last executing test programs: 34.23621198s ago: executing program 0 (id=1342): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x4020940d, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="02"], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r6, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f00000002c0)=0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@empty, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4040, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}, {0xbe00, 0x88be, 0x8}}}}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008100}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, r2, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x31ac}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x850}, 0x40081) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14006339ef4045cf9887bc789d0cb78a2f4600001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c1f01800b000100736f636b657400000c1d028008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) 34.05595087s ago: executing program 0 (id=1346): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0xcd8, 0x9a0, 0x9a0, 0x0, 0xb48, 0xa38, 0xc40, 0xc40, 0xc40, 0xc40, 0xc40, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00'}, 0x0, 0x850, 0x890, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{}, {}, {[], [{}, {}, {}, {0x0, 0xffff21b4}]}, {}, {}, {}, {}, {[], [], 0x80}, {[], [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x200}]}], 0xb}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8001, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xe, 0x1}}, @inet=@rpfilter={{0x28}}]}, @ECN={0x28}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'rose0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xd38) sendmsg$inet_sctp(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@sndinfo={0x20, 0x84, 0x2, {0xd, 0x10000}}, @authinfo={0x18, 0x84, 0x6, {0x8}}], 0x38, 0x40040}, 0x4004000) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8048000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000ff000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r7, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001b00)}}, 0x10) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000005002000000000000c001f00706879300a"], 0x28}}, 0x4090) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001140), r6) 33.823926166s ago: executing program 0 (id=1349): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b703000000090001db020a000000000007000000000000009500000000000a6682f0a61b01e4c027d252f602901b7cbbd5b9097bb8334a5541cf9e345af317e35f0ad53d857708f974879196ac07622b10548ccd2028eaf7610ae297a58e413b22d81494fcb1dbd1e9cb784c590ddd06ee929a27a5dedf301650960d8ae1cf339f6bda65bf6594c2839dcea6e419c9b8b7d17b9e49f392c857ccb0a3f64a59a87332ffa41c17b82700789b163bbc8507f171b46d2c569e75810e60a06b6f69ef41ca39a200"/212], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)=r0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@int={0x5, 0x0, 0x0, 0x1, 0x0, 0x5b, 0x0, 0x62, 0x2}]}, {0x0, [0x2e, 0x30, 0x5f, 0x5f]}}, &(0x7f0000000380)=""/197, 0x2e, 0xc5, 0x0, 0x5, 0x28a0777b423334e1, @value}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d00000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000900)={'ip_vti0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r5, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001280)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r7, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x2, 0x12, r8, 0x3000) mmap(&(0x7f00004ef000/0x4000)=nil, 0x4000, 0x2000006, 0x12, r8, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r8, 0x0) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%-010d \x00'}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1e00000003000000090000009f57000080140000802e12163f21dbe1015543b1e76844be658073e9159b33b5591a9fde50cde8cc90695cd1cd0fc42db321fb6986225f5ac93eec060f03dd7d0e3150e29d4c1bbf0a44282befd4ffe2cf134caa7c9e3bc9723e65d2369b1e2dd41a356be30eb4a6f6a6bef83f727ac2db7b8b163a5265c9c1a494a7398ef0efc10503746991c770040bee494d383f784f26bfbc8d516aa4d852ecce2def0e2c", @ANYRES32, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000004000000050000000a00"/28], 0x50) getsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000880), &(0x7f00000008c0)=0x4) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xf, 0x21, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x6, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x86}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xa}, @map_val={0x18, 0x1, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}, @call]}, &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x32, r4, 0x8, &(0x7f00000004c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xc, 0x6972bfb5, 0x7ff}, 0x10, r7, 0xffffffffffffffff, 0x4, &(0x7f0000000700)=[0x1, r8, r9, r10, r11, r12, 0x1], &(0x7f0000000740)=[{0x4, 0x2, 0x3, 0x3}, {0x4, 0x1, 0xa, 0x4}, {0x2, 0x4, 0x0, 0x1}, {0x4, 0x5, 0xd, 0x5}], 0x10, 0x9, @void, @value}, 0x94) 26.727643792s ago: executing program 0 (id=1349): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b703000000090001db020a000000000007000000000000009500000000000a6682f0a61b01e4c027d252f602901b7cbbd5b9097bb8334a5541cf9e345af317e35f0ad53d857708f974879196ac07622b10548ccd2028eaf7610ae297a58e413b22d81494fcb1dbd1e9cb784c590ddd06ee929a27a5dedf301650960d8ae1cf339f6bda65bf6594c2839dcea6e419c9b8b7d17b9e49f392c857ccb0a3f64a59a87332ffa41c17b82700789b163bbc8507f171b46d2c569e75810e60a06b6f69ef41ca39a200"/212], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)=r0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@int={0x5, 0x0, 0x0, 0x1, 0x0, 0x5b, 0x0, 0x62, 0x2}]}, {0x0, [0x2e, 0x30, 0x5f, 0x5f]}}, &(0x7f0000000380)=""/197, 0x2e, 0xc5, 0x0, 0x5, 0x28a0777b423334e1, @value}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d00000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000900)={'ip_vti0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r5, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001280)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r7, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x2, 0x12, r8, 0x3000) mmap(&(0x7f00004ef000/0x4000)=nil, 0x4000, 0x2000006, 0x12, r8, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r8, 0x0) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%-010d \x00'}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1e00000003000000090000009f57000080140000802e12163f21dbe1015543b1e76844be658073e9159b33b5591a9fde50cde8cc90695cd1cd0fc42db321fb6986225f5ac93eec060f03dd7d0e3150e29d4c1bbf0a44282befd4ffe2cf134caa7c9e3bc9723e65d2369b1e2dd41a356be30eb4a6f6a6bef83f727ac2db7b8b163a5265c9c1a494a7398ef0efc10503746991c770040bee494d383f784f26bfbc8d516aa4d852ecce2def0e2c", @ANYRES32, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000004000000050000000a00"/28], 0x50) getsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000880), &(0x7f00000008c0)=0x4) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xf, 0x21, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x6, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x86}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xa}, @map_val={0x18, 0x1, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}, @call]}, &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x32, r4, 0x8, &(0x7f00000004c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xc, 0x6972bfb5, 0x7ff}, 0x10, r7, 0xffffffffffffffff, 0x4, &(0x7f0000000700)=[0x1, r8, r9, r10, r11, r12, 0x1], &(0x7f0000000740)=[{0x4, 0x2, 0x3, 0x3}, {0x4, 0x1, 0xa, 0x4}, {0x2, 0x4, 0x0, 0x1}, {0x4, 0x5, 0xd, 0x5}], 0x10, 0x9, @void, @value}, 0x94) 17.143664557s ago: executing program 0 (id=1349): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b703000000090001db020a000000000007000000000000009500000000000a6682f0a61b01e4c027d252f602901b7cbbd5b9097bb8334a5541cf9e345af317e35f0ad53d857708f974879196ac07622b10548ccd2028eaf7610ae297a58e413b22d81494fcb1dbd1e9cb784c590ddd06ee929a27a5dedf301650960d8ae1cf339f6bda65bf6594c2839dcea6e419c9b8b7d17b9e49f392c857ccb0a3f64a59a87332ffa41c17b82700789b163bbc8507f171b46d2c569e75810e60a06b6f69ef41ca39a200"/212], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)=r0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@int={0x5, 0x0, 0x0, 0x1, 0x0, 0x5b, 0x0, 0x62, 0x2}]}, {0x0, [0x2e, 0x30, 0x5f, 0x5f]}}, &(0x7f0000000380)=""/197, 0x2e, 0xc5, 0x0, 0x5, 0x28a0777b423334e1, @value}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d00000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000900)={'ip_vti0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r5, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001280)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r7, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x2, 0x12, r8, 0x3000) mmap(&(0x7f00004ef000/0x4000)=nil, 0x4000, 0x2000006, 0x12, r8, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r8, 0x0) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%-010d \x00'}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1e00000003000000090000009f57000080140000802e12163f21dbe1015543b1e76844be658073e9159b33b5591a9fde50cde8cc90695cd1cd0fc42db321fb6986225f5ac93eec060f03dd7d0e3150e29d4c1bbf0a44282befd4ffe2cf134caa7c9e3bc9723e65d2369b1e2dd41a356be30eb4a6f6a6bef83f727ac2db7b8b163a5265c9c1a494a7398ef0efc10503746991c770040bee494d383f784f26bfbc8d516aa4d852ecce2def0e2c", @ANYRES32, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000004000000050000000a00"/28], 0x50) getsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000880), &(0x7f00000008c0)=0x4) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xf, 0x21, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x6, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x86}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xa}, @map_val={0x18, 0x1, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}, @call]}, &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x32, r4, 0x8, &(0x7f00000004c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xc, 0x6972bfb5, 0x7ff}, 0x10, r7, 0xffffffffffffffff, 0x4, &(0x7f0000000700)=[0x1, r8, r9, r10, r11, r12, 0x1], &(0x7f0000000740)=[{0x4, 0x2, 0x3, 0x3}, {0x4, 0x1, 0xa, 0x4}, {0x2, 0x4, 0x0, 0x1}, {0x4, 0x5, 0xd, 0x5}], 0x10, 0x9, @void, @value}, 0x94) 6.38612168s ago: executing program 0 (id=1349): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b703000000090001db020a000000000007000000000000009500000000000a6682f0a61b01e4c027d252f602901b7cbbd5b9097bb8334a5541cf9e345af317e35f0ad53d857708f974879196ac07622b10548ccd2028eaf7610ae297a58e413b22d81494fcb1dbd1e9cb784c590ddd06ee929a27a5dedf301650960d8ae1cf339f6bda65bf6594c2839dcea6e419c9b8b7d17b9e49f392c857ccb0a3f64a59a87332ffa41c17b82700789b163bbc8507f171b46d2c569e75810e60a06b6f69ef41ca39a200"/212], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)=r0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@int={0x5, 0x0, 0x0, 0x1, 0x0, 0x5b, 0x0, 0x62, 0x2}]}, {0x0, [0x2e, 0x30, 0x5f, 0x5f]}}, &(0x7f0000000380)=""/197, 0x2e, 0xc5, 0x0, 0x5, 0x28a0777b423334e1, @value}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d00000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000900)={'ip_vti0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r5, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001280)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r7, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x2, 0x12, r8, 0x3000) mmap(&(0x7f00004ef000/0x4000)=nil, 0x4000, 0x2000006, 0x12, r8, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r8, 0x0) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%-010d \x00'}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1e00000003000000090000009f57000080140000802e12163f21dbe1015543b1e76844be658073e9159b33b5591a9fde50cde8cc90695cd1cd0fc42db321fb6986225f5ac93eec060f03dd7d0e3150e29d4c1bbf0a44282befd4ffe2cf134caa7c9e3bc9723e65d2369b1e2dd41a356be30eb4a6f6a6bef83f727ac2db7b8b163a5265c9c1a494a7398ef0efc10503746991c770040bee494d383f784f26bfbc8d516aa4d852ecce2def0e2c", @ANYRES32, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000004000000050000000a00"/28], 0x50) getsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000880), &(0x7f00000008c0)=0x4) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xf, 0x21, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x6, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x86}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xa}, @map_val={0x18, 0x1, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}, @call]}, &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x32, r4, 0x8, &(0x7f00000004c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xc, 0x6972bfb5, 0x7ff}, 0x10, r7, 0xffffffffffffffff, 0x4, &(0x7f0000000700)=[0x1, r8, r9, r10, r11, r12, 0x1], &(0x7f0000000740)=[{0x4, 0x2, 0x3, 0x3}, {0x4, 0x1, 0xa, 0x4}, {0x2, 0x4, 0x0, 0x1}, {0x4, 0x5, 0xd, 0x5}], 0x10, 0x9, @void, @value}, 0x94) 3.391945656s ago: executing program 2 (id=1728): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000061e00000400000000000007000000000000000000002001050000000000080000000000010000050000000004000000020000000000000000000000da00"], 0x0, 0x52, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f00000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4d) 3.273444606s ago: executing program 4 (id=1730): socket$kcm(0x2, 0x200000000000003, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011"], 0x20}}, 0x0) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x2e) r0 = socket$alg(0x26, 0x5, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000003780)=@newtaction={0x14, 0x30, 0x200, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x0) (async) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xe37, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x400}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8c30}]}}]}, 0x44}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r0, 0x0, 0x0, 0x80000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002680)={0x2c, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x15, 0x2a, [@challenge={0x10, 0x1, 0xcc}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0xb1, 0x9}}, @mesh_chsw={0x76, 0x6, {0xf, 0x6, 0x10, 0x8}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 3.155402525s ago: executing program 2 (id=1733): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r5, {0x5, 0x9}, {0x8}, {0x1b, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x48c0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r8}, 0x18) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 3.090913858s ago: executing program 4 (id=1734): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'ip6_vti0\x00', {0x2, 0x4e20, @local}}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x20000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff4}}}, 0x24}}, 0x60048844) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x1, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = accept(r1, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x80) close(r5) 2.772036415s ago: executing program 4 (id=1738): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x180, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3}}, [@tmpl={0x84, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in=@remote, 0x0, 0x6c}, 0x2, @in6=@private1, 0x0, 0x4}]}]}, 0x13c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0xffffff}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x0) 2.726499448s ago: executing program 2 (id=1739): connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e25, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x4}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:* mr'], 0x9) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)={0x24, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x24}}, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000080)=0x1, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) 2.556663962s ago: executing program 3 (id=1741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r0, 0xe5c24000) syz_emit_ethernet(0x1d2, &(0x7f0000000000)={@random="cddeff2e72b6", @local, @void, {@mpls_mc={0x8848, {[], @ipv6=@gre_packet={0xc, 0x6, "bd0eb2", 0x19c, 0x2f, 0x0, @mcast2, @private2, {[@hopopts={0x0, 0x5, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x2c, 0x6, 0x1, 0x7f, 0x0, [@remote, @mcast1, @mcast1]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x5c, 0x3, [], "979b8f293a1b12ca41dd4ee80edf4e6adecc5f3930ef53846b789841611efedc9d9fe7cbc353d8250df80459e221d7daf077dd98d18765455a726b8aa5e7d2831c92ad08446feafeeec70910fce679b07be1d00c97134753d028ece8"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x40, 0x8], "7f999f88851817"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0xff, 0x9], "0c99604b87fd992b1c71240cf041eb48e1275235d0d4283900c054e56cd9110665ffd68b8df4a30ddeb22329100a23ac2f44e536a412db2ad779d1d680edd8ba7384efb41ff02c8177daf300e7f99a8a0f6b0ba5ec03b5dd96c6ac95fe707721b42c"}, {0x8, 0x88be, 0x2, {{0x3, 0x1, 0x6, 0x1, 0x0, 0x1, 0x3, 0x3}, 0x1, {0xf6}}}, {0x8, 0x22eb, 0x0, {{0xc, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1, 0x6}, 0x2, {0x2, 0x7, 0x0, 0x3, 0x1, 0x0, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "0695ccc6ef7901898b6abc83f15021e1497ca466ce915cfef374bc"}}}}}}}}, &(0x7f0000000200)={0x0, 0x3, [0x376, 0xe41, 0xc37, 0xa13]}) (async) syz_emit_ethernet(0x1d2, &(0x7f0000000000)={@random="cddeff2e72b6", @local, @void, {@mpls_mc={0x8848, {[], @ipv6=@gre_packet={0xc, 0x6, "bd0eb2", 0x19c, 0x2f, 0x0, @mcast2, @private2, {[@hopopts={0x0, 0x5, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x2c, 0x6, 0x1, 0x7f, 0x0, [@remote, @mcast1, @mcast1]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x5c, 0x3, [], "979b8f293a1b12ca41dd4ee80edf4e6adecc5f3930ef53846b789841611efedc9d9fe7cbc353d8250df80459e221d7daf077dd98d18765455a726b8aa5e7d2831c92ad08446feafeeec70910fce679b07be1d00c97134753d028ece8"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x40, 0x8], "7f999f88851817"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0xff, 0x9], "0c99604b87fd992b1c71240cf041eb48e1275235d0d4283900c054e56cd9110665ffd68b8df4a30ddeb22329100a23ac2f44e536a412db2ad779d1d680edd8ba7384efb41ff02c8177daf300e7f99a8a0f6b0ba5ec03b5dd96c6ac95fe707721b42c"}, {0x8, 0x88be, 0x2, {{0x3, 0x1, 0x6, 0x1, 0x0, 0x1, 0x3, 0x3}, 0x1, {0xf6}}}, {0x8, 0x22eb, 0x0, {{0xc, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1, 0x6}, 0x2, {0x2, 0x7, 0x0, 0x3, 0x1, 0x0, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "0695ccc6ef7901898b6abc83f15021e1497ca466ce915cfef374bc"}}}}}}}}, &(0x7f0000000200)={0x0, 0x3, [0x376, 0xe41, 0xc37, 0xa13]}) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r1, &(0x7f00000002c0)="2d7ca251ebdbf5dcc1dee7270c4121e102dfbede6aa051721f9b88d11719ed93baf6c088ae48701a4e35955a9097e98279e1b1553d6eae9a90d6b9f9a1a60e5503c44d4ed96cc44164e64d726ad785d6fc8ef557cce6aeb3273fc96143788a5947ecbf1481053ca628ba4f0e06dd1ada7ead1fdc95a1bdeffeed4afd4ac62bde3237e7", &(0x7f0000000380)=""/199}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r1, &(0x7f00000002c0)="2d7ca251ebdbf5dcc1dee7270c4121e102dfbede6aa051721f9b88d11719ed93baf6c088ae48701a4e35955a9097e98279e1b1553d6eae9a90d6b9f9a1a60e5503c44d4ed96cc44164e64d726ad785d6fc8ef557cce6aeb3273fc96143788a5947ecbf1481053ca628ba4f0e06dd1ada7ead1fdc95a1bdeffeed4afd4ac62bde3237e7", &(0x7f0000000380)=""/199}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfc2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000008}, 0x40) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000007c0)={&(0x7f0000000640), 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xe4, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc3d}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7ff, @local, 0xc86}}}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x10000000}, 0x8080) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@loopback, @in6}}, {{@in6=@private2}, 0x0, @in6}}, &(0x7f0000000900)=0xe8) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6}}, &(0x7f0000000900)=0xe8) syz_genetlink_get_family_id$tipc(&(0x7f0000000940), r2) syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), r2) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), r2) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x5c, r5, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xcd}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2df48140}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2d13}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x18000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000b00)) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r5, 0x100, 0x70bd26, 0xcf2, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x44) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r2) (async) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r2) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, r6, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24001040}, 0x8004) (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, r6, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24001040}, 0x8004) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000dc0), r2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000e80)={'ip6tnl0\x00', &(0x7f0000000e00)={'ip6tnl0\x00', r4, 0x4, 0x8, 0xc, 0x2, 0x4, @remote, @mcast1, 0x10, 0x80, 0x6, 0x5}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000fc0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x9c, r7, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x80c0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x16, &(0x7f0000001000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @cb_func={0x18, 0xa}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000010c0)='GPL\x00', 0xffffb70e, 0x8d, &(0x7f0000001100)=""/141, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x0, 0x8, 0x1, 0xafb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[r1, r1, r1, r1, r1, r1, r1], 0x0, 0x10, 0x8001, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000002400)={r9, 0x0, 0x1000, 0x0, &(0x7f0000001340)="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", 0x0, 0x6, 0x0, 0x98, 0x0, &(0x7f0000002340)="6392f6f8cb27f8f31f3c2692fc08fa63e987d392da82cb47e69028adfba372d697dab7617df37fbb8f19a2c961bdfaf72504d8c7aa73a2bb03d0e95265ecfcd20e16611387003b8fac2aafd875f697954c8747ceb6ad3e9a99de5de301fd4b081837400a5f6f307d9edf98d72769318759733715122680e89d09b2959ed459d58156234c23ee49dc9d8a731c984b61da2a90fecd0d8371de", 0x0, 0x2, 0x0, 0x10000}, 0x50) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000025c0)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002580)={&(0x7f00000024c0)={0xb4, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7d9ee748}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000025c0)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002580)={&(0x7f00000024c0)={0xb4, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7d9ee748}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_init_net_socket$ax25(0x3, 0x2, 0xcd) (async) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000002600)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f00000026c0)={{r10}, r11, 0x4, @inherit={0x60, &(0x7f0000002640)={0x1, 0x3, 0x101, 0x7, {0x8, 0x8000000000000000, 0x2, 0x3, 0x8}, [0x2, 0x10, 0x5]}}, @name="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"}) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000003800)={'syztnl2\x00', &(0x7f0000003700)={'ip_vti0\x00', 0x0, 0x40, 0x40, 0x6, 0xdc, {{0x31, 0x4, 0x1, 0x4, 0xc4, 0x66, 0x0, 0x7, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x21, 0x0, [{0x0, 0x11, "18fc0a2744e7a00cc0ab6820cf149e"}, {0x7, 0x7, "03c4fec0e9"}, {0x0, 0x3, "93"}]}, @generic={0x94, 0x10, "3aefc3275db1684f2fa8bea8ebe8"}, @rr={0x7, 0x7, 0xbe, [@broadcast]}, @timestamp={0x44, 0x8, 0xa5, 0x0, 0x2, [0x4]}, @cipso={0x86, 0x24, 0x3, [{0x6, 0x10, "fe51dacde103dd2c201e375e1aa4"}, {0x1, 0x6, "ba5aeca4"}, {0x5, 0x8, "c9e03a830528"}]}, @end, @cipso={0x86, 0x4b, 0x2, [{0x6, 0x6, "eb33eb41"}, {0x0, 0x12, "bc661c358cad6ba524cc917fe3bf2567"}, {0x7, 0xc, "994c0d03bb6290ed5330"}, {0x1, 0x8, "42fadaba0f9f"}, {0x0, 0x3, "c4"}, {0x1, 0xa, "2c9dda415daefee4"}, {0x6, 0xc, "13be739652ed3ccad669"}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000003800)={'syztnl2\x00', &(0x7f0000003700)={'ip_vti0\x00', 0x0, 0x40, 0x40, 0x6, 0xdc, {{0x31, 0x4, 0x1, 0x4, 0xc4, 0x66, 0x0, 0x7, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x21, 0x0, [{0x0, 0x11, "18fc0a2744e7a00cc0ab6820cf149e"}, {0x7, 0x7, "03c4fec0e9"}, {0x0, 0x3, "93"}]}, @generic={0x94, 0x10, "3aefc3275db1684f2fa8bea8ebe8"}, @rr={0x7, 0x7, 0xbe, [@broadcast]}, @timestamp={0x44, 0x8, 0xa5, 0x0, 0x2, [0x4]}, @cipso={0x86, 0x24, 0x3, [{0x6, 0x10, "fe51dacde103dd2c201e375e1aa4"}, {0x1, 0x6, "ba5aeca4"}, {0x5, 0x8, "c9e03a830528"}]}, @end, @cipso={0x86, 0x4b, 0x2, [{0x6, 0x6, "eb33eb41"}, {0x0, 0x12, "bc661c358cad6ba524cc917fe3bf2567"}, {0x7, 0xc, "994c0d03bb6290ed5330"}, {0x1, 0x8, "42fadaba0f9f"}, {0x0, 0x3, "c4"}, {0x1, 0xa, "2c9dda415daefee4"}, {0x6, 0xc, "13be739652ed3ccad669"}]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r12, &(0x7f00000039c0)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003980)={&(0x7f0000003840)={0x104, r7, 0x97b3d4ac4f9b1f70, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000004280)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004240)={&(0x7f0000003a80)={0x7bc, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x270, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x58, 0x4, "872283ffe14ef600b5dabf60a72993fc5c96a3e3d89b4412cf22d9ba084930c841b5270fa09de753eb7bad722e5906d4e41ddf348936fb13497d474a250874be1b328fce8570ba71a3b9e729831fca74571efb28"}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}]}, {0x4}]}, @ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x36ec}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xff$%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!-]\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xeb, 0x5, "dc8707d2a44c290f0786e87dcf96460d21b2c388061acbc36647eaaf22b98457bfcbf347005f9268e5f4b353f97a825a8129289fdb7cb8c021beea6d96dcf9f7e474d74126606e61c6534dba1ee6bcd52225cec12d33d6f86ef9af308fb592f1b686084fca00e45fc9daa8ee942b8f4e64a4ced97babeb719380a6ec6e0769686a43051b0e24d0702aa3d67be5618103b9972dda9f26453097318b1dd7d53b1f500b57e73888ecf311b14a67a2e78de04da92aaa169686470986159b6c11699bb8c0cc213dcd3090e5b544860587adf88afd690de4084ae795e0f164e0607f20766fddc79f20bb"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x104, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff81}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth1\x00'}]}, {0x4}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, ',\xeb$+$\x14+,-&?{,\'{-:)+(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ')-*\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*:\x9c)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'gtp\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x23}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '[(*@[,%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x380000}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_DEBUG_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1e0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x98}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2c}]}]}, @ETHTOOL_A_BITSET_VALUE={0x4e, 0x4, "58662f812fcd5fc24abe9a24427e81fe3276fa04f492e2f95f3a80bd348ced8a960a2898103f0644b115b7bccfcba790d5a9845a882341099004c209a3721c7e403c6339106dc8f1b99c"}, @ETHTOOL_A_BITSET_MASK={0xe1, 0x5, "cee10abb404aa97dc22a2c07384601b875670b91a296d039808f4932d8d2a3583f929cfc29119d8eab5a5d10cc490fa057719f519a9a1c8925ff6657cd15820c0cc72670cbe3ffdc18e3d5ac9919712cdfe198bccb10f6a4e87cc92f8778d73e68d69da504f584c5a9d956b56b61368f6a7a43f45e173b90f8ee09fdaff1858c5cac6e4be975db34a68f7589ad81c98288824e46fa5d4d0327fb113946c3e3ecef3b15e608a16eef94a99c64becd0dbe89274e5ea61cd5e7c87a8874b123d71128ce379b7a7921e526ae88bf083e5b4802f484d2d5738e866353b07259"}, @ETHTOOL_A_BITSET_MASK={0x67, 0x5, "6561a6a892191c1dcc838fea24d052f83e1a8f9f4043204ac94a67c6fb00c9e0332fc5d37e41f648d70a15acf958b35f2cbf710ac342bb936cfee5413f40cfd0a53c4239bd8148e09ff771bd1a94829648ce34bc3d63ca5e3694d334af779d87606fab"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2ffc}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4c, 0x4, "87ab2c48f1192643c9ff6086142d9bac9c96ebf02834895f84d77f87377028e82622794a260b84c69146a6ed2fd65bde7bb77b96032f125c2822e075fd25ac6277d3cb4c8943b7d2"}, @ETHTOOL_A_BITSET_BITS={0x8c, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-*:{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'broadcast-link\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!-{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!+\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xd8, 0x4, "02a9b05275ebdad797ce379d7fa865c01fd0e17825d5ec54e6ae96546c1ec256bc184a4021935483bcbc13037ff0d046056d4ff4d67e8c245d9bfc1282dae5473c72f8c77aeaea77a51ee21b6ba65386a4706187c343bd74faf55c053bc44ba9bec5d3a3b2ade4460ec7c9bf95fea9fca837ce8c578dbcabedbed04c1e4bed8ab00c24ffe16aea14889091c9452d70365b60a6a5f1846ed332387bd545a30758ef6adff9e0923488d1400301ffbfc5f381faf92c8edba82d6dabba447ad050d98efc761f749d01d8121d8e8f82d49522f2995de1"}]}]}, 0x7bc}, 0x1, 0x0, 0x0, 0x80}, 0x845) 2.436112744s ago: executing program 2 (id=1742): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x32, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080), 0x4) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x1}, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2000}, 0x4) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) write$cgroup_subtree(r0, &(0x7f0000000100)={[{0x2d, 'blkio'}, {0x15, 'rdma'}, {0x2d, 'net_prio'}, {0x2b, 'cpuset'}, {0x6, 'blkio'}]}, 0x26) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="80fd"], 0x9) 2.388500948s ago: executing program 3 (id=1744): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x1, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x40}]}]}]}}]}, 0x4c}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={'geneve0\x00', {0x2, 0x4e23, @rand_addr=0x64010100}}) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000300), &(0x7f0000000400)=0x4) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (rerun: 64) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000000c0)={r4, 0x8}, 0x8) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r4, 0x4}, &(0x7f00000000c0)=0x8) (rerun: 64) r6 = socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) (async) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r12, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r14}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) r15 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r15, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020200000a000000000000080000000003000600000000000200000000000000000000000000000002000e7757a16a63f8b36b5ae1a64b00b7a601000000000000000016000000000300050000000000"], 0x50}, 0x1, 0x7}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000540)={r5, @in={{0x2, 0x4e1e, @multicast2}}, [0x8, 0x5, 0x8c6, 0x8, 0x63, 0x0, 0x9, 0x1ff, 0x9, 0x100000000, 0x6, 0x6, 0xfffffffffffffff8, 0xe3f2, 0x3]}, &(0x7f0000000280)=0x100) (async, rerun: 64) r16 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) setsockopt(r16, 0x84, 0x7f, &(0x7f0000000440)="0b0000000980ffff", 0x8) (async, rerun: 64) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x1d, 0x17, 0x9}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x0) (rerun: 64) 2.26967729s ago: executing program 3 (id=1745): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @loopback}]}, &(0x7f00000001c0)=0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0xffffffff, 0x3, 0x0, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r1, 0x7, 0x880}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x3, [0x8, 0x3, 0x4]}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000001c0000000000000000000061128c00000000009500000000000000627e177a7424d8288c585d7372af7ca890f1e1047fa224702ee52b307f24ea3ba078792d1da3b4b933eb91107239727a1c00889a42423060b44e40f6bb5bda949aad6a45483287f8439a603d059df1463bd5a8397ccbefe716c6b63054c7b8201ceb8a8f20021cc1089beb6a50abc7ee56cb9fe1b370ff544822206b0a8c2952f68098ed3b3e7ce3056806f103b1e1a64646062616e254f23e34f0638fd996367ff27ddd6861bd6fe365cb865896c07ba6a92e31f7032ff3bad459ca7e9c2c55e505f6e62801ead8f52d65fe4c86749ea9b4d98d7f205fc2a292f7a6e497b18d6c31db240160c33640f128645d0771195ae33c54"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.168079337s ago: executing program 4 (id=1746): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) r1 = socket(0x28, 0x1, 0x0) getsockopt$nfc_llcp(r1, 0x28, 0x6, 0xfffffffffffffffe, 0x20000000) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000040)=0x1, &(0x7f0000000100)=0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0xe, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.143697431s ago: executing program 4 (id=1747): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r1, @ANYBLOB="0a000100"], 0x48}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r1, @ANYBLOB="0a000100"], 0x48}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000980)={0x3f0, r2, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc1b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x293}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4abe9057}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x253}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "30668b0f06d988cf1e10792f30594cd94f81bc0db0a79af9"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffc01}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x37fd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3838}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf3c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7637}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffeb}]}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x10}, 0x96a1824351fb4aeb) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @func_proto]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000004980)=ANY=[@ANYBLOB="400100001000030000000000ffdbdf25ac1414aa000000000000000000000000fe8000000000000000000000000000aa000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000006c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0001060000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c00"], 0x140}, 0x1, 0x0, 0x0, 0x42}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x48}}, 0x0) 1.108937175s ago: executing program 3 (id=1748): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="180000001a00fd5800006c610e2a00000a"], 0x18}, 0x1, 0x0, 0x0, 0x480d0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611230000000000061136b0000000000bf2000000000000015000600071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) write$tun(r1, &(0x7f0000000140)={@val, @void, @eth={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x1fe1, @remote}, {0xa000, 0x6558, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x9}}}}}}}}, 0x36) r3 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@rfm={0x25, 0x8, "13f75f115748df04ad7fc83f5fe79494"}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000200)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, @broadcast}, 0x68, {0x2, 0x4e22, @empty}, 'wg1\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000090a010400000000000000000000000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640000000000800034000000009140000001000010000000000000000000084000a"], 0x74}}, 0x0) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000180)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000f400000071123f00000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) 1.04354091s ago: executing program 1 (id=1749): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001a000000070021006161000005009200000000003400228004000080"], 0x58}}, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000000)=0xf3, 0x4) (async) getsockopt$inet_tcp_buf(r2, 0x6, 0xb, 0x0, &(0x7f0000000340)) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x33}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000000) syz_emit_ethernet(0x6e, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @private=0xa010100, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@multicast1}]}, @rr={0x7, 0xf, 0xb5, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1]}, @ssrr={0x89, 0x3}]}}}}}}}, 0x0) 1.042717489s ago: executing program 2 (id=1750): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) close(r3) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000280)={0x3, {{0xa, 0x4e23, 0xec, @mcast2}}}, 0x88) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x0}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="0100000000000000", @ANYRES32, @ANYBLOB="f2cc4a289d0e51dd6c756a5b88f18c2104bb1b51e642e087f15bdca57244e3b13a0e738f4035b6c3216d44eb3e3187ff9e49bb48fda8359f9f43866d68827077c08a53c1f9e5d19c0c14f0e5aefbb382aa", @ANYRES32=r3, @ANYRESHEX=r4, @ANYRES64=0x0], 0x20) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2d64657679636573a02d72646d61202d72646d6120"], 0x15) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, 0x107}) 993.580846ms ago: executing program 2 (id=1751): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a18101410000", 0x17}, {&(0x7f0000000040)="f71333cb7afaaf51fcaa383887f5b72b62ac4ea66298c0", 0x17}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x5}, {0x8}]}}]}]}, 0x44}}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0x9, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) 855.59726ms ago: executing program 1 (id=1752): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x1e, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003d000900000000000000400001000000040800000c000180080010800400050008000200", @ANYRES32, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r8, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) syz_emit_ethernet(0x12, &(0x7f0000000200)={@broadcast, @local, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@generic={0x6000}}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x14, 0x0, 0x400, 0x8, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8803}, 0x80000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000017001c000380180003801400010076657468315f766972745f776966690014000000110001"], 0x70}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r10 = socket(0x2, 0x80805, 0x0) connect$vsock_stream(r10, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) setsockopt$inet6_tcp_int(r10, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRESOCT=r1], 0x44}, 0x1, 0x0, 0x0, 0x2000c880}, 0x40) 759.885455ms ago: executing program 4 (id=1753): bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000e500000000000000808500000053000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x17, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x69}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4000}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x800001}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) connect$ax25(r1, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0xfffe}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_BOND_AD_USER_PORT_KEY={0x6}]}}}]}, 0x4c}}, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80030000}, {0x85, 0x0, 0x0, 0xe}, {0x4, 0x0}}}, &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 363.054736ms ago: executing program 1 (id=1754): syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[], 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[], 0x0) (async) 312.355347ms ago: executing program 3 (id=1755): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@dellinkprop={0x38, 0x6d, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8684}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'vlan0\x00'}, @IFLA_PROP_LIST={0x4}]}, 0x38}}, 0x0) socket(0x3, 0x80005, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@dellinkprop={0x38, 0x6d, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8684}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'vlan0\x00'}, @IFLA_PROP_LIST={0x4}]}, 0x38}}, 0x0) (async) socket(0x3, 0x80005, 0x1) (async) 256.087861ms ago: executing program 1 (id=1756): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x15, r1}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mem_connect\x00', r0, 0x0, 0x8}, 0x18) 205.33038ms ago: executing program 3 (id=1757): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xd3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32=r1], 0x64}, 0x1, 0x0, 0x0, 0x4080}, 0x20000040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1c5c}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000001b00)={&(0x7f0000000280), 0xc, &(0x7f0000001ac0)={&(0x7f00000002c0)={0x30, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x19}, 0x24000085) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x175c, 0x0, 0x5, 0x101, 0x0, 0x0, {0x2}, [{{0x254, 0x1, {{0x0, 0x6}, 0xc, 0x4, 0x2, 0x1, 0x13, 'syz0\x00', "4f8c9dad6ca7c2f46543077f25f75b96f0698545f87e802433a3006123b30017", "63e064daefd6dcf6dc78edf71af17af36918959d72362d8e286db38621485aaf", [{0x1, 0x7, {0x3, 0x135}}, {0x8000, 0x6, {0x0, 0x400}}, {0x8, 0x6, {0x1, 0x5}}, {0xfffc, 0x9, {0x1, 0xa0}}, {0xfef4, 0x1, {0x1, 0x8}}, {0x5cf, 0x764, {0x2, 0xffff570c}}, {0xfffd, 0x7, {0x0, 0x80000001}}, {0x8, 0x0, {0x2}}, {0x7, 0x5, {0x2, 0xb}}, {0xebc9, 0x7f, {0x0, 0x41da}}, {0xf, 0xd, {0x1, 0x6}}, {0xc00, 0x0, {0x8959fb183cc0dab9, 0x9}}, {0x69, 0xff81}, {0x78c, 0x101, {0x0, 0x2}}, {0xfff9, 0x0, {0x2, 0x2f}}, {0xf34d, 0x9, {0x1, 0x80000001}}, {0x5, 0x7, {0x1, 0x3ff}}, {0x6, 0xe9c, {0x3}}, {0x1, 0x4, {0x0, 0x10001}}, {0x5, 0x4, {0x2, 0x7}}, {0x7, 0x1, {0x3, 0x2}}, {0x1, 0xe, {0x0, 0x5}}, {0x1, 0x0, {0x2, 0x2}}, {0x1ff, 0x6, {0x2, 0x7beb16d0}}, {0x58d1, 0x62a, {0x3, 0xfff}}, {0x400, 0x7, {0x0, 0x7}}, {0x4, 0x400, {0x0, 0x10001}}, {0xfff4, 0x8b, {0x2, 0x1}}, {0xcde6, 0xc3d, {0x0, 0x9}}, {0x76cc, 0x80, {0x1}}, {0x88ca, 0x8, {0x3, 0x4}}, {0x0, 0x9, {0x0, 0xff}}, {0x9, 0x8, {0x1, 0x100}}, {0x8, 0xfff7, {0x2, 0xfffffff9}}, {0x101, 0x6, {0x2, 0x10000}}, {0xfc01, 0x9, {0x3, 0x2}}, {0x8, 0x2, {0x0, 0xa}}, {0x81, 0x2a0, {0x0, 0x758}}, {0x62c6, 0x100, {0x1, 0x401}}, {0x7, 0x4, {0x0, 0x70}}]}}}, {{0x254, 0x1, {{0x1, 0x683}, 0x4, 0x3, 0x7, 0x3, 0x13, 'syz1\x00', "fe88b59e001eb81a4c5b0d6778e153829edbe48b6d78c17d2b24830826285cfb", "a60319820aac71c9a809b5cb5d99e893b355612876da41ef5292ef967effa07f", [{0xffff, 0x8, {0x3, 0x4}}, {0x5, 0x4cfa, {0x0, 0xc2}}, {0x21, 0xf, {0x2, 0x1}}, {0xe, 0x0, {0x0, 0x400}}, {0x4, 0x3, {0x0, 0x1ddafce1}}, {0x200, 0x400, {0x0, 0x3ff}}, {0x80, 0x0, {0x1, 0xc}}, {0xff, 0x447, {0x2, 0x2e}}, {0xffff, 0xf58, {0x2, 0x5}}, {0xfa8d, 0x1, {0x1, 0x7}}, {0x6, 0x0, {0x0, 0x1}}, {0x6, 0x7, {0x2, 0x1}}, {0xa, 0x1, {0x1, 0x9}}, {0x4, 0x9, {0x2, 0x4}}, {0x2, 0x8b8, {0x0, 0xb6b6}}, {0x82ea, 0xb, {0x1, 0x8001}}, {0x1cd4, 0x4, {0x0, 0xb8d}}, {0x101, 0x0, {0x1, 0x2}}, {0x2, 0x3, {0x3, 0xffffffff}}, {0x6, 0xd2de, {0x1, 0xf}}, {0xfff9, 0x1, {0x0, 0x1}}, {0x725, 0x400, {0x0, 0x10000}}, {0x1, 0x2, {0x1, 0x6}}, {0x2, 0x8000, {0x2, 0x4}}, {0xfffb, 0x40, {0x0, 0x5}}, {0x8001, 0x1}, {0xfff0, 0x4, {0x2}}, {0xfffe, 0xffff, {0x0, 0x7}}, {0x2, 0x0, {0x3, 0x6}}, {0x4c99, 0xfffc, {0x2, 0x7}}, {0x3, 0x4, {0x2, 0x5}}, {0xa, 0x946, {0x2, 0x3}}, {0x8, 0x4, {0x2, 0x100}}, {0x7f, 0x1, {0x1, 0x1}}, {0x4, 0x7, {0x0, 0xffffff7f}}, {0xa, 0x1, {0x1, 0x6}}, {0xffff, 0x8, {0x0, 0x400}}, {0xaa77, 0x9, {0x2, 0x3}}, {0x8, 0x7, {0x1, 0xff}}, {0x3, 0x7, {0x3, 0xfffffffc}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0x6, 0x3, 0x6, 0x4, 0x1f, 'syz0\x00', "999f8cbffd04e6f21699ae66316e28aba80b95b1bb5486afb726185365891892", "0494fa2c6c179427cbed26b719121545955eb2279c7b6cf9078db43d37a3b261", [{0xbfa, 0x7, {0x1, 0x6}}, {0x4, 0x4, {0x0, 0xec93}}, {0x7, 0x8, {0x1, 0xb}}, {0x7f, 0x3, {0x0, 0x2}}, {0x776f, 0x149, {0x0, 0x3}}, {0x1, 0x5, {0x2, 0x10}}, {0x1, 0xe, {0x0, 0x4}}, {0x410, 0x7fe0, {0x3, 0x4}}, {0x2, 0x5, {0x2, 0x9}}, {0x6, 0xfff, {0x1, 0x2}}, {0x4, 0xb, {0x3, 0x101}}, {0xfffd, 0x8, {0x2, 0x7}}, {0x4, 0x2bb7, {0x3, 0x5}}, {0xb39, 0x0, {0x0, 0x80}}, {0x7f, 0xc, {0x2}}, {0x9, 0x1000, {0x0, 0x2}}, {0x7, 0xff32, {0x2, 0x7}}, {0x9, 0x4f, {0x1, 0x5}}, {0x5, 0x8001, {0x3, 0x1bee}}, {0x401, 0x8, {0x0, 0x1}}, {0x2, 0x1, {0x2, 0xfffffffe}}, {0xfff7, 0x100, {0x2, 0x4}}, {0x6, 0x0, {0x1, 0x200}}, {0x7, 0x800, {0x0, 0x278e}}, {0x0, 0x5, {0x1, 0x100}}, {0x2, 0x5, {0x1, 0x4}}, {0x0, 0x200, {0x3, 0x8000}}, {0x4, 0xc4, {0x0, 0x1}}, {0xfff, 0x7, {0x2, 0x2}}, {0x7f, 0x7475, {0x2, 0x7}}, {0x81, 0x9, {0x0, 0x1}}, {0x4, 0x2, {0x1, 0x4}}, {0x6, 0x5, {0x1, 0x5}}, {0x1f, 0x5ed, {0x1, 0x9}}, {0x4, 0x26, {0x2, 0x6}}, {0x1ff, 0x8, {0x0, 0xffff0ca5}}, {0x5, 0xd2, {0x0, 0x7}}, {0x6, 0x9, {0x2, 0x8}}, {0xffff, 0x90, {0x0, 0x2}}, {0x7fff, 0x6, {0x0, 0x1d2}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0x3, 0x49, 0x2800, 0x7, 0xb, 'syz1\x00', "73f807bc20208f1689478539a3f84192514a13380c948a2cd4969adfb93043d7", "43e76c06f32e7c4839dde3cd8a87bafe057d27742dd5527d6cd368e01155af7c", [{0x7, 0x7, {0x3, 0x9}}, {0x8, 0xb42, {0x1, 0x17}}, {0x3, 0x7f, {0x1, 0x8}}, {0xffff, 0xd, {0x1, 0x280}}, {0x9, 0x690, {0x1, 0x8000}}, {0x52e2, 0xffff, {0x3, 0x7}}, {0x1, 0x1, {0x2, 0xe82}}, {0x62a7, 0x4}, {0x4, 0x7, {0x2, 0x5}}, {0x6, 0x6, {0x2, 0xa565}}, {0x7, 0xa, {0x2, 0x5}}, {0xf3e, 0x3, {0x0, 0x80}}, {0xd, 0xa, {0x1, 0x9}}, {0x9, 0x4, {0x1, 0x4}}, {0x2, 0x9, {0x0, 0x9}}, {0x9, 0x1, {0x0, 0x5}}, {0x8, 0x358, {0x2, 0xcc}}, {0x6, 0x676, {0x0, 0xffffffff}}, {0x1, 0x1, {0x0, 0x1}}, {0x1, 0x1, {0x3, 0x8d35bb9}}, {0x6, 0x1, {0x1, 0x5}}, {0xd, 0x3, {0x3, 0xa}}, {0x91, 0x101, {0x2, 0x5d}}, {0xf50c, 0x6, {0x2, 0x9}}, {0x0, 0xfff, {0x2, 0x7f}}, {0x1ff, 0x0, {0x1, 0x7}}, {0x5, 0x4, {0x2, 0x2}}, {0x9, 0x7, {0x0, 0x9}}, {0x4, 0x1, {0x3, 0x2}}, {0x1000, 0x333, {0x2, 0x3f9}}, {0x215a, 0x3, {0x3, 0x1}}, {0x4, 0x8000, {0x1, 0x2}}, {0xff, 0x2, {0x3, 0x5}}, {0x8001, 0x0, {0x0, 0x80000000}}, {0x1000, 0x7f, {0x2, 0xe}}, {0x1, 0xe6a6, {0x0, 0x2}}, {0x2, 0x4, {0x2, 0x6}}, {0x4, 0x6, {0x1, 0xd0}}, {0x7, 0x9, {0xa8238d8569998320, 0x3}}, {0x6, 0x1000, {0x0, 0x9}}]}}}, {{0x254, 0x1, {{0x2}, 0x3, 0x1, 0xf, 0x0, 0x28, 'syz0\x00', "80ffc898679e1263237382011d4adb311231c4f83d2ccdced0fb7fcca253c5d8", "ab5fe4ecb647b52e582d55ddb17f37468e7a7c32789acd5a52113e6370f979c8", [{0x3, 0x5, {0x1, 0x3}}, {0x1, 0x4dec, {0x2, 0x1}}, {0xb81, 0x7, {0x3, 0x8000}}, {0x2b, 0x9}, {0x3, 0x5, {0x1, 0x7fffffff}}, {0x2, 0x40, {0x3}}, {0xb, 0x7, {0x2, 0x3}}, {0xef, 0x7f, {0x1, 0x6}}, {0x4, 0x3ff, {0x0, 0x9}}, {0x3, 0xbc, {0x0, 0xe7db}}, {0x7, 0x2, {0x2, 0x1}}, {0x9, 0x101, {0x0, 0x7fffffff}}, {0x9, 0x1, {0x1, 0xb}}, {0xbea, 0x7, {0x3, 0x2}}, {0xfff9, 0xf8, {0x3, 0x6}}, {0x1000, 0x3, {0x0, 0x7}}, {0xffff, 0xfdd, {0x1, 0x6}}, {0x68, 0xa, {0x3, 0x4}}, {0x1, 0x68, {0x2, 0x6}}, {0x53d3, 0x6, {0x3, 0x9}}, {0x3, 0x6, {0x0, 0x101}}, {0x5, 0x9, {0x3, 0xb}}, {0x3, 0x1, {0x3, 0x6}}, {0x8, 0x7, {0x0, 0x6}}, {0x401, 0x1, {0x0, 0x4}}, {0x5, 0x7, {0x1, 0x8}}, {0xc, 0x3, {0x0, 0xc5}}, {0x4, 0xf, {0x3}}, {0x3, 0x5, {0x3, 0x100}}, {0x0, 0x1, {0x0, 0x5}}, {0xffff, 0x4, {0x3, 0x70}}, {0x3, 0x987, {0x1, 0x4}}, {0xa, 0x8, {0x0, 0xd3}}, {0x86, 0x7, {0x1, 0x3000000}}, {0x5, 0xc905, {0x2, 0x7fffffff}}, {0x40, 0x6, {0x0, 0x2}}, {0x8001, 0x0, {0x0, 0x2}}, {0xfff, 0xff, {0x0, 0x7ff}}, {0x9, 0x9a, {0x2, 0xff}}, {0xe, 0x3, {0x3, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x8, 0x4, 0xd6, 0x7fff, 0x22, 'syz0\x00', "97b39914ae2d53e912b4b966aa7245db6367f6586c010c5683bf138c3343d7f1", "9050ded677c46c9128740dca7f5776c87dae9e7cb8c2211b7a4d1de9bc78b7be", [{0xc5ad, 0x1, {0x0, 0xe4}}, {0x4, 0x0, {0x1, 0xfffffffc}}, {0x9, 0x80, {0x0, 0xffffffff}}, {0x9, 0x0, {0x0, 0xfffffffa}}, {0xea, 0x2, {0x0, 0x94e4}}, {0xcabe, 0x9d3a, {0x0, 0xfff}}, {0xfef3, 0xff00, {0x0, 0x9}}, {0x7, 0xff5c, {0x1, 0xb5}}, {0x9, 0xffff, {0x3, 0x6}}, {0xf, 0x4, {0x1, 0x9}}, {0x4f98, 0x7, {0x1, 0x284b}}, {0x101, 0xb, {0x3, 0x6}}, {0x7b, 0x101, {0x3, 0x1}}, {0x41d, 0x7, {0x3, 0x4}}, {0x3, 0x3ff, {0x1, 0x64a}}, {0x5, 0x1, {0x0, 0x8}}, {0x8, 0x100, {0x1, 0xffff}}, {0x4, 0xfff, {0x0, 0x3d7c}}, {0x1, 0x0, {0x1, 0x92}}, {0x3, 0x6, {0x3, 0x7}}, {0x1, 0x7, {0x3, 0xee8}}, {0x8, 0x5, {0x2, 0x8}}, {0x25, 0x1, {0x1, 0x200}}, {0x8, 0x2, {0x2, 0x5}}, {0x6, 0xc000, {0x2, 0x1}}, {0xffff, 0x0, {0x1, 0x10000}}, {0x4, 0x6, {0x3}}, {0x3, 0xfff8, {0x0, 0x1}}, {0x1, 0xffff, {0x0, 0x102}}, {0x9, 0x2, {0x1, 0xffffff48}}, {0x35, 0x4, {0x1, 0x5}}, {0x8000, 0x8, {0x1}}, {0x1, 0x1000, {0x3, 0x5}}, {0x2, 0xfff, {0x0, 0xffc00000}}, {0x4, 0x40, {0x2, 0x4}}, {0x8, 0x1, {0x3, 0x10001}}, {0xffff, 0x9, {0x3, 0xfcea}}, {0x5, 0xe250, {0x1, 0x8}}, {0x0, 0x3, {0x0, 0xc9}}, {0xd0d2, 0x7f}]}}}, {{0x254, 0x1, {{0x0, 0x6}, 0x40, 0x6, 0x3, 0xd2f6, 0x28, 'syz1\x00', "9d28c1ac4dace2143c159e8ac2d9e71d8380c7b1cb769815b2c37442c7fd45ec", "7f0722fb074f5e6ab37c9d3b7b8f9732df9c2d20255b9eef833e4149ea68bad5", [{0x3, 0x2, {0x2, 0x3}}, {0x7f, 0xfffc, {0x2, 0xf5}}, {0x720a, 0x2, {0x0, 0x8}}, {0x7, 0x80, {0x1, 0x31}}, {0x5, 0x400, {0x3, 0x5}}, {0x1, 0xd515, {0x3}}, {0x2, 0xfff3, {0x0, 0x1}}, {0x6, 0xffff, {0x3}}, {0x10, 0xd78, {0x3, 0x6}}, {0x3, 0xfffa, {0xc5b956cb81eb998a, 0x2}}, {0x4, 0x6, {0x1, 0x800}}, {0x4, 0x4, {0x1, 0x6}}, {0x0, 0x1ff, {0xb47997d6413d2b51, 0x6}}, {0x7, 0x7fff, {0x2, 0x4}}, {0xfff, 0xa74d, {0x1, 0x6}}, {0x5, 0x2, {0x2, 0x77d}}, {0x1, 0x0, {0x0, 0x4}}, {0x771, 0x3, {0x3, 0x3}}, {0x5, 0xfe7d, {0x3, 0xf6e}}, {0xa, 0x7, {0x2, 0x6}}, {0xfff8, 0xfff7, {0x0, 0x5}}, {0x9, 0x9, {0x3, 0x6}}, {0x7, 0x9, {0x2, 0x6}}, {0x2, 0x5, {0x2, 0x80000000}}, {0x3, 0x8, {0x3, 0x6}}, {0x4, 0x8b2, {0x1, 0x8001}}, {0x4, 0x4, {0x0, 0x4ba434ac}}, {0x8, 0x3a23, {0x1, 0xec}}, {0x6, 0x7, {0x2, 0x401}}, {0xe, 0x9, {0x3}}, {0xffff, 0x6, {0x2, 0x7fffffff}}, {0x1, 0x0, {0x1, 0x2}}, {0xe, 0x7, {0x2, 0x6}}, {0x6, 0xa923, {0x1, 0x8}}, {0x1ff, 0x4, {0x3}}, {0x4, 0x9, {0x1, 0xcd82}}, {0x0, 0xf, {0x1, 0xb10}}, {0x5, 0x5, {0x2, 0x3000000}}, {0xfff, 0x4, {0x2, 0x5}}, {0x5, 0x101, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x8}, 0xf9, 0xc4, 0x9, 0x4, 0x0, 'syz1\x00', "28e974f50d5a15f64184d24c2a67665720121488f16af1861f5d380ab7f6df17", "2b0d8fdabecd65dbf12c5f45464687c2bd62de546d4e90ef4d95788a3de42fbf", [{0x1, 0x40, {0x1, 0xe}}, {0x1, 0x6}, {0x9, 0xfffc, {0x2, 0x3}}, {0x8, 0x5f, {0x2, 0x6}}, {0x1, 0xd6, {0x2, 0x1}}, {0x3, 0x0, {0x2, 0x1}}, {0xa, 0x5, {0x1, 0x96}}, {0x6, 0x4, {0x3, 0x24617b41}}, {0x8929, 0x5, {0x0, 0x7fff}}, {0x1, 0x8, {0x3, 0x935000}}, {0x0, 0x2, {0x3, 0x4}}, {0xa, 0x4c, {0x1, 0x6c0}}, {0x8, 0x74a1, {0x0, 0x9}}, {0x1, 0x5, {0x1, 0x1}}, {0x9, 0x5, {0x1, 0x5}}, {0x5, 0x4, {0x3, 0x3}}, {0x6, 0x2, {0x1}}, {0xfbea, 0x8, {0x2, 0xa}}, {0x100, 0xa, {0x1, 0x7}}, {0xbc, 0x9, {0x1, 0xf2}}, {0x4, 0x8, {0x3, 0x7}}, {0x3, 0x4, {0x1, 0x1000}}, {0x101, 0x4, {0x1, 0x40}}, {0x10, 0x2, {0x1, 0xffff}}, {0xa2f, 0x8, {0x0, 0x81}}, {0x4, 0x50a, {0x2, 0xff}}, {0x1b, 0x7, {0x0, 0x5401}}, {0xfcca, 0x40, {0x2, 0x7}}, {0x401, 0x8, {0x3, 0xff}}, {0x2, 0x6, {0x1, 0x7}}, {0x5, 0x40, {0x1, 0x2}}, {0x2, 0x4, {0x2, 0x8}}, {0x1, 0x0, {0x3, 0xfc}}, {0x100, 0xf045, {0x0, 0x4}}, {0x6, 0x3, {0x1, 0x800}}, {0x7, 0x3, {0x0, 0x3}}, {0xa834, 0x1, {0x3, 0x5}}, {0x5, 0x3, {0x3, 0x7fa8}}, {0x0, 0xc, {0x0, 0x4}}, {0x4, 0x2, {0x2, 0xeeb}}]}}}, {{0x254, 0x1, {{0x2, 0x4ace}, 0xc0, 0x3, 0x1, 0x0, 0x10, 'syz1\x00', "a632f583080224c6a227c69ed06433f3230e295a6512da302b3ad60e4f208f22", "ba562f8a98cc4eca4e782da96f3dade703f8fd9716ab9d0012a4af09c40a4f33", [{0x8, 0x3ff, {0x1, 0x9d}}, {0x9, 0x9, {0x2, 0x81}}, {0x4, 0x5, {0x1, 0x3}}, {0x3, 0x6, {0x0, 0x1}}, {0x401, 0x5, {0x3, 0x7}}, {0x1, 0x4, {0x2, 0x6}}, {0x17f, 0x9, {0x1, 0x7}}, {0x4, 0xfff, {0x0, 0x2}}, {0x9dd, 0x2, {0x3, 0x1}}, {0x2, 0x20cb, {0x2, 0x10001}}, {0x8, 0x3, {0x0, 0x8}}, {0x7ff, 0x5eb1, {0x3, 0x5}}, {0x3e3c, 0x400, {0x2, 0x7ff}}, {0x1, 0xfffe, {0x1, 0x8}}, {0x9, 0x3, {0x0, 0x4}}, {0xfffc, 0x401, {0x0, 0x5}}, {0x6, 0x4, {0x2, 0x10001}}, {0x7, 0x7, {0x1, 0xc54}}, {0x8, 0x1, {0x1, 0x40}}, {0x9, 0x3ff, {0x3, 0xd175}}, {0x800, 0x400, {0x2, 0x7}}, {0xe0, 0x2, {0x2, 0x8117}}, {0x2, 0x4, {0x3, 0x7}}, {0x0, 0x7ff, {0x0, 0xfffffffc}}, {0x7, 0xfffe, {0x2, 0x5}}, {0xffff, 0x4, {0x1, 0x8}}, {0xfb0, 0xc, {0x0, 0x80000001}}, {0xfff8, 0xfffd, {0x0, 0x3}}, {0x5, 0xdde, {0x2, 0x2}}, {0x5, 0x1, {0x2}}, {0x6, 0x3ff, {0x3, 0x8}}, {0x9, 0x8c69, {0x0, 0x5}}, {0x2, 0x65, {0x3, 0x6}}, {0x4, 0x800, {0x3, 0x8}}, {0x8, 0x7, {0x0, 0x5}}, {0x3, 0x8, {0x2, 0x8}}, {0x6, 0x6, {0x0, 0x2fb6784f}}, {0x0, 0x7f, {0x3, 0x1}}, {0xff, 0x6, {0x2}}, {0x0, 0x993, {0x1, 0xffff}}]}}}, {{0x254, 0x1, {{0x3, 0x311}, 0x1, 0x8e, 0x8, 0x9, 0x19, 'syz0\x00', "27d2014a255d2babadcfd33dc7b138ea5260f29f021929e70a5a15272606af7e", "84ef648857ecee8a7f3732e5e9055c55b4326fe8944590d083c21d173d273f90", [{0x6, 0x3d49, {0x3, 0x4}}, {0x6, 0x0, {0x0, 0x4}}, {0x1, 0x5, {0x2, 0xff}}, {0xf845, 0x7f, {0x2, 0x5}}, {0x3, 0x6, {0x1, 0x8}}, {0x5, 0xcf60, {0x0, 0x6}}, {0x40, 0x7ff, {0x1, 0x6}}, {0x8, 0x9, {0x0, 0x8}}, {0x401, 0x5, {0x2, 0x2}}, {0x5, 0x4, {0x0, 0x9}}, {0x3, 0x101, {0x2, 0xfff}}, {0x3, 0x0, {0x3, 0xfffffffe}}, {0x0, 0x7, {0x1, 0x7fffffff}}, {0x7, 0x8, {0x0, 0x1}}, {0xff19, 0x0, {0x3, 0x7bfb}}, {0x7, 0x1000, {0x1, 0x4}}, {0x1, 0x4, {0x0, 0x3}}, {0xc, 0x7, {0x2, 0x1}}, {0x2, 0x1cd9, {0x3, 0x2}}, {0x6, 0x4, {0x3, 0x4}}, {0x1, 0x4, {0x3, 0x3}}, {0x9, 0xfff1, {0x2, 0x7}}, {0x7, 0x9, {0x1, 0x1}}, {0xf8, 0x8, {0x3, 0xffffffff}}, {0x5, 0x6, {0x0, 0x4}}, {0x7c, 0xe, {0x1, 0x8}}, {0x8000, 0x4, {0x0, 0x9}}, {0x4, 0x1, {0x0, 0x5}}, {0x80, 0x74, {0x1, 0xe}}, {0x8, 0x9, {0x2, 0x7}}, {0x6, 0x28, {0x2, 0x80}}, {0x8, 0x3, {0x1, 0x8}}, {0x9, 0x1, {0x1, 0x80}}, {0x93, 0xd5c6, {0x2, 0x2}}, {0x2, 0x2, {0x0, 0xa62}}, {0x8, 0x1ff, {0x3, 0x4}}, {0x8, 0x5, {0x0, 0x21}}, {0x9, 0x9, {0x3, 0x3}}, {0xfff9, 0x2, {0x3, 0x825c}}, {0x4, 0x8000, {0x0, 0x10}}]}}}]}, 0x175c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="70000000000101040000000000000000020000002c0001801400018008000100e000000108000200ac1414000c000280050001000000000006000340000400801400018008000100e000000108000200e00000010c000280050001000000000008000740000000000400068000000000"], 0x70}}, 0x0) ioctl$FITHAW(r2, 0xc0045878) 192.972947ms ago: executing program 1 (id=1758): syz_emit_ethernet(0x91, &(0x7f0000000040)={@local, @local, @val={@val={0x88a8, 0x4, 0x0, 0x3}, {0x8100, 0x1, 0x1, 0x7}}, {@generic={0x200, "9a833c925c6b294c4581e21314bb9de347e0f6f01f6d47bce8da129a64935ae52de9e5c7b0b40fbc08e932bcc570a24ad748d6bd901bcb80bb6696cf7674ea48be02fcd1b068f2478a63719c07dc97f14faf6b4a364cfc1e9a818fa1328bb3a97489ea0f2b24363af4a322da736b3af4e8d6845139ae23cc779ffa"}}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x13) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) 0s ago: executing program 1 (id=1759): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002640)=@filter={'filter\x00', 0x42, 0x4, 0x12d8, 0xffffffff, 0x98, 0x1160, 0x0, 0xffffffff, 0xffffffff, 0x1240, 0x1240, 0x1240, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ip={@remote, @broadcast, 0x0, 0xff000000, 'ip6gretap0\x00', 'team_slave_1\x00'}, 0x287, 0x10a0, 0x10c8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x1, './cgroup.cpu/syz1\x00', 0x0, {0x8}}}]}, @REJECT={0x28}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'dvmrp1\x00', 'dummy0\x00', {0xff}}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x5}}, @common=@socket0={{0x20}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1338) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x808, 0x0, 0x0, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0xd9}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x6}, 0x80) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="1d8ff479ab336fd456f8902751a7207cc0f65bdbfaf3e69d9de6f7acf9deef13bc1efa0f2c2a8f2d9ad81a53a403337f359f783fb3fd5f15e936875d3eb87115c30be88cc08d04c961d2c7cf0fed54849cf1f54a6c41deafbfc23d4f7da2737ca6faa7ede95a5ab31d4a6830901c394d9a7454d4cc9b895dad075ae2ad1b199f4ad99367033d687cf57572b9a41b85cd8ab0"], 0x28}}, 0x0) kernel console output (not intermixed with test programs): 4.449356][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.460110][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.471111][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.481929][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.493930][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.503952][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.519862][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.531305][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.541985][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.562751][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.576521][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.586420][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.598912][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.611501][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.620454][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.630393][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.639317][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.648069][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.667086][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.676292][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.687314][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.699725][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.734891][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.743857][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.753436][ T5840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.762836][ T5840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.777617][ T5830] veth0_vlan: entered promiscuous mode [ 64.800283][ T5831] veth0_macvtap: entered promiscuous mode [ 64.841848][ T5831] veth1_macvtap: entered promiscuous mode [ 64.854182][ T5830] veth1_vlan: entered promiscuous mode [ 64.895372][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.906773][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.917394][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.928661][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.938569][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.949202][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.961152][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.995148][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.012766][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.023100][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.033649][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.043574][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.054182][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.066164][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.098486][ T3590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.112632][ T3590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.113693][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.133371][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.142374][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.151219][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.181842][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.189723][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.211493][ T5830] veth0_macvtap: entered promiscuous mode [ 65.243551][ T5830] veth1_macvtap: entered promiscuous mode [ 65.268874][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.278374][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.337671][ T3590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.354204][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.359924][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.369481][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.373764][ T3590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.390131][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.405183][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.415718][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.426427][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.438101][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.448020][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.458703][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.469516][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.512719][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.524051][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.533189][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.545252][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.555644][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.567123][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.577054][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.587553][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.597851][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.608440][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.619566][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.648332][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.660668][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.677973][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.727417][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.750746][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.759538][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.768447][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.881629][ T5847] Bluetooth: hci3: command tx timeout [ 65.881950][ T5838] Bluetooth: hci0: command tx timeout [ 65.920324][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.950706][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.960928][ T5838] Bluetooth: hci4: command tx timeout [ 65.966494][ T5838] Bluetooth: hci1: command tx timeout [ 65.967869][ T5847] Bluetooth: hci2: command tx timeout [ 66.005529][ T5920] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.062746][ T5923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 66.141250][ T5924] netlink: 9748 bytes leftover after parsing attributes in process `syz.1.2'. [ 66.176150][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.184348][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.188601][ T5923] Zero length message leads to an empty skb [ 66.216233][ T5924] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 66.337569][ T5933] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.356690][ T3590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.369490][ T3590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.742309][ T5946] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20003 [ 67.002857][ T5960] netlink: 'syz.2.15': attribute type 1 has an invalid length. [ 67.044488][ T5960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15'. [ 67.060861][ T5966] netlink: 176 bytes leftover after parsing attributes in process `syz.0.17'. [ 67.190779][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 67.235173][ T5973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19'. [ 67.272808][ T5976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20'. [ 67.498520][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 67.544097][ T5989] warning: `syz.4.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 67.592263][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 67.641000][ T5988] netlink: 'syz.2.22': attribute type 1 has an invalid length. [ 67.648624][ T5988] nbd: error processing sock list [ 67.656586][ T5985] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 67.886082][ T5999] netlink: 28 bytes leftover after parsing attributes in process `syz.3.27'. [ 67.960883][ T5847] Bluetooth: hci3: command tx timeout [ 67.961490][ T5838] Bluetooth: hci0: command tx timeout [ 68.044468][ T5838] Bluetooth: hci1: command tx timeout [ 68.050116][ T5838] Bluetooth: hci4: command tx timeout [ 68.056992][ T5838] Bluetooth: hci2: command tx timeout [ 68.175878][ T6017] netlink: 'syz.3.33': attribute type 1 has an invalid length. [ 68.188587][ T6017] netlink: 'syz.3.33': attribute type 1 has an invalid length. [ 68.456983][ T6033] vxcan1: tx address claim with different name [ 68.498647][ T6033] vxcan1: tx address claim with different name [ 68.526918][ T6033] vxcan1: tx address claim with different name [ 68.539416][ T6033] vxcan1: tx address claim with different name [ 68.557761][ T6037] macvlan2: entered promiscuous mode [ 68.566804][ T6037] macvlan2: entered allmulticast mode [ 68.570887][ T6033] vxcan1: tx address claim with different name [ 68.587690][ T6033] vxcan1: tx address claim with different name [ 68.621284][ T6033] vxcan1: tx address claim with different name [ 68.622429][ T6035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.655744][ T6033] vxcan1: tx address claim with different name [ 68.674291][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.681202][ T6033] vxcan1: tx address claim with different name [ 68.703919][ T6033] vxcan1: tx address claim with different name [ 68.718192][ T6033] vxcan1: tx address claim with different name [ 68.725506][ T6033] vxcan1: tx address claim with different name [ 68.737645][ T6033] vxcan1: tx address claim with different name [ 68.745733][ T6033] vxcan1: tx address claim with different name [ 68.770889][ T6033] vxcan1: tx address claim with different name [ 68.781568][ T6033] vxcan1: tx address claim with different name [ 68.793621][ T6033] vxcan1: tx address claim with different name [ 68.831817][ T6033] vxcan1: tx address claim with different name [ 68.852661][ T6033] vxcan1: tx address claim with different name [ 68.888460][ T6047] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 68.890007][ T6033] vxcan1: tx address claim with different name [ 68.911222][ T6049] tipc: Started in network mode [ 68.911843][ T6033] vxcan1: tx address claim with different name [ 68.928100][ T6049] tipc: Node identity ac14140f, cluster identity 4711 [ 68.929119][ T6033] vxcan1: tx address claim with different name [ 68.948097][ T6033] vxcan1: tx address claim with different name [ 68.951605][ T6049] tipc: New replicast peer: 255.255.255.255 [ 68.957442][ T6033] vxcan1: tx address claim with different name [ 68.973746][ T6033] vxcan1: tx address claim with different name [ 68.983890][ T6033] vxcan1: tx address claim with different name [ 68.989634][ T6049] tipc: Enabled bearer , priority 10 [ 68.990427][ T6033] vxcan1: tx address claim with different name [ 69.013305][ T6033] vxcan1: tx address claim with different name [ 69.058527][ T6033] vxcan1: tx address claim with different name [ 69.075809][ T6033] vxcan1: tx address claim with different name [ 69.096064][ T6033] vxcan1: tx address claim with different name [ 69.122938][ T6033] vxcan1: tx address claim with different name [ 69.173986][ T6033] vxcan1: tx address claim with different name [ 69.185661][ T6059] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 69.200819][ T6033] vxcan1: tx address claim with different name [ 69.209864][ T6033] vxcan1: tx address claim with different name [ 69.227059][ T6033] vxcan1: tx address claim with different name [ 69.249386][ T6033] vxcan1: tx address claim with different name [ 69.263855][ T6033] vxcan1: tx address claim with different name [ 69.414444][ T6070] syz.3.48 uses obsolete (PF_INET,SOCK_PACKET) [ 69.582776][ T6082] pim6reg527: entered allmulticast mode [ 69.731322][ T6096] netlink: 'syz.4.55': attribute type 2 has an invalid length. [ 69.742045][ T6096] netlink: 'syz.4.55': attribute type 2 has an invalid length. [ 69.866517][ T6103] syzkaller1: entered promiscuous mode [ 69.872241][ T6103] syzkaller1: entered allmulticast mode [ 70.103277][ T9] tipc: Node number set to 2886997007 [ 70.498781][ T6142] netlink: 'syz.1.65': attribute type 12 has an invalid length. [ 70.512135][ T6143] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 70.942011][ T6157] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 71.003837][ T6157] netlink: 'syz.4.71': attribute type 10 has an invalid length. [ 71.059865][ T6157] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.069011][ T6157] bond0: (slave team0): Enslaving as an active interface with an up link [ 71.249606][ T6171] __nla_validate_parse: 9 callbacks suppressed [ 71.249628][ T6171] netlink: 36 bytes leftover after parsing attributes in process `syz.4.76'. [ 71.291011][ T6171] netlink: 36 bytes leftover after parsing attributes in process `syz.4.76'. [ 71.651535][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84'. [ 71.797851][ T6212] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 71.821777][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.828690][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.159458][ T6226] hsr_slave_0 (unregistering): left promiscuous mode [ 72.174854][ T6237] Illegal XDP return value 4294944293 on prog (id 18) dev N/A, expect packet loss! [ 72.205406][ T6231] veth1_macvtap: left promiscuous mode [ 72.219501][ T6237] Bluetooth: MGMT ver 1.23 [ 72.228619][ T6231] macsec0: entered allmulticast mode [ 72.249380][ T6235] veth1_macvtap: entered promiscuous mode [ 72.256115][ T6235] veth1_macvtap: entered allmulticast mode [ 72.262202][ T6235] macsec0: left allmulticast mode [ 72.268022][ T6235] veth1_macvtap: left allmulticast mode [ 72.276592][ T6236] netlink: 284 bytes leftover after parsing attributes in process `syz.4.94'. [ 72.773762][ T6274] syz.2.102[6274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.773898][ T6274] syz.2.102[6274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.812393][ T6274] syz.2.102[6274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.893998][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.104'. [ 72.973776][ T6282] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 73.007034][ T6281] xt_CT: No such helper "syz1" [ 73.114620][ T6287] veth1_macvtap: left promiscuous mode [ 73.125409][ T6287] macsec0: entered allmulticast mode [ 73.477835][ T6307] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 73.594816][ T6311] x_tables: duplicate entry at hook 2 [ 73.667049][ T6311] bond1: entered promiscuous mode [ 73.703976][ T6317] netlink: 'syz.3.117': attribute type 39 has an invalid length. [ 74.084890][ T6339] netlink: 'syz.2.120': attribute type 1 has an invalid length. [ 74.131578][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.120'. [ 74.249501][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'. [ 74.275806][ T6346] netlink: 288 bytes leftover after parsing attributes in process `syz.1.124'. [ 74.310856][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.124'. [ 74.332186][ T6346] netlink: 72 bytes leftover after parsing attributes in process `syz.1.124'. [ 74.779948][ T6367] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 74.780829][ T5885] IPVS: starting estimator thread 0... [ 74.985922][ T6378] IPVS: using max 22 ests per chain, 52800 per kthread [ 75.540217][ T6424] netlink: 'syz.1.145': attribute type 4 has an invalid length. [ 76.138651][ T6456] xt_TPROXY: Can be used only with -p tcp or -p udp [ 76.239424][ T6457] netlink: 'syz.4.159': attribute type 10 has an invalid length. [ 76.450486][ T6476] bridge0: port 3(syz_tun) entered blocking state [ 76.457662][ T6476] bridge0: port 3(syz_tun) entered disabled state [ 76.513208][ T6476] syz_tun: entered allmulticast mode [ 76.526941][ T6476] syz_tun: entered promiscuous mode [ 76.534585][ T6476] bridge0: port 3(syz_tun) entered blocking state [ 76.541505][ T6476] bridge0: port 3(syz_tun) entered forwarding state [ 76.558934][ T6481] netlink: 'syz.4.165': attribute type 1 has an invalid length. [ 76.627484][ T6477] __nla_validate_parse: 4 callbacks suppressed [ 76.627506][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.164'. [ 77.276853][ T6511] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 77.416363][ T6519] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 78.151829][ T6559] netlink: 'syz.4.190': attribute type 1 has an invalid length. [ 78.177397][ T6559] netlink: 'syz.4.190': attribute type 1 has an invalid length. [ 78.227428][ T6559] netlink: 'syz.4.190': attribute type 1 has an invalid length. [ 78.272827][ T6559] netlink: 'syz.4.190': attribute type 1 has an invalid length. [ 78.311238][ T6559] netlink: 'syz.4.190': attribute type 1 has an invalid length. [ 78.334502][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.190'. [ 78.431751][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.192'. [ 78.639517][ T6584] netlink: 32 bytes leftover after parsing attributes in process `syz.2.197'. [ 80.326595][ T6605] macvlan2: left promiscuous mode [ 80.783399][ T6634] validate_nla: 60 callbacks suppressed [ 80.783421][ T6634] netlink: 'syz.4.214': attribute type 1 has an invalid length. [ 80.808443][ T6634] netlink: 'syz.4.214': attribute type 2 has an invalid length. [ 80.816878][ T6634] netlink: 3 bytes leftover after parsing attributes in process `syz.4.214'. [ 81.092941][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 81.160238][ T6642] netlink: 28 bytes leftover after parsing attributes in process `syz.3.216'. [ 81.181130][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'. [ 81.191139][ T6647] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.217'. [ 81.230967][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 81.236456][ T6647] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 81.789064][ T6682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.805872][ T6682] batadv_slave_1: entered promiscuous mode [ 82.048489][ T46] cfg80211: failed to load regulatory.db [ 82.177359][ T6695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.271012][ T6705] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 82.295536][ T6705] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 82.391338][ T6707] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 82.704875][ T6727] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 82.757442][ T6727] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.765373][ T6727] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.806726][ T6727] bridge0: entered allmulticast mode [ 82.826208][ T6733] netlink: 'syz.2.248': attribute type 3 has an invalid length. [ 83.113038][ T6748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.254'. [ 83.126597][ T6751] netlink: 25 bytes leftover after parsing attributes in process `syz.2.252'. [ 83.159612][ T6748] pim6reg: entered allmulticast mode [ 83.207937][ T6751] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 83.210828][ T6756] netlink: 'syz.1.257': attribute type 10 has an invalid length. [ 83.225096][ T6756] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 83.227674][ T6751] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 83.236739][ T6756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.277937][ T6748] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 83.382210][ T6762] netlink: 'syz.1.259': attribute type 1 has an invalid length. [ 83.394863][ T6762] netlink: 224 bytes leftover after parsing attributes in process `syz.1.259'. [ 83.646222][ T6780] tipc: Started in network mode [ 83.663606][ T6780] tipc: Node identity 7, cluster identity 4711 [ 83.670116][ T6780] tipc: Node number set to 7 [ 83.807939][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'. [ 83.834967][ T6786] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 83.852151][ T6786] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 83.891804][ T6786] gretap1: entered promiscuous mode [ 83.904721][ T6786] gretap1: entered allmulticast mode [ 83.923045][ T6793] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 83.964999][ T6786] netlink: 'syz.3.266': attribute type 1 has an invalid length. [ 84.187405][ T6806] mac80211_hwsim hwsim8 ÿ: renamed from wlan1 [ 84.311005][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 84.319843][ T6809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.386267][ T6809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.398721][ T6809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.418895][ T6809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.486054][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'. [ 84.758859][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'. [ 84.826028][ T6838] erspan0: entered promiscuous mode [ 84.841790][ T6838] macvtap1: entered promiscuous mode [ 84.860897][ T6838] macvtap1: entered allmulticast mode [ 84.871786][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.282'. [ 84.880697][ T6838] erspan0: entered allmulticast mode [ 84.937871][ T6844] netem: change failed [ 85.096086][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'. [ 85.155350][ T6852] netlink: 50 bytes leftover after parsing attributes in process `syz.1.286'. [ 86.020401][ T6908] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20001 [ 86.466834][ T6920] netlink: 'syz.1.306': attribute type 4 has an invalid length. [ 86.499387][ T6920] netlink: 'syz.1.306': attribute type 4 has an invalid length. [ 86.826012][ T6939] netlink: 'syz.1.311': attribute type 1 has an invalid length. [ 86.965287][ T6943] netlink: 'syz.2.312': attribute type 1 has an invalid length. [ 87.716087][ T6984] netlink: 'syz.0.325': attribute type 2 has an invalid length. [ 87.726357][ T6989] nftables ruleset with unbound set [ 87.874205][ T6997] syz.1.327 uses old SIOCAX25GETINFO [ 88.214616][ T973] IPVS: starting estimator thread 0... [ 88.276931][ T7016] ieee802154 phy0 wpan0: encryption failed: -126 [ 88.287923][ T7018] syzkaller1: entered allmulticast mode [ 88.310703][ T7014] IPVS: using max 31 ests per chain, 74400 per kthread [ 88.419142][ T7023] __nla_validate_parse: 10 callbacks suppressed [ 88.419160][ T7023] netlink: 104 bytes leftover after parsing attributes in process `syz.3.336'. [ 88.798038][ T7040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.342'. [ 88.802356][ T7041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.341'. [ 88.851615][ T7043] netlink: 'syz.3.343': attribute type 12 has an invalid length. [ 88.859607][ T7043] netlink: 'syz.3.343': attribute type 29 has an invalid length. [ 88.867935][ T7043] netlink: 148 bytes leftover after parsing attributes in process `syz.3.343'. [ 88.897019][ T7043] netlink: 59 bytes leftover after parsing attributes in process `syz.3.343'. [ 88.981584][ T7049] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 89.002280][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 89.443380][ T7075] netlink: 76 bytes leftover after parsing attributes in process `syz.1.352'. [ 89.503705][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'. [ 89.515334][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'. [ 89.640828][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'. [ 89.677738][ T7086] netlink: 24 bytes leftover after parsing attributes in process `syz.1.357'. [ 89.719370][ T7090] netlink: 'syz.0.358': attribute type 2 has an invalid length. [ 89.882232][ T7097] bridge_slave_0: left allmulticast mode [ 89.890803][ T7097] bridge_slave_0: left promiscuous mode [ 89.896721][ T7097] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.927594][ T7097] bridge_slave_1: left allmulticast mode [ 89.956516][ T7103] syz.2.363: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 89.969919][ T7097] bridge_slave_1: left promiscuous mode [ 89.979469][ T7097] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.998019][ T7103] CPU: 0 UID: 0 PID: 7103 Comm: syz.2.363 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 90.009186][ T7103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 90.019252][ T7103] Call Trace: [ 90.022538][ T7103] [ 90.025480][ T7103] dump_stack_lvl+0x241/0x360 [ 90.030216][ T7103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.035435][ T7103] ? __pfx__printk+0x10/0x10 [ 90.040039][ T7103] ? __rcu_read_unlock+0xa1/0x110 [ 90.045064][ T7103] warn_alloc+0x278/0x410 [ 90.049412][ T7103] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 90.055516][ T7103] ? __pfx_warn_alloc+0x10/0x10 [ 90.060368][ T7103] ? kasan_save_track+0x3f/0x80 [ 90.065214][ T7103] ? __kasan_kmalloc+0x98/0xb0 [ 90.070002][ T7103] ? xsk_setsockopt+0x4ea/0x950 [ 90.074885][ T7103] ? do_sock_setsockopt+0x3af/0x720 [ 90.080203][ T7103] ? __x64_sys_setsockopt+0x1ee/0x280 [ 90.085574][ T7103] ? do_syscall_64+0xf3/0x230 [ 90.090256][ T7103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.096342][ T7103] __vmalloc_node_range_noprof+0x126/0x1380 [ 90.102294][ T7103] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 90.108681][ T7103] ? __kasan_kmalloc+0x98/0xb0 [ 90.113513][ T7103] vmalloc_user_noprof+0x74/0x80 [ 90.118501][ T7103] ? xskq_create+0xb6/0x170 [ 90.123067][ T7103] xskq_create+0xb6/0x170 [ 90.127462][ T7103] xsk_init_queue+0xa1/0x100 [ 90.132186][ T7103] xsk_setsockopt+0x4ea/0x950 [ 90.136911][ T7103] ? __pfx_xsk_setsockopt+0x10/0x10 [ 90.142155][ T7103] ? __pfx_aa_sk_perm+0x10/0x10 [ 90.147061][ T7103] ? aa_sock_opt_perm+0x79/0x120 [ 90.152045][ T7103] ? __pfx_xsk_setsockopt+0x10/0x10 [ 90.157296][ T7103] do_sock_setsockopt+0x3af/0x720 [ 90.162334][ T7103] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 90.167923][ T7103] ? __fget_files+0x395/0x410 [ 90.172629][ T7103] ? __fget_files+0x2a/0x410 [ 90.177228][ T7103] __x64_sys_setsockopt+0x1ee/0x280 [ 90.182428][ T7103] do_syscall_64+0xf3/0x230 [ 90.186940][ T7103] ? clear_bhb_loop+0x35/0x90 [ 90.191626][ T7103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.197599][ T7103] RIP: 0033:0x7ff708d85d29 [ 90.202179][ T7103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.221807][ T7103] RSP: 002b:00007ff706bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 90.230229][ T7103] RAX: ffffffffffffffda RBX: 00007ff708f75fa0 RCX: 00007ff708d85d29 [ 90.238203][ T7103] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 90.246181][ T7103] RBP: 00007ff708e01aa8 R08: 0000000000000004 R09: 0000000000000000 [ 90.254173][ T7103] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.262150][ T7103] R13: 0000000000000000 R14: 00007ff708f75fa0 R15: 00007ffcfd26c1f8 [ 90.270143][ T7103] [ 90.278352][ T7097] bond0: (slave bond_slave_0): Releasing backup interface [ 90.284935][ T7103] Mem-Info: [ 90.288852][ T7103] active_anon:4805 inactive_anon:0 isolated_anon:0 [ 90.288852][ T7103] active_file:1159 inactive_file:38255 isolated_file:0 [ 90.288852][ T7103] unevictable:768 dirty:90 writeback:0 [ 90.288852][ T7103] slab_reclaimable:10077 slab_unreclaimable:97833 [ 90.288852][ T7103] mapped:29505 shmem:1435 pagetables:792 [ 90.288852][ T7103] sec_pagetables:0 bounce:0 [ 90.288852][ T7103] kernel_misc_reclaimable:0 [ 90.288852][ T7103] free:1345224 free_pcp:304 free_cma:0 [ 90.336701][ T7103] Node 0 active_anon:19108kB inactive_anon:0kB active_file:4636kB inactive_file:152944kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118040kB dirty:360kB writeback:0kB shmem:4204kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11216kB pagetables:3092kB sec_pagetables:0kB all_unreclaimable? no [ 90.371888][ T7103] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 90.403907][ T7103] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 90.435753][ T7103] lowmem_reserve[]: 0 2465 2466 0 0 [ 90.440156][ T7097] bond0: (slave bond_slave_1): Releasing backup interface [ 90.442409][ T7103] Node 0 DMA32 free:1465704kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:19072kB inactive_anon:0kB active_file:4636kB inactive_file:152104kB unevictable:1536kB writepending:360kB present:3129332kB managed:2552784kB mlocked:0kB bounce:0kB free_pcp:1492kB local_pcp:64kB free_cma:0kB [ 90.481807][ T7103] lowmem_reserve[]: 0 0 0 0 0 [ 90.486756][ T7103] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:840kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 90.516551][ T7103] lowmem_reserve[]: 0 0 0 0 0 [ 90.529516][ T7103] Node 1 Normal free:3899604kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 90.539202][ T7097] team0: Port device team_slave_0 removed [ 90.558840][ T7103] lowmem_reserve[]: 0 0 0 0 0 [ 90.569319][ T7103] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 90.584188][ T7103] Node 0 DMA32: 1*4kB (M) 480*8kB (UME) 267*16kB (UME) 94*32kB (UME) 95*64kB (UME) 51*128kB (UME) 19*256kB (UM) 14*512kB (UM) 6*1024kB (UM) 7*2048kB (M) 344*4096kB (M) = 1465268kB [ 90.603110][ T7103] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 90.623575][ T7103] Node 1 Normal: 217*4kB (UE) 44*8kB (UME) 41*16kB (UME) 250*32kB (UME) 103*64kB (UME) 35*128kB (UME) 15*256kB (UM) 6*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 944*4096kB (M) = 3899604kB [ 90.642842][ T7103] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 90.657604][ T7103] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 90.663489][ T7097] team0: Port device team_slave_1 removed [ 90.667514][ T7103] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 90.682298][ T7097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.683288][ T7103] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 90.690263][ T7097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.699674][ T7103] 40849 total pagecache pages [ 90.699700][ T7103] 0 pages in swap cache [ 90.699708][ T7103] Free swap = 124996kB [ 90.699717][ T7103] Total swap = 124996kB [ 90.699727][ T7103] 2097051 pages RAM [ 90.699736][ T7103] 0 pages HighMem/MovableOnly [ 90.699744][ T7103] 427005 pages reserved [ 90.699753][ T7103] 0 pages cma reserved [ 90.746578][ T7097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.881186][ T7124] vxcan1: tx address claim with dest, not broadcast [ 91.072738][ T7131] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 91.108804][ T5883] IPVS: starting estimator thread 0... [ 91.200746][ T7140] IPVS: using max 27 ests per chain, 64800 per kthread [ 91.288329][ T7146] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 91.491642][ T7161] tipc: Enabling of bearer rejected, failed to enable media [ 92.072287][ T7189] netlink: 'syz.4.391': attribute type 2 has an invalid length. [ 92.139366][ T7152] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 92.355379][ T7199] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 93.102026][ T7230] netlink: 'syz.1.406': attribute type 9 has an invalid length. [ 93.132547][ T7224] infiniband syz1: set down [ 93.151240][ T7224] infiniband syz1: added ipvlan1 [ 93.321956][ T5847] Bluetooth: hci2: command 0x0401 tx timeout [ 93.345308][ T7224] RDS/IB: syz1: added [ 93.351208][ T7224] smc: adding ib device syz1 with port count 1 [ 93.357696][ T7224] smc: ib device syz1 port 1 has pnetid [ 93.747687][ T7264] __nla_validate_parse: 14 callbacks suppressed [ 93.747706][ T7264] netlink: 156 bytes leftover after parsing attributes in process `syz.1.415'. [ 94.294161][ T7297] netlink: 16 bytes leftover after parsing attributes in process `syz.3.423'. [ 94.365575][ T7298] netlink: 'syz.4.422': attribute type 2 has an invalid length. [ 94.429842][ T7298] netlink: 324 bytes leftover after parsing attributes in process `syz.4.422'. [ 94.453274][ T7302] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 94.850484][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'. [ 94.885150][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'. [ 95.028059][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'. [ 95.165907][ T7344] netlink: 'syz.4.432': attribute type 1 has an invalid length. [ 95.245291][ T7344] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.104596][ T7348] bond2: (slave veth5): Enslaving as an active interface with a down link [ 97.113459][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.434'. [ 97.130295][ T7344] tipc: Enabling of bearer rejected, media not registered [ 97.149778][ T7378] netlink: 'syz.2.438': attribute type 21 has an invalid length. [ 97.161124][ T7378] netlink: 132 bytes leftover after parsing attributes in process `syz.2.438'. [ 97.298983][ T7385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.440'. [ 97.843873][ T7417] IPVS: set_ctl: invalid protocol: 43 172.30.5.2:20014 [ 97.923242][ T7411] x_tables: unsorted underflow at hook 4 [ 98.368007][ T7448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.457'. [ 98.474851][ T7457] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 98.843394][ T7483] xt_CT: No such helper "pptp" [ 98.850104][ T7489] __nla_validate_parse: 3 callbacks suppressed [ 98.850122][ T7489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.466'. [ 98.866885][ T7489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.466'. [ 99.286908][ T7503] netlink: 24 bytes leftover after parsing attributes in process `syz.2.470'. [ 99.616291][ T7517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.475'. [ 99.621239][ T7515] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 99.753637][ T7522] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 99.766302][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.478'. [ 99.805045][ T7522] netlink: 11144 bytes leftover after parsing attributes in process `syz.0.478'. [ 99.826736][ T7526] netlink: 'syz.3.481': attribute type 8 has an invalid length. [ 99.869094][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'. [ 99.915741][ T7531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.478'. [ 100.149273][ T7544] netem: unknown loss type 0 [ 100.154474][ T7544] netem: change failed [ 100.244198][ T7547] netlink: 40 bytes leftover after parsing attributes in process `syz.4.488'. [ 100.442716][ T7556] tipc: Enabling of bearer rejected, already enabled [ 100.459688][ T7553] tap0: tun_chr_ioctl cmd 1074025675 [ 100.465875][ T7557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.490'. [ 100.469061][ T7553] tap0: persist disabled [ 101.179656][ T7590] xfrm1: entered promiscuous mode [ 101.198098][ T7590] xfrm1: entered allmulticast mode [ 101.482327][ T7598] netlink: 'syz.3.508': attribute type 10 has an invalid length. [ 101.514686][ T7598] hsr0: entered promiscuous mode [ 101.540148][ T7598] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 101.581439][ T7598] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 101.608330][ T7598] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 101.772833][ T7610] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 101.812905][ T5847] Bluetooth: hci0: command tx timeout [ 102.028240][ T7620] netlink: 'syz.3.516': attribute type 1 has an invalid length. [ 102.051228][ T7620] netlink: 'syz.3.516': attribute type 10 has an invalid length. [ 102.067918][ T7620] netlink: 'syz.3.516': attribute type 4 has an invalid length. [ 102.265894][ T7631] openvswitch: netlink: Flow key attr not present in new flow. [ 102.628083][ T7647] syzkaller0: entered allmulticast mode [ 103.425876][ T7687] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 103.436758][ T7688] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 103.445176][ T7687] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 103.453648][ T7688] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 103.737615][ T7709] netlink: 'syz.0.545': attribute type 1 has an invalid length. [ 103.897895][ T7717] netlink: 'syz.1.547': attribute type 2 has an invalid length. [ 103.920162][ T7719] ieee802154 phy0 wpan0: encryption failed: -90 [ 103.967469][ T7722] netlink: 'syz.2.550': attribute type 1 has an invalid length. [ 104.153125][ T7737] __nla_validate_parse: 10 callbacks suppressed [ 104.153145][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.555'. [ 104.355397][ T7750] IPVS: set_ctl: invalid protocol: 9 10.1.1.2:20000 [ 104.683346][ T7765] dccp_v6_rcv: dropped packet with invalid checksum [ 104.716083][ T7765] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 104.738821][ T7765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.794842][ T7769] netlink: 'syz.1.564': attribute type 1 has an invalid length. [ 104.835028][ T7769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.169506][ T7788] x_tables: duplicate underflow at hook 2 [ 105.318585][ T7793] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 105.381221][ T7793] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 105.553796][ T7809] trusted_key: syz.1.576 sent an empty control message without MSG_MORE. [ 105.695792][ T7817] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.580'. [ 105.720333][ T7817] openvswitch: netlink: Flow actions attr not present in new flow. [ 105.882726][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.585'. [ 106.165259][ T7845] netlink: 28 bytes leftover after parsing attributes in process `syz.2.587'. [ 106.430041][ T7854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.591'. [ 106.442535][ T7852] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.449663][ T7852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.534678][ T7858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.592'. [ 106.548591][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'. [ 107.054343][ T7889] IPv6: sit1: Disabled Multicast RS [ 107.386788][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.607'. [ 107.582204][ T7920] netlink: 80 bytes leftover after parsing attributes in process `syz.3.612'. [ 107.748067][ T7929] netlink: 56 bytes leftover after parsing attributes in process `syz.0.615'. [ 107.794557][ T7929] bridge0: entered allmulticast mode [ 108.038192][ T7939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.485924][ T7960] geneve2: entered promiscuous mode [ 108.491298][ T7960] geneve2: entered allmulticast mode [ 108.551295][ T7961] tipc: Enabled bearer , priority 0 [ 109.106043][ T8003] netlink: 'syz.4.640': attribute type 1 has an invalid length. [ 109.215483][ T8003] netlink: 'syz.4.640': attribute type 1 has an invalid length. [ 109.271822][ T8003] __nla_validate_parse: 5 callbacks suppressed [ 109.271840][ T8003] netlink: 224 bytes leftover after parsing attributes in process `syz.4.640'. [ 109.382068][ T8018] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 109.389849][ T8003] netlink: 'syz.4.640': attribute type 1 has an invalid length. [ 109.403151][ T8003] netlink: 224 bytes leftover after parsing attributes in process `syz.4.640'. [ 109.432335][ T8019] netlink: 'syz.2.642': attribute type 13 has an invalid length. [ 109.440207][ T8019] netlink: 'syz.2.642': attribute type 58 has an invalid length. [ 109.480623][ T8019] netlink: 152 bytes leftover after parsing attributes in process `syz.2.642'. [ 109.573050][ T8003] netlink: 'syz.4.640': attribute type 1 has an invalid length. [ 109.593282][ T8003] netlink: 224 bytes leftover after parsing attributes in process `syz.4.640'. [ 109.689167][ T8003] netlink: 'syz.4.640': attribute type 1 has an invalid length. [ 109.731580][ T8003] netlink: 224 bytes leftover after parsing attributes in process `syz.4.640'. [ 109.871158][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.648'. [ 109.908030][ T8003] workqueue: Failed to create a rescuer kthread for wq "phy6-mac-cmds": -EINTR [ 109.920770][ T8041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.648'. [ 110.231806][ T8057] syz.3.651 (8057) used greatest stack depth: 18960 bytes left [ 110.968346][ T8083] netlink: 'syz.0.656': attribute type 10 has an invalid length. [ 111.147875][ T8083] team0: Port device netdevsim0 added [ 111.212498][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.658'. [ 111.226008][ T8090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.658'. [ 111.252065][ T8090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.658'. [ 111.295231][ T8097] netlink: 'syz.0.661': attribute type 6 has an invalid length. [ 111.308124][ T8097] netlink: 'syz.0.661': attribute type 1 has an invalid length. [ 111.414678][ T8104] ieee802154 phy0 wpan0: encryption failed: -22 [ 111.636792][ T8101] bond3: entered allmulticast mode [ 111.662815][ T8101] 8021q: adding VLAN 0 to HW filter on device bond3 [ 111.720236][ T8101] bond2: (slave bond3): making interface the new active one [ 111.761108][ T8101] bond2: (slave bond3): Enslaving as an active interface with an up link [ 113.293114][ T8169] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 113.684963][ T8203] veth1_to_hsr: entered promiscuous mode [ 113.805547][ T8203] veth1_to_hsr: left promiscuous mode [ 114.104056][ T8237] bridge0: port 3(gretap0) entered blocking state [ 114.114319][ T8237] bridge0: port 3(gretap0) entered disabled state [ 114.122760][ T8237] gretap0: entered allmulticast mode [ 114.129310][ T8237] gretap0: entered promiscuous mode [ 114.135781][ T8237] bridge0: port 3(gretap0) entered blocking state [ 114.142409][ T8237] bridge0: port 3(gretap0) entered forwarding state [ 114.317180][ T8255] validate_nla: 5 callbacks suppressed [ 114.317199][ T8255] netlink: 'syz.0.702': attribute type 62 has an invalid length. [ 114.347492][ T8256] __nla_validate_parse: 8 callbacks suppressed [ 114.347512][ T8256] netlink: 124 bytes leftover after parsing attributes in process `syz.1.704'. [ 114.399504][ T8261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.704'. [ 114.497875][ T8269] IPv6: sit1: Disabled Multicast RS [ 114.608846][ T8274] netlink: 'syz.2.709': attribute type 1 has an invalid length. [ 114.896349][ T8297] netlink: 'syz.0.715': attribute type 1 has an invalid length. [ 114.903979][ T8298] pim6reg: entered allmulticast mode [ 114.947644][ T8297] netlink: 244 bytes leftover after parsing attributes in process `syz.0.715'. [ 115.069889][ T8314] veth1: entered promiscuous mode [ 115.078448][ T8314] veth1: left promiscuous mode [ 115.111162][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.721'. [ 115.166087][ T8318] netlink: 132 bytes leftover after parsing attributes in process `syz.1.722'. [ 115.197731][ T8318] netlink: 'syz.1.722': attribute type 1 has an invalid length. [ 115.303963][ T8318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.722'. [ 115.547364][ T8336] netlink: 80 bytes leftover after parsing attributes in process `syz.4.729'. [ 115.848007][ T8353] xt_hashlimit: size too large, truncated to 1048576 [ 115.865611][ T8357] netlink: 2 bytes leftover after parsing attributes in process `syz.2.737'. [ 115.872635][ T8360] netlink: 'syz.3.738': attribute type 13 has an invalid length. [ 115.876219][ T8353] xt_hashlimit: max too large, truncated to 1048576 [ 115.882662][ T8360] netlink: 152 bytes leftover after parsing attributes in process `syz.3.738'. [ 115.892236][ T8353] xt_hashlimit: overflow, try lower: 0/0 [ 115.911012][ T8360] syz_tun: refused to change device tx_queue_len [ 115.930678][ T8360] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 116.233740][ T8374] netlink: 'syz.1.739': attribute type 2 has an invalid length. [ 116.235612][ T8382] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.741'. [ 116.250988][ T8382] openvswitch: netlink: Flow key attribute not present in set flow. [ 116.329518][ T8383] netlink: 'syz.3.743': attribute type 11 has an invalid length. [ 117.382999][ T8448] xt_CT: No such helper "pptp" [ 117.608322][ T8467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.609063][ T8464] unsupported nlmsg_type 40 [ 117.616031][ T8467] IPv6: NLM_F_CREATE should be set when creating new route [ 117.616103][ T8467] IPv6: NLM_F_CREATE should be set when creating new route [ 117.647994][ T8464] netlink: 'syz.0.771': attribute type 2 has an invalid length. [ 117.987087][ T8492] syz.2.779[8492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.987210][ T8492] syz.2.779[8492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.989246][ T8491] syz.2.779[8491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.042042][ T8494] netlink: 'syz.0.780': attribute type 21 has an invalid length. [ 118.059598][ T8492] syz.2.779[8492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.091358][ T8491] syz.2.779[8491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.105301][ T8494] netlink: 'syz.0.780': attribute type 4 has an invalid length. [ 118.141093][ T8494] netlink: 'syz.0.780': attribute type 5 has an invalid length. [ 118.965243][ T8552] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 119.148199][ T8553] dvmrp1: entered allmulticast mode [ 119.183498][ T8555] dvmrp1: left allmulticast mode [ 119.352829][ T8569] netlink: 'syz.0.802': attribute type 1 has an invalid length. [ 119.683259][ T8589] __nla_validate_parse: 16 callbacks suppressed [ 119.683279][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.808'. [ 119.967257][ T8606] netlink: 'syz.4.813': attribute type 1 has an invalid length. [ 119.993324][ T8606] netlink: 'syz.4.813': attribute type 2 has an invalid length. [ 120.018795][ T8606] netlink: 20 bytes leftover after parsing attributes in process `syz.4.813'. [ 120.075163][ T8604] "syz.0.812" (8604) uses obsolete ecb(arc4) skcipher [ 120.087145][ T8611] Cannot find del_set index 4 as target [ 120.504782][ T8643] netlink: 'syz.0.824': attribute type 9 has an invalid length. [ 120.511458][ T8645] netlink: 56 bytes leftover after parsing attributes in process `syz.3.826'. [ 120.523886][ T8645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.826'. [ 120.545186][ T8645] netlink: 31 bytes leftover after parsing attributes in process `syz.3.826'. [ 120.566242][ T8645] netlink: 'syz.3.826': attribute type 3 has an invalid length. [ 120.581472][ T8645] netlink: 'syz.3.826': attribute type 2 has an invalid length. [ 120.595267][ T8643] netlink: 20 bytes leftover after parsing attributes in process `syz.0.824'. [ 120.606126][ T8645] netlink: 31 bytes leftover after parsing attributes in process `syz.3.826'. [ 120.616856][ T8643] netlink: 232 bytes leftover after parsing attributes in process `syz.0.824'. [ 120.683983][ T8658] x_tables: duplicate underflow at hook 2 [ 120.783168][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.830'. [ 120.825892][ T8666] netlink: 'syz.0.831': attribute type 1 has an invalid length. [ 121.017244][ T8667] dvmrp1: entered allmulticast mode [ 121.045991][ T8673] gretap2: entered allmulticast mode [ 121.113788][ T8667] tap0: tun_chr_ioctl cmd 1074025678 [ 121.126886][ T8667] tap0: group set to 0 [ 121.174300][ T8694] netlink: 'syz.0.837': attribute type 1 has an invalid length. [ 121.184404][ T8694] netlink: 'syz.0.837': attribute type 2 has an invalid length. [ 121.222827][ T8694] netlink: 'syz.0.837': attribute type 1 has an invalid length. [ 121.297945][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.840'. [ 121.318352][ T8702] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 121.423163][ T8704] Bluetooth: MGMT ver 1.23 [ 121.746406][ T8719] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 121.797743][ T8719] gretap0: left allmulticast mode [ 121.806928][ T8719] gretap0: left promiscuous mode [ 121.846386][ T8720] IPVS: set_ctl: invalid protocol: 59 10.1.1.0:20004 [ 121.857124][ T8719] bridge0: port 3(gretap0) entered disabled state [ 121.889659][ T8719] bridge_slave_0: left allmulticast mode [ 121.903475][ T8719] bridge_slave_0: left promiscuous mode [ 121.909309][ T8719] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.950307][ T8719] bridge_slave_1: left allmulticast mode [ 121.957689][ T8719] bridge_slave_1: left promiscuous mode [ 121.973042][ T8719] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.002244][ T8719] bond0: (slave bond_slave_0): Releasing backup interface [ 122.030230][ T8719] bond0: (slave bond_slave_1): Releasing backup interface [ 122.071857][ T8719] team0: Port device team_slave_0 removed [ 122.094509][ T8719] team0: Port device team_slave_1 removed [ 122.103377][ T8719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.112780][ T8719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.122030][ T8719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.129527][ T8719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.204617][ T8735] bond0: (slave team0): Releasing backup interface [ 122.220517][ T8735] team0: Cannot enslave team device to itself [ 122.811926][ T8770] tipc: Invalid UDP bearer configuration [ 122.811973][ T8770] tipc: Enabling of bearer rejected, failed to enable media [ 122.949061][ T8781] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 123.408503][ T8811] No such timeout policy "syz0" [ 123.468599][ T8813] ebt_among: dst integrity fail: 101 [ 123.669475][ T8829] ipt_rpfilter: unknown options [ 123.697744][ T8829] ipt_rpfilter: unknown options [ 123.997378][ T8796] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 124.111805][ T8854] netlink: 'syz.1.893': attribute type 11 has an invalid length. [ 124.185966][ T8864] sch_fq: defrate 0 ignored. [ 124.667609][ T8893] validate_nla: 9 callbacks suppressed [ 124.667626][ T8893] netlink: 'syz.0.906': attribute type 21 has an invalid length. [ 124.692857][ T8893] netlink: 'syz.0.906': attribute type 1 has an invalid length. [ 125.018798][ T8931] ipt_REJECT: TCP_RESET invalid for non-tcp [ 125.246723][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 125.538520][ T8974] ip6tnl1: entered promiscuous mode [ 125.552910][ T8974] ip6tnl1: entered allmulticast mode [ 125.736975][ T8984] __nla_validate_parse: 18 callbacks suppressed [ 125.736996][ T8984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.925'. [ 125.825717][ T8985] netlink: 40 bytes leftover after parsing attributes in process `syz.2.925'. [ 125.854709][ T8989] netlink: 40 bytes leftover after parsing attributes in process `syz.2.925'. [ 125.885018][ T8994] batman_adv: batadv0: Adding interface: dummy0 [ 125.892690][ T8995] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 125.900774][ T8994] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.912114][ T8991] nbd: socks must be embedded in a SOCK_ITEM attr [ 125.951554][ T8994] batman_adv: batadv0: Interface activated: dummy0 [ 125.977473][ T8997] batadv0: mtu less than device minimum [ 126.000392][ T9000] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 126.008344][ T8997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.023606][ T8997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.035261][ T8997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.047742][ T8997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.049177][ T9001] netlink: 48 bytes leftover after parsing attributes in process `syz.2.929'. [ 126.060157][ T8997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.080066][ T8997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.092568][ T8997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.105034][ T8997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.259863][ T9009] netlink: 'syz.2.932': attribute type 8 has an invalid length. [ 126.325231][ T9014] syzkaller1: entered promiscuous mode [ 126.335700][ T9014] syzkaller1: entered allmulticast mode [ 126.742249][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.940'. [ 126.777446][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.940'. [ 126.796909][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.940'. [ 126.969126][ T9052] veth1_to_hsr: entered promiscuous mode [ 127.005831][ T9052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.943'. [ 127.102615][ T9052] netlink: 'syz.3.943': attribute type 1 has an invalid length. [ 127.150088][ T9052] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.943'. [ 127.177765][ T9059] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.178592][ T9066] netlink: 16 bytes leftover after parsing attributes in process `syz.0.949'. [ 127.235384][ T9052] veth1_to_hsr (unregistering): left promiscuous mode [ 127.250324][ T9068] xt_l2tp: v2 tid > 0xffff: 150994944 [ 127.308566][ T9052] hsr_slave_1 (unregistering): left promiscuous mode [ 127.354452][ T9072] SET target dimension over the limit! [ 128.348618][ T9150] bond2: entered promiscuous mode [ 128.354959][ T9150] bond2: entered allmulticast mode [ 128.364944][ T9150] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.386914][ T9154] IPv6: sit1: Disabled Multicast RS [ 129.111638][ T9197] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.177664][ T9204] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 129.579665][ T9234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.602736][ T9234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.626658][ T9234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.635338][ T9234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.871382][ T9248] vlan2: entered allmulticast mode [ 129.876671][ T9248] vlan1: entered allmulticast mode [ 129.886783][ T9248] veth0_vlan: entered allmulticast mode [ 129.896132][ T9248] bridge0: port 1(vlan2) entered blocking state [ 129.905164][ T9248] bridge0: port 1(vlan2) entered disabled state [ 129.912951][ T9248] vlan2: entered promiscuous mode [ 129.918158][ T9248] vlan1: entered promiscuous mode [ 129.927594][ T9248] bridge0: port 1(vlan2) entered blocking state [ 129.935048][ T9248] bridge0: port 1(vlan2) entered forwarding state [ 130.549796][ T9295] SET target dimension over the limit! [ 130.754558][ T9308] __nla_validate_parse: 10 callbacks suppressed [ 130.754578][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1021'. [ 130.864319][ T9321] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1025'. [ 130.878525][ T9321] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1025'. [ 130.897595][ T9324] netlink: 'syz.2.1026': attribute type 29 has an invalid length. [ 130.908148][ T9323] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1026'. [ 130.923438][ T9325] netlink: 'syz.2.1026': attribute type 29 has an invalid length. [ 130.928362][ T9323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1026'. [ 131.017257][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1027'. [ 131.282121][ T9344] net_ratelimit: 12 callbacks suppressed [ 131.282147][ T9344] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 131.307661][ T9345] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1032'. [ 131.324249][ T9346] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1032'. [ 131.338245][ T9344] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 131.354044][ T9345] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 131.544965][ T9335] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1030'. [ 131.561184][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'. [ 131.715450][ T9360] netlink: 'syz.1.1037': attribute type 2 has an invalid length. [ 131.817346][ T9363] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.876426][ T9363] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.884411][ T9363] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 131.897409][ T9363] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 132.125971][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 132.234556][ T9390] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 132.381560][ T9398] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 132.400378][ T9400] netlink: 'syz.1.1048': attribute type 10 has an invalid length. [ 132.508565][ T9400] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 132.537652][ T9400] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 132.585469][ T9400] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 132.621955][ T9400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.628976][ T9400] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 132.650152][ T9400] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 132.701812][ T973] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 132.730459][ T9400] syz.1.1048 (9400) used greatest stack depth: 18480 bytes left [ 133.072112][ T52] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 133.243973][ T9446] netlink: 'syz.2.1064': attribute type 4 has an invalid length. [ 133.635316][ T9489] xt_TCPMSS: Only works on TCP SYN packets [ 133.824353][ T9502] netlink: 'syz.4.1081': attribute type 11 has an invalid length. [ 133.925639][ T9509] IPVS: length: 255 != 24 [ 134.042614][ T9509] veth0: entered promiscuous mode [ 134.059818][ T9509] lo: entered promiscuous mode [ 134.499288][ T9549] netlink: 'syz.1.1096': attribute type 13 has an invalid length. [ 134.674001][ T9504] lo: left promiscuous mode [ 134.689265][ T9504] veth0: left promiscuous mode [ 134.787138][ T9572] hsr0: entered promiscuous mode [ 135.143560][ T9594] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 135.427080][ T9613] netlink: 'syz.0.1121': attribute type 5 has an invalid length. [ 135.902743][ T9650] tipc: Enabling of bearer rejected, failed to enable media [ 135.917265][ T9652] tipc: Enabling of bearer rejected, failed to enable media [ 136.557678][ T9679] __nla_validate_parse: 35 callbacks suppressed [ 136.557700][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1142'. [ 136.576986][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1142'. [ 136.641566][ T9683] netlink: 'syz.0.1141': attribute type 4 has an invalid length. [ 136.677701][ T9687] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1144'. [ 136.694990][ T52] net_ratelimit: 8 callbacks suppressed [ 136.695009][ T52] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 136.944601][ T9708] openvswitch: netlink: nsh attr 8192 is out of range max 3 [ 136.952241][ T9708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.059399][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'. [ 137.089645][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'. [ 137.130867][ T9722] netlink: 'syz.0.1154': attribute type 14 has an invalid length. [ 137.140775][ T9722] netlink: 'syz.0.1154': attribute type 13 has an invalid length. [ 137.193432][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1156'. [ 137.205891][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 137.259116][ T52] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 137.309651][ T9735] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1159'. [ 137.379973][ T9741] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1160'. [ 137.588573][ T9762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1163'. [ 137.702197][ T9767] macsec0: entered promiscuous mode [ 137.801109][ T62] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 137.824448][ T9772] nbd: couldn't find device at index -1 [ 137.850022][ T9777] netlink: 'syz.1.1170': attribute type 1 has an invalid length. [ 137.898575][ T9780] delete_channel: no stack [ 138.343890][ T1161] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 138.895236][ T3590] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 139.084997][ T9846] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 139.292939][ T9854] IPv4: Oversized IP packet from 172.20.20.24 [ 139.301493][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 139.576702][ T9869] bridge_slave_1: left allmulticast mode [ 139.581761][ T9868] sctp: [Deprecated]: syz.4.1202 (pid 9868) Use of int in max_burst socket option. [ 139.581761][ T9868] Use struct sctp_assoc_value instead [ 139.598577][ T9869] bridge_slave_1: left promiscuous mode [ 139.618887][ T9869] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.723114][ T9869] bridge_slave_0: left allmulticast mode [ 139.728828][ T9869] bridge_slave_0: left promiscuous mode [ 139.737902][ T9869] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.528094][ T9931] SET target dimension over the limit! [ 140.617538][ T9936] netlink: 'syz.1.1219': attribute type 2 has an invalid length. [ 140.628435][ T9936] netlink: 'syz.1.1219': attribute type 4 has an invalid length. [ 140.637112][ T9937] netlink: 'syz.1.1219': attribute type 4 has an invalid length. [ 140.699432][ T9940] syzkaller0: entered allmulticast mode [ 140.726487][ T9940] syzkaller0 (unregistering): left allmulticast mode [ 141.196874][ T9963] xt_CT: No such helper "netbios-ns" [ 141.289025][ T9975] netlink: 'syz.4.1231': attribute type 4 has an invalid length. [ 141.772684][ T5847] Bluetooth: hci4: link tx timeout [ 141.778363][ T5847] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.008008][ T62] net_ratelimit: 7 callbacks suppressed [ 142.008028][ T62] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 142.431121][T10043] ip6t_REJECT: ECHOREPLY is not supported [ 142.584604][ T11] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 142.667802][T10056] __nla_validate_parse: 19 callbacks suppressed [ 142.667820][T10056] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1253'. [ 142.881724][T10076] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1261'. [ 142.932162][T10083] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1261'. [ 143.084618][ T9] IPVS: starting estimator thread 0... [ 143.098311][T10094] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1265'. [ 143.142629][ T11] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 143.159756][T10099] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1267'. [ 143.182417][T10096] IPVS: using max 27 ests per chain, 64800 per kthread [ 143.209267][T10099] netlink: zone id is out of range [ 143.224568][T10102] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1270'. [ 143.231630][T10099] netlink: zone id is out of range [ 143.238095][T10102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 143.266494][T10099] netlink: get zone limit has 8 unknown bytes [ 143.281719][T10103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1267'. [ 143.350153][T10117] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1271'. [ 143.459189][T10122] tipc: Started in network mode [ 143.483601][T10122] tipc: Node identity ac1414aa, cluster identity 4711 [ 143.505488][T10122] tipc: Enabled bearer , priority 10 [ 143.621639][T10139] xt_HMARK: proto mask must be zero with L3 mode [ 143.628695][T10139] netlink: 'syz.4.1277': attribute type 2 has an invalid length. [ 143.673816][T10143] veth1_to_hsr: entered promiscuous mode [ 143.685458][ T11] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 143.703029][T10143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1278'. [ 143.744641][T10143] veth1_to_hsr (unregistering): left promiscuous mode [ 143.784320][T10143] hsr_slave_1 (unregistering): left promiscuous mode [ 143.802091][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 144.092918][T10166] team0: No ports can be present during mode change [ 144.209411][ T1161] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 144.413496][T10183] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 144.502158][ T5913] tipc: Node number set to 2886997162 [ 144.754604][ T3590] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 144.945937][T10207] openvswitch: netlink: ERSPAN option length err (len 4096, max 255). [ 145.452202][T10251] bridge0: port 1(vlan2) entered disabled state [ 145.464463][ T973] IPVS: starting estimator thread 0... [ 145.479755][T10251] bridge0: left allmulticast mode [ 145.550773][T10255] IPVS: using max 26 ests per chain, 62400 per kthread [ 145.647121][T10264] netlink: 'syz.1.1317': attribute type 1 has an invalid length. [ 145.713151][T10264] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.786186][T10270] bond3: (slave veth3): Enslaving as an active interface with a down link [ 145.837572][T10275] netlink: 'syz.2.1320': attribute type 29 has an invalid length. [ 145.875964][T10264] bond3: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 145.925224][T10278] unsupported nla_type 40 [ 146.122757][T10275] netlink: 'syz.2.1320': attribute type 29 has an invalid length. [ 146.404919][T10298] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001 [ 146.433915][T10297] nftables ruleset with unbound chain [ 146.628591][T10306] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 146.647117][T10311] batadv0: entered promiscuous mode [ 146.655753][T10308] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 146.660795][T10311] batadv0: left promiscuous mode [ 147.165356][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.179655][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.354255][ T3590] net_ratelimit: 5 callbacks suppressed [ 147.354277][ T3590] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 147.922233][ T35] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 147.971946][T10374] __nla_validate_parse: 12 callbacks suppressed [ 147.971966][T10374] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1353'. [ 148.032929][T10381] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 148.196912][T10389] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1356'. [ 148.290737][T10392] netlink: 'syz.2.1357': attribute type 29 has an invalid length. [ 148.316707][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1354'. [ 148.332436][T10392] netlink: 'syz.2.1357': attribute type 9 has an invalid length. [ 148.340960][T10394] netlink: 'syz.2.1357': attribute type 29 has an invalid length. [ 148.356320][T10396] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1358'. [ 148.361031][T10392] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1357'. [ 148.395158][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1358'. [ 148.412773][T10392] netlink: 'syz.2.1357': attribute type 29 has an invalid length. [ 148.450772][ T35] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 148.521998][T10408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1359'. [ 148.542332][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 148.560251][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 148.571377][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 148.589841][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 148.597662][ T5838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 148.606995][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.811580][T10417] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1363'. [ 148.833147][T10418] wireguard: wg1: Could not create IPv4 socket [ 148.894216][T10422] geneve2: entered promiscuous mode [ 148.918943][T10422] geneve2: entered allmulticast mode [ 148.936340][T10423] can: request_module (can-proto-0) failed. [ 148.994820][ T11] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 149.166219][T10444] netlink: 'syz.3.1370': attribute type 29 has an invalid length. [ 149.262373][T10407] chnl_net:caif_netlink_parms(): no params data found [ 149.312290][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1371'. [ 149.466296][ T29] audit: type=1107 audit(1735122152.502:2): pid=10459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 149.470338][T10407] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.570212][T10407] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.577521][ T11] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 149.592903][T10407] bridge_slave_0: entered allmulticast mode [ 149.599995][T10407] bridge_slave_0: entered promiscuous mode [ 149.620739][T10462] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1375'. [ 149.719280][T10407] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.726861][T10407] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.735024][T10407] bridge_slave_1: entered allmulticast mode [ 149.742387][T10407] bridge_slave_1: entered promiscuous mode [ 149.765058][T10473] netlink: 'syz.2.1379': attribute type 32 has an invalid length. [ 149.782840][T10407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.795217][T10407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.865957][T10407] team0: Port device team_slave_0 added [ 149.875847][T10407] team0: Port device team_slave_1 added [ 149.999239][T10407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.022698][T10407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.075313][T10407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.087759][ T3590] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 150.096442][T10407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.118556][T10407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.149047][T10407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.227891][T10496] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20004 [ 150.239141][T10495] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20004 [ 150.387840][T10407] hsr_slave_0: entered promiscuous mode [ 150.431485][T10407] hsr_slave_1: entered promiscuous mode [ 150.437925][T10407] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.462304][T10407] Cannot create hsr debugfs directory [ 150.588118][T10517] vlan2: entered allmulticast mode [ 150.631185][ T3590] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 150.647139][T10526] netlink: 'syz.3.1397': attribute type 7 has an invalid length. [ 150.683140][ T5838] Bluetooth: hci2: command tx timeout [ 150.938943][T10545] xt_policy: output policy not valid in PREROUTING and INPUT [ 150.964016][T10407] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.040154][T10547] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 151.064074][T10547] team0: Port device batadv1 added [ 151.155768][T10407] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.175875][ T3590] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 151.335654][T10407] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.527788][T10407] team0: Port device netdevsim0 removed [ 151.539741][T10407] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.589325][T10582] (unnamed net_device) (uninitialized): (slave lo): Device is not bonding slave [ 151.599047][T10582] (unnamed net_device) (uninitialized): option active_slave: invalid value (lo) [ 151.646545][T10582] bridge0: port 3(syz_tun) entered disabled state [ 151.685616][T10582] syz_tun (unregistering): left allmulticast mode [ 151.697338][T10582] syz_tun (unregistering): left promiscuous mode [ 151.707014][ T52] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 151.707841][T10582] bridge0: port 3(syz_tun) entered disabled state [ 151.957705][T10407] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 151.985330][T10407] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 152.006182][T10407] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 152.037816][T10407] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 152.078366][T10611] veth0_to_hsr: invalid flags given to default FDB implementation [ 152.198528][T10407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.240096][T10407] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.262950][ T1161] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 152.286999][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.294225][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.343270][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.350385][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.668933][T10407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.762194][ T5838] Bluetooth: hci2: command tx timeout [ 152.772702][T10407] veth0_vlan: entered promiscuous mode [ 152.791157][ T52] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 152.813866][T10407] veth1_vlan: entered promiscuous mode [ 152.814527][T10641] netlink: 'syz.3.1425': attribute type 11 has an invalid length. [ 152.841955][T10407] veth0_macvtap: entered promiscuous mode [ 152.867049][T10407] veth1_macvtap: entered promiscuous mode [ 152.907767][T10407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.935866][T10407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.962566][T10407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.988262][T10407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.997478][T10650] delete_channel: no stack [ 153.013171][T10407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.026839][T10407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.039743][T10407] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.050742][T10407] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.059488][T10407] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.072343][T10407] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.236752][T10660] netlink: 'syz.3.1433': attribute type 1 has an invalid length. [ 153.312299][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.320311][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.361820][ T11] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 153.419192][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.437700][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.829268][T10687] syz_tun: entered promiscuous mode [ 153.836922][T10687] batadv_slave_0: entered promiscuous mode [ 153.899996][ T35] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 153.938568][T10689] __nla_validate_parse: 12 callbacks suppressed [ 153.938589][T10689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1443'. [ 153.984620][T10691] veth7: entered allmulticast mode [ 153.998269][T10691] vlan1: entered promiscuous mode [ 154.015454][T10691] vlan1: left promiscuous mode [ 154.016272][T10695] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1443'. [ 154.432398][ T62] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 154.433398][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1452'. [ 154.462635][T10713] netlink: 'syz.2.1452': attribute type 1 has an invalid length. [ 154.620862][T10724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1455'. [ 154.687629][T10724] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 154.886088][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.953530][T10737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1458'. [ 155.029158][ T3590] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 155.060952][T10740] openvswitch: netlink: Message has 1219 unknown bytes. [ 155.077903][T10740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.362959][T10757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1464'. [ 155.386171][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.396340][T10763] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1465'. [ 155.412752][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.422076][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.430002][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.439858][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.447990][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.579234][ T62] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 155.602600][T10766] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1467'. [ 155.656588][T10766] netem: invalid attributes len -24 [ 155.718710][T10766] netem: change failed [ 155.870536][T10758] chnl_net:caif_netlink_parms(): no params data found [ 156.008445][T10796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1472'. [ 156.029605][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'. [ 156.117957][T10801] xt_CT: No such helper "pptp" [ 156.159360][ T3590] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 156.203350][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.236777][T10808] ebt_limit: overflow, try lower: 570423552/2483027968 [ 156.292059][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.332322][T10758] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.361816][T10758] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.397844][T10758] bridge_slave_0: entered allmulticast mode [ 156.411908][T10758] bridge_slave_0: entered promiscuous mode [ 156.472004][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.517134][T10758] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.538480][T10758] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.550282][T10758] bridge_slave_1: entered allmulticast mode [ 156.566640][T10758] bridge_slave_1: entered promiscuous mode [ 156.698682][ T12] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 156.798174][T10758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.823672][T10758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.875842][T10758] team0: Port device team_slave_0 added [ 156.898101][T10758] team0: Port device team_slave_1 added [ 157.024946][T10758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.035674][T10758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.071289][T10758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.095446][T10758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.102811][T10758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.133237][T10758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.180217][ T52] bridge_slave_1: left allmulticast mode [ 157.191279][ T52] bridge_slave_1: left promiscuous mode [ 157.207840][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.246520][ T52] bridge_slave_0: left allmulticast mode [ 157.268369][ T52] bridge_slave_0: left promiscuous mode [ 157.278601][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.563416][ T5838] Bluetooth: hci2: command tx timeout [ 157.788705][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.800045][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.814027][ T52] bond0 (unregistering): Released all slaves [ 157.839042][T10871] netlink: 'syz.1.1492': attribute type 1 has an invalid length. [ 158.056512][T10874] xt_CT: No such helper "pptp" [ 158.177334][T10758] hsr_slave_0: entered promiscuous mode [ 158.193123][T10758] hsr_slave_1: entered promiscuous mode [ 158.207650][T10758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.224359][T10758] Cannot create hsr debugfs directory [ 158.278818][ T1161] net_ratelimit: 2 callbacks suppressed [ 158.278835][ T1161] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 158.794271][ T52] hsr_slave_0: left promiscuous mode [ 158.802267][ T35] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 158.844078][ T52] hsr_slave_1: left promiscuous mode [ 158.850346][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.860894][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.879418][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.906907][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.971573][ T52] veth1_macvtap: left promiscuous mode [ 158.977596][ T52] veth0_macvtap: left promiscuous mode [ 158.985337][ T52] veth1_vlan: left promiscuous mode [ 158.990976][ T52] veth0_vlan: left promiscuous mode [ 159.006902][T10936] netlink: 'syz.4.1510': attribute type 4 has an invalid length. [ 159.343980][ T12] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 159.476148][ T52] team0 (unregistering): Port device team_slave_1 removed [ 159.524869][ T52] team0 (unregistering): Port device team_slave_0 removed [ 159.642908][ T5847] Bluetooth: hci2: command tx timeout [ 159.865223][ T62] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 159.976639][T10921] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 160.143671][T10943] batman_adv: batadv0: Adding interface: dummy0 [ 160.150339][T10943] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.176993][T10943] batman_adv: batadv0: Interface activated: dummy0 [ 160.247275][T10951] __nla_validate_parse: 6 callbacks suppressed [ 160.247294][T10951] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1515'. [ 160.308897][T10955] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1514'. [ 160.411698][ T11] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 160.509160][T10964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1517'. [ 160.751179][T10969] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.803867][T10979] netlink: 'syz.4.1523': attribute type 10 has an invalid length. [ 160.839621][T10979] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 160.842542][T10981] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 160.924372][T10969] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.967905][ T12] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 160.968788][T10984] sctp: [Deprecated]: syz.4.1525 (pid 10984) Use of struct sctp_assoc_value in delayed_ack socket option. [ 160.968788][T10984] Use struct sctp_sack_info instead [ 160.999519][T10758] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 161.018640][T10758] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 161.109551][T10969] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.129375][T10758] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 161.139921][T10758] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 161.185835][T10969] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.415363][T10969] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.459343][T10969] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.497550][T10969] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.507720][ T3590] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 161.546891][T10969] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.580097][T10758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.637076][T10758] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.653937][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.661128][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.685014][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.692216][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.731230][ T5847] Bluetooth: hci2: command 0x040f tx timeout [ 161.790531][T11006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1531'. [ 161.853415][T11010] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1532'. [ 161.911151][T11009] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1532'. [ 162.066445][ T11] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 162.137646][T11029] tipc: Enabling of bearer rejected, failed to enable media [ 162.215041][T10758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.312096][T11040] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1541'. [ 162.331000][T11040] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1541'. [ 162.402073][T11046] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1541'. [ 162.423633][T11046] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1541'. [ 162.522237][T10758] veth0_vlan: entered promiscuous mode [ 162.558297][T10758] veth1_vlan: entered promiscuous mode [ 162.610780][T11056] netlink: 'syz.3.1547': attribute type 1 has an invalid length. [ 162.618638][T11056] nbd: couldn't find a device at index 20 [ 162.682509][T10758] veth0_macvtap: entered promiscuous mode [ 162.710021][T11056] geneve3: entered promiscuous mode [ 162.718349][T11056] geneve3: entered allmulticast mode [ 162.749043][T10758] veth1_macvtap: entered promiscuous mode [ 162.812738][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.824949][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.873385][T10758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.913889][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.933584][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.950015][T10758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.986084][T10758] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.995723][T10758] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.009884][T10758] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.030391][T10758] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.213474][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.223034][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.295958][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.323665][T11090] netlink: 'syz.3.1557': attribute type 1 has an invalid length. [ 163.331188][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.442082][T11090] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.475005][T11092] bond2: (slave gretap3): making interface the new active one [ 163.509671][T11092] bond2: (slave gretap3): Enslaving as an active interface with an up link [ 163.632169][ T52] net_ratelimit: 4 callbacks suppressed [ 163.632187][ T52] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 163.707297][T11113] lo speed is unknown, defaulting to 1000 [ 163.715627][T11113] lo speed is unknown, defaulting to 1000 [ 163.722677][T11113] lo speed is unknown, defaulting to 1000 [ 163.733180][T11113] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 163.749009][T11113] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 163.749193][T11115] pimreg: entered allmulticast mode [ 163.779398][T11113] lo speed is unknown, defaulting to 1000 [ 163.787638][T11113] lo speed is unknown, defaulting to 1000 [ 163.794666][T11113] lo speed is unknown, defaulting to 1000 [ 163.803899][T11113] lo speed is unknown, defaulting to 1000 [ 163.811041][T11113] lo speed is unknown, defaulting to 1000 [ 163.820052][T11113] lo speed is unknown, defaulting to 1000 [ 164.074839][T11137] netlink: 'syz.4.1571': attribute type 2 has an invalid length. [ 164.093234][T11137] netlink: 'syz.4.1571': attribute type 8 has an invalid length. [ 164.196561][ T35] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 164.385050][T11160] veth0_vlan: entered allmulticast mode [ 164.525748][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.599194][T11165] ªªªªªª: renamed from vlan0 [ 164.683355][T11172] netlink: 'syz.3.1580': attribute type 7 has an invalid length. [ 164.764295][ T35] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 164.795009][T11179] netlink: 'syz.3.1580': attribute type 10 has an invalid length. [ 164.968326][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 164.985088][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 164.994203][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.012635][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.020361][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 165.028240][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.278811][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.355602][ T1161] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 165.359253][T11208] __nla_validate_parse: 12 callbacks suppressed [ 165.359274][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1585'. [ 165.600184][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.645945][T11188] lo speed is unknown, defaulting to 1000 [ 165.784246][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.852423][T11232] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1590'. [ 165.889501][T11232] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1590'. [ 165.910318][T11228] veth0_to_hsr: entered promiscuous mode [ 165.923498][ T1161] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 166.131565][T11228] hsr_slave_0 (unregistering): left promiscuous mode [ 166.211902][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1595'. [ 166.285738][ T11] wlan1: Trigger new scan to find an IBSS to join [ 166.461524][ T11] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 166.496890][T11188] chnl_net:caif_netlink_parms(): no params data found [ 166.515996][ T62] bridge_slave_1: left allmulticast mode [ 166.532443][ T62] bridge_slave_1: left promiscuous mode [ 166.541438][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.584155][T11271] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1597'. [ 166.597503][ T62] bridge_slave_0: left allmulticast mode [ 166.621177][ T62] bridge_slave_0: left promiscuous mode [ 166.626950][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.682834][T11281] netlink: 'syz.4.1600': attribute type 1 has an invalid length. [ 166.707135][T11283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1597'. [ 166.824169][T11285] IPVS: ip_vs_add_dest(): server weight less than zero [ 166.846335][T11285] netlink: 'syz.4.1600': attribute type 10 has an invalid length. [ 167.014896][ T3590] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 167.072883][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.087516][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.098162][ T62] bond0 (unregistering): Released all slaves [ 167.110448][T11266] pim6reg: entered allmulticast mode [ 167.161408][ T5838] Bluetooth: hci2: command tx timeout [ 167.215720][T11285] team0: Device veth0_macvtap failed to register rx_handler [ 167.546420][ T52] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 167.705100][T11318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1612'. [ 167.752045][T11324] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1613'. [ 167.762549][T11324] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1613'. [ 167.776485][T11188] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.784555][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.792237][T11188] bridge_slave_0: entered allmulticast mode [ 167.798603][T11324] netlink: 'syz.4.1613': attribute type 6 has an invalid length. [ 167.810006][T11188] bridge_slave_0: entered promiscuous mode [ 167.818956][T11324] netlink: 'syz.4.1613': attribute type 5 has an invalid length. [ 167.827638][T11324] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1613'. [ 167.847918][T11188] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.855767][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.868204][T11188] bridge_slave_1: entered allmulticast mode [ 167.879149][T11188] bridge_slave_1: entered promiscuous mode [ 168.006953][T11335] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 168.022061][T11188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.045666][T11188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.104305][ T11] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 168.207591][ T62] hsr_slave_0: left promiscuous mode [ 168.214292][ T62] hsr_slave_1: left promiscuous mode [ 168.226072][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.234401][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.242284][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.249859][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.276779][ T62] veth1_macvtap: left promiscuous mode [ 168.283283][ T62] veth0_macvtap: left promiscuous mode [ 168.288993][ T62] veth1_vlan: left promiscuous mode [ 168.294415][ T62] veth0_vlan: left promiscuous mode [ 168.614534][T11360] netlink: 'syz.3.1621': attribute type 1 has an invalid length. [ 168.651661][ T52] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 168.905490][ T62] team0 (unregistering): Port device team_slave_1 removed [ 168.956744][ T62] team0 (unregistering): Port device team_slave_0 removed [ 169.181691][ T11] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 169.250932][ T5838] Bluetooth: hci2: command tx timeout [ 169.323898][ T11] wlan1: Trigger new scan to find an IBSS to join [ 169.474005][T11341] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 169.544022][T11360] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 169.624833][T11188] team0: Port device team_slave_0 added [ 169.652761][T11188] team0: Port device team_slave_1 added [ 169.704660][ T12] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 169.762128][T11367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.822814][T11188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.829904][T11188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.856765][T11188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.884323][T11188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.887501][T11367] netlink: 'syz.2.1624': attribute type 62 has an invalid length. [ 169.891944][T11188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.022306][T11188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.189115][T11188] hsr_slave_0: entered promiscuous mode [ 170.211571][T11188] hsr_slave_1: entered promiscuous mode [ 170.218144][T11188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.245230][ T3467] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 170.259770][T11188] Cannot create hsr debugfs directory [ 170.504925][T11414] IPVS: length: 255 != 24 [ 170.510236][T11414] __nla_validate_parse: 9 callbacks suppressed [ 170.510249][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1634'. [ 170.787074][T11424] netlink: 'syz.2.1636': attribute type 2 has an invalid length. [ 170.811924][ T12] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 170.929576][T11428] netlink: 'syz.2.1639': attribute type 21 has an invalid length. [ 170.938215][T11428] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1639'. [ 171.262336][T11188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 171.303559][T11188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 171.320740][ T5838] Bluetooth: hci2: command tx timeout [ 171.353091][T11188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 171.367644][ T3590] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 171.411430][ T62] wlan1: Creating new IBSS network, BSSID 4a:7a:9b:40:56:7f [ 171.444031][T11188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 171.510375][T11458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1649'. [ 171.531305][T11459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1649'. [ 171.634477][T11188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.665278][T11464] netlink: 'syz.2.1651': attribute type 1 has an invalid length. [ 171.676242][T11188] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.681291][T11464] netlink: 'syz.2.1651': attribute type 3 has an invalid length. [ 171.696844][T11464] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1651'. [ 171.716361][T11464] NCSI netlink: No device for ifindex 813332851 [ 171.723120][ T3590] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.730313][ T3590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.754198][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.761414][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.864530][T11188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.900990][T11469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1652'. [ 171.917651][ T3590] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 171.922147][T11469] netlink: 'syz.3.1652': attribute type 3 has an invalid length. [ 172.111663][T11483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1656'. [ 172.246991][T11188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.406646][T11188] veth0_vlan: entered promiscuous mode [ 172.440281][T11188] veth1_vlan: entered promiscuous mode [ 172.455271][ T3590] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 172.538550][T11188] veth0_macvtap: entered promiscuous mode [ 172.555927][T11188] veth1_macvtap: entered promiscuous mode [ 172.601271][T11188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.631574][T11188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.653878][T11188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.686586][T11188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.721170][T11188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.742235][T11188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.757052][T11188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.780726][T11188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.801552][T11188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.810311][T11188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.002161][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.010301][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.067521][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.077968][ T62] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 173.111086][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.155802][T11509] netlink: 'syz.4.1664': attribute type 9 has an invalid length. [ 173.308331][T11507] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1665'. [ 173.340818][T11507] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1665'. [ 173.401882][ T5838] Bluetooth: hci2: command tx timeout [ 173.488287][T11518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1665'. [ 173.643873][T11532] gretap0: entered promiscuous mode [ 173.666368][T11532] gretap0: left promiscuous mode [ 173.718696][T11536] netlink: 'syz.4.1671': attribute type 32 has an invalid length. [ 174.158814][ T62] net_ratelimit: 3 callbacks suppressed [ 174.158837][ T62] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 174.449017][T11579] netlink: 'syz.3.1684': attribute type 1 has an invalid length. [ 174.621445][T11592] sctp: [Deprecated]: syz.2.1690 (pid 11592) Use of int in max_burst socket option. [ 174.621445][T11592] Use struct sctp_assoc_value instead [ 174.649193][T11592] tipc: Trying to set illegal importance in message [ 174.669614][T11598] netlink: 'syz.4.1692': attribute type 1 has an invalid length. [ 174.694266][ T12] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 174.737556][T11598] 8021q: adding VLAN 0 to HW filter on device bond4 [ 175.006733][T11621] team0: Cannot enslave team device to itself [ 175.255817][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.271837][ T12] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 175.777958][T11641] __nla_validate_parse: 15 callbacks suppressed [ 175.777982][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1702'. [ 175.800553][ T3590] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 175.860191][T11641] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1702'. [ 175.881244][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1702'. [ 175.937989][T11641] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 175.953974][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.963995][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.974567][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.981991][T11638] netlink: 'syz.2.1703': attribute type 10 has an invalid length. [ 175.983778][T11638] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.018742][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 176.023392][T11638] bond0: (slave team0): Enslaving as an active interface with an up link [ 176.044222][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 176.056669][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 176.117148][T11651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1706'. [ 176.164213][T11651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1706'. [ 176.261831][T11657] netlink: 'syz.2.1709': attribute type 29 has an invalid length. [ 176.298647][T11647] lo speed is unknown, defaulting to 1000 [ 176.332905][T11669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1710'. [ 176.342587][ T52] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 176.381559][T11672] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1711'. [ 176.407043][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.458251][T11674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1712'. [ 176.568201][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.648448][T11687] netlink: 'syz.3.1714': attribute type 29 has an invalid length. [ 176.731465][T11694] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1715'. [ 176.733595][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.757781][T11694] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1715'. [ 176.783607][T11692] netlink: 'syz.3.1714': attribute type 29 has an invalid length. [ 176.805219][T11687] netlink: 'syz.3.1714': attribute type 29 has an invalid length. [ 176.890432][ T11] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 176.993850][T11706] netlink: 'syz.4.1720': attribute type 1 has an invalid length. [ 177.025274][ T35] bridge_slave_1: left allmulticast mode [ 177.031567][ T35] bridge_slave_1: left promiscuous mode [ 177.037594][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.050092][ T35] bridge_slave_0: left allmulticast mode [ 177.057068][ T35] bridge_slave_0: left promiscuous mode [ 177.064645][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.147812][T11720] netlink: 'syz.1.1721': attribute type 2 has an invalid length. [ 177.398446][T11723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.491990][ T62] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 177.735756][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.747284][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.758324][ T35] bond0 (unregistering): Released all slaves [ 177.768538][T11706] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 177.955138][T11647] chnl_net:caif_netlink_parms(): no params data found [ 178.012885][T11739] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.013724][ T12] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 178.132242][ T5838] Bluetooth: hci2: command tx timeout [ 178.514424][T11647] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.548877][T11647] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.572318][T11647] bridge_slave_0: entered allmulticast mode [ 178.578738][T11766] netlink: 'syz.2.1733': attribute type 10 has an invalid length. [ 178.598877][ T62] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 178.622773][T11647] bridge_slave_0: entered promiscuous mode [ 178.661155][T11647] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.693549][T11647] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.716406][T11647] bridge_slave_1: entered allmulticast mode [ 178.762718][T11647] bridge_slave_1: entered promiscuous mode [ 178.881764][ T35] hsr_slave_0: left promiscuous mode [ 178.899737][ T35] hsr_slave_1: left promiscuous mode [ 178.925628][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.953660][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.976219][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.005924][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.075509][ T35] veth1_macvtap: left promiscuous mode [ 179.087355][ T35] veth0_macvtap: left promiscuous mode [ 179.099391][ T35] veth1_vlan: left promiscuous mode [ 179.110815][ T35] veth0_vlan: left promiscuous mode [ 179.174595][ T52] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 179.689032][ T35] team0 (unregistering): Port device team_slave_1 removed [ 179.696788][ T12] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 179.752290][ T35] team0 (unregistering): Port device team_slave_0 removed [ 180.211190][ T5838] Bluetooth: hci2: command tx timeout [ 180.231409][ T1037] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 180.253077][T11647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.307469][T11647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.588801][T11831] netlink: 'syz.3.1748': attribute type 11 has an invalid length. [ 180.657755][T11647] team0: Port device team_slave_0 added [ 180.679877][T11837] openvswitch: netlink: IP tunnel dst address not specified [ 180.717398][T11647] team0: Port device team_slave_1 added [ 180.762815][ T62] batman_adv: batadv0: Local translation table size (76) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 180.793128][T11839] ax25_connect(): syz.4.1753 uses autobind, please contact jreuter@yaina.de [ 180.940545][T11837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.957288][T11837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.972549][T11837] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 180.995751][T11837] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 181.014343][T11837] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 181.029690][T11837] bond0 (unregistering): Released all slaves [ 181.186625][ T1037] smc: removing ib device syz1 [ 181.375395][T11850] __nla_validate_parse: 12 callbacks suppressed [ 181.375418][T11850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1757'. [ 181.421031][T11850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1757'. [ 181.534884][ T9] ================================================================== [ 181.542991][ T9] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 181.551798][ T9] Read of size 8 at addr ffff88802fa222e8 by task kworker/0:1/9 [ 181.559457][ T9] [ 181.561793][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 181.572719][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 181.583118][ T9] Workqueue: events smc_ib_port_event_work [ 181.588930][ T9] Call Trace: [ 181.592201][ T9] [ 181.595123][ T9] dump_stack_lvl+0x241/0x360 [ 181.599796][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.604995][ T9] ? __pfx__printk+0x10/0x10 [ 181.609579][ T9] ? _printk+0xd5/0x120 [ 181.613727][ T9] ? __virt_addr_valid+0x183/0x530 [ 181.618836][ T9] ? __virt_addr_valid+0x183/0x530 [ 181.623953][ T9] print_report+0x169/0x550 [ 181.628454][ T9] ? __virt_addr_valid+0x183/0x530 [ 181.633556][ T9] ? __virt_addr_valid+0x183/0x530 [ 181.638660][ T9] ? __virt_addr_valid+0x45f/0x530 [ 181.643798][ T9] ? __phys_addr+0xba/0x170 [ 181.648296][ T9] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 181.654292][ T9] kasan_report+0x143/0x180 [ 181.658794][ T9] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 181.664779][ T9] __ethtool_get_link_ksettings+0x6e/0x190 [ 181.670582][ T9] ib_get_eth_speed+0x160/0x800 [ 181.675435][ T9] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 181.680829][ T9] ? rxe_query_port+0x4f/0x260 [ 181.685585][ T9] rxe_query_port+0x76/0x260 [ 181.690171][ T9] ib_query_port+0x166/0x7d0 [ 181.694758][ T9] smc_ib_port_event_work+0x14e/0xa50 [ 181.700127][ T9] ? process_scheduled_works+0x976/0x1840 [ 181.705842][ T9] process_scheduled_works+0xa66/0x1840 [ 181.711387][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 181.717365][ T9] ? assign_work+0x364/0x3d0 [ 181.721944][ T9] worker_thread+0x870/0xd30 [ 181.726560][ T9] ? __kthread_parkme+0x169/0x1d0 [ 181.731576][ T9] ? __pfx_worker_thread+0x10/0x10 [ 181.736683][ T9] kthread+0x2f0/0x390 [ 181.740752][ T9] ? __pfx_worker_thread+0x10/0x10 [ 181.745953][ T9] ? __pfx_kthread+0x10/0x10 [ 181.750539][ T9] ret_from_fork+0x4b/0x80 [ 181.754953][ T9] ? __pfx_kthread+0x10/0x10 [ 181.759538][ T9] ret_from_fork_asm+0x1a/0x30 [ 181.764299][ T9] [ 181.767315][ T9] [ 181.769624][ T9] Allocated by task 5831: [ 181.773939][ T9] kasan_save_track+0x3f/0x80 [ 181.778714][ T9] __kasan_kmalloc+0x98/0xb0 [ 181.783295][ T9] __kmalloc_node_noprof+0x290/0x4d0 [ 181.788664][ T9] __kvmalloc_node_noprof+0x72/0x190 [ 181.793949][ T9] alloc_netdev_mqs+0xa4/0x1080 [ 181.798883][ T9] rtnl_create_link+0x2f9/0xc20 [ 181.803734][ T9] rtnl_newlink_create+0x210/0xa40 [ 181.808845][ T9] rtnl_newlink+0x1c7e/0x2210 [ 181.813514][ T9] rtnetlink_rcv_msg+0x791/0xcf0 [ 181.818530][ T9] netlink_rcv_skb+0x1e3/0x430 [ 181.823284][ T9] netlink_unicast+0x7f6/0x990 [ 181.828045][ T9] netlink_sendmsg+0x8e4/0xcb0 [ 181.832799][ T9] __sock_sendmsg+0x221/0x270 [ 181.837476][ T9] __sys_sendto+0x363/0x4c0 [ 181.841972][ T9] __x64_sys_sendto+0xde/0x100 [ 181.846862][ T9] do_syscall_64+0xf3/0x230 [ 181.851379][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.857305][ T9] [ 181.859626][ T9] Freed by task 11834: [ 181.863684][ T9] kasan_save_track+0x3f/0x80 [ 181.868386][ T9] kasan_save_free_info+0x40/0x50 [ 181.873448][ T9] __kasan_slab_free+0x59/0x70 [ 181.878509][ T9] kfree+0x196/0x430 [ 181.882589][ T9] device_release+0x99/0x1c0 [ 181.887198][ T9] kobject_put+0x22f/0x480 [ 181.891721][ T9] netdev_run_todo+0xe79/0x1000 [ 181.897027][ T9] rtnl_dellink+0x760/0x8d0 [ 181.901722][ T9] rtnetlink_rcv_msg+0x791/0xcf0 [ 181.906659][ T9] netlink_rcv_skb+0x1e3/0x430 [ 181.911529][ T9] netlink_unicast+0x7f6/0x990 [ 181.916392][ T9] netlink_sendmsg+0x8e4/0xcb0 [ 181.921168][ T9] __sock_sendmsg+0x221/0x270 [ 181.925935][ T9] ____sys_sendmsg+0x52a/0x7e0 [ 181.930777][ T9] __sys_sendmsg+0x269/0x350 [ 181.935386][ T9] do_syscall_64+0xf3/0x230 [ 181.940039][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.946037][ T9] [ 181.948377][ T9] The buggy address belongs to the object at ffff88802fa22000 [ 181.948377][ T9] which belongs to the cache kmalloc-cg-4k of size 4096 [ 181.962748][ T9] The buggy address is located 744 bytes inside of [ 181.962748][ T9] freed 4096-byte region [ffff88802fa22000, ffff88802fa23000) [ 181.976659][ T9] [ 181.978992][ T9] The buggy address belongs to the physical page: [ 181.985490][ T9] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802fa20000 pfn:0x2fa20 [ 181.995554][ T9] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 182.004142][ T9] memcg:ffff8880337f2841 [ 182.008477][ T9] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 182.016992][ T9] page_type: f5(slab) [ 182.020970][ T9] raw: 00fff00000000240 ffff88801ac4f500 ffffea0000c05010 ffffea000119d410 [ 182.029554][ T9] raw: ffff88802fa20000 0000000000040003 00000001f5000000 ffff8880337f2841 [ 182.038330][ T9] head: 00fff00000000240 ffff88801ac4f500 ffffea0000c05010 ffffea000119d410 [ 182.047005][ T9] head: ffff88802fa20000 0000000000040003 00000001f5000000 ffff8880337f2841 [ 182.055673][ T9] head: 00fff00000000003 ffffea0000be8801 ffffffffffffffff 0000000000000000 [ 182.064344][ T9] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 182.073006][ T9] page dumped because: kasan: bad access detected [ 182.079423][ T9] page_owner tracks the page as allocated [ 182.085130][ T9] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5830, tgid 5830 (syz-executor), ts 61966507627, free_ts 61949056141 [ 182.106600][ T9] post_alloc_hook+0x1f3/0x230 [ 182.111460][ T9] get_page_from_freelist+0x365c/0x37a0 [ 182.116998][ T9] __alloc_pages_noprof+0x292/0x710 [ 182.122194][ T9] alloc_pages_mpol_noprof+0x3e8/0x680 [ 182.127739][ T9] alloc_slab_page+0x6a/0x110 [ 182.132413][ T9] allocate_slab+0x5a/0x2b0 [ 182.136912][ T9] ___slab_alloc+0xc27/0x14a0 [ 182.141590][ T9] __slab_alloc+0x58/0xa0 [ 182.145941][ T9] __kmalloc_noprof+0x2e6/0x4c0 [ 182.150796][ T9] __register_sysctl_table+0xd4/0x1430 [ 182.156274][ T9] __addrconf_sysctl_register+0x234/0x3a0 [ 182.162105][ T9] addrconf_sysctl_register+0x167/0x1c0 [ 182.167643][ T9] ipv6_add_dev+0xcf6/0x1220 [ 182.172448][ T9] addrconf_notify+0x6a7/0x1020 [ 182.177392][ T9] notifier_call_chain+0x1a5/0x3f0 [ 182.182522][ T9] register_netdevice+0x167f/0x1b00 [ 182.187813][ T9] page last free pid 5840 tgid 5840 stack trace: [ 182.194132][ T9] free_unref_page+0xd3f/0x1010 [ 182.199006][ T9] __put_partials+0x160/0x1c0 [ 182.203731][ T9] put_cpu_partial+0x17c/0x250 [ 182.208505][ T9] __slab_free+0x290/0x380 [ 182.212921][ T9] qlist_free_all+0x9a/0x140 [ 182.217521][ T9] kasan_quarantine_reduce+0x14f/0x170 [ 182.223013][ T9] __kasan_slab_alloc+0x23/0x80 [ 182.228023][ T9] __kmalloc_cache_noprof+0x1d9/0x390 [ 182.233527][ T9] kset_create_and_add+0x5b/0x170 [ 182.238848][ T9] netdev_register_kobject+0x181/0x2e0 [ 182.244331][ T9] register_netdevice+0x12c5/0x1b00 [ 182.249524][ T9] virt_wifi_newlink+0x3ba/0x7c0 [ 182.254451][ T9] rtnl_newlink_create+0x2ee/0xa40 [ 182.259557][ T9] rtnl_newlink+0x1c7e/0x2210 [ 182.264231][ T9] rtnetlink_rcv_msg+0x791/0xcf0 [ 182.269162][ T9] netlink_rcv_skb+0x1e3/0x430 [ 182.273918][ T9] [ 182.276231][ T9] Memory state around the buggy address: [ 182.281846][ T9] ffff88802fa22180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 182.289903][ T9] ffff88802fa22200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 182.298065][ T9] >ffff88802fa22280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 182.306466][ T9] ^ [ 182.313944][ T9] ffff88802fa22300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 182.322018][ T9] ffff88802fa22380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 182.330074][ T9] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 182.350704][ T5838] Bluetooth: hci2: command tx timeout [ 182.359236][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 182.366547][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 182.377116][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 182.387281][ T9] Workqueue: events smc_ib_port_event_work [ 182.393136][ T9] Call Trace: [ 182.396429][ T9] [ 182.399375][ T9] dump_stack_lvl+0x241/0x360 [ 182.404095][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.409320][ T9] ? __pfx__printk+0x10/0x10 [ 182.413944][ T9] ? preempt_schedule+0xe1/0xf0 [ 182.418828][ T9] ? vscnprintf+0x5d/0x90 [ 182.423179][ T9] panic+0x349/0x880 [ 182.427097][ T9] ? check_panic_on_warn+0x21/0xb0 [ 182.432217][ T9] ? __pfx_panic+0x10/0x10 [ 182.436663][ T9] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 182.442643][ T9] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 182.448972][ T9] ? print_report+0x502/0x550 [ 182.453677][ T9] check_panic_on_warn+0x86/0xb0 [ 182.458633][ T9] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 182.464643][ T9] end_report+0x77/0x160 [ 182.468895][ T9] kasan_report+0x154/0x180 [ 182.473410][ T9] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 182.479398][ T9] __ethtool_get_link_ksettings+0x6e/0x190 [ 182.485202][ T9] ib_get_eth_speed+0x160/0x800 [ 182.490071][ T9] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 182.495534][ T9] ? rxe_query_port+0x4f/0x260 [ 182.500297][ T9] rxe_query_port+0x76/0x260 [ 182.504972][ T9] ib_query_port+0x166/0x7d0 [ 182.509825][ T9] smc_ib_port_event_work+0x14e/0xa50 [ 182.515926][ T9] ? process_scheduled_works+0x976/0x1840 [ 182.521841][ T9] process_scheduled_works+0xa66/0x1840 [ 182.527484][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 182.533645][ T9] ? assign_work+0x364/0x3d0 [ 182.538880][ T9] worker_thread+0x870/0xd30 [ 182.543994][ T9] ? __kthread_parkme+0x169/0x1d0 [ 182.549131][ T9] ? __pfx_worker_thread+0x10/0x10 [ 182.554291][ T9] kthread+0x2f0/0x390 [ 182.558368][ T9] ? __pfx_worker_thread+0x10/0x10 [ 182.563481][ T9] ? __pfx_kthread+0x10/0x10 [ 182.568156][ T9] ret_from_fork+0x4b/0x80 [ 182.572568][ T9] ? __pfx_kthread+0x10/0x10 [ 182.577166][ T9] ret_from_fork_asm+0x1a/0x30 [ 182.581937][ T9] [ 182.585217][ T9] Kernel Offset: disabled [ 182.589542][ T9] Rebooting in 86400 seconds..