last executing test programs: 2.433423547s ago: executing program 2 (id=2744): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x800}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20040, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvfrom$llc(r3, 0x0, 0x0, 0x12100, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r4, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="169381", 0x3}], 0x1}}], 0x1, 0x48c4) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYRESHEX=r2], 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc001}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000020000103000000000000000000000200"/36], 0x24}}, 0x44004) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000002060100000000000000000000000d0000000300686173683a6e6574000000000900020073797a320000000014000780080008000052591c70000640fffffffe050001920af8a450a12604582900070006656883922b9d48"], 0x5c}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRES64=r5, @ANYRESOCT=r1, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x24048014}, 0x4008900) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000120000f14aeca2eceb4aea24b314b9800000007004821e00fbdbdf250a0000"], 0x20}}, 0x0) 2.410101886s ago: executing program 0 (id=2745): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000000)) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x259fdbfd, {0x0, 0x0, 0x0, r3, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) (async) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000000)) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x259fdbfd, {0x0, 0x0, 0x0, r3, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) 2.093569498s ago: executing program 4 (id=2747): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000001c00)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x5, @private1, 0x2}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000100)="630e71", 0x3}], 0x1}}], 0x1, 0x24044005) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2, 0x5}, 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000cc0)={'wlan1\x00', 0x0}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000001c0)={r2, 0x4}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000006a00010000000000000000000a00000000e1ff"], 0x18}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000180)={0x40, r3, 0x1, 0x70bd2d, 0xa2, {{}, {@val={0x8, 0x1, 0x3f}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nr0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x8}]}, 0x40}}, 0x8804) 1.989256935s ago: executing program 0 (id=2749): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x24, 0x2, 0x70bd28, 0x25dfdbfc, {0x9}, [@typed={0x14, 0x68, 0x0, 0x0, @ipv6=@remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4001) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x48, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x18, 0xfc, 0x0, 0x1, [@nested={0x14, 0x8, 0x0, 0x1, [@typed={0xe, 0x131, 0x0, 0x0, @str='*\'&-.+*{.\x00'}]}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x115}]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 1.893412671s ago: executing program 2 (id=2750): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) pipe(&(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x80111500, &(0x7f0000000040)={'wlan0\x00'}) close(r2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000}, 0x5}], 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0xf7, @empty}}, 0xfffffffc, 0x0, 0x2, 0x0, 0x52}, &(0x7f00000001c0)=0x9c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r0, 0x0, 0x0, 0x4a, 0x0, &(0x7f0000000500)=""/74, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) 1.864434042s ago: executing program 0 (id=2752): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f0000000300)={0xfffffffffffffeff, {0x21, 0x7fffffffffffffff, 0xfcdb, 0x6, 0x6fe6}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r11, 0x225, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_STATUS(r9, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x54, r11, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '!\xb0)%\xd1[.^#'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x44884}, 0x80) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r12 = socket(0x1, 0x2, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r13, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r12}, 0x20) getsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @initdev}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r9, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r15, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r14, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 1.280897479s ago: executing program 1 (id=2765): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001300)=""/4068, 0xfe4}, {&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f0000000100)=""/29, 0x1d}], 0x3}, 0x12100) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0x14, 0x2, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000100)) syz_emit_ethernet(0x2e, &(0x7f00000004c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x7, 0x0, @void}}}}}}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4440b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) write$bt_hci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000002"], 0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r6, 0x29, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="045c6caa2f6e9c59690e21f0fa4edd07443e91d030bc10d94e269d21d8d4066bf29dac6439c580957961b8fb4680c1c6b783c257023412a372943c267fe8f7e521b2a176c5710f09e92fefa22972654d4e50bc3aa84730d1e3c78cb44da03be5335f4a1957e18a8f844b8c9ee01c9ace37ac384543f869ad240c997eda829b0619dd8e71909bb8a0a0e052903753c67180dd7175db3d0fc176f79f1cd5e2ba95e2d1e479882138e2cc40931e3ad4095015ce534fffaba38388fdb0b49e37b1ed4002a084ead57c3b56da9317c9eb3fe0bc3b45eef5c6e3bf5746a5213acf05c4f5d4f3ceb4df9a5e52e1f01df83176f537984d"], 0x8) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x3, 0x1}, 0x6) 1.273289283s ago: executing program 3 (id=2766): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000d00792984"], 0x4c}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x4c, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x87c81a71a5843321) 1.167440422s ago: executing program 4 (id=2767): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000013180)={0x0, 0x1, 0x6, @local}, 0x10) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044004}, 0x4000) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000002540)={0xffff, 0x2}, 0x4) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) 1.09752881s ago: executing program 3 (id=2768): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674693674000200600004"], 0xa0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x38, 0x701, 0x70bd2a, 0x0, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x10004891}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_ADDRESS={0xa, 0x1, @random="0cc5035c44df"}]}, 0x48}}, 0x0) 1.035266054s ago: executing program 2 (id=2769): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) (async) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x45, 0x6, 0xb, 0xc, 0x3, 0x81}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls}, 0x94) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002d00010026bdf000fcdbdf250400000008000c"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1.030762234s ago: executing program 3 (id=2770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r5) (async) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0xfffffffd, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (rerun: 32) 1.002663204s ago: executing program 4 (id=2771): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f0000000240)=[0x0], 0x0, 0x63, &(0x7f0000000280)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000002c0), &(0x7f0000000340), 0x8, 0xf2, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @local, 0xb}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff"], 0x3}}, 0x0) r3 = epoll_create1(0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000004000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000481100fea74aa3917c535583000000000000aafe8000000000000000000000000000aa4e200e22004890"], 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="d800000019008111e0020f060d8107040a600200640f040b067c55a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a290457f0189b316277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b83ece0b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f0000000240)=[0x0], 0x0, 0x63, &(0x7f0000000280)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000002c0), &(0x7f0000000340), 0x8, 0xf2, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @local, 0xb}, 0x1c) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff"], 0x3}}, 0x0) (async) epoll_create1(0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000004000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)) (async) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000481100fea74aa3917c535583000000000000aafe8000000000000000000000000000aa4e200e22004890"], 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="d800000019008111e0020f060d8107040a600200640f040b067c55a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a290457f0189b316277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b83ece0b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) 900.939568ms ago: executing program 0 (id=2772): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rc, &(0x7f0000000080)=0x80) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1d8, r1, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x1bc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0x6, 0x2, 0x60, 0xc, 0x6, 0x9, 0xb, 0x0, 0x2, 0x3, 0x5, 0x4, 0xc, 0x0, 0x16, 0x18, 0x48, 0x7b, 0x18, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x80, 0x5, 0x9, 0x8, 0x3ff, 0x7, 0xd49]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0xfff2, 0x7, 0xa, 0xd, 0x0, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9482, 0x3, 0x2, 0x32a, 0xf, 0xff, 0x400, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf8e1, 0x4, 0x8001, 0x6, 0x0, 0x1, 0x7, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x3, 0xe, 0x8, 0x8, 0x1, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0x4}, {0x1, 0x5}, {0x5, 0x1}, {0x2, 0x3}, {0x3}, {0x0, 0x9}, {0x3, 0x6}, {0x6, 0xa}, {0x2, 0x9}, {0x3, 0x6}, {0x3, 0xa}, {0x0, 0x2}, {0x3, 0x4}, {0x7, 0x5}, {0x1, 0x3}, {0x3, 0x9}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0xa}, {0x1, 0x5}, {0x3, 0x2}, {0x3, 0x3}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x4}, {0x0, 0x7}, {0x5}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0x2}, {0x6}, {0x0, 0x5}, {0x1, 0x3}, {0x3, 0x9}, {0x0, 0x4}, {0x3, 0x2}, {0x2, 0x5}, {0x0, 0x4}, {0x0, 0x8}, {0x0, 0x4}, {0x4, 0xa}, {0x0, 0xa}, {0x6, 0xa}, {0x2, 0x9}, {0x3, 0x3}, {0x4, 0x8}, {0x0, 0x8}, {0x4, 0x7}, {0x7, 0x3}, {0x1, 0x7}, {0x7, 0x2}, {0x0, 0x2}, {0x0, 0x8}, {0x6, 0x4}, {0x2, 0x9}, {0x0, 0xa}, {0x6, 0x5}, {0x1, 0x8}, {0x7, 0x5}, {0x3, 0x9}, {0x4}, {0x4, 0x1}, {0x6, 0x8}, {0x6, 0x5}, {0x0, 0x8}, {0x3, 0x7}, {0x1, 0x6}, {0x4, 0x5}, {0x1, 0xa}, {0x6, 0x5}, {0x0, 0x9}, {0x3, 0x9}, {0x7, 0x4}, {0x2, 0x3}, {0x0, 0x7}, {0x4, 0x1}, {0x1, 0x9}, {}, {0x2, 0x2}, {0x1, 0x9}, {0x6, 0x5}, {0x4, 0x2}, {0x3, 0x2}, {0x0, 0x2}, {0x0, 0x5}, {0x1, 0x4}, {0x1, 0x9}, {0x3, 0xa}, {0x7}, {0x7, 0x2}, {}, {0x0, 0x6}, {0x0, 0x5}, {0x6, 0x9}, {0x7, 0x4}, {0x1}, {0x7, 0x1}]}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x1, 0x8}, {0x4, 0x2}, {0x6, 0xa}, {0x3, 0x9}, {0x1, 0x5}, {0x1}, {0x6, 0x9}, {0x2, 0x5}, {0x3, 0x1}, {0x3, 0x7}, {0x2, 0x2}, {0x0, 0x8}, {0x5, 0xa}, {0x0, 0x2}, {0x2, 0x2}, {0x0, 0x7}, {0x2, 0x4}, {0x2, 0xa}, {0x4, 0x6}, {0x5, 0x2}, {0x2, 0x5}, {0x0, 0x7}, {0x3, 0x7}, {0x4, 0x4}, {0x7, 0x9}, {0x6, 0x7}, {0x5, 0x9}, {0x1, 0x1}, {0x3, 0x7}, {0x7, 0x6}, {0x2, 0x4}, {0x6, 0x4}, {0x3, 0x3}, {0x0, 0x9}, {0x7}, {0x7}, {0x4, 0x9}, {0x5, 0x1}, {0x6, 0x9}, {0x2, 0x5}, {0x1, 0x1}, {0x1, 0xa}, {0x5, 0x8}, {0x7}, {0x7, 0x2}, {0x5, 0x1}, {0x4, 0x5}, {0x3, 0x7}, {0x3, 0xa}, {0x6}, {}, {0x2, 0x3}, {0x7, 0x7}, {0x4, 0x8}, {0x4, 0x3}, {0x1, 0xa}, {0x5, 0x4}, {0x1, 0xa}, {0x7, 0x7}, {0x0, 0x8}, {0x7, 0x2}, {0x2, 0xa}, {0x0, 0x4}, {0x3, 0xa}, {0x2, 0x3}, {0x5, 0xa}, {0x6, 0x3}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x36, 0x9, 0x12, 0x48, 0x16, 0x4, 0x2, 0x18, 0x36, 0x30, 0x5, 0x5, 0x24, 0x48, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x2, 0x2, 0x3, 0x6, 0xffff, 0xd1]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20000084}, 0x32e2c8fc5ec2819e) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000003c0)={0x0, 0x5, "3e88823108"}, &(0x7f0000000400)=0xd) (async) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x3ff, 0x1, 0x0, 0x7}]}, 0x10) (async) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r1, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x12, 0xbd, [0xff, 0x81, 0x3, 0x6, 0x7, 0xc, 0x0]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008004}, 0x400c001) (async) r3 = socket$isdn_base(0x22, 0x3, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000600)=[{r0, 0x200}, {r3, 0x9408}, {r0, 0xc4a1}, {r5, 0x20}, {r0, 0x4001}], 0x5, &(0x7f0000000640)={0x77359400}, &(0x7f0000000680)={[0x6]}, 0x8) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)='%-010d \x00'}, 0x20) getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000007c0)=0x14) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x16, 0x7, 0xa9, 0xd, 0xa10, r6, 0xdd09, '\x00', r7, r8, 0x0, 0x0, 0x4}, 0x50) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000400}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x58, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4e}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44001}, 0x40008c6) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0xc8000) (async) r10 = accept4(r3, &(0x7f0000000b00)=@nfc_llcp, &(0x7f0000000b80)=0x80, 0x80000) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r10, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x40, r11, 0x8, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4015}, 0x527332e59670f1b7) r12 = accept4(r0, &(0x7f0000000d00)=@un=@abs, &(0x7f0000000d80)=0x80, 0xc0000) accept4$phonet_pipe(r12, &(0x7f0000000dc0), &(0x7f0000000e00)=0x10, 0x800) (async) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000e40)=0x7, 0x4) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r12, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x60428900}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x54, r13, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x495d}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) (async) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x600241, 0x0) write$tun(r14, &(0x7f0000001040)={@val={0x0, 0xdada}, @void, @ipv6=@dccp_packet={0x8, 0x6, "8264bd", 0x17f, 0x21, 0xff, @mcast1, @mcast1, {[@srh={0x5c, 0x4, 0x4, 0x2, 0x3, 0x0, 0x7ff, [@rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}]}, @routing={0x5e, 0xc, 0x2, 0x6, 0x0, [@mcast1, @local, @loopback, @rand_addr=' \x01\x00', @private2, @private0]}, @hopopts={0x2, 0x4, '\x00', [@pad1, @calipso={0x7, 0x10, {0x3, 0x2, 0x2, 0xe832, [0x4]}}, @enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x81f2}, @ra={0x5, 0x2, 0xe}]}, @dstopts={0x2c, 0x2, '\x00', [@pad1, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0xfffffffe}]}], {{0x4e22, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0x5, 0x3, "acca01", 0x81, "b4823b"}, "c4029a199e23903dd2a8eae220105bcf66d7d7434c147395236e8940d492949754505b5e65599fc50107c0db723047fd10e330d44bf1581ea64913352aa2fd424f0ac26c71b8dc3fc0e44fe4432b86042ac662b70abba50ef386e622282cf13b3655d014f16179d1cff57342169185f649fac17ba11e0b28de0794aa4d036c11db26c747f9c6af30ce8f40d6704806"}}}}, 0x1ab) (async) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r16 = syz_genetlink_get_family_id$nfc(&(0x7f0000001240), r9) sendmsg$NFC_CMD_START_POLL(r15, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, r16, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000080}, 0x810) 899.50932ms ago: executing program 2 (id=2773): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pK \x00'}, 0x20) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'pimreg1\x00', 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0, 0xffffffffffffffff}, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x15, &(0x7f0000000180)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x46e1}}], &(0x7f0000000240)='GPL\x00', 0x2, 0x1d, &(0x7f0000000280)=""/29, 0x40f00, 0x52, '\x00', r3, 0x0, r5, 0x8, &(0x7f0000000300)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xe, 0x6, 0x6d0}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000380)=[r4, r0, r4], &(0x7f00000003c0)=[{0x5, 0x3, 0xe, 0x2}, {0x0, 0x1, 0x0, 0xb}, {0x3, 0x2, 0x4, 0x6}, {0x3, 0x3, 0x3, 0x7}, {0x0, 0x3, 0x9, 0x3}, {0x0, 0x4, 0xa, 0x1}, {0x0, 0x5, 0x8, 0x9}], 0x10, 0x5}, 0x94) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x7, 0xa0, &(0x7f00000005c0)=""/160, 0x40f00, 0x4, '\x00', r3, 0x0, r6, 0x8, &(0x7f0000000680)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0xc, 0xc}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r5, r6, r0, r6, r0], 0x0, 0x10, 0x6}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE(r7, 0x5000940c, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000800)=0x4, 0x4) r9 = accept4$inet6(r5, &(0x7f0000000840)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000880)=0x1c, 0x0) getsockopt$inet6_opts(r9, 0x29, 0x39, &(0x7f00000008c0)=""/146, &(0x7f0000000980)=0x92) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000009c0)={0x0, r5}, 0x10) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000000a00)={0x0, 0x0, "44e8a03c6dc250e914fc92642aa69d17"}) sendmsg$rds(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000a40)=""/128, 0x80}], 0x1, &(0x7f0000000d40)=[@mask_cswp={0x58, 0x114, 0x9, {{0x6, 0x6}, &(0x7f0000000b00)=0x1ff, &(0x7f0000000b40), 0xf1, 0xfffffffffffffffb, 0x64b7, 0x9cc, 0x8, 0x1}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000b80)=""/228, 0xe4}, &(0x7f0000000c80), 0x1e}}, @mask_fadd={0x58, 0x114, 0x8, {{0x7ff, 0x1}, &(0x7f0000000cc0)=0x6, &(0x7f0000000d00)=0x10000, 0xffffffffffff9496, 0x6, 0x2ec5, 0xff, 0x8, 0x40}}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0x5}}], 0xf8}, 0x20000000) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xcb, &(0x7f0000000e80)={0x1, 0x8, 0x98, 0x200, @vifc_lcl_addr=@loopback, @loopback}, 0x10) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_linger(r10, 0x1, 0xd, &(0x7f0000000ec0)={0x0, 0x33}, 0x8) sendto$inet6(r8, &(0x7f0000000f00)="0a4ce415eddfaedd64f3769473faf35d15fe8c01ef0b395db2073409ca7a955564e25f342a60df78bb30ed473ef7ca", 0x2f, 0x80, &(0x7f0000000f40)={0xa, 0x4e22, 0x0, @mcast1, 0xd5a8}, 0x1c) sendmsg$nl_route_sched(r6, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)=@newtclass={0x2c, 0x28, 0x4, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x3, 0xa}, {0xf, 0x4}, {0x7, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendto$inet6(r5, &(0x7f0000001080)="b8fe69a7db5ca569a0cedb5022de646e818c3c6ffe7914c7", 0x18, 0x4000800, &(0x7f00000010c0)={0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xef8}, 0x1c) sendmmsg$inet(r2, &(0x7f0000006740)=[{{&(0x7f0000001100)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000001580)=[{&(0x7f0000001140)="5c35d9712747d466cda1c9a544e9daa32170ba15e8e8fb6d578f9b1a1e1a74b2fa5a67ddb4a5cb8b8e", 0x29}, {&(0x7f0000001180)="5c03bbc2860ebb38c22f7e3b20a544f85c5043bae0daeaf9ad4c1b8d22171055c7243716ebba4ae85aeb2156ae19849ec44b180cd5272b037954237d55d74265d8de1c457009c456bb9e3c7b18e507b8691a4e0b5be2460bca", 0x59}, {&(0x7f0000001200)="61e0a29c302ba92ba29c96fd0d207c2426c6b33584afe5d3af15ccfbfd295695e4697655b178fae9d2aa5d6efdd1ef4bb91a80f6517c98c4f9e2b138f3a4b32cc2a85be5bba085d297a1dcc0c29d5a1028d4a69ca31519fa522770673d6acb987122de90c40a3728e4165319d895455d89c8fa26b3506478c17072b21607ea41c0a1db84e05e07b7b14dd075cd327e32c8afd65bcd0faf69a5b7383fb2e3b74d163bde52b62d6b4fe105a64bf3a284", 0xaf}, {&(0x7f00000012c0)="c21dedcffeaf209c0d4739b13bb898d2ac780126cbd90f45bd492dd7acfa05dd47fd9d061b0233ea92bf79c37f14cd4080a59b0fa77af05f91f018b56114ead32d641ba8cf63f3245f607fba33123ef587086f07fc86297f79ca20ad8477afd0f28c783a3028f7ef52b270716f2cfbc2b3795add7295997ea7cc35c33780674946044212ea5b6f52138e3f091d1c83fe165760f72c9f276f423e0cceb6168cf6635490784f211037154a448b2119b390ee9505a8da5ff0782c2135f94aa01c8e5a06d6da7fef63fcce51828070a103f268c902047242dc2ff2feef8606645587dabea0c8215b00744181f66baf47abc4cceb", 0xf2}, {&(0x7f00000013c0)="8ffc722b11ad276861df895fad620e43baf3678f70c2c9e018f5eea986c43fdd4692ab4f0fbf40ca9baaea34ebb2e54f270fe9b6e491023e7a9cce838ce677aa3c72ed007aa87431d6a3685b9ebf10c1a2d5573c4695e341f0e3912c8968d76b5672af5c228ffef653b782ede359b3c1dc60137927163b3aa68ebf25bab1b0501ce241d7ad9d92c71d46806177c572ea48bdc58220", 0x95}, {&(0x7f0000001480)="8d58a9ae1ee35f575b6433a9cf2d7b8535028ab78072af0287816d7b0d0ee67d18f72f92937f39a3f2bea634236ac1b048df66c67245eb7b8975bc73294b8c8e", 0x40}, {&(0x7f00000014c0)="e40c7ed1c3529ac06bcb2372cc2abc84e8b9459ac96c258e68e6a3a3b2c80db06c965f259bb9fcdd34041f507bd81c51616f01f075e8b76dda697b79c0da84be1923b89a3628d14681680508276ae0f0145dd629b79eb7045d6517aa818a3c866f1549ba9d0175e05f83160f340629722a509c96e14ff4ab2db25e60c2481282bb11cc2a5fa3a77ba330e81a5caae2a6ae1a", 0x92}], 0x7}}, {{&(0x7f0000001600)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001800)=[{&(0x7f0000001640)="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", 0xfb}, {&(0x7f0000001740)="8b2c735936ad1937418eb7d69e6660795b4faed5594c9cbbd801eea93d3dd20f0762a33a6a09257108eeaac5a3f44afdb965e50c480fc232e4944b7d187251bd8e0f76a2320834fadce6232780b54546186decda494b953f81224fd8f638ebed0ea36dbb1fcd44dcb9bef6385cf7332b6c0aa6923a003eda8a3da9022d10649f266e7a8676c591664d7d7c26597691d9e0534df8b3f9bb5e", 0x98}], 0x2, &(0x7f0000001840)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x53}}, @ip_retopts={{0x48, 0x0, 0x7, {[@end, @timestamp={0x44, 0x18, 0x96, 0x0, 0x5, [0xa8, 0x1, 0x7, 0xd2, 0x2]}, @timestamp_prespec={0x44, 0x1c, 0x2e, 0x3, 0x6, [{@empty, 0x9}, {@empty, 0x7}, {@broadcast, 0xd6}]}]}}}], 0x60}}, {{&(0x7f00000018c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001d00)=[{&(0x7f0000001900)="988c9ff06e21321343ade9039c11d5641d95a6a6615828a3e6e8709868735ac27c1a5c17fede4367453957fe391bbafed19fbb4d0a87eb06cdb9cb32106becb73dd5157c66dac254f86ba868dd2abffbb3f173baeddd0fdbaa41087710671a6db29d2821120e37bcc1abd1643a6da3d5b8de0a2f14def155fa516991138015a88c9024132b705872eaaef1352c48c14555f97608ddb41da21b6c07dbbc2ddf01b696f4316eb8605a9a2b5cd335994d8317abcac96b27eb", 0xb7}, {&(0x7f00000019c0)="50cde6d4a86de2ab7df95da8e76b73067409aceef32ed2aa3b3ffd0504c93a8a8eb272ec1c92f9f0aa4400a9dda58e8d7cbb527d251425a2224bc11098087f1a947e3a43a77ac0daadecfd6e770a2423db922043f15e56318f8866184c8f5bfdc54a4c08a6a20e20e291c4712f3aba2bf74e037f11", 0x75}, {&(0x7f0000001a40)="704bdd56be0f5da33c22305ff97d1e8d799614cc28bc78fdd7eb42f6bef7ee293c0f45992c5be024df029e8b43f63c42a84958533e8836f9efddd15c03d546b48cd25e50e046c4234e0bce439315dda788cfd20829ef0e603675da2342478c21dca12b9dc21500f9259368357dbc223b1c9d8893fa63ba8859e22407c31f82d8e6cc28a6a44e683e9917f202dd293cd5a20326625b1701e71be308e61383f71f547f266e0d8791e180fa7f727f597c502761997497dea98dd887666ba77ae96fcc0677735a4cf79211b36df38378395a345c8c4b5a2e38fc47e8119f09", 0xdd}, {&(0x7f0000001b40)="b549def191e6580f679c53aa674cefc1ed063d077ffbd45efd77760299c9d89ec6d22faa8eb7b967cf2dc726928c7a355e16b57dcbf03cc3022f644a3c441aa8c6ce30b51288a70de690437cad56848d1aaa3078ac6f08c9277b1373ef608be3e90aa281f62570a79158502c1e80f0a2cb8bb1a2b726801b218827894164b499f49356be0ff6a8d99246e1c7da7f1da19e427beef2ba81a96103bd273031ae95f60a7b986ea4a4c30069493f7476bcabf9f8da5f6366f93aa2d38596d796084705b6e117b855696a782f631d8f", 0xcd}, {&(0x7f0000001c40)="337ff07fe0f7358216ad4341b7d553f2590415b616b24bb16894b5", 0x1b}, {&(0x7f0000001c80)="11dea13abfd8cdf5785465464cbb769a230424a08477e037a388ca2dbcba0cec75cbc712f2c55c05edcc19148b46d93af62a01ea0c42d0b98563106f63929492b983e3c77c0d501c44352321aaec3bb72e9d811f274e854a0ad0413d73", 0x5d}], 0x6, &(0x7f0000001d80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x76c}}, @ip_retopts={{0x68, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0xf7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast]}, @end, @timestamp={0x44, 0x8, 0x12, 0x0, 0x0, [0x400]}, @timestamp={0x44, 0x10, 0xf8, 0x0, 0xb, [0x3, 0x6, 0xffff]}, @timestamp={0x44, 0x18, 0xcc, 0x0, 0x6, [0xfffff1c2, 0x10001, 0x7, 0x0, 0xffffffff]}, @noop, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x86, [@local]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffa}}], 0xe8}}, {{&(0x7f0000001e80)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000002280)=[{&(0x7f0000001ec0)="ee81ff4cede66dc698860ba0568b1d8b9b5ea3207a475eeb77db0b0c7e0185895a3ad75948af56e991152d65741163f90d6b827cbd4652b853dd7dd612cad41272b5ce8f1847131ff4b13b", 0x4b}, {&(0x7f0000001f40)="761a54884377dc656b458a771c82ef9c4740a5580a8a76182095bcbc69ee77cdbc77a326ad60eed8cceba29c23652108b8fc60be72082196da100851e9f64256c204e15c8718529c07dcbf747e61a9505d6181cf55df904c2fecf1ffe5cd055df6d42ffa01e12643abd06dfa597d604e32246d96cf02afa048e6c11a2c2582be6032384d0e6d1689515ed4a613f2ab70077a0b7a07b4be943b0eddcb10ef219b2ff0852844ca2171d5e4f2ee20c0edfa767de961bb35f84c97eecef1a370521f3f493b6d61", 0xc5}, {&(0x7f0000002040)="fd1b0ad93ee0f348e422a15275556c2baff3a0bc48681e5ca3bf483308ccd19c149d354c8cc8887935047e844bb920461180750ee9694bde91e7043812d37ce46027aa3a8b7677f3c761269658fdfd4076daa91c0caf3c737f0ebcb2a826ceab3c413fa9f7211d144edb9ff1acf76bbe", 0x70}, {&(0x7f00000020c0)="ae602085ea9c7c39087ea9b4a436e1e43d2ced7e566c43c75d648f8520b17b60788b7ce217c60bdd548c0630f842c5c353fc7d2b654aa0b69fab16abe281fdb88e00b96f8f7d3b84ed1158f62f651e2361d9f4cedc6e440ee197e14c773552", 0x5f}, {&(0x7f0000002140)="8066024f55d9c59aac5252350ed42be0ca196b19873941ce6c5469b746fc0b9ad6fe7e114f3df46882eb982cea417356bf3242dc9f65ee0342e6dd867cfdcbd718f163d9c7bab16c469010bf3c8f1921389e15076ca0ac5a3fffe3086de65f313f394f8180075d142dd8dfb1e495454ced7515297f69048500b9eaabf9aeb5dae102957f62c0c9b7d2445b2beeb6b5298ab0c1fdda49940cf1d52594cd576d0e6c33800e5b46216d6a3ebe776ee6dc8473ea5afc0f32079797f0c8c32a9220bef5b3f571", 0xc4}, {&(0x7f0000002240)="d540f5f0663cf37cfb7a18", 0xb}], 0x6, &(0x7f0000002300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @private=0xa010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x38}}, {{&(0x7f0000002340)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000003400)=[{&(0x7f0000002380)="0d571c4a91e050a196f9ea7e5353f4c66b376dd1c463d1252ea52af9823e270dbaf8e6270f3f48813a22f4af003a24405688fb2430a37fe50cf71722347eee056d99d97d927415ec745b1acc383c5a2211bd8288f8dee441c1662bdacc1e9d089f0843d4cd068c95e5767cb0d5c8fa", 0x6f}, {&(0x7f0000002400)="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", 0x1000}], 0x2, &(0x7f0000003440)=[@ip_retopts={{0x84, 0x0, 0x7, {[@cipso={0x86, 0x2e, 0x3, [{0x7, 0xf, "9b1f2ffbc7e89f4d6bb658ae13"}, {0x2, 0xe, "8c2e6fbafc6346ab4c75ad1f"}, {0x0, 0x2}, {0x0, 0x9, "b079fa75f79bbd"}]}, @lsrr={0x83, 0xb, 0x42, [@multicast2, @local]}, @timestamp_prespec={0x44, 0x24, 0x4a, 0x3, 0xc, [{@local, 0x81}, {@rand_addr=0x64010100, 0x8}, {@broadcast, 0x74}, {@multicast2, 0x7}]}, @ssrr={0x89, 0x17, 0x1d, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast, @loopback]}]}}}, @ip_retopts={{0x68, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0x18, [@multicast1, @multicast2, @empty, @broadcast]}, @timestamp_prespec={0x44, 0x34, 0x48, 0x3, 0x9, [{@local, 0x1abd5481}, {@broadcast, 0x1}, {@remote, 0x8}, {@multicast2, 0xb86}, {@private=0xa010100, 0x1}, {@remote, 0x7fff}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x5, 0x1, 0xd, [{@broadcast, 0xffff0000}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0xd8, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0x16, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@private=0xa010100, 0x8}, {@rand_addr=0x64010101, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x3}, {@private=0xa010102, 0xfffffff3}, {@broadcast, 0x35}]}, @ssrr={0x89, 0xf, 0x79, [@empty, @empty, @multicast2]}, @ssrr={0x89, 0xf, 0x95, [@local, @local, @rand_addr=0x64010101]}, @end, @timestamp_addr={0x44, 0x34, 0xa1, 0x1, 0x5, [{@local, 0x9}, {@loopback, 0x8001}, {@remote}, {@multicast1, 0x3ff}, {@loopback, 0x3ff}, {@private=0xa010100, 0x1ff}]}, @rr={0x7, 0x3, 0x9f}, @cipso={0x86, 0x3d, 0x3, [{0x7, 0xe, "4b1f99439168f936469b0c82"}, {0x0, 0x2}, {0x6, 0x5, "2dfc9b"}, {0x5, 0x4, "489c"}, {0x7, 0x9, "847b38e39c5046"}, {0x0, 0x6, "cc8ebbfe"}, {0x5, 0xa, "fde70f60ad7f945b"}, {0x2, 0x5, "4475d4"}]}]}}}], 0x1f8}}, {{&(0x7f0000003640)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000003ac0)=[{&(0x7f0000003680)="3fe454de919529156fbf884843fb7efbb686f466db4524e5f5372fec6a9a1dfaa383c127ab5fbadb2ae74afb6963f60e161125c9468858b6820d1d3aeda957c2f75d22c0d9f0da22767a3d92869b96375d67c022912b487302930564a69209e7c523b2bd325b9fa77ddac1e70021135ac5e70f861132a3f5acfb829e88a6fac9e81173a0b925c4cdccf1dae848", 0x8d}, {&(0x7f0000003740)="1ec4f0cdcee4d29cd8cee896f03b2b6bb0a7b45bddd70704e89bad0bb7b673ac3651062f5dcfaab212015ac96a826bd397b3d3a647a81a9aab1c49a983995a4c97e8cbd0c05c18a009e6ebaf4ec7943c15f20b71f5202024113e3889d63dc2ce51cb86dcd50685772071671947bacbb91c3d222d2691a0607d9e707aeb0bfe1e33c01c808f2c41b28a8f0897db5a7bd8ac07ad25318e4a0ddd7a9b06b5587436f74ec0915e873aa93fcd387a8ec659ee5ec58103765527c2b7811b0fbf536bc419c51d740958152826631e333ed7553c3e4626c4a564", 0xd6}, {&(0x7f0000003840)="45aae8b48a37306fab65c6d6dc0d45f7dd23f4e3474e853123773f30b41dbc9532fe286ebe6ee831ac861dcf8f2691ebf3bf41e929fa5febe47ed4275513b628420084041a7077d35adc50f585bbb8", 0x4f}, {&(0x7f00000038c0)="e5585b2b3b2159d536b0dedea9d3228a9e2c934fee7aa28d1d986a84a67625cd13b1a9c5eea5c7755a850e7c10a7790df6a99ae72e7fa75a05a83cbc2da6caa52144450c4b6b7300056f0df0b273bceb893af7f82cae65d9f13f462b23c11822ebb2cea74f65a6e2ebd82d37427f184b07dccf4fc29b1713ab0d40eff78c72d6ece5f0d0368b37923665e5806e744cb8b91b207a7913432abf70becda4145164f00fd5e1aaa96da4ae09336e84e8aeab612fbdd30bc232ad02", 0xb9}, {&(0x7f0000003980)="9a457e321582d284dab331d3112691b8372c41d88d58da55649657edbdc8886ba0cab26cebd2c6816645536d5f0daab19d0b298545dd806058c7ab070fff70c816492ea7a7160e02369a", 0x4a}, {&(0x7f0000003a00)="ab942c39929329ba066cb5f12331df", 0xf}, {&(0x7f0000003a40)="d48ba455c01344265c37ffee4246435d385097510e1699ed7fe4b39594433f58aa55df8f10fd32d40597d5340338dcaf41a4c854d55dd7b7f2439d72a25ed419bf03b3cd86560ca6ca8fdf810c21995ae1d640", 0x53}], 0x7, &(0x7f0000003b40)=[@ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x84, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x90, 0x3, 0x2, [{@remote, 0x4}, {@private=0xa010101, 0x9}, {@local, 0x4}, {@empty, 0x3ff}, {@multicast1, 0x2}, {@local, 0x1}, {@private=0xa010102, 0x6387}]}, @timestamp_prespec={0x44, 0x34, 0x4f, 0x3, 0x0, [{@multicast2, 0x10}, {@rand_addr=0x64010101, 0xd}, {@loopback, 0x4}, {@private=0xa010100, 0x62b32249}, {@loopback}, {@multicast2, 0x8}]}, @end]}}}], 0xf0}}, {{&(0x7f0000003c40)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000003fc0)=[{&(0x7f0000003c80)="7e2fd1b30f8ee4860b12d66aee23435692f740944d6ac9316abb98520ed398e0131418a34bd9f1b284f8bd976713e682392eb903f3139c73a8523cb3c393263e6cb2e95b9445326d9fa58c1d0058fc0e1e734f4afbc006ad8bfcb1c40174ba36617134b6a08c0d0fab3145885a0bcbdbe740f236f42a95021782762d9dcf5dcb65a0f66b1288fd9026b0977c33e06365707e1da35d59bb4db1c662138d651160f72356", 0xa3}, {&(0x7f0000003d40)="98251b651f804b649aeccd6bd73e2d94b3bcaa281618cfaf44be1dd787ce2bdbf854d7cb22e094607386d6d10120e834", 0x30}, {&(0x7f0000003d80)="d2aa26a7bb87ac8b8c81f03d7fd14cf07a", 0x11}, {&(0x7f0000003dc0)="c3968e099a2eb628f2a3b6117280a5f00665ef43dfe758b9883f025839990626da1b2a8f50f5531a55e151e618bc8707f94dc99c6f77a0ec1415d0406a2b6069", 0x40}, {&(0x7f0000003e00)="872a231bd9e65f09c22f8dead0f9a6103d3f9a6ff416457c5a12a6103e68e8e751b0d94593943374b4e202c46e97a90a24b861ce2faf569af1cb545b19e004", 0x3f}, {&(0x7f0000003e40)="45394e76c1114888e0872d2360a139bef7e479919d3760ec9c3531519de3217146c1fbf20a0ab1c00a785373ec250bf58b38e2958a32f0f8b63054b6cfd9f9c795637121d7212ee7928382812a9699f71396602fa6c625e71273b9ae8baabe91bd6165e21169a528dc412ad7e53fd5d1dff63553faf505ed1d901fbcabcd334736167050ef282b81ce4ee656a41c7577913733", 0x93}, {&(0x7f0000003f00)="e8a9d3bb9cf56b21569691af0ce39f9a676b28e42949c0dd57cd8e80ed46b8aac99e3b8f5f0723aa8eb9a2333f8b02867cb410a978c54c189bb978628ebce6abf7afe8680de7af2e1e3f948c5709b1b68cf598b779fc0b67162364e8d3771b3e878a4df0e7b2", 0x66}, {&(0x7f0000003f80)='d', 0x1}], 0x8, &(0x7f0000004040)}}, {{&(0x7f0000004080)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000063c0)=[{&(0x7f00000040c0)="40284509061f489a14a599cff2c1eaf8150445", 0x13}, {&(0x7f0000004100)="5fc9578f09950acddb072d60a9af3ddd0bd04f810a995a4087f8e943162ea1bdb7a40eed304a2d7d35ef7f308252746fed8f4d5d11d68b2d07c1f631be499b15b042167af04ab5fdd0e96372381a3ca50f228d3c56bef3753c4ff0a0abbc6701abf5301ca3f18a53a24608760a8d4a0219b2804271874db5bfcbe60e118effc2a26ae0b488f8de64bc8b05387765894bbc459ccf96ae58ed76b4f617ca7c73", 0x9f}, {&(0x7f00000041c0)="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", 0x1000}, {&(0x7f00000051c0)="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", 0x1000}, {&(0x7f00000061c0)="d28826484c13171eca8f74dd274241034352a7cc57d34b9b9a2ece3e38e3e647bf281e889c395f86f99f722d20c6276012f2eda965f89012472b66cca9ec356cf8010aeeb16a949fabc942f8021216f90e5008b1aa2c53acb25c61b01827e4513268a6551a8dcaef1446", 0x6a}, {&(0x7f0000006240)="733655280cdd082ea9dbed0fd29ecd0b57fbaa6bd19cd75be35b8553497e7de7c404587a6246c118b1a975e225f76d6c1a6ec7585a3ca5ffadfe1535632b0c1c237a53a2803a615ba9953b63c3e05c776cf6e1eb0a6397af777d4b0d837e4e0602830b1bd3a16fe640132536437fd9e53a12200f8787f840", 0x78}, {&(0x7f00000062c0)="b6ad6e16834bfa2782aa1eac7fd96ac5d27afbf17cce843114b10537c8e2cdb19476ee1f6354ba6c5f1b", 0x2a}, {&(0x7f0000006300)="45ce833026d204f028e8d2a142aae1729a793f67059014a49f2bb6a64ca0c48cc06d1f8daf59fd7f18fcd18510b3022988f2fc576afb2de3b2aef0f867de6007b5ea1a09bd0b9b43a55c1451ce7c1206bf9879fdb94b9779ebbce3b233fcfb2371a565055c91ab7fda1b40fad18d5703bcbf307d7db05adb21ba3f2d5bd6a0814731789a592e3fedf33bc1cb0497c76d74eb1648b0154d94c8efc1752cd6430a8ca7ddd90e9e46d94ceef869b616a4e435dc6d5a68a53abc518c77b83b94d0", 0xbf}], 0x8, &(0x7f0000006440)=[@ip_retopts={{0x7c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xdf, 0x1, 0xf, [{@broadcast, 0xffffffff}]}, @timestamp={0x44, 0x28, 0xf, 0x0, 0x4, [0x81, 0x80000000, 0x2, 0x3, 0xfffffff7, 0x5, 0x8, 0x4, 0x80]}, @noop, @timestamp_addr={0x44, 0x34, 0xd, 0x1, 0x8, [{@rand_addr=0x64010100, 0x4}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x1}, {@private=0xa010100, 0x8}, {@local, 0x1}, {@broadcast, 0x7}, {@multicast1, 0x80000001}]}, @end]}}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x40, 0x0, 0x7, {[@end, @rr={0x7, 0x7, 0x2e, [@multicast2]}, @rr={0x7, 0x1b, 0xba, [@multicast2, @loopback, @loopback, @multicast1, @empty, @broadcast]}, @cipso={0x86, 0xc, 0x1, [{0x7, 0x6, "305104ec"}]}]}}}], 0xd8}}, {{&(0x7f0000006540)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000006700)=[{&(0x7f0000006580)="781a22291b81f1d0d47cbc24d62e17ba0fa2160447bf444ebf22eb3ff935b091b7fbf8485412efb37f85568c2c7fb72ccd34ae5dc4fc9b85c87f585cb77c5e22fcb8ce4d51a5605c3e9d9a00138e2b2f0c1b289ec04f0431ffbe0c25db228251668034ea98826d7d977d9e11c1ad4234ced0312202", 0x75}, {&(0x7f0000006600)="408d7b8e745350a88b46e49aa5004788cd26e925eec7e42fb137f2c4b5299154ed5b78ebc332ccf8c039bf8c27ad7d6629b6ab8cc35f0bd73f9d7c9c62eb6e7042a204db7b828c5bc6574ae211da0e6f5f91c23838df9c24a616d9c8ad954958a2a1854e5e750acb6f78bf3de5eaa47c4290267157122d0cf402871a1f98513df530f09b4c7895d6ad183e178ee5bd018b3a1d57be41da18325ccc562617a46376398119b682adf1d5509de8929ec2000defa069f05311d14cf729531ef59437e5f820b0bb6b6cab678fffb3f48b6a1071dec7097105112712be2dfb23", 0xdd}], 0x2}}], 0x9, 0x20000800) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r11 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_LOGICAL_INO(r11, 0xc0389424, &(0x7f00000069c0)={0x7, 0x20, '\x00', 0x1, &(0x7f0000006980)=[0x0, 0x0, 0x0, 0x0]}) 823.172901ms ago: executing program 0 (id=2774): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x88}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bac0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="1b9f", 0x2}], 0x1}}], 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0xffffff21, 0x2, 0x7, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x3290c78da8758c7b) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r8 = socket$inet6(0xa, 0x3, 0x8a) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000100)={{{@in=@rand_addr=0x64010102, @in=@remote, 0x4e24, 0x0, 0x4e23, 0x4, 0xa}, {0x0, 0x4, 0x0, 0x0, 0xfffffffbfffffffd, 0x9, 0x0, 0x8}, {0xcb29, 0x1000000000, 0x53e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x2, 0x3}, {{@in=@empty, 0x0, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1502, 0x1, 0x2, 0x0, 0x5, 0xfffffffd, 0x1}}, 0xe8) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 809.250262ms ago: executing program 4 (id=2775): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x24, r1, 0xdac7a804b810efff, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x24}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002"], 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x81, 0xfffffffa, 0x60, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x8000, 0x81, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', r2, 0x4, 0x6, 0xc0, 0x4, 0x2c, @loopback, @loopback, 0x8000, 0x40, 0x3, 0x250}}) 585.157188ms ago: executing program 3 (id=2776): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYRES64=r1, @ANYRESDEC=r0, @ANYRES8=0x0], 0x84}, 0x1, 0x0, 0x0, 0x4004055}, 0x48050) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000a0a010100"], 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x20004800) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00130000017c0000040042800c00018006000600800a00000c00028006000a80"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="469ea31e6c6fe02f351d2c48220119247b86afc2b7f7f6eb3c8c74c34109275474081792c815a4d3f83578bddfa1816c65bafb1c0c5d53c3d62c3f2a6b7f283f465c269a61813658a51f04e13955a4f49baa163451e3f55aa68dc4f1a735af1d199fec1a1e6c6bbf9485f9caee35086979661a7a902ddc634090356f017495a82cd6c44b4ab2ade580b78869c12a9a3fb76b09eeca9b0cf9c7e114", 0x9b}, {&(0x7f0000000100)="f4d2084d2aca60cd758e21785781d1c73ce3e82bd6fb5bf0c6b1af6b766afd52ef11b94c465646a2342d9af29f3f79feb35c824d573c22676cd88979d169cae26cecc6c9867b4bd03fbaf674c4db73e1bd275e503cf42ae72eb41176b5380ce9d66091c248be1503b3e4f5155208", 0x6e}, {&(0x7f0000000180)="96e07bbfc521ca62d898d80dc0100a1bf586665c2bdbb43f9376dbb07fd004318d0788ceb314ed558a8dad562a76bee21fbeaf304ac9bd8a86abf12d3a198a33b03790c245acfd4245c8aee5e72b4b3fb8b61182d7077b43ed6415d110554897c79871b92212a33a36c090486481ecc273da22a7306388685139fe059704070d8b8fd54419ff5d274781433d1b6060019c24f60f824ac38f7ba3f917a3717539122cd9abfcf947960352a39ad7a728359173f5273e44be79f88ef1f6", 0xbc}, {&(0x7f0000000240)="378d6c1d193c89dca64fbb09b1cd5c5bb62c95", 0x13}, {&(0x7f0000000280)="97704f8cd2ee664a83f59e9bcb0cf5aace268fb2b01b065b5202de1204c983ca12be48cc72cde672ff02a7205bf4640a7d1baf099b1b11cb8737477cf17ea34331670a7d1f883cdbdd6bca5547127dda388886486373c9ee9e7be1a11f684497c1479e284144d1ee6cd823", 0x6b}, {&(0x7f00000003c0)="8d4b4796f63a200056679f85267a4fdaaf2fb48ceabd452c38ebf1cacadf3f65a16b384e27050258282ed53eb38db64b3f7d7992a342805bc5f5c370a69a36b6cd678624747105559c463a2a61653f1e350868ebbed9219252b118f4ca68", 0x5e}], 0x6}, 0x0) 584.142839ms ago: executing program 1 (id=2777): syz_emit_ethernet(0x36, &(0x7f0000002180)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x20, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0xb386, 0x2, 0xe, 0x7, 0x5}}}}}, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, 0x2500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r3 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r3, &(0x7f0000000000)="c65d857955ba953b4391d5f8806df682b401c284fa1e425448a11de1b10485c78440daa2a0634a89b3dfb2a8a3549efcbba8da530936f38244991e035022fe7002cc33ce7a5bc5b4d10e97e62c90024daf6b98f6d220840825f53edc3545752eb939d0b223dcdfcc8a697ba8afb3d7f0b9328faca3fa237ca0fd47f0f300aa80c632867afa537ee7f906a7e40cb73e19e6b09d1e1b284385ac8f37d526f8c5d9dc96d61a4d40ddb1b2f3365c0ef2b63c49118628e2d95c0b1a4004171d7028f2c9f603d5fe758f921eb2d3d18677b87c3bb99b", 0xd3, 0x0, 0x0, 0x0) 582.497876ms ago: executing program 4 (id=2778): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x78}}], 0x2, 0x3404c8d4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x12, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r1) unshare(0x400) r3 = socket$isdn_base(0x22, 0x3, 0x0) bind$inet(r3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x10e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x100000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x5}, 0x10) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x60) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x310000, 0x1000, 0x4, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r8, &(0x7f0000000200)={0x2c, 0x1, r10, 0x25, r8}, 0x10) 519.194664ms ago: executing program 2 (id=2779): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=@bridge_getvlan={0x18, 0x68, 0x1}, 0x18}}, 0x0) (async) sendto$inet(r1, &(0x7f0000000300)="a0", 0x1, 0x0, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) (async, rerun: 64) listen(r1, 0x21) (async, rerun: 64) r3 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000240)=0x8) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4000000}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) (async) sendmmsg$alg(r3, &(0x7f00000006c0)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)="85a3242d95984be040bb7b014662dd3888638adc643956ce4e7dd9d5019066b3de615efbc5f9ee711f85752855620d532bf7c7250d04fe528574373ea40d1293d287dd1c06bc4b84f9fdb43c4dc72d71f200ef20bda60196581f6b4e82ec450da84d0311d6636b5432048a4cbf85096d04f3e921bd44771fa7e3782c3c5cbe35", 0x80}], 0x1, &(0x7f0000000f40)=[@assoc={0x18, 0x117, 0x4, 0x7ff}, @iv={0x100, 0x117, 0x2, 0xe8, "d46f1fb3606e5ee9469c1be2737e97aa0698cc6465c79ede6c639fd5dfe2ebefaa5ff8cfa308dc0b37ac8aadc6664e04efbbcf8c56710fead1397d82f9b94521fc281e5ee9dd1b0075f3250ac199dd046bff79f84bf25606c1031b227fc0eac6c10b84035914c261a3c82935b220059eaeeed5ef6413b64d302833dabe7e5869d1bcde562de87d7af356f5eb2648819bcb6d61cfddab9de8eb9d2302d3dcdc037c65c3f18a9c5552b3e9198ea6e20a6505e0adb51892bc29435421c0a3e3faec43a58cd68010eedfe3bcb74d0d0064513dd3d02afe444e8736e6e98e4762f6faeab8b1d65f92aa2d"}, @op={0x18}, @iv={0x80, 0x117, 0x2, 0x6c, "168f6be0ddcf12d4bf617d85ef3cfab6cfb710d677f890253ef3495d700a28d6ba0ea3a9fd35ad52d23aedafa0e349947ffab61baeaaedceeb12d219292d3b1ab750c7def15e2714100e3ff35d0b1c4130995ae0cbfe153f1597151ec20b1935d3ed115192312baa6e41ff97"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1ff}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x1f8, 0x800}], 0x1, 0x24000810) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0xf, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x4, 0x4}, {}, {0x6, 0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}}, 0x20040054) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x48885, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@gettaction={0xc8, 0x32, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x4010041) (async) r7 = socket$inet6(0xa, 0x80002, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}}, 0x24}}, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x4) write(r10, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb010100030006a40e07fff024bb000000000000000040000000", 0x29) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0xfc, 0x2, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0xe6, 0x6, "deac243b234c8d0937e93d237cac832e0c363ef2387ee1635bdce071e547b301d4a534c6c8c11e54137dcd158fed0e9e67fa7424edaa168d48e6763b233da3923e16c9f66a9bfd1b15d1982e959a27b948238e00a5dd6bba717584d60f52eeb7d5947738673cd50de6dc478964071aef11c8ac9577d94a5f5f2a59d49a7e6a3953d60dc55e8c9be731d8b6440bf4125d3415387c734ac27d37d4c2ffdf2ca86d2fd474bbef7a167fd0b37e63eb32cdb3b538aed2ae7aedc2c1d8168956feefcb396e2e6507107e1c3f1b493220bfc425b13a639069a81d73e176e4fca601f57d651f"}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c0, 0x6, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x1a4, 0x4, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x58}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xab}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x49}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x1ff}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x13c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x12c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_BITWISE_DATA={0x110, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xde, 0x1, "2667001d58a12deb5082f618e426bd3ecd465a6a3912f375dc71a22cc9d63ee5cb13a2125081f9e277605fae40057197e522e6c2334c485d24cb8862d7add35185444a6a8cb513d8651bba2280d213d19ea3073b798410d90e58f7fdc700fb1b7f0a4dab67ed07aacd975ba93815573b0e853733de7d020671a8405d71dad82e2193285c903d20e5b6a5c8db39dced163118cbf114f243a7bf4e6f9110fcb8e242f113737daffc664b61d5b33dfa7a467bfff3c525492f0f060ff2b08af44326ebfefa3d0af6e0206a499c67d6778af054ba64e47269909454fd"}]}]}}}]}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_RULE_EXPRESSIONS={0xd8, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xdc}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x1db}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xe4}, @NFTA_HASH_OFFSET={0x8}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xaf}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x2c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x40}]}}}, {0x34, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x394b}]}}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x16}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_NEWSET={0x120, 0x9, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_USERDATA={0xd3, 0xd, 0x1, 0x0, "b58f3ec8978e3223384662a1fc23e571c8aae04c9beff5ba1c77cc52342107a63d53ac4157bb4dd688413c6689dcdf77c82046bccfa3f29a4560126d9d58d530cf08bc6b9db166c9059fb60673d71db601f1b7540cf1423552d3692e119ead6b723a70b805c11a5377f98f90d7d94a8a73b21c56ab24900214f354988cbda11b7b7127e6db86cd7a5125b200f8c74a7808720d9ab38696b9561b153951bf4c84fffa02fbc5b41b875e02ca48fb42e7a608be81cc7da4234aa684ce2cb564085d40652c3cfff4ffcfd441496ffb4fd9"}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2e}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_SET_POLICY={0x8}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_USERDATA={0x57, 0xd, 0x1, 0x0, "d2053b0ec711081944b52ecd0d26a4790f2827a27cbac29a85a02c6c44e10486e11d87ff7a1b865ffec9a0350a2fa0e0ed29e17f0c8888033f4fb2ed43b2c8497dc0d1d020daf0550e95e2e7be05b94b11f596"}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5fc}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) (async) close(0xffffffffffffffff) 504.671583ms ago: executing program 0 (id=2780): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)={0x138, 0x27, 0x400, 0x0, 0x0, "", [@nested={0x127, 0x0, 0x0, 0x1, [@generic="d907641a5a50b441ac713b7ff2ac2bfa587598574eccc251266d5fb28d2884c42c312c630e2ca01e8da15ce6325402c5", @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc079446aa19f95438c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a6"]}]}, 0x138}], 0x1}, 0x0) 453.440827ms ago: executing program 1 (id=2781): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="140000001d000b63d25a80648c2594f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0xc0800) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 429.817334ms ago: executing program 3 (id=2782): r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xe0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044080) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r3, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_flash={0x33, 0x3, './file0\x00'}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x3, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x2004c880) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="3500000027e4853b3ad28b2b80c32d0082000000000000000000006110"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) 371.955636ms ago: executing program 1 (id=2783): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x4, 0x9, 0x7fffffffffffffff}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x18, &(0x7f0000000280)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000000200)='GPL\x00', 0x10, 0xa5, &(0x7f0000000340)=""/165, 0x40f00, 0x25, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xf, 0x9, 0x641}, 0x10, 0xc787, 0xffffffffffffffff, 0x9, 0x0, &(0x7f00000006c0)=[{0x4, 0x5}, {0x1, 0x5, 0x10, 0x6}, {0x2, 0x4, 0x0, 0x2}, {0x4, 0x1, 0xd, 0xa}, {0x4, 0x4, 0x1, 0x8}, {0x3, 0x1, 0xf, 0x3}, {0x1, 0x3, 0x1, 0xb}, {0x4, 0x4, 0xd, 0xc}, {0x4, 0x1, 0x1, 0x3}], 0x10, 0x7ff}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r1, r0, 0x4, r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x4000, 0x4, 0x3, 0x0, r1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, 0x0, 0x1, {0x0, 0xff, 0x1}, 0xfd}, 0x18) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_emit_ethernet(0x86, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000009078ac1e0001ac1414aa05009078e00000e0470000000000000000110002ac1414aaac1414aa07030089079d00000000443c00030a01012f00000000e000000100000000ac1e000100000000ac1414aa000000000000000000000000ac141400"/134], 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r9, &(0x7f0000000080)='syz0\x00', 0x1ff) r10 = openat$cgroup(r9, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r10, &(0x7f00000000c0)='syz0\x00', 0x1ff) mkdirat$cgroup(r10, &(0x7f0000000600)='syz0\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) socket$rds(0x15, 0x5, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r13, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r14, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) 288.395107ms ago: executing program 1 (id=2785): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r2, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x44, 0x1, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r3) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r7, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_SET_NETID(r9, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r10, 0x300, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x6}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000000100)={0x1, 0x2}, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="a158881de2180800000000000000000000000000007110000000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 263.81246ms ago: executing program 2 (id=2786): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 32) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xffff, 'syz0\x00', @default, 0xfffffdba, 0x80002, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) (async) close(r1) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x902}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x7}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x14}]}}}]}, 0x44}}, 0x0) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7}, &(0x7f0000000080), &(0x7f0000000240)=r8}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r9, 0x29, 0x39, &(0x7f0000000100)=@srh={0x0, 0x0, 0x4, 0x0, 0x5}, 0x8) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) (async) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffb, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffffffffff8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {}, {0x2, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 155.805295ms ago: executing program 3 (id=2787): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x16, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @exit, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, r3, 0x25, 0x4, @val=@tcx={@void, @value=r1}}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000001cc0), &(0x7f0000001d00)=0x8) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x5, 0x0, 0x0, {[@eol]}}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x2, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0x10}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4040421) 73.352345ms ago: executing program 1 (id=2788): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x1, 0x7f, 0x40000041, 0x8, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000027c0)=@deltfilter={0x238, 0x2d, 0x800, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xc, 0xffff}, {0x5, 0xffe0}, {0xffff, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x200, 0x2, [@TCA_U32_SEL={0x1f4, 0x5, {0x8, 0xfa, 0xf8, 0x9, 0x7fff, 0xc, 0x7, 0x558, [{0x400, 0x2800, 0xe}, {0x5, 0xffff, 0x6, 0x9}, {0x0, 0x1, 0x7fffffff}, {0x5, 0x6, 0x9, 0xc80000}, {0x7fffffff, 0xf, 0x621, 0x6}, {0x1ff, 0x2, 0x1, 0x8}, {0x28, 0x1ff, 0xfffffff7, 0x8}, {0x91c8, 0x1, 0x5, 0xfffffffa}, {0x8, 0x0, 0x4, 0x8000}, {0x4, 0x8, 0xffff, 0x1}, {0x7, 0x6, 0xfffff4ac, 0x133e}, {0xf4, 0x6, 0xffff, 0x6}, {0x53e, 0xa, 0x8, 0x9}, {0x8, 0x0, 0x8a, 0x9}, {0x3, 0x9, 0x9, 0x8}, {0x7dc1529e, 0x4, 0x5, 0xb}, {0x7, 0x800, 0x8, 0xfffffffa}, {0x4, 0x681, 0xfffffffd, 0x9}, {0x4, 0x6, 0x6, 0x3}, {0xd, 0x5, 0xf1, 0xd8e0}, {0x1, 0x6, 0x1, 0x800}, {0x3, 0x8, 0x3, 0x8}, {0x1000, 0x9, 0xf, 0x3}, {0x8, 0x8, 0x2, 0x9d48}, {0xffff7fff, 0x2, 0x6, 0x6}, {0x920, 0xfe, 0xc, 0x8000}, {0x100, 0xd0, 0x1, 0x47}, {0x6, 0x6, 0x220b4910, 0x1ff}, {0xb6, 0x9, 0x3, 0xfffffffe}, {0xcf43911, 0x7, 0x7fff, 0x8}]}}, @TCA_U32_HASH={0x8, 0x2, 0x3}]}}, @filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x238}, 0x1, 0x0, 0x0, 0x4040801}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r6, @ANYBLOB="18080400430001002c0012801100010062726964676500006c6176650000000014000580060002"], 0x4c}, 0x1, 0x0, 0x0, 0x38f54add4fcfee77}, 0x4000000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r11) r12 = socket$unix(0x1, 0x2, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x8000000, {0x0, 0x0, 0x0, r14, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffe, 0x1b6b}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 0s ago: executing program 4 (id=2789): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@fwd={0x2, 0x0, 0x0, 0x12}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x40}, 0x20) r0 = socket$inet_sctp(0x2, 0x7, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0xe8, "70d56762e55e45fe32582259372b3e23259ff7262bac63f27bfa3aead496560fbc2717afb6ca76cc9f9bcb518b5a43f74a15df502b37d8559744b5d36f0ecd491a09d6662913071a692d8f028503d68786a0bfbd361ba599e75f35fa75bf419ca3987603c3c02231ebb84fcef65793bbf510c0d8febce3b604fe6fc76a81c0f57e370ceb495f9955814937b9febc01a1cc1f45d9f00761e6c3d2e131c7abfef94dc50677ffb69eed345099f2a78e1dbac07937a7f08f2bf2987d444daa6418e8ec0d98895d8ac1fc4cd92ec67c58efd385b89a8d878e4f1dac8cd554a06c171a7e23f6ae78c54bbe"}, &(0x7f0000000200)=0xf0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x2, 0x8000, 0xffff, 0x2, r1}, &(0x7f00000002c0)=0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x9, 0x0, 0x2, 0xe, 0x0, 0x70bd2b, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x2, 0x0, @empty, 0x9}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) kernel console output (not intermixed with test programs): yz.2.217'. [ 150.272445][ T6708] IPVS: using max 26 ests per chain, 62400 per kthread [ 150.319495][ T6713] netlink: 'syz.1.219': attribute type 12 has an invalid length. [ 150.434689][ T6725] netlink: 96 bytes leftover after parsing attributes in process `syz.2.223'. [ 150.617229][ T6725] 8021q: VLANs not supported on ip_vti0 [ 150.779517][ T6744] IPv6: NLM_F_CREATE should be specified when creating new route [ 151.812218][ T6757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.235'. [ 152.107014][ T6782] openvswitch: netlink: Key type 85 is out of range max 32 [ 152.144772][ T6784] netlink: 20 bytes leftover after parsing attributes in process `syz.2.244'. [ 152.160811][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.244'. [ 152.229247][ T6784] macvtap1: entered promiscuous mode [ 152.267978][ T6784] vlan0: entered promiscuous mode [ 152.293866][ T6784] macvtap1: entered allmulticast mode [ 152.320783][ T6784] vlan0: entered allmulticast mode [ 152.340860][ T6784] veth0_vlan: entered allmulticast mode [ 152.414146][ T6785] veth0_to_team: entered promiscuous mode [ 152.431741][ T6785] veth0_to_team: entered allmulticast mode [ 152.537860][ T6811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.248'. [ 152.620353][ T6819] netlink: 'syz.2.249': attribute type 1 has an invalid length. [ 152.628257][ T6819] netlink: 'syz.2.249': attribute type 2 has an invalid length. [ 152.738296][ T6821] syzkaller0: entered promiscuous mode [ 152.745014][ T6821] syzkaller0: entered allmulticast mode [ 152.760905][ T6821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.480834][ T6831] netlink: 'syz.2.254': attribute type 2 has an invalid length. [ 153.503133][ T6837] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 153.686013][ T6847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.536365][ T6885] bridge2: port 1(veth3) entered blocking state [ 154.558671][ T6885] bridge2: port 1(veth3) entered disabled state [ 154.596088][ T6885] veth3: entered allmulticast mode [ 154.605079][ T6885] veth3: entered promiscuous mode [ 154.688971][ T6896] bridge2: port 2(veth5) entered blocking state [ 154.695993][ T6896] bridge2: port 2(veth5) entered disabled state [ 154.702548][ T6896] veth5: entered allmulticast mode [ 154.708793][ T6896] veth5: entered promiscuous mode [ 154.829819][ T6919] wg1 speed is unknown, defaulting to 1000 [ 155.084030][ T6944] __nla_validate_parse: 12 callbacks suppressed [ 155.084047][ T6944] netlink: 24 bytes leftover after parsing attributes in process `syz.1.291'. [ 155.401537][ T6924] netlink: 'syz.4.283': attribute type 13 has an invalid length. [ 155.504085][ T6982] tipc: Enabled bearer , priority 0 [ 155.511707][ T6982] syzkaller0: entered promiscuous mode [ 155.542417][ T6982] syzkaller0: entered allmulticast mode [ 155.602826][ T6987] netlink: 'syz.1.301': attribute type 4 has an invalid length. [ 155.765918][ T6982] tipc: Resetting bearer [ 155.774316][ T6998] netlink: 'syz.3.306': attribute type 25 has an invalid length. [ 155.782285][ T6979] tipc: Resetting bearer [ 155.829051][ T6979] tipc: Disabling bearer [ 156.157795][ T7020] team_slave_0: entered allmulticast mode [ 156.369649][ T7033] netlink: 'syz.0.318': attribute type 19 has an invalid length. [ 156.421232][ T7036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.319'. [ 156.589992][ T7045] veth0: entered promiscuous mode [ 156.597514][ T7045] veth0: left promiscuous mode [ 156.662223][ T7043] netlink: 60 bytes leftover after parsing attributes in process `syz.0.322'. [ 156.848637][ T7059] netlink: 156 bytes leftover after parsing attributes in process `syz.4.327'. [ 156.947063][ T7060] wg1 speed is unknown, defaulting to 1000 [ 156.996458][ T7068] netlink: 36 bytes leftover after parsing attributes in process `syz.4.329'. [ 157.188589][ T7082] netlink: 'syz.4.334': attribute type 1 has an invalid length. [ 157.203521][ T7082] netlink: 'syz.4.334': attribute type 2 has an invalid length. [ 157.517852][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.338'. [ 157.662082][ T7107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.918438][ T7124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.348'. [ 157.960721][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.348'. [ 157.980942][ T7124] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 157.989930][ T7124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.047086][ T7131] netlink: 'syz.1.351': attribute type 29 has an invalid length. [ 158.176742][ T7131] netlink: 'syz.1.351': attribute type 29 has an invalid length. [ 158.190785][ T7131] netlink: 'syz.1.351': attribute type 29 has an invalid length. [ 158.199078][ T7131] netlink: 'syz.1.351': attribute type 29 has an invalid length. [ 158.340221][ T7153] team0: Port device dummy0 added [ 158.499743][ T7165] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 158.558902][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.362'. [ 158.609036][ T7174] vlan2: entered allmulticast mode [ 158.623510][ T7174] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 158.636392][ T7179] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20000 [ 158.676915][ T7181] tipc: Started in network mode [ 158.684441][ T7181] tipc: Node identity aaac4ad62e59, cluster identity 4711 [ 158.691752][ T7181] tipc: Enabled bearer , priority 0 [ 158.752498][ T7179] wg1 speed is unknown, defaulting to 1000 [ 158.786423][ T7189] syzkaller0: entered promiscuous mode [ 158.802901][ T7189] syzkaller0: entered allmulticast mode [ 158.853194][ T7184] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.366'. [ 158.952042][ T7180] tipc: Resetting bearer [ 158.972169][ T7180] tipc: Disabling bearer [ 159.010905][ T7198] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 159.028390][ T7198] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 159.457865][ T7230] trusted_key: syz.2.377 sent an empty control message without MSG_MORE. [ 160.123615][ T7282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.196502][ T7282] veth3: entered promiscuous mode [ 160.199308][ T7294] unsupported nlmsg_type 40 [ 160.428955][ T7314] sch_fq: defrate 0 ignored. [ 160.686725][ T7334] __nla_validate_parse: 5 callbacks suppressed [ 160.686742][ T7334] netlink: 10 bytes leftover after parsing attributes in process `syz.3.404'. [ 160.730610][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.403'. [ 161.161588][ T7357] validate_nla: 6 callbacks suppressed [ 161.161604][ T7357] netlink: 'syz.4.411': attribute type 1 has an invalid length. [ 161.180211][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.410'. [ 161.372880][ T7363] bond0: (slave bond_slave_1): Releasing backup interface [ 161.507145][ T7357] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 161.578776][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.414'. [ 161.713593][ T7378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.439945][ T7392] netlink: 'syz.3.419': attribute type 1 has an invalid length. [ 162.512508][ T7392] netlink: 140 bytes leftover after parsing attributes in process `syz.3.419'. [ 162.534776][ T7392] netlink: 'syz.3.419': attribute type 1 has an invalid length. [ 162.611166][ T7392] netlink: 92 bytes leftover after parsing attributes in process `syz.3.419'. [ 162.667121][ T7405] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 163.244762][ T7422] openvswitch: netlink: Missing key (keys=40, expected=100) [ 163.310083][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'. [ 163.319249][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.429'. [ 164.087800][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.435'. [ 164.120655][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.435'. [ 164.281734][ T7455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.525145][ T7322] Set syz1 is full, maxelem 65536 reached [ 165.250037][ T7531] netlink: 'syz.3.458': attribute type 13 has an invalid length. [ 165.297001][ T7531] gretap0: refused to change device tx_queue_len [ 165.305557][ T7531] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 165.329483][ T7535] tipc: Enabled bearer , priority 0 [ 165.341117][ T7535] syzkaller0: entered promiscuous mode [ 165.347113][ T7535] syzkaller0: entered allmulticast mode [ 165.359209][ T7535] tipc: Resetting bearer [ 165.392217][ T7534] tipc: Resetting bearer [ 165.454705][ T7534] tipc: Disabling bearer [ 165.588978][ T7548] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 165.741476][ T7562] syz.4.469: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 165.746884][ T7563] __nla_validate_parse: 6 callbacks suppressed [ 165.746898][ T7563] netlink: 52 bytes leftover after parsing attributes in process `syz.3.470'. [ 165.770925][ T7562] CPU: 0 UID: 0 PID: 7562 Comm: syz.4.469 Not tainted syzkaller #0 PREEMPT(full) [ 165.770947][ T7562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 165.770963][ T7562] Call Trace: [ 165.770970][ T7562] [ 165.770978][ T7562] dump_stack_lvl+0x189/0x250 [ 165.771006][ T7562] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.771027][ T7562] ? __pfx__printk+0x10/0x10 [ 165.771049][ T7562] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 165.771069][ T7562] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 165.771090][ T7562] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 165.771112][ T7562] warn_alloc+0x214/0x310 [ 165.771137][ T7562] ? stack_depot_save_flags+0x40/0x860 [ 165.771162][ T7562] ? __pfx_warn_alloc+0x10/0x10 [ 165.771187][ T7562] ? kasan_save_track+0x4f/0x80 [ 165.771207][ T7562] ? xskq_create+0x56/0x170 [ 165.771223][ T7562] ? xsk_init_queue+0xb0/0x110 [ 165.771237][ T7562] ? xsk_setsockopt+0x4dc/0x8d0 [ 165.771257][ T7562] ? do_sock_setsockopt+0x17c/0x1b0 [ 165.771275][ T7562] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 165.771290][ T7562] ? do_syscall_64+0xfa/0x3b0 [ 165.771306][ T7562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.771330][ T7562] __vmalloc_node_range_noprof+0x125/0x12f0 [ 165.771381][ T7562] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 165.771410][ T7562] ? __kasan_kmalloc+0x93/0xb0 [ 165.771434][ T7562] vmalloc_user_noprof+0xad/0xf0 [ 165.771456][ T7562] ? xskq_create+0xbf/0x170 [ 165.771474][ T7562] xskq_create+0xbf/0x170 [ 165.771493][ T7562] xsk_init_queue+0xb0/0x110 [ 165.771511][ T7562] xsk_setsockopt+0x4dc/0x8d0 [ 165.771537][ T7562] ? __pfx_xsk_setsockopt+0x10/0x10 [ 165.771566][ T7562] ? __pfx_aa_sk_perm+0x10/0x10 [ 165.771595][ T7562] ? aa_sock_opt_perm+0xff/0x1b0 [ 165.771615][ T7562] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 165.771633][ T7562] ? __pfx_xsk_setsockopt+0x10/0x10 [ 165.771659][ T7562] do_sock_setsockopt+0x17c/0x1b0 [ 165.771683][ T7562] __x64_sys_setsockopt+0x13f/0x1b0 [ 165.771707][ T7562] do_syscall_64+0xfa/0x3b0 [ 165.771724][ T7562] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.771740][ T7562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.771757][ T7562] ? clear_bhb_loop+0x60/0xb0 [ 165.771777][ T7562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.771792][ T7562] RIP: 0033:0x7f211498eec9 [ 165.771815][ T7562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.771828][ T7562] RSP: 002b:00007f2115770038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 165.771846][ T7562] RAX: ffffffffffffffda RBX: 00007f2114be5fa0 RCX: 00007f211498eec9 [ 165.771858][ T7562] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 165.771869][ T7562] RBP: 00007f2114a11f91 R08: 0000000000000004 R09: 0000000000000000 [ 165.771880][ T7562] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.771890][ T7562] R13: 00007f2114be6038 R14: 00007f2114be5fa0 R15: 00007ffecbcdb3d8 [ 165.771920][ T7562] [ 165.771929][ T7562] Mem-Info: [ 165.954741][ T7567] netlink: 156 bytes leftover after parsing attributes in process `syz.4.469'. [ 165.955939][ T7562] active_anon:4767 inactive_anon:0 isolated_anon:0 [ 165.955939][ T7562] active_file:2637 inactive_file:39891 isolated_file:0 [ 165.955939][ T7562] unevictable:768 dirty:143 writeback:0 [ 165.955939][ T7562] slab_reclaimable:11378 slab_unreclaimable:96543 [ 165.955939][ T7562] mapped:28924 shmem:1356 pagetables:1134 [ 165.955939][ T7562] sec_pagetables:0 bounce:0 [ 165.955939][ T7562] kernel_misc_reclaimable:0 [ 165.955939][ T7562] free:1326148 free_pcp:15231 free_cma:0 [ 166.132584][ T7566] Illegal XDP return value 4294967289 on prog (id 173) dev N/A, expect packet loss! [ 166.146730][ T7573] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 166.149901][ T7577] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 166.151697][ T7562] Node 0 active_anon:18968kB inactive_anon:0kB active_file:10548kB inactive_file:159360kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124096kB dirty:572kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11988kB pagetables:4580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 166.231651][ T7562] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 166.289272][ T7562] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 166.333782][ T7562] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 166.347062][ T7562] Node 0 DMA32 free:1399792kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18820kB inactive_anon:0kB active_file:10548kB inactive_file:157800kB unevictable:1536kB writepending:572kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:40404kB local_pcp:20188kB free_cma:0kB [ 166.381084][ T7587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.384744][ T7562] lowmem_reserve[]: 0 0 1 1 1 [ 166.406750][ T7587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.420671][ T7587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.449285][ T7562] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1560kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 166.472131][ T7587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.519366][ T7587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.547569][ T7587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.548660][ T7562] lowmem_reserve[]: [ 166.576939][ T7562] 0 0 0 0 0 [ 166.581550][ T7564] syz.4.469 (7564) used greatest stack depth: 16584 bytes left [ 166.587073][ T7562] Node 1 [ 166.591678][ T7587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.594986][ T7562] Normal free:3889316kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21088kB local_pcp:6976kB free_cma:0kB [ 166.647902][ T7562] lowmem_reserve[]: 0 0 0 0 0 [ 166.670074][ T7562] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 166.735266][ T7562] Node 0 DMA32: 274*4kB (UME) 200*8kB (ME) 97*16kB (ME) 1638*32kB (UME) 761*64kB (UM) 228*128kB (UME) 68*256kB (UM) 29*512kB (UME) 4*1024kB (U) 4*2048kB (ME) 298*4096kB (UM) = 1399704kB [ 166.787478][ T7562] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 166.811128][ T7562] Node 1 Normal: 175*4kB (UME) 51*8kB (UME) 47*16kB (UME) 69*32kB (UME) 33*64kB (UME) 9*128kB (UME) 4*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3889316kB [ 166.838421][ T7562] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 166.848189][ T7562] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 166.911046][ T7562] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 166.924317][ T7562] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 166.935534][ T7562] 43884 total pagecache pages [ 166.940238][ T7562] 0 pages in swap cache [ 166.981904][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.483'. [ 166.994011][ T7562] Free swap = 124996kB [ 166.998178][ T7562] Total swap = 124996kB [ 166.999431][ T7614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.483'. [ 167.023731][ T7562] 2097051 pages RAM [ 167.027550][ T7562] 0 pages HighMem/MovableOnly [ 167.032222][ T7562] 425672 pages reserved [ 167.051300][ T7562] 0 pages cma reserved [ 167.219486][ T7629] netlink: 'syz.2.488': attribute type 16 has an invalid length. [ 167.242770][ T7629] netlink: 'syz.2.488': attribute type 17 has an invalid length. [ 167.280258][ T7632] pimreg: entered allmulticast mode [ 167.286969][ T7635] netlink: 'syz.2.488': attribute type 16 has an invalid length. [ 167.295736][ T7635] netlink: 'syz.2.488': attribute type 17 has an invalid length. [ 167.328312][ T7631] openvswitch: netlink: Multiple metadata blocks provided [ 167.349919][ T7629] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.372259][ T7635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.408304][ T7640] sctp: [Deprecated]: syz.1.492 (pid 7640) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.408304][ T7640] Use struct sctp_sack_info instead [ 167.500692][ T7645] netlink: 'syz.0.494': attribute type 6 has an invalid length. [ 167.527632][ T7645] netlink: 32 bytes leftover after parsing attributes in process `syz.0.494'. [ 167.590826][ T7649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.496'. [ 167.618979][ T7649] hsr_slave_0: left promiscuous mode [ 167.630066][ T7649] hsr_slave_1: left promiscuous mode [ 167.654422][ T7652] netlink: 'syz.1.496': attribute type 4 has an invalid length. [ 167.707417][ T7654] netlink: 'syz.0.498': attribute type 2 has an invalid length. [ 167.754063][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.498'. [ 167.807622][ T7666] netlink: 52 bytes leftover after parsing attributes in process `syz.1.501'. [ 167.839739][ T7668] pimreg: left allmulticast mode [ 168.011742][ T7677] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 168.052730][ T7677] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 168.082809][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 168.105488][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 168.191965][ T4351] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.218850][ T4351] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.229382][ T4351] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.238950][ T4351] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.268522][ T7697] netlink: 'syz.3.507': attribute type 7 has an invalid length. [ 168.326768][ T7697] netlink: 'syz.3.507': attribute type 8 has an invalid length. [ 168.419334][ T7704] vlan2: entered promiscuous mode [ 168.440450][ T7704] bridge0: entered promiscuous mode [ 168.811913][ T7741] netlink: 'syz.2.524': attribute type 5 has an invalid length. [ 169.210825][ T7771] bridge: RTM_NEWNEIGH with invalid ether address [ 169.583555][ T7800] netlink: ct family unspecified [ 169.588844][ T7800] openvswitch: netlink: Actions may not be safe on all matching packets [ 171.300424][ T7946] __nla_validate_parse: 21 callbacks suppressed [ 171.300441][ T7946] netlink: 100 bytes leftover after parsing attributes in process `syz.4.580'. [ 171.482437][ T7955] ieee802154 phy0 wpan0: encryption failed: -90 [ 171.651361][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 171.710896][ T7974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.584'. [ 171.735910][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 171.909891][ T7983] syzkaller0: entered promiscuous mode [ 171.921127][ T7983] syzkaller0: entered allmulticast mode [ 171.950711][ T7982] tipc: Enabled bearer , priority 0 [ 172.031455][ T7982] tipc: Resetting bearer [ 172.101614][ T7982] tipc: Disabling bearer [ 172.391323][ T8002] netlink: 606 bytes leftover after parsing attributes in process `syz.3.590'. [ 172.441474][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.592'. [ 172.486161][ T8003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.592'. [ 172.579689][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.593'. [ 172.591631][ T8006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.723281][ T8019] validate_nla: 4 callbacks suppressed [ 172.723298][ T8019] netlink: 'syz.2.596': attribute type 4 has an invalid length. [ 172.875162][ T8026] veth0_to_bridge: entered promiscuous mode [ 172.954391][ T8022] tipc: Started in network mode [ 172.972522][ T8022] tipc: Node identity 6e9889bc5414, cluster identity 4711 [ 172.992631][ T8022] tipc: Enabled bearer , priority 0 [ 173.123054][ T8036] netlink: zone id is out of range [ 173.160381][ T8022] syzkaller0: entered promiscuous mode [ 173.181817][ T8022] syzkaller0: entered allmulticast mode [ 173.189510][ T8022] tipc: Resetting bearer [ 173.222392][ T8036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.258139][ T8036] bond0: (slave rose0): Enslaving as an active interface with an up link [ 173.290323][ T8021] tipc: Resetting bearer [ 173.365624][ T8033] delete_channel: no stack [ 173.973846][ T8076] netlink: 300 bytes leftover after parsing attributes in process `syz.1.606'. [ 174.006065][ T5979] tipc: Node number set to 982288828 [ 174.697262][ T8081] netlink: 204 bytes leftover after parsing attributes in process `syz.2.608'. [ 174.708734][ T8081] ksmbd: Unknown IPC event: 0, ignore. [ 174.820139][ T8021] tipc: Disabling bearer [ 174.839826][ T8066] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 174.884960][ T8021] veth0_to_bridge: left promiscuous mode [ 175.155184][ T8109] netlink: 'syz.1.615': attribute type 3 has an invalid length. [ 175.349444][ T8124] Bluetooth: MGMT ver 1.23 [ 175.471810][ T8139] openvswitch: netlink: Key type 29 is not supported [ 175.668715][ T8148] netlink: 'syz.4.627': attribute type 4 has an invalid length. [ 175.826871][ T8145] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.980176][ T8164] netlink: 'syz.1.630': attribute type 20 has an invalid length. [ 176.001522][ T8164] netlink: 'syz.1.630': attribute type 20 has an invalid length. [ 176.004484][ T4351] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.027010][ T8171] Unsupported ieee802154 address type: 0 [ 176.049463][ T4351] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.083991][ T4351] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.114282][ T4351] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.170518][ T8177] netlink: 'syz.0.633': attribute type 29 has an invalid length. [ 176.454386][ T8189] tipc: Enabled bearer , priority 0 [ 176.492760][ T8185] syzkaller0: entered promiscuous mode [ 176.498351][ T8185] syzkaller0: entered allmulticast mode [ 176.546026][ T8185] __nla_validate_parse: 15 callbacks suppressed [ 176.546040][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.635'. [ 176.580789][ T8185] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 176.609241][ T8202] tipc: Resetting bearer [ 176.661330][ T8184] tipc: Resetting bearer [ 176.697961][ T8184] tipc: Disabling bearer [ 176.703974][ T8206] netlink: 'syz.4.640': attribute type 1 has an invalid length. [ 176.760596][ T8212] netlink: 'syz.4.640': attribute type 1 has an invalid length. [ 194.159789][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.356813][ T5876] Bluetooth: hci4: command 0x0405 tx timeout [ 201.360423][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 201.363364][ T5185] Bluetooth: hci1: command 0x0406 tx timeout [ 201.375882][ T5879] Bluetooth: hci2: command 0x0406 tx timeout [ 234.711313][ T8245] netlink: 20 bytes leftover after parsing attributes in process `syz.3.644'. [ 234.916428][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.650'. [ 234.994008][ T8267] syzkaller0: create flow: hash 63774629 index 2 [ 234.994072][ T8266] netlink: 'syz.3.652': attribute type 10 has an invalid length. [ 235.007827][ T8264] tipc: New replicast peer: 255.255.255.255 [ 235.019902][ T8264] tipc: Enabled bearer , priority 10 [ 235.028141][ T37] syzkaller0: tun_net_xmit 76 [ 235.040123][ T37] syzkaller0: tun_net_xmit 48 [ 235.063338][ T9] syzkaller0: tun_net_xmit 76 [ 235.080961][ T8266] batman_adv: batadv0: Adding interface: team0 [ 235.087658][ T8266] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.116722][ T8266] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 235.116913][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.651'. [ 235.138056][ T9] syzkaller0: tun_net_xmit 76 [ 235.167154][ T8259] syzkaller0: delete flow: hash 63774629 index 2 [ 236.331479][ T8293] syzkaller1: entered promiscuous mode [ 236.338378][ T8293] syzkaller1: entered allmulticast mode [ 236.499306][ T8306] vcan0: MTU too low for tipc bearer [ 236.522759][ T8306] tipc: Enabling of bearer rejected, failed to enable media [ 236.589091][ T8306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'. [ 236.733448][ T8321] netlink: 'syz.1.666': attribute type 19 has an invalid length. [ 236.963760][ T8341] netlink: 908 bytes leftover after parsing attributes in process `syz.1.673'. [ 237.050046][ T8345] netlink: 'syz.3.675': attribute type 4 has an invalid length. [ 237.064519][ T8345] netlink: 'syz.3.675': attribute type 4 has an invalid length. [ 237.085040][ T8348] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.676'. [ 237.098340][ T8354] netlink: 'syz.0.677': attribute type 1 has an invalid length. [ 237.112993][ T8354] netlink: 172 bytes leftover after parsing attributes in process `syz.0.677'. [ 237.147550][ T8354] netlink: 18 bytes leftover after parsing attributes in process `syz.0.677'. [ 237.236632][ T8359] team0: Device wireguard0 is of different type [ 238.217904][ T8417] netlink: 'syz.4.696': attribute type 5 has an invalid length. [ 238.258811][ T8418] tipc: Enabled bearer , priority 0 [ 238.260337][ T8417] netlink: 140 bytes leftover after parsing attributes in process `syz.4.696'. [ 238.274163][ T8418] syzkaller0: entered promiscuous mode [ 238.309435][ T8418] syzkaller0: entered allmulticast mode [ 238.366543][ T8418] tipc: Resetting bearer [ 238.393449][ T8421] syzkaller1: entered promiscuous mode [ 238.407680][ T8421] syzkaller1: entered allmulticast mode [ 238.446246][ T8432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.702'. [ 238.458591][ T8416] tipc: Resetting bearer [ 238.487635][ T8416] tipc: Disabling bearer [ 238.520010][ T8432] hsr_slave_0: left promiscuous mode [ 238.535033][ T8432] hsr_slave_1: left promiscuous mode [ 238.859015][ T8456] netlink: 'syz.1.705': attribute type 1 has an invalid length. [ 239.128655][ T8484] Unsupported ieee802154 address type: 0 [ 239.139300][ T8482] netlink: 'syz.4.716': attribute type 1 has an invalid length. [ 239.219079][ T8482] 8021q: adding VLAN 0 to HW filter on device bond3 [ 239.314979][ T8482] bond3: (slave veth0_to_bond): making interface the new active one [ 239.345781][ T8482] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 239.566048][ T8514] netlink: 'syz.4.726': attribute type 1 has an invalid length. [ 239.607347][ T8514] netlink: 'syz.4.726': attribute type 3 has an invalid length. [ 239.894144][ T8537] IPv6: sit1: Disabled Multicast RS [ 239.903698][ T8537] sit1: entered allmulticast mode [ 239.988021][ T8549] batadv0: entered promiscuous mode [ 239.995184][ T8549] batadv_slave_1: entered promiscuous mode [ 240.004586][ T8549] batadv_slave_1: left promiscuous mode [ 240.010894][ T8549] batadv0: left promiscuous mode [ 240.058844][ T8555] openvswitch: netlink: Flow actions attr not present in new flow. [ 240.072283][ T8550] __nla_validate_parse: 3 callbacks suppressed [ 240.072301][ T8550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.736'. [ 240.103988][ T8550] netlink: 40 bytes leftover after parsing attributes in process `syz.2.736'. [ 240.166622][ T8560] vlan2: entered promiscuous mode [ 240.184453][ T8560] bridge0: entered promiscuous mode [ 240.242691][ T8564] bond1: entered promiscuous mode [ 240.248526][ T8564] bond1: entered allmulticast mode [ 240.254332][ T8564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 240.302150][ T8568] syz.2.743: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 240.336938][ T8568] CPU: 0 UID: 0 PID: 8568 Comm: syz.2.743 Not tainted syzkaller #0 PREEMPT(full) [ 240.336962][ T8568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 240.336973][ T8568] Call Trace: [ 240.336981][ T8568] [ 240.336989][ T8568] dump_stack_lvl+0x189/0x250 [ 240.337018][ T8568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.337039][ T8568] ? __pfx__printk+0x10/0x10 [ 240.337062][ T8568] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 240.337082][ T8568] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 240.337104][ T8568] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 240.337129][ T8568] warn_alloc+0x214/0x310 [ 240.337156][ T8568] ? stack_depot_save_flags+0x40/0x860 [ 240.337183][ T8568] ? __pfx_warn_alloc+0x10/0x10 [ 240.337208][ T8568] ? kasan_save_track+0x4f/0x80 [ 240.337238][ T8568] ? xskq_create+0x56/0x170 [ 240.337255][ T8568] ? xsk_init_queue+0xb0/0x110 [ 240.337269][ T8568] ? xsk_setsockopt+0x4dc/0x8d0 [ 240.337291][ T8568] ? do_sock_setsockopt+0x17c/0x1b0 [ 240.337310][ T8568] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 240.337326][ T8568] ? do_syscall_64+0xfa/0x3b0 [ 240.337343][ T8568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.337367][ T8568] __vmalloc_node_range_noprof+0x125/0x12f0 [ 240.337418][ T8568] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 240.337447][ T8568] ? __kasan_kmalloc+0x93/0xb0 [ 240.337471][ T8568] vmalloc_user_noprof+0xad/0xf0 [ 240.337493][ T8568] ? xskq_create+0xbf/0x170 [ 240.337509][ T8568] xskq_create+0xbf/0x170 [ 240.337528][ T8568] xsk_init_queue+0xb0/0x110 [ 240.337547][ T8568] xsk_setsockopt+0x4dc/0x8d0 [ 240.337574][ T8568] ? __pfx_xsk_setsockopt+0x10/0x10 [ 240.337595][ T8568] ? __pfx_aa_sk_perm+0x10/0x10 [ 240.337622][ T8568] ? aa_sock_opt_perm+0xff/0x1b0 [ 240.337642][ T8568] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 240.337660][ T8568] ? __pfx_xsk_setsockopt+0x10/0x10 [ 240.337684][ T8568] do_sock_setsockopt+0x17c/0x1b0 [ 240.337708][ T8568] __x64_sys_setsockopt+0x13f/0x1b0 [ 240.337732][ T8568] do_syscall_64+0xfa/0x3b0 [ 240.337749][ T8568] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.337766][ T8568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.337782][ T8568] ? clear_bhb_loop+0x60/0xb0 [ 240.337803][ T8568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.337819][ T8568] RIP: 0033:0x7fd36038eec9 [ 240.337835][ T8568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.337848][ T8568] RSP: 002b:00007fd361292038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 240.337866][ T8568] RAX: ffffffffffffffda RBX: 00007fd3605e5fa0 RCX: 00007fd36038eec9 [ 240.337879][ T8568] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 240.337888][ T8568] RBP: 00007fd360411f91 R08: 0000000000000004 R09: 0000000000000000 [ 240.337898][ T8568] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.337909][ T8568] R13: 00007fd3605e6038 R14: 00007fd3605e5fa0 R15: 00007ffefb974048 [ 240.337938][ T8568] [ 240.337946][ T8568] Mem-Info: [ 240.377684][ T8580] netlink: 156 bytes leftover after parsing attributes in process `syz.2.743'. [ 240.599970][ T8566] nbd: must specify a device to reconfigure [ 240.646713][ T8568] active_anon:4737 inactive_anon:0 isolated_anon:0 [ 240.646713][ T8568] active_file:2637 inactive_file:39905 isolated_file:0 [ 240.646713][ T8568] unevictable:768 dirty:49 writeback:0 [ 240.646713][ T8568] slab_reclaimable:10679 slab_unreclaimable:99731 [ 240.646713][ T8568] mapped:29953 shmem:1356 pagetables:1160 [ 240.646713][ T8568] sec_pagetables:0 bounce:0 [ 240.646713][ T8568] kernel_misc_reclaimable:0 [ 240.646713][ T8568] free:1323202 free_pcp:10615 free_cma:0 [ 240.646767][ T8568] Node 0 active_anon:18948kB inactive_anon:0kB active_file:10548kB inactive_file:159416kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119812kB dirty:196kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12044kB pagetables:4484kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 240.646814][ T8568] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 240.646857][ T8568] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 240.646909][ T8568] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 240.646952][ T8568] Node 0 DMA32 free:1386280kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18900kB inactive_anon:0kB active_file:10548kB inactive_file:157856kB unevictable:1536kB writepending:196kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:23116kB local_pcp:15772kB free_cma:0kB [ 240.647006][ T8568] lowmem_reserve[]: 0 0 1 1 1 [ 240.647046][ T8568] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1560kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 240.647097][ T8568] lowmem_reserve[]: 0 0 0 0 0 [ 240.770648][ T8581] nbd: must specify a device to reconfigure [ 240.846049][ T8568] [ 240.885697][ T8568] Node 1 Normal free:3891144kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19332kB local_pcp:5668kB free_cma:0kB [ 240.950767][ T8568] lowmem_reserve[]: 0 0 0 0 0 [ 240.972445][ T8568] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 241.028649][ T8568] Node 0 DMA32: 1686*4kB (UME) 846*8kB (UM) 166*16kB (UME) 2301*32kB (UME) 638*64kB (UME) 191*128kB (UME) 66*256kB (UM) 19*512kB (UME) 2*1024kB (U) 5*2048kB (UME) 293*4096kB (UM) = 1394120kB [ 241.099319][ T8568] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 241.122491][ T8568] Node 1 Normal: 176*4kB (UME) 51*8kB (UME) 47*16kB (UME) 108*32kB (UME) 40*64kB (UME) 10*128kB (UME) 4*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3891144kB [ 241.144965][ T8568] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.223112][ T8568] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 241.251572][ T8568] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.319043][ T8568] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 241.331074][ T8608] netlink: 'syz.0.750': attribute type 12 has an invalid length. [ 241.331678][ T8568] 43894 total pagecache pages [ 241.347189][ T8568] 0 pages in swap cache [ 241.351493][ T8568] Free swap = 124996kB [ 241.355968][ T8568] Total swap = 124996kB [ 241.372466][ T8568] 2097051 pages RAM [ 241.376370][ T8568] 0 pages HighMem/MovableOnly [ 241.394640][ T8613] team0: Device ip6gre1 is of different type [ 241.406834][ T8568] 425672 pages reserved [ 241.410997][ T8568] 0 pages cma reserved [ 241.589076][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'. [ 241.631516][ T8587] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 241.638628][ T8587] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 241.654115][ T8625] tipc: Enabling of bearer rejected, media not registered [ 241.672406][ T8587] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 241.694447][ T8587] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 241.736003][ T8587] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 241.741919][ T8587] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 241.810906][ T8587] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 241.838785][ T8587] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 242.017381][ T8647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.758'. [ 242.082012][ T8654] tipc: Enabled bearer , priority 0 [ 242.160422][ T8654] tipc: Disabling bearer [ 242.371907][ T8675] syzkaller1: entered promiscuous mode [ 242.377590][ T8675] syzkaller1: entered allmulticast mode [ 242.448457][ T8680] netlink: 224 bytes leftover after parsing attributes in process `syz.0.767'. [ 242.483469][ T8680] netlink: 'syz.0.767': attribute type 15 has an invalid length. [ 242.501717][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.767'. [ 242.547862][ T8680] macsec1: entered promiscuous mode [ 242.578138][ T8680] bridge0: entered promiscuous mode [ 242.598369][ T8680] macsec1: entered allmulticast mode [ 242.612648][ T8680] bridge0: entered allmulticast mode [ 242.625705][ T8680] bridge0: port 3(macsec1) entered blocking state [ 242.651703][ T8680] bridge0: port 3(macsec1) entered disabled state [ 242.671650][ T8680] bridge0: left allmulticast mode [ 242.676809][ T8680] bridge0: left promiscuous mode [ 242.863358][ T8704] xt_HMARK: spi-set and port-set can't be combined [ 243.036999][ T8715] netlink: 116 bytes leftover after parsing attributes in process `syz.1.778'. [ 243.391822][ T8739] openvswitch: netlink: IPv4 tun info is not correct [ 243.422249][ T8740] openvswitch: netlink: IPv4 tun info is not correct [ 243.860088][ T8770] netlink: 'syz.1.791': attribute type 1 has an invalid length. [ 243.878623][ T8769] syzkaller1: entered promiscuous mode [ 243.899295][ T8769] syzkaller1: entered allmulticast mode [ 243.937752][ T8770] 8021q: adding VLAN 0 to HW filter on device bond2 [ 243.950837][ T8773] IPv6: sit2: Disabled Multicast RS [ 243.983944][ T8773] sit2: entered allmulticast mode [ 243.996526][ T8778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.794'. [ 244.015770][ T8778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.794'. [ 244.088844][ T8776] vlan3: entered promiscuous mode [ 244.122404][ T8776] bond2: entered promiscuous mode [ 244.141676][ T8776] vlan3: entered allmulticast mode [ 244.170169][ T8776] bond2: entered allmulticast mode [ 244.226723][ T8770] bond2: (slave gretap1): making interface the new active one [ 244.252848][ T8770] gretap1: entered promiscuous mode [ 244.261208][ T8770] gretap1: entered allmulticast mode [ 244.273147][ T8770] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 244.520673][ T8808] netlink: ct family unspecified [ 244.526088][ T8808] openvswitch: netlink: Actions may not be safe on all matching packets [ 244.846797][ T8828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.367028][ T8862] team_slave_1: entered promiscuous mode [ 245.394084][ T8862] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 245.397545][ T8867] __nla_validate_parse: 4 callbacks suppressed [ 245.397559][ T8867] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.814'. [ 245.418021][ T8862] team0: Device macvtap1 is already an upper device of the team interface [ 245.461474][ T8867] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.814'. [ 245.467486][ T8868] netlink: 92 bytes leftover after parsing attributes in process `syz.0.813'. [ 245.486730][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.813'. [ 245.500952][ T8862] team_slave_1: left promiscuous mode [ 245.504216][ T8867] netlink: 'syz.4.814': attribute type 1 has an invalid length. [ 245.746683][ T8877] bond4: (slave geneve2): making interface the new active one [ 245.772070][ T8877] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 245.798696][ T4351] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 245.820204][ T4351] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 245.869546][ T4351] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 245.889565][ T4351] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 246.003813][ T8901] netlink: 'syz.1.822': attribute type 7 has an invalid length. [ 246.234311][ T8916] netlink: 'syz.1.826': attribute type 11 has an invalid length. [ 246.288626][ T8916] netlink: 224 bytes leftover after parsing attributes in process `syz.1.826'. [ 246.528097][ T8938] tipc: Enabled bearer , priority 0 [ 246.563011][ T8938] syzkaller0: entered promiscuous mode [ 246.581356][ T8938] syzkaller0: entered allmulticast mode [ 246.612171][ T8947] netlink: 191164 bytes leftover after parsing attributes in process `syz.2.834'. [ 246.655667][ T8947] netlink: 'syz.2.834': attribute type 2 has an invalid length. [ 246.677446][ T8947] netlink: 32 bytes leftover after parsing attributes in process `syz.2.834'. [ 246.679026][ T8957] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 246.803854][ T8957] tipc: Resetting bearer [ 246.869341][ T8965] bridge0: port 1(bridge_slave_0) entered learning state [ 246.902285][ T8965] tipc: Enabled bearer , priority 0 [ 247.005531][ T8973] netlink: 'syz.2.843': attribute type 21 has an invalid length. [ 247.029804][ T8965] syzkaller0: entered promiscuous mode [ 247.040702][ T8965] syzkaller0: entered allmulticast mode [ 247.047277][ T8965] tipc: Resetting bearer [ 247.057134][ T8973] netlink: 156 bytes leftover after parsing attributes in process `syz.2.843'. [ 247.089928][ T8963] tipc: Resetting bearer [ 247.090705][ T8975] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸Ú‡v°ýÙ[£DŒw˜z [ 248.400802][ T8963] tipc: Disabling bearer [ 248.416342][ T8936] tipc: Resetting bearer [ 248.428289][ T8936] tipc: Disabling bearer [ 248.532934][ T9000] syz.2.846 uses old SIOCAX25GETINFO [ 248.586983][ T9003] tipc: Enabled bearer , priority 0 [ 248.605455][ T9003] syzkaller0: entered promiscuous mode [ 248.622677][ T9003] syzkaller0: entered allmulticast mode [ 248.642963][ T9003] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 248.671618][ T9006] netlink: 596 bytes leftover after parsing attributes in process `syz.1.849'. [ 248.723622][ T9014] netlink: 'syz.0.852': attribute type 11 has an invalid length. [ 248.730571][ T9003] tipc: Resetting bearer [ 248.732273][ T9014] netlink: 'syz.0.852': attribute type 11 has an invalid length. [ 248.751438][ T9015] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 248.751799][ T9003] IPVS: stopping backup sync thread 9015 ... [ 248.765905][ T9014] netlink: 224 bytes leftover after parsing attributes in process `syz.0.852'. [ 248.796546][ T9016] syzkaller0: entered promiscuous mode [ 248.802293][ T9016] syzkaller0: entered allmulticast mode [ 248.811481][ T9012] tipc: Enabled bearer , priority 0 [ 248.849206][ T8999] tipc: Resetting bearer [ 248.871237][ T8999] tipc: Disabling bearer [ 248.924464][ T9011] tipc: Resetting bearer [ 248.957530][ T9011] tipc: Disabling bearer [ 249.111114][ T9039] netlink: 'syz.3.857': attribute type 1 has an invalid length. [ 249.362059][ T9056] raw_sendmsg: syz.0.863 forgot to set AF_INET. Fix it! [ 250.186212][ T9124] netlink: 'syz.3.874': attribute type 1 has an invalid length. [ 250.208747][ T9115] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 250.531510][ T9146] __nla_validate_parse: 5 callbacks suppressed [ 250.531529][ T9146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.881'. [ 250.776325][ T9155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.883'. [ 250.972217][ T9164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.351264][ T9192] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.894'. [ 251.352217][ T9193] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.894'. [ 251.489615][ T9198] netlink: 'syz.0.896': attribute type 3 has an invalid length. [ 251.751363][ T9227] netlink: 'syz.4.904': attribute type 16 has an invalid length. [ 251.776325][ T9227] netlink: 'syz.4.904': attribute type 17 has an invalid length. [ 251.866226][ T9227] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.960037][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.908'. [ 252.007753][ T9245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.908'. [ 252.025661][ T9245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.908'. [ 252.079951][ T9257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.911'. [ 252.212788][ T9245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.908'. [ 252.225482][ T9245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.908'. [ 252.280565][ T9257] macvlan0 (unregistering): left promiscuous mode [ 252.420662][ T9257] vlan0 (unregistering): left allmulticast mode [ 252.427318][ T9257] vlan0 (unregistering): left promiscuous mode [ 252.920440][ T9286] ipvlan2: entered promiscuous mode [ 253.148424][ T9309] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 253.173506][ T9309] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 253.761298][ T9360] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.779743][ T9367] netlink: 'syz.1.937': attribute type 16 has an invalid length. [ 253.797793][ T9367] netlink: 'syz.1.937': attribute type 17 has an invalid length. [ 253.886896][ T9372] netlink: 'syz.2.941': attribute type 30 has an invalid length. [ 253.901681][ T9367] erspan0: left allmulticast mode [ 253.931502][ T9367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.959717][ T9372] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 253.970199][ T9372] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 254.078885][ T9380] netlink: 'syz.3.943': attribute type 1 has an invalid length. [ 254.093451][ T9380] netlink: 'syz.3.943': attribute type 2 has an invalid length. [ 254.107614][ T9382] bond0: Caught tx_queue_len zero misconfig [ 254.143509][ T9386] netlink: 'syz.4.946': attribute type 10 has an invalid length. [ 254.155141][ T9386] team0: Device ipvlan1 failed to register rx_handler [ 254.333517][ T9400] netlink: ct family unspecified [ 254.364030][ T9400] openvswitch: netlink: Actions may not be safe on all matching packets [ 254.992143][ T9456] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 255.054324][ T9450] tipc: Enabled bearer , priority 0 [ 255.092931][ T9450] syzkaller0: entered promiscuous mode [ 255.098754][ T9450] syzkaller0: entered allmulticast mode [ 255.239868][ T9449] tipc: Resetting bearer [ 255.277901][ T9449] tipc: Disabling bearer [ 255.437222][ T9488] netlink: 'syz.1.975': attribute type 1 has an invalid length. [ 255.602913][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.654481][ T9512] delete_channel: no stack [ 255.865487][ T9518] __nla_validate_parse: 24 callbacks suppressed [ 255.865503][ T9518] netlink: 88 bytes leftover after parsing attributes in process `syz.1.984'. [ 255.929578][ T9533] syzkaller1: entered promiscuous mode [ 255.935381][ T9533] syzkaller1: entered allmulticast mode [ 256.067309][ T9544] tipc: Enabling of bearer rejected, failed to enable media [ 256.179176][ T9553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.189507][ T9547] netlink: 'syz.0.991': attribute type 11 has an invalid length. [ 256.268964][ T9544] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.276691][ T9544] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.408716][ T9544] veth0_to_team: left promiscuous mode [ 256.434271][ T9544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.452863][ T9544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.535363][ T9568] netlink: 'syz.2.994': attribute type 1 has an invalid length. [ 256.727885][ T9544] ipvlan2: left promiscuous mode [ 256.804519][ T37] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.824742][ T9561] netlink: 'syz.2.994': attribute type 35 has an invalid length. [ 256.832763][ T37] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 256.835882][ T9561] netlink: 20 bytes leftover after parsing attributes in process `syz.2.994'. [ 256.849620][ T9566] syzkaller1: entered promiscuous mode [ 256.860818][ T9578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.871769][ T9566] syzkaller1: entered allmulticast mode [ 256.896296][ T9580] netlink: 46 bytes leftover after parsing attributes in process `syz.3.996'. [ 256.939902][ T9582] nbd: socks must be embedded in a SOCK_ITEM attr [ 257.007596][ T9568] syzkaller0: entered promiscuous mode [ 257.019802][ T9568] syzkaller0: entered allmulticast mode [ 257.027585][ T37] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.044575][ T37] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 257.055952][ T37] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.065022][ T37] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 257.075331][ T9590] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1000'. [ 257.137227][ T9589] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1000'. [ 257.154163][ T9589] nbd: device at index 64 is going down [ 257.229435][ T37] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.248763][ T37] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 258.919973][ T9619] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1007'. [ 258.942848][ T9649] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1015'. [ 259.036608][ T9656] netlink: 'syz.1.1017': attribute type 4 has an invalid length. [ 259.270628][ T9667] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1020'. [ 259.484911][ T9679] netlink: 'syz.0.1025': attribute type 21 has an invalid length. [ 259.493604][ T9679] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1025'. [ 259.624277][ T9681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1025'. [ 259.764854][ T9691] netlink: 'syz.0.1028': attribute type 12 has an invalid length. [ 260.132099][ T9717] netem: change failed [ 260.611830][ T9748] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 260.633694][ T9746] netlink: 'syz.4.1048': attribute type 3 has an invalid length. [ 260.771710][ T9755] openvswitch: netlink: IP tunnel dst address not specified [ 260.813231][ T9757] tap0: tun_chr_ioctl cmd 2148553947 [ 260.889573][ T9760] netlink: 'syz.4.1053': attribute type 1 has an invalid length. [ 260.900466][ T9760] __nla_validate_parse: 2 callbacks suppressed [ 260.900480][ T9760] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1053'. [ 260.930276][ T9761] netlink: 'syz.2.1054': attribute type 1 has an invalid length. [ 260.957166][ T9761] IPv6: sit1: Disabled Multicast RS [ 260.983458][ T9761] sit1: entered allmulticast mode [ 261.005114][ T9764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1054'. [ 261.134845][ T9772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1058'. [ 261.161434][ T9773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1058'. [ 261.213537][ T9776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1059'. [ 261.380908][ T9780] tipc: Enabling of bearer rejected, failed to enable media [ 261.566220][ T9794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1064'. [ 261.722559][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 261.731452][ T9799] netlink: 'syz.2.1066': attribute type 5 has an invalid length. [ 261.754949][ T9799] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1066'. [ 261.876477][ T9811] syzkaller0: entered promiscuous mode [ 261.882123][ T9811] syzkaller0: entered allmulticast mode [ 261.898648][ T9813] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1071'. [ 262.150021][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1077'. [ 262.524676][ T9850] tipc: Enabled bearer , priority 0 [ 262.546849][ T9850] syzkaller0: entered promiscuous mode [ 262.561817][ T9850] syzkaller0: entered allmulticast mode [ 263.253495][ T9849] tipc: Resetting bearer [ 263.293643][ T9849] tipc: Disabling bearer [ 263.396238][ T9901] ip6gre1: entered allmulticast mode [ 263.416269][ T9901] netlink: 'syz.0.1096': attribute type 1 has an invalid length. [ 263.612948][ T9913] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.655438][ T9915] netlink: 'syz.0.1103': attribute type 7 has an invalid length. [ 263.673394][ T9915] netlink: 'syz.0.1103': attribute type 7 has an invalid length. [ 263.681956][ T9915] netlink: 'syz.0.1103': attribute type 7 has an invalid length. [ 263.900345][ T9935] netlink: 'syz.4.1109': attribute type 1 has an invalid length. [ 263.932975][ T9935] netlink: 'syz.4.1109': attribute type 1 has an invalid length. [ 264.422161][ T9981] netlink: 'syz.0.1122': attribute type 21 has an invalid length. [ 264.444004][ T9987] netlink: 'syz.0.1122': attribute type 21 has an invalid length. [ 264.458289][ T9981] netlink: 'syz.0.1122': attribute type 4 has an invalid length. [ 264.488462][ T9981] netlink: 'syz.0.1122': attribute type 5 has an invalid length. [ 265.125612][T10030] wg1 speed is unknown, defaulting to 1000 [ 265.768845][T10079] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 266.057707][T10100] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 266.065262][T10100] IPv6: NLM_F_CREATE should be set when creating new route [ 266.083642][T10101] __nla_validate_parse: 30 callbacks suppressed [ 266.083656][T10101] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1156'. [ 266.103653][T10101] ksmbd: Unknown IPC event: 3, ignore. [ 266.510778][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1161'. [ 266.623426][T10134] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 266.888676][T10146] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:20000 [ 267.248695][T10165] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1169'. [ 267.472995][T10178] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.1172'. [ 267.482421][T10179] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.1172'. [ 267.547105][T10181] ip6erspan0: entered promiscuous mode [ 267.552677][T10181] ip6erspan0: entered allmulticast mode [ 267.584669][T10183] geneve2: entered promiscuous mode [ 267.589891][T10183] geneve2: entered allmulticast mode [ 267.622055][ T30] audit: type=1107 audit(1758618721.275:5): pid=10184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òЍŠç›' [ 267.647017][T10185] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1175'. [ 267.732166][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1175'. [ 267.778009][T10194] : entered promiscuous mode [ 267.789887][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1175'. [ 267.893233][T10202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1181'. [ 268.001352][T10217] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 268.049725][T10217] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 268.129733][T10217] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 268.134378][T10221] xt_l2tp: unknown flags: 10 [ 268.158467][T10217] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 268.338173][T10242] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1189'. [ 268.666565][T10263] syzkaller0: entered promiscuous mode [ 268.672142][T10263] syzkaller0: entered allmulticast mode [ 268.894690][T10279] validate_nla: 12 callbacks suppressed [ 268.894708][T10279] netlink: 'syz.0.1204': attribute type 1 has an invalid length. [ 268.928425][T10281] netlink: 'syz.3.1206': attribute type 6 has an invalid length. [ 269.090175][T10295] netlink: 'syz.0.1209': attribute type 5 has an invalid length. [ 269.107695][T10295] : renamed from bridge_slave_0 (while UP) [ 269.290109][T10317] ieee802154 phy0 wpan0: encryption failed: -22 [ 269.531632][T10333] sctp: [Deprecated]: syz.4.1218 (pid 10333) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.531632][T10333] Use struct sctp_sack_info instead [ 269.586781][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880564cc000: rx timeout, send abort [ 269.596629][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880564cc000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 269.611039][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056457800: rx timeout, send abort [ 269.619477][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056457800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 270.197700][T10354] netlink: 'syz.3.1225': attribute type 1 has an invalid length. [ 270.290928][T10362] netlink: 'syz.4.1227': attribute type 6 has an invalid length. [ 270.380610][T10369] veth0: entered promiscuous mode [ 270.393283][T10368] IPv6: Can't replace route, no match found [ 270.526509][T10369] veth0: left promiscuous mode [ 270.751175][T10406] netlink: 'syz.0.1240': attribute type 1 has an invalid length. [ 271.286498][T10429] __nla_validate_parse: 16 callbacks suppressed [ 271.286514][T10429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1247'. [ 271.346274][T10431] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1248'. [ 271.528394][T10441] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1251'. [ 271.579295][T10445] unknown channel width for channel at 909000KHz? [ 271.699160][T10452] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1255'. [ 271.817954][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880566a1000: rx timeout, send abort [ 272.318060][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880566a1800: rx timeout, send abort [ 272.326524][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880566a1000: abort rx timeout. Force session deactivation [ 272.361414][T10476] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1259'. [ 272.375002][T10476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1259'. [ 272.513228][T10484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1261'. [ 272.551219][T10487] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1262'. [ 272.567387][T10487] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1262'. [ 272.826329][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880566a1800: abort rx timeout. Force session deactivation [ 272.960056][T10504] netlink: 'syz.2.1268': attribute type 7 has an invalid length. [ 273.302223][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1273'. [ 273.321338][T10516] netlink: 'syz.3.1271': attribute type 7 has an invalid length. [ 273.350207][T10516] : entered promiscuous mode [ 273.594504][T10538] netlink: 'syz.2.1278': attribute type 2 has an invalid length. [ 274.057573][T10566] netlink: 'syz.3.1288': attribute type 6 has an invalid length. [ 274.220255][T10574] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.691966][T10601] netlink: 'syz.4.1297': attribute type 1 has an invalid length. [ 274.722299][T10603] ip6tnl0: Caught tx_queue_len zero misconfig [ 274.741357][T10603] lo: Caught tx_queue_len zero misconfig [ 274.767411][T10603] xt_socket: unknown flags 0x50 [ 274.919011][T10612] gretap1: entered promiscuous mode [ 274.937145][T10612] gretap1: entered allmulticast mode [ 275.299532][T10636] bridge_slave_1: left allmulticast mode [ 275.315035][T10636] bridge_slave_1: left promiscuous mode [ 275.324055][T10636] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.353922][T10636] bridge_slave_0: left allmulticast mode [ 275.382496][T10636] bridge_slave_0: left promiscuous mode [ 275.401689][T10636] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.435587][ T6003] IPVS: starting estimator thread 0... [ 275.522936][T10646] IPVS: using max 29 ests per chain, 69600 per kthread [ 275.586860][T10651] bond0: entered promiscuous mode [ 275.592294][T10651] bond_slave_0: entered promiscuous mode [ 275.622617][T10651] bond_slave_1: entered promiscuous mode [ 275.628367][T10651] bond0: entered allmulticast mode [ 275.666027][T10651] bond_slave_0: entered allmulticast mode [ 275.671765][T10651] bond_slave_1: entered allmulticast mode [ 275.689518][T10651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.187046][T10680] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 276.188728][T10682] netlink: 'syz.2.1323': attribute type 1 has an invalid length. [ 276.226209][T10679] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 276.444913][T10699] tipc: Enabling of bearer rejected, media not registered [ 276.476944][T10699] __nla_validate_parse: 9 callbacks suppressed [ 276.476960][T10699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1327'. [ 276.672680][T10713] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1332'. [ 276.751080][T10714] ip6tnl2: entered promiscuous mode [ 276.768906][T10714] ip6tnl2: entered allmulticast mode [ 276.781994][T10717] gtp0: entered promiscuous mode [ 276.791072][T10717] gtp0: entered allmulticast mode [ 276.884962][T10725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1335'. [ 276.944463][T10729] netlink: 'syz.3.1337': attribute type 29 has an invalid length. [ 276.964700][T10729] netlink: 'syz.3.1337': attribute type 29 has an invalid length. [ 277.003767][T10730] netlink: 'syz.3.1337': attribute type 29 has an invalid length. [ 277.020464][T10729] netlink: 'syz.3.1337': attribute type 29 has an invalid length. [ 277.055990][T10735] bond4: entered allmulticast mode [ 277.073359][T10735] 8021q: adding VLAN 0 to HW filter on device bond4 [ 277.080729][T10735] bridge0: port 3(bond4) entered blocking state [ 277.087545][T10735] bridge0: port 3(bond4) entered disabled state [ 277.096537][T10735] bond4: entered promiscuous mode [ 277.102261][T10735] bridge0: port 3(bond4) entered blocking state [ 277.108734][T10735] bridge0: port 3(bond4) entered forwarding state [ 277.117145][T10730] netlink: 'syz.3.1337': attribute type 29 has an invalid length. [ 277.151810][ T78] bridge0: port 3(bond4) entered disabled state [ 277.172087][T10729] netlink: 'syz.3.1337': attribute type 29 has an invalid length. [ 277.281330][T10751] netlink: ct family unspecified [ 277.287714][T10751] openvswitch: netlink: Actions may not be safe on all matching packets [ 277.525536][T10769] sctp: [Deprecated]: syz.2.1348 (pid 10769) Use of struct sctp_assoc_value in delayed_ack socket option. [ 277.525536][T10769] Use struct sctp_sack_info instead [ 277.549914][T10769] netlink: 'syz.2.1348': attribute type 1 has an invalid length. [ 277.559808][T10769] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1348'. [ 277.574285][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1348'. [ 277.841542][T10787] tipc: Enabled bearer , priority 0 [ 277.864498][T10787] syzkaller0: entered promiscuous mode [ 277.870685][T10787] syzkaller0: entered allmulticast mode [ 277.895552][T10787] tipc: Resetting bearer [ 277.911741][T10788] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1353'. [ 277.926144][T10785] tipc: Resetting bearer [ 277.939929][T10785] tipc: Disabling bearer [ 277.949604][T10793] tipc: Enabled bearer , priority 0 [ 277.957198][T10793] syzkaller0: entered promiscuous mode [ 277.963813][T10793] syzkaller0: entered allmulticast mode [ 278.022982][T10788] wg1 speed is unknown, defaulting to 1000 [ 278.031055][T10793] tipc: Resetting bearer [ 278.065766][T10792] tipc: Resetting bearer [ 278.086616][T10792] tipc: Disabling bearer [ 278.104954][T10798] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1356'. [ 278.219003][T10803] sit0: entered promiscuous mode [ 278.241610][T10803] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1358'. [ 278.310352][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1360'. [ 278.524926][T10818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1363'. [ 278.726093][T10827] bond0: left promiscuous mode [ 278.748748][T10827] bond_slave_0: left promiscuous mode [ 278.760364][T10827] bond_slave_1: left promiscuous mode [ 278.769037][T10827] bond0: left allmulticast mode [ 278.778713][T10827] bond_slave_0: left allmulticast mode [ 278.785904][T10827] bond_slave_1: left allmulticast mode [ 278.808848][T10827] veth0_to_team: left allmulticast mode [ 278.867577][T10827] ip6erspan0: left promiscuous mode [ 278.873446][T10827] ip6erspan0: left allmulticast mode [ 278.901212][T10827] gretap1: left promiscuous mode [ 278.912600][T10827] gretap1: left allmulticast mode [ 279.576639][T10879] validate_nla: 4 callbacks suppressed [ 279.576656][T10879] netlink: 'syz.0.1381': attribute type 13 has an invalid length. [ 279.885765][T10904] unknown channel width for channel at 909000KHz? [ 279.917077][T10904] unknown channel width for channel at 909000KHz? [ 279.942444][T10904] unknown channel width for channel at 909000KHz? [ 280.412841][T10943] tipc: Enabled bearer , priority 0 [ 280.420199][T10943] syzkaller0: entered promiscuous mode [ 280.425729][T10943] syzkaller0: entered allmulticast mode [ 280.436248][T10943] tipc: Resetting bearer [ 280.457042][T10940] tipc: Resetting bearer [ 280.539101][T10940] tipc: Disabling bearer [ 281.369456][T11016] netlink: 'syz.4.1420': attribute type 33 has an invalid length. [ 282.115218][T11066] __nla_validate_parse: 12 callbacks suppressed [ 282.115236][T11066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1435'. [ 282.150643][T11057] team0 (unregistering): Port device team_slave_0 removed [ 282.168410][T11057] team0 (unregistering): Port device team_slave_1 removed [ 282.184127][T11069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1436'. [ 282.350138][T11076] openvswitch: netlink: Message has 4 unknown bytes. [ 282.381496][T11079] IPVS: ip_vs_edit_dest(): server weight less than zero [ 282.420370][T11080] netlink: 'syz.1.1440': attribute type 4 has an invalid length. [ 282.555470][T11088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1441'. [ 282.592831][T11088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1441'. [ 283.027761][T11103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1445'. [ 283.078482][T11103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1445'. [ 283.259251][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1449'. [ 283.269104][T11111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.357476][T11111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.394119][T11126] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1454'. [ 283.423539][T11123] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1452'. [ 283.435437][T11123] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1452'. [ 283.607354][T11140] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.887558][ T5978] IPVS: starting estimator thread 0... [ 283.942020][T11162] netlink: 'syz.3.1464': attribute type 2 has an invalid length. [ 283.986852][T11160] IPVS: using max 29 ests per chain, 69600 per kthread [ 284.489943][T11184] syz.0.1472 (11184) used obsolete PPPIOCDETACH ioctl [ 285.141691][T11215] netlink: 'syz.3.1481': attribute type 1 has an invalid length. [ 285.177207][T11215] netlink: 'syz.3.1481': attribute type 1 has an invalid length. [ 285.203185][T11215] netlink: 'syz.3.1481': attribute type 27 has an invalid length. [ 285.318246][T11227] netlink: 'syz.0.1486': attribute type 10 has an invalid length. [ 285.376340][T11227] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 285.417941][T11242] openvswitch: netlink: Key type 191 is out of range max 32 [ 285.498269][T11244] netlink: 'syz.1.1490': attribute type 1 has an invalid length. [ 285.520005][T11247] sch_fq: defrate 0 ignored. [ 285.533809][T11248] sch_fq: defrate 0 ignored. [ 285.797074][T11267] sctp: [Deprecated]: syz.2.1498 (pid 11267) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.797074][T11267] Use struct sctp_sack_info instead [ 285.848095][T11267] sctp: [Deprecated]: syz.2.1498 (pid 11267) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.848095][T11267] Use struct sctp_sack_info instead [ 285.927342][T11273] sctp: [Deprecated]: syz.2.1498 (pid 11273) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.927342][T11273] Use struct sctp_sack_info instead [ 286.063145][T11284] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.200335][T11293] pimreg3: entered allmulticast mode [ 286.226476][T11295] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 286.557414][T11323] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode broadcast(3) [ 287.130693][T11368] netlink: 'syz.4.1521': attribute type 2 has an invalid length. [ 287.133754][T11358] __nla_validate_parse: 13 callbacks suppressed [ 287.133768][T11358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1522'. [ 287.138536][T11368] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1521'. [ 287.486887][T11383] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1526'. [ 287.646311][T11392] netlink: 'syz.1.1527': attribute type 21 has an invalid length. [ 287.672781][T11392] netlink: 'syz.1.1527': attribute type 22 has an invalid length. [ 287.692431][T11392] netlink: 'syz.1.1527': attribute type 23 has an invalid length. [ 287.713195][T11392] netlink: 'syz.1.1527': attribute type 25 has an invalid length. [ 287.721014][T11392] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1527'. [ 287.768025][T11397] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1528'. [ 287.969082][T11428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1530'. [ 288.407294][T11449] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1536'. [ 288.742653][T11476] syzkaller0: entered promiscuous mode [ 288.748144][T11476] syzkaller0: entered allmulticast mode [ 288.772109][T11476] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1540'. [ 288.777868][T11475] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1543'. [ 289.014951][T11455] infiniband syz0: set active [ 289.021322][T11455] infiniband syz0: added bond_slave_0 [ 289.035352][T11455] syz0: rxe_create_cq: returned err = -12 [ 289.047645][T11455] infiniband syz0: Couldn't create ib_mad CQ [ 289.055822][T11455] infiniband syz0: Couldn't open port 1 [ 289.105308][T11455] RDS/IB: syz0: added [ 289.111968][T11455] smc: adding ib device syz0 with port count 1 [ 289.132105][T11455] smc: ib device syz0 port 1 has pnetid [ 289.170262][T11495] tipc: Enabling of bearer rejected, failed to enable media [ 289.191237][T11495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1549'. [ 290.212029][T11540] validate_nla: 3 callbacks suppressed [ 290.212046][T11540] netlink: 'syz.3.1562': attribute type 1 has an invalid length. [ 290.242504][T11540] netlink: 'syz.3.1562': attribute type 2 has an invalid length. [ 290.533414][T11568] netlink: 'syz.3.1569': attribute type 1 has an invalid length. [ 290.569195][T11568] netlink: 'syz.3.1569': attribute type 2 has an invalid length. [ 290.589588][T11570] netlink: 'syz.1.1572': attribute type 10 has an invalid length. [ 290.608153][T11570] veth0_vlan: entered allmulticast mode [ 290.625473][T11570] veth0_vlan: left promiscuous mode [ 290.635996][T11570] veth0_vlan: entered promiscuous mode [ 290.654713][T11570] team0: Device veth0_vlan failed to register rx_handler [ 290.775709][T11570] netlink: 'syz.1.1572': attribute type 12 has an invalid length. [ 290.804155][T11570] netlink: 'syz.1.1572': attribute type 5 has an invalid length. [ 291.109164][T11601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.271662][T11611] netlink: 'syz.4.1582': attribute type 8 has an invalid length. [ 291.288285][T11611] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 291.446518][T11614] netlink: 'syz.3.1584': attribute type 1 has an invalid length. [ 291.578605][T11627] openvswitch: netlink: Multiple metadata blocks provided [ 291.639290][T11627] veth1_vlan: left promiscuous mode [ 291.657341][T11627] netlink: 'syz.1.1587': attribute type 2 has an invalid length. [ 291.821399][T11646] sctp: [Deprecated]: syz.1.1595 (pid 11646) Use of struct sctp_assoc_value in delayed_ack socket option. [ 291.821399][T11646] Use struct sctp_sack_info instead [ 292.194208][T11668] __nla_validate_parse: 8 callbacks suppressed [ 292.194225][T11668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1596'. [ 292.325624][T11675] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1599'. [ 292.351279][T11657] openvswitch: netlink: Key type 16144 is out of range max 32 [ 292.943171][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1606'. [ 292.976035][T11712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1607'. [ 293.138342][T11716] 8021q: adding VLAN 0 to HW filter on device bond3 [ 293.277448][T11716] 8021q: adding VLAN 0 to HW filter on device bond3 [ 293.287500][T11724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1611'. [ 293.302687][T11716] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 293.321468][T11716] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 293.331927][T11739] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1614'. [ 293.346849][T11747] ieee802154 phy0 wpan0: encryption failed: -22 [ 293.373227][T11730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1611'. [ 293.411585][T11745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1613'. [ 293.573823][T11756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1618'. [ 293.583173][T11756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1618'. [ 294.422250][T11809] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.431686][T11809] bond0: (slave team0): Enslaving as an active interface with an up link [ 294.800027][T11818] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 294.813648][T11819] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 295.516407][T11864] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 295.542146][T11864] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 295.574268][T11864] gretap2: entered promiscuous mode [ 295.592214][T11864] gretap2: entered allmulticast mode [ 297.026746][T11965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.134764][T11977] ip6tnl0: Caught tx_queue_len zero misconfig [ 297.387173][T11993] __nla_validate_parse: 31 callbacks suppressed [ 297.387190][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1690'. [ 297.445277][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1690'. [ 297.492932][T11998] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1691'. [ 297.529802][T11999] veth0_to_hsr: entered promiscuous mode [ 297.890954][T12031] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1701'. [ 297.921087][T12031] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1701'. [ 297.932933][T12031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1701'. [ 298.008631][T12031] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1701'. [ 298.019006][T12031] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1701'. [ 298.028170][T12031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1701'. [ 298.115099][T12034] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1703'. [ 298.241641][T12055] validate_nla: 8 callbacks suppressed [ 298.241658][T12055] netlink: 'syz.1.1707': attribute type 83 has an invalid length. [ 298.786793][T12091] netlink: 'syz.2.1720': attribute type 2 has an invalid length. [ 299.110697][T12116] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 299.654716][T12147] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 299.819710][T12168] sit0: Caught tx_queue_len zero misconfig [ 299.900845][T12166] syzkaller0: entered promiscuous mode [ 299.906703][T12166] syzkaller0: entered allmulticast mode [ 301.448394][T12199] geneve3: entered promiscuous mode [ 301.465267][T12199] geneve3: entered allmulticast mode [ 301.488186][T11431] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 301.559304][T11431] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 301.579321][T11431] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 301.602098][T11431] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 301.847234][T12234] bridge0: entered promiscuous mode [ 301.892957][T12234] bridge0: entered allmulticast mode [ 302.006755][T12247] openvswitch: netlink: Flow key attr not present in new flow. [ 302.477537][T12280] __nla_validate_parse: 14 callbacks suppressed [ 302.477554][T12280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1774'. [ 302.607373][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1776'. [ 302.629850][T12285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1776'. [ 302.750166][T12291] syzkaller1: entered promiscuous mode [ 302.756110][T12291] syzkaller1: entered allmulticast mode [ 303.200332][T12312] xt_l2tp: unknown flags: 10 [ 303.260380][T12312] nbd: device at index 3 is going down [ 303.263069][T12313] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 303.292457][T12313] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 303.315777][T12318] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1787'. [ 303.335536][T12318] tipc: Invalid UDP bearer configuration [ 303.335590][T12318] tipc: Enabling of bearer rejected, failed to enable media [ 303.407641][T12323] 8021q: VLANs not supported on ip6_vti0 [ 303.430779][T12315] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1787'. [ 303.508814][T11427] nci: nci_rsp_packet: unknown rsp opcode 0x221 [ 303.707739][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1793'. [ 303.725628][T12345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1793'. [ 303.796102][T12354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1795'. [ 303.870845][T12361] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1798'. [ 303.994670][T12367] netlink: 'syz.4.1800': attribute type 13 has an invalid length. [ 304.002903][T12367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1800'. [ 304.018191][T12367] netlink: 'syz.4.1800': attribute type 13 has an invalid length. [ 304.018952][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.037502][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.047409][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.067070][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.372232][T12383] netlink: 'syz.3.1806': attribute type 1 has an invalid length. [ 304.447898][T12383] 8021q: adding VLAN 0 to HW filter on device bond3 [ 304.654394][T12404] netlink: 'syz.2.1812': attribute type 10 has an invalid length. [ 304.885249][T12412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.990405][T12421] netlink: 'syz.0.1817': attribute type 1 has an invalid length. [ 305.269658][T12427] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 305.726752][T12455] tipc: Enabled bearer , priority 0 [ 305.740580][T12453] tipc: Disabling bearer [ 305.901838][T12466] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20001 [ 305.991518][T11427] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.995645][T12473] netlink: 'syz.0.1832': attribute type 13 has an invalid length. [ 306.022785][T12473] netlink: 'syz.0.1832': attribute type 58 has an invalid length. [ 306.035810][T11427] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 306.052892][T11427] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.082101][T11427] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 306.098526][T11427] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.117993][T11427] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 306.130313][T11427] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.146805][T11427] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 306.784537][T12516] syzkaller0: refused to change device tx_queue_len [ 307.103236][T12539] tipc: Enabled bearer , priority 0 [ 307.227822][T12539] syzkaller0: entered promiscuous mode [ 307.234297][T12539] syzkaller0: entered allmulticast mode [ 307.250657][T12539] tipc: Resetting bearer [ 307.277310][T12550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.293836][T12538] tipc: Resetting bearer [ 308.525835][T12538] tipc: Disabling bearer [ 308.810315][T12574] __nla_validate_parse: 21 callbacks suppressed [ 308.810333][T12574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1861'. [ 308.828619][T12574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1861'. [ 310.027161][T12593] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1865'. [ 310.078654][T12597] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1866'. [ 310.097076][T12599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1868'. [ 310.128342][T12599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1868'. [ 310.131457][T12601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1867'. [ 310.180321][T12601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1867'. [ 310.217378][T12605] batadv1: entered allmulticast mode [ 310.274371][T12612] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1872'. [ 310.294993][T12608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1871'. [ 310.304068][T12608] netlink: 'syz.4.1871': attribute type 7 has an invalid length. [ 310.311791][T12608] netlink: 'syz.4.1871': attribute type 8 has an invalid length. [ 310.656711][T12640] bridge0: left promiscuous mode [ 310.667727][T12640] bridge0: left allmulticast mode [ 310.803792][T12656] netlink: 'syz.1.1885': attribute type 10 has an invalid length. [ 310.826499][T12657] netlink: 'syz.1.1885': attribute type 10 has an invalid length. [ 311.713264][T12698] veth7: entered promiscuous mode [ 311.718388][T12698] veth7: entered allmulticast mode [ 311.761291][T12698] rdma_rxe: rxe_newlink: failed to add lo [ 311.829136][T12704] netlink: 'syz.3.1901': attribute type 3 has an invalid length. [ 311.969516][T12708] netlink: 'syz.0.1902': attribute type 1 has an invalid length. [ 312.078604][T12708] 8021q: adding VLAN 0 to HW filter on device bond5 [ 312.080018][T12725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.204428][T12725] veth5: entered promiscuous mode [ 312.213888][T12712] wg1 speed is unknown, defaulting to 1000 [ 312.568085][T12754] tipc: Enabled bearer , priority 0 [ 312.586998][T12754] syzkaller0: entered promiscuous mode [ 312.595444][T12754] syzkaller0: entered allmulticast mode [ 312.629697][T12754] tipc: Resetting bearer [ 312.655934][T12753] tipc: Resetting bearer [ 312.686025][T12753] tipc: Disabling bearer [ 312.930033][T12777] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 313.415701][T12802] netlink: 'syz.3.1928': attribute type 5 has an invalid length. [ 313.701316][T12829] dummy0: Caught tx_queue_len zero misconfig [ 313.915512][T12840] __nla_validate_parse: 8 callbacks suppressed [ 313.915530][T12840] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1940'. [ 313.955817][T12840] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1940'. [ 314.145550][T12859] netlink: 'syz.0.1948': attribute type 1 has an invalid length. [ 314.199844][T12859] bond6: entered promiscuous mode [ 314.205631][T12859] 8021q: adding VLAN 0 to HW filter on device bond6 [ 314.221514][T12857] team0: Device ip6gre1 is of different type [ 314.605197][T12902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1962'. [ 314.772271][T12910] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1963'. [ 314.931983][T12927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1968'. [ 315.106071][T12942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1966'. [ 315.247950][T12951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1971'. [ 315.295843][T12951] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 315.304662][T12952] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1966'. [ 315.337358][T12951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.610815][T12965] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 315.841803][T12978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1978'. [ 315.891350][T12977] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 315.908567][T12984] tipc: Failed to remove unknown binding: 66,1,1/1375347401:941251556/941251558 [ 316.137992][T13004] openvswitch: netlink: Message has 4 unknown bytes. [ 316.162129][T13004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.180475][T13008] openvswitch: netlink: Message has 4 unknown bytes. [ 316.250600][T13008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.420119][T13026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1991'. [ 316.577524][T13035] netlink: 'syz.2.1994': attribute type 3 has an invalid length. [ 317.043449][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 317.052842][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.412478][T13146] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.453670][T13147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.721260][T13160] netlink: 'syz.0.2034': attribute type 19 has an invalid length. [ 318.986076][T13170] bridge2: entered promiscuous mode [ 318.991310][T13170] bridge2: entered allmulticast mode [ 319.156504][T13185] tipc: Enabled bearer , priority 0 [ 319.195997][T13185] tipc: Disabling bearer [ 319.278976][T13194] __nla_validate_parse: 37 callbacks suppressed [ 319.278993][T13194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2045'. [ 319.296530][T13194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2045'. [ 319.326157][T13200] netlink: 'syz.0.2044': attribute type 1 has an invalid length. [ 319.334358][T13200] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2044'. [ 319.365836][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2047'. [ 319.469290][T13208] netlink: 'syz.2.2050': attribute type 11 has an invalid length. [ 319.567827][T13219] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2052'. [ 319.902776][T13238] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.2055'. [ 319.990068][T13243] wg1 speed is unknown, defaulting to 1000 [ 320.501632][T13275] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2066'. [ 320.512407][T13275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2066'. [ 320.571391][T13274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2066'. [ 320.703579][T13290] Bluetooth: MGMT ver 1.23 [ 321.044562][T13315] netlink: 'syz.1.2076': attribute type 1 has an invalid length. [ 321.190871][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2076'. [ 321.214291][T13320] bond7: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 321.226864][T13320] bond7: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 321.238808][T13320] bond7: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 321.259193][T13326] openvswitch: netlink: IPv6 tunnel dst address is zero [ 321.447866][T13334] macsec1: entered promiscuous mode [ 321.472419][T13334] macsec1: entered allmulticast mode [ 321.939991][T13362] tipc: MTU too low for tipc bearer [ 322.266654][T13391] tipc: Enabled bearer , priority 0 [ 322.274572][T13391] syzkaller0: entered promiscuous mode [ 322.280046][T13391] syzkaller0: entered allmulticast mode [ 322.289285][T13394] netlink: 'syz.0.2102': attribute type 1 has an invalid length. [ 322.300202][T13394] netlink: 'syz.0.2102': attribute type 3 has an invalid length. [ 322.340347][T13391] tipc: Resetting bearer [ 322.349394][T13386] tipc: Resetting bearer [ 322.368551][T13386] tipc: Disabling bearer [ 323.231694][T13456] vlan2: entered promiscuous mode [ 323.254404][T13456] erspan0: entered promiscuous mode [ 323.801142][T13492] netlink: 'syz.0.2131': attribute type 12 has an invalid length. [ 324.055981][T13510] bond0: Caught tx_queue_len zero misconfig [ 324.209008][T13514] tap0: tun_chr_ioctl cmd 1074025677 [ 324.215935][T13514] tap0: linktype set to 65534 [ 324.221233][T13518] syzkaller1: entered promiscuous mode [ 324.227419][T13518] syzkaller1: entered allmulticast mode [ 324.331815][T13525] netlink: 'syz.0.2140': attribute type 1 has an invalid length. [ 324.340231][T13525] __nla_validate_parse: 15 callbacks suppressed [ 324.340244][T13525] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2140'. [ 324.410010][T13530] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2141'. [ 324.441177][T13530] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2141'. [ 324.486972][T13530] gretap2: entered promiscuous mode [ 324.511182][T13530] gretap2: entered allmulticast mode [ 324.565499][T13540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2144'. [ 324.584399][T13542] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2142'. [ 324.614000][T13542] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2142'. [ 324.703510][T13542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2142'. [ 324.846438][T13555] wg1 speed is unknown, defaulting to 1000 [ 325.233660][T13571] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2150'. [ 325.279285][T13571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2150'. [ 327.660861][T13579] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2153'. [ 328.020351][T13598] bond0: Error: Cannot enslave bond to itself. [ 328.490774][T13626] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20000 [ 328.700054][T13643] netlink: 'syz.1.2172': attribute type 2 has an invalid length. [ 328.769684][T13648] openvswitch: netlink: IP tunnel dst address not specified [ 328.809477][T13651] sctp: [Deprecated]: syz.3.2174 (pid 13651) Use of int in maxseg socket option. [ 328.809477][T13651] Use struct sctp_assoc_value instead [ 328.948301][T13662] netlink: 'syz.0.2178': attribute type 1 has an invalid length. [ 328.959106][T13663] netlink: 'syz.0.2178': attribute type 1 has an invalid length. [ 328.959822][T13662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.966950][T13663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.714290][T13687] IPVS: set_ctl: invalid protocol: 2 172.30.0.3:20004 [ 329.744360][T13697] __nla_validate_parse: 11 callbacks suppressed [ 329.744376][T13697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2188'. [ 329.782277][T13697] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2188'. [ 330.188536][T13728] vlan2: entered promiscuous mode [ 330.222057][T13728] vlan2: entered allmulticast mode [ 330.249021][T13728] hsr_slave_1: entered allmulticast mode [ 330.363025][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2195'. [ 330.551180][T13750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2198'. [ 330.589332][T13755] sctp: [Deprecated]: syz.0.2197 (pid 13755) Use of int in maxseg socket option. [ 330.589332][T13755] Use struct sctp_assoc_value instead [ 330.835623][T13764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2201'. [ 330.878727][T13766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2202'. [ 330.906190][T13766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.926403][T13766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.948329][T13766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.968031][T13766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.289515][T13787] C: renamed from team_slave_0 [ 331.313332][T13787] netlink: 'syz.2.2206': attribute type 1 has an invalid length. [ 331.341090][T13787] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 332.202090][T13841] macvtap1: entered allmulticast mode [ 332.230219][T13841] veth0_macvtap: entered allmulticast mode [ 332.276766][T13846] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2220'. [ 332.568403][T13868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2225'. [ 332.621644][T13870] sctp: [Deprecated]: syz.4.2225 (pid 13870) Use of struct sctp_assoc_value in delayed_ack socket option. [ 332.621644][T13870] Use struct sctp_sack_info instead [ 332.698343][T13870] xt_limit: Overflow, try lower: 271964/0 [ 332.710095][T13871] xt_limit: Overflow, try lower: 271964/0 [ 332.745743][T13878] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2226'. [ 332.797036][T13878] netlink: 'syz.3.2226': attribute type 11 has an invalid length. [ 332.847762][T13878] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2226'. [ 332.984272][T13891] netlink: 'syz.4.2229': attribute type 15 has an invalid length. [ 333.008518][T13891] netlink: 'syz.4.2229': attribute type 15 has an invalid length. [ 333.480291][T13923] netlink: 'syz.4.2237': attribute type 11 has an invalid length. [ 333.551550][T13918] netem: incorrect ge model size [ 333.578196][T13918] netem: change failed [ 333.759540][T13941] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.851198][T13950] NCSI netlink: No device for ifindex 0 [ 333.909452][T13954] netlink: 'syz.3.2247': attribute type 2 has an invalid length. [ 333.927766][T13954] netlink: 'syz.3.2247': attribute type 1 has an invalid length. [ 334.128601][T13968] openvswitch: netlink: Missing valid actions attribute. [ 334.142893][T13968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.619612][T14007] openvswitch: netlink: Flow key attr not present in new flow. [ 334.628754][T14008] openvswitch: netlink: Flow key attr not present in new flow. [ 334.647542][T14009] netlink: 'syz.2.2262': attribute type 1 has an invalid length. [ 334.757678][T14012] __nla_validate_parse: 13 callbacks suppressed [ 334.757694][T14012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2264'. [ 335.168008][T14033] syzkaller0: entered promiscuous mode [ 335.188279][T14033] syzkaller0: entered allmulticast mode [ 335.253585][T14026] netlink: 'syz.4.2269': attribute type 13 has an invalid length. [ 335.264804][T14026] netlink: 'syz.4.2269': attribute type 17 has an invalid length. [ 335.284067][T14045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2275'. [ 335.293183][T14045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2275'. [ 335.307877][T14045] Bluetooth: MGMT ver 1.23 [ 335.315032][T14045] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:20002 [ 335.401668][T14050] netlink: 'syz.3.2277': attribute type 2 has an invalid length. [ 335.409819][T14050] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2277'. [ 335.588312][T14053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2278'. [ 335.716369][T14057] can: request_module (can-proto-0) failed. [ 335.733290][T14060] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 335.746718][T14060] netlink: 'syz.1.2279': attribute type 1 has an invalid length. [ 336.275472][T14067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2281'. [ 336.762578][T14026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.770947][T14026] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.785295][T14026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 336.867538][T14060] 8021q: adding VLAN 0 to HW filter on device bond9 [ 336.908364][T14061] vlan4: entered promiscuous mode [ 336.918178][T14061] bond9: entered promiscuous mode [ 336.927511][T14072] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2283'. [ 336.937417][T14061] vlan4: entered allmulticast mode [ 336.945304][T14061] bond9: entered allmulticast mode [ 337.148928][T14080] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2286'. [ 337.186344][T14088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2289'. [ 337.615943][T14101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2293'. [ 337.784818][T14105] netlink: 'syz.2.2295': attribute type 5 has an invalid length. [ 337.811499][T14109] C: renamed from team_slave_0 (while UP) [ 337.838529][T14109] netlink: 'syz.3.2296': attribute type 1 has an invalid length. [ 337.847065][T14109] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 337.893312][T14105] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 337.928885][T14105] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 337.941427][T14105] gretap1: entered promiscuous mode [ 337.949714][T14105] gretap1: entered allmulticast mode [ 338.228834][T14145] sctp: [Deprecated]: syz.4.2306 (pid 14145) Use of int in maxseg socket option. [ 338.228834][T14145] Use struct sctp_assoc_value instead [ 338.399769][T14153] netlink: 'syz.1.2309': attribute type 25 has an invalid length. [ 338.575879][T14165] tipc: Enabled bearer , priority 0 [ 338.586833][T14165] syzkaller0: entered promiscuous mode [ 338.592443][T14165] syzkaller0: entered allmulticast mode [ 338.643676][T14167] team0: Port device geneve4 added [ 338.650896][T14165] tipc: Resetting bearer [ 338.664724][T11735] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 338.689151][T14164] tipc: Resetting bearer [ 338.734130][T14164] tipc: Disabling bearer [ 338.777930][T11735] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 338.812111][T11735] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 338.842481][T11735] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 338.939334][T14181] validate_nla: 2 callbacks suppressed [ 338.939349][T14181] netlink: 'syz.4.2321': attribute type 1 has an invalid length. [ 338.991534][T14181] 8021q: adding VLAN 0 to HW filter on device bond6 [ 339.020072][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033022800: rx timeout, send abort [ 339.028659][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888033022800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 339.058056][T14188] bond6: (slave gretap2): making interface the new active one [ 339.067590][T14188] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 339.137937][T14192] netlink: 'syz.3.2323': attribute type 1 has an invalid length. [ 339.634509][T14237] nbd: illegal input index -8454144 [ 339.739106][T14242] netlink: 'syz.4.2339': attribute type 6 has an invalid length. [ 339.881378][T14256] __nla_validate_parse: 10 callbacks suppressed [ 339.881395][T14256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2342'. [ 339.886330][T14251] veth1: Caught tx_queue_len zero misconfig [ 339.888941][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2342'. [ 339.913484][T14256] netlink: 'syz.4.2342': attribute type 12 has an invalid length. [ 339.921360][T14256] netlink: 'syz.4.2342': attribute type 5 has an invalid length. [ 340.009629][T14261] netlink: 'syz.2.2344': attribute type 1 has an invalid length. [ 340.033431][T14262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2344'. [ 340.067957][T14261] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 340.251052][T14283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2350'. [ 340.336416][T14285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2349'. [ 340.480793][T14303] openvswitch: netlink: Flow key attr not present in new flow. [ 340.491527][T14294] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2354'. [ 340.507706][T14294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2354'. [ 340.516666][T14294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2354'. [ 340.547559][T14306] netlink: 'syz.4.2356': attribute type 1 has an invalid length. [ 340.687307][T14308] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2357'. [ 340.693677][T14314] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 340.739416][T14314] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2358'. [ 340.876093][T14324] netlink: 'syz.4.2362': attribute type 11 has an invalid length. [ 340.967068][T14328] IPVS: ip_vs_edit_dest(): server weight less than zero [ 340.974174][ T10] IPVS: starting estimator thread 0... [ 341.075427][T14334] IPVS: using max 36 ests per chain, 86400 per kthread [ 341.502044][T14359] netlink: 'syz.4.2374': attribute type 1 has an invalid length. [ 341.757155][T14366] bond3: (slave veth0_to_bond): Releasing active interface [ 341.939665][T14382] netlink: 'syz.0.2378': attribute type 20 has an invalid length. [ 342.025005][T14389] netlink: 'syz.2.2382': attribute type 1 has an invalid length. [ 342.349930][T14409] sit0: entered promiscuous mode [ 342.910940][T14442] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 342.927514][T14442] openvswitch: netlink: Message has 6332 unknown bytes. [ 343.077167][T14452] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 343.951090][T14501] sit0: left promiscuous mode [ 344.230135][T14501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.490994][T14501] vlan2: left promiscuous mode [ 344.500034][T14501] bridge0: left promiscuous mode [ 344.506188][T14501] bond1: left promiscuous mode [ 344.528758][T14501] vlan3: left promiscuous mode [ 344.539534][T14501] bond2: left promiscuous mode [ 344.544471][T14501] gretap1: left promiscuous mode [ 344.606123][T14501] gretap2: left promiscuous mode [ 344.629496][T14501] vlan4: left promiscuous mode [ 344.637216][T14501] bond9: left promiscuous mode [ 344.666786][T11422] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.703283][T11422] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.732099][T11422] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.763092][T11422] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.765942][T14523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.771972][T11422] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.836225][T11422] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.847724][T11422] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.857429][T11422] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.960688][T14537] lo: Caught tx_queue_len zero misconfig [ 345.069729][T14541] wg1 speed is unknown, defaulting to 1000 [ 345.151860][T14555] IPVS: Unknown mcast interface: vcan0 [ 345.217628][T14557] __nla_validate_parse: 18 callbacks suppressed [ 345.217645][T14557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2439'. [ 345.642779][T14581] validate_nla: 4 callbacks suppressed [ 345.642797][T14581] netlink: 'syz.4.2444': attribute type 21 has an invalid length. [ 346.013411][T14597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2450'. [ 346.013984][T14595] netlink: 'syz.2.2449': attribute type 1 has an invalid length. [ 346.089059][T14604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2451'. [ 346.101320][T14597] netlink: 'syz.3.2450': attribute type 8 has an invalid length. [ 346.110196][T14600] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2447'. [ 346.190598][T14603] 8021q: adding VLAN 0 to HW filter on device bond6 [ 346.205798][T14603] bond5: (slave bond6): making interface the new active one [ 346.218821][T14603] bond5: (slave bond6): Enslaving as an active interface with an up link [ 346.244445][T14604] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 346.281115][T14610] bond5: (slave gretap2): Enslaving as a backup interface with an up link [ 346.308634][T14614] tipc: New replicast peer: 255.255.255.255 [ 346.323625][T14614] tipc: Enabled bearer , priority 10 [ 346.490274][T14629] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2457'. [ 346.867088][T14644] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2464'. [ 346.896973][T14644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.903573][T14648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2465'. [ 346.917517][T14644] syzkaller1: entered promiscuous mode [ 346.933536][T14648] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2465'. [ 346.936895][T14644] syzkaller1: entered allmulticast mode [ 347.066549][T14658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2466'. [ 347.085641][T14658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2466'. [ 347.166905][T14660] sctp: [Deprecated]: syz.3.2469 (pid 14660) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.166905][T14660] Use struct sctp_sack_info instead [ 347.204608][T14665] tipc: Enabling of bearer rejected, already enabled [ 347.305569][T14667] syzkaller0: entered promiscuous mode [ 347.311365][T14667] syzkaller0: entered allmulticast mode [ 347.311820][T14670] netlink: 'syz.2.2472': attribute type 11 has an invalid length. [ 347.320685][T14667] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 347.337445][T14667] openvswitch: netlink: Message has 6332 unknown bytes. [ 347.347174][T14670] netlink: 'syz.2.2472': attribute type 11 has an invalid length. [ 347.459152][T14677] sctp: [Deprecated]: syz.3.2475 (pid 14677) Use of int in max_burst socket option deprecated. [ 347.459152][T14677] Use struct sctp_assoc_value instead [ 347.526524][T14682] netlink: 'syz.4.2478': attribute type 10 has an invalid length. [ 347.538896][T14682] bond0: mtu less than device minimum [ 347.727971][T14694] netlink: 'syz.2.2481': attribute type 12 has an invalid length. [ 349.198343][T14772] netlink: 'syz.2.2505': attribute type 1 has an invalid length. [ 349.333681][T14777] 8021q: adding VLAN 0 to HW filter on device bond8 [ 349.342091][T14777] bond7: (slave bond8): making interface the new active one [ 349.349984][T14777] bond7: (slave bond8): Enslaving as an active interface with an up link [ 350.247533][T14862] __nla_validate_parse: 21 callbacks suppressed [ 350.247551][T14862] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2526'. [ 350.457926][T14873] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2529'. [ 350.662804][T14882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2534'. [ 350.671682][T14882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2534'. [ 350.697159][T14882] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2534'. [ 350.734174][T14882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2534'. [ 350.948580][T14904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2539'. [ 350.989924][T14911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2539'. [ 351.166322][T14921] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 351.199264][T14927] netlink: 'syz.3.2546': attribute type 23 has an invalid length. [ 351.281707][T14934] tipc: Enabled bearer , priority 0 [ 351.302106][T14934] syzkaller0: entered promiscuous mode [ 351.319012][T14934] syzkaller0: entered allmulticast mode [ 351.379353][T14934] tipc: Resetting bearer [ 351.395153][T14940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2551'. [ 351.411276][T14940] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2551'. [ 351.426645][T14932] tipc: Resetting bearer [ 351.460777][T14932] tipc: Disabling bearer [ 351.705256][T14968] team0: Device ip6gre2 is of different type [ 351.788912][T14954] netlink: 'syz.0.2554': attribute type 10 has an invalid length. [ 351.813482][T14973] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 351.861899][T14954] bond0: (slave team0): Releasing backup interface [ 351.898617][T14954] bridge0: port 3(team0) entered blocking state [ 351.922727][T14954] bridge0: port 3(team0) entered disabled state [ 351.933872][T14954] team0: entered allmulticast mode [ 351.943503][T14954] team_slave_1: entered allmulticast mode [ 351.978554][T14985] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 351.996325][T14954] team0: entered promiscuous mode [ 352.005410][T14954] team_slave_0: entered promiscuous mode [ 352.011379][T14954] team_slave_1: entered promiscuous mode [ 352.177891][T14994] netlink: 'syz.3.2565': attribute type 21 has an invalid length. [ 352.209750][T14994] netlink: 'syz.3.2565': attribute type 1 has an invalid length. [ 352.648386][T15011] netlink: 'syz.0.2571': attribute type 33 has an invalid length. [ 352.730496][T15016] vlan5: entered allmulticast mode [ 352.756218][T15016] macvlan1: entered allmulticast mode [ 352.761761][T15016] veth1_vlan: entered allmulticast mode [ 352.973478][T15028] netlink: 'syz.3.2573': attribute type 10 has an invalid length. [ 353.334426][T15053] mac80211_hwsim hwsim5 : renamed from wlan1 [ 354.324007][T15104] netlink: 'syz.1.2594': attribute type 4 has an invalid length. [ 354.834827][T15159] netlink: 'syz.4.2610': attribute type 1 has an invalid length. [ 354.863629][T15155] netlink: 'syz.1.2611': attribute type 1 has an invalid length. [ 354.914369][T15155] bond11: (slave gretap3): making interface the new active one [ 354.922974][T15155] bond11: (slave gretap3): Enslaving as an active interface with an up link [ 354.936813][T15155] tipc: Enabled bearer , priority 0 [ 354.944325][T15155] syzkaller0: entered promiscuous mode [ 354.949976][T15155] syzkaller0: entered allmulticast mode [ 354.984965][T15155] tipc: Resetting bearer [ 355.001153][T15152] tipc: Resetting bearer [ 355.018252][T15152] tipc: Disabling bearer [ 355.518109][T15203] tipc: Enabled bearer , priority 0 [ 355.538426][T15203] syzkaller0: entered promiscuous mode [ 355.572679][T15203] syzkaller0: entered allmulticast mode [ 355.660868][T15214] __nla_validate_parse: 16 callbacks suppressed [ 355.660884][T15214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2629'. [ 355.666424][T15202] tipc: Resetting bearer [ 355.691432][T15220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2630'. [ 355.711551][T15202] tipc: Disabling bearer [ 355.722787][T15207] scsi_nl_rcv_msg: discarding partial skb [ 355.788378][T15226] netlink: 'syz.3.2632': attribute type 58 has an invalid length. [ 355.797250][T15226] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2632'. [ 355.876564][T15229] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2633'. [ 356.393919][T15273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.460856][T15279] netlink: 'syz.4.2647': attribute type 1 has an invalid length. [ 356.614296][T15290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2650'. [ 356.640588][T15291] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2650'. [ 356.963598][T15320] sit0: Caught tx_queue_len zero misconfig [ 356.983997][T15320] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2659'. [ 357.051755][T15326] netlink: 'syz.4.2663': attribute type 7 has an invalid length. [ 357.114003][T15327] tipc: Enabled bearer , priority 0 [ 357.166361][T15327] syzkaller0: entered promiscuous mode [ 357.186405][T15327] syzkaller0: entered allmulticast mode [ 357.300150][T15339] tipc: Resetting bearer [ 357.897562][T15324] tipc: Resetting bearer [ 358.210499][T15324] tipc: Disabling bearer [ 358.401272][T15379] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2671'. [ 358.572869][T15338] mpoa:mpoad_close: () going down [ 359.019464][T15419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2678'. [ 359.043210][T15422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2679'. [ 359.085940][T15423] netlink: 'syz.1.2679': attribute type 2 has an invalid length. [ 359.086038][T15426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 359.100919][T15426] IPv6: NLM_F_CREATE should be set when creating new route [ 359.108173][T15426] IPv6: NLM_F_CREATE should be set when creating new route [ 359.130611][T15423] : entered promiscuous mode [ 359.329001][T15446] syzkaller1: entered promiscuous mode [ 359.343848][T15446] syzkaller1: entered allmulticast mode [ 359.646737][T15468] netlink: 'syz.3.2694': attribute type 83 has an invalid length. [ 359.707986][T15472] netlink: 'syz.4.2696': attribute type 10 has an invalid length. [ 359.715961][T15472] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 359.727431][T15472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 359.773990][T15473] syzkaller0: entered promiscuous mode [ 359.791890][T15473] syzkaller0: entered allmulticast mode [ 360.547845][T15531] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 360.738129][T15538] __nla_validate_parse: 2 callbacks suppressed [ 360.738152][T15538] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2714'. [ 360.759638][T15542] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2716'. [ 360.774200][T15542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2716'. [ 361.141046][T15556] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2723'. [ 361.213517][T15564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2722'. [ 361.384070][T15568] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 361.405753][T15567] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 361.696339][T15585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.748318][T15590] openvswitch: netlink: Multiple metadata blocks provided [ 361.950798][T15608] syzkaller0: entered promiscuous mode [ 361.960822][T15604] netlink: 'syz.1.2733': attribute type 10 has an invalid length. [ 361.972957][T15608] syzkaller0: entered allmulticast mode [ 361.984922][T15604] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 362.004552][T15607] tipc: Enabled bearer , priority 0 [ 362.139930][T11735] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.159767][T15607] tipc: Resetting bearer [ 362.210551][T15607] tipc: Disabling bearer [ 362.257677][T11735] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.285581][T11735] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.318767][T15628] netlink: 'syz.4.2743': attribute type 1 has an invalid length. [ 362.329901][T15620] netlink: 'syz.1.2739': attribute type 25 has an invalid length. [ 362.355895][T15626] netlink: 'syz.1.2739': attribute type 25 has an invalid length. [ 362.372574][T11735] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.395803][T15634] ieee802154 phy0 wpan0: encryption failed: -22 [ 362.454794][T15628] 8021q: adding VLAN 0 to HW filter on device bond7 [ 362.503615][T15648] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2744'. [ 362.546959][T15640] bond7: (slave geneve5): making interface the new active one [ 362.564656][T15640] bond7: (slave geneve5): Enslaving as an active interface with an up link [ 362.583648][ T13] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 362.601404][T15639] netlink: 'syz.3.2742': attribute type 1 has an invalid length. [ 362.608596][ T13] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 362.622971][T15639] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2742'. [ 362.707981][ T13] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 362.736837][ T13] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 362.801069][T15663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2748'. [ 362.811113][T15664] sctp: [Deprecated]: syz.4.2747 (pid 15664) Use of struct sctp_assoc_value in delayed_ack socket option. [ 362.811113][T15664] Use struct sctp_sack_info instead [ 362.852192][T15666] : entered promiscuous mode [ 362.858813][T15663] netlink: 'syz.3.2748': attribute type 7 has an invalid length. [ 362.869883][T15663] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2748'. [ 362.964078][T15672] nbd: must specify at least one socket [ 362.991905][T15675] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 363.085976][T15680] bridge9: entered promiscuous mode [ 363.091179][T15680] bridge9: entered allmulticast mode [ 363.535249][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2766'. [ 363.555190][T15711] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 363.572464][T15711] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 363.589520][T15711] gretap2: entered promiscuous mode [ 363.605135][T15711] gretap2: entered allmulticast mode [ 363.838744][T15723] tipc: Enabled bearer , priority 0 [ 363.863699][T15723] syzkaller0: entered promiscuous mode [ 363.888901][T15723] syzkaller0: entered allmulticast mode [ 363.991116][T15723] tipc: Resetting bearer [ 364.077613][T15747] netlink: 'syz.0.2774': attribute type 11 has an invalid length. [ 364.088804][T15723] tipc: Disabling bearer [ 364.247586][T15751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.557571][T15776] tipc: Enabling of bearer rejected, failed to enable media [ 364.898775][T15796] ================================================================== [ 364.906873][T15796] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0 [ 364.914945][T15796] Write of size 8 at addr ffff888054ff48b0 by task syz.4.2789/15796 [ 364.922919][T15796] [ 364.925242][T15796] CPU: 0 UID: 0 PID: 15796 Comm: syz.4.2789 Not tainted syzkaller #0 PREEMPT(full) [ 364.925264][T15796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 364.925282][T15796] Call Trace: [ 364.925290][T15796] [ 364.925298][T15796] dump_stack_lvl+0x189/0x250 [ 364.925321][T15796] ? __kasan_check_byte+0x12/0x40 [ 364.925345][T15796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.925364][T15796] ? lock_release+0x4b/0x3e0 [ 364.925390][T15796] ? __virt_addr_valid+0x4a5/0x5c0 [ 364.925412][T15796] print_report+0xca/0x240 [ 364.925428][T15796] ? __xfrm_state_delete+0x696/0xca0 [ 364.925447][T15796] kasan_report+0x118/0x150 [ 364.925471][T15796] ? __xfrm_state_delete+0x696/0xca0 [ 364.925493][T15796] __xfrm_state_delete+0x696/0xca0 [ 364.925517][T15796] xfrm_state_flush+0x45f/0x770 [ 364.925541][T15796] pfkey_flush+0x13f/0x340 [ 364.925562][T15796] ? __pfx_pfkey_flush+0x10/0x10 [ 364.925580][T15796] ? kmem_cache_free+0x18f/0x400 [ 364.925607][T15796] pfkey_sendmsg+0xbfb/0x1090 [ 364.925626][T15796] ? trace_sched_exit_tp+0x36/0x110 [ 364.925655][T15796] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 364.925685][T15796] ? aa_sock_msg_perm+0xf1/0x1d0 [ 364.925703][T15796] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 364.925722][T15796] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 364.925741][T15796] __sock_sendmsg+0x219/0x270 [ 364.925767][T15796] ____sys_sendmsg+0x505/0x830 [ 364.925789][T15796] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.925821][T15796] ? import_iovec+0x74/0xa0 [ 364.925844][T15796] ___sys_sendmsg+0x21f/0x2a0 [ 364.925866][T15796] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.925902][T15796] ? __fget_files+0x2a/0x420 [ 364.925917][T15796] ? __fget_files+0x3a0/0x420 [ 364.925937][T15796] __x64_sys_sendmsg+0x19b/0x260 [ 364.925958][T15796] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 364.925983][T15796] ? rcu_is_watching+0x15/0xb0 [ 364.926003][T15796] ? do_syscall_64+0xbe/0x3b0 [ 364.926024][T15796] do_syscall_64+0xfa/0x3b0 [ 364.926041][T15796] ? lockdep_hardirqs_on+0x9c/0x150 [ 364.926058][T15796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.926075][T15796] ? clear_bhb_loop+0x60/0xb0 [ 364.926094][T15796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.926111][T15796] RIP: 0033:0x7f211498eec9 [ 364.926127][T15796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.926142][T15796] RSP: 002b:00007f211574f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.926161][T15796] RAX: ffffffffffffffda RBX: 00007f2114be6090 RCX: 00007f211498eec9 [ 364.926175][T15796] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 364.926187][T15796] RBP: 00007f2114a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 364.926198][T15796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.926210][T15796] R13: 00007f2114be6128 R14: 00007f2114be6090 R15: 00007ffecbcdb3d8 [ 364.926231][T15796] [ 364.926238][T15796] [ 365.211089][T15796] Allocated by task 13849: [ 365.215484][T15796] kasan_save_track+0x3e/0x80 [ 365.220146][T15796] __kasan_slab_alloc+0x6c/0x80 [ 365.224980][T15796] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 365.230424][T15796] xfrm_state_alloc+0x24/0x2f0 [ 365.235170][T15796] __find_acq_core+0x8a7/0x1c00 [ 365.240003][T15796] xfrm_find_acq+0x78/0xa0 [ 365.244404][T15796] xfrm_alloc_userspi+0x6b3/0xc90 [ 365.249410][T15796] xfrm_user_rcv_msg+0x7a3/0xab0 [ 365.254334][T15796] netlink_rcv_skb+0x205/0x470 [ 365.259077][T15796] xfrm_netlink_rcv+0x79/0x90 [ 365.263737][T15796] netlink_unicast+0x82f/0x9e0 [ 365.268494][T15796] netlink_sendmsg+0x805/0xb30 [ 365.273236][T15796] __sock_sendmsg+0x219/0x270 [ 365.277896][T15796] ____sys_sendmsg+0x505/0x830 [ 365.282637][T15796] ___sys_sendmsg+0x21f/0x2a0 [ 365.287294][T15796] __x64_sys_sendmsg+0x19b/0x260 [ 365.292227][T15796] do_syscall_64+0xfa/0x3b0 [ 365.296800][T15796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.302676][T15796] [ 365.304982][T15796] Freed by task 5979: [ 365.308964][T15796] kasan_save_track+0x3e/0x80 [ 365.313624][T15796] kasan_save_free_info+0x46/0x50 [ 365.318626][T15796] __kasan_slab_free+0x5b/0x80 [ 365.323371][T15796] kmem_cache_free+0x18f/0x400 [ 365.328115][T15796] xfrm_state_gc_task+0x52d/0x6b0 [ 365.333122][T15796] process_scheduled_works+0xae1/0x17b0 [ 365.338646][T15796] worker_thread+0x8a0/0xda0 [ 365.343212][T15796] kthread+0x70e/0x8a0 [ 365.347261][T15796] ret_from_fork+0x439/0x7d0 [ 365.351826][T15796] ret_from_fork_asm+0x1a/0x30 [ 365.356571][T15796] [ 365.358877][T15796] The buggy address belongs to the object at ffff888054ff4880 [ 365.358877][T15796] which belongs to the cache xfrm_state of size 928 [ 365.372820][T15796] The buggy address is located 48 bytes inside of [ 365.372820][T15796] freed 928-byte region [ffff888054ff4880, ffff888054ff4c20) [ 365.386506][T15796] [ 365.388812][T15796] The buggy address belongs to the physical page: [ 365.395210][T15796] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888054ff4cc0 pfn:0x54ff4 [ 365.405259][T15796] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 365.413736][T15796] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 365.421263][T15796] page_type: f5(slab) [ 365.425222][T15796] raw: 00fff00000000040 ffff8881426c7640 dead000000000122 0000000000000000 [ 365.433786][T15796] raw: ffff888054ff4cc0 00000000800f000c 00000000f5000000 0000000000000000 [ 365.442350][T15796] head: 00fff00000000040 ffff8881426c7640 dead000000000122 0000000000000000 [ 365.450998][T15796] head: ffff888054ff4cc0 00000000800f000c 00000000f5000000 0000000000000000 [ 365.459650][T15796] head: 00fff00000000002 ffffea000153fd01 00000000ffffffff 00000000ffffffff [ 365.468302][T15796] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 365.476946][T15796] page dumped because: kasan: bad access detected [ 365.483338][T15796] page_owner tracks the page as allocated [ 365.489028][T15796] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 10709, tgid 10707 (syz.2.1330), ts 276761132532, free_ts 276410553129 [ 365.508451][T15796] post_alloc_hook+0x240/0x2a0 [ 365.513202][T15796] get_page_from_freelist+0x21e4/0x22c0 [ 365.518727][T15796] __alloc_frozen_pages_noprof+0x181/0x370 [ 365.524512][T15796] alloc_pages_mpol+0x232/0x4a0 [ 365.529344][T15796] allocate_slab+0x8a/0x370 [ 365.533824][T15796] ___slab_alloc+0xbeb/0x1420 [ 365.538484][T15796] kmem_cache_alloc_noprof+0x283/0x3c0 [ 365.543922][T15796] xfrm_state_alloc+0x24/0x2f0 [ 365.548667][T15796] xfrm_state_find+0x37d4/0x5400 [ 365.553582][T15796] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 365.559720][T15796] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 365.565080][T15796] xfrm_lookup_route+0x3c/0x1c0 [ 365.569911][T15796] rawv6_sendmsg+0xdab/0x1820 [ 365.574568][T15796] __sock_sendmsg+0x19c/0x270 [ 365.579231][T15796] ____sys_sendmsg+0x52d/0x830 [ 365.583974][T15796] ___sys_sendmsg+0x21f/0x2a0 [ 365.588633][T15796] page last free pid 10623 tgid 10620 stack trace: [ 365.595106][T15796] __free_frozen_pages+0xbc4/0xd30 [ 365.600200][T15796] vfree+0x25a/0x400 [ 365.604075][T15796] __vmalloc_node_range_noprof+0x100d/0x12f0 [ 365.610047][T15796] bpf_map_area_alloc+0x12d/0x180 [ 365.615068][T15796] sock_hash_alloc+0x266/0x4e0 [ 365.619816][T15796] map_create+0xaa0/0x14d0 [ 365.624214][T15796] __sys_bpf+0x60f/0x870 [ 365.628439][T15796] __x64_sys_bpf+0x7c/0x90 [ 365.632837][T15796] do_syscall_64+0xfa/0x3b0 [ 365.637319][T15796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.643200][T15796] [ 365.645505][T15796] Memory state around the buggy address: [ 365.651109][T15796] ffff888054ff4780: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 365.659153][T15796] ffff888054ff4800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 365.667193][T15796] >ffff888054ff4880: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 365.675317][T15796] ^ [ 365.680925][T15796] ffff888054ff4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 365.688966][T15796] ffff888054ff4980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 365.697000][T15796] ================================================================== [ 365.705219][T15796] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 365.712406][T15796] CPU: 0 UID: 0 PID: 15796 Comm: syz.4.2789 Not tainted syzkaller #0 PREEMPT(full) [ 365.721771][T15796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 365.731821][T15796] Call Trace: [ 365.735100][T15796] [ 365.738029][T15796] dump_stack_lvl+0x99/0x250 [ 365.742617][T15796] ? __asan_memcpy+0x40/0x70 [ 365.747207][T15796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.752411][T15796] ? __pfx__printk+0x10/0x10 [ 365.757005][T15796] vpanic+0x281/0x750 [ 365.760991][T15796] ? __pfx_vpanic+0x10/0x10 [ 365.765492][T15796] ? irqentry_exit+0x74/0x90 [ 365.770087][T15796] panic+0xb9/0xc0 [ 365.773809][T15796] ? __pfx_panic+0x10/0x10 [ 365.778223][T15796] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 365.784112][T15796] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 365.790007][T15796] ? __xfrm_state_delete+0x696/0xca0 [ 365.795292][T15796] check_panic_on_warn+0x89/0xb0 [ 365.800242][T15796] ? __xfrm_state_delete+0x696/0xca0 [ 365.805523][T15796] end_report+0x78/0x160 [ 365.809767][T15796] kasan_report+0x129/0x150 [ 365.814270][T15796] ? __xfrm_state_delete+0x696/0xca0 [ 365.819555][T15796] __xfrm_state_delete+0x696/0xca0 [ 365.824665][T15796] xfrm_state_flush+0x45f/0x770 [ 365.829527][T15796] pfkey_flush+0x13f/0x340 [ 365.833944][T15796] ? __pfx_pfkey_flush+0x10/0x10 [ 365.838907][T15796] ? kmem_cache_free+0x18f/0x400 [ 365.843854][T15796] pfkey_sendmsg+0xbfb/0x1090 [ 365.848538][T15796] ? trace_sched_exit_tp+0x36/0x110 [ 365.853754][T15796] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 365.858879][T15796] ? aa_sock_msg_perm+0xf1/0x1d0 [ 365.863819][T15796] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 365.869104][T15796] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 365.874205][T15796] __sock_sendmsg+0x219/0x270 [ 365.878876][T15796] ____sys_sendmsg+0x505/0x830 [ 365.883625][T15796] ? __pfx_____sys_sendmsg+0x10/0x10 [ 365.888897][T15796] ? import_iovec+0x74/0xa0 [ 365.893386][T15796] ___sys_sendmsg+0x21f/0x2a0 [ 365.898048][T15796] ? __pfx____sys_sendmsg+0x10/0x10 [ 365.903242][T15796] ? __fget_files+0x2a/0x420 [ 365.907810][T15796] ? __fget_files+0x3a0/0x420 [ 365.912472][T15796] __x64_sys_sendmsg+0x19b/0x260 [ 365.917393][T15796] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 365.922840][T15796] ? rcu_is_watching+0x15/0xb0 [ 365.927587][T15796] ? do_syscall_64+0xbe/0x3b0 [ 365.932248][T15796] do_syscall_64+0xfa/0x3b0 [ 365.936735][T15796] ? lockdep_hardirqs_on+0x9c/0x150 [ 365.941914][T15796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.947960][T15796] ? clear_bhb_loop+0x60/0xb0 [ 365.952619][T15796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.958499][T15796] RIP: 0033:0x7f211498eec9 [ 365.962897][T15796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.982483][T15796] RSP: 002b:00007f211574f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.990880][T15796] RAX: ffffffffffffffda RBX: 00007f2114be6090 RCX: 00007f211498eec9 [ 365.998834][T15796] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 366.006786][T15796] RBP: 00007f2114a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 366.014741][T15796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.022693][T15796] R13: 00007f2114be6128 R14: 00007f2114be6090 R15: 00007ffecbcdb3d8 [ 366.030653][T15796] [ 366.033906][T15796] Kernel Offset: disabled [ 366.038208][T15796] Rebooting in 86400 seconds..