last executing test programs: 42.715718729s ago: executing program 3 (id=1165): syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}, @md5sig={0x1d, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 64) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="02"], 0x10) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc7, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xdd, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYRES8=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async, rerun: 64) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f00000001c0)) (async, rerun: 64) r5 = socket$rds(0x15, 0x5, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, 0x0, 0x0) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) (async, rerun: 32) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, 0x0) (rerun: 32) pwritev(r7, &(0x7f0000000380)=[{&(0x7f0000000040)='\x00!', 0x2}, {&(0x7f0000000140)="abffa99a7d6ed2dcacc958fd3a5c773e03b4a54890c6ba34d4a318f17925141e844a5882851431385aa863defbc0d479f945bbd8eb945276a091970bbeccd52a559731b33c20fd6eb7d6adb5ba81c0eccf6ee0dfd3f702812d39c7853360046b50ad6a4436d4247a5e920c58f140a138faa35246b17306e25f6e34b456ccefe6c20a544cb784ec517071b8f1563bb232c4019084d9003f1a2832609a0e8eb141c1ded373dd38c0e827721ecab5570c9b"}, {&(0x7f0000000240)="43e51f1bce2ede7abb6a4b66c403f7e047ecee20f0c2fcb0e9a0fa457ecafec104711845155c12d3083c2643fa79d4831d46244b8543a725fd5366f46c47f28a49d9cd9504e8fcb98c7295b91fddb7740713db6271cd2cabd133fcda03c5c0f034350170b69e304f501b3d0b0adab4ab55293a945272119c6ce79f8290df879fff628d42f94b5057e51e8a86a1879350d393acc57a51418944c4ebd0bc038ee67565694f4a4a655c4c280a6c171c3d9f3526cd4edb361a"}, {&(0x7f0000000300)="f2671cb24621eed7e7a51d5659a146245add4a2f90cb80f9129d9a161de443485cc5ee75345f3572a222faec0745c7d800937747222bbd7f4dc9514a4799640f8255dc6a4743dab90efdb54b411a188a4e021ae5b392d4de7029e547a196c8990184ef06499677b80d5e21e063b3e263e1b2d2df8b2200a968be53e544fc"}], 0x1000000000000215, 0x5, 0x0) (async, rerun: 64) bind$rds(r5, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) (rerun: 64) 42.428467933s ago: executing program 3 (id=1170): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async, rerun: 32) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async, rerun: 32) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x3c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x26, 0x11, 0x0, 0x1, [@generic="2fe5afbf24fbcccc554cd9761e79b8dad8a2018544a3f855448c77987d9d7a5233e2"]}]}, 0x3c}], 0x1}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @multicast, @val={@void, {0x8100, 0x3, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @parameter_prob={0xc, 0x0, 0x0, 0x6, 0xf7, 0x0, {0x6, 0x4, 0x1, 0x3, 0x92, 0x67, 0xe, 0x2, 0x602fee536a220724, 0x5, @dev={0xac, 0x14, 0x14, 0x1b}, @dev={0xac, 0x14, 0x14, 0x43}, {[@end]}}, "a9fbb2cdff77e2ae"}}}}}, 0x0) (async, rerun: 64) syz_emit_ethernet(0x8e, &(0x7f0000000340)={@multicast, @link_local, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x1, 0x1}}, {@ipv4={0x800, @gre={{0xd, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast1=0xe000c800, {[@generic={0x44, 0x10, "fe0ca599e0604fe9827bc3218f7a"}, @timestamp={0x44, 0x10, 0xee, 0x0, 0x9, [0x40, 0x4, 0x80]}]}}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x3, {{}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x7}}}}}}}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000000000007b113400000000008510000002000000850000000000000095003300000000009500a5660e0000009f3be7f40752ed289350a3b5257dfc7e5429619ce459a63169ccb691d1a8f1ab83013d"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61123c00000000006113500000000000bf200000000000001500000008ffffffbd03010000000000cf000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async, rerun: 32) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000500)=""/191, 0xbf}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/217, 0xd9}, {&(0x7f00000002c0)=""/104, 0x68}], 0x4) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 42.147632043s ago: executing program 3 (id=1172): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@generic={0xaa, 0x4, 0x2, 0x5, 0x40}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x872}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x75, &(0x7f0000000080)=""/117, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x9, 0x9, 0x4e5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x1], 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=0x1, 0x2f, 0x1, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000400)={0x2, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, r0, 0x2b, 0x2020, 0x0, @void, @void, @value=r3, @void, r2}, 0x20) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000440)=r3, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x140c, 0x411, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x140c, 0x411, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000640)={0x0, 0x8c, &(0x7f0000000580)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e24, 0x1, @private2, 0x4}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000680)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000640)={0x0, 0x8c, &(0x7f0000000580)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e24, 0x1, @private2, 0x4}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000680)=0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x140f, 0x800, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x229d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8050}, 0xc000005) r6 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r6, &(0x7f0000000800)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000840)=0x20) (async) getpeername$l2tp6(r6, &(0x7f0000000800)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000840)=0x20) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000880)) syz_genetlink_get_family_id$batadv(&(0x7f0000000900), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r7, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x10}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000084}, 0x81) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r7, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x10}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000084}, 0x81) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000a00)=r3, 0x4) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000a00)=r3, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000a40)=@gcm_256={{0x303}, "1352595dfc08636c", "0c6eff935ce44f7d652720498cafd224fb45676c1453b661bbc26216d6363d68", "55c5a50e", "8ddc88be48193441"}, 0x38) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000ac0), r5) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ac0), r5) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r9, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x7c, r10, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2f}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xda}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x4800) r11 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r11, &(0x7f0000001f80)={&(0x7f0000000c00)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c80)="a497c253507e9c9aa9cdbc8147777aa39008f9aad5b6930db40b919d18afabb58cede6c9557de122a23367caba929a14d0d1566fcde428793a760c", 0x3b}, {&(0x7f0000000cc0)="4295671c377f36b762875fa5cf3a9fa05015335a3fdee27e8519943422b9e2ea561b6e7bdbeb95ccd79f2cd93fa7cb07c4222f7631e8ee886dfc03bdae977460726442412d6deea2828cbf8585c4318f84c08ad7f0136d5ad67bb4606664e63e2c6e77ac01c900190aff4e73c23578c22251513be9319d903fc796bc658d8b03acf47f2e9a15e4035e6159701b735a7a49b813844305cc463e669feab583d632e3664775", 0xa4}, {&(0x7f0000000d80)="630712a81fbb1aadfcaec595ee39455a", 0x10}, {&(0x7f0000000dc0)="fabc30397addcf60d4bf714ce9253b90b2c9869e4b4edeae4be6a62b8067105c81f5a7cec3261b0aad949174226491bd59c75eeafa14b80f22baa372d6c47d757f8682e530e2b2e3a180a37a6b124c948d8d2d6e512d07586c9d599f511609b84d05b45bb2d32d2d9df1a2581223af231200b37e210c6ab399b6fca9e483e28c12584cf614953a31428eefa8ec680033f24e42b132d0e88e", 0x98}], 0x4, &(0x7f0000000ec0)=[{0x10, 0x6, 0x7}, {0x1010, 0x10e, 0x10001, "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"}, {0x30, 0x103, 0x0, "5afb6273ecc707f7f6d0703042aa685ee6c5aa1f1617d90d00f61b"}, {0x40, 0x111, 0x6, "9c4abe764be23aa384f1f80eeb0e6789346d48ebde6e0a99d681b9aa4949ea48b95d978825b3067721f63052"}], 0x1090}, 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002000), r9) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000002100)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x7c, r12, 0x520, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xf0}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2400000}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}]}, 0x7c}}, 0x8000) r13 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002140)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000002180)=r13, 0x4) socket$phonet(0x23, 0x2, 0x1) (async) r14 = socket$phonet(0x23, 0x2, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r14, 0x400c6615, &(0x7f00000021c0)={0x0, @aes128, 0x0, @desc2}) 28.447575692s ago: executing program 3 (id=1172): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@generic={0xaa, 0x4, 0x2, 0x5, 0x40}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x872}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x75, &(0x7f0000000080)=""/117, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x9, 0x9, 0x4e5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x1], 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=0x1, 0x2f, 0x1, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000400)={0x2, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, r0, 0x2b, 0x2020, 0x0, @void, @void, @value=r3, @void, r2}, 0x20) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000440)=r3, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x140c, 0x411, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x140c, 0x411, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000640)={0x0, 0x8c, &(0x7f0000000580)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e24, 0x1, @private2, 0x4}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000680)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000640)={0x0, 0x8c, &(0x7f0000000580)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e24, 0x1, @private2, 0x4}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000680)=0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x140f, 0x800, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x229d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8050}, 0xc000005) r6 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r6, &(0x7f0000000800)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000840)=0x20) (async) getpeername$l2tp6(r6, &(0x7f0000000800)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000840)=0x20) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000880)) syz_genetlink_get_family_id$batadv(&(0x7f0000000900), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r7, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x10}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000084}, 0x81) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r7, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x10}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000084}, 0x81) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000a00)=r3, 0x4) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000a00)=r3, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000a40)=@gcm_256={{0x303}, "1352595dfc08636c", "0c6eff935ce44f7d652720498cafd224fb45676c1453b661bbc26216d6363d68", "55c5a50e", "8ddc88be48193441"}, 0x38) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000ac0), r5) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ac0), r5) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r9, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x7c, r10, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2f}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xda}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x4800) r11 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r11, &(0x7f0000001f80)={&(0x7f0000000c00)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c80)="a497c253507e9c9aa9cdbc8147777aa39008f9aad5b6930db40b919d18afabb58cede6c9557de122a23367caba929a14d0d1566fcde428793a760c", 0x3b}, {&(0x7f0000000cc0)="4295671c377f36b762875fa5cf3a9fa05015335a3fdee27e8519943422b9e2ea561b6e7bdbeb95ccd79f2cd93fa7cb07c4222f7631e8ee886dfc03bdae977460726442412d6deea2828cbf8585c4318f84c08ad7f0136d5ad67bb4606664e63e2c6e77ac01c900190aff4e73c23578c22251513be9319d903fc796bc658d8b03acf47f2e9a15e4035e6159701b735a7a49b813844305cc463e669feab583d632e3664775", 0xa4}, {&(0x7f0000000d80)="630712a81fbb1aadfcaec595ee39455a", 0x10}, {&(0x7f0000000dc0)="fabc30397addcf60d4bf714ce9253b90b2c9869e4b4edeae4be6a62b8067105c81f5a7cec3261b0aad949174226491bd59c75eeafa14b80f22baa372d6c47d757f8682e530e2b2e3a180a37a6b124c948d8d2d6e512d07586c9d599f511609b84d05b45bb2d32d2d9df1a2581223af231200b37e210c6ab399b6fca9e483e28c12584cf614953a31428eefa8ec680033f24e42b132d0e88e", 0x98}], 0x4, &(0x7f0000000ec0)=[{0x10, 0x6, 0x7}, {0x1010, 0x10e, 0x10001, "6897d90fc23d7851de43b25262b905092ab4a181eb7e5bed45b85d2d37d483ba7397251b08647325cb9aa5e11ef6c2801a343e355e2233774490ca00103f83e2d6fd63f68125c2782af2cdca16883f881353996fed2546d95be6d2b15cda885462e2ab7a4ab2bef70bbbcfbb7dedc963a50b051b3dca9ec5e689be351f17bd2936e505369062936800fbca571cc76b6c1ffd76201945cfb079240cb7aad4a7c1e57f24e281ec5c75940e7817ecd9750d691d69abf02ff1a91eeeb0b3850986fcd32d77be35979c780ea631632fa39dcc2ecdc1f6a17f7f5227c6a584bf79230688aeaa0b0398febc8d15e23aaafee4ad5674664faa11fdacb5341b98dfb97f1d8e97c3ad106b85f0bf2b6c82e5f066567dbfb3488b9e290d1eb5e3de2ca161d110eed6d0f81d664a76b2b461eae66bf81be5fc685d36d161c84e266566a3bbf40f9ef4c80d4e35a1d11a0c7e6076a36920036bdba282eec29135f11b3ed8beb84b35a4ebaad657e3699aad686ec16813580fd72ba9e5c7a3fb6a1c292b986024ddefc319a080cf6b0c24ef5d20d49a945b194b4dac24fca4cb070e7277d8e11869cec30c0f528a29069fbc0773db0e219eb5dff9a1f338469acf9e2be17277c05c47ccb492975a71112e4b32a82cd74a22ef382453c60bbedca0638a2b8d8e98e0e7dce4b045f25616a43c240b425e53e83b924b8ba7136acfd9aa70c8d76d36db5dcdd3ed04b14ec2beec689e941532f1bcc4609fb3c498146e4e7e83996e8862e7734cfe87470e910042f536799875674b20185fe8c553b376e6a6af2d979ec80374d7e5d333a3f4018710aae49102a28954206f1b8fdbf3bfcbd92bd4090c01fa122d191bd4cd06438753d544e1e86cecb7906906c49d9bc7c8e53df17bdbab7d2adf8f1c0a933da14b3b20ee187a581c24213cd4f713fbd625ff9ca4b67091bf10cd726e9c279698d124fbb760f56c033db032552be60fd85018e1fb3070034a3029ab60ea43016a8a1b18abd61dcc6263097e305c41fbcf646a4a66550e2f2825c986e62e0bb9a6f77f5296faae965707f5297ff56b7a225be6f9b20344d20d1e1337e81ca77847f197493de5d6544409bd02deaed03d737172712490e860687afaf83b2bd33e45d27e2120659c5524dd15cc7ed96ed43785016f597f2124115623b15ea4526896b190a594daee132f531fe9e380e8d70f9a67c92a02209a6637658cf40b4e066041b1c9912b86cbb4429dcb4228f283ea22b4f53615f2d743bcafadd0503a4f4f28b3cba9ea96c1a8e68716617dd2e16406b2dfdbe328194de432707275c92e07548576400ed774fd9bb34f61312e5c87b410fdb96fac2a10eee78789399581bc41bfda4a0e8880da76d90f7303e6ae1e93b6b478cfb30c8f7c04894e9b6866ea2c843fe4fbb1287b76d1ed828af913c8196f5834af637c5a641747b4a8fb0a3629cfc208d3a2f9b106bf076f2eb7771772d209c1fe421e20f89c545d50bfff88a61a9e496fb3d7988ccdc003f90873a1cffd0bafb9468432088d5abed4f012115c9043cead685cb65de2cbc4c8742c1306796812cbb54ce00240239a3243a7c47838fbde5cf4dc5fc7d618508d1fbd55dec44a381a8d6d3f0140251250b9f3c5df592d8eac7d3df75b1c97732404b136f6d8e06347b39a357fcb5b490572d46974b19671de85b26e6d534dff4e6988fae17f5a7f4c0fd1862ab5ce242e3772e4db8954dfa2dc98e2a057ee4b26d45c49a27fb05525ba06aaba05f619064187f95ab3a4cdf327cf31b1b9d88162973f8beac929f6558d713848e84089aa2192e5ed1426b8291b66b90b966c739bb7d45b4f0bcaf279d7ec29dbb220f1b3302101338b7ddfdecaa4812977cdb09e4b8e64f2f081f4579edcfd6113b4ef0fb3ae6b212294055d509d8b27320c4f294e136ef75642471280757aca95cae76c41bc1daa50b74de81ffa559d051fd26b6fb71936e95d8cc7bd5d5759bf124423cb648fd3ffe5b0d570b14a54cebfff8025f178c64fb2adafd18e941a0d7a3cc58d9a62c69b6dbb515ae2ed5468aedb32dd826ed13edb999179ece9d3fa48584e55c9c9abab11850618c41424f6f7f716b1229499d1bf6ad1791f55914e283e86762485fd6d289bece662ec32d06773ece8a58eac398f87f50d74b463222b4e4b909f9411610937cdc98a0deb984a71b707a846f5eace9565542c54a1921fa5091c74161a2955d97bf9b26202eb2523d7614fb5b8e7044d93eb5a2186b3c568190536bbe932d57da67f1952cf4e963fe8227cc8da79564369daaa01a26fe7b54b34853d3db95e16e90b317b3ad105f99ee3592fefb411b68f073ff3f2f1626f916bf75d34d532cc3f9e55ea2519c30b4c976d348ddfaf9ef659a2bad8ae8d93ef93364d090a1d60150b88ec76e5d142b1f2a0a0dc2ead38719d3ae52e7803e11edaa1faa7cc1c388d6ed8b3c0ec4ad6770baaa78ef6e42c127357c6554a0948b10a7701edc65f6ce70f707b7129c14c4337ac1b5eded0704e861ce1b88d1a6ce6c1511a3f42aa6d0da87be208b02179b8d38b81146be156469f50b5c2babc78a92aeb84d049c97172fd36cdac8fde457a66651695cb7f7b9381a46c68f8042b655f5ba9685cb4f774631c0cda5f3528005990208412282a0a18b7623b0fd840607b0769dc00327f5fcf93b6970fe3826c1f8fd44808acd7edd6350d2d5ac3b829c0e58cba6d94f0813489696abfa201ba1fcfea4eb5c9896a1b9cb7fdd909d2bffb028f5621e50def94e5caece4feb7e103022ea34c5130e08a86528141cd3e846d0f4af1947b96586cf3d8ea4d4a6e50d6f3d7e30459e4f5eac53272d2316ea2dc9b7ea773a6b99cc4beab9414498a6ea2823e51a0740e3d76a38b88ec6687d9dd9972b6cb9922ca3074714967694d49683022581bdc3be6f9914fdd51086fcf819d372c26f0e76e0bb375acbab1d32acbbe845590b49bea9153c81bd4ce64bc9fec6284be666b62f56ed63dd06cf1140aed07e2f7e3aa05e9187f2e06ad80b9a0eda2828d49f6f49525a3fa8580904709c2fd53ab9697d48c233549b7b5ec9ee135a9fe9ee228d1a03938f8537e9b1a78759d73beba28dbdb550f1c3028bc06f1dab81c23327008846e6b069319f1f53bc3dc08ad654ee79a968839d39949eb674040e802623b3b1206c124863a6b21dd9cffff024a0b9d985fe5ca4cbcdcd9483328ad16d199824bd4eb4c35de7d060f11285e57129c123f7f965a21a7391da4ef8c486e00891ac56219715a2f17797a7e76a163040bbf0516a2e94d488827eb62d7ef755469aabfac523c2827807a7a292b2d1052035bc5d108bfb50262dda2cdac4bb4fc9baa5b0dc5f1dd21119c68ba4a40552eb4f27ed72764583c52b265252d4a8c65f05280cc202f507f65534421020d63e38f95444ae75db6fd2aba338d93471d1c08950a59d0c528fd305303f8cb747d1976a9750ca231fd7ee3fa7521def928b62f8cf8e8306e5258281697125fca454e3d88c0e6a97bdfd3796dfda5a0dd3b2dc51e7b502e971d5506687a3c884995d950117120341ce83f642c0669576c93f3cb402601c9a46d4e77fca93282de76a03cb51f03d2c455089d79089f684a44650231f8096b7b58d8893c20d393d89a9ee114a118e45b3e98b38588c46f0a1df95d77b2de00f034bb995e1bc246dc48594a546ff11e246d96c95c16f8d19fd3caefc81971661c083f700460e01e4dbfc339114de796b15764fbef36db7016da77f9e567f0218ecda586bae3887d4926c84be9e4cfa97238bf4fe7f17b4d28fd4a529b49baf7a10e8a28f579b7e223fbb8079ae8d275a5948cb9cf3f667c89dbe97c6c184b4a729def92eee87d04d6dcd3bb19a47717361bd211c8043994ed133b43d2ad63e12efc6f1b8330faf84c73d3015141b19ae54d0af4e89e243a272bbdabf14aa919879b8359dda1a3dd1627bbcfa796351ef9cc295468d6614ea610e7a9c1238b0a65de47fdd93de5a815b0924c9cc780433f15a1c4f17c61bb953bd5daf31b623c6b95aaba902288c472552997f5d697a84dad1095e19243705cade1dc96295a3d5302ea9cd96e3f5728b270dc2e47b0cb88c4415d15f4ec298c4e49ddff746758f0e06fde756eac7dd41be636fffb0ad96ed755cd711dba77f39d90720a95360cd199b83ac9111ca95e7a01a5176c5179aca47167cac22602971f966263a8adc452c6a529228a8aa7d2b890dbfa433fb0a2aff0a2f81415c7903bcd253ce6c5a767b6812556ea0646f7d0a3d0871d95c1982c262a4e10c34116687c680baa1276c2e37d5df8e06999b841a26720feecda16067e7ecfff7f9d06cd5748c790c6a47051f540eb7b362b94f44e6f69a7cc06e93958b4fa7eddc2e34376b0c8edf51860951c093f2d05aa516f8ce64b134f7f25aafad6c0fa79f457652069bef69f3c159b250c3e131422e6fcea96fb9afc1f925ba064a578d6899b8db4a1d537b32c23614e7e7ee987c5c32b2f5e7e1759c2968993f4673adeb79ace785de9ddfcfa0e2970b4e9346397c04ce8e5e2fcb45a7968631550c1e2bc7d2869c9bf88d36e81ec1575c7aae173c25a59a8b04a3e5e1cb7c1955ffefba08249b17543ea64ce7d4735ab8580925eee5987b6090c8f37df27056916d1382e4442233e19411437d022541ca406f3e63cce701650de1fb70a4e9c4d9c5f5df374a1bd0e7f6c485e7806996d664c03557ad98970ec3ea7fdc04263be44250f233fcf37201dcd89fb025954dbe4f4772a36b644c7f27a87da656a8904a763682cd60e1a7d31f52cd71aa904d87764d8901c1334c8fff31599093ff08de39f62ba32cda5abba86a461fed9597aa18a20eb3a2eda5068557af241c4253ffadfa51d0199062279e154c45840432416effe510cc3666d34818549a71fbf51462da4bf44a1287e0f3d39075c64053c838f190b6eed0598106f545b33c3492a6ab3d46ec10b38591d17a32f3f8b9536040b7cd0bc6880b0714dc4d2a6d315a7c940f885fc7ecb924b401861d09761ce7a337b96a845e73aab6bbbc1db41891fdeca098b06d331d3befea2727db078bfd827062fab047db851bf1ceb0e69a891827c14949147ffc556b1e60eb34168b9a84a6c06f4e2a0bf3eb28f21272983a3eca8368d92b21e507204f149bde2c882e411fd206e78753a7c1dcf43dd9927d4d7f701de5d735bfc58c69886ebfe7fdc091acbf6af813d0f53868c8e9a568e53f97f4d042fb0dea33d5d6ddb885dce646dff89f68c8e805236c960796f5316041e90e455b72c2d2464d3bd9ae5cc2cfe655a4f8bbc2f3824180b5dcb63fdc8aab55919b499228fdad0c39b77bc8141c713f1799899f069b67076da39b8d280fc70e3c2169e34c5698d6d47d3fc1687fedc2cd7b8d2e464ae8eff9a91ca33adb2905df0f8bf120fa6c37eda3dadf0b750cac03dcbe6607ce11efc5dbe293f46d7bed3c889785d7ac0a2b68e9a3344142e1214da02ed18fd09d2e6e8c535b9aa7f8be078b0491721ba0152ea5f437c4527a9e08e725c03c86f2f92bcfc985a3065e1410472c12b86f4a7c47c484a76068e21db4d7cb8e6e3483affc358c94ebcc301183d0ac5e6a25adddc818fe7ef32734870a983ba7478d11ec438d246126175c8d52c5f04a60bb14763a07a22732b8e68f7200069ebf52c187a6dc6dad55a0f9ec715825962daf3abbd6c5ba5bd776935d64554e27473f82f4bb6dd3ce1c13ca6b90e7a319f13e397c43b327afcf797ec6f34ceda04a2f9ea13"}, {0x30, 0x103, 0x0, "5afb6273ecc707f7f6d0703042aa685ee6c5aa1f1617d90d00f61b"}, {0x40, 0x111, 0x6, "9c4abe764be23aa384f1f80eeb0e6789346d48ebde6e0a99d681b9aa4949ea48b95d978825b3067721f63052"}], 0x1090}, 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002000), r9) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000002100)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x7c, r12, 0x520, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xf0}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2400000}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}]}, 0x7c}}, 0x8000) r13 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002140)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000002180)=r13, 0x4) socket$phonet(0x23, 0x2, 0x1) (async) r14 = socket$phonet(0x23, 0x2, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r14, 0x400c6615, &(0x7f00000021c0)={0x0, @aes128, 0x0, @desc2}) 13.167959483s ago: executing program 3 (id=1172): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@generic={0xaa, 0x4, 0x2, 0x5, 0x40}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x872}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x75, &(0x7f0000000080)=""/117, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x9, 0x9, 0x4e5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x1], 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=0x1, 0x2f, 0x1, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000400)={0x2, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, r0, 0x2b, 0x2020, 0x0, @void, @void, @value=r3, @void, r2}, 0x20) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000440)=r3, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x140c, 0x411, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x140c, 0x411, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000640)={0x0, 0x8c, &(0x7f0000000580)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e24, 0x1, @private2, 0x4}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000680)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000640)={0x0, 0x8c, &(0x7f0000000580)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e24, 0x1, @private2, 0x4}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000680)=0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x140f, 0x800, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x229d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8050}, 0xc000005) r6 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r6, &(0x7f0000000800)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000840)=0x20) (async) getpeername$l2tp6(r6, &(0x7f0000000800)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000840)=0x20) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000880)) syz_genetlink_get_family_id$batadv(&(0x7f0000000900), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r7, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x10}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000084}, 0x81) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r7, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x10}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000084}, 0x81) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000a00)=r3, 0x4) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000a00)=r3, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000a40)=@gcm_256={{0x303}, "1352595dfc08636c", "0c6eff935ce44f7d652720498cafd224fb45676c1453b661bbc26216d6363d68", "55c5a50e", "8ddc88be48193441"}, 0x38) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000ac0), r5) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ac0), r5) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r9, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x7c, r10, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2f}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xda}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x4800) r11 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r11, &(0x7f0000001f80)={&(0x7f0000000c00)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c80)="a497c253507e9c9aa9cdbc8147777aa39008f9aad5b6930db40b919d18afabb58cede6c9557de122a23367caba929a14d0d1566fcde428793a760c", 0x3b}, {&(0x7f0000000cc0)="4295671c377f36b762875fa5cf3a9fa05015335a3fdee27e8519943422b9e2ea561b6e7bdbeb95ccd79f2cd93fa7cb07c4222f7631e8ee886dfc03bdae977460726442412d6deea2828cbf8585c4318f84c08ad7f0136d5ad67bb4606664e63e2c6e77ac01c900190aff4e73c23578c22251513be9319d903fc796bc658d8b03acf47f2e9a15e4035e6159701b735a7a49b813844305cc463e669feab583d632e3664775", 0xa4}, {&(0x7f0000000d80)="630712a81fbb1aadfcaec595ee39455a", 0x10}, {&(0x7f0000000dc0)="fabc30397addcf60d4bf714ce9253b90b2c9869e4b4edeae4be6a62b8067105c81f5a7cec3261b0aad949174226491bd59c75eeafa14b80f22baa372d6c47d757f8682e530e2b2e3a180a37a6b124c948d8d2d6e512d07586c9d599f511609b84d05b45bb2d32d2d9df1a2581223af231200b37e210c6ab399b6fca9e483e28c12584cf614953a31428eefa8ec680033f24e42b132d0e88e", 0x98}], 0x4, &(0x7f0000000ec0)=[{0x10, 0x6, 0x7}, {0x1010, 0x10e, 0x10001, "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"}, {0x30, 0x103, 0x0, "5afb6273ecc707f7f6d0703042aa685ee6c5aa1f1617d90d00f61b"}, {0x40, 0x111, 0x6, "9c4abe764be23aa384f1f80eeb0e6789346d48ebde6e0a99d681b9aa4949ea48b95d978825b3067721f63052"}], 0x1090}, 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002000), r9) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000002100)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x7c, r12, 0x520, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xf0}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2400000}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}]}, 0x7c}}, 0x8000) r13 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002140)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000002180)=r13, 0x4) socket$phonet(0x23, 0x2, 0x1) (async) r14 = socket$phonet(0x23, 0x2, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r14, 0x400c6615, &(0x7f00000021c0)={0x0, @aes128, 0x0, @desc2}) 4.083989529s ago: executing program 1 (id=1448): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000a00", @ANYRES32], 0x58}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$inet(r1, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000280)="2d69a1fe36551ef3a3c3b7bbed246441462b2d1c67e0095ac4c0c935ca7b77d73b08b7ea169033050fb1268660ba5647be12116fc38fb4faaffcb6136dbe0c1bbdc10576acb1d15f62da651c46c3631a5b847d450df5", 0x56}, {&(0x7f00000003c0)="43881edf1797901211112dd9972b6d967fd6e7f6d46a49ab081f09fe48a8920ea58c262684619d8c19cfaa238df2406b72d8c03f509d182c85f37128901f2164a8db3c00e5a0b0243f206d69d6c466047cc6b76e5903f81fd7243b90c006adff79b0aa4277ea0486ffc77c8e7fc5dea1bef64df3b064e1ccab2a9bf2fbf5", 0x7e}, {&(0x7f0000000440)="a9c492dfb5ab40261c318d069bd4935546acfaa5353bc8a5ad3034908fa655f4463fe97691dec56ebb577ea269c45d5650decf4c269d5712d46d9d08a20e0347a408efe1edf27b1f8d20a93a5a87c096ed938a489d", 0x55}, {&(0x7f0000000200)="fd7ff9d4f84c40d2a7c5247902025ddb26f9e3110b8bc3fd29fc88b07fe2a03db28dabbc0f27d77a4710b997f44e6a176e0f5218b5886b71609880bc4e9a424e", 0x40}, {&(0x7f0000000580)="4d3aa64ddf86531ae2bc5e1cca4f8743bcb441f65ee4944d4e86f2ebc13af714ce703bfc101d7186e0812ce0c58df7d20d3598bba1d2de6023875519b44bf2bacefd34b998700eb4fcaabbe0f11e2aae4a8f3acf9fdc1fcfa3189e8f346e511c0fb2eaa5ac771fa18b58d313704fbd7a9fcfd6ea846e13a7f148348c8bcd65ae19e345fea70a7711d6849f41bad3f4f229fc365f867fef47c1888104848de34519965b5ecdbbf31cf1df1f6b5b549b5f865c391bf4d02af3fe41b80da871a4", 0xbf}, {&(0x7f00000004c0)="b8cc2bb9a5795d9023dfc3fa58ed83db1b339f7aef2daf6f393f0a0abfa20261f249a88a6c514407ad4b423ce8e3caafb3ea8e3534351dd93a799834d5f05c727a4834a72a14f89489a3fa39d9a5f2534a577466e70d71297b702e3a1217f8b7643dad725253596944b4f137e6a9e52ed2", 0x71}, {&(0x7f0000000680)="6335eafaddb15d0a9becbad9b4db43bfb2f5f8b39a672ae2258ae63c93b4908067e21e4656c4fffa1d7356dd9e", 0x2d}, {&(0x7f00000006c0)="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", 0x1000}], 0x8, &(0x7f0000001740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x42, [@local, @empty, @remote, @multicast2]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x400}}, @ip_retopts={{0x148, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0x45, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @local]}, @timestamp_prespec={0x44, 0x1c, 0x9f, 0x3, 0x9, [{@private=0xa010102, 0x3ff}, {@private=0xa010101, 0x7}, {@dev={0xac, 0x14, 0x14, 0x7}, 0x8}]}, @timestamp_addr={0x44, 0x54, 0x5a, 0x1, 0x9, [{@multicast1, 0x5}, {@rand_addr=0x64010100, 0x4792}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@loopback, 0xb7}, {@multicast2, 0x3}, {@empty, 0x8}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x80}, {@local, 0x6}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x3c, 0x50, 0x3, 0x0, [{@private=0xa010102, 0x8}, {@dev={0xac, 0x14, 0x14, 0x12}}, {@remote, 0x80000}, {@remote, 0xa}, {@broadcast, 0x4}, {@loopback, 0xd25}, {@multicast1, 0x5}]}, @timestamp_prespec={0x44, 0x2c, 0xe5, 0x3, 0xd, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x5}, {@local, 0x2}, {@local}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x9}, {@local, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x2, 0x3, 0x5, [{@private=0xa010100, 0x2453}, {@loopback, 0x5}, {@remote, 0xffff}, {@private=0xa010100, 0x80000000}]}, @ssrr={0x89, 0xb, 0x81, [@dev={0xac, 0x14, 0x14, 0x14}, @loopback]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0x19, [@broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @rand_addr=0x64010100]}]}}}], 0x1f0}}, {{&(0x7f0000001940)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000001980)="6c323421017cbe8b0370e5b1091ddc4085765accfe9bb6ed176db7c1d0b6dee1cfa801339371115ac6fb049bb6a2", 0x2e}], 0x1}}], 0x2, 0x50) r5 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@map, 0xffffffffffffffff, 0x20, 0x2, 0xffffffffffffffff, @void, @value}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) accept4$unix(r6, &(0x7f0000000140), &(0x7f00000000c0)=0x6e, 0x0) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@bridge_dellink={0x34, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0xa, 0x0, 0x1, [{0x8, 0xf}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x28004001}, 0x60040050) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x44, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}]}]}, 0x44}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x2404c004) 3.90069573s ago: executing program 4 (id=1450): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000001c80)=ANY=[@ANYBLOB="180000000600000000400000000000009500000000000013e8008eefb9931aee01abfe9b9c47583739c80bbc75f05cb9cfc420e3f9dd60a6ebca444fad7d6f657a201c06c3a1606f195ff7bee0dbf5cf3d2732680771d2a867054bc0a845cefb747007205f5743420b1d52a8101804ce1a0dcea47779b1bfc94783296b8213fcbf3fa943c275a93d0a9d4c8236fcdd8e8e85ab72caa6b50991349b1cc298223869add44c3a18b8bd93623c2688c490fa09f66aee4111a72dc8bf9834aac36ddbb3273acbe4ebe39cbdd5a54077f6fde26e297991a8da479bcfc183d9d9fa01d0b143604b4039109d7b7754684ddfc4e6b6903839fd0ed3c63fce25c29c150387e5aa130a0c312e8c63c4a137c9a5a51ab16e01fa0e98b17e03c3382c7b6f00960af68bea9d18b8e51b317cfacf3cc51a7954625698715642b561a5e5c9a7"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) splice(r2, &(0x7f0000000480)=0x6, r3, &(0x7f0000001e40)=0xa980, 0x1ff, 0xa) r4 = socket(0x10, 0x80002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0xfffffffffffffdcb, 0x0}, 0x40) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xa, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, [@func, @ringbuf_query, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000280)='GPL\x00', 0x1ff, 0xf0, &(0x7f0000001b40)=""/240, 0x1e00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0x7, 0x7da, 0x4}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001a00)=[{0x3, 0x2, 0x2, 0xb}, {0x0, 0x5, 0xc, 0x3}, {0x4, 0x2, 0x6}, {0x0, 0x3, 0x8, 0x9}, {0x4, 0x5, 0x7, 0x2}, {0x5, 0x2, 0x2, 0x1}], 0x10, 0x101, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000240)='devlink_trap_report\x00', r9, 0x0, 0xa}, 0x18) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r11, 0xd7735000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r10, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)=[0x0], 0x0, 0xca, 0x0, 0x0, 0x10, &(0x7f0000000500), 0x0, 0x0, 0x2d, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000018c0)={0xffffffffffffffff, 0x20, &(0x7f0000001880)={&(0x7f0000000840)=""/4096, 0x1000, 0x0, &(0x7f0000001840)=""/57, 0x39}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001c40)={0x1}, 0x4) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03000000a070ee86c3b9bd4a7fc2ede2fb5287a504000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x2}, 0x38) 3.544046287s ago: executing program 1 (id=1454): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=@ipv6_newrule={0x30, 0x20, 0xa05, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'lo\x00'}]}, 0x30}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) r3 = socket$kcm(0x10, 0x0, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x220c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x20000005}, 0x8090) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) unshare(0x24020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x2f, &(0x7f0000000040), 0x3b) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d2c651b101fa"}, 0x10) unshare(0x22020600) poll(&(0x7f0000000080)=[{r0, 0x4000}], 0x1, 0xff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.424196658s ago: executing program 4 (id=1456): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001300)={r3, 0x6e2}, &(0x7f0000001340)=0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x2b, 0xb, 0x0, 0x0, {0x4}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x8000) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000240)={r2, 0x3, 0x9, 0xf800, 0xf1, 0x400, 0x2, 0x2, {r4, @in={{0x2, 0x4e24, @multicast1}}, 0x81, 0x10, 0x3, 0x8a, 0xe088}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x465f}, 0x8) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x1000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x79, &(0x7f00000005c0)=ANY=[@ANYBLOB="f84c", @ANYRES32], 0x8) 2.748585294s ago: executing program 2 (id=1463): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000000), &(0x7f00000002c0)=0x4) r1 = socket(0x1e, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, 0x0) 2.478035343s ago: executing program 2 (id=1464): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000010140)=ANY=[@ANYBLOB="4401000010000100000000000000000000000000000000000000ffff7f000001ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000006c000000ffffffff0000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c", @ANYRES32=0x0, @ANYBLOB="50af"], 0x144}}, 0x0) 2.45782216s ago: executing program 1 (id=1465): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r4, 0x2b5}, 0x8) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x2, 0x8000000000400}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x7ca8e000) writev(r1, &(0x7f0000000080)=[{0x0}], 0x1) 2.386142354s ago: executing program 4 (id=1466): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x1, 0x0) recvmmsg$unix(r2, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x21, 0x0) (async) write(r0, &(0x7f0000000180)="665f0f1854a92f7195e36e3e300b01df7a532484fc2edaae7a322fe45da72b5db6995221e8ac2ca48bda8b7270e32230c3713bce67ad9b4f6ac67680f5691900609949578726f0", 0x47) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) (rerun: 64) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x4010, r3, 0xe44a0000) close(r3) 2.220158043s ago: executing program 0 (id=1467): getpid() r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120f000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000ac0)=0x2, 0x12) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x9}]}, 0x30}}, 0x0) 2.218871421s ago: executing program 2 (id=1468): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000000)={&(0x7f0000000240)={0x1d, r2, 0x3, {0x1, 0x0, 0x3}, 0x2}, 0x18, &(0x7f0000000280)={0x0}, 0x3f, 0x0, 0x0, 0x40014}, 0x20004081) accept(r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r4, 0x4, &(0x7f0000000300)="0ccb992fe700df7c193baf12809c15077c1a75d21a958dd9515a79c7c1f325b67e45a67d6e18c25ecb9c36d80ced9ce71cb4c3d9d24d225f3d2cddc8ff7b770adf71ead9b0c675d59774a2c332d4dd2efe50e5d402bdd88f9de0d2a42ecd704dfc6caee49478d8dc321f51037424f9fb164d18607b06daa2d7ecbe667d7d370a193701f55950e6db2a13e72f81bb9eeb0b079caa260870f6850d39f46ab2c377660df63f7e5ca8e3bb2dc16c947418a8a389a9fc232261e213428aec0900f8f8885f619650ae498470aa") r5 = socket$inet6(0xa, 0x6, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES32=r1], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaaf, @void, @value}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffff18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000080)=0x2, 0x4) 2.111749426s ago: executing program 4 (id=1469): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x3ff, 0x89, 0x10, 0x3a}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@ipv6_getnexthop={0x48, 0x6a, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NHA_GROUPS={0x4}, @NHA_ID={0x8}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_FDB={0x4}, @NHA_FDB={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000005) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000001000)={r4}, &(0x7f0000001100)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYBLOB="05000a0002000900ae0fe90001020029030000ff00700906000000"], 0x1c) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f00000010c0)=""/4111, &(0x7f0000000200)=0x100f) 2.008475631s ago: executing program 0 (id=1470): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$bt_BT_VOICE(r0, 0x12, 0xb, 0x0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, 0x0) 1.715763777s ago: executing program 0 (id=1471): r0 = socket$pptp(0x18, 0x1, 0x2) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x0, {0x2, 0xf0, 0x1}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="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", 0x6fa}], 0x1}, 0x4048021) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x388, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@ah={{0x30}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) (async) r4 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x8a, &(0x7f0000000040)=0x7e, 0x4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) (async) listen(r5, 0xa1) (async) ioctl$int_in(r5, 0x5421, &(0x7f0000000040)=0x8) (async) accept4$bt_l2cap(r5, 0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x104, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xc8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xfff1}}, @TCA_BPF_ACT={0xa0, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (async) r6 = socket(0x10, 0x803, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.57896462s ago: executing program 3 (id=1172): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@generic={0xaa, 0x4, 0x2, 0x5, 0x40}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x872}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x75, &(0x7f0000000080)=""/117, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x9, 0x9, 0x4e5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x1], 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=0x1, 0x2f, 0x1, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000400)={0x2, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, r0, 0x2b, 0x2020, 0x0, @void, @void, @value=r3, @void, r2}, 0x20) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000440)=r3, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x140c, 0x411, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x140c, 0x411, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40010) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000640)={0x0, 0x8c, &(0x7f0000000580)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e24, 0x1, @private2, 0x4}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000680)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000640)={0x0, 0x8c, &(0x7f0000000580)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e24, 0x1, @private2, 0x4}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000680)=0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x140f, 0x800, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x229d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8050}, 0xc000005) r6 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r6, &(0x7f0000000800)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000840)=0x20) (async) getpeername$l2tp6(r6, &(0x7f0000000800)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000840)=0x20) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000880)) syz_genetlink_get_family_id$batadv(&(0x7f0000000900), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r7, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x10}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000084}, 0x81) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r7, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x10}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000084}, 0x81) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000a00)=r3, 0x4) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000a00)=r3, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000a40)=@gcm_256={{0x303}, "1352595dfc08636c", "0c6eff935ce44f7d652720498cafd224fb45676c1453b661bbc26216d6363d68", "55c5a50e", "8ddc88be48193441"}, 0x38) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000ac0), r5) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ac0), r5) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r9, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x7c, r10, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2f}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xda}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x4800) r11 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r11, &(0x7f0000001f80)={&(0x7f0000000c00)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c80)="a497c253507e9c9aa9cdbc8147777aa39008f9aad5b6930db40b919d18afabb58cede6c9557de122a23367caba929a14d0d1566fcde428793a760c", 0x3b}, {&(0x7f0000000cc0)="4295671c377f36b762875fa5cf3a9fa05015335a3fdee27e8519943422b9e2ea561b6e7bdbeb95ccd79f2cd93fa7cb07c4222f7631e8ee886dfc03bdae977460726442412d6deea2828cbf8585c4318f84c08ad7f0136d5ad67bb4606664e63e2c6e77ac01c900190aff4e73c23578c22251513be9319d903fc796bc658d8b03acf47f2e9a15e4035e6159701b735a7a49b813844305cc463e669feab583d632e3664775", 0xa4}, {&(0x7f0000000d80)="630712a81fbb1aadfcaec595ee39455a", 0x10}, {&(0x7f0000000dc0)="fabc30397addcf60d4bf714ce9253b90b2c9869e4b4edeae4be6a62b8067105c81f5a7cec3261b0aad949174226491bd59c75eeafa14b80f22baa372d6c47d757f8682e530e2b2e3a180a37a6b124c948d8d2d6e512d07586c9d599f511609b84d05b45bb2d32d2d9df1a2581223af231200b37e210c6ab399b6fca9e483e28c12584cf614953a31428eefa8ec680033f24e42b132d0e88e", 0x98}], 0x4, &(0x7f0000000ec0)=[{0x10, 0x6, 0x7}, {0x1010, 0x10e, 0x10001, "6897d90fc23d7851de43b25262b905092ab4a181eb7e5bed45b85d2d37d483ba7397251b08647325cb9aa5e11ef6c2801a343e355e2233774490ca00103f83e2d6fd63f68125c2782af2cdca16883f881353996fed2546d95be6d2b15cda885462e2ab7a4ab2bef70bbbcfbb7dedc963a50b051b3dca9ec5e689be351f17bd2936e505369062936800fbca571cc76b6c1ffd76201945cfb079240cb7aad4a7c1e57f24e281ec5c75940e7817ecd9750d691d69abf02ff1a91eeeb0b3850986fcd32d77be35979c780ea631632fa39dcc2ecdc1f6a17f7f5227c6a584bf79230688aeaa0b0398febc8d15e23aaafee4ad5674664faa11fdacb5341b98dfb97f1d8e97c3ad106b85f0bf2b6c82e5f066567dbfb3488b9e290d1eb5e3de2ca161d110eed6d0f81d664a76b2b461eae66bf81be5fc685d36d161c84e266566a3bbf40f9ef4c80d4e35a1d11a0c7e6076a36920036bdba282eec29135f11b3ed8beb84b35a4ebaad657e3699aad686ec16813580fd72ba9e5c7a3fb6a1c292b986024ddefc319a080cf6b0c24ef5d20d49a945b194b4dac24fca4cb070e7277d8e11869cec30c0f528a29069fbc0773db0e219eb5dff9a1f338469acf9e2be17277c05c47ccb492975a71112e4b32a82cd74a22ef382453c60bbedca0638a2b8d8e98e0e7dce4b045f25616a43c240b425e53e83b924b8ba7136acfd9aa70c8d76d36db5dcdd3ed04b14ec2beec689e941532f1bcc4609fb3c498146e4e7e83996e8862e7734cfe87470e910042f536799875674b20185fe8c553b376e6a6af2d979ec80374d7e5d333a3f4018710aae49102a28954206f1b8fdbf3bfcbd92bd4090c01fa122d191bd4cd06438753d544e1e86cecb7906906c49d9bc7c8e53df17bdbab7d2adf8f1c0a933da14b3b20ee187a581c24213cd4f713fbd625ff9ca4b67091bf10cd726e9c279698d124fbb760f56c033db032552be60fd85018e1fb3070034a3029ab60ea43016a8a1b18abd61dcc6263097e305c41fbcf646a4a66550e2f2825c986e62e0bb9a6f77f5296faae965707f5297ff56b7a225be6f9b20344d20d1e1337e81ca77847f197493de5d6544409bd02deaed03d737172712490e860687afaf83b2bd33e45d27e2120659c5524dd15cc7ed96ed43785016f597f2124115623b15ea4526896b190a594daee132f531fe9e380e8d70f9a67c92a02209a6637658cf40b4e066041b1c9912b86cbb4429dcb4228f283ea22b4f53615f2d743bcafadd0503a4f4f28b3cba9ea96c1a8e68716617dd2e16406b2dfdbe328194de432707275c92e07548576400ed774fd9bb34f61312e5c87b410fdb96fac2a10eee78789399581bc41bfda4a0e8880da76d90f7303e6ae1e93b6b478cfb30c8f7c04894e9b6866ea2c843fe4fbb1287b76d1ed828af913c8196f5834af637c5a641747b4a8fb0a3629cfc208d3a2f9b106bf076f2eb7771772d209c1fe421e20f89c545d50bfff88a61a9e496fb3d7988ccdc003f90873a1cffd0bafb9468432088d5abed4f012115c9043cead685cb65de2cbc4c8742c1306796812cbb54ce00240239a3243a7c47838fbde5cf4dc5fc7d618508d1fbd55dec44a381a8d6d3f0140251250b9f3c5df592d8eac7d3df75b1c97732404b136f6d8e06347b39a357fcb5b490572d46974b19671de85b26e6d534dff4e6988fae17f5a7f4c0fd1862ab5ce242e3772e4db8954dfa2dc98e2a057ee4b26d45c49a27fb05525ba06aaba05f619064187f95ab3a4cdf327cf31b1b9d88162973f8beac929f6558d713848e84089aa2192e5ed1426b8291b66b90b966c739bb7d45b4f0bcaf279d7ec29dbb220f1b3302101338b7ddfdecaa4812977cdb09e4b8e64f2f081f4579edcfd6113b4ef0fb3ae6b212294055d509d8b27320c4f294e136ef75642471280757aca95cae76c41bc1daa50b74de81ffa559d051fd26b6fb71936e95d8cc7bd5d5759bf124423cb648fd3ffe5b0d570b14a54cebfff8025f178c64fb2adafd18e941a0d7a3cc58d9a62c69b6dbb515ae2ed5468aedb32dd826ed13edb999179ece9d3fa48584e55c9c9abab11850618c41424f6f7f716b1229499d1bf6ad1791f55914e283e86762485fd6d289bece662ec32d06773ece8a58eac398f87f50d74b463222b4e4b909f9411610937cdc98a0deb984a71b707a846f5eace9565542c54a1921fa5091c74161a2955d97bf9b26202eb2523d7614fb5b8e7044d93eb5a2186b3c568190536bbe932d57da67f1952cf4e963fe8227cc8da79564369daaa01a26fe7b54b34853d3db95e16e90b317b3ad105f99ee3592fefb411b68f073ff3f2f1626f916bf75d34d532cc3f9e55ea2519c30b4c976d348ddfaf9ef659a2bad8ae8d93ef93364d090a1d60150b88ec76e5d142b1f2a0a0dc2ead38719d3ae52e7803e11edaa1faa7cc1c388d6ed8b3c0ec4ad6770baaa78ef6e42c127357c6554a0948b10a7701edc65f6ce70f707b7129c14c4337ac1b5eded0704e861ce1b88d1a6ce6c1511a3f42aa6d0da87be208b02179b8d38b81146be156469f50b5c2babc78a92aeb84d049c97172fd36cdac8fde457a66651695cb7f7b9381a46c68f8042b655f5ba9685cb4f774631c0cda5f3528005990208412282a0a18b7623b0fd840607b0769dc00327f5fcf93b6970fe3826c1f8fd44808acd7edd6350d2d5ac3b829c0e58cba6d94f0813489696abfa201ba1fcfea4eb5c9896a1b9cb7fdd909d2bffb028f5621e50def94e5caece4feb7e103022ea34c5130e08a86528141cd3e846d0f4af1947b96586cf3d8ea4d4a6e50d6f3d7e30459e4f5eac53272d2316ea2dc9b7ea773a6b99cc4beab9414498a6ea2823e51a0740e3d76a38b88ec6687d9dd9972b6cb9922ca3074714967694d49683022581bdc3be6f9914fdd51086fcf819d372c26f0e76e0bb375acbab1d32acbbe845590b49bea9153c81bd4ce64bc9fec6284be666b62f56ed63dd06cf1140aed07e2f7e3aa05e9187f2e06ad80b9a0eda2828d49f6f49525a3fa8580904709c2fd53ab9697d48c233549b7b5ec9ee135a9fe9ee228d1a03938f8537e9b1a78759d73beba28dbdb550f1c3028bc06f1dab81c23327008846e6b069319f1f53bc3dc08ad654ee79a968839d39949eb674040e802623b3b1206c124863a6b21dd9cffff024a0b9d985fe5ca4cbcdcd9483328ad16d199824bd4eb4c35de7d060f11285e57129c123f7f965a21a7391da4ef8c486e00891ac56219715a2f17797a7e76a163040bbf0516a2e94d488827eb62d7ef755469aabfac523c2827807a7a292b2d1052035bc5d108bfb50262dda2cdac4bb4fc9baa5b0dc5f1dd21119c68ba4a40552eb4f27ed72764583c52b265252d4a8c65f05280cc202f507f65534421020d63e38f95444ae75db6fd2aba338d93471d1c08950a59d0c528fd305303f8cb747d1976a9750ca231fd7ee3fa7521def928b62f8cf8e8306e5258281697125fca454e3d88c0e6a97bdfd3796dfda5a0dd3b2dc51e7b502e971d5506687a3c884995d950117120341ce83f642c0669576c93f3cb402601c9a46d4e77fca93282de76a03cb51f03d2c455089d79089f684a44650231f8096b7b58d8893c20d393d89a9ee114a118e45b3e98b38588c46f0a1df95d77b2de00f034bb995e1bc246dc48594a546ff11e246d96c95c16f8d19fd3caefc81971661c083f700460e01e4dbfc339114de796b15764fbef36db7016da77f9e567f0218ecda586bae3887d4926c84be9e4cfa97238bf4fe7f17b4d28fd4a529b49baf7a10e8a28f579b7e223fbb8079ae8d275a5948cb9cf3f667c89dbe97c6c184b4a729def92eee87d04d6dcd3bb19a47717361bd211c8043994ed133b43d2ad63e12efc6f1b8330faf84c73d3015141b19ae54d0af4e89e243a272bbdabf14aa919879b8359dda1a3dd1627bbcfa796351ef9cc295468d6614ea610e7a9c1238b0a65de47fdd93de5a815b0924c9cc780433f15a1c4f17c61bb953bd5daf31b623c6b95aaba902288c472552997f5d697a84dad1095e19243705cade1dc96295a3d5302ea9cd96e3f5728b270dc2e47b0cb88c4415d15f4ec298c4e49ddff746758f0e06fde756eac7dd41be636fffb0ad96ed755cd711dba77f39d90720a95360cd199b83ac9111ca95e7a01a5176c5179aca47167cac22602971f966263a8adc452c6a529228a8aa7d2b890dbfa433fb0a2aff0a2f81415c7903bcd253ce6c5a767b6812556ea0646f7d0a3d0871d95c1982c262a4e10c34116687c680baa1276c2e37d5df8e06999b841a26720feecda16067e7ecfff7f9d06cd5748c790c6a47051f540eb7b362b94f44e6f69a7cc06e93958b4fa7eddc2e34376b0c8edf51860951c093f2d05aa516f8ce64b134f7f25aafad6c0fa79f457652069bef69f3c159b250c3e131422e6fcea96fb9afc1f925ba064a578d6899b8db4a1d537b32c23614e7e7ee987c5c32b2f5e7e1759c2968993f4673adeb79ace785de9ddfcfa0e2970b4e9346397c04ce8e5e2fcb45a7968631550c1e2bc7d2869c9bf88d36e81ec1575c7aae173c25a59a8b04a3e5e1cb7c1955ffefba08249b17543ea64ce7d4735ab8580925eee5987b6090c8f37df27056916d1382e4442233e19411437d022541ca406f3e63cce701650de1fb70a4e9c4d9c5f5df374a1bd0e7f6c485e7806996d664c03557ad98970ec3ea7fdc04263be44250f233fcf37201dcd89fb025954dbe4f4772a36b644c7f27a87da656a8904a763682cd60e1a7d31f52cd71aa904d87764d8901c1334c8fff31599093ff08de39f62ba32cda5abba86a461fed9597aa18a20eb3a2eda5068557af241c4253ffadfa51d0199062279e154c45840432416effe510cc3666d34818549a71fbf51462da4bf44a1287e0f3d39075c64053c838f190b6eed0598106f545b33c3492a6ab3d46ec10b38591d17a32f3f8b9536040b7cd0bc6880b0714dc4d2a6d315a7c940f885fc7ecb924b401861d09761ce7a337b96a845e73aab6bbbc1db41891fdeca098b06d331d3befea2727db078bfd827062fab047db851bf1ceb0e69a891827c14949147ffc556b1e60eb34168b9a84a6c06f4e2a0bf3eb28f21272983a3eca8368d92b21e507204f149bde2c882e411fd206e78753a7c1dcf43dd9927d4d7f701de5d735bfc58c69886ebfe7fdc091acbf6af813d0f53868c8e9a568e53f97f4d042fb0dea33d5d6ddb885dce646dff89f68c8e805236c960796f5316041e90e455b72c2d2464d3bd9ae5cc2cfe655a4f8bbc2f3824180b5dcb63fdc8aab55919b499228fdad0c39b77bc8141c713f1799899f069b67076da39b8d280fc70e3c2169e34c5698d6d47d3fc1687fedc2cd7b8d2e464ae8eff9a91ca33adb2905df0f8bf120fa6c37eda3dadf0b750cac03dcbe6607ce11efc5dbe293f46d7bed3c889785d7ac0a2b68e9a3344142e1214da02ed18fd09d2e6e8c535b9aa7f8be078b0491721ba0152ea5f437c4527a9e08e725c03c86f2f92bcfc985a3065e1410472c12b86f4a7c47c484a76068e21db4d7cb8e6e3483affc358c94ebcc301183d0ac5e6a25adddc818fe7ef32734870a983ba7478d11ec438d246126175c8d52c5f04a60bb14763a07a22732b8e68f7200069ebf52c187a6dc6dad55a0f9ec715825962daf3abbd6c5ba5bd776935d64554e27473f82f4bb6dd3ce1c13ca6b90e7a319f13e397c43b327afcf797ec6f34ceda04a2f9ea13"}, {0x30, 0x103, 0x0, "5afb6273ecc707f7f6d0703042aa685ee6c5aa1f1617d90d00f61b"}, {0x40, 0x111, 0x6, "9c4abe764be23aa384f1f80eeb0e6789346d48ebde6e0a99d681b9aa4949ea48b95d978825b3067721f63052"}], 0x1090}, 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002000), r9) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000002100)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x7c, r12, 0x520, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xf0}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2400000}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}]}, 0x7c}}, 0x8000) r13 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002140)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000002180)=r13, 0x4) socket$phonet(0x23, 0x2, 0x1) (async) r14 = socket$phonet(0x23, 0x2, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r14, 0x400c6615, &(0x7f00000021c0)={0x0, @aes128, 0x0, @desc2}) 1.465238704s ago: executing program 0 (id=1472): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000280)=[{{0x2, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x1}, {0x1}}], 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xb, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x4444) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getrule={0x14, 0x22, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) 452.537274ms ago: executing program 0 (id=1473): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000003180)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000380)={@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, 0x5, 0x2, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @null]}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3100000000140004800800024000000000080001400000000074000000060a010400000000000000000100000008000b40000000004c0004804800018007000100727400003c0002800800014000000004080002400000000208000140000000110800014000000015080001400000001e080001400000000408000140000000020900010073797a300000000014000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='dctcp-reno\x00', 0xb) 400.05692ms ago: executing program 1 (id=1474): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r3, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x51}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x40811) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000047cf6c152a4eca61107d5f330398458271c1b91e4d640d676faccdcf593702ef28c2128d23300f95a04cf2a8fa9234a5d6ad2ec1f3d968286bcd9ac8ee13d4569b10b2163d3b106afc29bf6bf4fac30abe6e20bed4de76ac90b2a8e74125cc6f68bf412fa984c793dce5b835b4", @ANYRES16=r0, @ANYBLOB="010000000000020000000a00000008000300", @ANYRES32=r2, @ANYBLOB="0c009900040000007500000004000b00"], 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r3, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x51}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x40811) (async) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000047cf6c152a4eca61107d5f330398458271c1b91e4d640d676faccdcf593702ef28c2128d23300f95a04cf2a8fa9234a5d6ad2ec1f3d968286bcd9ac8ee13d4569b10b2163d3b106afc29bf6bf4fac30abe6e20bed4de76ac90b2a8e74125cc6f68bf412fa984c793dce5b835b4", @ANYRES16=r0, @ANYBLOB="010000000000020000000a00000008000300", @ANYRES32=r2, @ANYBLOB="0c009900040000007500000004000b00"], 0x2c}}, 0x0) (async) 394.114421ms ago: executing program 2 (id=1475): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x28}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4096, 0x564}, {&(0x7f0000000400)=""/106, 0x14}, {&(0x7f0000000740)=""/73, 0x60}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x2, &(0x7f0000003700)={0x77359400}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x48}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 393.364095ms ago: executing program 4 (id=1476): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async, rerun: 64) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r0, r0, 0x4, r0}, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 338.103377ms ago: executing program 0 (id=1477): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) syz_emit_ethernet(0x7a, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@private=0xa010102, 0x10000}, {@multicast1}, {@local}, {@remote}, {@remote}, {@private}]}]}}}}}}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = socket$phonet(0x23, 0x2, 0x1) ppoll(&(0x7f0000000040)=[{r0, 0x1024}, {r0}, {r0, 0x9099}, {r2, 0x4140}, {r1, 0x2000}, {r3, 0x4940}, {r1, 0x4005}, {r1, 0x200f}], 0x8, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000001c0)={[0x4]}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000300)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a87ead}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xa}]}}}]}, 0x3c}}, 0x0) 256.934911ms ago: executing program 1 (id=1478): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000010140)=ANY=[@ANYBLOB="4401000010000100000000000000000000000000000000000000ffff7f000001ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000006c000000ffffffff0000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c", @ANYRES32=0x0, @ANYBLOB="50af"], 0x144}}, 0x0) 195.902414ms ago: executing program 2 (id=1479): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x40000000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x278, 0x0, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x6c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1e}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}]}, @CTA_TUPLE_MASTER={0x70, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010100}}}]}, @CTA_NAT_DST={0x60, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0xfa51}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @CTA_TUPLE_MASTER={0x74, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x37c}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc20}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x84}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}]}, 0x278}, 0x1, 0x0, 0x0, 0x800}, 0x4000091) r1 = socket$inet6(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x8901, &(0x7f0000000040)={r1}) sendmsg$inet(r2, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000080)="90", 0x1}], 0x1}, 0x24004011) (async) sendmsg$inet(r2, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000080)="90", 0x1}], 0x1}, 0x24004011) 147.211621ms ago: executing program 4 (id=1480): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x87, 0x81, &(0x7f00000002c0)="f90000", 0x3) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x1, [0x3]}, 0x6) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000040), 0x4) 71.245674ms ago: executing program 2 (id=1481): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0xc4, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@mpls_uc={0x8847, {[{0x4}, {0x1, 0x0, 0x1}, {0x4}, {0x9}, {0xa1, 0x0, 0x1}, {}, {0x5be}, {0x7}, {0x5, 0x0, 0x1}], @ipv4=@tipc={{0x1a, 0x4, 0x0, 0x7, 0x92, 0x66, 0x0, 0xa0, 0x6, 0x0, @rand_addr=0x64010100, @multicast1, {[@cipso={0x86, 0x20, 0x3, [{0x6, 0xb, "2dc3d6e83646456752"}, {0x5, 0xb, "199cb8090e2f6a44e0"}, {0x4, 0x4, "3403"}]}, @cipso={0x86, 0x2b, 0x2, [{0xa369811e1ddc38a3, 0x4, "e15f"}, {0x6, 0xa, "c05281044a3281c9"}, {0x2, 0x11, "b13cc4d1946276ed36dfb86011da50"}, {0x0, 0x6, "9bdf095d"}]}, @timestamp={0x44, 0x8, 0x5b, 0x0, 0x9, [0x149]}]}}, @payload_named={{{{{0x2a, 0x0, 0x1, 0x0, 0x0, 0xa, 0x0, 0x2, 0x8, 0x0, 0x3, 0x4, 0x2, 0x2, 0x100, 0x1, 0x2, 0x4e23, 0x4e22}, 0x1, 0x4}, 0x2, 0x1}}, [0x0, 0x0]}}}}}}, 0x0) 0s ago: executing program 1 (id=1482): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x12021) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_newvlan={0x17, 0x70, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): sr0' with parent 'hsr' already present! [ 92.554158][ T5846] Cannot create hsr debugfs directory [ 92.813385][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.825934][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.870157][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.881902][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.998946][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.019149][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.048279][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.076314][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.143715][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.172079][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.183540][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.214619][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.273438][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.289268][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.300920][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.315526][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.328804][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.355188][ T52] Bluetooth: hci0: command tx timeout [ 93.417855][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.436713][ T52] Bluetooth: hci3: command tx timeout [ 93.436767][ T5840] Bluetooth: hci1: command tx timeout [ 93.442137][ T5156] Bluetooth: hci2: command tx timeout [ 93.463448][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.470796][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.493149][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.516934][ T5156] Bluetooth: hci4: command tx timeout [ 93.531548][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.557296][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.564496][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.582217][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.593275][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.717659][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.782101][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.813004][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.858297][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.878502][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.885735][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.929905][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.937152][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.981743][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.016786][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.045470][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.052620][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.068982][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.076210][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.100661][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.130103][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.137273][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.157302][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.164533][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.187441][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.227843][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.234999][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.245275][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.252475][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.269227][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.329021][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.589584][ T5836] veth0_vlan: entered promiscuous mode [ 94.669778][ T5836] veth1_vlan: entered promiscuous mode [ 94.819243][ T5836] veth0_macvtap: entered promiscuous mode [ 94.849611][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.889202][ T5836] veth1_macvtap: entered promiscuous mode [ 94.978443][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.998779][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.023588][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.043562][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.083933][ T5841] veth0_vlan: entered promiscuous mode [ 95.096395][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.105419][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.114112][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.123787][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.165857][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.184025][ T5841] veth1_vlan: entered promiscuous mode [ 95.309343][ T5848] veth0_vlan: entered promiscuous mode [ 95.355807][ T5848] veth1_vlan: entered promiscuous mode [ 95.387401][ T5841] veth0_macvtap: entered promiscuous mode [ 95.397661][ T5846] veth0_vlan: entered promiscuous mode [ 95.435022][ T5156] Bluetooth: hci0: command tx timeout [ 95.469617][ T5841] veth1_macvtap: entered promiscuous mode [ 95.487445][ T5846] veth1_vlan: entered promiscuous mode [ 95.498951][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.515542][ T5156] Bluetooth: hci2: command tx timeout [ 95.521012][ T5156] Bluetooth: hci3: command tx timeout [ 95.527601][ T52] Bluetooth: hci1: command tx timeout [ 95.533853][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.598299][ T5156] Bluetooth: hci4: command tx timeout [ 95.606782][ T5848] veth0_macvtap: entered promiscuous mode [ 95.623564][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.663989][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.679857][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.691728][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.701029][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.713240][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.726766][ T5848] veth1_macvtap: entered promiscuous mode [ 95.748898][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.763132][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.769384][ T5846] veth0_macvtap: entered promiscuous mode [ 95.798055][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.813047][ T5846] veth1_macvtap: entered promiscuous mode [ 95.838621][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.879918][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.910199][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.937611][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.954835][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.963946][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.042347][ T5955] macvlan1: entered promiscuous mode [ 96.048899][ T5955] macvlan1: entered allmulticast mode [ 96.055127][ T5955] veth1_vlan: entered allmulticast mode [ 96.064067][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.073157][ T5847] veth0_vlan: entered promiscuous mode [ 96.083069][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.105218][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.118216][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.182457][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.192882][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.207450][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.216679][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.241270][ T5847] veth1_vlan: entered promiscuous mode [ 96.288053][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.307434][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.368350][ T1035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.399639][ T1035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.549619][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.561084][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.572107][ T5847] veth0_macvtap: entered promiscuous mode [ 96.630393][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.652522][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.697890][ T5847] veth1_macvtap: entered promiscuous mode [ 96.771357][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.786908][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.807448][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.861690][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.892426][ T5847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.909912][ T5847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.923911][ T5847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.934669][ T5847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.151687][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 97.206089][ T5975] dummy0: entered promiscuous mode [ 97.213374][ T5975] dummy0: left promiscuous mode [ 97.247991][ T5977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11'. [ 97.262825][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.273958][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.464734][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.472617][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.514651][ T5156] Bluetooth: hci0: command tx timeout [ 97.594797][ T5156] Bluetooth: hci3: command tx timeout [ 97.601043][ T52] Bluetooth: hci1: command tx timeout [ 97.607039][ T5156] Bluetooth: hci2: command tx timeout [ 97.675603][ T52] Bluetooth: hci4: command tx timeout [ 97.739852][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14'. [ 97.789208][ T5990] warning: `syz.2.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.911095][ T5993] netlink: 256 bytes leftover after parsing attributes in process `syz.2.13'. [ 97.960719][ T5993] unsupported nlmsg_type 40 [ 98.129471][ T5917] IPVS: starting estimator thread 0... [ 98.235246][ T5995] IPVS: using max 26 ests per chain, 62400 per kthread [ 98.468692][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 98.552468][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'. [ 98.597701][ T6005] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 98.883774][ T6020] netlink: 32 bytes leftover after parsing attributes in process `syz.4.24'. [ 98.900368][ T6020] netlink: 32 bytes leftover after parsing attributes in process `syz.4.24'. [ 99.031268][ T6024] team0: Device gtp0 is of different type [ 99.446918][ T6045] netlink: 32 bytes leftover after parsing attributes in process `syz.2.32'. [ 99.525624][ T6053] netlink: 'syz.4.35': attribute type 2 has an invalid length. [ 99.563397][ T6056] netlink: 24 bytes leftover after parsing attributes in process `syz.1.33'. [ 99.953024][ T6071] Zero length message leads to an empty skb [ 99.962196][ T6073] netlink: 'syz.3.40': attribute type 23 has an invalid length. [ 100.539803][ T6098] syz.4.46 uses obsolete (PF_INET,SOCK_PACKET) [ 100.586335][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.602427][ T6099] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.683274][ T6101] netlink: 'syz.3.47': attribute type 4 has an invalid length. [ 101.152941][ T6114] netlink: 'syz.4.52': attribute type 10 has an invalid length. [ 101.612804][ T6126] syzkaller0: entered promiscuous mode [ 101.634467][ T6126] syzkaller0: entered allmulticast mode [ 101.836629][ T6138] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.875429][ T6141] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 102.252371][ T6161] netlink: 'syz.0.68': attribute type 4 has an invalid length. [ 102.393334][ T6165] __nla_validate_parse: 5 callbacks suppressed [ 102.393352][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.70'. [ 102.573797][ T6171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.71'. [ 102.942183][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'. [ 102.993358][ T6198] netlink: 'syz.2.73': attribute type 13 has an invalid length. [ 103.153403][ T6198] lo: entered promiscuous mode [ 103.180736][ T6198] lo: entered allmulticast mode [ 103.217894][ T6198] tunl0: entered promiscuous mode [ 103.245529][ T6198] tunl0: entered allmulticast mode [ 103.294848][ T6198] gre0: entered promiscuous mode [ 103.317604][ T6198] gre0: entered allmulticast mode [ 103.347354][ T6212] sctp: [Deprecated]: syz.0.78 (pid 6212) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.347354][ T6212] Use struct sctp_sack_info instead [ 103.347614][ T6198] gretap0: entered promiscuous mode [ 103.375411][ T6198] gretap0: entered allmulticast mode [ 103.385149][ T6198] gretap0: refused to change device tx_queue_len [ 103.391676][ T6198] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 103.607505][ T6215] netlink: 44 bytes leftover after parsing attributes in process `syz.0.79'. [ 103.638220][ T6219] netlink: 40 bytes leftover after parsing attributes in process `syz.4.80'. [ 103.682000][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.80'. [ 103.847087][ T6227] delete_channel: no stack [ 103.859101][ T6227] netlink: 'syz.1.84': attribute type 3 has an invalid length. [ 103.889645][ T6229] netlink: 168 bytes leftover after parsing attributes in process `syz.2.85'. [ 104.199555][ T6245] netlink: 28 bytes leftover after parsing attributes in process `syz.3.87'. [ 104.509795][ T6262] tipc: Invalid UDP bearer configuration [ 104.509858][ T6262] tipc: Enabling of bearer rejected, failed to enable media [ 104.888143][ T6274] tipc: Started in network mode [ 104.897492][ T6274] tipc: Node identity , cluster identity 4711 [ 104.935587][ T6274] tipc: Failed to obtain node identity [ 104.962116][ T6274] tipc: Enabling of bearer rejected, failed to enable media [ 105.022336][ T6278] syzkaller0: entered promiscuous mode [ 105.048181][ T6278] syzkaller0: entered allmulticast mode [ 105.131746][ T6279] macvtap1: entered promiscuous mode [ 105.145609][ T6279] vlan0: entered promiscuous mode [ 105.160190][ T6279] macvtap1: entered allmulticast mode [ 105.183054][ T6279] vlan0: entered allmulticast mode [ 105.194123][ T6279] veth0_vlan: entered allmulticast mode [ 105.204170][ T6279] vlan0: left allmulticast mode [ 105.219866][ T6279] veth0_vlan: left allmulticast mode [ 105.254742][ T6279] vlan0: left promiscuous mode [ 105.306136][ T6281] netem: unknown loss type 0 [ 105.313340][ T6281] netem: change failed [ 105.331702][ T6282] netlink: 56 bytes leftover after parsing attributes in process `syz.0.100'. [ 105.889494][ T6308] netlink: 56 bytes leftover after parsing attributes in process `syz.1.106'. [ 106.183801][ T6321] netlink: 'syz.0.112': attribute type 9 has an invalid length. [ 106.559143][ T6343] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 106.711905][ T6343] syz.2.117 (6343) used greatest stack depth: 17992 bytes left [ 106.991078][ T6360] IPVS: Unknown mcast interface: vcan0 [ 107.498309][ T6389] block nbd4: not configured, cannot reconfigure [ 107.548229][ T6385] can: request_module (can-proto-0) failed. [ 107.823480][ T6403] __nla_validate_parse: 3 callbacks suppressed [ 107.823500][ T6403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'. [ 107.909797][ T6408] ip6gretap0: entered promiscuous mode [ 107.958450][ T6408] macsec1: entered promiscuous mode [ 107.988978][ T6408] ip6gretap0: left promiscuous mode [ 107.991692][ T6412] netlink: 696 bytes leftover after parsing attributes in process `syz.2.138'. [ 108.112312][ T6418] lo: entered allmulticast mode [ 108.124362][ T6417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.140'. [ 108.159903][ T6417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.140'. [ 108.210838][ T6417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.140'. [ 108.218532][ T6424] netlink: 5 bytes leftover after parsing attributes in process `syz.0.142'. [ 108.233083][ T6417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.140'. [ 108.239201][ T6424] 0ªX¹¦D: renamed from gretap0 (while UP) [ 108.252406][ T6417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.140'. [ 108.260007][ T6424] 0ªX¹¦D: entered allmulticast mode [ 108.268116][ T6424] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 108.268371][ T6417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.140'. [ 108.290294][ T6424] netlink: 40 bytes leftover after parsing attributes in process `syz.0.142'. [ 108.416175][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.784843][ T6445] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 108.905910][ T6446] netlink: 'syz.2.149': attribute type 1 has an invalid length. [ 109.453281][ T6466] tipc: Can't bind to reserved service type 1 [ 110.821740][ T6500] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 110.843257][ T6500] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 111.756970][ T52] Bluetooth: hci4: command tx timeout [ 111.996299][ T6610] smc: net device erspan0 applied user defined pnetid SYZ0 [ 112.765441][ T6624] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 112.852807][ T6628] __nla_validate_parse: 41 callbacks suppressed [ 112.852824][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'. [ 113.549399][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'. [ 113.944005][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 113.957037][ T6644] bridge_slave_1: left allmulticast mode [ 113.970157][ T6644] bridge_slave_1: left promiscuous mode [ 113.979517][ T6644] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.512233][ T6644] bridge_slave_0: left allmulticast mode [ 114.533558][ T6644] bridge_slave_0: left promiscuous mode [ 114.574570][ T6644] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.738776][ T6663] netlink: 'syz.4.204': attribute type 11 has an invalid length. [ 114.749577][ T6664] netlink: 'syz.4.204': attribute type 11 has an invalid length. [ 114.777669][ T6648] pim6reg: entered allmulticast mode [ 114.783511][ T6652] pim6reg: left allmulticast mode [ 114.821947][ T6655] team_slave_0: entered promiscuous mode [ 114.827853][ T6655] team_slave_1: entered promiscuous mode [ 115.093958][ T6677] netlink: 44 bytes leftover after parsing attributes in process `syz.3.209'. [ 115.158972][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.209'. [ 115.214984][ T6677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.209'. [ 115.251053][ T6679] netlink: 44 bytes leftover after parsing attributes in process `syz.3.209'. [ 115.408918][ T6691] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 115.416435][ T6691] IPv6: NLM_F_CREATE should be set when creating new route [ 115.423824][ T6691] IPv6: NLM_F_CREATE should be set when creating new route [ 115.431291][ T6691] IPv6: NLM_F_CREATE should be set when creating new route [ 115.502761][ T6691] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 115.734478][ T6707] netlink: 52 bytes leftover after parsing attributes in process `syz.0.219'. [ 115.827290][ T6713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.222'. [ 115.838552][ T6713] netlink: 'syz.2.222': attribute type 8 has an invalid length. [ 116.307956][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.229'. [ 116.346128][ T6740] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 116.422906][ T6748] netlink: 'syz.2.228': attribute type 21 has an invalid length. [ 116.568836][ T6755] tipc: Started in network mode [ 116.599796][ T6755] tipc: Node identity , cluster identity 4711 [ 116.632564][ T6755] netlink: 'syz.1.232': attribute type 1 has an invalid length. [ 116.681299][ T6755] netlink: 'syz.1.232': attribute type 1 has an invalid length. [ 116.722888][ T6764] netlink: 'syz.2.234': attribute type 10 has an invalid length. [ 116.788724][ T6764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.799188][ T6764] team0: Port device bond0 added [ 117.377695][ T6802] netlink: 'syz.4.249': attribute type 3 has an invalid length. [ 117.511958][ T6808] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 117.538673][ T6807] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 117.549284][ T6805] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 117.570853][ T6805] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 117.741116][ T6817] netlink: 'syz.2.255': attribute type 4 has an invalid length. [ 117.750915][ T6818] netlink: 'syz.2.255': attribute type 4 has an invalid length. [ 118.039740][ T6837] __nla_validate_parse: 13 callbacks suppressed [ 118.039761][ T6837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.258'. [ 118.074224][ T6836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.259'. [ 118.327210][ T6847] netlink: 20 bytes leftover after parsing attributes in process `syz.3.263'. [ 118.714259][ T6856] netlink: 24 bytes leftover after parsing attributes in process `syz.0.262'. [ 119.027722][ T6877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.271'. [ 119.200526][ T6885] netlink: 68 bytes leftover after parsing attributes in process `syz.1.274'. [ 119.254197][ T6885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.274'. [ 119.499494][ T6897] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 119.682920][ T6906] netlink: 'syz.0.279': attribute type 10 has an invalid length. [ 119.691468][ T6906] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.715862][ T6906] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.723102][ T6906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.771737][ T6906] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 119.781017][ T6912] netlink: 192 bytes leftover after parsing attributes in process `syz.3.284'. [ 119.790356][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'. [ 119.809677][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'. [ 120.361922][ T6933] netlink: 'syz.1.285': attribute type 83 has an invalid length. [ 120.681385][ T6951] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 120.909393][ T6962] netlink: 'syz.2.295': attribute type 1 has an invalid length. [ 120.931644][ T6962] netlink: 'syz.2.295': attribute type 1 has an invalid length. [ 120.952480][ T6962] netlink: 'syz.2.295': attribute type 2 has an invalid length. [ 120.970285][ T6964] netlink: 'syz.2.295': attribute type 1 has an invalid length. [ 121.014440][ T6964] netlink: 'syz.2.295': attribute type 1 has an invalid length. [ 121.075580][ T6964] netlink: 'syz.2.295': attribute type 2 has an invalid length. [ 121.165912][ T6967] dvmrp1: entered allmulticast mode [ 121.467136][ T6991] ieee802154 phy0 wpan0: encryption failed: -22 [ 121.558367][ T6997] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 121.780535][ T7005] netlink: 'syz.2.307': attribute type 10 has an invalid length. [ 121.789516][ T7005] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.798334][ T7005] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.815057][ T7005] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.822339][ T7005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.829952][ T7005] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.837199][ T7005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.860656][ T7005] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 121.926622][ T7016] Bluetooth: MGMT ver 1.23 [ 122.361184][ T7025] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.383695][ T7037] netlink: 'syz.2.315': attribute type 1 has an invalid length. [ 122.519537][ T7025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.548099][ T7025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.651895][ T7025] veth1_vlan: left allmulticast mode [ 122.663844][ T7025] macvlan1: left promiscuous mode [ 122.670394][ T7025] macvlan1: left allmulticast mode [ 122.714044][ T7025] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.729616][ T7025] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.743586][ T7025] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.752812][ T7025] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.989610][ T7037] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.188268][ T7040] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.239411][ T7040] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 123.245153][ T7066] __nla_validate_parse: 15 callbacks suppressed [ 123.245195][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.322'. [ 123.253579][ T7040] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 123.459342][ T7077] netlink: 'syz.0.324': attribute type 1 has an invalid length. [ 123.597479][ T7081] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 123.637260][ T7077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.324'. [ 123.680336][ T7077] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 123.740441][ T7077] bond2 (unregistering): Released all slaves [ 123.790759][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'. [ 123.884432][ T7092] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 123.909492][ T7092] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 124.124629][ T7103] ieee802154 phy0 wpan0: encryption failed: -22 [ 124.157808][ T7105] netlink: 14 bytes leftover after parsing attributes in process `syz.3.335'. [ 124.247953][ T7105] hsr_slave_0: left promiscuous mode [ 124.269498][ T7105] hsr_slave_1: left promiscuous mode [ 124.274109][ T7118] netlink: 88 bytes leftover after parsing attributes in process `syz.1.338'. [ 124.917962][ T7156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.351'. [ 126.003492][ T7201] netlink: 'syz.4.363': attribute type 21 has an invalid length. [ 126.021909][ T7201] netlink: 128 bytes leftover after parsing attributes in process `syz.4.363'. [ 126.048312][ T7201] netlink: 3 bytes leftover after parsing attributes in process `syz.4.363'. [ 126.368914][ T7213] netlink: 256 bytes leftover after parsing attributes in process `syz.2.368'. [ 126.485139][ T7220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.652663][ T7231] netlink: 'syz.0.374': attribute type 21 has an invalid length. [ 126.671118][ T7231] netlink: 128 bytes leftover after parsing attributes in process `syz.0.374'. [ 126.845374][ T7241] netlink: 'syz.2.375': attribute type 1 has an invalid length. [ 126.884460][ T1140] wlan1: Trigger new scan to find an IBSS to join [ 127.363959][ T7259] syzkaller0: entered promiscuous mode [ 127.374393][ T7259] syzkaller0: entered allmulticast mode [ 127.540671][ T7260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.556346][ T7260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.568109][ T7260] bond0 (unregistering): Released all slaves [ 128.765492][ T7287] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 128.972935][ T7295] __nla_validate_parse: 11 callbacks suppressed [ 128.972955][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.390'. [ 129.011163][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.390'. [ 129.095210][ T7303] syz.0.393: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 129.164069][ T7303] CPU: 1 UID: 0 PID: 7303 Comm: syz.0.393 Not tainted 6.16.0-rc1-syzkaller-00102-g5466491c9e33 #0 PREEMPT(full) [ 129.164097][ T7303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.164116][ T7303] Call Trace: [ 129.164124][ T7303] [ 129.164132][ T7303] dump_stack_lvl+0x189/0x250 [ 129.164178][ T7303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.164209][ T7303] ? __pfx__printk+0x10/0x10 [ 129.164229][ T7303] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 129.164256][ T7303] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 129.164278][ T7303] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 129.164302][ T7303] warn_alloc+0x214/0x310 [ 129.164324][ T7303] ? stack_depot_save_flags+0x429/0x900 [ 129.164352][ T7303] ? __pfx_warn_alloc+0x10/0x10 [ 129.164385][ T7303] ? kasan_save_track+0x4f/0x80 [ 129.164411][ T7303] ? xskq_create+0x56/0x170 [ 129.164434][ T7303] ? xsk_init_queue+0xb0/0x110 [ 129.164455][ T7303] ? xsk_setsockopt+0x43f/0x710 [ 129.164476][ T7303] ? do_sock_setsockopt+0x257/0x3e0 [ 129.164495][ T7303] ? __x64_sys_setsockopt+0x18b/0x220 [ 129.164514][ T7303] ? do_syscall_64+0xfa/0x3b0 [ 129.164528][ T7303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.164569][ T7303] __vmalloc_node_range_noprof+0x125/0x12f0 [ 129.164619][ T7303] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 129.164645][ T7303] ? __kasan_kmalloc+0x93/0xb0 [ 129.164666][ T7303] vmalloc_user_noprof+0xad/0xf0 [ 129.164687][ T7303] ? xskq_create+0xbf/0x170 [ 129.164725][ T7303] xskq_create+0xbf/0x170 [ 129.164756][ T7303] xsk_init_queue+0xb0/0x110 [ 129.164785][ T7303] xsk_setsockopt+0x43f/0x710 [ 129.164814][ T7303] ? __pfx_xsk_setsockopt+0x10/0x10 [ 129.164838][ T7303] ? __lock_acquire+0xab9/0xd20 [ 129.164875][ T7303] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 129.164899][ T7303] ? __pfx_xsk_setsockopt+0x10/0x10 [ 129.164927][ T7303] do_sock_setsockopt+0x257/0x3e0 [ 129.164953][ T7303] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 129.164981][ T7303] ? __fget_files+0x2a/0x420 [ 129.165010][ T7303] __x64_sys_setsockopt+0x18b/0x220 [ 129.165038][ T7303] do_syscall_64+0xfa/0x3b0 [ 129.165054][ T7303] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.165080][ T7303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.165099][ T7303] ? clear_bhb_loop+0x60/0xb0 [ 129.165122][ T7303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.165140][ T7303] RIP: 0033:0x7f88eb98e929 [ 129.165163][ T7303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.165179][ T7303] RSP: 002b:00007f88ec88f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 129.165198][ T7303] RAX: ffffffffffffffda RBX: 00007f88ebbb5fa0 RCX: 00007f88eb98e929 [ 129.165212][ T7303] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 129.165223][ T7303] RBP: 00007f88eba10b39 R08: 0000000000000004 R09: 0000000000000000 [ 129.165234][ T7303] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.165245][ T7303] R13: 0000000000000000 R14: 00007f88ebbb5fa0 R15: 00007ffd5db2c7e8 [ 129.165275][ T7303] [ 129.531299][ T7303] Mem-Info: [ 129.540743][ T7303] active_anon:5513 inactive_anon:0 isolated_anon:0 [ 129.540743][ T7303] active_file:1109 inactive_file:39840 isolated_file:0 [ 129.540743][ T7303] unevictable:768 dirty:42 writeback:0 [ 129.540743][ T7303] slab_reclaimable:10363 slab_unreclaimable:97736 [ 129.540743][ T7303] mapped:29113 shmem:1361 pagetables:1160 [ 129.540743][ T7303] sec_pagetables:0 bounce:0 [ 129.540743][ T7303] kernel_misc_reclaimable:0 [ 129.540743][ T7303] free:1335721 free_pcp:15391 free_cma:0 [ 129.590861][ T7303] Node 0 active_anon:22052kB inactive_anon:0kB active_file:4436kB inactive_file:159156kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116452kB dirty:160kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12036kB pagetables:4500kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 129.624788][ T7303] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 129.658419][ T7303] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.692508][ T7303] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 129.704831][ T7303] Node 0 DMA32 free:1422876kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22204kB inactive_anon:0kB active_file:4436kB inactive_file:157348kB unevictable:1536kB writepending:160kB present:3129332kB managed:2561036kB mlocked:0kB bounce:0kB free_pcp:41496kB local_pcp:22316kB free_cma:0kB [ 129.737700][ T7303] lowmem_reserve[]: 0 0 1 1 1 [ 129.742571][ T7303] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1808kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 129.774572][ T7303] lowmem_reserve[]: 0 0 0 0 0 [ 129.779449][ T7303] Node 1 Normal free:3904620kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20408kB local_pcp:9576kB free_cma:0kB [ 129.862256][ T7303] lowmem_reserve[]: 0 0 0 0 0 [ 129.887249][ T7303] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 129.915046][ T12] wlan1: Trigger new scan to find an IBSS to join [ 129.954136][ T7303] Node 0 DMA32: 359*4kB (UME) 404*8kB (UM) 139*16kB (UM) 208*32kB (UM) 35*64kB (UME) 68*128kB (UM) 38*256kB (UME) 22*512kB (UM) 14*1024kB (UME) 6*2048kB (UM) 330*4096kB (M) = 1423788kB [ 129.976249][ T7303] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 129.979485][ T7334] netlink: 52 bytes leftover after parsing attributes in process `syz.2.401'. [ 129.994037][ T7303] Node 1 Normal: 219*4kB (UME) 50*8kB (UME) 39*16kB (UME) 90*32kB (UME) 19*64kB (UME) 8*128kB (UME) 5*256kB (UME) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 950*4096kB (M) = 3904620kB [ 130.014407][ T7337] netlink: 52 bytes leftover after parsing attributes in process `syz.1.403'. [ 130.088244][ T7303] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 130.114545][ T7303] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 130.123914][ T7303] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 130.152600][ T7303] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 130.164618][ T7303] 42306 total pagecache pages [ 130.169361][ T7303] 0 pages in swap cache [ 130.173543][ T7303] Free swap = 124996kB [ 130.178546][ T7303] Total swap = 124996kB [ 130.182748][ T7303] 2097051 pages RAM [ 130.191321][ T7303] 0 pages HighMem/MovableOnly [ 130.196097][ T7303] 424686 pages reserved [ 130.200271][ T7303] 0 pages cma reserved [ 130.224802][ T7341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.249750][ T7341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.417271][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.411'. [ 130.443595][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.411'. [ 130.543549][ T7351] netlink: 348 bytes leftover after parsing attributes in process `syz.2.411'. [ 130.589267][ T7360] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 130.828171][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.419'. [ 130.851726][ T7373] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 130.871527][ T12] wlan1: Creating new IBSS network, BSSID 8a:a5:73:c9:66:20 [ 130.882574][ T7373] netlink: 60 bytes leftover after parsing attributes in process `syz.4.419'. [ 130.907021][ T7379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.418'. [ 131.191322][ T7390] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 131.575420][ T7405] bridge_slave_1: left allmulticast mode [ 131.581218][ T7405] bridge_slave_1: left promiscuous mode [ 131.606278][ T7405] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.634763][ T7405] bridge_slave_0: left allmulticast mode [ 131.644477][ T7405] bridge_slave_0: left promiscuous mode [ 131.651207][ T7405] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.689347][ T7405] bond0: (slave bridge0): Releasing backup interface [ 131.926421][ T7428] xt_bpf: check failed: parse error [ 132.055679][ T7439] netlink: 'syz.3.440': attribute type 2 has an invalid length. [ 132.091591][ T7438] netlink: 'syz.3.440': attribute type 2 has an invalid length. [ 132.132915][ T7441] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.744661][ T7472] veth5: entered allmulticast mode [ 132.828418][ T7477] syzkaller0: entered promiscuous mode [ 132.844430][ T7477] syzkaller0: entered allmulticast mode [ 132.871077][ T1215] IPVS: starting estimator thread 0... [ 132.884853][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.891258][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.957751][ T7484] tipc: Started in network mode [ 132.966030][ T7484] tipc: Node identity 7f000001, cluster identity 4711 [ 132.995971][ T7484] tipc: Enabled bearer , priority 10 [ 133.025356][ T7492] IPVS: using max 27 ests per chain, 64800 per kthread [ 133.063609][ T7496] Driver unsupported XDP return value 0 on prog (id 231) dev N/A, expect packet loss! [ 133.529249][ T7487] team0 (unregistering): Port device team_slave_0 removed [ 133.568728][ T7487] team0 (unregistering): Port device team_slave_1 removed [ 134.105982][ T1215] tipc: Node number set to 2130706433 [ 134.173103][ T7544] netlink: 'syz.1.466': attribute type 1 has an invalid length. [ 134.268148][ T7550] ipt_ECN: cannot use operation on non-tcp rule [ 134.393290][ T7555] netlink: 'syz.3.469': attribute type 2 has an invalid length. [ 134.431710][ T7561] __nla_validate_parse: 9 callbacks suppressed [ 134.431727][ T7561] netlink: 16 bytes leftover after parsing attributes in process `syz.4.472'. [ 134.434225][ T7555] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.469'. [ 134.501123][ T7555] nbd: must specify a device to reconfigure [ 134.822170][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.473'. [ 134.847334][ T5917] IPVS: starting estimator thread 0... [ 134.954439][ T7580] IPVS: using max 26 ests per chain, 62400 per kthread [ 135.429560][ T7600] netlink: 164 bytes leftover after parsing attributes in process `syz.4.482'. [ 135.462522][ T7605] macvtap1: entered promiscuous mode [ 135.475119][ T7605] vlan0: entered promiscuous mode [ 135.489788][ T7605] macvtap1: entered allmulticast mode [ 135.504410][ T7605] vlan0: entered allmulticast mode [ 135.515094][ T7605] veth0_vlan: entered allmulticast mode [ 135.562651][ T7600] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 135.569374][ T7600] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 135.578453][ T7605] vlan0: left allmulticast mode [ 135.583432][ T7605] veth0_vlan: left allmulticast mode [ 135.597053][ T7605] vlan0: left promiscuous mode [ 135.669586][ T7614] IPVS: length: 78 != 24 [ 135.675903][ T7614] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20003 [ 135.760794][ T7614] IPv6: NLM_F_REPLACE set, but no existing node found! [ 135.879631][ T7622] netlink: 'syz.1.489': attribute type 1 has an invalid length. [ 136.128506][ T7637] tipc: Enabled bearer , priority 0 [ 136.178267][ T7637] syzkaller0: entered promiscuous mode [ 136.183805][ T7637] syzkaller0: entered allmulticast mode [ 136.215827][ T7637] tipc: Resetting bearer [ 136.259951][ T7634] tipc: Resetting bearer [ 136.297583][ T7634] tipc: Disabling bearer [ 136.590291][ T7663] netlink: 'syz.3.501': attribute type 1 has an invalid length. [ 136.681445][ T7663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.720290][ T7673] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 136.790472][ T7676] openvswitch: netlink: Tunnel attr 13 has unexpected len 4 expected 16 [ 136.813081][ T7676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.504'. [ 136.823394][ T7676] netlink: 68 bytes leftover after parsing attributes in process `syz.0.504'. [ 136.840991][ T7676] trusted_key: syz.0.504 sent an empty control message without MSG_MORE. [ 136.928544][ T7680] netlink: 20 bytes leftover after parsing attributes in process `syz.3.505'. [ 137.163359][ T7690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.198021][ T7690] netlink: 14 bytes leftover after parsing attributes in process `syz.4.508'. [ 137.720660][ T7690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.771472][ T7728] xt_cgroup: invalid path, errno=-2 [ 137.798534][ T7690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.820587][ T7729] xt_cgroup: invalid path, errno=-2 [ 137.830063][ T7690] bond0 (unregistering): Released all slaves [ 138.092404][ T7740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.519'. [ 138.155486][ T7741] netlink: 24 bytes leftover after parsing attributes in process `syz.1.519'. [ 138.292209][ T7751] openvswitch: netlink: IP tunnel dst address not specified [ 138.314737][ T7750] openvswitch: netlink: IP tunnel dst address not specified [ 138.769554][ T7778] xt_hashlimit: size too large, truncated to 1048576 [ 138.885306][ T7787] netlink: 'syz.1.530': attribute type 1 has an invalid length. [ 139.236984][ T7787] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 139.254759][ T52] Bluetooth: hci4: link tx timeout [ 139.268594][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.281328][ T5156] Bluetooth: hci4: link tx timeout [ 139.287713][ T5156] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.520891][ T7816] netlink: 'syz.2.536': attribute type 83 has an invalid length. [ 139.541558][ T7816] __nla_validate_parse: 3 callbacks suppressed [ 139.541596][ T7816] netlink: 10 bytes leftover after parsing attributes in process `syz.2.536'. [ 139.800763][ T7835] sit0: entered promiscuous mode [ 139.835711][ T7835] netlink: 'syz.2.540': attribute type 1 has an invalid length. [ 139.868671][ T7835] netlink: 1 bytes leftover after parsing attributes in process `syz.2.540'. [ 139.888003][ T7840] netlink: 32 bytes leftover after parsing attributes in process `syz.3.542'. [ 140.283610][ T7859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.319693][ T7859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.344943][ T7859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.376328][ T7859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.728691][ T7882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.557'. [ 141.010722][ T7896] netlink: 'syz.1.562': attribute type 1 has an invalid length. [ 141.010734][ T7895] netlink: 'syz.4.563': attribute type 178 has an invalid length. [ 141.033690][ T7896] netlink: 'syz.1.562': attribute type 10 has an invalid length. [ 141.051345][ T7896] netlink: 236 bytes leftover after parsing attributes in process `syz.1.562'. [ 141.355083][ T5156] Bluetooth: hci4: command 0x0406 tx timeout [ 141.394950][ T7913] netlink: 'syz.4.565': attribute type 1 has an invalid length. [ 141.651956][ T49] hid-generic 0005:16C4:5505.0001: unknown main item tag 0x6 [ 141.702469][ T49] hid-generic 0005:16C4:5505.0001: unknown main item tag 0x3 [ 141.732801][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.568'. [ 141.772265][ T49] hid-generic 0005:16C4:5505.0001: hidraw0: BLUETOOTH HID v0.8f Device [syz0] on aa:aa:aa:aa:aa:aa [ 141.850585][ T7939] netlink: 108 bytes leftover after parsing attributes in process `syz.0.572'. [ 141.890843][ T7939] netlink: 108 bytes leftover after parsing attributes in process `syz.0.572'. [ 141.933420][ T7939] netlink: 84 bytes leftover after parsing attributes in process `syz.0.572'. [ 142.018032][ T7935] fido_id[7935]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 142.042311][ T7939] lo: entered promiscuous mode [ 142.066847][ T7939] tunl0: entered promiscuous mode [ 142.086336][ T7950] netlink: 'syz.3.574': attribute type 12 has an invalid length. [ 142.100648][ T7939] gre0: entered promiscuous mode [ 142.160698][ T7939] 0ªX¹¦D: entered promiscuous mode [ 142.179489][ T7939] 0ªX¹¦D: left allmulticast mode [ 142.193501][ T7939] erspan0: entered promiscuous mode [ 142.204992][ T7939] ip_vti0: entered promiscuous mode [ 142.426024][ T7950] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 142.436092][ T7954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.704036][ T7978] netlink: 96 bytes leftover after parsing attributes in process `syz.1.579'. [ 142.738279][ T7981] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 142.813651][ T7981] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 142.893797][ T7981] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 143.140606][ T8006] net_ratelimit: 62 callbacks suppressed [ 143.140628][ T8006] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 143.384740][ T8015] nbd0: detected capacity change from 0 to 256 [ 143.401961][ T52] block nbd0: Receive control failed (result -32) [ 143.420765][ T5838] block nbd0: Dead connection, failed to find a fallback [ 143.429395][ T5838] block nbd0: shutting down sockets [ 143.437591][ T5838] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.447586][ T5838] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.456638][ T5838] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.466963][ T5838] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.486872][ T5838] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.496119][ T5838] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.504109][ T5838] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.514482][ T5838] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.522646][ T5838] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.532068][ T5838] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.590890][ T5838] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.616569][ T5838] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.658523][ T5838] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.676748][ T8031] pim6reg1: entered promiscuous mode [ 143.684500][ T8031] pim6reg1: entered allmulticast mode [ 143.692363][ T5838] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.717907][ T5838] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.752373][ T5838] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.777764][ T5838] ldm_validate_partition_table(): Disk read failed. [ 143.801024][ T5838] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.840344][ T5838] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.871337][ T5838] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.891810][ T5838] Buffer I/O error on dev nbd0, logical block 0, async page read [ 143.928152][ T5838] Dev nbd0: unable to read RDB block 0 [ 143.939036][ T5838] nbd0: unable to read partition table [ 143.953322][ T5838] ldm_validate_partition_table(): Disk read failed. [ 143.960974][ T5838] Dev nbd0: unable to read RDB block 0 [ 143.967381][ T5838] nbd0: unable to read partition table [ 144.123306][ T8045] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 144.202584][ T8046] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 144.319535][ T8054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.432832][ T8054] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 144.643031][ T8075] __nla_validate_parse: 11 callbacks suppressed [ 144.643050][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.606'. [ 144.685047][ T8075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.606'. [ 144.741831][ T8082] ip6t_srh: unknown srh match flags 4001 [ 144.959781][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.611'. [ 145.294739][ T8110] netlink: 'syz.2.615': attribute type 4 has an invalid length. [ 145.338443][ T8115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.617'. [ 145.438917][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 145.498990][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.619'. [ 145.511491][ T8123] netlink: 24 bytes leftover after parsing attributes in process `syz.2.619'. [ 145.667715][ T8133] team0: Device gtp0 is of different type [ 145.894834][ T8148] syz.0.628: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 145.924595][ T8150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.626'. [ 145.929120][ T8147] syzkaller1: entered promiscuous mode [ 145.945408][ T8148] CPU: 1 UID: 0 PID: 8148 Comm: syz.0.628 Not tainted 6.16.0-rc1-syzkaller-00102-g5466491c9e33 #0 PREEMPT(full) [ 145.945433][ T8148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.945445][ T8148] Call Trace: [ 145.945452][ T8148] [ 145.945460][ T8148] dump_stack_lvl+0x189/0x250 [ 145.945501][ T8148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.945532][ T8148] ? __pfx__printk+0x10/0x10 [ 145.945553][ T8148] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 145.945575][ T8148] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 145.945597][ T8148] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 145.945621][ T8148] warn_alloc+0x214/0x310 [ 145.945643][ T8148] ? stack_depot_save_flags+0x40/0x900 [ 145.945672][ T8148] ? __pfx_warn_alloc+0x10/0x10 [ 145.945696][ T8148] ? kasan_save_track+0x4f/0x80 [ 145.945725][ T8148] ? xskq_create+0x56/0x170 [ 145.945751][ T8148] ? xsk_init_queue+0xb0/0x110 [ 145.945775][ T8148] ? xsk_setsockopt+0x43f/0x710 [ 145.945798][ T8148] ? do_sock_setsockopt+0x257/0x3e0 [ 145.945819][ T8148] ? __x64_sys_setsockopt+0x18b/0x220 [ 145.945840][ T8148] ? do_syscall_64+0xfa/0x3b0 [ 145.945855][ T8148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.945882][ T8148] __vmalloc_node_range_noprof+0x125/0x12f0 [ 145.945952][ T8148] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 145.945982][ T8148] ? __kasan_kmalloc+0x93/0xb0 [ 145.946005][ T8148] vmalloc_user_noprof+0xad/0xf0 [ 145.946028][ T8148] ? xskq_create+0xbf/0x170 [ 145.946070][ T8148] xskq_create+0xbf/0x170 [ 145.946100][ T8148] xsk_init_queue+0xb0/0x110 [ 145.946130][ T8148] xsk_setsockopt+0x43f/0x710 [ 145.946165][ T8148] ? __pfx_xsk_setsockopt+0x10/0x10 [ 145.946189][ T8148] ? __lock_acquire+0xab9/0xd20 [ 145.946226][ T8148] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 145.946250][ T8148] ? __pfx_xsk_setsockopt+0x10/0x10 [ 145.946277][ T8148] do_sock_setsockopt+0x257/0x3e0 [ 145.946303][ T8148] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 145.946330][ T8148] ? __fget_files+0x2a/0x420 [ 145.946361][ T8148] __x64_sys_setsockopt+0x18b/0x220 [ 145.946391][ T8148] do_syscall_64+0xfa/0x3b0 [ 145.946406][ T8148] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.946434][ T8148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.946452][ T8148] ? clear_bhb_loop+0x60/0xb0 [ 145.946475][ T8148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.946493][ T8148] RIP: 0033:0x7f88eb98e929 [ 145.946511][ T8148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.946526][ T8148] RSP: 002b:00007f88ec88f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 145.946547][ T8148] RAX: ffffffffffffffda RBX: 00007f88ebbb5fa0 RCX: 00007f88eb98e929 [ 145.946561][ T8148] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 145.946571][ T8148] RBP: 00007f88eba10b39 R08: 0000000000000004 R09: 0000000000000000 [ 145.946583][ T8148] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.946594][ T8148] R13: 0000000000000000 R14: 00007f88ebbb5fa0 R15: 00007ffd5db2c7e8 [ 145.946623][ T8148] [ 145.949414][ T8148] Mem-Info: [ 145.950949][ T8147] syzkaller1: entered allmulticast mode [ 145.982526][ T8148] active_anon:5689 inactive_anon:0 isolated_anon:0 [ 145.982526][ T8148] active_file:1158 inactive_file:39873 isolated_file:0 [ 145.982526][ T8148] unevictable:768 dirty:69 writeback:0 [ 145.982526][ T8148] slab_reclaimable:10471 slab_unreclaimable:100349 [ 145.982526][ T8148] mapped:29303 shmem:1370 pagetables:1182 [ 145.982526][ T8148] sec_pagetables:0 bounce:0 [ 145.982526][ T8148] kernel_misc_reclaimable:0 [ 145.982526][ T8148] free:1332972 free_pcp:15169 free_cma:0 [ 146.311496][ T8156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.314405][ T8148] Node 0 active_anon:22756kB inactive_anon:0kB active_file:4632kB inactive_file:159288kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117212kB dirty:276kB writeback:0kB shmem:3944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12332kB pagetables:4588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 146.361181][ T8148] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 146.393208][ T8148] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 146.425852][ T8148] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 146.431781][ T8148] Node 0 DMA32 free:1411872kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22708kB inactive_anon:0kB active_file:4632kB inactive_file:157480kB unevictable:1536kB writepending:276kB present:3129332kB managed:2561036kB mlocked:0kB bounce:0kB free_pcp:39988kB local_pcp:17524kB free_cma:0kB [ 146.469099][ T8148] lowmem_reserve[]: 0 0 1 1 1 [ 146.473892][ T8148] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1808kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 146.503602][ T8148] lowmem_reserve[]: 0 0 0 0 0 [ 146.508463][ T8148] Node 1 Normal free:3905140kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19920kB local_pcp:9088kB free_cma:0kB [ 146.541107][ T8148] lowmem_reserve[]: 0 0 0 0 0 [ 146.549970][ T8148] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 146.570668][ T8148] Node 0 DMA32: 932*4kB (UME) 290*8kB (UM) 84*16kB (UM) 211*32kB (UME) 52*64kB (UM) 42*128kB (UME) 34*256kB (UME) 24*512kB (UM) 14*1024kB (UM) 7*2048kB (UM) 327*4096kB (UM) = 1411904kB [ 146.619701][ T8148] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 146.684611][ T8148] Node 1 Normal: 221*4kB (UME) 50*8kB (UME) 39*16kB (UME) 96*32kB (UME) 24*64kB (UME) 8*128kB (UME) 5*256kB (UME) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 950*4096kB (M) = 3905140kB [ 146.727847][ T8148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 146.740996][ T8148] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 146.750410][ T8148] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 146.761357][ T8148] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 146.794557][ T8148] 42397 total pagecache pages [ 146.799278][ T8148] 0 pages in swap cache [ 146.803450][ T8148] Free swap = 124996kB [ 146.825921][ T8148] Total swap = 124996kB [ 146.830149][ T8148] 2097051 pages RAM [ 146.833969][ T8148] 0 pages HighMem/MovableOnly [ 146.844137][ T8148] 424686 pages reserved [ 146.848745][ T8148] 0 pages cma reserved [ 146.903900][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.634'. [ 146.908905][ T8177] ksmbd: Unknown IPC event: 4, ignore. [ 146.942720][ T8177] xt_nat: multiple ranges no longer supported [ 147.127527][ T8193] netlink: 192 bytes leftover after parsing attributes in process `syz.1.640'. [ 147.139832][ T8195] syzkaller0: entered promiscuous mode [ 147.146692][ T8195] syzkaller0: entered allmulticast mode [ 147.209728][ T8198] netlink: 16 bytes leftover after parsing attributes in process `syz.2.641'. [ 147.295913][ T8202] bridge_slave_1: left promiscuous mode [ 147.308017][ T8202] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.336968][ T8202] bridge_slave_0: left allmulticast mode [ 147.356181][ T8202] bridge_slave_0: left promiscuous mode [ 147.405477][ T8202] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.547781][ T8202] bond0: (slave bridge0): Releasing backup interface [ 147.998786][ T8241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.212776][ T8262] ip6gre1: entered allmulticast mode [ 148.273676][ T8266] netlink: 'syz.4.661': attribute type 2 has an invalid length. [ 148.297493][ T8267] netlink: 'syz.4.661': attribute type 2 has an invalid length. [ 149.041193][ T8298] netlink: 'syz.4.673': attribute type 29 has an invalid length. [ 149.308347][ T8314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.747381][ T8333] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 149.773649][ T8330] __nla_validate_parse: 4 callbacks suppressed [ 149.773668][ T8330] netlink: 32 bytes leftover after parsing attributes in process `syz.0.683'. [ 149.781387][ T8337] netlink: 2 bytes leftover after parsing attributes in process `syz.2.685'. [ 149.819517][ T8336] netlink: 32 bytes leftover after parsing attributes in process `syz.0.683'. [ 149.960814][ T8337] netlink: 80 bytes leftover after parsing attributes in process `syz.2.685'. [ 150.052793][ T8348] netlink: 'syz.3.690': attribute type 4 has an invalid length. [ 150.098841][ T8348] netlink: 'syz.3.690': attribute type 4 has an invalid length. [ 150.260449][ T8363] netlink: 'syz.0.694': attribute type 4 has an invalid length. [ 150.436282][ T8375] raw_sendmsg: syz.0.698 forgot to set AF_INET. Fix it! [ 150.510383][ T8376] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 150.600219][ T8386] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 150.781930][ T8392] syzkaller1: entered promiscuous mode [ 150.806695][ T8392] syzkaller1: entered allmulticast mode [ 150.838272][ T8392] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 150.857552][ T8396] 8021q: VLANs not supported on lo [ 150.908713][ T8398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.705'. [ 150.925920][ T5909] hid-generic 0005:0C45:0004.0002: item fetching failed at offset 0/1 [ 150.942340][ T5909] hid-generic 0005:0C45:0004.0002: probe with driver hid-generic failed with error -22 [ 150.966264][ T8398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.705'. [ 151.349026][ T8419] netlink: 24 bytes leftover after parsing attributes in process `syz.2.713'. [ 151.552371][ T8424] netlink: 'syz.2.714': attribute type 11 has an invalid length. [ 151.560423][ T8424] netlink: 'syz.2.714': attribute type 11 has an invalid length. [ 151.578651][ T8424] netlink: 224 bytes leftover after parsing attributes in process `syz.2.714'. [ 151.808722][ T8434] netlink: 'syz.1.719': attribute type 2 has an invalid length. [ 151.833979][ T8434] netlink: 'syz.1.719': attribute type 1 has an invalid length. [ 151.896053][ T8439] netlink: 'syz.4.720': attribute type 1 has an invalid length. [ 152.209706][ T8452] sctp: [Deprecated]: syz.2.726 (pid 8452) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.209706][ T8452] Use struct sctp_sack_info instead [ 152.284996][ T8452] netlink: 104 bytes leftover after parsing attributes in process `syz.2.726'. [ 152.396048][ T8459] netlink: 192 bytes leftover after parsing attributes in process `syz.4.729'. [ 152.722044][ T8475] netlink: 'syz.2.733': attribute type 1 has an invalid length. [ 152.736172][ T8476] ipt_REJECT: ECHOREPLY no longer supported. [ 152.951742][ T8484] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 153.008256][ T8484] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 153.053190][ T8484] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 153.084664][ T8484] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 153.145665][ T8484] bond3: (slave geneve2): making interface the new active one [ 153.156893][ T8484] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 153.880569][ T8531] bridge_slave_0: left allmulticast mode [ 153.937869][ T8531] bridge_slave_0: left promiscuous mode [ 153.943754][ T8531] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.971836][ T8531] bridge_slave_1: left allmulticast mode [ 153.978667][ T8531] bridge_slave_1: left promiscuous mode [ 153.989900][ T8531] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.037982][ T8531] team0: Port device team_slave_0 removed [ 154.073663][ T8531] team0: Port device team_slave_1 removed [ 154.376157][ T8552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.946394][ T8579] netlink: 'syz.3.754': attribute type 1 has an invalid length. [ 155.306895][ T6191] tipc: Subscription rejected, illegal request [ 156.020898][ T8630] delete_channel: no stack [ 156.141793][ T8621] pimreg: entered allmulticast mode [ 156.309487][ T8645] __nla_validate_parse: 2 callbacks suppressed [ 156.309507][ T8645] netlink: 32 bytes leftover after parsing attributes in process `syz.1.771'. [ 156.344035][ T8644] syzkaller0: entered promiscuous mode [ 156.350427][ T8644] syzkaller0: entered allmulticast mode [ 156.517976][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.773'. [ 156.547120][ T8656] sctp: [Deprecated]: syz.4.772 (pid 8656) Use of int in maxseg socket option. [ 156.547120][ T8656] Use struct sctp_assoc_value instead [ 156.575519][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.773'. [ 156.604813][ T8654] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 156.876975][ T8672] netlink: 'syz.0.776': attribute type 10 has an invalid length. [ 156.907725][ T8673] netdevsim netdevsim3 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.916436][ T8673] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.917345][ T8672] netlink: 40 bytes leftover after parsing attributes in process `syz.0.776'. [ 156.925208][ T8673] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.925268][ T8673] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.977257][ T8672] dummy0: entered promiscuous mode [ 156.993745][ T8672] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 157.037575][ T8682] netlink: 'syz.3.775': attribute type 33 has an invalid length. [ 157.089399][ T8682] netlink: 152 bytes leftover after parsing attributes in process `syz.3.775'. [ 157.236715][ T8691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.283505][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.781'. [ 157.815029][ T8722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.789'. [ 157.855727][ T8721] tipc: Started in network mode [ 157.903912][ T8721] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 157.957564][ T8721] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 158.055267][ T8721] tipc: Enabled bearer , priority 10 [ 158.083158][ T8744] netlink: 'syz.0.792': attribute type 1 has an invalid length. [ 158.102755][ T8721] tipc: Enabling of bearer rejected, failed to enable media [ 158.112542][ T8744] netlink: 244 bytes leftover after parsing attributes in process `syz.0.792'. [ 158.131626][ T8747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.793'. [ 158.162442][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.793'. [ 158.277891][ T8747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.317588][ T8747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.040286][ T8787] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 159.174610][ T5896] tipc: Node number set to 1 [ 159.492859][ T8813] netlink: 'syz.4.810': attribute type 10 has an invalid length. [ 159.520522][ T8813] dummy0: entered promiscuous mode [ 159.532523][ T8813] bridge0: port 3(dummy0) entered blocking state [ 159.557834][ T8813] bridge0: port 3(dummy0) entered disabled state [ 159.578607][ T8813] dummy0: entered allmulticast mode [ 159.612580][ T8813] bridge0: port 3(dummy0) entered blocking state [ 159.619215][ T8813] bridge0: port 3(dummy0) entered forwarding state [ 160.453326][ T8864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.492524][ T8864] netlink: 'syz.1.824': attribute type 1 has an invalid length. [ 160.796709][ T8884] netlink: 'syz.2.828': attribute type 1 has an invalid length. [ 160.799265][ T8887] netlink: 'syz.2.828': attribute type 1 has an invalid length. [ 160.999561][ T8893] netlink: 'syz.4.831': attribute type 4 has an invalid length. [ 161.981502][ T5156] block nbd1: Receive control failed (result -32) [ 162.068552][ T8950] openvswitch: netlink: Flow actions attr not present in new flow. [ 162.118431][ T8951] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.139743][ T8951] bridge0: port 1(bond3) entered blocking state [ 162.158121][ T8951] bridge0: port 1(bond3) entered disabled state [ 162.167425][ T8951] bond3: entered allmulticast mode [ 162.183555][ T8951] bond3: entered promiscuous mode [ 162.343218][ T8964] __nla_validate_parse: 13 callbacks suppressed [ 162.343238][ T8964] netlink: 100 bytes leftover after parsing attributes in process `syz.4.847'. [ 162.427627][ T8967] netlink: 'syz.4.847': attribute type 1 has an invalid length. [ 162.702669][ T8987] netlink: 9 bytes leftover after parsing attributes in process `syz.1.850'. [ 162.785180][ T8987] gretap0: entered promiscuous mode [ 162.974179][ T1151] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 163.317761][ T9013] netlink: 192 bytes leftover after parsing attributes in process `syz.4.861'. [ 163.341772][ T9012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.860'. [ 163.374167][ T9015] netlink: 348 bytes leftover after parsing attributes in process `syz.0.862'. [ 163.436357][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.863'. [ 163.709664][ T9036] netlink: 208 bytes leftover after parsing attributes in process `syz.3.868'. [ 164.257235][ T9059] netlink: 'syz.0.873': attribute type 13 has an invalid length. [ 164.276106][ T9062] netlink: 56 bytes leftover after parsing attributes in process `syz.3.876'. [ 164.292526][ T9062] syz.3.876: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 164.298717][ T9059] netlink: 'syz.0.873': attribute type 17 has an invalid length. [ 164.308133][ T9062] CPU: 1 UID: 0 PID: 9062 Comm: syz.3.876 Not tainted 6.16.0-rc1-syzkaller-00102-g5466491c9e33 #0 PREEMPT(full) [ 164.308169][ T9062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.308185][ T9062] Call Trace: [ 164.308195][ T9062] [ 164.308205][ T9062] dump_stack_lvl+0x189/0x250 [ 164.308255][ T9062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.308296][ T9062] ? __pfx__printk+0x10/0x10 [ 164.308324][ T9062] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 164.308352][ T9062] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 164.308382][ T9062] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 164.308413][ T9062] warn_alloc+0x214/0x310 [ 164.308443][ T9062] ? stack_depot_save_flags+0x40/0x900 [ 164.308480][ T9062] ? __pfx_warn_alloc+0x10/0x10 [ 164.308510][ T9062] ? kasan_save_track+0x4f/0x80 [ 164.308548][ T9062] ? xskq_create+0x56/0x170 [ 164.308582][ T9062] ? xsk_init_queue+0xb0/0x110 [ 164.308612][ T9062] ? xsk_setsockopt+0x43f/0x710 [ 164.308643][ T9062] ? do_sock_setsockopt+0x257/0x3e0 [ 164.308681][ T9062] ? __x64_sys_setsockopt+0x18b/0x220 [ 164.308708][ T9062] ? do_syscall_64+0xfa/0x3b0 [ 164.308728][ T9062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.308764][ T9062] __vmalloc_node_range_noprof+0x125/0x12f0 [ 164.308831][ T9062] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 164.308865][ T9062] ? __kasan_kmalloc+0x93/0xb0 [ 164.308892][ T9062] vmalloc_user_noprof+0xad/0xf0 [ 164.308920][ T9062] ? xskq_create+0xbf/0x170 [ 164.308956][ T9062] xskq_create+0xbf/0x170 [ 164.308997][ T9062] xsk_init_queue+0xb0/0x110 [ 164.309036][ T9062] xsk_setsockopt+0x43f/0x710 [ 164.309073][ T9062] ? __pfx_xsk_setsockopt+0x10/0x10 [ 164.309103][ T9062] ? __lock_acquire+0xab9/0xd20 [ 164.309154][ T9062] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 164.309185][ T9062] ? __pfx_xsk_setsockopt+0x10/0x10 [ 164.309220][ T9062] do_sock_setsockopt+0x257/0x3e0 [ 164.309266][ T9062] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 164.309300][ T9062] ? __fget_files+0x2a/0x420 [ 164.309336][ T9062] __x64_sys_setsockopt+0x18b/0x220 [ 164.309372][ T9062] do_syscall_64+0xfa/0x3b0 [ 164.309392][ T9062] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.309426][ T9062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.309449][ T9062] ? clear_bhb_loop+0x60/0xb0 [ 164.309479][ T9062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.309501][ T9062] RIP: 0033:0x7f312198e929 [ 164.309522][ T9062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.309543][ T9062] RSP: 002b:00007f31227ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 164.309568][ T9062] RAX: ffffffffffffffda RBX: 00007f3121bb5fa0 RCX: 00007f312198e929 [ 164.309585][ T9062] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 164.309600][ T9062] RBP: 00007f3121a10b39 R08: 0000000000000004 R09: 0000000000000000 [ 164.309614][ T9062] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.309628][ T9062] R13: 0000000000000000 R14: 00007f3121bb5fa0 R15: 00007ffd705ce6a8 [ 164.309674][ T9062] [ 164.309806][ T9062] Mem-Info: [ 164.403412][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'. [ 164.561607][ T9062] active_anon:5815 inactive_anon:0 isolated_anon:0 [ 164.561607][ T9062] active_file:1158 inactive_file:39879 isolated_file:0 [ 164.561607][ T9062] unevictable:768 dirty:51 writeback:0 [ 164.561607][ T9062] slab_reclaimable:10755 slab_unreclaimable:104994 [ 164.561607][ T9062] mapped:29317 shmem:1373 pagetables:1191 [ 164.561607][ T9062] sec_pagetables:0 bounce:0 [ 164.561607][ T9062] kernel_misc_reclaimable:0 [ 164.561607][ T9062] free:1329523 free_pcp:13851 free_cma:0 [ 164.614046][ T9058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.875'. [ 164.621649][ T9062] Node 0 active_anon:23260kB inactive_anon:0kB active_file:4632kB inactive_file:159312kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117268kB dirty:200kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12780kB pagetables:4624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 164.637246][ T9058] netlink: 'syz.4.875': attribute type 14 has an invalid length. [ 164.707430][ T9062] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 164.771945][ T9062] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 164.804520][ T9062] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 164.810487][ T9062] Node 0 DMA32 free:1396940kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23212kB inactive_anon:0kB active_file:4632kB inactive_file:157504kB unevictable:1536kB writepending:200kB present:3129332kB managed:2561036kB mlocked:0kB bounce:0kB free_pcp:36236kB local_pcp:18192kB free_cma:0kB [ 164.847426][ T9062] lowmem_reserve[]: 0 0 1 1 1 [ 164.853087][ T9062] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1808kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 164.884795][ T9062] lowmem_reserve[]: 0 0 0 0 0 [ 164.889758][ T9062] Node 1 Normal free:3905668kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19392kB local_pcp:9088kB free_cma:0kB [ 164.921422][ T9062] lowmem_reserve[]: 0 0 0 0 0 [ 164.926288][ T9062] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 164.939329][ T9062] Node 0 DMA32: 763*4kB (UME) 401*8kB (UME) 237*16kB (UME) 37*32kB (UM) 85*64kB (UME) 67*128kB (UME) 50*256kB (UM) 32*512kB (UME) 13*1024kB (UME) 7*2048kB (UME) 321*4096kB (M) = 1396900kB [ 164.967185][ T9062] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 164.981537][ T9062] Node 1 Normal: 225*4kB (UME) 50*8kB (UME) 39*16kB (UME) 106*32kB (UME) 27*64kB (UME) 8*128kB (UME) 5*256kB (UME) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 950*4096kB (M) = 3905668kB [ 165.000388][ T9062] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 165.010090][ T9062] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 165.025682][ T9062] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 165.040653][ T9062] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 165.050511][ T9062] 42408 total pagecache pages [ 165.055647][ T9062] 0 pages in swap cache [ 165.060992][ T9062] Free swap = 124996kB [ 165.066232][ T9062] Total swap = 124996kB [ 165.070662][ T9062] 2097051 pages RAM [ 165.076660][ T9062] 0 pages HighMem/MovableOnly [ 165.081879][ T9062] 424686 pages reserved [ 165.086520][ T9062] 0 pages cma reserved [ 166.055395][ T9059] lo: left promiscuous mode [ 166.095350][ T9059] tunl0: left promiscuous mode [ 166.102412][ T9059] gre0: left promiscuous mode [ 166.171779][ T9059] 0ªX¹¦D: left promiscuous mode [ 166.179822][ T9068] netlink: 'syz.2.877': attribute type 83 has an invalid length. [ 166.199748][ T9059] erspan0: left promiscuous mode [ 166.212116][ T9059] ip_vti0: left promiscuous mode [ 166.231980][ T9059] dummy0: left promiscuous mode [ 166.240205][ T9059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.454075][ T9081] netlink: 'syz.1.880': attribute type 32 has an invalid length. [ 166.603624][ T9081] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 166.625197][ T9083] SET target dimension over the limit! [ 167.360412][ T9128] __nla_validate_parse: 6 callbacks suppressed [ 167.360433][ T9128] netlink: 24 bytes leftover after parsing attributes in process `syz.3.892'. [ 167.637673][ T9139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.896'. [ 167.669851][ T9141] vlan2: entered promiscuous mode [ 167.682250][ T9141] bridge0: entered promiscuous mode [ 168.117770][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.906'. [ 168.343068][ T9183] netlink: 184 bytes leftover after parsing attributes in process `syz.1.911'. [ 168.889947][ T9206] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 169.859052][ T9239] netlink: 'syz.4.935': attribute type 26 has an invalid length. [ 169.909856][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.935'. [ 169.931867][ T9239] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.008373][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.939'. [ 170.052955][ T9246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.939'. [ 170.099240][ T9239] bridge_slave_1 (unregistering): left allmulticast mode [ 170.109566][ T9239] bridge_slave_1 (unregistering): left promiscuous mode [ 170.117331][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.941'. [ 170.120815][ T9239] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.368925][ T9271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.943'. [ 170.438284][ T9276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.946'. [ 170.463482][ T9276] xt_TCPMSS: Only works on TCP SYN packets [ 171.064373][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 171.196735][ T9325] C: renamed from lo [ 171.239433][ T9325] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 171.317589][ T9321] xt_CT: No such helper "pptp" [ 172.048965][ T9365] netlink: 'syz.3.974': attribute type 10 has an invalid length. [ 172.071952][ T9369] xt_bpf: check failed: parse error [ 172.079807][ T9366] xt_bpf: check failed: parse error [ 172.709978][ T9398] bridge0: port 1(gretap0) entered blocking state [ 172.729550][ T9398] bridge0: port 1(gretap0) entered disabled state [ 172.765845][ T9398] gretap0: entered allmulticast mode [ 172.774747][ T9404] __nla_validate_parse: 6 callbacks suppressed [ 172.774764][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.985'. [ 172.847306][ T9403] netlink: 'syz.3.986': attribute type 1 has an invalid length. [ 173.211075][ T30] audit: type=1800 audit(1749881593.786:2): pid=9417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.990" name="cgroup.controllers" dev="tmpfs" ino=1102 res=0 errno=0 [ 173.853416][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1000'. [ 174.157962][ T9470] : renamed from bond0 (while UP) [ 174.201304][ T9470] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 174.502539][ T9483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.662086][ T9482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.744290][ T9501] netlink: 'syz.3.1011': attribute type 1 has an invalid length. [ 174.805418][ T9506] openvswitch: netlink: Message has 4 unknown bytes. [ 174.842583][ T9501] 8021q: adding VLAN 0 to HW filter on device bond5 [ 175.052703][ T9511] 8021q: adding VLAN 0 to HW filter on device bond5 [ 175.105489][ T9511] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 175.128440][ T9517] netlink: 'syz.4.1015': attribute type 32 has an invalid length. [ 175.146412][ T9511] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 175.165027][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1015'. [ 175.262194][ T9525] netlink: 'syz.2.1017': attribute type 1 has an invalid length. [ 175.287449][ T9524] netlink: 'syz.2.1017': attribute type 1 has an invalid length. [ 175.332039][ T9501] gretap1: entered promiscuous mode [ 175.378777][ T9501] bond5: (slave gretap1): making interface the new active one [ 175.409822][ T9501] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 175.433576][ T9513] bond5: (slave vlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 175.479681][ T9517] (unnamed net_device) (uninitialized): option coupled_control: invalid value (2) [ 175.491831][ T9525] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 175.493053][ T9524] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 175.728761][ T9543] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1020'. [ 175.955497][ T9548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1022'. [ 175.999514][ T9548] netlink: 'syz.0.1022': attribute type 1 has an invalid length. [ 176.007964][ T9548] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1022'. [ 176.344495][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1031'. [ 176.384701][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1031'. [ 176.549293][ T9584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1036'. [ 177.437046][ T9648] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1054'. [ 178.604187][ T9704] can: request_module (can-proto-3) failed. [ 178.648129][ T9713] batadv1: entered allmulticast mode [ 178.720879][ T9718] netlink: 'syz.0.1074': attribute type 29 has an invalid length. [ 178.729283][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'. [ 179.238152][ T9744] xt_nat: multiple ranges no longer supported [ 179.381559][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1084'. [ 179.390857][ T9751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1084'. [ 179.788522][ T9775] xt_policy: neither incoming nor outgoing policy selected [ 179.807318][ T9776] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1092'. [ 180.302693][ T9809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1102'. [ 180.331357][ T9811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1103'. [ 180.387863][ T9811] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 180.388910][ T9809] 8021q: adding VLAN 0 to HW filter on device bond6 [ 180.419460][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1102'. [ 180.438599][ T9811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.504877][ T9811] IPv6: sit1: Disabled Multicast RS [ 180.648644][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1107'. [ 180.748252][ T9831] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 180.769715][ T9831] team0: Device ipvlan2 is already an upper device of the team interface [ 180.851095][ T9841] 8021q: VLANs not supported on caif0 [ 180.918031][ T9831] netlink: 'syz.2.1108': attribute type 66 has an invalid length. [ 181.126287][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1114'. [ 181.167773][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1114'. [ 181.202341][ T9853] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 181.250607][ T9849] nbd: nbd0 already in use [ 181.708962][ T9886] netlink: 'syz.0.1122': attribute type 10 has an invalid length. [ 182.347265][ T9923] openvswitch: netlink: Duplicate or invalid key (type 0). [ 182.364892][ T9923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.466026][ T9931] netlink: 'syz.0.1140': attribute type 10 has an invalid length. [ 182.474139][ T9931] bridge_slave_1: left allmulticast mode [ 182.484991][ T9931] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 182.752161][ T9948] netlink: 'syz.4.1145': attribute type 11 has an invalid length. [ 182.769479][ T9948] x_tables: duplicate underflow at hook 1 [ 183.426026][ T9973] Cannot find del_set index 128 as target [ 183.932328][T10004] __nla_validate_parse: 27 callbacks suppressed [ 183.932347][T10004] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1166'. [ 183.977037][T10010] tipc: Enabling of bearer rejected, failed to enable media [ 184.159059][T10011] tipc: Enabling of bearer rejected, failed to enable media [ 184.390826][ T3512] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.466072][T10022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'. [ 184.602258][ T3512] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.763970][ T3512] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.879997][ T3512] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.041332][T10044] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1179'. [ 185.056251][T10045] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1178'. [ 185.182463][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.192071][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.200392][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.212104][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.225283][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 185.405500][T10062] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1184'. [ 185.501771][T10065] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.1185'. [ 185.675099][ T3512] bond3: left allmulticast mode [ 185.690519][ T3512] bond3: left promiscuous mode [ 185.704665][ T3512] bridge0: port 1(bond3) entered disabled state [ 185.771057][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1187'. [ 185.997012][ T3512] bond5 (unregistering): (slave gretap1): Releasing active interface [ 186.038243][T10086] Bluetooth: MGMT ver 1.23 [ 186.318384][ T3512] bond0 (unregistering): Released all slaves [ 186.335391][ T3512] bond1 (unregistering): Released all slaves [ 186.351619][ T3512] bond2 (unregistering): Released all slaves [ 186.447672][ T3512] bond3 (unregistering): Released all slaves [ 186.463773][ T3512] bond4 (unregistering): Released all slaves [ 186.550756][ T3512] bond5 (unregistering): Released all slaves [ 186.635141][ T3512] bond6 (unregistering): Released all slaves [ 186.857632][T10095] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1191'. [ 187.279595][ T5840] Bluetooth: hci0: command tx timeout [ 187.291760][T10048] chnl_net:caif_netlink_parms(): no params data found [ 187.313101][T10110] syz.1.1196 uses old SIOCAX25GETINFO [ 187.397082][T10113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1196'. [ 187.509014][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1195'. [ 187.564972][T10113] xfrm1: entered promiscuous mode [ 187.570088][T10113] xfrm1: entered allmulticast mode [ 187.899214][T10132] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 187.912816][T10125] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 187.965749][T10125] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 188.386481][T10048] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.423809][T10048] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.440472][T10048] bridge_slave_0: entered allmulticast mode [ 188.461020][T10048] bridge_slave_0: entered promiscuous mode [ 188.510122][T10048] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.541284][T10048] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.569736][T10048] bridge_slave_1: entered allmulticast mode [ 188.611467][T10048] bridge_slave_1: entered promiscuous mode [ 188.723821][T10171] netlink: 'syz.2.1207': attribute type 1 has an invalid length. [ 188.820963][T10177] Cannot find del_set index 5 as target [ 188.860534][T10180] netlink: 'syz.1.1208': attribute type 1 has an invalid length. [ 189.348691][T10186] __nla_validate_parse: 6 callbacks suppressed [ 189.348711][T10186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1209'. [ 189.360803][ T5840] Bluetooth: hci0: command tx timeout [ 189.672223][T10167] veth0: entered promiscuous mode [ 189.703369][T10172] veth0: left promiscuous mode [ 189.714580][T10180] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 189.724970][T10048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.775914][T10048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.029097][T10201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1213'. [ 190.077637][T10048] team0: Port device team_slave_0 added [ 190.107492][T10048] team0: Port device team_slave_1 added [ 190.154838][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1214'. [ 190.352343][T10218] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1217'. [ 190.459537][T10048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.477164][T10048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.530330][T10048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.567127][T10048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.603232][T10048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.663766][T10048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.700824][ T3512] IPVS: stop unused estimator thread 0... [ 190.722886][T10238] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 190.922034][T10244] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1220'. [ 190.966664][T10048] hsr_slave_0: entered promiscuous mode [ 191.000700][T10048] hsr_slave_1: entered promiscuous mode [ 191.214926][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1222'. [ 191.375225][T10270] netlink: 'syz.4.1226': attribute type 1 has an invalid length. [ 191.408141][T10266] netlink: 'syz.2.1225': attribute type 1 has an invalid length. [ 191.434503][ T5840] Bluetooth: hci0: command tx timeout [ 191.446816][T10266] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1225'. [ 191.468809][T10270] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.599027][T10273] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.616771][T10273] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 191.676960][T10273] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 191.714860][T10282] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1229'. [ 191.817573][T10278] veth3: entered promiscuous mode [ 191.841743][T10278] bond2: (slave veth3): Enslaving as an active interface with a down link [ 191.884984][T10283] gretap0: entered allmulticast mode [ 191.938824][T10283] bond2: (slave gretap0): making interface the new active one [ 191.962162][T10283] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 192.131900][T10301] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1234'. [ 192.243889][T10307] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1236'. [ 193.299727][T10048] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 193.326114][T10048] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 193.469044][T10369] xt_TCPMSS: Only works on TCP SYN packets [ 193.493555][T10357] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.516348][ T5840] Bluetooth: hci0: command tx timeout [ 193.659849][T10048] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 193.701637][T10048] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 193.806718][T10357] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.948447][T10357] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.061002][T10357] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.110970][T10390] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 194.312524][T10357] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.329712][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.329796][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.342903][T10399] netlink: 'syz.1.1254': attribute type 39 has an invalid length. [ 194.345326][ T6191] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 194.467713][T10357] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.485635][T10048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.514191][T10357] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.518318][T10401] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 194.557823][T10357] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.570868][T10401] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 194.605332][T10048] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.642829][ T6191] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.650079][ T6191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.709137][ T6191] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.716396][ T6191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.771075][T10405] __nla_validate_parse: 7 callbacks suppressed [ 194.771095][T10405] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1256'. [ 194.907302][T10048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.445773][T10437] netlink: 'syz.4.1263': attribute type 1 has an invalid length. [ 195.838443][T10437] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.947455][T10443] bond3: (slave gretap1): making interface the new active one [ 195.978397][T10443] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 196.102066][T10048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.261622][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1267'. [ 196.283845][T10459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.309045][T10048] veth0_vlan: entered promiscuous mode [ 196.458746][T10048] veth1_vlan: entered promiscuous mode [ 196.590197][T10048] veth0_macvtap: entered promiscuous mode [ 196.619526][T10048] veth1_macvtap: entered promiscuous mode [ 196.679821][T10048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.689552][T10466] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.721174][T10048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.767829][T10048] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.830886][T10048] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.837182][T10475] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1270'. [ 196.846349][T10048] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.890493][T10479] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1270'. [ 196.899439][T10048] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.960736][T10475] 0ªX¹¦D: entered promiscuous mode [ 196.983021][T10482] netlink: 'syz.2.1273': attribute type 4 has an invalid length. [ 197.013701][T10479] 1ªX¹¦D: renamed from 30ªX¹¦D [ 197.026527][T10479] 1ªX¹¦D: left promiscuous mode [ 197.032314][T10479] 1ªX¹¦D: entered allmulticast mode [ 197.043245][T10479] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 197.267035][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.291365][T10493] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1275'. [ 197.308576][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.335499][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1276'. [ 197.436709][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.468600][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.686470][T10505] x_tables: duplicate underflow at hook 2 [ 197.903351][T10512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1280'. [ 198.242108][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.406442][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.577833][T10538] netlink: 'syz.2.1285': attribute type 1 has an invalid length. [ 198.682853][T10538] 8021q: adding VLAN 0 to HW filter on device bond4 [ 198.913545][T10553] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1287'. [ 199.001532][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.084143][T10564] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 199.101284][T10553] 1ªX¹¦D: entered promiscuous mode [ 199.111813][T10552] netlink: 'syz.0.1287': attribute type 10 has an invalid length. [ 199.125851][T10563] netlink: 'syz.2.1289': attribute type 1 has an invalid length. [ 199.133815][T10553] 1ªX¹¦D: left allmulticast mode [ 199.150955][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1288'. [ 199.201635][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.210594][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 199.218848][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 199.237346][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 199.246013][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 199.449923][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.528313][T10552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.544564][T10552] team0: Device bond0 failed to register rx_handler [ 200.138594][T10594] xt_policy: too many policy elements [ 200.542523][ T50] bridge_slave_1: left allmulticast mode [ 200.570280][ T50] bridge_slave_1: left promiscuous mode [ 200.587605][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.656151][ T50] bridge_slave_0: left allmulticast mode [ 200.661892][ T50] bridge_slave_0: left promiscuous mode [ 200.685485][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.765855][T10619] netlink: 'syz.2.1299': attribute type 1 has an invalid length. [ 201.338673][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.353871][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.359421][ T5156] Bluetooth: hci0: command tx timeout [ 201.380137][ T50] bond0 (unregistering): Released all slaves [ 201.414859][T10615] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 201.490991][T10623] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 201.540722][T10619] 8021q: adding VLAN 0 to HW filter on device bond5 [ 201.586051][T10625] bond5: (slave veth5): Enslaving as an active interface with a down link [ 201.611309][T10630] bond5: (slave veth0_to_bond): making interface the new active one [ 201.621354][T10630] veth0_to_bond: entered promiscuous mode [ 201.628345][T10630] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 201.661160][T10647] netlink: 'syz.4.1302': attribute type 2 has an invalid length. [ 201.899168][T10656] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1303'. [ 202.022439][T10665] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1308'. [ 202.117144][T10669] netlink: 'syz.2.1309': attribute type 83 has an invalid length. [ 202.152814][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1306'. [ 202.196132][T10671] team0: Device vti0 is of different type [ 202.207324][T10659] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1306'. [ 202.252950][ T1035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.277779][ T1035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.463283][ T50] hsr_slave_0: left promiscuous mode [ 202.495918][ T50] hsr_slave_1: left promiscuous mode [ 202.517268][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.536025][T10688] netlink: 'syz.1.1311': attribute type 7 has an invalid length. [ 202.552445][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.646185][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.684412][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.802119][ T50] veth1_macvtap: left promiscuous mode [ 202.816263][ T50] veth0_macvtap: left promiscuous mode [ 202.822184][ T50] veth1_vlan: left promiscuous mode [ 202.834633][ T50] veth0_vlan: left promiscuous mode [ 203.378765][T10713] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1315'. [ 203.395010][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1315'. [ 203.434510][ T5156] Bluetooth: hci0: command tx timeout [ 203.470031][T10715] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1315'. [ 203.632302][ T50] team0 (unregistering): Port device team_slave_1 removed [ 203.680384][ T50] team0 (unregistering): Port device team_slave_0 removed [ 204.040799][T10688] : entered promiscuous mode [ 204.049438][T10701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1314'. [ 204.123444][T10713] bridge_slave_0: invalid flags given to default FDB implementation [ 204.196235][T10566] chnl_net:caif_netlink_parms(): no params data found [ 204.349003][T10723] gtp0: entered promiscuous mode [ 204.371566][T10720] netlink: 'syz.4.1318': attribute type 33 has an invalid length. [ 204.402600][T10720] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1318'. [ 204.452162][T10724] gre1: entered promiscuous mode [ 204.515683][T10724] gre1: entered allmulticast mode [ 204.656578][T10566] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.698595][T10566] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.714573][T10566] bridge_slave_0: entered allmulticast mode [ 204.732866][T10566] bridge_slave_0: entered promiscuous mode [ 204.763982][T10566] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.778588][T10566] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.834558][T10566] bridge_slave_1: entered allmulticast mode [ 204.857887][T10566] bridge_slave_1: entered promiscuous mode [ 204.877435][T10756] netlink: 'syz.1.1323': attribute type 1 has an invalid length. [ 204.948158][T10765] SET target dimension over the limit! [ 204.982740][T10751] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1322'. [ 205.080884][ T12] bridge0: port 3(dummy0) entered disabled state [ 205.138400][T10566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.153257][T10774] xt_hashlimit: size too large, truncated to 1048576 [ 205.207712][T10566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.408686][T10566] team0: Port device team_slave_0 added [ 205.429241][T10781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.492078][T10566] team0: Port device team_slave_1 added [ 205.514493][ T5156] Bluetooth: hci0: command tx timeout [ 205.826991][T10566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.845759][T10566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.881255][T10566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.927125][T10566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.945263][ T5156] Bluetooth: hci4: link tx timeout [ 205.950457][ T5156] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 205.950654][T10566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.001445][T10566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.172824][T10566] hsr_slave_0: entered promiscuous mode [ 206.220358][T10566] hsr_slave_1: entered promiscuous mode [ 207.594626][ T5840] Bluetooth: hci0: command tx timeout [ 207.648024][T10863] syzkaller1: entered promiscuous mode [ 207.654374][T10863] syzkaller1: entered allmulticast mode [ 207.842118][T10897] __nla_validate_parse: 8 callbacks suppressed [ 207.842138][T10897] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1355'. [ 207.943636][T10901] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1356'. [ 208.009061][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 208.084045][T10904] xt_connbytes: Forcing CT accounting to be enabled [ 208.205050][T10908] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1358'. [ 208.310350][T10904] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1357'. [ 208.461813][T10566] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 208.483323][T10918] ipt_rpfilter: unknown options [ 208.489387][T10918] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1360'. [ 208.535472][T10566] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 208.633215][T10566] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 208.654059][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1362'. [ 208.713214][T10566] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 208.810097][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1362'. [ 209.009679][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1362'. [ 209.127308][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1362'. [ 209.222334][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1362'. [ 209.564569][T10566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.642949][T10566] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.706013][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.713230][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.853933][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.861212][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.894764][T10969] TCP: TCP_TX_DELAY enabled [ 209.929706][T10969] netlink: 'syz.0.1368': attribute type 1 has an invalid length. [ 210.059397][T10969] bond4: entered promiscuous mode [ 210.086938][T10969] 8021q: adding VLAN 0 to HW filter on device bond4 [ 210.193996][T10982] Bluetooth: MGMT ver 1.23 [ 210.267439][T10977] 8021q: adding VLAN 0 to HW filter on device bond5 [ 210.322017][T10977] bond4: (slave bond5): making interface the new active one [ 210.361211][T10977] bond5: entered promiscuous mode [ 210.386925][T10977] bond4: (slave bond5): Enslaving as an active interface with an up link [ 210.458583][T10982] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 210.894811][T11006] netlink: 'syz.0.1375': attribute type 2 has an invalid length. [ 211.260565][T10566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.437489][T10566] veth0_vlan: entered promiscuous mode [ 211.476739][T10566] veth1_vlan: entered promiscuous mode [ 211.579922][T10566] veth0_macvtap: entered promiscuous mode [ 211.620797][T10566] veth1_macvtap: entered promiscuous mode [ 211.702877][T10566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.757060][ T5917] page_pool_release_retry() stalled pool shutdown: id 31, 1 inflight 60 sec [ 211.757750][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 211.772331][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 211.774306][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 211.799424][T10566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.835112][T10566] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.843896][T10566] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.855150][T10566] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.863902][T10566] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.125838][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.150660][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.292621][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.321010][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.866508][ T1151] veth0_to_bond: left promiscuous mode [ 212.941571][T11077] __nla_validate_parse: 9 callbacks suppressed [ 212.941607][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1389'. [ 213.241563][T11088] netlink: 'syz.2.1390': attribute type 2 has an invalid length. [ 213.314481][T11086] netlink: 'syz.2.1390': attribute type 1 has an invalid length. [ 213.348743][ T1151] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.364830][T11089] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1390'. [ 213.393335][T11094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1391'. [ 213.444112][T11090] netlink: 'syz.0.1391': attribute type 29 has an invalid length. [ 213.458440][T11090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1391'. [ 213.593610][ T1151] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.912914][T11106] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1392'. [ 213.929978][ T1151] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.025586][T11107] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 214.025875][T11099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1392'. [ 214.054681][ T5896] IPVS: starting estimator thread 0... [ 214.191058][ T1151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.204480][T11108] IPVS: using max 26 ests per chain, 62400 per kthread [ 214.612628][ T1151] bridge_slave_1: left allmulticast mode [ 214.628671][ T1151] bridge_slave_1: left promiscuous mode [ 214.641979][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.686340][ T1151] bridge_slave_0: left allmulticast mode [ 214.714491][ T1151] bridge_slave_0: left promiscuous mode [ 214.720337][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.853917][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.863463][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.888026][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.898485][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.911075][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.706340][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.740028][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.767188][ T1151] bond0 (unregistering): Released all slaves [ 216.081122][T10888] Set syz1 is full, maxelem 65536 reached [ 216.202328][T11160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1400'. [ 216.451032][ T1151] hsr_slave_0: left promiscuous mode [ 216.459921][ T1151] hsr_slave_1: left promiscuous mode [ 216.483867][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.492932][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.507525][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.518325][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.562868][ T1151] veth1_macvtap: left promiscuous mode [ 216.580562][ T1151] veth0_macvtap: left promiscuous mode [ 216.593033][ T1151] veth1_vlan: left promiscuous mode [ 216.599116][ T1151] veth0_vlan: left promiscuous mode [ 216.955520][ T52] Bluetooth: hci0: command tx timeout [ 217.668712][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 217.721531][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 218.304842][T11191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1404'. [ 218.564696][T11221] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1406'. [ 218.601783][T11131] chnl_net:caif_netlink_parms(): no params data found [ 218.662832][T11228] netlink: 'syz.0.1409': attribute type 1 has an invalid length. [ 218.681423][T11228] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1409'. [ 218.695563][T11229] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1408'. [ 218.709966][T11227] netlink: 'syz.0.1409': attribute type 1 has an invalid length. [ 218.722617][T11227] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1409'. [ 218.743054][T11230] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1409'. [ 218.753571][T11228] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1409'. [ 218.954113][T11131] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.964445][T11131] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.971823][T11131] bridge_slave_0: entered allmulticast mode [ 218.986182][T11131] bridge_slave_0: entered promiscuous mode [ 219.036043][ T52] Bluetooth: hci0: command tx timeout [ 219.066245][T11131] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.084459][T11131] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.102016][T11131] bridge_slave_1: entered allmulticast mode [ 219.113974][T11131] bridge_slave_1: entered promiscuous mode [ 219.170698][T11246] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1412'. [ 219.257626][T11131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.310436][T11131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.339716][T11246] syzkaller1: entered promiscuous mode [ 219.352887][T11246] syzkaller1: entered allmulticast mode [ 219.499248][T11131] team0: Port device team_slave_0 added [ 219.572815][T11131] team0: Port device team_slave_1 added [ 219.691908][T11131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.699589][T11131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.726498][T11131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.746638][T11265] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1417'. [ 219.782916][T11131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.791783][T11265] netlink: 'syz.2.1417': attribute type 7 has an invalid length. [ 219.801694][T11131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.828531][T11265] netlink: 'syz.2.1417': attribute type 8 has an invalid length. [ 219.844455][T11265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1417'. [ 219.870669][T11131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.083711][T11131] hsr_slave_0: entered promiscuous mode [ 220.121064][T11131] hsr_slave_1: entered promiscuous mode [ 220.681979][T11309] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.709287][T11307] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 220.783687][T11312] netlink: 'syz.2.1431': attribute type 7 has an invalid length. [ 220.809140][T11312] netlink: 'syz.2.1431': attribute type 8 has an invalid length. [ 221.114356][ T52] Bluetooth: hci0: command tx timeout [ 221.270760][T11131] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 221.313299][T11131] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 221.362483][T11341] netlink: 'syz.4.1438': attribute type 1 has an invalid length. [ 221.385526][T11341] netlink: 'syz.4.1438': attribute type 5 has an invalid length. [ 221.392294][T11131] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.448526][T11131] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.857918][T11131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.015704][T11131] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.031427][T11372] unsupported nla_type 52263 [ 222.051781][T11374] xt_TCPMSS: Only works on TCP SYN packets [ 222.073621][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.080857][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.163666][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.171000][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.207893][T11377] tipc: Started in network mode [ 222.215773][T11377] tipc: Node identity 6ae25d5f4549, cluster identity 292 [ 222.230467][T11377] tipc: Enabled bearer , priority 0 [ 222.251700][T11378] syzkaller0: entered promiscuous mode [ 222.262107][T11378] syzkaller0: entered allmulticast mode [ 222.374995][T11380] tipc: Resetting bearer [ 222.456286][T11380] tipc: Disabling bearer [ 222.560136][T11389] geneve2: entered promiscuous mode [ 222.589830][T11389] geneve2: entered allmulticast mode [ 222.720829][T11400] gretap0: entered promiscuous mode [ 222.738849][T11400] gretap0: left promiscuous mode [ 223.018995][T11131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.104926][T11419] xt_policy: neither incoming nor outgoing policy selected [ 223.113758][T11424] netlink: 'syz.4.1456': attribute type 1 has an invalid length. [ 223.162571][T11424] netlink: 'syz.4.1456': attribute type 1 has an invalid length. [ 223.200947][ T52] Bluetooth: hci0: command tx timeout [ 223.260771][T11131] veth0_vlan: entered promiscuous mode [ 223.314255][T11131] veth1_vlan: entered promiscuous mode [ 223.464159][T11131] veth0_macvtap: entered promiscuous mode [ 223.493938][T11131] veth1_macvtap: entered promiscuous mode [ 223.537983][T11131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.581894][T11131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.615579][T11131] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.629575][T11131] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.655573][T11131] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.682001][T11131] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.892041][T11454] __nla_validate_parse: 14 callbacks suppressed [ 223.892061][T11454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1462'. [ 224.149474][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.184349][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.295381][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.303279][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.787899][T11488] xt_l2tp: v2 doesn't support IP mode [ 225.078153][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.155108][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1472'. [ 225.376299][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.590733][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.740134][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.874614][ T13] bridge_slave_1: left allmulticast mode [ 225.882496][ T13] bridge_slave_1: left promiscuous mode [ 225.888998][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.899667][ T13] bridge_slave_0: left allmulticast mode [ 225.905770][ T13] bridge_slave_0: left promiscuous mode [ 225.912155][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.143832][T11524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1477'. [ 226.314749][ T1035] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 226.349143][ T1035] ------------[ cut here ]------------ [ 226.367198][ T1035] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 226.383931][ T1035] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 226.425966][ T1035] CPU: 0 UID: 0 PID: 1035 Comm: kworker/u8:5 Not tainted 6.16.0-rc1-syzkaller-00102-g5466491c9e33 #0 PREEMPT(full) [ 226.425997][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.426010][ T1035] Workqueue: events_unbound cfg80211_wiphy_work [ 226.426076][ T1035] Call Trace: [ 226.426084][ T1035] [ 226.426092][ T1035] dump_stack_lvl+0x189/0x250 [ 226.426129][ T1035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.426160][ T1035] ? __pfx__printk+0x10/0x10 [ 226.426202][ T1035] ubsan_epilogue+0xa/0x40 [ 226.426228][ T1035] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 226.426266][ T1035] ieee80211_request_ibss_scan+0x600/0x8b0 [ 226.426315][ T1035] ieee80211_ibss_work+0xd85/0x1060 [ 226.426342][ T1035] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.426377][ T1035] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 226.426404][ T1035] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 226.426431][ T1035] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 226.426467][ T1035] ? skb_dequeue+0x10e/0x150 [ 226.426495][ T1035] ? ieee80211_iface_work+0xcdb/0xfe0 [ 226.426540][ T1035] ? ieee80211_iface_work+0xf39/0xfe0 [ 226.426570][ T1035] ? rcu_is_watching+0x15/0xb0 [ 226.426609][ T1035] cfg80211_wiphy_work+0x2dc/0x460 [ 226.426631][ T1035] ? process_scheduled_works+0x9ef/0x17b0 [ 226.426669][ T1035] process_scheduled_works+0xae1/0x17b0 [ 226.426734][ T1035] ? __pfx_process_scheduled_works+0x10/0x10 [ 226.426782][ T1035] worker_thread+0x8a0/0xda0 [ 226.426818][ T1035] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 226.426880][ T1035] ? __kthread_parkme+0x7b/0x200 [ 226.426912][ T1035] kthread+0x70e/0x8a0 [ 226.426939][ T1035] ? __pfx_worker_thread+0x10/0x10 [ 226.426977][ T1035] ? __pfx_kthread+0x10/0x10 [ 226.427003][ T1035] ? _raw_spin_unlock_irq+0x23/0x50 [ 226.427037][ T1035] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.427064][ T1035] ? __pfx_kthread+0x10/0x10 [ 226.427088][ T1035] ret_from_fork+0x3fc/0x770 [ 226.427126][ T1035] ? __pfx_ret_from_fork+0x10/0x10 [ 226.427167][ T1035] ? __switch_to_asm+0x39/0x70 [ 226.427187][ T1035] ? __switch_to_asm+0x33/0x70 [ 226.427206][ T1035] ? __pfx_kthread+0x10/0x10 [ 226.427231][ T1035] ret_from_fork_asm+0x1a/0x30 [ 226.427294][ T1035] [ 226.428470][ T1035] ---[ end trace ]--- [ 226.815583][ T1035] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 226.822856][ T1035] CPU: 0 UID: 0 PID: 1035 Comm: kworker/u8:5 Not tainted 6.16.0-rc1-syzkaller-00102-g5466491c9e33 #0 PREEMPT(full) [ 226.835046][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.845146][ T1035] Workqueue: events_unbound cfg80211_wiphy_work [ 226.851430][ T1035] Call Trace: [ 226.854754][ T1035] [ 226.857730][ T1035] dump_stack_lvl+0x99/0x250 [ 226.862386][ T1035] ? __asan_memcpy+0x40/0x70 [ 226.867017][ T1035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.872258][ T1035] ? __pfx__printk+0x10/0x10 [ 226.876893][ T1035] panic+0x2db/0x790 [ 226.880851][ T1035] ? __pfx_panic+0x10/0x10 [ 226.885306][ T1035] ? _printk+0xcf/0x120 [ 226.889497][ T1035] ? __pfx__printk+0x10/0x10 [ 226.894119][ T1035] check_panic_on_warn+0x89/0xb0 [ 226.899099][ T1035] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 226.904874][ T1035] ieee80211_request_ibss_scan+0x600/0x8b0 [ 226.910733][ T1035] ieee80211_ibss_work+0xd85/0x1060 [ 226.915971][ T1035] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.921218][ T1035] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 226.927150][ T1035] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 226.933509][ T1035] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 226.939170][ T1035] ? skb_dequeue+0x10e/0x150 [ 226.943781][ T1035] ? ieee80211_iface_work+0xcdb/0xfe0 [ 226.949186][ T1035] ? ieee80211_iface_work+0xf39/0xfe0 [ 226.954579][ T1035] ? rcu_is_watching+0x15/0xb0 [ 226.959372][ T1035] cfg80211_wiphy_work+0x2dc/0x460 [ 226.964501][ T1035] ? process_scheduled_works+0x9ef/0x17b0 [ 226.970265][ T1035] process_scheduled_works+0xae1/0x17b0 [ 226.975892][ T1035] ? __pfx_process_scheduled_works+0x10/0x10 [ 226.982018][ T1035] worker_thread+0x8a0/0xda0 [ 226.986640][ T1035] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 226.992998][ T1035] ? __kthread_parkme+0x7b/0x200 [ 226.997967][ T1035] kthread+0x70e/0x8a0 [ 227.002057][ T1035] ? __pfx_worker_thread+0x10/0x10 [ 227.007192][ T1035] ? __pfx_kthread+0x10/0x10 [ 227.011799][ T1035] ? _raw_spin_unlock_irq+0x23/0x50 [ 227.017018][ T1035] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.022230][ T1035] ? __pfx_kthread+0x10/0x10 [ 227.026857][ T1035] ret_from_fork+0x3fc/0x770 [ 227.031467][ T1035] ? __pfx_ret_from_fork+0x10/0x10 [ 227.036610][ T1035] ? __switch_to_asm+0x39/0x70 [ 227.041385][ T1035] ? __switch_to_asm+0x33/0x70 [ 227.046158][ T1035] ? __pfx_kthread+0x10/0x10 [ 227.050758][ T1035] ret_from_fork_asm+0x1a/0x30 [ 227.055547][ T1035] [ 227.058844][ T1035] Kernel Offset: disabled [ 227.063239][ T1035] Rebooting in 86400 seconds..