last executing test programs: 7.463565028s ago: executing program 3 (id=3167): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$inet(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="18", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xe, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400008008000c"], 0x1c}, {&(0x7f0000000280)={0x1e4, 0x31, 0x400, 0x70bd2d, 0x25dfdbff, "", [@nested={0x14, 0x30, 0x0, 0x1, [@nested={0x4, 0x122}, @nested={0x4, 0x1b}, @typed={0x8, 0x14e, 0x0, 0x0, @ipv4=@broadcast}]}, @typed={0x8, 0x11b, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x70, 0x0, 0x0, @pid}, @generic="c5cad21e6caadf6383ddfce3e48636681f124f5b52d9be62262bfb3713e7cc50c9507ccb1aeec8313da732a67db11c00f37bee871a91413e9335f2865f4638a96379c306a399f340f22ac2e2e6a6f502a7793bce5c9555b58431556a74543e70bbbdf0fd4c28e56ed68ce0777c5f06a1ce42d471562df9af1862cf2db292a9bfd414e2644bb0a2007d900bfb79f60d4bb4c978d927b9365869b4e31d1f45", @generic="a3dc2c66557ee60db163c8dfa212cef6d360ec929dd3151b15", @typed={0xf8, 0xe3, 0x0, 0x0, @binary="4a83d9eb83b3d1d5fe510e8fad7e10845228aab116dd0feae7cdadfdf8e54cbf329aef7d26690c4df0170631b6899882a78b9a86be9ec289af33ad96c88f4e05043d2d0aa334772b6104a1284ac363a2c58b0817f53190705fade1679e2a9e56b2ebc1386261867ce82223fb91d0ee85c5aabf0ddcee13d23c226d10130c620fba7684ace87fe193a533aa6194413a9951291aadf22be17c4beaca9345585ad45e96f9af84ccb92809a72212355aa688599f57836d0aef97ce4785715fd1921545840d57174dad756042294f2f2929c1eedcc689d9f33645c04869fe704274b60f927814dc651689a96899f3fdc9598d39b2a074"}]}, 0x1e4}], 0x2}, 0x0) 7.169598171s ago: executing program 3 (id=3172): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='(\'\x00', 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) (async) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="64000000020601010000000000000000000000000000000900020073797a300000001400050029493a2a073be472afed0000002000080012400000000005001400000000001500c4dfc30e97d53dc15e38fac1de428fd47d331f85a9ef826de7e018759bad310c8034a79d7aeb0460062b0263321570a388f8f39a2a881f12176a3fd78c7134a74685f59da74fffecb7a2fdba6e3fc4f0ea52306403e401c0d3361759a87427c65a4d459e4bb4d628c100"/189, @ANYRES32=r2, @ANYRES32=r1], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x240480c1) 6.94272613s ago: executing program 3 (id=3175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) (async) r3 = socket$inet(0x2, 0x3, 0x1) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) (async) sendmsg$inet(r3, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x24008004) (async) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) 6.738805299s ago: executing program 3 (id=3178): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000009c0)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008002c0007000200060019c00364bc24eab556a705251e618218db677642109146a2378c877bddbcc1863b747ee3d5addad5eb3f3c90b561", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x4, 0x100, @val=0x80}}}}}}}}, 0x0) 6.612994895s ago: executing program 4 (id=3180): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newlink={0x20, 0x29, 0x10f}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 6.45793471s ago: executing program 3 (id=3183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$isdn(0x22, 0x3, 0x26) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f00000000c0)=0xffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="680000005a45947753f53cfdf648be8ee0cd513b4da5136f4fc5fae30f9ad40000f0de61cf687007620f08007ae8928ed9ea0e51e085c1325b87a7fa5ae6a43fe41c10b876b39355996b410010000000000000df50209d32ff95bc32a4df5b5c5395148caa79189cf855a8aec7fabf91f5d1bfcb581af30397ac839f0fa66fd0", @ANYRES16=r1, @ANYBLOB="09090000000000000000010000000000000009410000004c00180000006062726f6164636173742d6c696e6b00"/98], 0x68}}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="680000005a45947753f53cfdf648be8ee0cd513b4da5136f4fc5fae30f9ad40000f0de61cf687007620f08007ae8928ed9ea0e51e085c1325b87a7fa5ae6a43fe41c10b876b39355996b410010000000000000df50209d32ff95bc32a4df5b5c5395148caa79189cf855a8aec7fabf91f5d1bfcb581af30397ac839f0fa66fd0", @ANYRES16=r1, @ANYBLOB="09090000000000000000010000000000000009410000004c00180000006062726f6164636173742d6c696e6b00"/98], 0x68}}, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x0, 0x400, 0x0, 0x25dfdbfd}, 0x14}}, 0x800) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={r4, 0xc1c, 0x10}, &(0x7f0000000200)=0xc) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={r4, 0xc1c, 0x10}, &(0x7f0000000200)=0xc) 6.376864825s ago: executing program 4 (id=3184): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f000000ae80)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newlink={0xfffffffffffffede, 0x10, 0x503, 0x2070bd2d, 0x4000000, {0x0, 0x0, 0x0, 0x0, 0x40004, 0x20220}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xffff}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c012}, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) 6.198744866s ago: executing program 3 (id=3186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x8006}, 0x4) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x1fa7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none}, 0x8) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback=0x40000000}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040807}, 0x240008c4) 6.194721533s ago: executing program 4 (id=3188): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000000000000000100000ed0d0001006e65746465760000000f0002006e657464657673696d3000001839cf09a059a9afb910b632f8fd880037486a9a52f4a8be79827509ed61cb99d3fbd88419f11083605ac2e86638b903f8ddc23585eceb9c8b9268bfdfce6ac20df9e76eeae21dbffdd3000000"], 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x44}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r3], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x24000001) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r3], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x24000001) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6.084404587s ago: executing program 4 (id=3189): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000000000791090000000000063000000000000009500000000000000b8a164aed91d3d5b664c4ca806f01293f84f25209077b1bb4ab4cf447b29fad55603aa97715b6f60e53760e0565b07dd0f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5c38b46af21a0", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="fd", 0x0}, 0x50) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)="04", 0x1}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ppoll(&(0x7f0000000080)=[{}, {}], 0x1f, 0x0, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) (async) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x8001000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x4003, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x8001000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x4003, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000180)=@rose={'rose', 0x0}, 0x10) (async) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000180)=@rose={'rose', 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, [@func]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.802786668s ago: executing program 4 (id=3193): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r1, &(0x7f0000000080)="5b20bc9cc46a", 0x6) epoll_create1(0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xa) r2 = socket(0x25, 0x6, 0x1) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000000)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) socket$inet6(0xa, 0x5, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=@allocspi={0x3f8, 0x16, 0x8, 0x70bd29, 0x25dfdbfe, {{{@in=@broadcast, @in6=@private0, 0x4e23, 0x200, 0x101, 0x0, 0xa, 0x20, 0xa0, 0x3c, 0x0, 0xee01}, {@in6=@private0, 0x4d5, 0xff}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x5, 0x6, 0x3, 0xc, 0x3, 0x8000000000000001, 0x8000000000000000, 0x2be}, {0x1ff, 0x167, 0x7, 0x7}, {0x0, 0x6, 0x7ff}, 0x70bd25, 0x3500, 0xa, 0x2, 0x1, 0x80}, 0x6, 0x6}, [@algo_crypt={0x90, 0x2, {{'cbc(twofish-asm)\x00'}, 0x240, "a19796195e6069af4358f96b1200c240425e2b2959f776e58d39eb8825c63210d164f197714107924b72d6b81328163eecc2bd8402bb782b3af191fb97304bd96dde249153e10cd8"}}, @algo_auth_trunc={0x14a, 0x14, {{'sha512-ce\x00'}, 0x7f0, 0x0, "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"}}, @sec_ctx={0xe8, 0x8, {0xe4, 0x8, 0x1, 0x0, 0xdc, "3df181f2db934a1c5d4aee404efe7bf886ccd30366a5907150bf7089b0926e604bbdf441bcc11c17ba321ed3aa8492166849c0b2bcfeb9f2b2e66cf0b0816ce780672bee3d38ee6df53c154257c8a8e5bd7782b6a766df8ac1950b46851a886337ff08fdad45b95b278731341ecc7f9d4bf1242b6496a9ddc838359c5c9bd96bf0ecac452f3b8b7c32a91836e1b636b5959853630711e1ea463e356dc0425ddfd7a0514308ad54e3c80ba42cd3589bb4c066fdeae86f0fe22e6da758d9145e7f9aadc8a77e1d5b9d16504a4cf2fa9a872cd6426c9f3938223d3845a1"}}, @policy_type={0xa, 0x10, {0x1}}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd29, 0x70bd25, 0x70bd2b, 0x70bd28, 0x8, [0x8, 0xce42, 0x1]}}, @tfcpad={0x8, 0x16, 0x6}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)={0x40, r7, 0x1, 0x0, 0xffffffff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x0, 0x4, "0fc5c492c0f651e41a28189a68ec1f5ef5140598632c12949e3a1e2b6ca831ddd74bc0df03cd612b3e4cb26bfd45d6783aa6804bcbb1820b09"}, @ETHTOOL_A_BITSET_MASK={0x0, 0x5, "569c8271329a54de7f5d639154b256dbc27c77186a8e6cd750e054bdbb5ef65fe8daeffd9c2a98d96b6f39ce845868d36c15fdaa71329b6e85e650bfe5b639653eb9c5e9a702befc52a4ee4807cefa9942967bfc16f46822205208814aa7a5e81b605998b8b7f51fbdbf8bf9c1d8f121848026e8776b23487080c3100cc14189ba1324c065f65f2de6f29bcfeb6720d086650d5656cd483a7e3cabc747e04969483220901b9aee687af4f784256521b35a753f4aead5acb3989734be07df79eb99b647667bded991ddc5c24e18e9bfcf34c49358f781b8b0d0be5c066ac3eec1d2b9ee7df7b92d4fab3372a755e185caeee8a8f63f8e21ada9be2ff2ce5b8ee0262c0db68f55e9e5b9c31577ba2bc3e8d06c1cd7944d27b4644dd10c3e4b2e1871afe578bc18317a62c74bd43564a6e6d59497e2119682fb2ba9fe14a1236addbc26e4518d0086d3cfcd50b4d37a0a0a9d6e545ffa3c444af6804f6673513d842b521aa2ed41113ad738fedd3eab4acbc0105714533d5aeb53f1a176a0bf479e75aaccb76364fd3ebef8bb90f168082af0eac96d5a5142e0b1b4d3d712047e826d01f2040b97f9b7719363972f557e99ca0b0137931bad9d50da1e0677335432840c9ab508a11a3642a9425e280427f3a71b1562958f612dc012e0b892c7367f1262c754732b07f26bced9b33b3c21026703e29c91dd70490a666cee83eaddf8f56768eb0416cd4677f5a85f4caccdc284ee0985ab029f379c9e15dd82c173fcf89631af988b9f0bcf8d666b742b6a8c0d85b57ddbe82bc5199ce57640dd9583be205576e6def7ae3a785b6911e7fae31863a62f1c3e8292dc50346879367461a720df87fa4f1bc4a75911a318c92cff00a36a85305918621b2cf6b93b350a32a5b00ef33feb16c55b8dbf25cf0893b3b472543deafed283250fb7a0462bce47e3b5d3706f194e9585a0fcdaa60d9ec118e8fd08f973b9190a7914ae3ed43d9afa23a4b9ee883a6a5ddbd4dfde6954d8b3abf511212ce98ab705ba4f206a8ee206ccdb7b58f5bd471f5be1cb20b298bde420b81d21bb66852f1696209485a569358793fe378046eb3e02eb9254a49d376d34b252c0b1ca66ddacb4b03ec6976678cc55846484937cfd5fed2ec74290a8c08cee2831503b70ca2b94d02f63ed3c45fb03ac370838d6f98c443a58c6a7836c66179405078ca16d696a29c5a0c7200f2619358505243b56f2c7ee943d1f44cec3f873d422037f1179654fee46e29eafe51b279e62d47b2966002b1de21ce0c73d921f89c1e7426f5aa261493ae64fd998c4e23d71d1a25076c38a1b51366cb53815cdadb3634416d406702be391ca13338aea4a0aad90510856535989a0fdab5237f7f648748e5bfe52749f2508ca837f6258761f6ba8837395abb729947ecccf3935cc9bd66ffbf233f4d09e3405bed724c3b41a73d71893aec676121e6f7536be2619e41e96c55c0963c5a8d7224407e9baf4dae80c101f0bddb566b93e828e2fea14c5b2548edd187ff6fec1a30a88e061533843a73ea3dfd00c506654402898958aa752423d657ac72536be9cebd4511baad34d039615c9b6d693634c0e19abc437243dc0da6bd04aaf073a18daff7390fe742ed30d77e5da7b58d3f0246463f710c927ee180edd4109b266da011cb379fe817021bacac4b348431dffb280c8e020c003aef284de3dc18fb3dd8c94bf0f1dc8770b9d27781f3a58e3916d7eb9bb44636cc9bd48c2928964bc46adb94577e30d0ed01b1b24217d32d9bc3dd8bc4d5749a290b73a13dcd785707834a040a94f1a315b0ff8cdd9016f604deebbe01d376e337d502d42ed9bb3ad199219efadaf544e7b729a3ce7cc1a808acd3a190be7de659f11ca6f2b484348bf0b5d0988e0d20cd1b070a938318fbba6c3c2a5011db9be73bdd5c47355b1ba9bdcd326cf15d193914528f7cf6cc36e2bd19d2712cc75392bb04bc6087c6dfadc18639e0f49cba13a20c79a988c40affba4c927a4e13ae4f8fea147143d689519ec27119bff48a0207a5c493507b136d24118b1b8818a22dd8b24f48a540f632d25cbb54ee645fc59a1ba73727be0d481a18408943221488984037767661cf6927789a6581d18de952fbe74e074a544838340d9cf39ca4f7e2abd7c6d5b6481b35501bafabe29ecf3067bc52f2e0df125b0496eee5db25e47301668f9bd9239748178a62a28e5ff8586a7819c763cb1586bca11e6f624e2aa7ac40fdb0dd4e4030a3092902a5286e812a7762654ddc2158f4593d524b64107c4e36479d76695797de8865a1c9091d7076b9c3b8674212fd29afa3fb3336859ee4f8bbd7744e5b233bb581becb4814a4bbb287b6e35ab7c6a474eb2d4fb1f2f17384691964ee3ba83852b7add25e1239cde715365a3bcd54184bd9b43528bdd86f5246f6cc64e22a792345b8bcf8eb9f255dbca1db75b7247d190ed732305d6c57104237ab5f8af801415060860f455006addf2c0390d1bf7db80b6214506f7a40cff7d93db7f46a036bad851a9ec0948ee71c4b1796333331de1dbbbc2d7df78e5b887bfe1ea7eba70598bb7d5bdfc6fa936a252a024a7f33a34ea8d94aebccd48390a0032825f11b142f4f405f4fec59ee58d0de79122dbc77ee9d9cce33e2326834dacc555f7b5d0efe2f0551251ff91bc65e837b483355e06bdc94f0ee205495937ee338db349c248aa9302aedaf32a3658d7f8cfb3ed4dc640fa51549314bae771bfb6f5b7d973d02e84e1ccd09fc170782052f4a77d298748349c989ff96151c6051f3f98a96754d26dd6e3d1067ec49132daf21fc0cea500d1c5fa3e04b95d5837189374d5e5e0d9b8145d269d600991632ab09d78a8b9f641ec58f3f7477e1b5a5553f943087680fec1668154ee42072ecaadc05e51ef3b627386782e3d78c5d414a789ffe96bc720b71c7899ec58336793638c03c2048bacff5e4200e6109cbf49339c31999251036c29dd7a4128aeaf45b605a0eb817bbf44831ebb420c41f18f9ae62396c13c12c6c0eab9e856b25b9deb064024be4c944f9d4368688b7af822ac35fbdc882ea2c8d5948986e6d0749f8bf97e5aa93fce76ac299e0206442dbcfcd9e37fddf0928039663a8be03c4e82cc85fc6d48f4e5c6e991b3043a48deb5cb728f0383a3d8c573a00a959cd73a264e1133a4a70705d52fd220913c3cd6178d25da19ea91b5520f45fa2d34cb8ee395fdbc2498b5d4d843755ee4f1a0df47e43423a323971b2310f5d1699be4be172b947e00a4b9d3899fed76785daecd7cec555392ad7a0bf12c79cd0a08967c2f86ee5a90d6deea268de1ea9e0fd2e96042e4a018c90ceba0555eacddd8d0d6cc642a78b24fb4970a64ceea7abfbb8a2e8b573c5ac3d224ac4ecc0d2d06beba55c3ce0305717cffeaa538cf726f1593461ca5779aaf7522524c0cec9e0add1a1dca9f7030c716c25085a2dcc390e703f6ff9dabc04f9d44c37472c8848f142bbeded8a06169b7bc76be5d8dbed98d01a37a8255eb4f394af717e823706a237f933801d096c14cf3e6a878e964cd8a0bc8da97d37c4f3b0ab4af22fc56ea1434a5ca7a73a059e4e309e52300e19ef482839a6f708c521d96a1a8e336cf5c11f2d3ef615daaeb5733b4c209562230a003feafd5fcd2d21190b75aa56c3b0a8f88bf9cad23f8937e3f053031322a6240af10a35cd33b698ff2484c2b42f42f73fc99febb8c5a0e0bf944934da62bf8322629c6a732ee324d76fd8bb8bc2c81ee8538efeaa82b962645aa257d0986f2dad362dfc3b86fcc92341b633f2427a5d7a9f7d21f687b255c7581954cf2fc3bca264dbafc380382ca83ec2effe40572402db9fb9f892c3b0fe2c8e130b4d5c681a3c6a4026e619e7c7d7d607845e370342aecaabaa61338e388e73a7f51aeea63462bc834de59c46415c87b31fed034412a97c258f27dbb1db1b6de4e25039b17d1307eaefa5090ec651d701fafe01dec774e0997dcb98038e37f325ce771173bc7be467f65e04ec41da654cd9ff2fa6bc7510fe379a3dad8e6bf897a37a878e0a715e576c60d8a49d04f4b2a5e67f6f023440d5f806bf13e6736beab0f33940ebbe1cd215faff22a2e0a3964b64110b74951bd44a7d6a806d715ea023019db4f6a728d427d56a5a1177223f287121d6f0a595039538e4eb7b8c1fd4ddd34fa8f37ecdb7338328811fccbe04229cbcd11978b7732ae87b719d5e7ba187aa4c1fc6fb81037f94cff60bb3094ef5dbb9380d66695a807e0de9d6723b530eab5f8047a4792215556895a36d4f4261e5c8c058011ca3964a57086b59a6b57f58fb737372a356d19411a00e02529a6d3b517c7d6b0081e1063084d62237afede886d1f90f1d15e822bf2ca2ffb6856cd519497ceffbf1715262d41abc51f3e316c7d0633a1e9e360c9dee48d96e286d121bcac85728f59161ff26d53b6734b0cfd5b7874beb37eebd38888e01019f47a6c4586e2aa422bcb4b0725def0139087e6e213b5f927ba177ae739bd32ba563e3ba9630f071fb13b11d4e5a747a3561dea52cc80adb62475bd1d410005ed3f410ca7f62836a768cd473d82569019866e22fdf33b5d32aa21e1d52e17619f7645fb9246345ea3b9629073450ae1ad9e75509666e3b6294d18d37312b8ca62da58908ca2fb4d67fb9d7bb2ffdbcb20e7235926b3523b0d033ce670f372e39a505c67d0e4f133c9be995551fcc8c255dd7b9936bb8d7bb27780aee086cac39bc0e14ebc980c3bac7772ba0e7bb26a7aba04b7b5dbc397349d70d98b430926f71e0e65aea89df6fadc601ce68f9b6be407896d398ddd042089aaa70b578bc4d6222c2aead3c77d558f386c0b6c08136d016692a70c442929a80c191025cc32bdb2838252a965c5dda15df152cdf946adf2ffb61c5079f57de6bec55aa534f27202bd13da75108d0d379066fc8578beb0fd72d61b62d7f6570618bf716b8c90f5cfc87eda4744f8a2d981cae7ad430163d090204bfdb9c1a1200f08318ab72ed334b093c0a0c033ef7ddb678b2bd4b5183f0e521fc48ed7c09f2d258dafcbbb0d4ab2f06bbe3eca6dbb8af40045da2dfc14f41d633f9d016ac30b98b50d2d5db2b3980e1a0d212224b9585f4c47a980f38675da5237e09e5c01cefc15454fa790991691bd35ec8ed09843e06040dd757eecaec59de5d2d263131d7b1cc7b5c411b7bca134103de62230edb2f56d7b05c2b4aa9a497ac498dcd8ba2a373b6771693a53fb2a760c04403fce395bbbebeb70ee1f0189854b4ea83d6a3cd6df64dbcc7e13bc63a1c2094e9405b133ae5ba73e7eff198c4f34c40cf90b18efdc9691b32b69b85cfd0d1a2123521fe5505ba0207db6ab918f416cb2ba546803a4dffe58a20b39845a04d972dc32e3eed8d25a84f11f025f404e7658653af9a98b31c2f45a4cb64948fb353f8ee76aa7e33fe4427b6db0e3a61c70748e9c602217a67aa441108664989e41bbcd537eddc0eedafb28042f74fdc34b6f3c8dcb7104120b5b4b16027c4e84479af97c80fbf110708eb4f23d440f71f9910c7fb3d4d32378c5db547eaa8e199c90fd696f78e58a0ba28c51f35cc28bf05ea3dfce38c03117c6a402673355b570104e93c9a5e9a5e22b6ef208d6ee0d40a2b1195a7d64e2e2097e54cda9267b452a095951cb724b48e356ec4d4a40a6e293f83c1008be7232c96aa8e9ec53cd8a5344651685f7ef039319be10c4a12637c22d3d6245b1821953a4000854f6551e0d10aca636fceb8cf058582789fd4f81bf31"}, @ETHTOOL_A_BITSET_BITS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_VALUE]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, 'ethtool\x00'}]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0xffffffd6}]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE]}]}, @ETHTOOL_A_BITSET_NOMASK, @ETHTOOL_A_BITSET_NOMASK]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x2008040) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60400000004d060100000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYBLOB="5020000090"], 0x0) 5.187122799s ago: executing program 4 (id=3197): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r5, 0x4) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x15, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, [@ringbuf_query, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}]}, &(0x7f0000000300)='GPL\x00', 0x4, 0x32, &(0x7f0000000340)=""/50, 0x40f00, 0x15, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x9b, 0x2}, 0x10, 0x9, r0, 0x1, &(0x7f0000000400)=[r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x5, 0x5, 0x1}], 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x2, 0x19, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x70f2, 0x0, 0x0, 0x0, 0xe0e}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0xa, 0xf, &(0x7f0000000140)=""/15, 0x40f00, 0x0, '\x00', r2, @fallback=0xd, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r6, 0x3, 0x0, &(0x7f0000000680)=[{0x4, 0x5, 0xe, 0x2}, {0x1, 0x2, 0x3, 0x1}, {0x1, 0x4, 0xe, 0xa}], 0x10, 0x9, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newnexthop={0x3c, 0x68, 0x1, 0x70bd26, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x3, 0xb}]}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @private2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)={0x60, r8, 0x1, 0x0, 0x40, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x60}}, 0x0) 3.190652038s ago: executing program 2 (id=3218): r0 = socket$isdn(0x22, 0x2, 0x25) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x3c, 0x2b, 0xb, 0x0, 0x0, {0x7}, [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x13, 0x2, 0x0, 0x0, @str='fault_injection'}]}, 0x3c}}, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r1) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x7c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_FLOW={0x6}, @GTPA_FLOW={0x6}, @GTPA_FAMILY={0x5, 0xd, 0x27}, @GTPA_FAMILY={0x5, 0xd, 0x23}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDR6={0x14, 0xb, @remote}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x7c}}, 0x200000c0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x40000000) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000180)={@mcast1, 0x0}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x4, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xffff, 0xfff2}, {0xfff3}, {0x8}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20040014) close(r3) 3.118244903s ago: executing program 1 (id=3219): r0 = socket(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@float={0x9, 0x0, 0x0, 0x10, 0x8}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x5f, 0x2e, 0x30, 0x61, 0x61, 0x61, 0x5f, 0x5f, 0x30, 0x5f]}}, &(0x7f00000001c0)=""/42, 0x3c, 0x2a, 0x0, 0x9, 0x10000, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000880)=""/173, 0xad, 0x0, &(0x7f0000000940)=""/101, 0x65}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x15, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9b}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x2}]}, &(0x7f0000000140)='GPL\x00', 0xffffffff, 0xe5, &(0x7f00000005c0)=""/229, 0x40f00, 0x44, '\x00', 0x0, @sk_reuseport=0xf, r1, 0x8, &(0x7f00000006c0)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, r2, r3, 0x1, &(0x7f0000000a00), &(0x7f0000000a40)=[{0x2, 0x3, 0xc, 0xc}], 0x10, 0xf, @void, @value}, 0x94) recvmmsg(r0, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000000)=""/98, 0x62}, {&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f0000003800)=""/4100, 0x1004}, {&(0x7f0000000780)=""/206, 0xce}, {&(0x7f0000000300)=""/111, 0x6f}, {&(0x7f0000000580)=""/55, 0x37}, {&(0x7f0000000200)=""/76, 0x4c}, {&(0x7f0000000280)=""/106, 0x6a}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000009340)=""/215, 0xd7}, {&(0x7f0000000080)=""/112, 0x70}], 0xb, 0x0, 0x0, 0xb00}, 0x8001}], 0x2, 0x100, 0x0) 3.001548971s ago: executing program 2 (id=3220): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x33c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x288, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x4}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0xd8db00}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8, 0x2}}, {0x8, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3, 0x1}}, {0x6, 0x2, [0x5fd]}}, {{0x1c, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x0, 0x7fffffff, 0x10088, 0x4}}, {0xc, 0x2, [0x4, 0xffff, 0xff52, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0x10, 0x2}}]}, 0x33c}}, 0x0) 2.92681703s ago: executing program 1 (id=3221): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x7, 0x8, 0x0, 0x0, @multicast}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)={@val, @void, @eth={@multicast, @local, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x1, 0x6c, 0x0, @empty, @multicast1}}}}}}, 0x2a) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x1}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004dc0), 0x0, &(0x7f00000053c0)=""/196, 0xc4}, 0x4}, {{0x0, 0x0, 0x0}, 0x802}], 0x4, 0x40022000, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x7, 0x8, 0x0, 0x0, @multicast}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000080)={@val, @void, @eth={@multicast, @local, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x1, 0x6c, 0x0, @empty, @multicast1}}}}}}, 0x2a) (async) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x1}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004dc0), 0x0, &(0x7f00000053c0)=""/196, 0xc4}, 0x4}, {{0x0, 0x0, 0x0}, 0x802}], 0x4, 0x40022000, 0x0) (async) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) 2.868330493s ago: executing program 2 (id=3222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="74020000", @ANYRES16=r1, @ANYBLOB='kN\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00'], 0x14}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000000a000001"], 0x26}}, 0x0) r3 = gettid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000680)=0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x8582}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}]}, 0x44}}, 0x0) r9 = socket$phonet(0x23, 0x2, 0x1) r10 = socket$netlink(0x10, 0x3, 0xc) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0}, &(0x7f0000002880)=0xc) sendmsg$netlink(r10, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000980)={0x10, 0x32, 0x4, 0x70bd25, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0, r11}}}], 0x20, 0x50}, 0x40880) sendmsg$nl_xfrm(r2, &(0x7f0000000a00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000780)=@delsa={0x238, 0x11, 0x100, 0x70bd28, 0x25dfdbfb, {@in6=@private1, 0x4d6, 0x2, 0x33}, [@algo_aead={0x112, 0x12, {{'gcm(sm4-ce)\x00'}, 0x630, 0xa0, "02c19a231c8d9e32dd2df25bc49326bf57ffcbd0dc406b6741dcd735318467410770c98db85870723fa9c6997827975be0f199a5cf354e7c090b242147ccfd1050b39f750acff5e0e3f7d5b939b3be8b2deb19a49972728499ab44e70f80d1b6ddbc00395ee78a4140bf1cca2e706afdcca82d20aae6aaba4c9935795eb889b7502a3ca8c49273ae2b7d261c3606ecaa5558aa30a5aa0d148270b3e70f6da017cc50bb0e684640a8ad6af908d1dd42b26abebf88cb3ac491bd54485fda743810626293ab41f9"}}, @tfcpad={0x8, 0x16, 0x2}, @sa={0xe4, 0x6, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x4e20, 0x2, 0x0, 0x20, 0x20, 0x5c, r8, r11}, {@in6=@rand_addr=' \x01\x00', 0x4d6, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x9, 0x7fffffffffffffff, 0x86e5, 0x84d7, 0x4, 0xfdb6, 0x80000001, 0x4}, {0x3, 0xffffffff, 0x4, 0x3}, {0x0, 0x7fffffff, 0x9}, 0x70bd2a, 0x3500, 0x2, 0x2, 0xb0, 0x8}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @proto={0x5, 0x19, 0x2b}]}, 0x238}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) r12 = getgid() sendmsg$netlink(r2, &(0x7f0000000700)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x100}, 0xc, &(0x7f0000000640)=[{&(0x7f00000002c0)={0x1c8, 0x2a, 0x4, 0x70bd2a, 0x25dfdbfd, "", [@nested={0x18, 0x136, 0x0, 0x1, [@typed={0x8, 0x31, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x93, 0x0, 0x0, @uid=r4}, @nested={0x4, 0x148}]}, @generic="0e384fd83c8acd4ceab7f37725e66085fc74c96ac25835a6a04de1b33770b3c2c4a5294358f2c9a612dea337daf5b8e3e46f502e6a93b433bb6db5d7f7a5f2cb0ac4baa04c1ab7173dcd562834959493f3eb1931d36b8ed30d9883a41d2cde01", @generic="fa0c50e4f09c365bf6f76b0bd480d86ff1fa3ea3946df1a74f1ff7a9bf7de2d6ea4bb74505c1e104371da368928a700d583b8cf261be0a9768443e6a8d62576643e103526da64b4e6dda6de94b200bd7437a5cc09993b76ae25898ddeb8f42b9b98b5d10f12c068754d62a496bff32f58598be00eed33531cca8bdc3f5a82ab3b4de4f4ce48e6cb337", @generic="e77911c74fa3e9074e426d1606a7747cbae02453cd75c9aeac287bb34b", @nested={0x8a, 0x1f, 0x0, 0x1, [@nested={0x4, 0xaf}, @nested={0x4, 0x63}, @typed={0xc, 0x41, 0x0, 0x0, @u64=0x70000}, @generic="49ac2a65c9f091c8a04f597be75fa0804fc8f8fea16ac6f193473ae4a02c26cfefce118edaf75a17fac4bb7797811a64687e672f46cf94fdfeb6ba4d8132c9589d5cae33892d568eaeca74c572df3e62d36e5501b8517d4255ec44cb88a9dfa15106c47a4dabf71c387f", @typed={0x8, 0x72, 0x0, 0x0, @pid=r5}]}, @nested={0xc, 0x20, 0x0, 0x1, [@nested={0x4, 0xfa}, @nested={0x4, 0xb0}]}]}, 0x1c8}, {&(0x7f0000000200)={0x18, 0x36, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0x50, 0x0, 0x0, @fd=r2}]}, 0x18}, {&(0x7f00000004c0)={0x150, 0x1b, 0x200, 0x70bd2c, 0x25dfdbfc, "", [@generic="170cbb5383f6a9f2cc43eb3756f6be89e29e67c30623", @nested={0x126, 0x5f, 0x0, 0x1, [@generic="ae79bcda9645e9585e3d177aa8c0e015f690924703b72e27d80d4e6b787e3c", @nested={0x4, 0xa2}, @generic="6e9d32f183f7c33110e1eff7e32e8654bc40d0379adeafee266d3e86a7a677eb80d8be73c31075bc949788e52e9c39655e5db49520bdaa21831f94892e7bf75cdf6d289c8ed18703b5a96753658bd8bbafc4104027695c2fb2b1713504c15ec718d5fca167d7739da4fe0ee1e9de730cb6c9487dc63e2d39058638a71e7c6df4a2046b65e16a51da40bf6807e3c75dceeeca6bc6f242a9885683fd4c39520741ba262af2d9638aeae92c3695ebac4345596030e370999a6936e36ca1937d3b3e6cfd901d82a327e0b1410fb0013efd6b3b44c2c3bb907cec53a0102ef07163896073b070d998cdf965477c81c0fee41698e6c9", @typed={0x8, 0x75, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x4e}]}]}, 0x150}], 0x3, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, r12}}}], 0x20, 0x84}, 0x0) 2.564819936s ago: executing program 2 (id=3223): syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x30, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x2, 0x2, 0x1, 0x0, [@mcast1]}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x200}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, @loopback}, @RTA_SRC={0x8, 0x2, @loopback}]}, 0x2c}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000000000000008"], 0x14}], 0x1}, 0x0) 2.178369127s ago: executing program 2 (id=3225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080065e00500000a0000001177fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000940)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, '\x00', 0x33}, 0x1}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000040)='\t', 0x1}], 0x1}}], 0x2, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, @void, @value}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000000)="4ae775e4a3b69a988e44d49d7489a6a833d42e2ad43e4bcb8ecc275b756dad95bfe1875f1977a4e703", 0x29}, {&(0x7f0000000040)="ad1ef9194fa6cbc57e3d5c6a750fdbff3066ad085189171783383bc221161f0fdf8add4a34ec", 0x26}, {&(0x7f0000000080)="f80754b433b7cd02a2adf1d216d31401328c4994924519090ce3961bad43fbff498080e0dc23f0dc639c", 0x2a}, {&(0x7f00000001c0)="ddffc8c242490440dec994db4c9b74970bfb1dcc8e8bfdab3176cb4ef3756efcbfdd44b5f5c7b6ba7cecbb", 0x2b}, {&(0x7f0000000240)="09ba70477129c9471919015bb2cfbca73d9f5c0008897e6ae27e9970da0bf213af936c9af85328073e01aee81c23ea6694e8f084461fef083ed77fcceb72477807f169c7c08747d35e1019a42ea0db7b90cc7eb39a9e485e365813fec1605ef280972e251dd1ac0d3beb0b6b575cec1205b77a3384616fd54ae03cf14d95259e910188bf47e4edd40064e5b5", 0x8c}], 0x5) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) getsockname$packet(r6, 0x0, &(0x7f0000000380)) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000380)=@ccm_128={{0x303}, "f9bfc2fd09aac2e5", "8bdfdb270d9d457e5b6b7275678894cd", "b6c236fd", "5def2b8e795986a3"}, 0x28) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0xc061, 0x6, 0x5a8, 0x3e8, 0x3e8, 0x228, 0x0, 0x3e8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0x0, 0xffffff00], [], 'ip_vti0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x3a010000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {0x3000000}, [@inet=@rpfilter={{0x28}}, @common=@inet=@dscp={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0xfff}}}, {{@ipv6={@remote, @dev, [], [], 'macvlan1\x00', 'batadv0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv4=@private=0xa010102, 0x2f, 0x18, 0xa00}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2a}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0x0, 0xffffff00], [0xffffffff, 0x0, 0xffffff00, 0xff000000], '\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x16, 0x6, 0x2, 0x20}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608) 2.10968352s ago: executing program 1 (id=3226): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x5e, 0x6, 0x3}) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10008804}, 0x40055) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x20, 0x17, {0x5, 0x100, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0xd001}, 0x44010) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)}, {&(0x7f0000000300)="8c2a73c17a76c2889c31a1851187d0bfa4e9baadd5a6a1a7283d6736e4fa78d30467ff3fd837347b998e33738fa4cf350988e1d38f88be863e", 0x39}, {&(0x7f0000000340)="40e8e3b1618d4d07901f5ec99e7f816035b7a49e7eb9bdf08521ab35d2b145724f5c3cc66104be1b57601a3de954087d3d76b25080e9101d2af0b0df0b489ddd6b93a248a050afe249f40accf395fbb570b6030b394c50d4e305f7841554b1f74b", 0x61}, {&(0x7f00000003c0)="008f66dec01e60a042aefdedf454c8edb6ab47ab57c7e7fb1eb9f5c210ef41a143355d782c51edd0", 0x28}], 0x4) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0xbbe6e94c3df31572) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r3, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2040014}, 0x20000010) connect$rxrpc(r0, &(0x7f00000007c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x24) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x8, 0x7, 0xffffffff, 0x100, {{0xe, 0x4, 0x1, 0x0, 0x38, 0x65, 0x0, 0x40, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@lsrr={0x83, 0x7, 0x7a, [@private=0xa010102]}, @ssrr={0x89, 0xb, 0x15, [@broadcast, @multicast1]}, @generic={0x82, 0xf, "452b4cbd4448a7fef486117d04"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000009c0)={'ip_vti0\x00', &(0x7f00000008c0)={'sit0\x00', r5, 0x7800, 0x20, 0x8, 0x9, {{0x2e, 0x4, 0x2, 0x0, 0xb8, 0x64, 0x0, 0x9, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x43}, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0xb1, 0x1, 0x2, [{@empty, 0xfff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@remote, 0x4}]}, @rr={0x7, 0x1b, 0xaf, [@multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2, @multicast1, @rand_addr=0x64010102]}, @cipso={0x86, 0x45, 0x3, [{0x5, 0x10, "7aa030902d2b4b80520b4f346154"}, {0x0, 0x12, "71ef4db0e22643087f5da9449010c1f5"}, {0x2, 0x10, "022622a8941d4f11d63e61ed9c9f"}, {0x7, 0xd, "0e5252a7270764fb63ceee"}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0x25, [@broadcast, @private=0xa010100]}, @rr={0x7, 0x13, 0xc7, [@remote, @loopback, @rand_addr=0x64010102, @empty]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f0000000a00)={'syztnl2\x00', r5, 0x80, 0x10, 0xd6ff, 0x3, {{0xe, 0x4, 0x2, 0x8, 0x38, 0x64, 0x0, 0xe, 0x2f, 0x0, @empty, @remote, {[@rr={0x7, 0x17, 0x96, [@multicast1, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x10}]}, @timestamp={0x44, 0xc, 0x3c, 0x0, 0x8, [0x6, 0x1]}]}}}}}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x134, r8, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x32b01313}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2823}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x78}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x63}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x44}, 0x40) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, r3, 0x13, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x52}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r9 = epoll_create(0x0) ioctl$AUTOFS_IOC_READY(r9, 0x9360, 0x1) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e40), r4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000f40)={'syztnl1\x00', &(0x7f0000000e80)={'gre0\x00', r7, 0x40, 0x20, 0x8, 0xf, {{0x26, 0x4, 0x0, 0x3c, 0x98, 0xdf, 0x0, 0x6, 0x2f, 0x0, @private=0xa010102, @rand_addr=0x64010101, {[@generic={0x94, 0x2}, @end, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0x3b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast, @empty, @loopback]}, @rr={0x7, 0xf, 0xb4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast]}, @cipso={0x86, 0x18, 0x3, [{0x6, 0x12, "efe87dd4db90056fc60fc2579c181982"}]}, @generic={0x44, 0x11, "5f01829cfbbb62b7c8c5203e013564"}, @end, @rr={0x7, 0xf, 0x16, [@multicast2, @multicast1, @private=0xa010102]}, @cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x7, 0x12, "959f53c2ce8b45d0e59d750f0afaac35"}, {0x5, 0x3, "9e"}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001000)={0x1, 0x58, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001040)={@broadcast, @broadcast, 0x0}, &(0x7f0000001080)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r0, 0xe0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f0000001180)=[{}], 0x8, 0x10, &(0x7f00000011c0), &(0x7f0000001200), 0x8, 0x6a, 0x8, 0x8, &(0x7f0000001240)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000001700)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000016c0)={&(0x7f00000013c0)={0x2c4, r10, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x2c4}}, 0x20000004) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r15, &(0x7f0000001740)={0x2}) r16 = syz_genetlink_get_family_id$devlink(&(0x7f00000017c0), r4) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000001940)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x99000d}, 0xc, &(0x7f0000001900)={&(0x7f0000001800)={0x100, r16, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}]}, 0x100}, 0x1, 0x0, 0x0, 0x810}, 0x40004) 2.000245384s ago: executing program 1 (id=3227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x13, 0x301, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = accept(r2, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000008600)={0x0, 0x0, &(0x7f00000085c0)={&(0x7f0000000000)={0x30, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_LABELS_MASK={0x14, 0x17, [0x1, 0xfffffff7, 0xfffffffd, 0x4]}, @CTA_MARK_MASK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x10000000) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "f5c97c3cb5ac65e7", "e68187031a32206bb1f96d85e8692538", "8a09daaa", "538983cc542710ba"}, 0x28) 1.558746381s ago: executing program 1 (id=3228): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x3, [@int={0x4, 0x0, 0x0, 0x1, 0x0, 0x1f, 0x0, 0x7c, 0x4}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x5, 0x3}, @typedef={0x8, 0x0, 0x0, 0x8, 0x3}, @restrict={0xe}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x10, 0x3}, {0x7}, {0x8, 0x4}, {0x8, 0x3}, {0x9}, {0x0, 0x4}, {0xc, 0x5}, {0xa, 0x3}]}, @enum={0x10, 0x2, 0x0, 0x6, 0x4, [{0x7, 0x2}, {0x10, 0x3}]}, @const={0xd, 0x0, 0x0, 0xa, 0x2}, @typedef={0xd, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30]}}, &(0x7f00000002c0)=""/66, 0xd3, 0x42, 0x1, 0x6b7a, 0x10000, @value}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f00000000c0)='syzkaller\x00', 0x80000001, 0x9a, &(0x7f0000000100)=""/154, 0x41000, 0x10, '\x00', 0x0, 0x17, r0, 0x8, &(0x7f0000000380)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x4, 0x3, 0xc}, 0x10, 0xcfcc, 0xffffffffffffffff, 0x1, &(0x7f0000000400)=[0x1], &(0x7f0000000440)=[{0x4, 0x4, 0xf, 0x3}], 0x10, 0xf0, @void, @value}, 0x94) (async) r1 = socket(0x40000000015, 0x5, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073597a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c00014000000000000000002c0001800a0001006c696d69740000001c0002800c00024000000000100000000c0001"], 0x110}}, 0x0) (rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000580), 0x4) (async, rerun: 32) socket$rds(0x15, 0x5, 0x0) (async, rerun: 32) getsockopt(r1, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000040)=ANY=[@ANYRES64=r3], 0x4) syz_emit_ethernet(0x26, &(0x7f0000000540)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @local, @val={@void, {0x8100, 0x7, 0x1, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}}}}}, 0x0) 1.363271369s ago: executing program 1 (id=3229): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x47, 0x0, &(0x7f0000002100)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000b800000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba6f32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) readv(r2, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/227, 0xe3}], 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f0000003b80)=ANY=[@ANYBLOB="1c0000000c0601010000000000000000000000000500010007000000"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000070000004d0000000000000045000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x50) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r4) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffff3f}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$team(&(0x7f00000006c0), r10) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000ac0)={0x98, r11, 0x401, 0x70bd2c, 0x25dfdc02, {}, [{{0x8, 0x1, r12}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x681}}, {0x8}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000100)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20800002}, 0xc, &(0x7f00000004c0)={&(0x7f0000000600)={0x94, r7, 0x100, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x5}, @ETHTOOL_A_COALESCE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x1000}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0xff}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x6}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x74}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x1}]}, 0x94}}, 0xc000001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r13 = gettid() pipe(&(0x7f0000000340)={0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={r13, r14, 0x0, 0x0, 0x0}, 0x30) 1.24363443s ago: executing program 0 (id=3230): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='f2fs_map_blocks\x00', r2}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r5, &(0x7f0000000400)="de70a92517217be9583256091b418c212ba8e0052a1a4b9bf537b357aa2b072b73256c4e8134fc78a373e4cb95d21ce322b80583", &(0x7f0000000680)=""/216}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000180), &(0x7f0000000280)='%ps \x00'}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000008f3680263cf713eb116000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000006000000000000000000000000000000009fb0cb8d19a47e44e46f30e0dde59de66015e84fc9dbb88ef5135e08ccebce6f1a46ab3673ee8d63afafaa517d1b35ff2485846fdd76c0daad99d7ac93cd737a4db2da5b7007f6105c3245bb9e667371d5aeb908eef61d45407401656df3c9d01e398482a4c4e7fd231902b3c847545c3f4110d02db0bc35e86eb5048da1645aa9aa425dc3a7112ffa15f122066ce82391dce5f96e3cfbe48c65dc55edd17b3108fca96ac3957923e7d6a4cbd08e1022e6ee0616e310350d1fa278a97d58efd3f653c93f"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @rand_addr=0x64010100}, {0x20000010304, @remote}, 0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, 'veth1_to_hsr\x00'}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81, @void, @value}, 0x90) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r10, 0x0, 0x0, 0x80000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r9, &(0x7f0000000300)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r8, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r0, 0x1}, 0x20) 994.69853ms ago: executing program 0 (id=3231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r1, 0x29, 0x13, &(0x7f0000000040)=0x1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x2fd, &(0x7f0000000440)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0xd, 0x6, "a872ec", 0x2c7, 0x2f, 0x0, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x12}, {[@dstopts={0x0, 0x3, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}, @hopopts={0x67, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x8}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x81, 0x2, [], "69b1b294451653e38ab2ea13a778aee0b4a07d3c5e7f9555cf5dca2a8f3f4d410050e2f5707d0956ed115f765259ef48caab4bcd204f2e69169a3e08958fbf12e7ed602cf02068a44687e48097dfbf79effeb9f5acffe468f6c714ec946cfb1f1d2119f517991786f14b0f78f1b513f06f528d5e253b9f80372def128b1b5bbd39"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x7], "24c4b42999d850f7df0380bccffe4c8ac70e8732efe41227dc09fcf6ee0cf46a7299eeecea334008b053bbd4a66adf4ff3139dc5591ba91cf6543dd022d804e51f7310be567cea5536142b619cd4e329c6abc69d14e4cd044085152ca09fd5b372731bcb8731338b175798ae9687cc898dd4a6743a0422a4d79fac62a9d5ecdfa22821b99716a7c2c1d89c1668280c30feb0555c2843476eb115f3682735768a4d4ce8db"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x5, 0x10, 0x1], "af712c2519a1dc51f16f4b5d0e084346c4be68918cd2bd39944585fed9bec86e83d9"}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0xd9, 0x1, 0x1, 0x2, 0x0, 0x7}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x4, {{0x9, 0x2, 0x7, 0x2, 0x1, 0x1, 0x2, 0x4}, 0x2, {0x6, 0x2, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "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"}}}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x118, 0x75c, 0x6a, 0x591]}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0x74}}, 0x0) 792.857729ms ago: executing program 0 (id=3232): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x88) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={0x0}, 0x18) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7, 0x7800, 0x60b, 0x8, {{0x5, 0x4, 0x2, 0x30, 0x14, 0x67, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010101, @multicast1}}}}) r1 = socket(0x2a, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = socket(0x1, 0x80802, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x8}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x1a000201d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r6) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, r7, 0x607, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8801}, 0x80) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x2004000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x3c, r7, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}, @IEEE802154_ATTR_SCAN_TYPE={0x3, 0x13, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xd}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xb5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x9}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x0, 0x1170, 0x1398, 0x1170, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x23, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000001500)="7fa60bbd4f94b9e40400", 0x10) socket$packet(0x11, 0x2, 0x300) 629.156249ms ago: executing program 0 (id=3233): syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffe2ff1704b43fdbde08004500006000000000000190b5b34384c94788eaf4478fd1cc491278ac1e0001ac1414aa05009078e00000e0410000000000000000110000ac1414aa00000020070300442c0003e000002f000000e1ef1414aa000000000000000000000000ac141400"/125], 0x0) 469.979965ms ago: executing program 0 (id=3234): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117d000000000085100000e5f1c906d5ddedd20000000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffdd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 391.175635ms ago: executing program 0 (id=3235): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYRESOCT=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2d, 0x9, 0x70bd27, 0x25dfdbfe, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @uid}]}, 0x1c}}, 0x20000086) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[], 0x114}], 0x1}, 0x0) sendto$unix(r1, &(0x7f00000004c0)="ebb567fa9be782d5419441921c5ad8dbb62cfedc0211493a8b51b99b6f0bef4300fa1e7e7a4580e4b6e8f0370523245a0eef68b369f27e6ad4fe4da1f07fe59b5da7965492a77e139db58947392ac2fa109cdf002ce7e1b01328ef6c92b8fdffbab3db6c0a209aab04efe9effef3939abde941a4879a53f3af6cf4e78bdad7446edd640289f0c050a752ffb3232abbacec79cbfeb2972f892e7ced8a0eac18fbf2c4fc241655eb5a021450da28a6b53f85985d321ae28d013f721bdd42997264e0f3b6170a627c638d772d2804d8792faf101b708e1f897e050b9b92d59074356ae4475101820f03d58cafbc1ce2a6c99b7f6d7200dc20f5aae8eee975738d34e53cf588005b177c956607c2f90879c0fcd2bbd6c3441e763a547375fbc35900ba6765824b3f0bf6a2b7348270e6316d26c104b5ec5aaf0f058569087d676983", 0x140, 0x4c010, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000180)=@x25, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000040)="6dd907ce4378855ca0dbabd8c2c67143b6bc472f08a2b9b5b47408", 0x1b}, {&(0x7f0000000240)="472e3d1dfb31d056639fc18107a7eddba23aaedb8e0404ab929022be9690915206ec2ff6dde3ccec20258ce4c3dd3d405cbe9e54", 0x34}, {&(0x7f0000000300)="b2b273f75860ef3b6ae169e4fae2bb097436ae4f59ca512474d65e2cc5834e67d63c4df2db3a182b2a7c2c98c94f63fd7c7ca0a80e37e132ad4978ba45a261e32a36c3884b2b9c17a030c36c3b", 0x4d}, {&(0x7f0000000380)="c0f17a5769bf1bd3497fe131ac4c262454500dfada48ac538de5feebdb24ac5b5a71d53d8a0a2ce2d901e7f80ce2fd57a2e93002304eeaa898c3a1dcb8e33f973688fec5a40297657831b376393adf2f7cef7193db519b29288360075b2067f3ec8f67b7b58b56afd34b43f22a122a647e7faa2fe0d34f745c40f926a057aa20ae1aac", 0x83}, {&(0x7f0000000600)="d75556bd850a602771829b7c0b0eef14f5b478737f63d56557fe3cd4ca7ce22a6f15ec622052cfd6b061a550a922cc0f6d547a756b4be391f6302c6c6d21b9e039ae5ccb99936c631d918ac48545ba0dd96765673e0c7ffcb949effd60a0ba29bde44a247c3c0880859b06e79b46fac41bb26794e93d9fcbbdc2c3e061255aca3079640e57ae863470212ca02f5b9d497a96a8e6e0c494720f7b7aba60db6c5df3c666381351e7bc703e882fd985b0db2e9c7a6122077ef82d79c013acd2690d733253e8bdb8e785aa", 0xc9}, {&(0x7f0000000f40)="7ccdff4827c0569ac2aa33ad5abce42c7635bec50b45e347db7cbb12c29cf17df9557aba94330bca3d9836aa45880393318f78b2a081b381b5fbe7b77d257bd9d3e9f14e63855bf8e72b678450fac9fff45045c22a687569132ee05a1751f976edd3c8723c4c7e08d0fa5a9e1a28e602f185cea5d134c6bd2b2892129a99e9e121e12aec616df58a09b68f9d3373f42986074d62fbb50aa015199a830165dc80201f374bbb0feb3754721aeb4d72bb2c738009d7025b0f25333ee92518707437d7ba8549069b5bcef25191423ee557daef8826ef6eee6c0613a647e3d9e6b8c8ad3b1684891d4392d1dda04bb9edbb29d8e8bc910ddce6f31c68a9e0dc58af849cf8fd062513621654f912dc086a6404cfe68d1a1b703f38cb6ef659d1af0cf126507e6a18992be233b6a0686d1c0dc7bb8360a69d6d35f2c3497b3302e771349661de625a3844545d6ede264eb3ae799f78ec88b3dbb60f6f206646b3cce93a92cfa1e1eb52ecd6716e4e484e03e1612ea35e1f220f98c2fbfa0d840298a79132d1591d1a2e75bfe4cb7f3c3249b39635a1ab0142b82a7a956ade0020cff0ff38751b431773298904eb7ff2823e3aa7fd0349a660a8720b892349ca4cf2c2654e408f772b7cd17b7016d0df5644dde259919abff86267f4615fb5aed3c8aadd1faa960056d456aa1393a2012dc9e418686865d369d442bfcfd95e26e6c0d45770d2add7447571d030bb3367a3a03911aaf6c32d7f8922bac5db2d83fe350b93606d2f07b0c45720fc60e006d54c696dcd93ae72317ed23f331b7211a6f64ce74c6b5f8f4217cf57fa4242a8adc2fb1e06ff6f5195ae21020c45f4889ad82b2a479ec013480a7679b9a2cdc00298f860705095ad27ce9ac7522c8110e43f80dab6a85ef2522edad55a31a5520c052cd921aa83fa9ecdaf2bbacc82fd62ad23878026ef0e879eb111a6fdef2efbe9cee4507e3745ac8cdd3cb7e44696447bb4287bc57585f3dfb04306e3c164f233f4b3eb1de561abf23afca303296b784025ffc3837efc2deded70abf1fde922c7f230e46d0d91b560746cc4ae16a467094904389fb420e3540c9632e9c4ab98a2ec47d779aaaf33539ba40e19e14cd818d710cc3040c9c8da58140c561e6c68560ffa1c865c9ef61cca6bc64443baed8d1417a8e318388f7411a31dd4662cfe622025d009fd6d6c290aebc0a4221e015d47971703059465f8c476fb1f21fdf3feddfa11d4b9db83884341e7b0fc9f700f891fb1efbaad4753b1cd7df395ef2df2073c5e174ffb6087209d1fd665a73a7e39c23aff0dde33e3220d9999f3d1b11027c3ff6cafa3ea3dad20320c43a3fae52461b4f25f229898634eab062d949925dce3cbd9e597958ba2ab3d1368c3fc9ac42684443a009021b11fc7223f5cb42cd65ba06f84c0b4576883da89f21db812c62aa500b02405dfe9795743a099e2a1b14607814614c8555f95ba7cb4109e5a083b8767f1d52c04ce0cbbdff93890b6fa30a266ef382c30cfba73c105f13413332fa5b287b2724dc7defe68467083d1a67d7f0eb7810dd234e07d7bfa4decd2b990f87de141e2ddf93ba7f40cc6be3a6ef28eda30851e87b3895229a21f32fe923d6740dc6a9fdba840a1c8b7d1ebd97c56b35f61eb2b1992e5e8f0043ce67ad954a7bea692122fdf1bdf627f136a359d3fc1a951a28c54e62f538d218daadc3b6e62bf7ff8ae60b666c300cd463bf34594b2499f87f13360b57b2c1611d41a00938b29cc38c56f61fddde36574c92973e5d1083ed9ce404c6ceb4a20a209d7b35782907e0b5f66690f80c9b8ed0787f717a8dd465cb0e21ba15e9dd9e41497c92c0c7d0739f4799866797be0a643930ef3586dc99dc86601710fe44a7278b6b5beb321631c2619a07aab70ab27b82743189cb2443d13e7b98b8c150dad7acdd6de1c332e9ad5196967ca412793f0d91a910aa22c15947d8107558940e5df964b3a22cfa4f95f769cbfdf70950b7541f9afc4c3dfd2876a466e84e482a45e00f0253acb98f1603dbdafb94f1c039e079faa5da52b12bb1d1ba0c002808070b2ccb442c73eb69b50cbe24e748a158c87d64c421b9b0380f2a29e17bf9f3d56c413f6836df6e7daa300dda9101c4404db565eaada242cc0e60d81d3438b9ff302ebaee4dee671bdf04de605de1bd1b3309bb3c3313468490c869b1bc46cb3d22be8ab090800dff41330c6a78b31720af17b9506f2159cc49724d679e13fdd4108ba9338936d59be7986c9944f40fe9e4f11562e38e218748f9d7b039d8e633a7f51e9184cd6491cfd6011ce2caef04e2b14de606248f7f035ae23e37e52c5eef914a1f8fb78581a63893de74ec1d09bd9c6eea11208d02a2e301081e462ca1ea9709e614b76511f4e4944d7ca550675057d7033f14da5c3951d3a2bb49d09d6589797273fe60ef0b458c394cdc93fbbdea45b8f734c5c3d4ed91d0bf194bc131ec43e8d1e863bdf28324467ce918b17d21bc656e55922006d88e9ceae4c03bedd30fe1d516c375c9f02ede35256f5d59042ad58358072c6a420a174276cc5adef9ffd72432ae3c900734a9ce90ba8a618c09bf5a98ff11254c9abf3be9d058c0a8407bed32ada0c269402badf560906b5ed8b9b766c3b990be67113b4f14ad652a694e6ac44417edd9e1d45bc8a95eb3197f9c75ea8872b379ebfaea711c3881858215b679c3d70899b289fc3259659fcec6d0ec29940bf1bd5992131c13a8750987a0f052e2fe9caa9db812c0c1bf162c10c51a6888a38d9d9d559e478cfd34ce39aa4628c22be2cfce77b52478de3f0e9a23953547b8c71bcad4cd4b2a8d50619c72a336dacd2da0eb98ea1fc0afe0dce88026cf10da62597b629ea73f08c08f85592eed6ba5fbd1d4138ebb1ea0a5d878da3486328547740c2ef63d3c6a8a244857596ec1cc391866e15ff3cf84d843be1190e47abd56b9f8a0a3b27616cba0e4408eb906a95123273bc1002a1e1e3692fe2e300eac119a76745457f490bf163d26981e82a2ce7f1eb502f85a57b710569c61b158d4d0579bae2b26f5dc0d3dda001c73d9d9b5cfe454ae01a1cb403ae5f13700461d4955f140adfa0679e139024007c1c57b945e46ae8622f608998a6c7b3f11da3be8746ad790f90469a424bda5827efa48799eaa80208d4c6fbe72a43fdec597c586d50e066ce183686f792e29eb1ab6edf16afa3fc0ea44d819cf5bbd9330397db03ea8f9ef06b1bb46eac2fd478be115bef6a6e817ef0e9f509782c47df949a4f7df749f6d5f58843a1f5afcd8a5753dcad3ad490b8a38ea54cfdd3f9c1f22a6b9daf9260aabc501712c2c9009f4926d407b006599bc73e3388816529610e91d81dfc01210813c07f11e186804f1a5c8ac3068aba9c3a54d94e9fbb08eaf4aece4c886613bcf533941a6f78adf0fede8ec04f15a4ed5a1575806fd24991b950f16508f103e8e6a726390a6c323d4b118768971af360e8a71c8c9f2b9b6db8b5629fb7f81edaac06b22f2c8d73f7329c815da48c6903a57b78323c123901af1bdc2659995014cb5ddf540986ab9929ca05f396efa38c6472327365a1a437f16b89b4afd0d4bd482b9d1a1704c00862ed6284df6bbbaa0b5d7d757bfdd65c03f7ea35c5c453f94dc435d9a31d8ed30252c64c64739b3e63d8792c442e022105e3c5995a87a842607994bf142806666ec50479563d335cb5ba5de59bc436f1acf04c6bbed9f0cc8c53472cdd1453ff1b6e4ef65e35ecd2f31d1e079f85cfe4776fd4ca86f6ee8d63e3f61ed31452f507b74054bb9e6550b542b8d0fb8886f49cd34a2d4b5a51cb4ec7d083c577bed9fc4e6224d8c4010689c78a8f69ec5033270c2a2ed0dd5f72aaf498805f08ad8397e59d548b0727a47f2778b899f3a9898580a1fb17873fd860654e55d23eda769e4a78da6ba3796a3080608db31cf6b0fafe5f6508a0ce44f30386c298651ec08fabb06e1e9833041dd2c444e1cbf6deab2074a931587b4bf1a6a0c94fd425c5018a91d4ddc7cd28c049ac5f1da009e84f5ac0162ccb42b474e9cf0b0ee2e0ae8fe5fa743c57954d8fe216897aed5c0afe49c8ee08f52e9f78692909156f3df50208e0b7d94058e1b5825cc05825f3e79a6beb463f550ae15a36bf14b66c0f2638531c0f9e16af921b082ff4f1ccd6451f7254efe71b4921a0cc547a99fc27d01b70dbfb34a4f6180a824f52e9eed9cd6bd46b5f25f9cd14c708d96b16e93b6a8fb2d031b98a7a9ac78442373c68f3a132663125ba9fc41dd81342e73047e3a7681340f110bb759aeed6e6be281bcf93c690af80cc6f8b601157ba6afae65a42c18166f77ffc01b6eb0f8f25ee33d3d676f24b67673d72df0ad002f1d255c2287b2c7d19359b5b20c669d8dcdc89d6d4e1deb1ea6e2ddc9885a09db5e6c93a33b2554d5606d057a626a65d35adb31ad1191999a9451114de792dfd2e8e3bf5bef760cea75ac4a039fdf6dfa507ebcc40eced3da57b2c39a6a5eb5b00dde6f8f63a61b750badb936eb9d4630342b88d150afeed77964759100bb0c8431df833440a23ebab2d1a78fedbfeb1ef3fd0edd3c168db99d42471826c51ae2d663ceef53bb9cbca9411ccc032e60f78f0e5ceb2da647c5728a717dd7dbda2164c8e5dfa5972bbedc41fef795f90e33d6fb73c7f7bb3408b4b6287c461be5aab35e7f5cbe229b48745cd7615279be723564a19824eecb037d4df6eabaa848fef2e9bb76bbb1346d66f8ee2f20782889be47bde48a81d2795a07473bc8515bfaa1ab6ff741e59b81d8ee7980c19e52d51d2dc79343112ba56f6d4144aa9ac69f59acc74a97dc988b842781532b03e72dff98419a1df6c0900ffd51091df9dbf2f792cb1cdcb7ec21b6d4855faef514b78a1e6cf4750fa77e31bfc8f075889e071e623661dfa047329ce2b95e8f2223a42317903318dd312f4a15bbaf0670508c75e7cc6f0dba11fb5d92d062704c91206525a24886027000a1f9ff327f7f1fac5e5000c0606f7731b6ed73933e6adb194e222d37c6cae62a2080d419045b40b7d3a968857f056ae7530417b9146b111439a0fb460a04d89d98112e23d1d0107fd0c91b5a9341f1e69c14e79362fedbccb57213de9d1ed39017633abba06496ab9e3c823465be90e3850150e61926cd3e8c6ea4ac604ceda848c1a47a964d34f28372c1e3bb698093a52f88a005a39d158286da2ea9bc831eff6b4582002b2304435bcad95cd5d853f9b5bf5d7fbb87a9cb84f0093ab7c68304849e1da9a8c073142db1a829c9e517eb373a3b6aeb5be8d2501f57f3794aeb93be3090f16f050c87e2637fb925c7b6db94195b7e646aa10b22abdb2dd19479ae213d3ab1260c9efed4a505fe91877bbe5b20dacfb5af53d7e73151704f36e0963c7e745e3aef1cf8d1566dea0585990bd810b1d8ef7a34a4e276a49bfcbef839aa2c4e7e3f5df77808805ef1a6b171deb4dd315232d7af8e2da44900db0774611d92cf6f3d203085ab41c975c8ddafe2165ad0b4ae987d9701f489efa9c755a9bd8da7020ed1809cfbcb62cf0b8561f52032f6f444bf6a67251ae6d2867cfdd19c1a43585ea2800f4dfd85efee29fa17dd8a760a38a4e15c0130456b2f5f226b40f187bedbb629452b8c41fed6499f618e056fbbfc8ddd90dbc104c9457f44852c8be4d6218aa595a99ab7249bf4df0315015b94d88cf494d98c817679c5c7b42cad37455a675243c64f888319f34b4e3370dc2fd5ed96bd6bd92a15961fb93b775b96536dbccdc60e4", 0x1000}, {&(0x7f0000000440)="781d3d35f8b0da671ef122489047f4b2b34dfaec7871732297be02", 0x1b}, {&(0x7f0000000480)="45ebde81c9b0a0c9c9b1f5fc32d1a41166161b7637bdde74", 0x18}, {&(0x7f0000000700)="f25ff8efe14b8780cce51d4b0d12a3a566e52a2e318845bf2fe30b62f5", 0x1d}], 0x9}}], 0x1, 0x20000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYRESOCT=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2d, 0x9, 0x70bd27, 0x25dfdbfe, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @uid}]}, 0x1c}}, 0x20000086) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[], 0x114}], 0x1}, 0x0) (async) sendto$unix(r1, &(0x7f00000004c0)="ebb567fa9be782d5419441921c5ad8dbb62cfedc0211493a8b51b99b6f0bef4300fa1e7e7a4580e4b6e8f0370523245a0eef68b369f27e6ad4fe4da1f07fe59b5da7965492a77e139db58947392ac2fa109cdf002ce7e1b01328ef6c92b8fdffbab3db6c0a209aab04efe9effef3939abde941a4879a53f3af6cf4e78bdad7446edd640289f0c050a752ffb3232abbacec79cbfeb2972f892e7ced8a0eac18fbf2c4fc241655eb5a021450da28a6b53f85985d321ae28d013f721bdd42997264e0f3b6170a627c638d772d2804d8792faf101b708e1f897e050b9b92d59074356ae4475101820f03d58cafbc1ce2a6c99b7f6d7200dc20f5aae8eee975738d34e53cf588005b177c956607c2f90879c0fcd2bbd6c3441e763a547375fbc35900ba6765824b3f0bf6a2b7348270e6316d26c104b5ec5aaf0f058569087d676983", 0x140, 0x4c010, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000180)=@x25, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000040)="6dd907ce4378855ca0dbabd8c2c67143b6bc472f08a2b9b5b47408", 0x1b}, {&(0x7f0000000240)="472e3d1dfb31d056639fc18107a7eddba23aaedb8e0404ab929022be9690915206ec2ff6dde3ccec20258ce4c3dd3d405cbe9e54", 0x34}, {&(0x7f0000000300)="b2b273f75860ef3b6ae169e4fae2bb097436ae4f59ca512474d65e2cc5834e67d63c4df2db3a182b2a7c2c98c94f63fd7c7ca0a80e37e132ad4978ba45a261e32a36c3884b2b9c17a030c36c3b", 0x4d}, {&(0x7f0000000380)="c0f17a5769bf1bd3497fe131ac4c262454500dfada48ac538de5feebdb24ac5b5a71d53d8a0a2ce2d901e7f80ce2fd57a2e93002304eeaa898c3a1dcb8e33f973688fec5a40297657831b376393adf2f7cef7193db519b29288360075b2067f3ec8f67b7b58b56afd34b43f22a122a647e7faa2fe0d34f745c40f926a057aa20ae1aac", 0x83}, {&(0x7f0000000600)="d75556bd850a602771829b7c0b0eef14f5b478737f63d56557fe3cd4ca7ce22a6f15ec622052cfd6b061a550a922cc0f6d547a756b4be391f6302c6c6d21b9e039ae5ccb99936c631d918ac48545ba0dd96765673e0c7ffcb949effd60a0ba29bde44a247c3c0880859b06e79b46fac41bb26794e93d9fcbbdc2c3e061255aca3079640e57ae863470212ca02f5b9d497a96a8e6e0c494720f7b7aba60db6c5df3c666381351e7bc703e882fd985b0db2e9c7a6122077ef82d79c013acd2690d733253e8bdb8e785aa", 0xc9}, {&(0x7f0000000f40)="7ccdff4827c0569ac2aa33ad5abce42c7635bec50b45e347db7cbb12c29cf17df9557aba94330bca3d9836aa45880393318f78b2a081b381b5fbe7b77d257bd9d3e9f14e63855bf8e72b678450fac9fff45045c22a687569132ee05a1751f976edd3c8723c4c7e08d0fa5a9e1a28e602f185cea5d134c6bd2b2892129a99e9e121e12aec616df58a09b68f9d3373f42986074d62fbb50aa015199a830165dc80201f374bbb0feb3754721aeb4d72bb2c738009d7025b0f25333ee92518707437d7ba8549069b5bcef25191423ee557daef8826ef6eee6c0613a647e3d9e6b8c8ad3b1684891d4392d1dda04bb9edbb29d8e8bc910ddce6f31c68a9e0dc58af849cf8fd062513621654f912dc086a6404cfe68d1a1b703f38cb6ef659d1af0cf126507e6a18992be233b6a0686d1c0dc7bb8360a69d6d35f2c3497b3302e771349661de625a3844545d6ede264eb3ae799f78ec88b3dbb60f6f206646b3cce93a92cfa1e1eb52ecd6716e4e484e03e1612ea35e1f220f98c2fbfa0d840298a79132d1591d1a2e75bfe4cb7f3c3249b39635a1ab0142b82a7a956ade0020cff0ff38751b431773298904eb7ff2823e3aa7fd0349a660a8720b892349ca4cf2c2654e408f772b7cd17b7016d0df5644dde259919abff86267f4615fb5aed3c8aadd1faa960056d456aa1393a2012dc9e418686865d369d442bfcfd95e26e6c0d45770d2add7447571d030bb3367a3a03911aaf6c32d7f8922bac5db2d83fe350b93606d2f07b0c45720fc60e006d54c696dcd93ae72317ed23f331b7211a6f64ce74c6b5f8f4217cf57fa4242a8adc2fb1e06ff6f5195ae21020c45f4889ad82b2a479ec013480a7679b9a2cdc00298f860705095ad27ce9ac7522c8110e43f80dab6a85ef2522edad55a31a5520c052cd921aa83fa9ecdaf2bbacc82fd62ad23878026ef0e879eb111a6fdef2efbe9cee4507e3745ac8cdd3cb7e44696447bb4287bc57585f3dfb04306e3c164f233f4b3eb1de561abf23afca303296b784025ffc3837efc2deded70abf1fde922c7f230e46d0d91b560746cc4ae16a467094904389fb420e3540c9632e9c4ab98a2ec47d779aaaf33539ba40e19e14cd818d710cc3040c9c8da58140c561e6c68560ffa1c865c9ef61cca6bc64443baed8d1417a8e318388f7411a31dd4662cfe622025d009fd6d6c290aebc0a4221e015d47971703059465f8c476fb1f21fdf3feddfa11d4b9db83884341e7b0fc9f700f891fb1efbaad4753b1cd7df395ef2df2073c5e174ffb6087209d1fd665a73a7e39c23aff0dde33e3220d9999f3d1b11027c3ff6cafa3ea3dad20320c43a3fae52461b4f25f229898634eab062d949925dce3cbd9e597958ba2ab3d1368c3fc9ac42684443a009021b11fc7223f5cb42cd65ba06f84c0b4576883da89f21db812c62aa500b02405dfe9795743a099e2a1b14607814614c8555f95ba7cb4109e5a083b8767f1d52c04ce0cbbdff93890b6fa30a266ef382c30cfba73c105f13413332fa5b287b2724dc7defe68467083d1a67d7f0eb7810dd234e07d7bfa4decd2b990f87de141e2ddf93ba7f40cc6be3a6ef28eda30851e87b3895229a21f32fe923d6740dc6a9fdba840a1c8b7d1ebd97c56b35f61eb2b1992e5e8f0043ce67ad954a7bea692122fdf1bdf627f136a359d3fc1a951a28c54e62f538d218daadc3b6e62bf7ff8ae60b666c300cd463bf34594b2499f87f13360b57b2c1611d41a00938b29cc38c56f61fddde36574c92973e5d1083ed9ce404c6ceb4a20a209d7b35782907e0b5f66690f80c9b8ed0787f717a8dd465cb0e21ba15e9dd9e41497c92c0c7d0739f4799866797be0a643930ef3586dc99dc86601710fe44a7278b6b5beb321631c2619a07aab70ab27b82743189cb2443d13e7b98b8c150dad7acdd6de1c332e9ad5196967ca412793f0d91a910aa22c15947d8107558940e5df964b3a22cfa4f95f769cbfdf70950b7541f9afc4c3dfd2876a466e84e482a45e00f0253acb98f1603dbdafb94f1c039e079faa5da52b12bb1d1ba0c002808070b2ccb442c73eb69b50cbe24e748a158c87d64c421b9b0380f2a29e17bf9f3d56c413f6836df6e7daa300dda9101c4404db565eaada242cc0e60d81d3438b9ff302ebaee4dee671bdf04de605de1bd1b3309bb3c3313468490c869b1bc46cb3d22be8ab090800dff41330c6a78b31720af17b9506f2159cc49724d679e13fdd4108ba9338936d59be7986c9944f40fe9e4f11562e38e218748f9d7b039d8e633a7f51e9184cd6491cfd6011ce2caef04e2b14de606248f7f035ae23e37e52c5eef914a1f8fb78581a63893de74ec1d09bd9c6eea11208d02a2e301081e462ca1ea9709e614b76511f4e4944d7ca550675057d7033f14da5c3951d3a2bb49d09d6589797273fe60ef0b458c394cdc93fbbdea45b8f734c5c3d4ed91d0bf194bc131ec43e8d1e863bdf28324467ce918b17d21bc656e55922006d88e9ceae4c03bedd30fe1d516c375c9f02ede35256f5d59042ad58358072c6a420a174276cc5adef9ffd72432ae3c900734a9ce90ba8a618c09bf5a98ff11254c9abf3be9d058c0a8407bed32ada0c269402badf560906b5ed8b9b766c3b990be67113b4f14ad652a694e6ac44417edd9e1d45bc8a95eb3197f9c75ea8872b379ebfaea711c3881858215b679c3d70899b289fc3259659fcec6d0ec29940bf1bd5992131c13a8750987a0f052e2fe9caa9db812c0c1bf162c10c51a6888a38d9d9d559e478cfd34ce39aa4628c22be2cfce77b52478de3f0e9a23953547b8c71bcad4cd4b2a8d50619c72a336dacd2da0eb98ea1fc0afe0dce88026cf10da62597b629ea73f08c08f85592eed6ba5fbd1d4138ebb1ea0a5d878da3486328547740c2ef63d3c6a8a244857596ec1cc391866e15ff3cf84d843be1190e47abd56b9f8a0a3b27616cba0e4408eb906a95123273bc1002a1e1e3692fe2e300eac119a76745457f490bf163d26981e82a2ce7f1eb502f85a57b710569c61b158d4d0579bae2b26f5dc0d3dda001c73d9d9b5cfe454ae01a1cb403ae5f13700461d4955f140adfa0679e139024007c1c57b945e46ae8622f608998a6c7b3f11da3be8746ad790f90469a424bda5827efa48799eaa80208d4c6fbe72a43fdec597c586d50e066ce183686f792e29eb1ab6edf16afa3fc0ea44d819cf5bbd9330397db03ea8f9ef06b1bb46eac2fd478be115bef6a6e817ef0e9f509782c47df949a4f7df749f6d5f58843a1f5afcd8a5753dcad3ad490b8a38ea54cfdd3f9c1f22a6b9daf9260aabc501712c2c9009f4926d407b006599bc73e3388816529610e91d81dfc01210813c07f11e186804f1a5c8ac3068aba9c3a54d94e9fbb08eaf4aece4c886613bcf533941a6f78adf0fede8ec04f15a4ed5a1575806fd24991b950f16508f103e8e6a726390a6c323d4b118768971af360e8a71c8c9f2b9b6db8b5629fb7f81edaac06b22f2c8d73f7329c815da48c6903a57b78323c123901af1bdc2659995014cb5ddf540986ab9929ca05f396efa38c6472327365a1a437f16b89b4afd0d4bd482b9d1a1704c00862ed6284df6bbbaa0b5d7d757bfdd65c03f7ea35c5c453f94dc435d9a31d8ed30252c64c64739b3e63d8792c442e022105e3c5995a87a842607994bf142806666ec50479563d335cb5ba5de59bc436f1acf04c6bbed9f0cc8c53472cdd1453ff1b6e4ef65e35ecd2f31d1e079f85cfe4776fd4ca86f6ee8d63e3f61ed31452f507b74054bb9e6550b542b8d0fb8886f49cd34a2d4b5a51cb4ec7d083c577bed9fc4e6224d8c4010689c78a8f69ec5033270c2a2ed0dd5f72aaf498805f08ad8397e59d548b0727a47f2778b899f3a9898580a1fb17873fd860654e55d23eda769e4a78da6ba3796a3080608db31cf6b0fafe5f6508a0ce44f30386c298651ec08fabb06e1e9833041dd2c444e1cbf6deab2074a931587b4bf1a6a0c94fd425c5018a91d4ddc7cd28c049ac5f1da009e84f5ac0162ccb42b474e9cf0b0ee2e0ae8fe5fa743c57954d8fe216897aed5c0afe49c8ee08f52e9f78692909156f3df50208e0b7d94058e1b5825cc05825f3e79a6beb463f550ae15a36bf14b66c0f2638531c0f9e16af921b082ff4f1ccd6451f7254efe71b4921a0cc547a99fc27d01b70dbfb34a4f6180a824f52e9eed9cd6bd46b5f25f9cd14c708d96b16e93b6a8fb2d031b98a7a9ac78442373c68f3a132663125ba9fc41dd81342e73047e3a7681340f110bb759aeed6e6be281bcf93c690af80cc6f8b601157ba6afae65a42c18166f77ffc01b6eb0f8f25ee33d3d676f24b67673d72df0ad002f1d255c2287b2c7d19359b5b20c669d8dcdc89d6d4e1deb1ea6e2ddc9885a09db5e6c93a33b2554d5606d057a626a65d35adb31ad1191999a9451114de792dfd2e8e3bf5bef760cea75ac4a039fdf6dfa507ebcc40eced3da57b2c39a6a5eb5b00dde6f8f63a61b750badb936eb9d4630342b88d150afeed77964759100bb0c8431df833440a23ebab2d1a78fedbfeb1ef3fd0edd3c168db99d42471826c51ae2d663ceef53bb9cbca9411ccc032e60f78f0e5ceb2da647c5728a717dd7dbda2164c8e5dfa5972bbedc41fef795f90e33d6fb73c7f7bb3408b4b6287c461be5aab35e7f5cbe229b48745cd7615279be723564a19824eecb037d4df6eabaa848fef2e9bb76bbb1346d66f8ee2f20782889be47bde48a81d2795a07473bc8515bfaa1ab6ff741e59b81d8ee7980c19e52d51d2dc79343112ba56f6d4144aa9ac69f59acc74a97dc988b842781532b03e72dff98419a1df6c0900ffd51091df9dbf2f792cb1cdcb7ec21b6d4855faef514b78a1e6cf4750fa77e31bfc8f075889e071e623661dfa047329ce2b95e8f2223a42317903318dd312f4a15bbaf0670508c75e7cc6f0dba11fb5d92d062704c91206525a24886027000a1f9ff327f7f1fac5e5000c0606f7731b6ed73933e6adb194e222d37c6cae62a2080d419045b40b7d3a968857f056ae7530417b9146b111439a0fb460a04d89d98112e23d1d0107fd0c91b5a9341f1e69c14e79362fedbccb57213de9d1ed39017633abba06496ab9e3c823465be90e3850150e61926cd3e8c6ea4ac604ceda848c1a47a964d34f28372c1e3bb698093a52f88a005a39d158286da2ea9bc831eff6b4582002b2304435bcad95cd5d853f9b5bf5d7fbb87a9cb84f0093ab7c68304849e1da9a8c073142db1a829c9e517eb373a3b6aeb5be8d2501f57f3794aeb93be3090f16f050c87e2637fb925c7b6db94195b7e646aa10b22abdb2dd19479ae213d3ab1260c9efed4a505fe91877bbe5b20dacfb5af53d7e73151704f36e0963c7e745e3aef1cf8d1566dea0585990bd810b1d8ef7a34a4e276a49bfcbef839aa2c4e7e3f5df77808805ef1a6b171deb4dd315232d7af8e2da44900db0774611d92cf6f3d203085ab41c975c8ddafe2165ad0b4ae987d9701f489efa9c755a9bd8da7020ed1809cfbcb62cf0b8561f52032f6f444bf6a67251ae6d2867cfdd19c1a43585ea2800f4dfd85efee29fa17dd8a760a38a4e15c0130456b2f5f226b40f187bedbb629452b8c41fed6499f618e056fbbfc8ddd90dbc104c9457f44852c8be4d6218aa595a99ab7249bf4df0315015b94d88cf494d98c817679c5c7b42cad37455a675243c64f888319f34b4e3370dc2fd5ed96bd6bd92a15961fb93b775b96536dbccdc60e4", 0x1000}, {&(0x7f0000000440)="781d3d35f8b0da671ef122489047f4b2b34dfaec7871732297be02", 0x1b}, {&(0x7f0000000480)="45ebde81c9b0a0c9c9b1f5fc32d1a41166161b7637bdde74", 0x18}, {&(0x7f0000000700)="f25ff8efe14b8780cce51d4b0d12a3a566e52a2e318845bf2fe30b62f5", 0x1d}], 0x9}}], 0x1, 0x20000000) (async) 0s ago: executing program 2 (id=3236): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) recvmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x3}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) socket(0x8, 0x3, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) recvmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x3}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) (async) kernel console output (not intermixed with test programs): - 0 [ 256.295290][T10496] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.356766][T10496] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.409504][T10496] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.501080][T10496] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.845419][T10539] __nla_validate_parse: 5 callbacks suppressed [ 256.845438][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1325'. [ 257.016689][T10544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1326'. [ 257.059665][T10548] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 257.107861][T10549] netlink: 'syz.0.1327': attribute type 10 has an invalid length. [ 257.185228][T10549] veth0_macvtap: left promiscuous mode [ 257.704933][T10591] delete_channel: no stack [ 257.713538][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1339'. [ 257.981205][T10591] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1339'. [ 258.004661][T10602] team0: Device sit2 is of different type [ 258.195507][ T30] audit: type=1107 audit(1748269456.613:3): pid=10613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 258.224347][ T30] audit: type=1107 audit(1748269456.623:4): pid=10613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 258.699848][T10640] xt_CT: You must specify a L4 protocol and not use inversions on it [ 258.760771][T10643] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.773768][T10643] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.834403][T10643] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.845264][T10643] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.920429][T10643] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.931100][T10643] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.032611][T10643] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.060803][T10643] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.237659][T10668] syzkaller0: entered promiscuous mode [ 259.260133][T10668] syzkaller0: entered allmulticast mode [ 259.405128][T10643] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.419169][T10643] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.479157][T10643] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.494327][T10643] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.532711][T10643] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.547089][T10643] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.565379][T10681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1366'. [ 259.578991][T10643] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.588554][T10643] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.625287][T10681] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 259.666871][T10688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1367'. [ 259.809396][T10698] x_tables: duplicate entry at hook 3 [ 259.827770][T10692] xt_hashlimit: invalid rate [ 259.916834][T10702] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 259.940997][T10702] netlink: 'syz.1.1373': attribute type 11 has an invalid length. [ 259.963026][T10702] netlink: 'syz.1.1373': attribute type 11 has an invalid length. [ 259.982176][T10702] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1373'. [ 260.000652][T10708] netlink: 'syz.3.1376': attribute type 10 has an invalid length. [ 260.015755][T10710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.237079][T10720] netlink: 'syz.4.1379': attribute type 39 has an invalid length. [ 260.569818][T10749] netlink: 'syz.1.1385': attribute type 10 has an invalid length. [ 260.744755][T10757] delete_channel: no stack [ 260.753918][T10762] netlink: 'syz.0.1388': attribute type 29 has an invalid length. [ 260.799014][T10766] netlink: 'syz.0.1388': attribute type 29 has an invalid length. [ 260.832619][T10764] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 260.987517][T10774] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 261.082404][T10777] tipc: Enabled bearer , priority 0 [ 261.106316][T10783] syzkaller0: entered promiscuous mode [ 261.111856][T10783] syzkaller0: entered allmulticast mode [ 261.123865][T10781] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1392'. [ 261.150074][T10777] tipc: Resetting bearer [ 261.184572][T10775] tipc: Resetting bearer [ 261.256397][T10775] tipc: Disabling bearer [ 261.462619][T10804] : renamed from macvlan1 (while UP) [ 261.542895][T10811] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 261.553418][T10811] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 261.913973][T10838] netlink: 'syz.4.1410': attribute type 9 has an invalid length. [ 262.096016][T10845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1411'. [ 262.227013][T10866] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 262.254249][T10865] netlink: 'syz.4.1416': attribute type 1 has an invalid length. [ 262.452407][T10865] 8021q: adding VLAN 0 to HW filter on device bond5 [ 262.460030][T10871] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 262.474544][T10865] ipt_ECN: cannot use operation on non-tcp rule [ 262.484540][T10871] bond5: (slave wlan0): Enslaving as an active interface with a down link [ 262.494761][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1416'. [ 262.560487][T10887] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1422'. [ 262.588116][T10887] netlink: zone id is out of range [ 262.593324][T10887] netlink: get zone limit has 8 unknown bytes [ 262.640479][T10892] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 262.686931][T10898] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1425'. [ 263.007952][T10918] xt_hashlimit: invalid rate [ 263.264646][T10932] lo speed is unknown, defaulting to 1000 [ 263.265079][T10933] syz_tun: entered allmulticast mode [ 263.296658][T10927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1433'. [ 263.744441][T10924] lo speed is unknown, defaulting to 1000 [ 264.002155][T10979] netlink: 'syz.0.1448': attribute type 2 has an invalid length. [ 264.024613][T10979] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1448'. [ 264.110527][T10931] syz_tun: left allmulticast mode [ 264.151808][T10979] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1448'. [ 264.673826][T11015] netlink: 'syz.2.1458': attribute type 1 has an invalid length. [ 264.735182][T11011] can: request_module (can-proto-3) failed. [ 264.743349][T11020] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1458'. [ 264.780622][T11015] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1458'. [ 264.997951][T11031] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1463'. [ 265.111515][T11035] team0: No ports can be present during mode change [ 265.141532][T11035] netlink: 'syz.0.1464': attribute type 1 has an invalid length. [ 265.162187][T11035] netlink: 'syz.0.1464': attribute type 1 has an invalid length. [ 265.170330][T11035] netlink: 'syz.0.1464': attribute type 1 has an invalid length. [ 265.211363][T11035] netlink: 'syz.0.1464': attribute type 1 has an invalid length. [ 265.617841][ T10] IPVS: starting estimator thread 0... [ 265.725979][T11067] IPVS: using max 31 ests per chain, 74400 per kthread [ 265.965093][T11094] tc_dump_action: action bad kind [ 266.417431][T11125] xt_l2tp: v2 tid > 0xffff: 150994944 [ 266.471021][T11129] netlink: 'syz.1.1498': attribute type 10 has an invalid length. [ 266.521238][T11129] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.528547][T11129] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.555853][T11129] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.563144][T11129] bridge0: port 2(bridge_slave_1) entered listening state [ 266.570559][T11129] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.577744][T11129] bridge0: port 1(bridge_slave_0) entered listening state [ 266.610749][T11129] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 266.883117][T11153] netlink: 'syz.1.1507': attribute type 1 has an invalid length. [ 266.945563][T11153] 8021q: adding VLAN 0 to HW filter on device bond5 [ 266.972323][T11153] bond5: (slave geneve2): making interface the new active one [ 266.982333][T11153] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 267.065640][T11153] veth1: entered promiscuous mode [ 267.076229][T11160] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 267.176871][T11171] netlink: 'syz.4.1513': attribute type 2 has an invalid length. [ 267.293607][T11178] __nla_validate_parse: 12 callbacks suppressed [ 267.293627][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1515'. [ 267.424606][T11183] batadv0: entered promiscuous mode [ 267.451364][T11183] batadv0: left promiscuous mode [ 267.487445][T11190] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1519'. [ 267.512446][T11190] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1519'. [ 267.529732][T11190] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1519'. [ 267.718696][T11206] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1525'. [ 267.812378][T11209] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 268.011945][T11224] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.1530'. [ 268.041384][T11228] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 268.174884][T11237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1535'. [ 268.248805][T11242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1533'. [ 268.436663][T11253] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 268.499847][T11255] x_tables: duplicate underflow at hook 1 [ 268.520789][T11255] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 268.747777][T11269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1544'. [ 268.879064][T11277] netlink: 'syz.1.1547': attribute type 1 has an invalid length. [ 268.889044][T11279] netlink: 'syz.2.1548': attribute type 1 has an invalid length. [ 268.997802][T11282] veth9: entered promiscuous mode [ 269.036474][T11277] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1547'. [ 269.526855][ T9418] bond5: (slave wlan0): failed to get link speed/duplex [ 269.676802][ T9419] bond5: (slave wlan0): failed to get link speed/duplex [ 269.864528][T11304] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.878290][ T9417] bond5: (slave wlan0): failed to get link speed/duplex [ 269.963064][T11310] SET target dimension over the limit! [ 270.190760][T11313] tipc: Enabling of bearer rejected, failed to enable media [ 270.218796][T11321] net veth1_virt_wifi : renamed from virt_wifi0 (while UP) [ 270.243204][T11319] netlink: 'syz.3.1560': attribute type 1 has an invalid length. [ 270.277128][ T9412] bond5: (slave wlan0): failed to get link speed/duplex [ 270.388622][T11329] netlink: 'syz.4.1563': attribute type 7 has an invalid length. [ 270.416437][ T9419] bond5: (slave wlan0): failed to get link speed/duplex [ 270.430292][T11323] can: request_module (can-proto-0) failed. [ 270.466212][ T5838] Bluetooth: hci0: command tx timeout [ 270.546753][ T9417] bond5: (slave wlan0): failed to get link speed/duplex [ 270.667252][ T9419] bond5: (slave wlan0): failed to get link speed/duplex [ 270.779863][ T9413] bond5: (slave wlan0): failed to get link speed/duplex [ 270.903163][T11352] netlink: 'syz.4.1571': attribute type 11 has an invalid length. [ 271.159309][T11368] bond4: entered allmulticast mode [ 271.170314][T11368] 8021q: adding VLAN 0 to HW filter on device bond4 [ 271.184934][T11372] syz_tun: entered allmulticast mode [ 271.443951][T11363] syz_tun: left allmulticast mode [ 272.460465][T11395] __nla_validate_parse: 3 callbacks suppressed [ 272.460483][T11395] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1583'. [ 272.490391][T11395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1583'. [ 272.811021][T11411] dvmrp5: entered allmulticast mode [ 272.837116][T11415] dvmrp5: left allmulticast mode [ 272.920520][T11417] netlink: 'syz.2.1589': attribute type 11 has an invalid length. [ 273.120214][T11429] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1593'. [ 273.143250][T11434] bridge0: port 3(veth0_to_bridge) entered blocking state [ 273.170043][T11434] bridge0: port 3(veth0_to_bridge) entered disabled state [ 273.191944][T11434] veth0_to_bridge: entered allmulticast mode [ 273.207467][T11434] veth0_to_bridge: entered promiscuous mode [ 273.388927][T11449] Bluetooth: MGMT ver 1.23 [ 273.607460][ C0] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 16 [ 273.621004][T11461] netlink: 'syz.1.1605': attribute type 1 has an invalid length. [ 273.632542][T11461] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1605'. [ 273.647141][T11461] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1605'. [ 273.714355][T11469] net_ratelimit: 14 callbacks suppressed [ 273.714375][T11469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.753199][T11473] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 273.844388][T11476] netlink: 'syz.2.1612': attribute type 10 has an invalid length. [ 273.857592][T11476] vlan0: entered allmulticast mode [ 273.862835][T11476] veth0_vlan: entered allmulticast mode [ 273.904487][T11476] team0: Port device vlan0 added [ 274.000477][T11476] xt_recent: Unsupported userspace flags (00000061) [ 274.043492][T11485] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1615'. [ 274.261715][T11503] IPv6: Can't replace route, no match found [ 274.276234][T11503] pimreg: entered allmulticast mode [ 274.294562][T11503] pimreg: left allmulticast mode [ 274.334982][T11512] IPv6: Can't replace route, no match found [ 274.610533][T11527] netlink: 'syz.1.1628': attribute type 12 has an invalid length. [ 274.620324][T11527] netlink: 'syz.1.1628': attribute type 29 has an invalid length. [ 274.630438][T11528] openvswitch: netlink: IP tunnel TTL not specified. [ 274.630690][T11527] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1628'. [ 274.651560][T11527] netlink: 'syz.1.1628': attribute type 1 has an invalid length. [ 274.759068][T11536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.889922][T11541] Cannot find add_set index 4 as target [ 274.894038][T11543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1635'. [ 274.930805][T11547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1637'. [ 275.084024][T11552] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1640'. [ 275.625526][T11586] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 275.703025][T11588] sctp: [Deprecated]: syz.3.1653 (pid 11588) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.703025][T11588] Use struct sctp_sack_info instead [ 276.091881][T11619] netlink: 'syz.3.1663': attribute type 21 has an invalid length. [ 276.335051][T11633] netlink: 'syz.2.1667': attribute type 7 has an invalid length. [ 276.344305][T11633] netlink: 'syz.2.1667': attribute type 8 has an invalid length. [ 276.680268][T11633] gretap0: entered promiscuous mode [ 277.317681][T11633] gretap0: left promiscuous mode [ 277.569774][T11658] netlink: 'syz.4.1674': attribute type 21 has an invalid length. [ 277.641650][T11659] __nla_validate_parse: 5 callbacks suppressed [ 277.641669][T11659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1673'. [ 277.818781][T11676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1677'. [ 278.083602][T11689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1679'. [ 278.112518][T11690] netlink: 'syz.4.1681': attribute type 4 has an invalid length. [ 278.142076][T11691] netlink: 'syz.4.1681': attribute type 1 has an invalid length. [ 278.157758][T11690] netlink: 'syz.4.1681': attribute type 1 has an invalid length. [ 278.338350][T11701] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 278.535692][T11714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1689'. [ 278.821240][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1695'. [ 278.861756][T11733] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 278.871351][T11733] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 278.880309][T11733] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 278.889163][T11733] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 278.900918][T11733] bond1: (slave geneve2): making interface the new active one [ 278.911485][T11733] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 278.932931][T11735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1695'. [ 278.942932][T11735] bond1: entered promiscuous mode [ 278.948327][T11735] geneve2: entered promiscuous mode [ 279.040728][T11739] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1697'. [ 279.060950][T11739] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1697'. [ 279.251775][T11746] veth5: entered promiscuous mode [ 279.346429][ T11] block nbd0: Possible stuck request ffff888024d77000: control (read@0,4096B). Runtime 150 seconds [ 279.532506][T11764] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.539913][T11764] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.757248][T11771] team0: entered promiscuous mode [ 279.762907][T11771] team_slave_0: entered promiscuous mode [ 279.786830][T11771] team_slave_1: entered promiscuous mode [ 279.796262][T11776] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 279.810307][T11771] batadv_slave_1: entered promiscuous mode [ 280.046071][T11791] validate_nla: 5 callbacks suppressed [ 280.046091][T11791] netlink: 'syz.1.1715': attribute type 10 has an invalid length. [ 280.111948][T11791] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 280.314964][T11805] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1720'. [ 280.396680][T11811] netlink: 'syz.2.1723': attribute type 10 has an invalid length. [ 280.419996][T11811] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1723'. [ 280.475234][T11811] team0: Port device geneve0 added [ 280.482646][T11815] syzkaller1: entered promiscuous mode [ 280.506373][T11815] syzkaller1: entered allmulticast mode [ 281.047712][T11853] lo speed is unknown, defaulting to 1000 [ 281.826153][ T5838] Bluetooth: hci0: command tx timeout [ 282.125398][T11892] [H: renamed from veth0_vlan [ 282.280265][T11898] +: renamed from syzkaller0 [ 282.395656][T11902] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 282.594039][T11904] netlink: 'syz.1.1748': attribute type 10 has an invalid length. [ 282.618657][T11904] veth1_macvtap: left promiscuous mode [ 282.921532][T11920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.964145][T11921] netlink: 'syz.1.1755': attribute type 39 has an invalid length. [ 283.037892][T11926] __nla_validate_parse: 5 callbacks suppressed [ 283.037912][T11926] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1755'. [ 283.821268][T11974] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1770'. [ 283.961402][T11985] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1773'. [ 283.983352][T11978] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1773'. [ 284.004073][T11978] IPVS: length: 74 != 8 [ 284.060111][T11985] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1773'. [ 284.189374][T11993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1775'. [ 284.452464][T12005] syzkaller0: entered promiscuous mode [ 284.458102][T12005] syzkaller0: entered allmulticast mode [ 286.621791][T12067] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1790'. [ 286.652787][T12071] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 286.654869][T12074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1792'. [ 287.078647][T12092] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1797'. [ 287.096463][T12092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1797'. [ 287.600673][T12124] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 287.719656][T12129] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 287.831719][T12137] netlink: 'syz.2.1810': attribute type 11 has an invalid length. [ 287.960394][T12139] : entered promiscuous mode [ 288.004581][T12144] tipc: Started in network mode [ 288.012286][T12144] tipc: Node identity ac1414aa, cluster identity 4711 [ 288.021419][T12144] tipc: Enabling of bearer rejected, failed to enable media [ 288.075065][T12147] __nla_validate_parse: 7 callbacks suppressed [ 288.075081][T12147] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1814'. [ 288.229382][T12153] unsupported nla_type 52263 [ 288.271783][T12154] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1816'. [ 288.362772][T12159] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1819'. [ 288.632182][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 288.709577][T12169] sock: sock_set_timeout: `syz.1.1823' (pid 12169) tries to set negative timeout [ 289.153127][T12193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1829'. [ 289.162710][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1829'. [ 289.352329][T12203] dvmrp0: entered allmulticast mode [ 289.407189][T12203] xt_cgroup: path and classid specified [ 289.516288][T12218] tipc: Enabling of bearer rejected, media not registered [ 289.645539][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1837'. [ 289.655051][T12224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1837'. [ 289.666223][T12224] netlink: 'syz.4.1837': attribute type 14 has an invalid length. [ 289.674082][T12224] netlink: 'syz.4.1837': attribute type 13 has an invalid length. [ 290.077585][T12248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1846'. [ 290.247195][T12267] netlink: 'syz.1.1849': attribute type 11 has an invalid length. [ 290.287108][T12267] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1849'. [ 290.293435][T12259] lo speed is unknown, defaulting to 1000 [ 290.319302][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1849'. [ 290.411971][T12268] netlink: 'syz.1.1849': attribute type 5 has an invalid length. [ 290.544528][T12277] netlink: 'syz.4.1850': attribute type 2 has an invalid length. [ 292.711993][T12364] netlink: 'syz.2.1873': attribute type 1 has an invalid length. [ 292.745071][T12364] netlink: 'syz.2.1873': attribute type 3 has an invalid length. [ 293.492440][T12401] __nla_validate_parse: 6 callbacks suppressed [ 293.492460][T12401] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1883'. [ 294.449695][T12408] netlink: 'syz.0.1885': attribute type 1 has an invalid length. [ 294.476133][T12408] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1885'. [ 294.779072][T12421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1886'. [ 294.858135][T12435] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1893'. [ 294.925154][T12443] netlink: 'syz.4.1895': attribute type 1 has an invalid length. [ 294.933929][T12440] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1896'. [ 294.942532][T12444] netlink: 'syz.1.1893': attribute type 1 has an invalid length. [ 294.958411][T12440] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1896'. [ 294.968056][T12443] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1895'. [ 294.977464][T12440] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1896'. [ 295.167482][T12452] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 295.175750][T12452] team0: Device macvtap1 is already an upper device of the team interface [ 295.466895][T12469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.510734][T12470] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1904'. [ 295.574563][T12469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.782446][T12481] Cannot find del_set index 3 as target [ 295.793245][T12485] lo speed is unknown, defaulting to 1000 [ 296.298253][T12497] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 296.371083][T12501] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 296.500692][T12505] netlink: 'syz.3.1914': attribute type 1 has an invalid length. [ 296.528481][T12506] netlink: 'syz.3.1914': attribute type 1 has an invalid length. [ 296.819037][T12524] C: renamed from lo [ 297.381228][T12551] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1931'. [ 297.469073][T12557] netlink: 'syz.0.1933': attribute type 16 has an invalid length. [ 297.477563][T12557] netlink: 'syz.0.1933': attribute type 17 has an invalid length. [ 297.695668][T12557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.755288][T12557] netdevsim netdevsim0 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.764751][T12557] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.773772][T12557] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.782788][T12557] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.821610][T12557] netdevsim netdevsim0 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.830586][T12557] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.839875][T12557] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.848861][T12557] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.868421][T12565] ip6gretap0: entered promiscuous mode [ 297.982176][T12573] sctp: [Deprecated]: syz.4.1939 (pid 12573) Use of struct sctp_assoc_value in delayed_ack socket option. [ 297.982176][T12573] Use struct sctp_sack_info instead [ 298.518422][T12604] netlink: 'syz.0.1951': attribute type 3 has an invalid length. [ 298.584209][T12605] xt_SECMARK: invalid mode: 0 [ 298.746772][T12619] __nla_validate_parse: 2 callbacks suppressed [ 298.746791][T12619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1955'. [ 298.804431][T12619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.841902][T12630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.856947][T12630] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1959'. [ 299.034518][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1961'. [ 299.043891][T12637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1961'. [ 299.162443][T12649] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 299.600670][T12671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1973'. [ 299.989340][T12686] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1979'. [ 300.001212][T12686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1979'. [ 300.012658][T12686] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1979'. [ 300.031217][T12686] netlink: 'syz.3.1979': attribute type 2 has an invalid length. [ 300.040665][T12686] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1979'. [ 300.232773][T12691] lo speed is unknown, defaulting to 1000 [ 300.354202][T12700] netlink: 'syz.3.1984': attribute type 32 has an invalid length. [ 300.703833][T12707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1987'. [ 301.262273][T12751] netlink: 'syz.1.1994': attribute type 3 has an invalid length. [ 301.312930][T12753] Cannot find add_set index 0 as target [ 301.428080][T12754] veth1_to_team: entered promiscuous mode [ 301.778325][T12772] netlink: 'syz.1.1999': attribute type 1 has an invalid length. [ 301.817048][T12772] netlink: 'syz.1.1999': attribute type 2 has an invalid length. [ 301.883910][T12787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.922305][T12789] Cannot find del_set index 17 as target [ 302.226813][T12811] openvswitch: netlink: Key type 16144 is out of range max 32 [ 302.351805][T12811] xt_CT: No such helper "pptp" [ 302.379966][T12819] .: renamed from bond0 [ 303.006475][T12854] x_tables: ip_tables: udp match: only valid for protocol 17 [ 303.141567][T12860] syz.3.2024: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 303.157550][T12860] CPU: 0 UID: 0 PID: 12860 Comm: syz.3.2024 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) [ 303.157581][T12860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 303.157599][T12860] Call Trace: [ 303.157612][T12860] [ 303.157622][T12860] dump_stack_lvl+0x189/0x250 [ 303.157674][T12860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.157705][T12860] ? __pfx__printk+0x10/0x10 [ 303.157727][T12860] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 303.157749][T12860] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 303.157772][T12860] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 303.157796][T12860] warn_alloc+0x214/0x310 [ 303.157827][T12860] ? __pfx___schedule+0x10/0x10 [ 303.157855][T12860] ? __pfx_warn_alloc+0x10/0x10 [ 303.157885][T12860] ? kasan_save_track+0x4f/0x80 [ 303.157907][T12860] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 303.157930][T12860] ? xskq_create+0x56/0x170 [ 303.157953][T12860] ? __x64_sys_setsockopt+0x18b/0x220 [ 303.157978][T12860] ? do_syscall_64+0xf6/0x210 [ 303.158003][T12860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.158037][T12860] __vmalloc_node_range_noprof+0x125/0x12c0 [ 303.158102][T12860] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 303.158136][T12860] ? __kasan_kmalloc+0x93/0xb0 [ 303.158167][T12860] vmalloc_user_noprof+0x74/0x80 [ 303.158197][T12860] ? xskq_create+0xbf/0x170 [ 303.158221][T12860] xskq_create+0xbf/0x170 [ 303.158248][T12860] xsk_init_queue+0xb0/0x110 [ 303.158274][T12860] xsk_setsockopt+0x43f/0x710 [ 303.158300][T12860] ? __pfx_xsk_setsockopt+0x10/0x10 [ 303.158336][T12860] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 303.158360][T12860] ? __pfx_xsk_setsockopt+0x10/0x10 [ 303.158385][T12860] do_sock_setsockopt+0x25a/0x3e0 [ 303.158417][T12860] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 303.158454][T12860] ? __fget_files+0x2a/0x420 [ 303.158487][T12860] ? __fget_files+0x3a0/0x420 [ 303.158512][T12860] ? __fget_files+0x2a/0x420 [ 303.158545][T12860] __x64_sys_setsockopt+0x18b/0x220 [ 303.158580][T12860] do_syscall_64+0xf6/0x210 [ 303.158607][T12860] ? clear_bhb_loop+0x60/0xb0 [ 303.158630][T12860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.158648][T12860] RIP: 0033:0x7fe54fd8e969 [ 303.158675][T12860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.158693][T12860] RSP: 002b:00007fe550c67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 303.158714][T12860] RAX: ffffffffffffffda RBX: 00007fe54ffb5fa0 RCX: 00007fe54fd8e969 [ 303.158730][T12860] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 303.158741][T12860] RBP: 00007fe54fe10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 303.158753][T12860] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.158766][T12860] R13: 0000000000000000 R14: 00007fe54ffb5fa0 R15: 00007ffed7ad5ab8 [ 303.158800][T12860] [ 303.158812][T12860] Mem-Info: [ 303.448445][T12860] active_anon:4947 inactive_anon:0 isolated_anon:0 [ 303.448445][T12860] active_file:1414 inactive_file:39895 isolated_file:0 [ 303.448445][T12860] unevictable:768 dirty:53 writeback:0 [ 303.448445][T12860] slab_reclaimable:11150 slab_unreclaimable:115659 [ 303.448445][T12860] mapped:31321 shmem:1381 pagetables:823 [ 303.448445][T12860] sec_pagetables:0 bounce:0 [ 303.448445][T12860] kernel_misc_reclaimable:0 [ 303.448445][T12860] free:1326039 free_pcp:3457 free_cma:0 [ 303.494412][T12860] Node 0 active_anon:19788kB inactive_anon:0kB active_file:5656kB inactive_file:159376kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125284kB dirty:212kB writeback:0kB shmem:3988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12092kB pagetables:3292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 303.552131][T12860] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 303.584567][T12862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.599687][T12868] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 303.611121][T12860] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 303.638553][T12860] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 303.644367][T12860] Node 0 DMA32 free:1376296kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:19880kB inactive_anon:0kB active_file:5656kB inactive_file:159284kB unevictable:1536kB writepending:212kB present:3129332kB managed:2564116kB mlocked:0kB bounce:0kB free_pcp:13784kB local_pcp:856kB free_cma:0kB [ 303.675449][T12860] lowmem_reserve[]: 0 0 0 0 0 [ 303.687076][T12860] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 303.720616][T12860] lowmem_reserve[]: 0 0 0 0 0 [ 303.725604][T12860] Node 1 Normal free:3911732kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 303.805682][T12860] lowmem_reserve[]: 0 0 0 0 0 [ 303.820323][T12860] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 303.843184][T12860] Node 0 DMA32: 467*4kB (UME) 310*8kB (UME) 223*16kB (UME) 348*32kB (UE) 197*64kB (UE) 121*128kB (UME) 62*256kB (UM) 18*512kB (UME) 3*1024kB (UM) 7*2048kB (UME) 314*4096kB (UM) = 1375788kB [ 303.868130][T12860] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 303.890960][T12860] Node 1 Normal: 251*4kB (UME) 45*8kB (UME) 36*16kB (UME) 189*32kB (UME) 84*64kB (UME) 34*128kB (UME) 11*256kB (UME) 10*512kB (UME) 5*1024kB (UM) 5*2048kB (UE) 945*4096kB (M) = 3911732kB [ 303.911302][T12878] __nla_validate_parse: 9 callbacks suppressed [ 303.911320][T12878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2029'. [ 303.925574][T12860] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 303.951799][T12876] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2028'. [ 303.996719][T12860] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 304.018133][T12860] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 304.052782][T12860] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 304.095840][T12860] 42666 total pagecache pages [ 304.121228][T12860] 0 pages in swap cache [ 304.156296][T12860] Free swap = 124996kB [ 304.160537][T12860] Total swap = 124996kB [ 304.211898][T12860] 2097051 pages RAM [ 304.242703][T12860] 0 pages HighMem/MovableOnly [ 304.271269][T12860] 424364 pages reserved [ 304.275539][T12860] 0 pages cma reserved [ 304.509398][T12909] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2035'. [ 304.566403][T12911] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2036'. [ 304.609636][T12909] netlink: 'syz.3.2035': attribute type 9 has an invalid length. [ 304.706928][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2039'. [ 304.723998][T12922] Unknown options in mask 1f4 [ 304.739351][T12923] Unknown options in mask 1f4 [ 304.882801][T12929] netlink: 'syz.1.2042': attribute type 1 has an invalid length. [ 304.962626][T12929] 8021q: adding VLAN 0 to HW filter on device bond7 [ 305.011825][T12929] bond0: (slave veth0_to_bond): Releasing backup interface [ 305.045010][T12929] bond7: (slave veth0_to_bond): making interface the new active one [ 305.056953][T12929] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 305.177584][T12945] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 305.229807][T12952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2048'. [ 305.258909][T12953] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2048'. [ 305.421895][T12960] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2050'. [ 305.463988][T12960] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2050'. [ 305.481836][T12955] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2049'. [ 305.501938][T12959] IPv6: NLM_F_CREATE should be specified when creating new route [ 305.789905][T12974] openvswitch: netlink: Actions may not be safe on all matching packets [ 305.891539][T12983] 8021q: adding VLAN 0 to HW filter on device bond3 [ 306.062814][T12995] netlink: 'syz.4.2062': attribute type 13 has an invalid length. [ 306.092371][T12995] netlink: 'syz.4.2062': attribute type 58 has an invalid length. [ 306.142433][T12999] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 306.304854][T13001] xt_CT: No such helper "snmp" [ 306.347146][T13010] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 306.394058][T13014] sctp: [Deprecated]: syz.0.2068 (pid 13014) Use of int in maxseg socket option. [ 306.394058][T13014] Use struct sctp_assoc_value instead [ 306.409797][T13008] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 306.497708][T13017] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 306.505028][T13017] IPv6: NLM_F_CREATE should be set when creating new route [ 306.966465][T13044] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.980228][T13044] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.062537][T13044] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.095141][T13044] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.112803][T13050] can: request_module (can-proto-0) failed. [ 307.127333][T13057] netlink: 'syz.2.2081': attribute type 3 has an invalid length. [ 307.183795][T13044] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.196683][T13044] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.299515][T13044] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.339024][T13044] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.451120][T13044] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.475956][T13044] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.572297][T13044] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.593860][T13044] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.662813][T13044] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.674227][T13044] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.838868][T13044] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.916546][T13044] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.321114][T13115] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 308.359211][T13117] Cannot find set identified by id 0 to match [ 308.639969][T13138] netlink: 'syz.1.2105': attribute type 1 has an invalid length. [ 308.700355][T13138] 8021q: adding VLAN 0 to HW filter on device bond8 [ 309.065387][T13164] netlink: 'syz.3.2115': attribute type 1 has an invalid length. [ 309.079363][T13164] __nla_validate_parse: 12 callbacks suppressed [ 309.079386][T13164] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2115'. [ 309.426293][ T11] block nbd0: Possible stuck request ffff888024d77000: control (read@0,4096B). Runtime 180 seconds [ 309.537651][T13194] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 309.732650][T13209] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2126'. [ 309.749432][T13209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2126'. [ 309.784989][T13212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2126'. [ 309.827413][T13212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2126'. [ 309.871608][T13217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2129'. [ 310.432515][T13247] netlink: 'syz.1.2138': attribute type 11 has an invalid length. [ 310.607209][T13256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2142'. [ 310.673035][ T30] audit: type=1800 audit(1748269509.093:5): pid=13256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2142" name="memory.events" dev="tmpfs" ino=2251 res=0 errno=0 [ 310.729883][T13260] netlink: 'syz.4.2144': attribute type 1 has an invalid length. [ 310.857128][T13266] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2147'. [ 310.990346][T13272] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2148'. [ 311.110384][T13277] veth0: entered promiscuous mode [ 311.134844][T13277] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 311.146627][T13279] x_tables: duplicate underflow at hook 1 [ 311.208617][T13276] veth0: left promiscuous mode [ 311.617658][T13308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2161'. [ 311.651293][T13308] batman_adv: batadv0: Adding interface: dummy0 [ 311.657770][T13308] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.692292][T13308] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 312.029503][T13332] netlink: 'syz.2.2168': attribute type 39 has an invalid length. [ 312.169480][T13344] netlink: 'syz.0.2173': attribute type 1 has an invalid length. [ 312.259989][T13350] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 312.295728][T13353] openvswitch: netlink: Geneve opt len 63 is not a multiple of 4. [ 312.482922][T13361] lo speed is unknown, defaulting to 1000 [ 312.559627][T13371] netlink: 'syz.2.2180': attribute type 1 has an invalid length. [ 312.577992][T13371] netlink: 'syz.2.2180': attribute type 4 has an invalid length. [ 312.992985][T13389] netlink: 'syz.3.2185': attribute type 11 has an invalid length. [ 313.455945][T13406] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.463192][T13406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.638318][ T5834] Bluetooth: hci4: link tx timeout [ 313.644402][ T5834] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 313.647477][T13434] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 313.668044][ T5831] Bluetooth: hci4: link tx timeout [ 313.673210][ T5831] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 313.715092][ T5831] Bluetooth: hci4: link tx timeout [ 313.725376][ T5831] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 313.733373][ T5831] Bluetooth: hci4: link tx timeout [ 313.738649][ T5831] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 313.746570][ T5831] Bluetooth: hci4: link tx timeout [ 313.751709][ T5831] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.127176][T13449] netlink: 'syz.4.2198': attribute type 4 has an invalid length. [ 314.187973][T13454] x_tables: duplicate entry at hook 3 [ 314.259278][T13457] Cannot find del_set index 4 as target [ 314.341989][T13463] __nla_validate_parse: 44 callbacks suppressed [ 314.342010][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2203'. [ 314.345972][T13459] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2201'. [ 314.502944][T13475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2204'. [ 314.529212][T13469] netlink: 'syz.3.2205': attribute type 7 has an invalid length. [ 314.548723][T13469] : entered promiscuous mode [ 314.726606][T13485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2208'. [ 314.740886][T13479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2207'. [ 315.026554][T13504] netlink: 'syz.4.2214': attribute type 1 has an invalid length. [ 315.053770][T13494] xt_CT: No such helper "snmp" [ 315.071645][T13504] netlink: 'syz.4.2214': attribute type 1 has an invalid length. [ 315.096845][T13504] netlink: 'syz.4.2214': attribute type 1 has an invalid length. [ 315.132047][T13504] netlink: 'syz.4.2214': attribute type 1 has an invalid length. [ 315.183867][T13511] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2216'. [ 315.224828][T13510] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2216'. [ 315.416652][T13524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2220'. [ 315.438337][T13522] tipc: Enabling of bearer rejected, failed to enable media [ 315.699835][T13543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2224'. [ 315.749003][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 315.843417][T13548] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 315.879374][T13551] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 316.013004][T13555] tipc: Enabling of bearer rejected, failed to enable media [ 316.284939][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2235'. [ 316.346844][T13572] IPVS: set_ctl: invalid protocol: 4 10.1.1.2:20000 [ 316.683369][T13593] tipc: Enabled bearer , priority 0 [ 316.870127][T13593] syzkaller0: entered promiscuous mode [ 316.885912][T13593] syzkaller0: entered allmulticast mode [ 316.892059][T13593] tipc: Resetting bearer [ 317.051175][T13608] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 317.133850][T13590] tipc: Resetting bearer [ 318.765589][T13590] tipc: Disabling bearer [ 318.794829][T13610] bridge0: port 3(batadv1) entered blocking state [ 318.807754][T13610] bridge0: port 3(batadv1) entered disabled state [ 318.815465][T13610] batadv1: entered allmulticast mode [ 318.831905][T13610] batadv1: entered promiscuous mode [ 318.848695][T13616] tipc: Invalid UDP bearer configuration [ 318.848754][T13616] tipc: Enabling of bearer rejected, failed to enable media [ 319.093942][T13636] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 319.122780][ T5834] Bluetooth: hci0: command tx timeout [ 319.297881][ T9412] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 319.308102][ T9412] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 319.733252][T13675] netlink: 'syz.3.2268': attribute type 4 has an invalid length. [ 319.738351][T13674] __nla_validate_parse: 6 callbacks suppressed [ 319.738371][T13674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2267'. [ 319.774435][T13675] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2268'. [ 319.783807][T13674] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 319.815397][T13674] tipc: Started in network mode [ 319.833117][T13674] tipc: Node identity ac14140f, cluster identity 4711 [ 319.847461][T13674] tipc: New replicast peer: 255.255.255.255 [ 319.870452][T13674] tipc: Enabled bearer , priority 10 [ 319.892274][T13684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.033645][T13692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2273'. [ 320.172351][T13704] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 320.338382][T13715] netlink: 6012 bytes leftover after parsing attributes in process `syz.2.2279'. [ 320.424796][T13721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2279'. [ 320.447187][T13720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2281'. [ 320.733698][T13733] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 320.788263][T13737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2287'. [ 320.806413][T13738] netlink: 'syz.4.2286': attribute type 1 has an invalid length. [ 320.958423][T13738] 8021q: adding VLAN 0 to HW filter on device bond7 [ 320.965902][ T10] tipc: Node number set to 2886997007 [ 321.021880][T13738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2286'. [ 321.093890][T13747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2286'. [ 321.181571][T13761] openvswitch: netlink: Message has 4 unknown bytes. [ 321.406920][T13769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2295'. [ 321.886282][T13803] pimreg: entered allmulticast mode [ 322.364834][T13813] team0: Port device vlan0 removed [ 322.786000][ T5834] Bluetooth: hci0: command tx timeout [ 323.008450][T13876] IPVS: Error joining to the multicast group [ 323.106876][T13883] netlink: 'syz.4.2321': attribute type 1 has an invalid length. [ 323.128153][T13883] netlink: 'syz.4.2321': attribute type 1 has an invalid length. [ 323.146565][T13883] netlink: 'syz.4.2321': attribute type 1 has an invalid length. [ 323.154343][T13883] netlink: 'syz.4.2321': attribute type 1 has an invalid length. [ 323.162728][T13886] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 323.171424][T13883] netlink: 'syz.4.2321': attribute type 2 has an invalid length. [ 323.171457][T13883] netlink: 'syz.4.2321': attribute type 1 has an invalid length. [ 323.171472][T13883] netlink: 'syz.4.2321': attribute type 2 has an invalid length. [ 323.171485][T13883] netlink: 'syz.4.2321': attribute type 1 has an invalid length. [ 323.363145][T13895] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 323.441071][T13903] SET target dimension over the limit! [ 324.712577][T13979] gretap0: entered promiscuous mode [ 324.804209][T13979] __nla_validate_parse: 11 callbacks suppressed [ 324.804230][T13979] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2351'. [ 324.823084][T13979] 0{X: renamed from gretap0 [ 324.844635][T13979] 0{X: left promiscuous mode [ 324.873739][T13979] 0{X: entered allmulticast mode [ 324.892997][T13979] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 324.959744][T13990] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2357'. [ 325.223536][T14001] netlink: 'syz.2.2360': attribute type 4 has an invalid length. [ 325.235571][T14001] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2360'. [ 325.251106][T14008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2362'. [ 325.260897][T14008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2362'. [ 325.270111][T14008] netlink: 'syz.0.2362': attribute type 14 has an invalid length. [ 325.278260][T14008] netlink: 'syz.0.2362': attribute type 13 has an invalid length. [ 325.423133][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2364'. [ 325.450317][T14014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2364'. [ 325.460099][T14014] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2364'. [ 325.483266][T14017] openvswitch: netlink: EtherType 0 is less than min 600 [ 325.543778][T14020] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2364'. [ 325.762297][T14027] lo speed is unknown, defaulting to 1000 [ 325.791222][T14031] @: renamed from bond_slave_0 [ 325.875040][T14035] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2373'. [ 326.721893][T14051] netlink: 'syz.4.2377': attribute type 1 has an invalid length. [ 326.731099][T14051] lo speed is unknown, defaulting to 1000 [ 327.376913][T14087] sctp: [Deprecated]: syz.1.2388 (pid 14087) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.376913][T14087] Use struct sctp_sack_info instead [ 328.173125][T14126] syz.3.2401: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 328.215860][T14126] CPU: 0 UID: 0 PID: 14126 Comm: syz.3.2401 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) [ 328.215890][T14126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 328.215903][T14126] Call Trace: [ 328.215911][T14126] [ 328.215920][T14126] dump_stack_lvl+0x189/0x250 [ 328.215958][T14126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.215986][T14126] ? __pfx__printk+0x10/0x10 [ 328.216007][T14126] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 328.216027][T14126] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 328.216051][T14126] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 328.216074][T14126] warn_alloc+0x214/0x310 [ 328.216110][T14126] ? __pfx_warn_alloc+0x10/0x10 [ 328.216138][T14126] ? kasan_save_track+0x4f/0x80 [ 328.216161][T14126] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 328.216204][T14126] ? xskq_create+0x56/0x170 [ 328.216229][T14126] ? __x64_sys_setsockopt+0x18b/0x220 [ 328.216255][T14126] ? do_syscall_64+0xf6/0x210 [ 328.216280][T14126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.216320][T14126] __vmalloc_node_range_noprof+0x125/0x12c0 [ 328.216408][T14126] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 328.216442][T14126] ? __kasan_kmalloc+0x93/0xb0 [ 328.216474][T14126] vmalloc_user_noprof+0x74/0x80 [ 328.216504][T14126] ? xskq_create+0xbf/0x170 [ 328.216525][T14126] xskq_create+0xbf/0x170 [ 328.216554][T14126] xsk_init_queue+0xb0/0x110 [ 328.216581][T14126] xsk_setsockopt+0x43f/0x710 [ 328.216607][T14126] ? __pfx_xsk_setsockopt+0x10/0x10 [ 328.216644][T14126] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 328.216667][T14126] ? __pfx_xsk_setsockopt+0x10/0x10 [ 328.216692][T14126] do_sock_setsockopt+0x25a/0x3e0 [ 328.216723][T14126] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 328.216748][T14126] ? __fget_files+0x2a/0x420 [ 328.216781][T14126] ? __fget_files+0x3a0/0x420 [ 328.216806][T14126] ? __fget_files+0x2a/0x420 [ 328.216842][T14126] __x64_sys_setsockopt+0x18b/0x220 [ 328.216877][T14126] do_syscall_64+0xf6/0x210 [ 328.216905][T14126] ? clear_bhb_loop+0x60/0xb0 [ 328.216930][T14126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.216950][T14126] RIP: 0033:0x7fe54fd8e969 [ 328.216967][T14126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.216984][T14126] RSP: 002b:00007fe550c67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 328.217006][T14126] RAX: ffffffffffffffda RBX: 00007fe54ffb5fa0 RCX: 00007fe54fd8e969 [ 328.217021][T14126] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 328.217033][T14126] RBP: 00007fe54fe10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 328.217046][T14126] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.217058][T14126] R13: 0000000000000000 R14: 00007fe54ffb5fa0 R15: 00007ffed7ad5ab8 [ 328.217092][T14126] [ 328.217100][T14126] Mem-Info: [ 328.503107][T14126] active_anon:4941 inactive_anon:0 isolated_anon:0 [ 328.503107][T14126] active_file:1463 inactive_file:39905 isolated_file:0 [ 328.503107][T14126] unevictable:768 dirty:84 writeback:0 [ 328.503107][T14126] slab_reclaimable:11483 slab_unreclaimable:116685 [ 328.503107][T14126] mapped:29284 shmem:1361 pagetables:867 [ 328.503107][T14126] sec_pagetables:0 bounce:0 [ 328.503107][T14126] kernel_misc_reclaimable:0 [ 328.503107][T14126] free:1326126 free_pcp:1378 free_cma:0 [ 328.506775][T14131] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 328.548499][T14126] Node 0 active_anon:19764kB inactive_anon:0kB active_file:5852kB inactive_file:159416kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117136kB dirty:336kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12112kB pagetables:3468kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 328.548566][T14126] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 328.548618][T14126] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 328.548676][T14126] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 328.548725][T14126] Node 0 DMA32 free:1377404kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:19756kB inactive_anon:0kB active_file:5852kB inactive_file:159324kB unevictable:1536kB writepending:336kB present:3129332kB managed:2564116kB mlocked:0kB bounce:0kB free_pcp:5496kB local_pcp:468kB free_cma:0kB [ 328.548784][T14126] lowmem_reserve[]: 0 0 0 0 0 [ 328.548830][T14126] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 328.548885][T14126] lowmem_reserve[]: 0 0 0 0 0 [ 328.548930][T14126] Node 1 Normal free:3911740kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 328.548987][T14126] lowmem_reserve[]: 0 0 0 0 0 [ 328.549055][T14126] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 328.549197][T14126] Node 0 DMA32: 10*4kB (U) 374*8kB (UME) 454*16kB (UME) 405*32kB (UME) 192*64kB (UME) 143*128kB (UME) 70*256kB (UME) 20*512kB (UME) 5*1024kB (UM) 2*2048kB (M) 314*4096kB (UM) = 1377368kB [ 328.549401][T14126] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 328.549615][T14126] Node 1 Normal: 251*4kB (UME) 46*8kB (UME) 36*16kB (UME) 189*32kB (UME) 84*64kB (UME) 34*128kB (UME) 11*256kB (UME) 10*512kB (UME) 5*1024kB (UM) 5*2048kB (UE) 945*4096kB (M) = 3911740kB [ 328.827748][T14126] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 328.848264][T14126] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 328.873150][T14126] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 328.912432][T14126] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 328.957444][T14126] 42725 total pagecache pages [ 328.975903][T14126] 0 pages in swap cache [ 328.990384][T14126] Free swap = 124996kB [ 329.002559][T14126] Total swap = 124996kB [ 329.015985][T14126] 2097051 pages RAM [ 329.021947][T14126] 0 pages HighMem/MovableOnly [ 329.027107][T14126] 424364 pages reserved [ 329.033259][T14126] 0 pages cma reserved [ 329.368075][T14174] 1FN: renamed from 00FN (while UP) [ 329.533554][T14184] netlink: 'syz.4.2420': attribute type 16 has an invalid length. [ 329.542043][T14184] netlink: 'syz.4.2420': attribute type 17 has an invalid length. [ 329.774808][T14184] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.795840][T14184] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.804949][T14184] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.814165][T14204] __nla_validate_parse: 70 callbacks suppressed [ 329.814181][T14204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2427'. [ 329.820199][T14184] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.031443][T14204] macsec0: entered promiscuous mode [ 330.465521][T14245] tap0: tun_chr_ioctl cmd 1074025678 [ 330.483929][T14245] tap0: group set to 0 [ 330.573834][T14252] netlink: 'syz.3.2443': attribute type 142 has an invalid length. [ 330.658644][T14252] netlink: 'syz.3.2443': attribute type 142 has an invalid length. [ 330.852864][T14266] IPVS: set_ctl: invalid protocol: 47 172.20.20.26:20004 [ 330.889120][ T5820] hid-generic 0005:046D:0A0E.0001: item fetching failed at offset 0/1 [ 330.913925][ T5820] hid-generic 0005:046D:0A0E.0001: probe with driver hid-generic failed with error -22 [ 331.475393][T14298] netlink: 'syz.4.2454': attribute type 1 has an invalid length. [ 331.497458][T14298] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2454'. [ 331.615169][T14300] tipc: Enabled bearer , priority 10 [ 331.719352][T14304] tipc: New replicast peer: 255.255.255.255 [ 331.726316][T14304] tipc: Enabled bearer , priority 10 [ 332.124597][T14324] syzkaller1: entered promiscuous mode [ 332.133721][T14324] syzkaller1: entered allmulticast mode [ 332.227910][T14328] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2466'. [ 332.324674][T14335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2468'. [ 332.512561][T14342] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2471'. [ 332.534754][T14345] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2472'. [ 332.553768][T14340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2469'. [ 332.564365][T14340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2469'. [ 332.634238][T14340] openvswitch: netlink: Missing key (keys=40, expected=100) [ 332.814562][T14359] xt_connbytes: Forcing CT accounting to be enabled [ 332.836195][ T10] tipc: Node number set to 2886997162 [ 333.345164][T14382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2484'. [ 333.375413][T14382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2484'. [ 333.570855][T14393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.588075][ T9419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.615757][T14393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.625664][ T9419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.252252][T14432] netlink: 'syz.2.2499': attribute type 1 has an invalid length. [ 334.297706][T14432] 8021q: adding VLAN 0 to HW filter on device bond4 [ 334.362392][T14432] bond4: (slave geneve3): making interface the new active one [ 334.409773][T14432] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 334.451701][T14438] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 334.939045][T14461] __nla_validate_parse: 3 callbacks suppressed [ 334.939063][T14461] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2510'. [ 335.101120][T14476] netlink: 'syz.1.2516': attribute type 1 has an invalid length. [ 335.120464][T14476] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2516'. [ 335.155466][T14480] netlink: 'syz.4.2517': attribute type 12 has an invalid length. [ 335.335418][T14483] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2517'. [ 335.370118][T14488] netlink: 'syz.3.2519': attribute type 23 has an invalid length. [ 335.739418][T14510] netlink: 'syz.3.2524': attribute type 2 has an invalid length. [ 335.790355][T14510] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2524'. [ 336.042627][T14526] : renamed from vlan0 [ 336.114427][T14526] can: request_module (can-proto-0) failed. [ 336.299080][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2539'. [ 336.319701][T14548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2539'. [ 336.551124][T14566] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 336.571632][T14566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2543'. [ 336.993569][T14584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2550'. [ 337.149652][T14594] No such timeout policy "syz0" [ 337.412783][T14606] syzkaller0: entered promiscuous mode [ 337.423852][T14606] syzkaller0: entered allmulticast mode [ 337.504980][T14614] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2559'. [ 339.005492][T14634] Bluetooth: MGMT ver 1.23 [ 339.094542][T14640] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2567'. [ 339.378821][T14658] sctp: [Deprecated]: syz.2.2573 (pid 14658) Use of int in maxseg socket option. [ 339.378821][T14658] Use struct sctp_assoc_value instead [ 339.450057][T14669] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20004 [ 339.508783][ T11] block nbd0: Possible stuck request ffff888024d77000: control (read@0,4096B). Runtime 210 seconds [ 340.023101][T14691] xt_CT: You must specify a L4 protocol and not use inversions on it [ 340.069892][T14700] lo speed is unknown, defaulting to 1000 [ 340.118718][T14703] macsec3: entered allmulticast mode [ 340.124248][T14703] macvlan0: entered allmulticast mode [ 340.139326][T14703] veth1_vlan: entered allmulticast mode [ 340.295029][T14707] pim6reg: entered allmulticast mode [ 340.674813][T14724] netlink: zone id is out of range [ 340.685734][T14724] netlink: zone id is out of range [ 340.696816][T14724] netlink: zone id is out of range [ 340.702141][T14724] netlink: zone id is out of range [ 340.712367][T14724] netlink: zone id is out of range [ 340.722171][T14724] netlink: zone id is out of range [ 340.734523][T14724] netlink: zone id is out of range [ 340.807646][T14724] netlink: zone id is out of range [ 340.834480][T14724] netlink: zone id is out of range [ 340.873414][T14724] netlink: zone id is out of range [ 341.275993][T14754] netlink: 'syz.3.2606': attribute type 3 has an invalid length. [ 341.303325][T14754] __nla_validate_parse: 3 callbacks suppressed [ 341.303343][T14754] netlink: 766 bytes leftover after parsing attributes in process `syz.3.2606'. [ 341.436104][T14768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2610'. [ 341.800393][T14789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'. [ 342.175510][T14812] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2622'. [ 342.560592][T14842] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2630'. [ 342.958940][T14856] netlink: 'syz.2.2633': attribute type 10 has an invalid length. [ 342.978059][T14855] netlink: 'syz.1.2634': attribute type 11 has an invalid length. [ 342.996695][T14856] netlink: 'syz.2.2633': attribute type 10 has an invalid length. [ 343.280099][T14863] xt_NFQUEUE: number of total queues is 0 [ 343.303234][T14871] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2640'. [ 343.312830][T14866] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2639'. [ 343.330275][T14866] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2639'. [ 343.486765][ T30] audit: type=1107 audit(1748269541.893:6): pid=14875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Zˁ' [ 343.672842][T14885] netlink: 'syz.2.2646': attribute type 10 has an invalid length. [ 343.832156][T14896] netlink: 'syz.4.2650': attribute type 3 has an invalid length. [ 344.059006][ T5834] block nbd2: Receive control failed (result -32) [ 344.083992][T14908] Cannot find add_set index 0 as target [ 344.243534][T14915] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2656'. [ 344.276417][T14915] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2656'. [ 344.298034][T14915] netem: invalid attributes len -24 [ 344.310217][T14915] netem: change failed [ 344.350298][T14917] netlink: 'syz.0.2657': attribute type 39 has an invalid length. [ 344.419036][T14922] tipc: Enabling of bearer rejected, media not registered [ 344.863404][T14956] batadv_slave_1: default FDB implementation only supports local addresses [ 345.411136][T14985] netlink: 'syz.0.2678': attribute type 1 has an invalid length. [ 345.470053][T14985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.537752][T14985] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 345.611765][ T30] audit: type=1107 audit(1748269544.033:7): pid=14995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 345.634958][T14998] netlink: 'syz.2.2683': attribute type 10 has an invalid length. [ 345.679353][T15003] syzkaller1: entered promiscuous mode [ 345.754088][T15003] syzkaller1: entered allmulticast mode [ 346.152971][T15020] netlink: 'syz.0.2689': attribute type 1 has an invalid length. [ 346.328638][T15020] 8021q: adding VLAN 0 to HW filter on device bond5 [ 346.369861][T15039] vlan4: entered allmulticast mode [ 346.375050][T15039] veth1: entered allmulticast mode [ 346.418104][T15039] bond5: (slave vlan4): Opening slave failed [ 346.522649][T15028] bond0: (slave veth0_to_bond): Releasing active interface [ 346.523404][T15050] x_tables: duplicate entry at hook 3 [ 346.554384][T15051] __nla_validate_parse: 4 callbacks suppressed [ 346.554404][T15051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2697'. [ 346.556199][T15052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2697'. [ 346.560906][T15051] netlink: 'syz.3.2697': attribute type 5 has an invalid length. [ 346.581275][T15028] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 346.588129][T15052] netlink: 'syz.3.2697': attribute type 5 has an invalid length. [ 346.612135][T15052] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2697'. [ 346.614212][T15051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2697'. [ 346.773469][T15061] netlink: 'syz.1.2698': attribute type 1 has an invalid length. [ 346.787251][T15064] Cannot find add_set index 0 as target [ 347.211841][T15094] netlink: 'syz.2.2710': attribute type 1 has an invalid length. [ 347.334447][T15101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2710'. [ 347.387178][T15094] 8021q: adding VLAN 0 to HW filter on device bond5 [ 347.394929][T15103] xt_CT: No such helper "pptp" [ 347.412845][T15106] netlink: 'syz.0.2712': attribute type 8 has an invalid length. [ 347.420984][T15106] net_ratelimit: 3 callbacks suppressed [ 347.421001][T15106] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 347.489469][T15110] bond5: entered promiscuous mode [ 347.624677][T15119] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 347.912141][T15137] netlink: 'syz.0.2719': attribute type 58 has an invalid length. [ 347.948637][T15137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2719'. [ 348.220399][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2722'. [ 348.249972][T15155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2724'. [ 348.983368][T15196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2737'. [ 349.127141][T15204] [H: renamed from veth0_vlan [ 349.269293][T15215] netlink: 'syz.3.2741': attribute type 1 has an invalid length. [ 349.285950][T15215] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2741'. [ 349.309318][T15216] tipc: Bearer : already 2 bearers with priority 10 [ 349.326169][T15216] tipc: Bearer : trying with adjusted priority [ 349.354887][T15216] tipc: Enabled bearer , priority 9 [ 349.404756][T15222] block nbd4: not configured, cannot reconfigure [ 349.652640][T15239] netlink: 'syz.1.2751': attribute type 21 has an invalid length. [ 349.834015][T15253] netlink: 'syz.3.2756': attribute type 1 has an invalid length. [ 349.922714][T15255] netlink: 'syz.3.2758': attribute type 1 has an invalid length. [ 349.995035][T15255] 8021q: adding VLAN 0 to HW filter on device bond2 [ 350.030791][T15261] veth7: entered promiscuous mode [ 350.040596][T15261] bond2: (slave veth7): Enslaving as an active interface with a down link [ 350.112493][T15269] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 350.122768][T15269] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 350.276332][T15274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.289466][T15274] bond0: entered promiscuous mode [ 350.294603][T15274] 0FN: entered promiscuous mode [ 350.300880][T15274] bond_slave_1: entered promiscuous mode [ 350.307211][T15274] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 350.318220][T15274] team0: Port device bond0 added [ 350.730149][T15305] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 350.836716][T15309] nbd: device at index 64 is going down [ 351.840828][T15373] C: entered allmulticast mode [ 351.858611][T15373] C: left allmulticast mode [ 351.874046][T15377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.882851][T15378] __nla_validate_parse: 13 callbacks suppressed [ 351.882871][T15378] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2793'. [ 352.124882][T15388] tipc: Started in network mode [ 352.136845][T15388] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 352.164966][T15388] tipc: Enabled bearer , priority 10 [ 352.185577][T15395] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2801'. [ 352.185615][T15396] validate_nla: 3 callbacks suppressed [ 352.185628][T15396] netlink: 'syz.0.2801': attribute type 10 has an invalid length. [ 352.202208][T15395] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2801'. [ 352.242288][T15395] batman_adv: batadv0: Removing interface: dummy0 [ 352.251106][T15400] netlink: 'syz.2.2804': attribute type 18 has an invalid length. [ 352.264824][T15395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.280491][T15395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.311191][T15395] .: (slave batadv0): Releasing backup interface [ 352.325384][T15395] batadv0 (unregistering): left allmulticast mode [ 352.386961][T15407] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 352.435968][T15388] tipc: Cannot configure node identity twice [ 352.789597][ T5834] Bluetooth: hci0: command tx timeout [ 352.974523][T15441] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2815'. [ 353.154508][T15454] openvswitch: netlink: Actions may not be safe on all matching packets [ 353.266449][ T5820] tipc: Node number set to 4269801488 [ 353.329766][T15469] netlink: 'syz.3.2824': attribute type 21 has an invalid length. [ 353.682680][T15483] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2830'. [ 353.750910][T15493] netlink: 'syz.0.2832': attribute type 11 has an invalid length. [ 353.801082][T15494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2832'. [ 353.822679][T15493] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2832'. [ 353.865623][T15497] sctp: [Deprecated]: syz.1.2834 (pid 15497) Use of struct sctp_assoc_value in delayed_ack socket option. [ 353.865623][T15497] Use struct sctp_sack_info instead [ 354.086573][T15516] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2837'. [ 354.229672][T15522] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2842'. [ 354.238971][T15522] openvswitch: netlink: Flow key attr not present in new flow. [ 354.263721][T15525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2843'. [ 354.512260][T15539] netlink: 'syz.0.2847': attribute type 39 has an invalid length. [ 354.552069][T15543] openvswitch: netlink: EtherType 0 is less than min 600 [ 354.728856][T15541] geneve4: entered promiscuous mode [ 354.749271][T15553] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 354.754580][T15541] geneve4: entered allmulticast mode [ 355.112222][T15571] netlink: 'syz.0.2857': attribute type 2 has an invalid length. [ 355.134237][T15575] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 355.158476][T15578] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 355.182214][T15571] bridge4: entered promiscuous mode [ 355.190784][T15571] bridge4: entered allmulticast mode [ 355.683348][T15606] netlink: 'syz.2.2868': attribute type 9 has an invalid length. [ 355.715711][T15609] netlink: 'syz.4.2869': attribute type 28 has an invalid length. [ 355.740929][T15610] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 355.750057][T15609] netlink: 'syz.4.2869': attribute type 3 has an invalid length. [ 355.784635][T15609] lo: left promiscuous mode [ 355.796989][T15609] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 355.859803][T15609] bond2: left promiscuous mode [ 355.908279][T15609] geneve2: left promiscuous mode [ 356.137135][T15631] (unnamed net_device) (uninitialized): peer notification delay (1420) is not a multiple of miimon (100), value rounded to 1400 ms [ 356.241668][T15631] bond6: entered promiscuous mode [ 356.243140][T15637] xt_hashlimit: max too large, truncated to 1048576 [ 356.247303][T15631] bond6: entered allmulticast mode [ 356.247738][T15631] 8021q: adding VLAN 0 to HW filter on device bond6 [ 356.409530][T15645] 8021q: VLANs not supported on lo [ 356.427674][T15646] IPVS: Unknown mcast interface: syzkaller1 [ 356.537605][T15653] netlink: 'syz.1.2883': attribute type 13 has an invalid length. [ 356.567445][T15653] netlink: 'syz.1.2883': attribute type 17 has an invalid length. [ 356.592419][T15653] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.599715][T15653] bridge0: port 2(bridge_slave_1) entered listening state [ 356.607191][T15653] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.614371][T15653] bridge0: port 1(bridge_slave_0) entered listening state [ 356.634049][T15657] openvswitch: netlink: Tunnel attr 13 has unexpected len 10 expected 16 [ 356.651470][T15653] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 357.208463][T15690] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 357.224890][T15700] __nla_validate_parse: 14 callbacks suppressed [ 357.224910][T15700] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2896'. [ 357.340500][T15704] netlink: 'syz.3.2898': attribute type 1 has an invalid length. [ 357.397921][T15714] netlink: 'syz.3.2898': attribute type 1 has an invalid length. [ 357.609383][T15720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2902'. [ 357.844623][T15737] xt_CT: No such helper "pptp" [ 357.875599][T15741] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2908'. [ 357.952520][T15741] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2908'. [ 357.972984][T15741] netlink: 'syz.3.2908': attribute type 10 has an invalid length. [ 358.012010][T15741] team0: Device veth0_macvtap failed to register rx_handler [ 358.391179][T15769] tipc: Enabled bearer , priority 0 [ 358.429789][T15769] mac80211_hwsim hwsim5 +: renamed from syzkaller0 (while UP) [ 358.441974][T15769] tipc: Disabling bearer [ 358.554498][ T9414] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 358.741960][T15782] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2922'. [ 358.762173][T15782] Oܼ: renamed from hsr0 [ 358.794401][T15782] Oܼ: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 358.841471][T15782] Oܼ: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.919376][T15782] Oܼ: entered promiscuous mode [ 358.961149][T15782] 8021q: adding VLAN 0 to HW filter on device Oܼ [ 358.977035][T15782] A link change request failed with some changes committed already. Interface Oܼ may have been left with an inconsistent configuration, please check. [ 359.105062][T15789] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2924'. [ 359.183357][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 359.194541][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 359.203637][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 359.214429][T15798] xt_TCPMSS: Only works on TCP SYN packets [ 359.221978][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 359.222653][T15799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2927'. [ 359.241689][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 359.361033][T15802] Bluetooth: MGMT ver 1.23 [ 359.382328][T15806] IPVS: set_ctl: invalid protocol: 92 10.1.1.0:20004 [ 359.393842][T15806] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2928'. [ 359.528528][T15794] lo speed is unknown, defaulting to 1000 [ 359.591901][T15815] tipc: Enabled bearer , priority 0 [ 359.613011][T15817] netem: incorrect ge model size [ 359.631365][T15817] netem: change failed [ 359.653413][T15817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2932'. [ 359.686752][T15820] atomic_op ffff88807b3f6998 conn xmit_atomic 0000000000000000 [ 359.762522][T15815] syzkaller0: entered promiscuous mode [ 359.771014][T15815] syzkaller0: entered allmulticast mode [ 359.784936][T15815] tipc: Resetting bearer [ 359.871005][T15814] tipc: Resetting bearer [ 360.052344][T15834] netlink: 'syz.3.2937': attribute type 29 has an invalid length. [ 360.119717][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2938'. [ 360.243611][T15841] netlink: 'syz.3.2938': attribute type 4 has an invalid length. [ 360.307108][T15843] netlink: 'syz.3.2938': attribute type 4 has an invalid length. [ 361.358577][ T5834] Bluetooth: hci0: command tx timeout [ 361.390860][T15814] tipc: Disabling bearer [ 361.567941][T15850] dvmrp0: entered allmulticast mode [ 361.765921][T15860] netlink: 'syz.0.2943': attribute type 1 has an invalid length. [ 361.981871][T15794] chnl_net:caif_netlink_parms(): no params data found [ 362.078078][T15878] netlink: 'syz.2.2947': attribute type 3 has an invalid length. [ 362.299189][T15794] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.309198][T15794] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.318025][T15794] bridge_slave_0: entered allmulticast mode [ 362.326747][T15794] bridge_slave_0: entered promiscuous mode [ 362.385997][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 362.483378][T15794] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.490843][T15794] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.503549][T15794] bridge_slave_1: entered allmulticast mode [ 362.513552][T15794] bridge_slave_1: entered promiscuous mode [ 362.599179][T15896] netlink: 'syz.0.2951': attribute type 39 has an invalid length. [ 362.636496][T15794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.649524][T15794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.738184][T15794] team0: Port device team_slave_0 added [ 362.759328][T15794] team0: Port device team_slave_1 added [ 362.804536][T15902] netlink: 'syz.0.2953': attribute type 2 has an invalid length. [ 362.836956][T15904] RDS: rds_bind could not find a transport for ::ffff:172.20.20.53, load rds_tcp or rds_rdma? [ 362.850759][T15794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.861133][T15794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.894979][T15794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.908503][T15794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.915479][T15794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.949572][T15794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.969331][T15906] xfrm0: entered promiscuous mode [ 362.974555][T15906] xfrm0: entered allmulticast mode [ 363.102019][T15794] hsr_slave_0: entered promiscuous mode [ 363.118371][T15794] hsr_slave_1: entered promiscuous mode [ 363.124921][T15794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.140641][T15794] Cannot create hsr debugfs directory [ 363.188063][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.265597][T15911] __nla_validate_parse: 5 callbacks suppressed [ 363.265617][T15911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2957'. [ 363.286091][T15915] pim6reg1: entered promiscuous mode [ 363.297097][T15915] pim6reg1: entered allmulticast mode [ 363.428039][ T5834] Bluetooth: hci0: command tx timeout [ 363.544172][T15927] netlink: 'syz.2.2959': attribute type 11 has an invalid length. [ 363.660557][T15794] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.674520][T15794] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.779100][T15794] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.799648][T15794] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.830538][T15938] netlink: 'syz.4.2965': attribute type 2 has an invalid length. [ 363.912051][T15794] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.938912][T15794] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.028398][T15794] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.055318][T15794] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.216549][T15958] .: renamed from bond0 [ 364.312735][T15794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 364.335497][T15794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 364.353983][T15794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 364.372826][T15794] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 364.528957][T15794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.628697][T15973] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2972'. [ 364.634689][T15970] syzkaller0: entered promiscuous mode [ 364.645736][T15970] syzkaller0: entered allmulticast mode [ 364.668435][T15794] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.684306][T15975] netlink: 'syz.4.2973': attribute type 28 has an invalid length. [ 364.688232][ T9409] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.699308][ T9409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.703080][T15975] netlink: 'syz.4.2973': attribute type 3 has an invalid length. [ 364.716624][T15975] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2973'. [ 365.009353][T15979] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 365.018788][T15979] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 365.027214][T15979] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 365.035252][T15979] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 365.043865][T15979] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 365.055450][T15979] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 365.065368][T15979] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 365.073787][T15979] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 365.089052][T15979] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 365.108178][T15979] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 365.518608][ T5834] Bluetooth: hci0: command tx timeout [ 366.209069][ T9414] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.216314][ T9414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.278847][T15991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2977'. [ 366.412154][T15995] tipc: Can't bind to reserved service type 2 [ 366.781332][T15794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.789381][T16019] netlink: 'syz.4.2989': attribute type 23 has an invalid length. [ 366.936632][T15794] veth0_vlan: entered promiscuous mode [ 366.972341][T15794] veth1_vlan: entered promiscuous mode [ 366.973567][T16027] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2992'. [ 367.084286][T15794] veth0_macvtap: entered promiscuous mode [ 367.118147][T15794] veth1_macvtap: entered promiscuous mode [ 367.140444][T16039] netlink: 'syz.2.2995': attribute type 21 has an invalid length. [ 367.153100][T16038] netlink: 'syz.3.2994': attribute type 10 has an invalid length. [ 367.173637][T15794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.217985][T15794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.277223][T15794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.301398][T15794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.313505][T15794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.327667][T15794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.362192][T16045] syz.3.2997: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 367.391940][T16045] CPU: 1 UID: 0 PID: 16045 Comm: syz.3.2997 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) [ 367.391974][T16045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 367.391991][T16045] Call Trace: [ 367.392003][T16045] [ 367.392013][T16045] dump_stack_lvl+0x189/0x250 [ 367.392052][T16045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.392081][T16045] ? __pfx__printk+0x10/0x10 [ 367.392102][T16045] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 367.392125][T16045] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 367.392149][T16045] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 367.392173][T16045] warn_alloc+0x214/0x310 [ 367.392203][T16045] ? __pfx___schedule+0x10/0x10 [ 367.392231][T16045] ? __pfx_warn_alloc+0x10/0x10 [ 367.392260][T16045] ? kasan_save_track+0x4f/0x80 [ 367.392283][T16045] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 367.392307][T16045] ? xskq_create+0x56/0x170 [ 367.392333][T16045] ? __x64_sys_setsockopt+0x18b/0x220 [ 367.392365][T16045] ? do_syscall_64+0xf6/0x210 [ 367.392392][T16045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.392424][T16045] __vmalloc_node_range_noprof+0x125/0x12c0 [ 367.392490][T16045] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 367.392524][T16045] ? __kasan_kmalloc+0x93/0xb0 [ 367.392556][T16045] vmalloc_user_noprof+0x74/0x80 [ 367.392585][T16045] ? xskq_create+0xbf/0x170 [ 367.392620][T16045] xskq_create+0xbf/0x170 [ 367.392646][T16045] xsk_init_queue+0xb0/0x110 [ 367.392671][T16045] xsk_setsockopt+0x43f/0x710 [ 367.392695][T16045] ? __pfx_xsk_setsockopt+0x10/0x10 [ 367.392728][T16045] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 367.392751][T16045] ? __pfx_xsk_setsockopt+0x10/0x10 [ 367.392773][T16045] do_sock_setsockopt+0x25a/0x3e0 [ 367.392819][T16045] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 367.392844][T16045] ? __fget_files+0x2a/0x420 [ 367.392876][T16045] ? __fget_files+0x3a0/0x420 [ 367.392901][T16045] ? __fget_files+0x2a/0x420 [ 367.392940][T16045] __x64_sys_setsockopt+0x18b/0x220 [ 367.392975][T16045] do_syscall_64+0xf6/0x210 [ 367.393001][T16045] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 367.393021][T16045] ? clear_bhb_loop+0x60/0xb0 [ 367.393046][T16045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.393065][T16045] RIP: 0033:0x7fe54fd8e969 [ 367.393083][T16045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.393101][T16045] RSP: 002b:00007fe550c67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 367.393122][T16045] RAX: ffffffffffffffda RBX: 00007fe54ffb5fa0 RCX: 00007fe54fd8e969 [ 367.393137][T16045] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 367.393149][T16045] RBP: 00007fe54fe10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 367.393161][T16045] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.393174][T16045] R13: 0000000000000000 R14: 00007fe54ffb5fa0 R15: 00007ffed7ad5ab8 [ 367.393206][T16045] [ 367.395538][T16045] Mem-Info: [ 367.606051][ T5834] Bluetooth: hci0: command tx timeout [ 367.610618][T16045] active_anon:4928 inactive_anon:0 isolated_anon:0 [ 367.610618][T16045] active_file:1527 inactive_file:39920 isolated_file:0 [ 367.610618][T16045] unevictable:768 dirty:103 writeback:0 [ 367.610618][T16045] slab_reclaimable:11616 slab_unreclaimable:120553 [ 367.610618][T16045] mapped:30272 shmem:1361 pagetables:885 [ 367.610618][T16045] sec_pagetables:0 bounce:0 [ 367.610618][T16045] kernel_misc_reclaimable:0 [ 367.610618][T16045] free:1322189 free_pcp:508 free_cma:0 [ 367.687819][T16053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2997'. [ 367.772450][T16045] Node 0 active_anon:19812kB inactive_anon:0kB active_file:6108kB inactive_file:159476kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121288kB dirty:408kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12376kB pagetables:3540kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 367.847795][ T9414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.880146][T16045] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 367.916057][ T9414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.962346][ T9409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.977160][T16045] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 368.010293][T16061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3002'. [ 368.019966][ T9409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.049310][T16045] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 368.079651][T16045] Node 0 DMA32 free:1359940kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:19596kB inactive_anon:0kB active_file:6108kB inactive_file:159392kB unevictable:1536kB writepending:408kB present:3129332kB managed:2564116kB mlocked:0kB bounce:0kB free_pcp:2452kB local_pcp:1048kB free_cma:0kB [ 368.122724][T16045] lowmem_reserve[]: 0 0 0 0 0 [ 368.129387][T16045] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 368.170835][T16045] lowmem_reserve[]: 0 0 0 0 0 [ 368.175677][T16045] Node 1 Normal free:3911740kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 368.233430][T16045] lowmem_reserve[]: 0 0 0 0 0 [ 368.238450][T16045] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 368.257393][T16045] Node 0 DMA32: 11*4kB (UME) 191*8kB (UME) 101*16kB (UM) 220*32kB (UME) 86*64kB (UME) 45*128kB (UME) 93*256kB (UME) 47*512kB (UME) 21*1024kB (UM) 16*2048kB (UM) 302*4096kB (UM) = 1360628kB [ 368.332872][T16045] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 368.367182][T16045] Node 1 Normal: 251*4kB (UME) 46*8kB (UME) 36*16kB (UME) 189*32kB (UME) 84*64kB (UME) 34*128kB (UME) 11*256kB (UME) 10*512kB (UME) 5*1024kB (UM) 5*2048kB (UE) 945*4096kB (M) = 3911740kB [ 368.419670][T16045] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 368.451099][T16045] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 368.479842][T16045] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 368.498150][T16082] netlink: 'syz.0.3007': attribute type 1 has an invalid length. [ 368.512022][T16082] netlink: 'syz.0.3007': attribute type 10 has an invalid length. [ 368.538797][T16082] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3007'. [ 368.560087][T16084] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3008'. [ 368.577735][T16045] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 368.619713][T16045] 42806 total pagecache pages [ 368.624459][T16045] 0 pages in swap cache [ 368.665484][T16045] Free swap = 124996kB [ 368.697394][T16045] Total swap = 124996kB [ 368.701618][T16045] 2097051 pages RAM [ 368.705446][T16045] 0 pages HighMem/MovableOnly [ 368.740336][T16045] 424364 pages reserved [ 368.744556][T16045] 0 pages cma reserved [ 368.757742][T16090] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3009'. [ 368.803159][T16089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3010'. [ 368.813790][T16090] bridge_slave_0: left allmulticast mode [ 368.820675][T16090] bridge_slave_0: left promiscuous mode [ 368.831119][T16090] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.858455][T16090] bridge_slave_1: left allmulticast mode [ 368.872547][T16090] bridge_slave_1: left promiscuous mode [ 368.892144][T16090] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.948093][T16090] .: (slave 1@): Releasing backup interface [ 368.966295][T16090] .: (slave bond_slave_1): Releasing backup interface [ 369.001647][T16090] team0: Port device team_slave_1 removed [ 369.010563][T16090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.032889][T16090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.056405][T16090] bond5: (slave wlan0): Releasing active interface [ 369.080474][T16090] batman_adv: batadv0: Removing interface: gretap1 [ 369.092198][T16093] tipc: Started in network mode [ 369.097634][T16093] tipc: Node identity ffffa848, cluster identity 4711 [ 369.120223][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 369.129486][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 369.139252][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 369.148464][T16093] tipc: Node number set to 4294944840 [ 369.159238][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 369.170349][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 369.211051][T16094] dvmrp1: entered allmulticast mode [ 369.216760][T16096] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3012'. [ 369.365048][T16099] lo speed is unknown, defaulting to 1000 [ 369.596571][ T11] block nbd0: Possible stuck request ffff888024d77000: control (read@0,4096B). Runtime 240 seconds [ 370.039859][T16137] xt_CT: You must specify a L4 protocol and not use inversions on it [ 370.162724][T16134] netlink: 'syz.3.3024': attribute type 11 has an invalid length. [ 370.187098][T16134] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3024'. [ 370.225988][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 370.328749][T16099] chnl_net:caif_netlink_parms(): no params data found [ 370.502754][T16156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3030'. [ 370.607853][T16161] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3032'. [ 370.624679][T16099] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.646149][T16099] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.668470][T16099] bridge_slave_0: entered allmulticast mode [ 370.692690][T16099] bridge_slave_0: entered promiscuous mode [ 370.702339][T16099] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.709776][T16099] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.711647][T16164] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3033'. [ 370.717106][T16099] bridge_slave_1: entered allmulticast mode [ 370.719054][T16099] bridge_slave_1: entered promiscuous mode [ 370.747614][T16168] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3034'. [ 370.831866][T16099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.873627][T16099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.959494][T16099] team0: Port device team_slave_0 added [ 370.970070][T16099] team0: Port device team_slave_1 added [ 371.061354][T16182] vlan2: entered allmulticast mode [ 371.076429][T16182] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode [ 371.098369][T16099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.105390][T16099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.152720][T16099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.202083][T16099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.210490][T16099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.266880][ T5831] Bluetooth: hci5: command tx timeout [ 371.288794][T16099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.530785][T16099] hsr_slave_0: entered promiscuous mode [ 371.567778][T16099] hsr_slave_1: entered promiscuous mode [ 371.599783][T16099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.626858][T16099] Cannot create hsr debugfs directory [ 372.121056][T16099] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.171887][T16099] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 372.227172][T16245] lo speed is unknown, defaulting to 1000 [ 372.331536][T16099] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.340782][T16258] netlink: 'syz.3.3056': attribute type 29 has an invalid length. [ 372.349483][T16099] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 372.500730][T16099] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.541798][T16099] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 372.718739][T16099] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.729397][T16099] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 373.312099][T16099] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 373.355563][ T5831] Bluetooth: hci5: command tx timeout [ 373.390154][T16099] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 373.421573][T16302] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 373.434199][T16302] netlink: 'syz.0.3068': attribute type 21 has an invalid length. [ 373.475218][T16099] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 373.487100][T16302] netlink: 'syz.0.3068': attribute type 6 has an invalid length. [ 373.495408][T16099] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 373.675237][T16099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.676868][T16307] __nla_validate_parse: 13 callbacks suppressed [ 373.676887][T16307] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3070'. [ 373.721069][T16307] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3070'. [ 373.752421][T16311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3070'. [ 373.765041][T16099] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.771236][T16311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3070'. [ 373.800644][ T9421] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.807862][ T9421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.837281][ T9421] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.844553][ T9421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.919179][T16099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 374.051693][T16325] net_ratelimit: 25 callbacks suppressed [ 374.051714][T16325] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 374.247102][T16333] IPVS: Error connecting to the multicast addr [ 374.412437][T16099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.535728][T16099] veth0_vlan: entered promiscuous mode [ 374.561264][T16099] veth1_vlan: entered promiscuous mode [ 374.656146][T16351] xt_policy: too many policy elements [ 374.666972][T16099] veth0_macvtap: entered promiscuous mode [ 374.692993][T16099] veth1_macvtap: entered promiscuous mode [ 374.761701][T16099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.777244][T16099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.867021][T16099] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.876365][T16099] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.885176][T16099] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.894225][T16099] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.050379][ T9423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.070177][T16357] netlink: 'syz.4.3084': attribute type 2 has an invalid length. [ 375.072909][ T9423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.168176][ T9419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.186955][ T9419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.429293][ T5831] Bluetooth: hci5: command tx timeout [ 375.555521][T16375] bridge1: entered promiscuous mode [ 375.563513][T16375] bridge1: entered allmulticast mode [ 375.943240][T16394] vlan1: entered allmulticast mode [ 375.966035][T16394] [H: entered allmulticast mode [ 376.007813][T16394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3097'. [ 376.340382][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 376.357787][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 376.370963][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 376.379295][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 376.391211][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 376.444861][T16404] lo speed is unknown, defaulting to 1000 [ 376.505412][T16409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3101'. [ 376.530990][T16409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3101'. [ 376.549644][T16409] netlink: 'syz.1.3101': attribute type 3 has an invalid length. [ 376.847301][T16425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3106'. [ 377.181912][T16404] chnl_net:caif_netlink_parms(): no params data found [ 377.260109][T16442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3111'. [ 377.266364][T16443] netlink: 'syz.3.3109': attribute type 1 has an invalid length. [ 377.278494][T16444] netlink: 'syz.3.3109': attribute type 1 has an invalid length. [ 377.344109][T16443] bond3: entered promiscuous mode [ 377.353626][T16443] 8021q: adding VLAN 0 to HW filter on device bond3 [ 377.436754][T16455] IPVS: Unknown mcast interface: vlan1 [ 377.451388][T16455] xt_hashlimit: invalid interval [ 377.493303][T16404] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.506397][T16404] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.506672][ T5834] Bluetooth: hci5: command tx timeout [ 377.513951][T16404] bridge_slave_0: entered allmulticast mode [ 377.550380][T16404] bridge_slave_0: entered promiscuous mode [ 377.582138][T16404] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.598448][T16404] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.609068][T16404] bridge_slave_1: entered allmulticast mode [ 377.617320][T16404] bridge_slave_1: entered promiscuous mode [ 377.624621][T16461] 8021q: VLANs not supported on caif0 [ 377.635057][T16461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3116'. [ 377.682052][T16461] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.691843][T16461] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.701538][T16461] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.710374][T16461] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.776856][T16404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.815117][T16404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.941456][T16404] team0: Port device team_slave_0 added [ 377.972209][T16404] team0: Port device team_slave_1 added [ 378.061929][T16404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.077151][T16404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.112428][T16404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.131519][T16404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.143829][T16404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.179977][T16404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.344521][T16404] hsr_slave_0: entered promiscuous mode [ 378.352764][T16404] hsr_slave_1: entered promiscuous mode [ 378.359514][T16404] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.367388][T16404] Cannot create hsr debugfs directory [ 378.472836][ T5834] Bluetooth: hci1: command tx timeout [ 378.533369][T16502] dvmrp0: entered allmulticast mode [ 378.780224][T16518] netlink: 'syz.4.3134': attribute type 1 has an invalid length. [ 378.790015][T16518] xt_hashlimit: max too large, truncated to 1048576 [ 378.809215][T16521] __nla_validate_parse: 4 callbacks suppressed [ 378.809232][T16521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3133'. [ 378.825251][T16519] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3132'. [ 378.919353][T16529] netlink: 'syz.3.3133': attribute type 1 has an invalid length. [ 379.023927][T16529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3133'. [ 379.034425][T16529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3133'. [ 379.081488][T16533] netlink: 'syz.4.3136': attribute type 2 has an invalid length. [ 379.380510][T16548] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3142'. [ 379.450875][T16548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.461088][T16548] bond_slave_0: left promiscuous mode [ 379.469691][T16548] bond_slave_0: left allmulticast mode [ 379.497951][T16548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.530311][T16548] bond_slave_1: left promiscuous mode [ 379.546899][T16548] bond_slave_1: left allmulticast mode [ 379.562511][T16548] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 379.571792][T16548] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 379.581603][T16548] bond0 (unregistering): Released all slaves [ 379.779726][T16562] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 379.902869][T16404] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 379.983039][T16404] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 380.048429][T16404] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 380.194852][T16404] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 380.548064][ T5834] Bluetooth: hci1: command tx timeout [ 381.748437][T16600] veth1_macvtap: left promiscuous mode [ 381.753973][T16600] macsec0: entered promiscuous mode [ 381.790895][T16602] veth1_macvtap: entered promiscuous mode [ 381.798708][T16602] macsec0: left promiscuous mode [ 381.976193][T16609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3161'. [ 381.984669][T16607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3160'. [ 381.994690][T16609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3161'. [ 382.053498][T16609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3161'. [ 382.070472][T16610] netlink: 'syz.3.3161': attribute type 1 has an invalid length. [ 382.080815][T16607] syzkaller0: entered promiscuous mode [ 382.083239][T16610] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3161'. [ 382.093161][T16607] syzkaller0: entered allmulticast mode [ 382.628893][ T5834] Bluetooth: hci1: command tx timeout [ 383.682723][T16404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.753599][T16638] netlink: 'syz.1.3169': attribute type 2 has an invalid length. [ 383.811124][T16404] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.879976][T16644] netlink: 'syz.4.3170': attribute type 1 has an invalid length. [ 383.881853][ T9413] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.894970][ T9413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.905292][T16644] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3170'. [ 383.930828][ T9414] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.938215][ T9414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.183158][T16660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3174'. [ 384.433792][T16668] syz.2.3176 (16668) used obsolete PPPIOCDETACH ioctl [ 384.506342][T16680] 8021q: VLANs not supported on gre0 [ 384.537501][T16681] netlink: 'syz.3.3178': attribute type 25 has an invalid length. [ 384.713363][ T5834] Bluetooth: hci1: command tx timeout [ 384.740700][T16404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.744929][T16688] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 384.845209][T16404] veth0_vlan: entered promiscuous mode [ 384.915059][T16404] veth1_vlan: entered promiscuous mode [ 384.980914][T16696] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 385.011023][T16404] veth0_macvtap: entered promiscuous mode [ 385.031419][T16702] netlink: 'syz.2.3187': attribute type 11 has an invalid length. [ 385.044312][T16702] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3187'. [ 385.063418][T16404] veth1_macvtap: entered promiscuous mode [ 385.088670][ T30] audit: type=1107 audit(1748269583.503:8): pid=16701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 385.135700][T16404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.219534][T16404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.250716][T16404] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.294410][T16404] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.310653][T16404] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.375106][T16404] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.586828][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 385.682350][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.698886][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.891715][ T9416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.900470][ T9416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.916027][T16735] netlink: 'syz.2.3196': attribute type 11 has an invalid length. [ 386.195553][T16751] netlink: 'syz.0.3092': attribute type 33 has an invalid length. [ 386.250984][T16751] vlan2: entered promiscuous mode [ 386.274016][T16751] vlan2: entered allmulticast mode [ 386.296119][T16751] hsr_slave_1: entered allmulticast mode [ 386.356509][T16756] netlink: 'syz.1.3200': attribute type 4 has an invalid length. [ 386.538282][T16761] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3202'. [ 386.793053][ T5834] Bluetooth: hci1: command tx timeout [ 386.867463][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 386.875621][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 386.939260][T16775] xt_TCPMSS: Only works on TCP SYN packets [ 386.945223][T16775] xt_TCPMSS: Only works on TCP SYN packets [ 387.000421][T16776] unknown channel width for channel at 909000KHz? [ 387.489753][T16791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3213'. [ 387.555284][T16794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.644365][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 387.653383][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 387.664714][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 387.678075][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 387.686531][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 387.741917][T16794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.957591][T16807] delete_channel: no stack [ 387.974357][T16807] netlink: 'syz.2.3218': attribute type 1 has an invalid length. [ 387.982330][T16807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3218'. [ 387.992497][T16797] lo speed is unknown, defaulting to 1000 [ 388.035953][T16807] netlink: 15 bytes leftover after parsing attributes in process `syz.2.3218'. [ 388.399029][T16816] geneve1: entered promiscuous mode [ 388.408705][T16816] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 388.674094][T16823] veth1_macvtap: left promiscuous mode [ 388.706296][T16823] macsec0: entered allmulticast mode [ 388.756027][T16824] veth1_macvtap: entered promiscuous mode [ 388.761815][T16824] veth1_macvtap: entered allmulticast mode [ 388.811641][T16824] macsec0: left allmulticast mode [ 388.839403][T16824] veth1_macvtap: left allmulticast mode [ 389.269827][T16797] chnl_net:caif_netlink_parms(): no params data found [ 389.576611][T16843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3228'. [ 389.617980][T16843] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 389.657681][T16797] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.674474][T16843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.697745][T16797] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.719923][T16797] bridge_slave_0: entered allmulticast mode [ 389.728517][T16797] bridge_slave_0: entered promiscuous mode [ 389.738297][T16797] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.749132][ T5831] Bluetooth: hci2: command tx timeout [ 389.754637][T16797] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.762302][T16797] bridge_slave_1: entered allmulticast mode [ 389.795385][T16797] bridge_slave_1: entered promiscuous mode [ 390.025370][T16797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.080758][T16797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.356203][T16857] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 390.483842][T16797] team0: Port device team_slave_0 added [ 390.517642][T16797] team0: Port device team_slave_1 added [ 390.763156][T16797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.781128][T16797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.841518][T16797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.289003][ T46] ------------[ cut here ]------------ [ 391.294834][ T46] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band [ 391.309707][ T46] WARNING: CPU: 1 PID: 46 at net/mac80211/tx.c:756 ieee80211_tx_h_rate_ctrl+0xc87/0x1780 [ 391.319625][ T46] Modules linked in: [ 391.323910][ T46] CPU: 1 UID: 0 PID: 46 Comm: kworker/u8:3 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) [ 391.335991][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 391.346133][ T46] Workqueue: events_unbound cfg80211_wiphy_work [ 391.352458][ T46] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc87/0x1780 [ 391.358982][ T46] Code: 31 f6 83 e6 07 41 0f 95 c6 31 ff e8 03 26 ea f6 43 8d 0c 76 83 c1 02 48 c7 c7 60 8b 8c 8c 48 89 de 4c 89 fa e8 3a 7e ae f6 90 <0f> 0b 90 90 41 bf 01 00 00 00 e9 eb 02 00 00 e8 95 21 ea f6 e9 6a [ 391.379083][ T46] RSP: 0018:ffffc90000b77460 EFLAGS: 00010246 [ 391.385205][ T46] RAX: e6c26c8aa26e9900 RBX: ffff888024459738 RCX: ffff88801d6b1e00 [ 391.393254][ T46] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 391.401309][ T46] RBP: ffffc90000b775d0 R08: 0000000000000003 R09: 0000000000000004 [ 391.409382][ T46] R10: dffffc0000000000 R11: fffffbfff1bba984 R12: dffffc0000000000 [ 391.417427][ T46] R13: ffffc90000b77788 R14: 0000000000000001 R15: ffff8880752e8044 [ 391.425439][ T46] FS: 0000000000000000(0000) GS:ffff8881261c2000(0000) knlGS:0000000000000000 [ 391.434439][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.441171][ T46] CR2: 00007f0eab3f5f98 CR3: 0000000075b40000 CR4: 00000000003526f0 [ 391.449214][ T46] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 391.457257][ T46] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 391.465271][ T46] Call Trace: [ 391.468615][ T46] [ 391.471594][ T46] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 391.477758][ T46] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 391.483958][ T46] invoke_tx_handlers_late+0xb6/0x1820 [ 391.489488][ T46] ? ieee80211_tx_h_select_key+0x13d4/0x1900 [ 391.495513][ T46] ? sta_info_get+0x28d/0x2a0 [ 391.500288][ T46] ? invoke_tx_handlers_early+0xa11/0x1d10 [ 391.506197][ T46] ieee80211_tx+0x2ac/0x420 [ 391.510754][ T46] ? __pfx_ieee80211_tx+0x10/0x10 [ 391.515884][ T46] ? ieee80211_xmit+0x315/0x400 [ 391.520784][ T46] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 391.526834][ T46] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 391.532681][ T46] ? ieee80211_scan_state_send_probe+0x4ee/0xa10 [ 391.539088][ T46] ieee80211_scan_state_send_probe+0x59a/0xa10 [ 391.545315][ T46] ieee80211_scan_work+0x5b1/0x1ce0 [ 391.550630][ T46] cfg80211_wiphy_work+0x2dc/0x460 [ 391.555829][ T46] ? process_scheduled_works+0x9ec/0x17a0 [ 391.561596][ T46] process_scheduled_works+0xadb/0x17a0 [ 391.567728][ T46] ? __pfx_process_scheduled_works+0x10/0x10 [ 391.573781][ T46] worker_thread+0x8a0/0xda0 [ 391.578569][ T46] kthread+0x70e/0x8a0 [ 391.582706][ T46] ? __pfx_worker_thread+0x10/0x10 [ 391.587896][ T46] ? __pfx_kthread+0x10/0x10 [ 391.592525][ T46] ? __pfx_kthread+0x10/0x10 [ 391.597185][ T46] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.602419][ T46] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.607693][ T46] ? __pfx_kthread+0x10/0x10 [ 391.612320][ T46] ret_from_fork+0x4b/0x80 [ 391.616803][ T46] ? __pfx_kthread+0x10/0x10 [ 391.621436][ T46] ret_from_fork_asm+0x1a/0x30 [ 391.626331][ T46] [ 391.629377][ T46] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 391.636681][ T46] CPU: 1 UID: 0 PID: 46 Comm: kworker/u8:3 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) [ 391.648692][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 391.658869][ T46] Workqueue: events_unbound cfg80211_wiphy_work [ 391.665312][ T46] Call Trace: [ 391.668644][ T46] [ 391.671604][ T46] dump_stack_lvl+0x99/0x250 [ 391.676242][ T46] ? __asan_memcpy+0x40/0x70 [ 391.680867][ T46] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.686106][ T46] ? __pfx__printk+0x10/0x10 [ 391.690750][ T46] panic+0x2db/0x790 [ 391.694695][ T46] ? __pfx_panic+0x10/0x10 [ 391.699148][ T46] ? show_trace_log_lvl+0x4fb/0x550 [ 391.704489][ T46] ? ret_from_fork_asm+0x1a/0x30 [ 391.709461][ T46] __warn+0x31b/0x4b0 [ 391.713478][ T46] ? ieee80211_tx_h_rate_ctrl+0xc87/0x1780 [ 391.719323][ T46] ? ieee80211_tx_h_rate_ctrl+0xc87/0x1780 [ 391.725174][ T46] report_bug+0x2be/0x4f0 [ 391.729537][ T46] ? ieee80211_tx_h_rate_ctrl+0xc87/0x1780 [ 391.735397][ T46] ? ieee80211_tx_h_rate_ctrl+0xc87/0x1780 [ 391.741253][ T46] ? ieee80211_tx_h_rate_ctrl+0xc89/0x1780 [ 391.747095][ T46] handle_bug+0x84/0x160 [ 391.751379][ T46] exc_invalid_op+0x1a/0x50 [ 391.755947][ T46] asm_exc_invalid_op+0x1a/0x20 [ 391.760825][ T46] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc87/0x1780 [ 391.767284][ T46] Code: 31 f6 83 e6 07 41 0f 95 c6 31 ff e8 03 26 ea f6 43 8d 0c 76 83 c1 02 48 c7 c7 60 8b 8c 8c 48 89 de 4c 89 fa e8 3a 7e ae f6 90 <0f> 0b 90 90 41 bf 01 00 00 00 e9 eb 02 00 00 e8 95 21 ea f6 e9 6a [ 391.787355][ T46] RSP: 0018:ffffc90000b77460 EFLAGS: 00010246 [ 391.793488][ T46] RAX: e6c26c8aa26e9900 RBX: ffff888024459738 RCX: ffff88801d6b1e00 [ 391.801507][ T46] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 391.809509][ T46] RBP: ffffc90000b775d0 R08: 0000000000000003 R09: 0000000000000004 [ 391.817511][ T46] R10: dffffc0000000000 R11: fffffbfff1bba984 R12: dffffc0000000000 [ 391.825512][ T46] R13: ffffc90000b77788 R14: 0000000000000001 R15: ffff8880752e8044 [ 391.833558][ T46] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 391.839689][ T46] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 391.845884][ T46] invoke_tx_handlers_late+0xb6/0x1820 [ 391.851371][ T46] ? ieee80211_tx_h_select_key+0x13d4/0x1900 [ 391.857418][ T46] ? sta_info_get+0x28d/0x2a0 [ 391.862125][ T46] ? invoke_tx_handlers_early+0xa11/0x1d10 [ 391.867953][ T46] ieee80211_tx+0x2ac/0x420 [ 391.872478][ T46] ? __pfx_ieee80211_tx+0x10/0x10 [ 391.877552][ T46] ? ieee80211_xmit+0x315/0x400 [ 391.882423][ T46] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 391.888418][ T46] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 391.894243][ T46] ? ieee80211_scan_state_send_probe+0x4ee/0xa10 [ 391.900606][ T46] ieee80211_scan_state_send_probe+0x59a/0xa10 [ 391.906809][ T46] ieee80211_scan_work+0x5b1/0x1ce0 [ 391.912058][ T46] cfg80211_wiphy_work+0x2dc/0x460 [ 391.917190][ T46] ? process_scheduled_works+0x9ec/0x17a0 [ 391.922921][ T46] process_scheduled_works+0xadb/0x17a0 [ 391.928537][ T46] ? __pfx_process_scheduled_works+0x10/0x10 [ 391.934551][ T46] worker_thread+0x8a0/0xda0 [ 391.939175][ T46] kthread+0x70e/0x8a0 [ 391.943259][ T46] ? __pfx_worker_thread+0x10/0x10 [ 391.948379][ T46] ? __pfx_kthread+0x10/0x10 [ 391.952983][ T46] ? __pfx_kthread+0x10/0x10 [ 391.957578][ T46] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.962784][ T46] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.967990][ T46] ? __pfx_kthread+0x10/0x10 [ 391.972594][ T46] ret_from_fork+0x4b/0x80 [ 391.977021][ T46] ? __pfx_kthread+0x10/0x10 [ 391.981622][ T46] ret_from_fork_asm+0x1a/0x30 [ 391.986423][ T46] [ 391.989801][ T46] Kernel Offset: disabled [ 391.994136][ T46] Rebooting in 86400 seconds..