8 RBX: ffff888061620b00 RCX: ffff88805ba98000 [ 380.900459][T16802] RDX: 0000000000000000 RSI: 00000000000000ff RDI: ffff88805508c440 [ 380.908438][T16802] RBP: ffffc9000c217650 R08: ffff88805508c43f R09: 0000000000000000 [ 380.916417][T16802] R10: ffff88805508c340 R11: ffffed100aa11888 R12: ffff888061620ac8 [ 380.924397][T16802] R13: 1ffff1100c2c415f R14: ffff88805508c000 R15: 0000000000000000 [ 380.932405][T16802] ? rxrpc_send_data+0x2968/0x2b30 [ 380.937563][T16802] ? __pfx_rxrpc_send_data+0x10/0x10 [ 380.942855][T16802] ? __local_bh_enable_ip+0x168/0x200 [ 380.948247][T16802] ? lockdep_hardirqs_on+0x99/0x150 [ 380.953633][T16802] ? __local_bh_enable_ip+0x168/0x200 [ 380.959023][T16802] ? __pfx_default_wake_function+0x10/0x10 [ 380.964905][T16802] rxrpc_do_sendmsg+0x1569/0x1910 [ 380.969960][T16802] ? __pfx_rxrpc_do_sendmsg+0x10/0x10 [ 380.975336][T16802] ? rxrpc_sendmsg+0x127/0x920 [ 380.980110][T16802] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 380.985864][T16802] ? do_raw_spin_unlock+0x13c/0x8b0 [ 380.991094][T16802] ? rxrpc_sendmsg+0x5d8/0x920 [ 380.995875][T16802] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 381.000999][T16802] __sock_sendmsg+0x221/0x270 [ 381.005694][T16802] ____sys_sendmsg+0x52a/0x7e0 [ 381.010471][T16802] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.015763][T16802] ? __fget_files+0x2a/0x410 [ 381.020371][T16802] ? __fget_files+0x2a/0x410 [ 381.024995][T16802] __sys_sendmmsg+0x36a/0x720 [ 381.029692][T16802] ? __pfx___sys_sendmmsg+0x10/0x10 [ 381.034930][T16802] ? futex_hash+0x1e/0x1f0 [ 381.039370][T16802] ? futex_wait+0x285/0x360 [ 381.043888][T16802] ? __pfx_futex_wait+0x10/0x10 [ 381.048768][T16802] ? __fget_files+0x395/0x410 [ 381.053474][T16802] ? do_futex+0x33b/0x560 [ 381.057872][T16802] ? __pfx___sys_bpf+0x10/0x10 [ 381.062656][T16802] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 381.068647][T16802] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 381.074983][T16802] ? do_syscall_64+0x100/0x230 [ 381.079769][T16802] __x64_sys_sendmmsg+0xa0/0xb0 [ 381.084631][T16802] do_syscall_64+0xf3/0x230 [ 381.089141][T16802] ? clear_bhb_loop+0x35/0x90 [ 381.093834][T16802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.099736][T16802] RIP: 0033:0x7f01d3f85d19 [ 381.104163][T16802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.123806][T16802] RSP: 002b:00007f01d4da6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 381.132234][T16802] RAX: ffffffffffffffda RBX: 00007f01d4176080 RCX: 00007f01d3f85d19 [ 381.140222][T16802] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000005 [ 381.148202][T16802] RBP: 00007f01d4001a20 R08: 0000000000000000 R09: 0000000000000000 [ 381.156180][T16802] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000000 [ 381.164161][T16802] R13: 0000000000000000 R14: 00007f01d4176080 R15: 00007ffe6a1e1dd8 [ 381.172163][T16802] [ 381.175555][T16802] Kernel Offset: disabled [ 381.179967][T16802] Rebooting in 86400 seconds..