last executing test programs: 7.521066144s ago: executing program 4 (id=1726): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x8000) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, 0x0, 0x0, 0x24000045) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="450a000000000065ee7d7c4d05000000000095000000000044bf178d70459c8464778dff81ad62c064c14a8767e242bb989ebb501a602d3c4ddb4f5262a91b1979d6731328aa65ce02139358e8aafd49a395982e7fe42bd399b5829ef8c10d783ebcc5b4b461ec3629919687f19d494ee6b46551f99c2b705dcd3ab78d9bc176a3ed73dd6167b1fd2b2ad62fc091d69a1390cb46bcc9d042a5f29e3ee3610a791881f453e4650fad7e83e300f852b535635887cba3173d777a1800413720dfa295a65031765f2d04f553bcc40b9b56b5d4c48c66394002f8da6e3741ef12b60419f1bb028de8148428840ce38c50fcb32275ce987fad1e1570"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)}, 0xfffffffffffffd67) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x1}) r5 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000580)={0x6, 'veth0_to_team\x00', {}, 0x5}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)}, 0x100) connect$packet(r6, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) shutdown(r6, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000140)={0x0, 'veth0_vlan\x00', {0x4}, 0xfff7}) write$tun(0xffffffffffffffff, &(0x7f00000006c0)={@val={0x0, 0x88f7}, @val={0x2, 0x0, 0x4, 0x10, 0xa1, 0xff}, @x25={0x1, 0x0, 0xdb, "d4c955a52598a4a2d7b5c94a3a135de1a09efb35a632f43b20aef4cb57d22a8ec62dbb1af0d1afb1d2fcc8428fd2ac2076431670844961a92df7551649d89bc09c09ad7f4b7d163969ac1cf0"}}, 0x5d) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', <r9=>0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000ffdbdf251800000008000300", @ANYRES32=r9, @ANYBLOB="0800308004000180cc1c9b2fd81825db9b1b362e8f07ca7d4cf738a3904219f980421c5ab9db277de7f56a8d112cbf6b9771375b620feab527d0d68170d43850cd8d9ccd36fe9c9bd35f599e7404121d7f250ba854a69a71a9305635670c97730075f2eaebce4f0785f5fdbcb678bb63f3fe5587e339ac7cb1728dfdbeaae8bbaf99a5614c7ac97ec407b8648a4e22ab5b58a976e2d7910c368ffcc16149496662f0e17e001099d0ccd7b13aead0aa488548919a4ba89f62e9af0906cef895b2"], 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x810) socket$nl_netfilter(0x10, 0x3, 0xc) 7.208295723s ago: executing program 3 (id=1729): socket(0x11, 0x800000003, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x558, 0x0, 0x0, 0x1a8, 0x3d8, 0x1a8, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz1\x00'}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={{0x40}}, @common=@ah={{0x30}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000090000008500000087000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000000000000000000000000000071122a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40084}], 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000001c0)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x17, 0x13, &(0x7f0000000640)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x0, 0x9, 0x1, 0x4, 0x100, 0x4}], &(0x7f0000000700)='GPL\x00', 0x9, 0xf1, &(0x7f0000000740)=""/241, 0x40f00, 0xb, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0x8, 0x46}, 0x10, 0x0, r6, 0x0, &(0x7f0000000b00)=[0xffffffffffffffff], &(0x7f0000000b40), 0x10, 0x2, @void, @value}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@nested={0x4, 0x4}]}, 0x18}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000600)=0x681, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r9=>0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r9, 0x2, 0x6}, 0x10) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 6.463534769s ago: executing program 4 (id=1734): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xcc15, @dev, 0x7}, 0x1c) close(r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), 0xffffffffffffffff) r1 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061107800765a6d"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe9, @void, @value}, 0x94) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffcebfff, 0x1000, 0xffffffff, 0x1}, 0x20) socket$inet6(0xa, 0x80000, 0x80000002) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x89fd, &(0x7f0000000040)={'bond0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200)=0x10001, 0x12) sendfile(r4, r3, 0x0, 0xf03a0005) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x20000}, {{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000800)=[{&(0x7f00000003c0)=""/84, 0x54}, {&(0x7f0000000780)=""/122, 0x7a}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/207, 0xcf}, {0x0}, {&(0x7f0000001b80)=""/196, 0xc4}], 0x7, &(0x7f0000000980)=""/153, 0x99}, 0x7}], 0x2, 0x12141, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214001b00171b3f00"], 0x58}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r9, &(0x7f00000000c0), 0x9) sendfile(r9, r8, 0x0, 0x10000) 6.031295122s ago: executing program 1 (id=1735): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x2d}, 0x1}], 0x3, 0x2000, 0x0) recvmmsg(r2, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001440)=""/149, 0x95}, {&(0x7f0000001340)=""/62, 0x3e}], 0x3}, 0x5}], 0x1, 0x100, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) 6.011161684s ago: executing program 3 (id=1737): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x8000, @mcast2, 0x2}], 0x1c) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$alg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002740)=ANY=[@ANYBLOB="2400000014005fc37c2abd7000fbdbdf2510010e000000c000550dc419290b3f4e000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040) r6 = socket(0x2b, 0x1, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20049801) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) openat$cgroup_freezer_state(r1, &(0x7f0000000100), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) bind$ax25(r8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.07754496s ago: executing program 1 (id=1739): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) accept4(r0, 0x0, 0x0, 0x80000) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$kcm(r7, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r7) sendmsg$nl_route(r2, 0x0, 0x0) 5.02554104s ago: executing program 0 (id=1740): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) accept4(r0, 0x0, 0x0, 0x80000) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$kcm(0xa, 0x1, 0x106) r8 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r8) sendmsg$kcm(r7, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r7) sendmsg$nl_route(r2, 0x0, 0x0) 4.930204756s ago: executing program 4 (id=1741): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x7c2) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1f, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r5, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044884) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r6, 0x891d, 0x0) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) 4.856526738s ago: executing program 3 (id=1742): socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x1e, 0x805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 4.820927561s ago: executing program 1 (id=1743): r0 = socket(0x11, 0x4, 0x9) getsockopt$bt_BT_SECURITY(r0, 0x107, 0x11, 0x0, 0x20000002) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001aa80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='memory.events.local\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000203000000000000000000000d00000000000000000000000a020000000000000000000003000000000300000003"], &(0x7f0000000140)=""/240, 0x56, 0xf0, 0x1, 0x0, 0x0, @void, @value}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000100003eeffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="0001000020010000300012800b0001006d61637365630000200002800c0004000400000100c28000050003000e"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x8000, 0x700, 0x9, 0x0, {{0x11, 0x4, 0x2, 0x2b, 0x44, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @broadcast, {[@noop, @rr={0x7, 0xb, 0x7d, [@empty, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x24, 0x38, 0x3, 0x8, [{@broadcast, 0x6d}, {@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@rand_addr=0x64010100, 0x9}]}]}}}}}) r5 = socket$inet6(0xa, 0x80003, 0xff) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r6, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$ax25(r7, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @default, @bcast, @rose, @remote, @null, @bcast, @netrom]}, &(0x7f0000000140)=0x48, 0x0) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000040), 0xfffffceb) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 4.67876071s ago: executing program 4 (id=1744): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvfrom$netrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x7) sendto$inet6(r2, 0x0, 0x0, 0x24000000, &(0x7f00000000c0)={0xa, 0x1, 0x3088, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000280)={0x3, 0x107, 0x7, 0x3, 0xfa, 0x4}, 0xc) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000100)=0x24, 0x2) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, 0x0, &(0x7f0000000180)) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/106, 0x6a}], 0x1}, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, r2, 0x8871b000) socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000080)=0xafee60a, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x937, @ipv4={'\x00', '\xff\xff', @local}, 0x7f}, 0x1c) 4.499837468s ago: executing program 3 (id=1746): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x9}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r3=>0x0}) r4 = socket(0x10, 0x80002, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0xc) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) close(r7) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @loopback}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0xffffffffffff0000}}]}, &(0x7f00000002c0)=0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000003d0007010000000000050000047c000008004580040008801c00018008000300ffffffff"], 0x28}}, 0x4040040) 4.431062907s ago: executing program 0 (id=1747): r0 = socket(0x2a, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x0, 0x0, 0x2, 0x11, 0x15be, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) shutdown(r2, 0x0) write(r2, 0x0, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x80000002, 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@deltaction={0x14, 0x31, 0x300, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x8004) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=@acquire={0x1ac, 0x17, 0x301, 0x0, 0x0, {{@in=@broadcast}, @in6=@remote, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1}, {{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x84, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x6c}, 0x2, @in=@empty}]}]}, 0x1ac}}, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x8) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x6, 0x3, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4004) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x20000400) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001500)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x2}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0xfff3}}, @TCA_U32_SEL={0x34, 0x5, {0xb, 0x0, 0x2, 0xffff, 0xfffc, 0x8, 0x1, 0x6, [{0xff, 0x40, 0x6, 0x9}, {0x6, 0x6, 0x1, 0xfffffff7}]}}]}}]}, 0x6c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r9, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x2d, 'freezer'}, {0x2b, 'rdma'}, {0x2b, 'rdma'}, {0x2d, 'net'}, {0x2b, 'net_prio'}, {0x2d, 'memory'}, {0x2d, 'perf_event'}, {0x2d, 'freezer'}, {0x2d, 'rdma'}]}, 0x47) 4.380302686s ago: executing program 4 (id=1748): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x88942, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906f42f5b5aaf47d2752a8b23954f309cae13ef250cf76775ddfd153eef2b1a8458a3cb6dc764f19b41c8c61c7305a51a4bfa0c897c7c1f438a851222a5560c0e77b0b5934296bc6f28af87d651f7348a2ba2ca67f930cc655afe0220cbeb79a2a87bba6be2de3e756e674c405bcc51843b4cc75ff7ec38a34d1a2a61f0a1223e69484b5d922b5590758c33317df18c401ff910f9b3f0eaef8b9d928392097a025b0459", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000840)) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000280)="625e4bc431896083fd715a3aff81dfb42f9ba756d3baf3c2929f1bb273fa59db3aed7f332b5c816216ed4310cd1ef491f527f60401b75e4905f4dc5da655fdc315", 0xffffffffffffff3c, 0x24824, 0x0, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) write$ppp(r0, &(0x7f0000000300)="4daf8a728e", 0x5) r4 = accept4$ax25(r3, &(0x7f0000000140)={{0x3, @rose}, [@rose, @default, @bcast, @bcast, @null, @bcast, @default, @netrom]}, &(0x7f00000004c0)=0x48, 0x0) ioctl$SIOCAX25OPTRT(r4, 0x89e7, &(0x7f0000000240)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, 0x44}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000440200180022000dc87373d4b8b194460f9f08002c000000010004001400"], 0x44}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800001202000000fe0d6c92e318aa9795f7fa645b21e4df4f381ce41a259ea3eb091bf514613f6d1b4013111fb3a9f0dcde8c14d971a624fb1b8327ef5fb783b186490e1ad6057ef696ee983a235b883bd22e9c55d92f3e555276c5b82f83fdfadf3e95e1e2e60ddfe24185f25bde195385bb6627698bc1b5a3da9858644d23b05de3725fe24233e030370307e9e78a88149d47f40dbc73fea06ef8ac320de3720311b4b5044c1f520c2dbdfbf33786e252670f3649f384960a1c36f4b8ecb0d1"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000, @void, @value}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.123647059s ago: executing program 2 (id=1749): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x2d}, 0x1}], 0x3, 0x2000, 0x0) recvmmsg(r2, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001440)=""/149, 0x95}, {&(0x7f0000001340)=""/62, 0x3e}], 0x3}, 0x5}], 0x1, 0x100, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) 4.030249127s ago: executing program 3 (id=1750): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010828bd70000000000000004c00", @ANYRES32=0x0, @ANYBLOB="210800000000000008001b"], 0x44}, 0x1, 0xffffa888, 0x0, 0x48000}, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000040)={'security\x00', 0x0, [0x81, 0x4000105, 0x9, 0x8001, 0x9]}, &(0x7f0000000400)=0x54) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f00000000c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) socket$l2tp6(0xa, 0x2, 0x73) 3.487080299s ago: executing program 1 (id=1751): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffe, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}, 0x1, 0x8000000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd0}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r4}, &(0x7f0000000a00), &(0x7f0000000a40)=r3}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003700010324bd700279dbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000a80)='mm_page_free_batched\x00', r8}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x5bf5, 0x0, r7, 0xc199, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@cgroup=r6, 0x16, 0x0, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r9=>0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@cgroup=r7, r5, 0x33, 0x0, r5, @void, @value=r8, @void, @void, r9}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r10, 0xe0, &(0x7f0000000480)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r11}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@cgroup=r3, 0xffffffffffffffff, 0x10, 0x9, r3, @void, @value=r2, @void, @void, r9}, 0x20) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r13=>0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r13, 0x800, 0x55007}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x6}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x80) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x8001}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x84}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@ifindex=r13, r1, 0x33, 0x2014, 0x0, @value, @void, @void, @void, r9}, 0x20) 3.332333619s ago: executing program 0 (id=1752): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', <r2=>0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0xa0}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x4, 0x71, 0x10, 0x60}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e8ffffffffffffff00"/28], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r8, 0x0, 0x29, 0x0, &(0x7f0000002700)="035a95e24550e0748674a95588a8144686ddb5465cfcc1f50f4ba186629ce21d3227eda80395b46a6c", 0x0, 0x800009, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7}) write$bt_hci(r10, &(0x7f0000000080)=ANY=[], 0x6) setsockopt$inet6_opts(r9, 0x29, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="000a0000000000000730000000000a000000000000000000000000000000000001000000000000000000000000000000000000000000000000000720000000000600000000000000000000000000000000000000fe"], 0x60) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r11, &(0x7f0000000240)={0xa, 0x4e23, 0x7f, @local, 0x3}, 0x1c) r12 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r12, &(0x7f0000000180)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYBLOB="4800d600", @ANYBLOB="850d64ae3c766e3ba1a466139aa0903db2a666faf6c4b4ea49baf88d08e431afa8f96170137711b63462", @ANYRES32=0x0, @ANYBLOB="440000001000030500"/20, @ANYRES32=r2, @ANYRES32=r2, @ANYRES16=0x0], 0x44}}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r13) 3.068583847s ago: executing program 2 (id=1753): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) accept4(r0, 0x0, 0x0, 0x80000) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$kcm(r7, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r7) sendmsg$nl_route(r2, 0x0, 0x0) 2.944123492s ago: executing program 1 (id=1754): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x72bd27, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}}, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x74158f401ef165a4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006772653000000000000000000000000034001a80100002800c000180030000000000000020000a80"], 0x68}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffff}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xd66}}) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000007823400018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f6ffffffb702000008000000b7030000ffffff9085000000100000c59500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfe7, &(0x7f0000001e00)=""/4071, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @mcast2={0xff, 0x5}}}) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2], 0x0) 2.872165889s ago: executing program 0 (id=1755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/424]}, 0x220) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x3, 0x800000, @mcast1={0xff, 0x4}, 0x1}, 0x1c) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) unshare(0x62040200) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000280)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r9, 0x29, 0x41, &(0x7f0000000680)={'filter\x00', 0x2, [{}, {}]}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xaf}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000001940)=""/4102, 0x1006}, {&(0x7f0000000100)=""/74, 0x4a}, {&(0x7f00000004c0)=""/6, 0x6}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x6}, 0x5}], 0x4, 0x20, 0x0) 2.865475208s ago: executing program 2 (id=1756): socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket(0x1e, 0x805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 2.704266703s ago: executing program 4 (id=1757): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000a00)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a30000000007c000000060a010400000000000000000100000008000b400000000054000480400001800e000100696d6d6564696174650000002c0002800800014002000000040002801c0002801800028008000180fffffffc0900020073797a3000000000100001800a0001006c696d69740000000900010073797a30"], 0xf0}}, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x609, 0x4, 0x0, &(0x7f0000000140)="dd800000", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000380), &(0x7f00000004c0)='%pS \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) epoll_create1(0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @empty}, 0x1c) recvmmsg(r6, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000680)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x200020000a84, 0xffffffffffffffff, 0x70000002, 0x200002b0, 0x200000200002e0, 0x3], 0x2, 0x0, &(0x7f0000000e40)=ANY=[@ANYRESHEX=r1, @ANYRES64=r4, @ANYBLOB="7e064b47af15a5cbdd4462a408023b2999022bd525f59335a95c7ad08c5d86a42a6a5b8ef6a1275e57ea8381eed4735d284cbb612346a93e46403f494b54f95acd3b91448758f5554c468550bef0e9bd5bff79da70da0ff08f5bc20d9d45844a983fddd7bceb55c4464409a3c10fee019d793acf336138da3ffbfac21dc25e4cfebe5bf3c1609af19aa99ebc2d1115"]}, 0x121) close(r0) socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000100)=""/113, 0x71}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f000000000000000000000000000039d1c723d667ee8b42bce1f54f75594182"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.51647523s ago: executing program 2 (id=1758): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvfrom$netrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x7) sendto$inet6(r2, 0x0, 0x0, 0x24000000, &(0x7f00000000c0)={0xa, 0x1, 0x3088, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000280)={0x3, 0x107, 0x7, 0x3, 0xfa, 0x4}, 0xc) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000100)=0x24, 0x2) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, 0x0, &(0x7f0000000180)) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/106, 0x6a}], 0x1}, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, r2, 0x8871b000) socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000080)=0xafee60a, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x937, @ipv4={'\x00', '\xff\xff', @local}, 0x7f}, 0x1c) 2.417818478s ago: executing program 1 (id=1759): r0 = socket$xdp(0x2c, 0x3, 0x0) unshare(0xc040480) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) unshare(0x42000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r4, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x2c}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x6, [@ptr={0xb}, @const={0xf, 0x0, 0x0, 0xa, 0x4}, @enum={0xa, 0x5, 0x0, 0x6, 0x4, [{0xa, 0x4}, {0xb, 0x3}, {0xa}, {0xe}, {0xf, 0x2}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x10, 0x3}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x5, 0x1}, {0x4}, {0xffffffff, 0x5}, {}, {0xe, 0x204}]}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000180), 0xb2, 0x0, 0x0, 0x7, 0x0, @void, @value}, 0x28) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540)={0x0, <r8=>0x0}, &(0x7f0000000580)=0xc) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=@expire={0x1e8, 0x18, 0x300, 0x70bd29, 0x25dfdbff, {{{@in6=@private1, @in6=@empty, 0x4e23, 0x22, 0x4e21, 0x8, 0x2, 0x80, 0x20, 0x2e, r1, r8}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x5, 0xa, 0x6, 0x80, 0xb924, 0x2, 0x5d03, 0x81}, {0x1, 0x2, 0x6, 0x2}, {0x80000001, 0x1, 0x3}, 0x70bd25, 0x3505, 0x2, 0x1c017c891ce4ce4c, 0x3, 0x26}, 0x6}, [@algo_auth={0xce, 0x1, {{'wp384-generic\x00'}, 0x430, "39d4545198bdb02c127f6cbe5e6abd15d4cbcec7cad9ba0862767cb941e075695a3992fc772e1f6c4e056ef8879f9d104826863b9faebc9059f413ca14489b440578b94a44d2854c2d4bda8b61d502d75bcb5803f814d0e97bba7dceff750e272ee29a05017b9856b9908d58d970e0a660a0f4140be1b8070caeeb211eb1d67fb4320365f5cf"}}, @offload={0xc, 0x1c, {r1, 0x2}}, @coaddr={0x14, 0xe, @in6=@private1}]}, 0x1e8}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r6}, 0x8) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', r1, r6, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x93, 0x8}, 0xc) r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r4, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_SSID={0x12, 0x34, @random="f74a8ddd6d334b3a2a9743fc0f0b"}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8001) bind$llc(r12, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000000), 0xffffff6a) sendfile(r12, r13, 0x0, 0xffffffff000) 2.145109386s ago: executing program 2 (id=1760): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x2d}, 0x1}], 0x3, 0x2000, 0x0) recvmmsg(r2, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001440)=""/149, 0x95}, {&(0x7f0000001340)=""/62, 0x3e}], 0x3}, 0x5}], 0x1, 0x100, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001380), 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000013c0)={0x0, @aes256, 0x0, @desc1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000400)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x44000) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 808.621201ms ago: executing program 0 (id=1761): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f000000b800)=ANY=[@ANYBLOB="00020201"], 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000069000010000000000100000018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000108fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="fe000000000000001c00240017d7d613b0fae72cff49034379c9505aa32c8ac1d0b990c508001b0000000000"], 0x44}}, 0x14) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) bind$netlink(r3, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0x200}, 0x31) socket$kcm(0x11, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000300)={'veth1_vlan', 0x32, 0x30}, 0xd) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="c00100001300000226bd7000fcdbdf25fc010000000000000080000000000001fe8000000000000000000000000000414e2200004e2300090a0080003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="07000000000000000b00000000000000060000000000000007000000000000000002000000000000730000000000000000040000000000000b00000000000000000001000000000003000000000000000100000000000000090000000000000061000000b46b6e00000001010000000014000e0000000000000000000000000000000000080016000004000008000c0003000000e40006007f000001000000000000000000000000ac14143d0000000000000000000000004e2200654e2100000800", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d3ff0000002001000000000000000000000000000101000000010000000d00000000000000e8050000000000000000000000000000060000000000000001000000000000006a0f000000000000040000000000000005000000000000005a21000000000000020000000000000009000000000000000500000003000000ff01000026bd7000063500000a0004c22900000000000000"], 0x1c0}}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r1, 0x89a3, &(0x7f0000000200)='bridge0\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) 808.287728ms ago: executing program 2 (id=1762): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], &(0x7f0000000080)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000003c0)=0x5, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xd}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}, @IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x50}}, 0x0) unshare(0xc000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x0, 0x0}, 0x10) 274.53907ms ago: executing program 3 (id=1763): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000440)='sched_switch\x00', r0}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x4, 0x4, 0x38e38e3, 0x1, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000000000002004e210a0101000000000000000000000000000000ece5dae0371b8066e0000000000000000000000101000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002004e22ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a35300000000000000000000000002004e22e00000020000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000007780000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000004000000000"], 0x190) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x4, 0x81, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x0, @fixed, 0x3ff}, 0xe) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@remote, @empty, 0x0, "e798888beab1af341dbec4427a73b0fbda814c5f5cd6f92215f46e0b091038f9", 0x0, 0x8000}, 0x3c) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f00000001c0)=0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x27fd}, 0x8) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r6, 0x11, 0xa, 0x0, &(0x7f00000000c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000002fc0)={'ip6tnl0\x00', &(0x7f0000002f40)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x40, 0x5, 0x69, @mcast2, @loopback, 0x1, 0x40, 0xe1, 0x9}}) sendmmsg$inet6(r6, &(0x7f0000005940)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x80000000, @local, 0x4}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000800)}, {&(0x7f0000000340)="fa5c317ba1ea34091de809a182bea040eae14157ada3cc3f8a43", 0x1a}, {0x0}, {&(0x7f0000000900)="7dd668dcb801bc5f9cb57fed22796cb95956ee054e50b54760e8f8588f00c899bbfec9ea4841e71f9bb811e5205c7256ec1df158abade7bf2a7007053068e5d8cb80f8e2e68604b6032731f048352360da9c4f0a04f7bcdae9b606e35edab3a6616ab678beb4d3af7eaea2ac7023236e8a4ee3dc1ccd52818b32edfe818771e2ce86800d61036a94f85318cd12de58baae9ca5a39d4239a5bb25ace26846c42766b109787a0f426bcb119dc3daca0ce3951a0af6e8058edecb1c73e54ebc0081c6f9d4de67505b35f3954d930cd216d2c380bd5ad727c2b63c782c35e63ff0e7ce19f694a9097c8181a3fa0205a98c38c09b383e800b84a24c357fb704a1869414caef3139010ddc22add75c7bcb96efa8a4def251066dbbd6ce82219215534977ba0f2770fb3291734788d9e224d0a284926b25f2f7cb631213e6916e59aedeff732387125e4034ba861bda8f13a46455064bd84303b489f95dfbe6af87a3df043d529810b78769015c2c654be6596472b36f53a976a2d4f4c662519d4688f8b0f314e62483cdd6005bbf2c36bb1261a68d77b399ceabab5d54c9a23d549d720b32027959302679111df4c1fc63a3f5a2079c3e8297f84b0c4ed03d03c5ac4d3a43bdd636734967095e3b4cef6167c51a3c698b10c93f6f4b891531d410a32b7b7e36dccc4fd76c771c3025f3cd1965c110cbefb152f83264814711f0bf0a58938de698e85847bfd2878c0ea7c080978c30b2afa851ee2a0091538dc9bd82c0278a8fe53a6911639adbe9694877deef697c8400f419dafd790395d6c7c3734821a1b82535a7dbe21c65471c06abff5f37cb2652d3b1130b5cb0d4739e2edc213abee304da0063513f784b1d601b41fc35f243a0e8c6fee751fab4bc66148014623b9eb89490953d8c06ac83ad109c7415a14cbf930b42f7460861f0941b93dde19e705d399e84aed28e4411d760b5780e5b3c0670150b102f1700529baf0a045f59805bf2564776faaffa40602733369c1d1fd9a489f4d599f75cbdd36144364c9b49cb8f7a5e38c2635727102cca52c82021d31f06f5929224fe996bb7f48016cb8946fff3bdc344024422dcfda2a0729d83cf9e763712dc456cdbcaa7424691600e1a000387e1c04d246060e0904641e4e5670cfd204edbc710cfa8395ead085f102e09719b5ca073059b8053fc33e459df3930ba4a28179b1c4cbd8d40132927fc5f53e18d36b9340d4f3e341d85c519b0340a48bb391fc19add33b465b8b7441ab39c1b57722ed9d397e036b604a7cd6190af60f3a85173971adc5cee9ce839285e1ed43ffd7e62e2f0033880e9e42d77b460ee287d0cce75f4997b3fb9b660f34dbdf87f0d6c5c7d4c39f5147cb7ceac2ad1952a3c3d5d009786e920e42ab003435d715ff43059239278e6c2eac4c34ee3993a26bb8d8b06957cad9fd585ca997a03468006af86e5fbfd0ead9787b3090bdef73fca11143f48e8884bdce42f74ba42e8de417118915c3c326d5d82faec1fe33f73d26bd57ff870040c0bc477c1b2b7e369976b0cec049dc29e1fbdd44fc18001a400dde884f65b8bac8fc0caf2c792777a1cafa4a9c40c3d25cc43dbd7a5b1420c8ec70cc2d60cc1f5451055feeb9e1cab5614082be35412a3ce343b440fcd7718d075c4b09b5b537ed7a55ff397378a43100d988f9ec6dcbb26670e8cfc0f32df9cae52d5811edf59bba7c73152b4c33f68f657ecd510da7875acf901db13bcdfd1072119e360b90a76b8558641ba67d2b742e9e0ada7235d35857670974f9f68a6fc9149b8ae0bc3a489342188821ee8f949d19dddf63126ad31c1d10a900f56b01eafd980ab07120cf0080efc61266d39790b54a0701bbfe7f90309184336bd7838cdd565be8168b9f8cbc57b9a42783535c3fd8f253a56d42be54ae1b8ac75fbbb69a558bc9242b5eb461b4eb53ec5e802220b60f4fd2c1e2c4499913ec98a56611c7f746b4f84b62d52f5d7a93824ccdcec6d22b79d07362af5bd0be8be6b871e25d8d41cb3c0ac2e45694e8069d3b9447b6031ef578762318599235281b25bac2ae44d2b07efe44e646edfde9d6899d0bba114b63c651fd557fc3c9a6ffd5e2a9034208a76932fb9c7ad9df66b2f0eabdbb9f91a17beb1441ae636a1ae10232ada04bd0996bf456fadd48f6b8e9de708df824cf12ff4a8d200e88276aa9cf5c7bfc6365936ebdc0e240f8f020f1cc30c9cfc1276bf84cadb9d32e0918b62ab9679a3db899000e998fd466689a22aedd15c604d4b816b2c7d46af5fb5c0fe05c13b58793dc410db9fc5604e2839b32582a165a2676929ca69f452fa45f408d6fd416bf3e940da104ea0fedb791c0afb6ef279bca6d8ac06b11972d9171c0a90a25be4dd26c3a8cbadeca774ee5256d6940a297697bbd37d817d07ea4f2469b0a2c872bbbc9be6482d244d2b9bcc9d62ff55eef18a51d333c025091f22ea2c30a69292aed6ab817574d3439a5946c61167557489322d45c76bfed67b140f3ba4d35b77144d99ef641037b21ec1e5bf1ebcba78cb99c4bc2754fbaae4c14b2b4b39de60a12c4beb9b6f03539d45b513924cb394d611d1ab98d50f00224ce1e124e5257f5ccb80363d2062deed486443a49577274afee7c6856009949606f248277f1b140f590f25f4619ecf317d9eb947d75f194eab6372419d70cff05d7fe9d2d55b2211aa7a751ad277f0b320b32e82e252e2db0fa827d41357b94211369543c94458373d0f92a5d277940c1c905240539feb0a187d97d4b1f8cd6021644e12403963e508d971bec49ccbbc28140d6cd3ad2966b9e9b9138dc6b58bf52523ff7f7eca5a410e070086b6fdb35746b6081c13b4494bdde2ab6a32df2b58c4cee437402a913df3da730cd44c57e4e7c97f20338d666bd5fc21e9aa5b04a074406b49a107a4d289a90b8bc3db88822ae4fb06dbf216dd916ac0f36b40ed0c42143d2381d31e4ca401655f83acf78e7bf08c009e1f9a738a317a570798809c58886d7e9a3430e1be2d353335990025a3d951070267053f4db7f7f54a2045dc1a9381069d96738496408065adffd1007a42f66ed16d98d02e4550b70558813f835ec4fb852d6b6b0f92c0d15abd42e53c24669f2a91a3b8a93c0fec81d64acc1a95137bac1929cf285937991246f699d48ad0b3a5dcca4f32a4dab2179711b131eb0aae3ea112a693f908b48ba12fa8ff2192f1f83b7132ed15b91af89014cf62d6586400f0db0cf4a98f9712a6ce7eaf9a62ee60b6c14d10715bf014bf9c7c4e986c4892ef4902521d294537d5f6d03ed640c1389292f5a6bc693095e3fd72ae5a8a8e9889c8c25f06df9436069933d2547b93970a064c926c6c6335fec107ca20c3e877b26d3363ee42b2092559655b764428f765cef59de58131dd1a5a4b50ee122f67a394512ae927fb49e766fbeface0349b74a744302e158f66d04cb3e29f281bee2d3919066b65b395f2a0e68228f43c22d02c523295f2ca66f0c4342d63a481b339ebb3de9e9eaebbb354e986626d7395fac48c4169f7a76903a47583a65f2cd5b68644c44c7752a2cab7c5dfb3cd5c901ab0bbce670d5f6dceb3663d42ead64a2f7880c493e830af04aca421a22af84f0b0858a4c85b876573c733ccc1db9c5246bf9bbece35f8bcd0e8b089ba6c1a72f9a833bc65aaeffbc2ca1cf43d55be8b92d4a1fda7421f2d493a4429b6769d42e1d5a6a40b711173625e5e01b78bbcbd2948f926057941b08de3a9d04a40f775de1e422f84d8ed0d0dc5cda6c6bfe62f9c38589fa871450c669c85304bf5ee227e8125bbebdd933c36f4a90f2cd06108bac14c46958e993c5d5ec7a46e9fc63b88a1c34b81c36d4b168ff86ef0a68e7153b1eb7f67c827636616670d7f6ba6e9b978386bd693e9cf018f6e7d08690b09087f5bccc2cfa4a73b031eb87914309a6e87b58915037caa240a3b23a4af538afb85c04e8f39671db0b3ef8aa4e21468eee822bcd47f6a07f9d1c63a351ed61178da31b2db626dce5b0d9cbd9d7580781c95f13f99804d8fcd82199b9468aabb85a03b2cc41a36912a6bca3d862f4dfafdc5c2b6b7c13aaf42189c1b811b778e1eeec95034a283b842e00ef964a6ec727e76586a82f58d014c0931423c92d3e6bfe0705f58c90fc203de04a4e688f779c192de1408d907280ad84bdfbada8d78eb41e12c9b801399d66ac7fd8bbf686c0e0753b8b2f9c497fe6428e868571779a8bb04b28d33cd92a57cea6fb3199ef33f494fd00199a642beb2665520afd34a7d0aa32293d2dcd036fc7e1b5d3c0480b14daf8ae2523674f3efe6bde094035dd4878e21efc8996f4a0a8d6318e0d124b74eb75540599f58e1e4e1532e25964e53a1c7c05a823a1d5be35828a8a8b3d1d6051c9ba983cb7072d190421cca4b37ff605a3eb6eb2317479261cd69f0f9c46c416fa3392487044490a80d275d797d737d89559ee7703f5be63a3e46796b8297779291abbb08f77f75adcfd400f83331193426a07ab25de9fc92ecae5705cd8ef29cd60a48c5d18d1fd341faa5148a4d628f8557280750624f010255581d6f4d92e5ec9dadf476f8346c7e89477c91b4082e5931f4a9517aa73572285fcdf597ebeb888a7a40db587322b12e99483a2c97e8f84246a50cde43e2b24b0ed151cca3c68eff260e13c5df0babebbe45bf41fd9445187c8e93d2bb93555da7d08bfe98d20fe45c14b0fe43797e0aa65125d6a2ce1f1d68bd066e49f260bed50f50c68c0d9d5344523bacca606091b3b2bc5131d2df6b4d2a0674918909574c64babeb5e96f413296482282b6067cbd7bf54a2c8ffedca14137b8331b4cef3cc56766953a5ed409ee6a1022216f5c1c8be45dc8296ef3198a64041b324a45557914c92358cea7ed0a7fe00398265559128a6dca1f60f041d9ef3d585d5970479f114f0f19464792d74969ff6b831dcde73b5e17e2198f21653656062ed02476bafb070c72b04fbff5f55aacea7205fc458cd6074b4452993d44b95c17083a26120acc0bacf1d24a6eb0e429229d8cd886bd92add0620f13bfe57e8ddd976a532a53c795b6463edc148cf8faa3fbac74207947034a6042b1efb92ce9b22c97a89a916e2573d0b9c4aa7bb8d59f120f911f8c5b6aaea070301488372be5bd9d9633630a01bbb531a1c11ef55a4f6a9e5aa939414cd6d938dba2e053afe5cee74ee132430281d0587cfa231c99864a72858a19092e5595e10f264a4d684bc91810ee61e97a63d2f1bf89fc36945e4e15908c797523610fb9cb05511242d002174e1e7ecbdd6d598478451e80e66685b6eac5128ed964b82eb8d13330a33eb1fd88507eb2f1a98ed59819e4ab03d602d11da9eb153c33132a011ddef2ed9899c90ac9d47f72dd568d176bcb648c9e11ae4eb05f6d5c910419d99bd100e62b78f5a948d44f789a6e0f0389b819ea0c66dee7e5de5cf5eee83be72d8f342d6ccc5b796ab865338bd5db838c482c4f9be1c5dfe3c629571eb5165fd089be9b87ea21e1e3ec3021f9aec67f44da6743d6d17ce25675619e46d431bf3493da88afac116ee6a8d1145cbb354c8ca124cc2df0743973b7d412229f381583696c0efa451f81d551a516cba9d9334ad314aec8dc7ccbcd3f93bc59ce1f1cc5fd8dbf9eb59a794a4b2e5e93a3414f1327d4c8484dbf934369aa5adc4afbc6b0fe519b3355c17c522ca7c93738c11c22e15651139bce886cad46db5f9da75ffc1d00dd4e1b574a31720f6e0ada003480fde28a14edf2db94379e9ed3ce9767", 0x1000}], 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="14000000000000002900000008000000e5cb0000000000001400000000000000290000000b000000000000060000000088000000000000002900000039000000000e020900000000fe8000000000000000000000000000aa2001000000000000000000000000000100000000000000000000ffff6401010000000000000000000000000000000023fe88000000000000000000000000010100000000000000000000ffff0a010102ff020000000000000000000000000001280000000000000029000000370000005e0100000000000005020001040102000100000000000000140000000000000029000000430000000a00000000000000140000000000000029000000430000000600000000000000"], 0x110}}, {{&(0x7f0000001a80)={0xa, 0x4e23, 0x0, @remote, 0x80000000}, 0x1c, &(0x7f0000001e40)=[{&(0x7f0000001ac0)="0fcbe2dd48e2db63e3903b3f0b2109d63f0e31bc54b73cd9eebc82fffa6c6673b02ed7404f728a6fe13bbb58dc293c1044b38c980538cb7fe43067d7b997309ba0c5876b2c2a35c6f5e9cc97d8e5a5db4c955b5afd5e1847e766704aa11b2cacbcea5628aaad515c305c32b25e2c63ace4c3a696707dc4a50686923fb38d2b3c105a60150cf85846dd85878f8a469df91f60eed9d23fd190", 0x98}, {&(0x7f0000001b80)="a8101d66d1965b979894c066c1a959e5e3944a8c4e8684f8291ee2d03ec40fcf75d4b8697c937585b29d0605f5dae52cd343560624b836570c63da61c99b57109cde5a2ebd0b7cedee346e930b4b3e7dac73ac", 0x53}, {&(0x7f0000001c00)="859212f9ff", 0x5}, {&(0x7f0000001c40)="dfd58bea4d6138f15122f96d320826b7bea47cd5f439fbfef93a346c4fd7c6f542ebb92b3f52b5027dbb1ec824c6d6cbe848c92590768623a44aa475154408893babf7ed84a1f4c06d180b", 0x4b}, {&(0x7f0000001cc0)="05a90c6a0f589a9a8ecb634a4a5f56db911e0527b19d3b7226a6", 0x1a}, {&(0x7f0000001d00)="052a14bf14b92e5a5b88004cbe807905bbf156f31ef6dbd723c2e008194b4b08b7100b00eeb3497ba5bcacebef3e44a273f73167c6bec659c232b0a2d680f9946633f8e305bfc2f25a89c1aa4511ca1424866c9d6cfd8309edba52af5483b8a5deb03c7052eda0297b06", 0x6a}, {&(0x7f0000001e00)="0814ba758b79f14826513bcc850ce9aea8dd86c71c8d250c9083c8f73df593a344200614f2b8", 0x26}], 0x7}}, {{&(0x7f0000001ec0)={0xa, 0x4e20, 0x8, @local, 0xff}, 0x1c, &(0x7f0000002f00)=[{&(0x7f0000001f00)="5524931dc0e858a7d9946c4d20498e9822f079b8ef965c869a268f05e3f89ee98b5201a5e7b4febb9f71e0201cdeb27af185129434574bcfb57291781e81ccd877404939996df93667394afce0e61ea7622a0e920ff3f30fd604208f4488756b6118dbe45964e9a7f6617e4704df0c3a4f161355cd672078cce6380ba4e3b59ad65a85fe8b3e98c466771ef9ae6ac90f439c8da4155940fb1511fa29a77c77b1bf182bfedea8393557e187d29268b626ff51cc35e3eb6ebef1292b30e076a463b32b5d65573e87ae7075350f92a71d9eef2cda904074c1bb6eb6c7c2ef29568e23be218e5057381dfa1524bcb8ab0e9f2899540bbeff22ab451fa174fd497167485f9e04ce0e8f6df2ea19ccab4e76e5a4d043a79b58e0d2a356a7eec6eeb7b0c60ce3cacdb67353b68c2cb919a20c5718e5ad89a533737e35a52cd2770ffda955c9a8d4743c71971abd2aa2831f708022f3e605e5845c377b09ac422e47addd6ebced4042b2ca73086a6a5487278d342d537264a604a9fb720a8604b3a24b09bd5904cea77dbca33072c5e9471536a23affd68b262b4a3a76ce979e57ac730f3a4062f4499eab4cf38673b2604ecebf17cfb9266cf329150101df61e8f2d2a06612c82d31a281fdea99f4ad1cdff5ef4cd35c6d40102810de35b50ccd56ab3c7e20967ba8320340a29f5e23cdc313ed5f2751eaf3fac4cc4394b63b50e43e2c6338c581d5001a579d7a011ede2c904dede7c19aa0c253c5504c7a422e2b747ffa5e45cf208ca10623de232dfab09d608d4dd3ff57f2c304d67f846aafad4551781ef9a0424120f8851bd613f894f8056cc879b13c3090213ec0c240ccd707c5a4b610a7ee3d2c36cbe756cd8bbcdfd0cde874ddd79f396499986f4e4d251119862ff95919a4c0496c532ba2e2661d3d8ed0ed3825f34c7116c2eae36a14edaee384386ff91f62b174c1ca77857554d53a49d372e83cae81501415b83bd5ba30d8f3b4138a569b20767f48e440f42c22b67a679695511a4de323a49990d179cb4ad2d2e7acd8d48f88fd2f63779766efd90cc4acd5e82d19529cc806a04475d2068b2630922c301cadcb6648a3060b3d7d306ea86d44bf0b81c8abe294838f44784b4c18d82771c33b865b0ce94cca64abd5ef8643e2470fbdeba11356513fc11eaedc24578f0fbd1afb3c3c16bd4c6eebcd29b79f64ed6517278fd35c6afc41640acd47c0cb9e820c578c6e8f43bdac95e85dab00ce10d08d73d61dbc436da6dcb1b241934af2f0f1c65288f0597d29fe34b99e8d8d23f5ee9925a2b2e00f730637a46274978b672e40656e02db9410a1ca891ef45557ddbb2103f9bf3252c39127891524b2afb7ebbb699cdfc909e8834a575a1733510e2afc83fc868cfeea7cbb480f1352f54bbfa80cecaec674b4ca205ef912f6134b5d1f9b8610eaa6a0303c000e4a8034219fc64f28546e048da2c0b19224bc42311d8c2c4e3b76a77250465ea04aee41aaa57675c7c18972dc18d5b88c29013850f9f093286395894884425197b84722eaae1b0f6ed76a3f9ee87099cf1e1c5b5351d1378c2154e9afa6b04fffb8babc8ae019466e00edb8ea2825a46e0a1391efce8699bb9a04c2b70bdab77d38a1d534aeb0a0d1ce59a3faf4b0b00934574fc96f7631013636abf647f8d5fbe0ad85a911c5ac1e36abe57b3c80e9e09205b8c927f18132450aa039c6b271775b218b23c511ef8fb59f0220ab060560b45d17494f5b09b6c2f1e290177da370ffd77dbe61559f6662a3ca8cba69f36e035fc30c0eaa8c77009c7458380390571975a8880c279720fc65bfe0e903aee94af9018535b47e8afe0e9fdc8056d33be9bfddb9b065706d4367995decb7dcf4f1653c25ce4a0f05993b55bdafeabc6465fd91c14d28540abfc984635449ee2680e66075877722afb24d3d45290ea12cfc4f38081eb71adb932d9267e01458bc4378c63e528bfcdbf28f313135753e7d967cd6cc752a93820764686e8dfa60fb5f80b1921f50c4f7220d1ac1a9d1d5089944146ac5abb347bf82a597c371b07560cd139dd1a199098833ec4a850ac7a9ac3188c420b460107502b63521235e71466cf118969b2facd22345dfd25e4799aba74e0910a1e3fa10401ae1c5d01b30fe22cd6c5886f851467116d1c35fcc68058ec7f24c73188e5295ac1622c22185ad705263a90f2156534f2851087318d39cfab0ed409e515e5308f72226d8b1eb6f3acd07b63462f7fa4152151835c7ef46e7b1fccddb36becc0eef20dd0ee4cf5b7848eee0e9af64f56669b49f555739a6b507003cd6a0761eb7dadf06dba1c5e83e8055954b0655513a9fe2ad3eb4a3aa85226bb4c852bd65656c4906ed01677fcfccd0bd0852f61790adedb0de921942826a60ae2fbe9b6161ac033243a1f324f497663bfd38d59ba9324b47127069301d58f3b6171099f6411d15702a78d1bc3d20574aba6ffa1537bac210d9a196131ba0a0c9376cfe05751e3a9083677cf0fb71bd7f41a31a31bc3662da9bcbfcde83ccdf3105a42efd2ced5351ac405e6dbd57eee4cea65e98f3ce73c894397da739931775999fd7f55670d4570dd4cd31b444ff484a55144f36980ea0ca49b1c3ecf92e5d559bc49bc4cd0d7f0ca3ca4f09f3bfa65952365b406628236e66fd4403005516780aabc9b54653b74e3fa232a83b3db4bb609e85bd935b36da168a84c5f830bb06b849bdeb988b9a8932a609e6aaf1b5c4ceecf9ba221b34c352676510901af8111312c09cf40136", 0x7b1}], 0x1, &(0x7f0000003000)}}, {{&(0x7f0000004340)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c, &(0x7f0000004600)=[{&(0x7f0000004380)="958f617f069b7213dd3e324542f7b5eb0c1961d3379e8d20aa5a9aed8bafb00f03ad7cf5d2f0d67b48b5b68e281569a907a7075a9ab9d81b4ac416b3f33ca209e928580865a0213d06bc645d8b0ff854b52be600c3d81d629e7f24c031edf980d9efcd91fd7b59bcacd200984ea0fda8a3c84b8f38de13edd4e7fd25ee0cdb1d", 0x80}, {&(0x7f0000004500)="be376909d4c3cb6b3ee112d64794f07f379aeac867a7af820db5f2842f46aef3ffd472908b2bbaec5a4235b583bce08dd6b0098a156f4967055a1f95f0c509cbb4095445ba73786fc6", 0x49}, {&(0x7f0000004580)="124c219f8bdd16efbc79d111825e36f7224a726c14ff687ce2fc33c1051d70748a185c83e3e3cc77e3bdbb8cff0ff3881c2b1e84c806f6589ace5258728d49d29ec2b3a3b8008cfbb5f964b8dc45d2", 0x4f}], 0x3, &(0x7f0000004640)=ANY=[@ANYBLOB="88000000000000002900000039000000000e02aa00000000fe8000000000000000000000000000aafe8000000000000000000000000000bb00000000000000000000143700000001fe88000000000000000000000000000100000000000000000000000000000000fc020000000000000000000000000001ff010000000000000000000000000001140000000000000029000000080000007e00000000000000"], 0xa0}}], 0x4, 0x200000c0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x38}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="01c20607144257e803c3febea3bd8ae08ee91a853fd5c141476938933e31e70b6467ae0d55b9a7a305724cb3adf67f1b5537a797bb6d5eed212b29b6e50137dbfbf0acf114e74157eaa1ec215b436e303c934ec4ad7aea9a49a29807ae95d13ad1e418a15f113b4dfd9743a4b668aeb7cd9d6cad827f8748afefe4a99f582aed8836a32aae9e40913423f55377495ce6699593abb31e1c82fe869e24054705769b808fc598ab04383bd7d480ca9295a40029b183e284a80d8c2e780113f74859c26c62ae67cf23", @ANYRES16=0x0, @ANYBLOB="02002bbd7000ffdbdf25870000000c009900f9ffffff0300000006004800220000000a000600ffffffffffff0000060048001c00000043002a00dd3a7bcaff9c752822bbfa73f86ca2e13d43c22fbc954875df1b9a71f0070d4fac9102b87b16ef0b04c1403292880512641ca100baa9445ba80a576b2a"], 0x80}, 0x1, 0x0, 0x0, 0x40004}, 0x10) shutdown(r3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010000000000000000003c0000003c000400000000000b0300000000000000000000000b010000000000000000000003000000100400000003000000f7ffffff000000005f0000000000000000000000000000000000da0df9feed4c296b02008546334a7f136ba7df6dffc3e7f8b918204dcc6059e36c35b1b20fadc624e0f1bda7b97719eefe708887337bcbd6dc87f49b2f4af57b59089551368638aec4019aa5ded6ceabc0783d565229175a0e2b3b16"], 0x0, 0x5a, 0x0, 0x4000001, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 0s ago: executing program 0 (id=1764): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r4=>0x0}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @default}, 0x1c) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x90, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x73, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7}, @broadcast, @device_b, @random="7d73b97d7a62", {0x5, 0x2}}, 0xdcdf, @random=0x2, 0x410, @val={0x0, 0x5, @random="0b968d613b"}, @void, @val={0x3, 0x1, 0x95}, @val={0x4, 0x6, {0x1, 0x1, 0xdd27, 0xcd}}, @val={0x6, 0x2, 0x7}, @void, @val={0x25, 0x3, {0x1, 0xb5, 0x7}}, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x1000, 0x3, 0x0, 0x0, {0xfffffffffffffffc, 0x5, 0x0, 0x6, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x83f6, 0x75}}, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfd, 0x4, 0x20}}, @val={0x76, 0x6, {0x8, 0x8, 0x9, 0xfe00}}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0xac5, 0x21}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4008081}, 0x5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000002ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x168c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x15b0, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RT_DREG={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x1584, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1578, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x1ac, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xaf, 0x1, "eab8767adacc3d208745b3bfb5ca71bf821a719b9a178502d16b6b48f71315757a154b4a83be136e0b7334467a6962da251ab768e96d2940d91eab2016acbcb83cc6ae6cfdb59e9f3c807059ef75fb64e314d9da38faffcbc01c1fc7fbc61f4641d1896df826f30def0ec175a1bc570c306b5f0842ef7de876c09de98ae3595d6b5a9a5b510e031643ca8ead2cc6776f969781ee31f808b9d894c211c4775de47685c2e5959334d0b0c7f1"}, @NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x44, 0x1, "3b1b7cf980bee4232d661f5422aa023ae08172793a7c4479aafb4aed461ab89a0d9cc9ab59ecf37ca7addc6ce1220f0aaf0922b1f6d2b1fb95b06246355fed6c"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_CMP_DATA={0x11a8, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x103, 0x1, "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"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0x1f8, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xf7, 0x1, "981c6be8c786cec98f564b585c800b86826b70ce78cb9448a3e265b43622def9ba967d185b7c2a6a6e025de5d0a2c2213335d044d4df186faff51fadae75c5dd157a0cf51a686d450f2a81737020bb89806a6cc8ff444d6bc4146600f30cad891eaa24f1883d5d1ebc303721682c774afe489c8315648285f74fb26439b4f0907ae40710441ea2a53c3f2c6b7bcf97d4ca5013645c8d9e22c2d7d042e2303dbf136535a3c5ce1198db2430722ec31c22ac1d0bc6b4bf9df84e8346f5a489a235598c0937cf68b6452d6db713c14cb3c788583acad5ff5ca18087a8eff0fb537bae203d27d0e031c185ea30227a188785999685"}, @NFTA_DATA_VALUE={0x2d, 0x1, "35c1993a56f8684be1a3d293841ab86a3c95f332ad38895f359cfcc9f62b5fff93aa3b5e5d6dc9c333"}, @NFTA_DATA_VALUE={0xbe, 0x1, "ede730c9781fa6964c528689c5974412b6ad4c276b2d39149b67634a00110ec6088a59fbd7629c3960d9ffcdcf8b224083d648c379584c6791639449945438ae6cd8f49e4e1f56d8a0fcd5967606cd15961ad9cbef75f7f3828b8d333f3d5d8f7e16a5f7947c2df8053468988243fd130dfaf183eaf4996e10dddb814ee9111e1cb74e1632875a4bf9e4f544b01dcf00938ccd96eff94637dd1859e72b74064059ed44996bd3c4ece7a089ec21f791fecdd542d1e9d3fe1cfce0"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_CMP_SREG={0x8}]}}}]}, @NFTA_RULE_USERDATA={0x94, 0x7, 0x1, 0x0, "4d9f6e749eab0c15473a7baed7569062c1753ead6cb39c3b7ea312e4211befbd62f9f6880474c3bea02d5af83e57e97d08c81560c6ab527094f096fb4ec97f677e2024269ba3fcf3a0912a92d528c877358b91af7c66539c5509a92a36351599ab86333a30feaffe047b180a3f271b7fe082fa11c204cd0b2dcbf16f6de9e6a3d3bf8179fde986e8e18874d967c9aaf5"}, @NFTA_RULE_USERDATA={0x1b, 0x7, 0x1, 0x0, "ec9bcf195a139e101798893b42f5d418bcb0d47f68d533"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x605, 0x0, 0x0, {0x8, 0x0, 0x9}}, @NFT_MSG_DELSET={0xec, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_USERDATA={0xab, 0xd, 0x1, 0x0, "3f51f3d7c69138c58d43a3037efacc080900b50e037d0f42e1afd2ffa0aae56d3aa816fde11120b3cfdc24f9c9df3a2d351f51ef42bd8523ad196a5dd9368761008b9c347dcb5efbf226a424cb7e8c663995a0d593754c101028c80b57a96806aa05cae60e2f478f93085fd15e46b8e40eae464a7bad0fffeae7805ea171a425825b89a12de5a6e3d6fb61aabb6859ba4c98a638c2ffc82b2fab4583fcf85a00b750ddfe9c908c"}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2410}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x184c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000001580)=ANY=[@ANYRES64, @ANYRES8, @ANYRES16, @ANYRES16=r8, @ANYRES16, @ANYBLOB="85d0e0205f81cf567ba5731c8c08e689589d36f2a3a928590a83f1616212fc6a6d1a230cb45551881f864aeff69ea99d4f05a9a5cb876bfd8a3ed7d8124a895d1e8639c9a1bb43080cb0613e2825e669b61489b38f91fc8e74523dc4f66b4fc5c40ad1e1d5fbe9af93f6321ffacd6dbe9186"], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = epoll_create1(0x0) epoll_wait(r9, &(0x7f0000002a80)=[{}], 0x1, 0xfffeffff) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_pwait(r9, &(0x7f0000000040)=[{}], 0x1, 0xea1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000080)={0x9d32f4b220c65367}) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711231000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f0000000000)="ff", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): gistering): (slave bond_slave_1): Releasing backup interface [ 260.818548][ T9513] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 260.887490][ T9513] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.896057][ T9513] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.905100][ T9513] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.913746][ T9513] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.960585][ T9513] bond0 (unregistering): Released all slaves [ 261.144468][ T9517] lo speed is unknown, defaulting to 1000 [ 261.654142][ T9553] xt_l2tp: unknown flags: 10 [ 261.919105][ T9564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.849'. [ 261.978859][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.849'. [ 261.983355][ T9537] infiniband syz1: set down [ 262.003955][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.848'. [ 262.026218][ T9537] infiniband syz1: added team_slave_0 [ 262.059085][ T9537] syz1: rxe_create_cq: returned err = -12 [ 262.079942][ T9537] infiniband syz1: Couldn't create ib_mad CQ [ 262.111693][ T9537] infiniband syz1: Couldn't open port 1 [ 262.129979][ T9565] lo speed is unknown, defaulting to 1000 [ 262.193082][ T9568] netlink: 20 bytes leftover after parsing attributes in process `syz.3.848'. [ 262.439248][ T9537] RDS/IB: syz1: added [ 262.474526][ T9537] smc: adding ib device syz1 with port count 1 [ 262.517835][ T9537] smc: ib device syz1 port 1 has pnetid [ 262.619802][ T9568] nbd: socks must be embedded in a SOCK_ITEM attr [ 263.151381][ T9577] lo speed is unknown, defaulting to 1000 [ 263.219494][ T9580] netlink: 36 bytes leftover after parsing attributes in process `syz.2.850'. [ 263.239590][ T9580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.850'. [ 263.296573][ T9580] netlink: 36 bytes leftover after parsing attributes in process `syz.2.850'. [ 263.335920][ T9580] netlink: 36 bytes leftover after parsing attributes in process `syz.2.850'. [ 264.458821][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.858'. [ 264.498263][ T9613] tipc: Started in network mode [ 264.503410][ T9613] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 264.521405][ T9620] netlink: 36 bytes leftover after parsing attributes in process `syz.1.858'. [ 264.588565][ T9613] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media [ 266.008692][ T9646] lo speed is unknown, defaulting to 1000 [ 266.915042][ T9677] netlink: 'syz.1.870': attribute type 10 has an invalid length. [ 266.979848][ T9677] __nla_validate_parse: 2 callbacks suppressed [ 266.979877][ T9677] netlink: 40 bytes leftover after parsing attributes in process `syz.1.870'. [ 267.127273][ T9677] veth0_vlan: entered allmulticast mode [ 267.133735][ T9677] bridge0: port 1(veth0_vlan) entered blocking state [ 267.149933][ T9677] bridge0: port 1(veth0_vlan) entered disabled state [ 267.178469][ T9677] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 267.418107][ T9688] lo speed is unknown, defaulting to 1000 [ 267.918352][ T9701] macvtap1: entered promiscuous mode [ 267.923807][ T9701] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 267.988819][ T9701] macvtap1: entered allmulticast mode [ 267.994341][ T9701] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 268.135341][ T9701] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 268.172898][ T9701] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 268.594751][ T9713] bond0: left allmulticast mode [ 268.607427][ T9713] bond0: left promiscuous mode [ 268.941774][ T9731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.878'. [ 268.974381][ T9713] bond0 (unregistering): Released all slaves [ 269.442053][ T9741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.556569][ T9741] netlink: 144 bytes leftover after parsing attributes in process `syz.3.881'. [ 269.583242][ T9741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.881'. [ 270.189837][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.894'. [ 270.251649][ T9768] netlink: 'syz.1.885': attribute type 1 has an invalid length. [ 270.254308][ T9764] lo speed is unknown, defaulting to 1000 [ 270.486853][ T9781] netlink: 'syz.3.887': attribute type 1 has an invalid length. [ 270.531591][ T9768] 8021q: adding VLAN 0 to HW filter on device bond3 [ 270.794315][ T9782] bond0: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 270.910750][ T6014] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 270.912099][ T9783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.087469][ T6037] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 271.141111][ T9781] veth3: entered promiscuous mode [ 271.168224][ T9781] bond0: (slave veth3): Enslaving as a backup interface with a down link [ 271.295319][ T9775] lo speed is unknown, defaulting to 1000 [ 271.378969][ T9788] netlink: 'syz.4.888': attribute type 10 has an invalid length. [ 271.502903][ T9788] netlink: 40 bytes leftover after parsing attributes in process `syz.4.888'. [ 271.603883][ T9796] bridge0: port 1(30�X��D) entered blocking state [ 271.624943][ T9796] bridge0: port 1(30�X��D) entered disabled state [ 271.689591][ T9796] 0�X��D: entered allmulticast mode [ 271.764379][ T9796] 0�X��D: entered promiscuous mode [ 271.887914][ T9788] veth0_vlan: left promiscuous mode [ 271.991845][ T9788] veth0_vlan: entered promiscuous mode [ 272.047952][ T9788] veth0_vlan: entered allmulticast mode [ 272.109935][ T9788] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 272.855348][ T9821] lo speed is unknown, defaulting to 1000 [ 274.162515][ T9840] netlink: 'syz.1.896': attribute type 4 has an invalid length. [ 274.610827][ T9847] netlink: 84 bytes leftover after parsing attributes in process `syz.0.897'. [ 275.426254][ T9854] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 275.517500][ T9854] syz.3.910 (9854) used greatest stack depth: 16344 bytes left [ 275.731587][ T9861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.901'. [ 275.761616][ T9861] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media [ 276.143395][ T9863] sctp: [Deprecated]: syz.3.903 (pid 9863) Use of int in max_burst socket option. [ 276.143395][ T9863] Use struct sctp_assoc_value instead [ 276.206306][ T9863] netlink: 28 bytes leftover after parsing attributes in process `syz.3.903'. [ 276.220533][ T9863] netlink: 28 bytes leftover after parsing attributes in process `syz.3.903'. [ 276.235147][ T9865] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.309474][ T9865] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.520146][ T9865] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.615135][ T9865] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.715349][ T9875] lo speed is unknown, defaulting to 1000 [ 276.858832][ T9865] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.880170][ T9879] netlink: 16 bytes leftover after parsing attributes in process `syz.3.906'. [ 276.967495][ T9878] netlink: 36 bytes leftover after parsing attributes in process `syz.0.905'. [ 276.978933][ T9865] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.031031][ T9878] netlink: 16 bytes leftover after parsing attributes in process `syz.0.905'. [ 277.107784][ T9865] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.166155][ T9878] netlink: 36 bytes leftover after parsing attributes in process `syz.0.905'. [ 277.186107][ T9865] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.188685][ T9878] netlink: 36 bytes leftover after parsing attributes in process `syz.0.905'. [ 277.392704][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.907'. [ 279.621778][ T9933] netlink: 'syz.4.916': attribute type 10 has an invalid length. [ 279.655191][ T9933] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.702222][ T9935] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 279.702831][ T9933] bond0: (slave team0): Enslaving as an active interface with an up link [ 280.710919][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'. [ 280.768962][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 280.823628][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 280.867314][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.919'. [ 281.412538][ T9971] lo speed is unknown, defaulting to 1000 [ 281.703749][ T9984] netlink: 'syz.2.926': attribute type 1 has an invalid length. [ 281.737369][ T9984] netlink: 224 bytes leftover after parsing attributes in process `syz.2.926'. [ 281.882221][ T9986] lo speed is unknown, defaulting to 1000 [ 282.171319][ T9996] lo speed is unknown, defaulting to 1000 [ 283.102296][ T9978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.923'. [ 283.120572][ T30] audit: type=1800 audit(1742307225.347:8): pid=10002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.929" name="memory.events" dev="tmpfs" ino=900 res=0 errno=0 [ 283.447509][ T9986] netlink: 24 bytes leftover after parsing attributes in process `syz.4.927'. [ 283.755741][T10021] netlink: 'syz.2.930': attribute type 4 has an invalid length. [ 283.891124][T10021] netlink: 'syz.2.930': attribute type 4 has an invalid length. [ 284.430244][T10037] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 284.483960][T10037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.598837][T10042] netlink: 'syz.2.935': attribute type 16 has an invalid length. [ 284.626939][T10042] netlink: 'syz.2.935': attribute type 17 has an invalid length. [ 284.753799][T10042] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.794348][T10042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.899563][T10046] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.200990][T10046] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.343413][T10046] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.620243][T10046] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.903434][T10046] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.989029][T10046] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.039159][T10046] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.158908][T10046] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.796759][T10091] netlink: 'syz.0.948': attribute type 4 has an invalid length. [ 286.828040][T10091] netlink: 'syz.0.948': attribute type 4 has an invalid length. [ 287.181674][T10104] lo speed is unknown, defaulting to 1000 [ 287.262660][T10105] netlink: 36 bytes leftover after parsing attributes in process `syz.0.949'. [ 287.375411][T10105] netlink: 16 bytes leftover after parsing attributes in process `syz.0.949'. [ 287.456947][T10105] netlink: 36 bytes leftover after parsing attributes in process `syz.0.949'. [ 287.566270][T10105] netlink: 36 bytes leftover after parsing attributes in process `syz.0.949'. [ 287.613637][T10117] lo speed is unknown, defaulting to 1000 [ 289.292426][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.961'. [ 289.343919][T10124] lo speed is unknown, defaulting to 1000 [ 289.552551][T10163] netlink: 'syz.3.962': attribute type 4 has an invalid length. [ 289.643676][T10168] netlink: 'syz.3.962': attribute type 4 has an invalid length. [ 289.736058][T10161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.961'. [ 289.803197][ T1208] lo speed is unknown, defaulting to 1000 [ 289.842065][ T9] lo speed is unknown, defaulting to 1000 [ 290.389442][T10195] netlink: 176 bytes leftover after parsing attributes in process `syz.3.968'. [ 290.458586][T10192] netlink: 'syz.2.967': attribute type 10 has an invalid length. [ 290.523176][T10192] team0: Port device wlan1 added [ 290.641841][T10201] raw_sendmsg: syz.0.969 forgot to set AF_INET. Fix it! [ 290.691219][T10200] veth0_to_bridge: entered promiscuous mode [ 290.757788][T10198] veth0_to_bridge: left promiscuous mode [ 291.894030][T10241] lo speed is unknown, defaulting to 1000 [ 292.088548][T10258] netlink: 60 bytes leftover after parsing attributes in process `syz.3.981'. [ 292.117823][T10255] netlink: 60 bytes leftover after parsing attributes in process `syz.3.981'. [ 292.163645][T10250] lo speed is unknown, defaulting to 1000 [ 292.579096][T10267] lo speed is unknown, defaulting to 1000 [ 292.683907][T10269] netlink: 36 bytes leftover after parsing attributes in process `syz.3.984'. [ 292.719150][T10269] netlink: 16 bytes leftover after parsing attributes in process `syz.3.984'. [ 292.757245][T10269] netlink: 36 bytes leftover after parsing attributes in process `syz.3.984'. [ 292.814216][T10269] netlink: 36 bytes leftover after parsing attributes in process `syz.3.984'. [ 293.458014][T10288] lo speed is unknown, defaulting to 1000 [ 293.573503][T10280] lo speed is unknown, defaulting to 1000 [ 293.827460][T10249] lo speed is unknown, defaulting to 1000 [ 293.874364][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.988'. [ 294.009459][T10303] macvlan4: entered promiscuous mode [ 294.035630][T10303] macvlan4: entered allmulticast mode [ 294.042022][T10303] bridge0: entered allmulticast mode [ 294.793280][T10326] netlink: 'syz.2.990': attribute type 4 has an invalid length. [ 294.858010][T10326] netlink: 'syz.2.990': attribute type 4 has an invalid length. [ 295.497817][T10345] netlink: 'syz.2.992': attribute type 11 has an invalid length. [ 296.010598][T10357] netlink: 'syz.4.996': attribute type 10 has an invalid length. [ 296.089036][T10358] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 296.734226][T10370] syz.4.998: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 296.807497][T10370] CPU: 0 UID: 0 PID: 10370 Comm: syz.4.998 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 296.807537][T10370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 296.807548][T10370] Call Trace: [ 296.807557][T10370] <TASK> [ 296.807565][T10370] dump_stack_lvl+0x241/0x360 [ 296.807604][T10370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.807629][T10370] ? __pfx__printk+0x10/0x10 [ 296.807655][T10370] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 296.807681][T10370] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 296.807716][T10370] warn_alloc+0x278/0x410 [ 296.807740][T10370] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 296.807761][T10370] ? __pfx_warn_alloc+0x10/0x10 [ 296.807783][T10370] ? kasan_save_track+0x3f/0x80 [ 296.807805][T10370] ? __kasan_kmalloc+0x98/0xb0 [ 296.807827][T10370] ? xsk_setsockopt+0x4aa/0x810 [ 296.807845][T10370] ? do_sock_setsockopt+0x3af/0x720 [ 296.807865][T10370] ? __x64_sys_setsockopt+0x1ee/0x280 [ 296.807885][T10370] ? do_syscall_64+0xf3/0x230 [ 296.807952][T10370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.807994][T10370] __vmalloc_node_range_noprof+0x126/0x1380 [ 296.808048][T10370] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 296.808075][T10370] ? __kasan_kmalloc+0x98/0xb0 [ 296.808102][T10370] vmalloc_user_noprof+0x74/0x80 [ 296.808123][T10370] ? xskq_create+0xb6/0x170 [ 296.808142][T10370] xskq_create+0xb6/0x170 [ 296.808164][T10370] xsk_init_queue+0xa1/0x100 [ 296.808188][T10370] xsk_setsockopt+0x4aa/0x810 [ 296.808212][T10370] ? __pfx_xsk_setsockopt+0x10/0x10 [ 296.808232][T10370] ? __pfx_aa_sk_perm+0x10/0x10 [ 296.808265][T10370] ? aa_sock_opt_perm+0x79/0x120 [ 296.808301][T10370] ? __pfx_xsk_setsockopt+0x10/0x10 [ 296.808318][T10370] do_sock_setsockopt+0x3af/0x720 [ 296.808349][T10370] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 296.808379][T10370] ? __fget_files+0x395/0x410 [ 296.808411][T10370] ? __fget_files+0x2a/0x410 [ 296.808453][T10370] __x64_sys_setsockopt+0x1ee/0x280 [ 296.808485][T10370] do_syscall_64+0xf3/0x230 [ 296.808510][T10370] ? clear_bhb_loop+0x35/0x90 [ 296.808536][T10370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.808556][T10370] RIP: 0033:0x7f2aec78d169 [ 296.808573][T10370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.808589][T10370] RSP: 002b:00007f2aed648038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 296.808611][T10370] RAX: ffffffffffffffda RBX: 00007f2aec9a5fa0 RCX: 00007f2aec78d169 [ 296.808627][T10370] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 296.808640][T10370] RBP: 00007f2aec80e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 296.808652][T10370] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.808674][T10370] R13: 0000000000000000 R14: 00007f2aec9a5fa0 R15: 00007ffe9215d488 [ 296.808707][T10370] </TASK> [ 297.108700][T10370] Mem-Info: [ 297.113482][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.998'. [ 297.141057][T10370] active_anon:18251 inactive_anon:0 isolated_anon:0 [ 297.141057][T10370] active_file:1419 inactive_file:38383 isolated_file:0 [ 297.141057][T10370] unevictable:768 dirty:545 writeback:0 [ 297.141057][T10370] slab_reclaimable:10648 slab_unreclaimable:107341 [ 297.141057][T10370] mapped:36875 shmem:10182 pagetables:964 [ 297.141057][T10370] sec_pagetables:0 bounce:0 [ 297.141057][T10370] kernel_misc_reclaimable:0 [ 297.141057][T10370] free:1316713 free_pcp:539 free_cma:0 [ 297.420251][T10370] Node 0 active_anon:74004kB inactive_anon:0kB active_file:5676kB inactive_file:153456kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:147500kB dirty:1980kB writeback:0kB shmem:40292kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11884kB pagetables:3956kB sec_pagetables:0kB all_unreclaimable? no [ 297.487250][T10370] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 297.588196][T10370] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 297.641317][T10370] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 297.672309][T10370] Node 0 DMA32 free:1347072kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:67404kB inactive_anon:0kB active_file:5676kB inactive_file:153136kB unevictable:1536kB writepending:1928kB present:3129332kB managed:2549708kB mlocked:0kB bounce:0kB free_pcp:6252kB local_pcp:1196kB free_cma:0kB [ 297.768267][T10370] lowmem_reserve[]: 0 0 0 0 0 [ 297.773220][T10370] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 297.814927][T10370] lowmem_reserve[]: 0 0 0 0 0 [ 297.844414][T10370] Node 1 Normal free:3906384kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 297.920088][T10370] lowmem_reserve[]: 0 0 0 0 0 [ 297.925034][T10370] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 298.025679][T10370] Node 0 DMA32: 568*4kB (UME) 148*8kB (UME) 168*16kB (UME) 512*32kB (UME) 192*64kB (UME) 156*128kB (UME) 70*256kB (UM) 43*512kB (UME) 26*1024kB (UME) 9*2048kB (UM) 297*4096kB (UM) = 1356288kB [ 298.107192][T10370] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 298.122061][T10389] netlink: 'syz.2.1001': attribute type 10 has an invalid length. [ 298.165301][T10370] Node 1 Normal: 224*4kB (UME) 62*8kB (UME) 46*16kB (UME) 212*32kB (UME) 84*64kB (UME) 33*128kB (UME) 17*256kB (UME) 7*512kB (UME) 5*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3906384kB [ 298.225011][T10370] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 298.257336][T10370] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 298.282749][T10370] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 298.298034][T10370] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 298.384379][T10370] 41720 total pagecache pages [ 298.394673][T10370] 0 pages in swap cache [ 298.409303][T10370] Free swap = 124996kB [ 298.452653][T10370] Total swap = 124996kB [ 298.457000][T10370] 2097051 pages RAM [ 298.472386][T10370] 0 pages HighMem/MovableOnly [ 298.512244][T10370] 427902 pages reserved [ 298.516704][T10370] 0 pages cma reserved [ 298.980221][T10406] xt_bpf: check failed: parse error [ 299.001408][T10409] netlink: 'syz.3.1006': attribute type 10 has an invalid length. [ 299.023346][T10406] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1007'. [ 299.104241][T10415] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 299.146687][T10409] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.201120][T10409] : (slave team0): Enslaving as an active interface with an up link [ 299.383787][T10425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.409696][T10425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1010'. [ 299.429171][T10416] syzkaller0: entered promiscuous mode [ 299.449349][T10416] syzkaller0: entered allmulticast mode [ 303.884252][T10471] lo speed is unknown, defaulting to 1000 [ 304.248139][T10489] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1022'. [ 305.122853][T10505] lo speed is unknown, defaulting to 1000 [ 306.188480][T10528] netlink: 66 bytes leftover after parsing attributes in process `syz.2.1031'. [ 306.214238][T10530] x_tables: duplicate underflow at hook 2 [ 306.214837][T10532] netlink: 'syz.1.1029': attribute type 10 has an invalid length. [ 306.230421][T10528] openvswitch: netlink: Flow key attr not present in new flow. [ 306.320398][T10539] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 306.369425][T10532] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.457619][T10541] netlink: 'syz.3.1030': attribute type 10 has an invalid length. [ 306.515486][T10532] bond0: (slave team0): Enslaving as an active interface with an up link [ 306.539683][T10506] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1027'. [ 306.770094][T10541] team0: Device veth1_macvtap failed to register rx_handler [ 307.206293][T10554] lo speed is unknown, defaulting to 1000 [ 307.819984][T10575] netlink: 'syz.0.1037': attribute type 16 has an invalid length. [ 307.861084][T10575] netlink: 'syz.0.1037': attribute type 17 has an invalid length. [ 308.079505][T10575] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.086792][T10583] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1039'. [ 308.117206][T10575] dummy0: entered promiscuous mode [ 308.122728][T10583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1039'. [ 308.150332][T10583] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1039'. [ 308.173684][T10575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 308.200013][T10583] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1039'. [ 308.372127][T10580] lo speed is unknown, defaulting to 1000 [ 308.448372][T10589] netlink: 'syz.4.1040': attribute type 303 has an invalid length. [ 309.217575][T10611] netlink: 'syz.0.1043': attribute type 1 has an invalid length. [ 309.505880][T10618] bond0: (slave gretap1): making interface the new active one [ 309.538698][T10618] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 310.382628][T10636] netlink: 66 bytes leftover after parsing attributes in process `syz.4.1047'. [ 310.423066][T10636] openvswitch: netlink: Flow key attr not present in new flow. [ 310.479102][T10632] lo speed is unknown, defaulting to 1000 [ 311.137877][T10658] netlink: 'syz.4.1049': attribute type 1 has an invalid length. [ 312.725238][T10688] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1056'. [ 313.776660][T10693] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1059'. [ 316.573256][T10698] macvtap0: left promiscuous mode [ 316.607301][T10698] macvtap0: left allmulticast mode [ 316.633169][T10696] syzkaller1: entered promiscuous mode [ 316.645957][T10696] syzkaller1: entered allmulticast mode [ 316.825150][T10737] lo speed is unknown, defaulting to 1000 [ 316.831742][T10737] lo speed is unknown, defaulting to 1000 [ 317.038416][T10737] lo speed is unknown, defaulting to 1000 [ 317.062063][T10737] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 317.140598][T10746] netlink: 'syz.3.1067': attribute type 16 has an invalid length. [ 317.173829][T10746] netlink: 'syz.3.1067': attribute type 17 has an invalid length. [ 317.185744][T10737] lo speed is unknown, defaulting to 1000 [ 317.215926][T10737] lo speed is unknown, defaulting to 1000 [ 317.365386][T10746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.491075][T10737] lo speed is unknown, defaulting to 1000 [ 317.520904][T10737] lo speed is unknown, defaulting to 1000 [ 317.562413][T10737] lo speed is unknown, defaulting to 1000 [ 317.858686][T10764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1071'. [ 317.908151][T10764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1071'. [ 318.324565][T10780] wg1: entered promiscuous mode [ 318.330396][T10780] wg1: entered allmulticast mode [ 318.340375][T10786] siw: device registration error -23 [ 319.463054][T10817] tls_set_device_offload_rx: netdev not found [ 319.476307][T10816] netlink: 'syz.2.1084': attribute type 24 has an invalid length. [ 319.537186][T10820] xt_ecn: cannot match TCP bits for non-tcp packets [ 320.737005][T10875] netlink: 'syz.3.1094': attribute type 4 has an invalid length. [ 320.798480][T10879] netlink: 'syz.3.1094': attribute type 4 has an invalid length. [ 320.840408][ T26] lo speed is unknown, defaulting to 1000 [ 320.840542][ T1208] lo speed is unknown, defaulting to 1000 [ 321.084812][T10884] lo speed is unknown, defaulting to 1000 [ 321.180441][T10888] lo speed is unknown, defaulting to 1000 [ 321.195271][T10894] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 321.667566][ T26] hid-generic 0005:07C0:06E6.0001: item fetching failed at offset 0/1 [ 321.714350][ T26] hid-generic 0005:07C0:06E6.0001: probe with driver hid-generic failed with error -22 [ 321.899705][T10884] lo speed is unknown, defaulting to 1000 [ 322.371099][T10923] syz.0.1102: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 322.460534][T10923] CPU: 1 UID: 0 PID: 10923 Comm: syz.0.1102 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 322.460572][T10923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 322.460585][T10923] Call Trace: [ 322.460594][T10923] <TASK> [ 322.460604][T10923] dump_stack_lvl+0x241/0x360 [ 322.460638][T10923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.460659][T10923] ? __pfx__printk+0x10/0x10 [ 322.460685][T10923] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 322.460711][T10923] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 322.460738][T10923] warn_alloc+0x278/0x410 [ 322.460762][T10923] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 322.460784][T10923] ? __pfx_warn_alloc+0x10/0x10 [ 322.460805][T10923] ? kasan_save_track+0x3f/0x80 [ 322.460826][T10923] ? __kasan_kmalloc+0x98/0xb0 [ 322.460848][T10923] ? xsk_setsockopt+0x4aa/0x810 [ 322.460867][T10923] ? do_sock_setsockopt+0x3af/0x720 [ 322.460889][T10923] ? __x64_sys_setsockopt+0x1ee/0x280 [ 322.460908][T10923] ? do_syscall_64+0xf3/0x230 [ 322.460942][T10923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.460982][T10923] __vmalloc_node_range_noprof+0x126/0x1380 [ 322.461037][T10923] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 322.461063][T10923] ? __kasan_kmalloc+0x98/0xb0 [ 322.461090][T10923] vmalloc_user_noprof+0x74/0x80 [ 322.461111][T10923] ? xskq_create+0xb6/0x170 [ 322.461130][T10923] xskq_create+0xb6/0x170 [ 322.461153][T10923] xsk_init_queue+0xa1/0x100 [ 322.461176][T10923] xsk_setsockopt+0x4aa/0x810 [ 322.461199][T10923] ? __pfx_xsk_setsockopt+0x10/0x10 [ 322.461218][T10923] ? __pfx_aa_sk_perm+0x10/0x10 [ 322.461251][T10923] ? aa_sock_opt_perm+0x79/0x120 [ 322.461283][T10923] ? __pfx_xsk_setsockopt+0x10/0x10 [ 322.461300][T10923] do_sock_setsockopt+0x3af/0x720 [ 322.461327][T10923] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 322.461356][T10923] ? __fget_files+0x395/0x410 [ 322.461383][T10923] ? __fget_files+0x2a/0x410 [ 322.461417][T10923] __x64_sys_setsockopt+0x1ee/0x280 [ 322.461445][T10923] do_syscall_64+0xf3/0x230 [ 322.461470][T10923] ? clear_bhb_loop+0x35/0x90 [ 322.461498][T10923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.461521][T10923] RIP: 0033:0x7f3459f8d169 [ 322.461540][T10923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.461557][T10923] RSP: 002b:00007f3457df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 322.461581][T10923] RAX: ffffffffffffffda RBX: 00007f345a1a5fa0 RCX: 00007f3459f8d169 [ 322.461595][T10923] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 322.461608][T10923] RBP: 00007f345a00e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 322.461621][T10923] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.461633][T10923] R13: 0000000000000000 R14: 00007f345a1a5fa0 R15: 00007fff9bbf5f88 [ 322.461667][T10923] </TASK> [ 322.461676][T10923] Mem-Info: [ 322.838335][T10923] active_anon:12798 inactive_anon:0 isolated_anon:0 [ 322.838335][T10923] active_file:1419 inactive_file:38393 isolated_file:0 [ 322.838335][T10923] unevictable:768 dirty:391 writeback:0 [ 322.838335][T10923] slab_reclaimable:10713 slab_unreclaimable:108394 [ 322.838335][T10923] mapped:37724 shmem:4699 pagetables:1002 [ 322.838335][T10923] sec_pagetables:0 bounce:0 [ 322.838335][T10923] kernel_misc_reclaimable:0 [ 322.838335][T10923] free:1319852 free_pcp:1585 free_cma:0 [ 322.969910][T10923] Node 0 active_anon:51192kB inactive_anon:0kB active_file:5676kB inactive_file:153496kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:151796kB dirty:1564kB writeback:0kB shmem:17060kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12300kB pagetables:4008kB sec_pagetables:0kB all_unreclaimable? no [ 323.055190][T10923] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 323.160754][T10923] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 323.195285][T10923] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 323.201610][T10923] Node 0 DMA32 free:1364572kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:40752kB inactive_anon:0kB active_file:5676kB inactive_file:153176kB unevictable:1536kB writepending:1564kB present:3129332kB managed:2549708kB mlocked:0kB bounce:0kB free_pcp:9284kB local_pcp:876kB free_cma:0kB [ 323.233708][T10923] lowmem_reserve[]: 0 0 0 0 0 [ 323.239186][T10923] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 323.294033][T10923] lowmem_reserve[]: 0 0 0 0 0 [ 323.312389][T10923] Node 1 Normal free:3906416kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 323.345546][T10923] lowmem_reserve[]: 0 0 0 0 0 [ 323.351621][T10923] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 323.366058][T10952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1104'. [ 323.391739][T10923] Node 0 DMA32: 287*4kB (UM) 428*8kB (UME) 219*16kB (UME) 576*32kB (UME) 250*64kB (UME) 98*128kB (UME) 70*256kB (UM) 46*512kB (UME) 30*1024kB (UME) 10*2048kB (UM) 297*4096kB (UM) = 1364236kB [ 323.425196][T10923] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 323.439032][T10917] bond0: (slave team0): Releasing backup interface [ 323.446243][T10923] Node 1 Normal: 224*4kB (UME) 62*8kB (UME) 46*16kB (UME) 211*32kB (UME) 85*64kB (UME) 33*128kB (UME) 17*256kB (UME) 7*512kB (UME) 5*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3906416kB [ 323.479741][T10917] team0 (unregistering): Port device team_slave_0 removed [ 323.490752][T10923] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 323.502431][T10923] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 323.512176][T10917] team0 (unregistering): Port device team_slave_1 removed [ 323.527939][T10923] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 323.544177][T10923] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 323.555607][T10923] 41886 total pagecache pages [ 323.566724][T10923] 0 pages in swap cache [ 323.573837][T10888] lo speed is unknown, defaulting to 1000 [ 323.577643][T10923] Free swap = 124996kB [ 323.597263][T10923] Total swap = 124996kB [ 323.603416][T10923] 2097051 pages RAM [ 323.619282][T10923] 0 pages HighMem/MovableOnly [ 323.624816][T10923] 427902 pages reserved [ 323.654421][T10923] 0 pages cma reserved [ 324.258403][T10974] netlink: 'syz.2.1107': attribute type 1 has an invalid length. [ 324.477591][T10974] bond0: entered promiscuous mode [ 324.494626][T10974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.556648][T10975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.586938][T10975] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 324.638280][T10975] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 324.676534][T10975] bond0: (slave ip6gre1): making interface the new active one [ 324.707124][T10975] ip6gre1: entered promiscuous mode [ 324.754819][T10975] bond0: (slave ip6gre1): Enslaving as an active interface with an up link [ 324.947493][T10983] lo speed is unknown, defaulting to 1000 [ 325.183618][T10983] lo speed is unknown, defaulting to 1000 [ 325.722514][T11014] syzkaller0: entered promiscuous mode [ 325.747582][T11014] syzkaller0: entered allmulticast mode [ 325.801898][T11031] set match dimension is over the limit! [ 326.331906][T11037] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1114'. [ 329.322638][T11033] pim6reg: entered allmulticast mode [ 329.339011][T11037] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.347553][T11037] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.355900][T11037] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.380233][T11037] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.407333][T11029] lo speed is unknown, defaulting to 1000 [ 329.818036][T11029] lo speed is unknown, defaulting to 1000 [ 331.198617][T11081] lo speed is unknown, defaulting to 1000 [ 331.893785][T11081] lo speed is unknown, defaulting to 1000 [ 333.053612][T11096] tipc: Enabling of bearer <eth:ipvlan1> rejected, already enabled [ 333.187707][ T9] hid-generic 0005:07C0:06E6.0002: item fetching failed at offset 0/1 [ 333.205970][T11115] netlink: set zone limit has 4 unknown bytes [ 333.258120][ T9] hid-generic 0005:07C0:06E6.0002: probe with driver hid-generic failed with error -22 [ 333.873563][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1130'. [ 333.944606][T11128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1130'. [ 335.455256][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1135'. [ 335.570900][T11150] smc: removing ib device syz1 [ 339.470974][T11149] lo speed is unknown, defaulting to 1000 [ 339.485927][T11149] lo speed is unknown, defaulting to 1000 [ 339.633673][T11167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1139'. [ 339.653180][T11167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1139'. [ 339.726455][T11167] x_tables: duplicate underflow at hook 2 [ 340.108958][T11185] virt_wifi0 speed is unknown, defaulting to 1000 [ 340.115991][T11185] virt_wifi0 speed is unknown, defaulting to 1000 [ 340.136514][T11185] virt_wifi0 speed is unknown, defaulting to 1000 [ 340.187838][T11184] lo speed is unknown, defaulting to 1000 [ 340.190507][T11185] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 340.195408][T11184] lo speed is unknown, defaulting to 1000 [ 340.290535][T11185] virt_wifi0 speed is unknown, defaulting to 1000 [ 340.331216][T11185] virt_wifi0 speed is unknown, defaulting to 1000 [ 340.370310][T11184] virt_wifi0 speed is unknown, defaulting to 1000 [ 340.446383][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1145'. [ 340.457210][T11185] virt_wifi0 speed is unknown, defaulting to 1000 [ 340.490052][T11193] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1145'. [ 340.524565][T11185] virt_wifi0 speed is unknown, defaulting to 1000 [ 340.558766][T11185] virt_wifi0 speed is unknown, defaulting to 1000 [ 340.953123][T11214] netlink: 304 bytes leftover after parsing attributes in process `syz.3.1148'. [ 341.041321][T11216] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.234539][T11216] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.459291][T11216] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.575709][T11216] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.638453][T11184] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1144'. [ 341.851731][T11184] geneve0: entered promiscuous mode [ 341.887818][T11184] geneve0: entered allmulticast mode [ 342.000276][T11233] lo speed is unknown, defaulting to 1000 [ 342.054223][T11233] lo speed is unknown, defaulting to 1000 [ 342.065146][T11216] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.392736][T11216] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.484680][T11233] virt_wifi0 speed is unknown, defaulting to 1000 [ 342.514521][T11216] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.532290][T11216] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.249500][T11269] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 343.325063][T11269] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 343.470837][T11269] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1159'. [ 343.526231][T11276] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1160'. [ 343.629707][T11264] veth0_vlan: left allmulticast mode [ 343.757590][T11264] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.807344][T11264] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.815803][T11264] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.906281][T11264] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.989179][T11264] macvtap1: left promiscuous mode [ 343.994400][T11264] macvtap1: left allmulticast mode [ 344.039104][T11264] bond2: left promiscuous mode [ 344.047914][T11264] batadv1: left promiscuous mode [ 344.053387][T11264] batadv1: left allmulticast mode [ 344.089884][T11264] batadv2: left promiscuous mode [ 344.094937][T11264] batadv2: left allmulticast mode [ 344.138469][T11264] macvlan5: left promiscuous mode [ 344.305998][T11266] lo speed is unknown, defaulting to 1000 [ 344.397583][T11270] lo speed is unknown, defaulting to 1000 [ 344.403615][T11266] lo speed is unknown, defaulting to 1000 [ 344.464417][T11270] lo speed is unknown, defaulting to 1000 [ 344.491640][T11289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1162'. [ 344.529400][T11270] virt_wifi0 speed is unknown, defaulting to 1000 [ 344.649483][T11295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1162'. [ 344.698231][T11297] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 344.786110][T11266] virt_wifi0 speed is unknown, defaulting to 1000 [ 344.808976][T11289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1162'. [ 344.957881][T11303] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 345.333686][T11309] bond1: entered promiscuous mode [ 345.349511][T11309] bond1: entered allmulticast mode [ 345.357965][T11309] 8021q: adding VLAN 0 to HW filter on device bond1 [ 345.741354][T11309] bond1 (unregistering): Released all slaves [ 345.806540][T11310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.091534][T11333] 0�X��D: left allmulticast mode [ 346.096593][T11333] 0�X��D: left promiscuous mode [ 346.117692][T11333] bridge0: port 1(30�X��D) entered disabled state [ 346.314906][T11333] team0: Port device team_slave_0 removed [ 346.366019][T11333] team0: Port device team_slave_1 removed [ 346.423434][T11333] team0: Port device wlan1 removed [ 346.469892][T11333] bond0: (slave ip6gre1): Releasing backup interface [ 346.476682][T11333] ip6gre1: left promiscuous mode [ 346.598590][T11340] 8021q: VLANs not supported on bond0 [ 346.633694][T11351] netlink: 'syz.4.1172': attribute type 4 has an invalid length. [ 347.031936][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'. [ 347.072029][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1176'. [ 347.276761][T11371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1178'. [ 347.386628][T11371] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1178'. [ 347.404624][T11379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1179'. [ 347.715593][T11390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1181'. [ 348.025828][T11400] netlink: 'syz.0.1185': attribute type 4 has an invalid length. [ 348.259323][T11410] syzkaller1: entered promiscuous mode [ 348.296502][T11410] syzkaller1: entered allmulticast mode [ 348.349761][T11416] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1189'. [ 348.681048][T11428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1191'. [ 349.048030][T11406] tipc: Enabling of bearer <eth:ipvlan1> rejected, already enabled [ 349.739541][T11459] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1196'. [ 349.807610][T11459] GUP no longer grows the stack in syz.2.1196 (11459): 400000006000-40000000a000 (400000005000) [ 349.847208][T11459] CPU: 1 UID: 0 PID: 11459 Comm: syz.2.1196 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 349.847245][T11459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 349.847258][T11459] Call Trace: [ 349.847266][T11459] <TASK> [ 349.847276][T11459] dump_stack_lvl+0x241/0x360 [ 349.847313][T11459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.847337][T11459] ? __pfx__printk+0x10/0x10 [ 349.847356][T11459] ? find_vma+0xf9/0x170 [ 349.847392][T11459] __get_user_pages+0x3b07/0x4140 [ 349.847427][T11459] ? mark_lock+0x9a/0x360 [ 349.847478][T11459] ? __pfx___get_user_pages+0x10/0x10 [ 349.847499][T11459] ? __gup_longterm_locked+0xd2f/0x17f0 [ 349.847523][T11459] ? __pfx_down_read_killable+0x10/0x10 [ 349.847557][T11459] ? __pfx_lock_acquire+0x10/0x10 [ 349.847586][T11459] ? try_get_folio+0xf1/0x6f0 [ 349.847608][T11459] ? __pfx_lock_release+0x10/0x10 [ 349.847643][T11459] __gup_longterm_locked+0xe64/0x17f0 [ 349.847679][T11459] ? mark_lock+0x9a/0x360 [ 349.847703][T11459] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 349.847731][T11459] ? __pfx___gup_longterm_locked+0x10/0x10 [ 349.847753][T11459] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 349.847801][T11459] ? gup_fast_fallback+0x207e/0x29c0 [ 349.847828][T11459] gup_fast_fallback+0x2266/0x29c0 [ 349.847884][T11459] ? __pfx_gup_fast_fallback+0x10/0x10 [ 349.847945][T11459] ? __mutex_trylock_common+0x183/0x2e0 [ 349.847968][T11459] ? __pfx___might_resched+0x10/0x10 [ 349.847991][T11459] ? is_valid_gup_args+0x124/0x200 [ 349.848016][T11459] get_user_pages_fast+0xcc/0x160 [ 349.848039][T11459] ? __pfx_get_user_pages_fast+0x10/0x10 [ 349.848058][T11459] ? rcu_is_watching+0x15/0xb0 [ 349.848080][T11459] ? trace_contention_end+0x3c/0x120 [ 349.848103][T11459] ? __mutex_lock+0x397/0x1010 [ 349.848134][T11459] __iov_iter_get_pages_alloc+0x3b4/0x8e0 [ 349.848168][T11459] ? __se_sys_vmsplice+0x4b7/0x14a0 [ 349.848201][T11459] iov_iter_get_pages2+0xcf/0x130 [ 349.848231][T11459] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 349.848271][T11459] __se_sys_vmsplice+0x739/0x14a0 [ 349.848295][T11459] ? plist_del+0x3f1/0x410 [ 349.848344][T11459] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 349.848374][T11459] ? __pfx_futex_wake+0x10/0x10 [ 349.848461][T11459] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 349.848496][T11459] ? do_syscall_64+0x100/0x230 [ 349.848522][T11459] ? do_syscall_64+0xb6/0x230 [ 349.848549][T11459] do_syscall_64+0xf3/0x230 [ 349.848571][T11459] ? clear_bhb_loop+0x35/0x90 [ 349.848600][T11459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.848623][T11459] RIP: 0033:0x7f3cbcf8d169 [ 349.848642][T11459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.848659][T11459] RSP: 002b:00007f3cbdd6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 349.848683][T11459] RAX: ffffffffffffffda RBX: 00007f3cbd1a5fa0 RCX: 00007f3cbcf8d169 [ 349.848700][T11459] RDX: 0000000000000001 RSI: 00004000000000c0 RDI: 000000000000000c [ 349.848714][T11459] RBP: 00007f3cbd00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 349.848728][T11459] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 349.848742][T11459] R13: 0000000000000000 R14: 00007f3cbd1a5fa0 R15: 00007ffdf5b10f58 [ 349.848789][T11459] </TASK> [ 350.367219][T11469] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1199'. [ 350.396985][T11475] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1200'. [ 350.413162][T11475] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 350.501778][T11480] netlink: 'syz.4.1201': attribute type 4 has an invalid length. [ 350.823941][T11490] No such timeout policy "syz0" [ 352.439178][T11532] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1211'. [ 352.475256][T11532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1211'. [ 352.631502][T11505] tipc: Enabling of bearer <eth:ipvlan1> rejected, already enabled [ 352.778465][T11540] netlink: 'syz.1.1213': attribute type 4 has an invalid length. [ 352.809564][ T26] lo speed is unknown, defaulting to 1000 [ 353.043404][T11551] syz.2.1214 uses old SIOCAX25GETINFO [ 353.119412][T11558] sctp: [Deprecated]: syz.3.1215 (pid 11558) Use of struct sctp_assoc_value in delayed_ack socket option. [ 353.119412][T11558] Use struct sctp_sack_info instead [ 353.196480][T11561] lo speed is unknown, defaulting to 1000 [ 353.211062][T11561] lo speed is unknown, defaulting to 1000 [ 353.235885][T11561] lo speed is unknown, defaulting to 1000 [ 353.262990][T11556] netlink: 'syz.1.1216': attribute type 20 has an invalid length. [ 353.358592][T11561] infiniband s�z0: RDMA CMA: cma_listen_on_dev, error -98 [ 353.491042][ T9] lo speed is unknown, defaulting to 1000 [ 353.504499][T11561] lo speed is unknown, defaulting to 1000 [ 353.681764][T11561] lo speed is unknown, defaulting to 1000 [ 353.732411][T11561] lo speed is unknown, defaulting to 1000 [ 353.788883][T11561] lo speed is unknown, defaulting to 1000 [ 353.795809][T11561] lo speed is unknown, defaulting to 1000 [ 354.561676][T11589] lo speed is unknown, defaulting to 1000 [ 354.604780][T11589] lo speed is unknown, defaulting to 1000 [ 354.607487][T11594] lo speed is unknown, defaulting to 1000 [ 354.656056][T11589] virt_wifi0 speed is unknown, defaulting to 1000 [ 354.656452][T11594] lo speed is unknown, defaulting to 1000 [ 354.732082][T11599] lo speed is unknown, defaulting to 1000 [ 354.740681][T11594] virt_wifi0 speed is unknown, defaulting to 1000 [ 354.744027][T11589] lo speed is unknown, defaulting to 1000 [ 354.757971][T11599] lo speed is unknown, defaulting to 1000 [ 354.794432][T11594] lo speed is unknown, defaulting to 1000 [ 354.856096][T11599] virt_wifi0 speed is unknown, defaulting to 1000 [ 354.986766][T11599] lo speed is unknown, defaulting to 1000 [ 355.979271][T11625] netlink: 'syz.0.1226': attribute type 4 has an invalid length. [ 356.311555][T11628] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1225'. [ 357.577836][T11645] xt_l2tp: missing protocol rule (udp|l2tpip) [ 357.911243][T11650] bond1: entered promiscuous mode [ 357.968625][T11650] bond1: entered allmulticast mode [ 357.987920][T11650] 8021q: adding VLAN 0 to HW filter on device bond1 [ 358.666971][T11650] bond1 (unregistering): Released all slaves [ 358.682505][T11677] netlink: 'syz.0.1237': attribute type 4 has an invalid length. [ 359.039168][T11686] set match dimension is over the limit! [ 359.045948][T11684] tipc: Bearer <udp:sy>: already 2 bearers with priority 10 [ 359.072739][T11684] tipc: Bearer <udp:sy>: trying with adjusted priority [ 359.104100][T11684] tipc: Enabled bearer <udp:sy>, priority 9 [ 359.152168][T11688] pimreg: entered allmulticast mode [ 359.174481][T11689] 8021q: VLANs not supported on pimreg [ 359.203127][T11686] pim6reg: entered allmulticast mode [ 359.251578][T11688] netlink: 'syz.0.1241': attribute type 1 has an invalid length. [ 359.279293][T11688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1241'. [ 359.337610][T11688] pimreg: left allmulticast mode [ 359.452698][T11700] wg1: left promiscuous mode [ 359.467416][T11700] wg1: left allmulticast mode [ 359.494918][T11700] veth0_vlan: left allmulticast mode [ 359.537233][T11700] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.545847][T11700] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.554598][T11700] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.563757][T11700] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.677938][T11700] vti0: left promiscuous mode [ 359.712840][T11703] xt_socket: unknown flags 0x8 [ 359.733240][T11703] netlink: 'syz.1.1245': attribute type 126 has an invalid length. [ 359.974388][T11708] team0: Port device gtp0 added [ 360.012311][T11709] lo speed is unknown, defaulting to 1000 [ 360.026665][T11709] lo speed is unknown, defaulting to 1000 [ 360.048300][T11709] virt_wifi0 speed is unknown, defaulting to 1000 [ 360.056184][T11709] lo speed is unknown, defaulting to 1000 [ 360.171833][T11716] pimreg0: tun_chr_ioctl cmd 1074025677 [ 360.200408][T11716] pimreg0: linktype set to 65534 [ 360.509387][T11722] netlink: 'syz.3.1251': attribute type 4 has an invalid length. [ 360.739377][T11726] bond2: entered promiscuous mode [ 360.744924][T11726] bond2: entered allmulticast mode [ 360.752220][T11726] 8021q: adding VLAN 0 to HW filter on device bond2 [ 360.830297][ T5854] Bluetooth: hci4: link tx timeout [ 360.837595][ T5854] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 360.993028][T11730] ipt_rpfilter: unknown options [ 361.007904][T11730] netlink: 'syz.3.1263': attribute type 1 has an invalid length. [ 361.109433][T11736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1254'. [ 361.201728][T11736] netlink: 'syz.2.1254': attribute type 10 has an invalid length. [ 361.266631][T11741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'. [ 361.320101][T11726] bond2 (unregistering): Released all slaves [ 361.627493][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1256'. [ 361.659734][T11749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1256'. [ 361.904611][T11754] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 361.946888][T11754] batman_adv: batadv0: Adding interface: ip6gretap1 [ 361.971986][T11754] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.010951][T11754] batman_adv: batadv0: Interface activated: ip6gretap1 [ 362.087607][T11757] lo speed is unknown, defaulting to 1000 [ 362.159537][T11757] lo speed is unknown, defaulting to 1000 [ 362.185716][T11757] virt_wifi0 speed is unknown, defaulting to 1000 [ 362.215422][T11757] lo speed is unknown, defaulting to 1000 [ 362.482367][T11769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1262'. [ 362.808871][T11782] SET target dimension over the limit! [ 362.915860][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 363.045749][ T30] audit: type=1107 audit(1742307305.277:9): pid=11785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='���' [ 363.110264][T11757] lo speed is unknown, defaulting to 1000 [ 363.117718][T11757] lo speed is unknown, defaulting to 1000 [ 363.124884][T11757] virt_wifi0 speed is unknown, defaulting to 1000 [ 363.133400][T11757] lo speed is unknown, defaulting to 1000 [ 363.633521][T11795] lo speed is unknown, defaulting to 1000 [ 363.791393][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1270'. [ 363.822618][T11805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1270'. [ 363.856159][T11810] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 363.865138][T11795] lo speed is unknown, defaulting to 1000 [ 363.966809][T11795] virt_wifi0 speed is unknown, defaulting to 1000 [ 364.075024][T11795] lo speed is unknown, defaulting to 1000 [ 364.230832][T11801] lo speed is unknown, defaulting to 1000 [ 364.264143][T11801] lo speed is unknown, defaulting to 1000 [ 364.345846][T11801] virt_wifi0 speed is unknown, defaulting to 1000 [ 364.425857][T11801] lo speed is unknown, defaulting to 1000 [ 364.643112][T11831] netlink: 'syz.2.1276': attribute type 16 has an invalid length. [ 364.928987][T11795] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1268'. [ 365.160127][T11842] netlink: 'syz.2.1277': attribute type 4 has an invalid length. [ 365.879502][T11868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1282'. [ 366.153318][T11876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1283'. [ 366.320655][T11879] team0: entered allmulticast mode [ 366.336229][T11879] gtp0: entered allmulticast mode [ 366.361295][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1284'. [ 366.580835][T11893] netlink: 'syz.2.1287': attribute type 16 has an invalid length. [ 366.831753][T11899] netlink: 'syz.1.1289': attribute type 4 has an invalid length. [ 366.942646][T11907] lo speed is unknown, defaulting to 1000 [ 366.960774][T11908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1291'. [ 366.976171][T11907] lo speed is unknown, defaulting to 1000 [ 367.004767][T11907] virt_wifi0 speed is unknown, defaulting to 1000 [ 367.035746][T11907] lo speed is unknown, defaulting to 1000 [ 367.813626][T11932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1295'. [ 367.893463][T11926] lo speed is unknown, defaulting to 1000 [ 367.936393][T11926] lo speed is unknown, defaulting to 1000 [ 367.946725][T11926] virt_wifi0 speed is unknown, defaulting to 1000 [ 368.049191][T11926] lo speed is unknown, defaulting to 1000 [ 368.387381][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1299'. [ 369.140274][T11974] netlink: 'syz.0.1303': attribute type 4 has an invalid length. [ 369.465562][T11926] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1294'. [ 369.558589][T11978] lo speed is unknown, defaulting to 1000 [ 369.600003][T11978] lo speed is unknown, defaulting to 1000 [ 369.644295][T11978] virt_wifi0 speed is unknown, defaulting to 1000 [ 369.675126][T11989] SET target dimension over the limit! [ 369.679362][T11978] lo speed is unknown, defaulting to 1000 [ 370.306860][T11997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1306'. [ 370.595662][T12009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1309'. [ 371.721954][T12038] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1314'. [ 372.095510][T12048] netlink: 'syz.3.1316': attribute type 10 has an invalid length. [ 372.115294][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1315'. [ 372.125106][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1315'. [ 372.833783][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1319'. [ 373.089584][T12079] netlink: 'syz.3.1321': attribute type 4 has an invalid length. [ 373.179990][ T9] lo speed is unknown, defaulting to 1000 [ 373.593947][T12090] lo speed is unknown, defaulting to 1000 [ 373.831980][T12093] 8021q: adding VLAN 0 to HW filter on device bond4 [ 373.859523][T12098] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1324'. [ 373.976511][T12090] lo speed is unknown, defaulting to 1000 [ 374.507625][T12097] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.533169][T12097] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.556321][T12097] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.567541][T12097] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.692845][T12097] macvtap1: left promiscuous mode [ 374.717460][T12097] macvtap1: left allmulticast mode [ 374.759329][T12097] vlan3: left promiscuous mode [ 374.951750][T12097] veth3: left promiscuous mode [ 374.972126][T12090] virt_wifi0 speed is unknown, defaulting to 1000 [ 375.028747][T12090] lo speed is unknown, defaulting to 1000 [ 375.289172][T12104] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1322'. [ 376.132975][T12135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1330'. [ 376.272244][T12137] bond0: (slave team0): Releasing backup interface [ 376.326524][T12137] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 376.379955][T12137] batman_adv: batadv0: Removing interface: ip6gretap1 [ 376.413515][T12145] netlink: 'syz.3.1333': attribute type 4 has an invalid length. [ 376.615772][T12148] syzkaller1: entered promiscuous mode [ 376.644911][T12148] syzkaller1: entered allmulticast mode [ 376.681938][T12153] pimreg: entered allmulticast mode [ 376.703028][T12152] netlink: 'syz.1.1337': attribute type 16 has an invalid length. [ 376.790616][T12148] syzkaller1: left promiscuous mode [ 376.819766][T12148] syzkaller1: left allmulticast mode [ 377.650182][T12173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1340'. [ 378.283298][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1344'. [ 378.561851][T12188] openvswitch: netlink: Missing valid actions attribute. [ 378.597259][T12188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.762673][T12192] netlink: 'syz.0.1345': attribute type 5 has an invalid length. [ 379.908771][T12199] lo speed is unknown, defaulting to 1000 [ 379.915806][T12199] lo speed is unknown, defaulting to 1000 [ 379.960641][T12199] virt_wifi0 speed is unknown, defaulting to 1000 [ 379.999147][T12199] lo speed is unknown, defaulting to 1000 [ 380.346437][T12208] nr0: entered promiscuous mode [ 380.959309][T12221] lo speed is unknown, defaulting to 1000 [ 380.986262][T12221] lo speed is unknown, defaulting to 1000 [ 381.009716][T12221] virt_wifi0 speed is unknown, defaulting to 1000 [ 381.059271][T12221] lo speed is unknown, defaulting to 1000 [ 381.552198][T12243] netlink: 'syz.0.1360': attribute type 16 has an invalid length. [ 381.570315][T12239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1359'. [ 381.597252][T12239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1359'. [ 381.669138][T12239] vlan0: entered promiscuous mode [ 381.831547][T12250] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1363'. [ 381.892389][T12241] lo speed is unknown, defaulting to 1000 [ 381.958318][T12252] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1363'. [ 382.049859][T12252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1363'. [ 382.269523][T12259] netlink: 'syz.1.1365': attribute type 4 has an invalid length. [ 382.328567][T12260] netlink: 'syz.1.1365': attribute type 4 has an invalid length. [ 382.396572][T12241] lo speed is unknown, defaulting to 1000 [ 382.478476][ T9] lo speed is unknown, defaulting to 1000 [ 382.483949][T12241] virt_wifi0 speed is unknown, defaulting to 1000 [ 382.500730][ T1208] lo speed is unknown, defaulting to 1000 [ 382.599873][T12241] lo speed is unknown, defaulting to 1000 [ 382.915139][T12265] lo speed is unknown, defaulting to 1000 [ 382.990432][T12265] lo speed is unknown, defaulting to 1000 [ 383.137441][T12265] virt_wifi0 speed is unknown, defaulting to 1000 [ 383.357306][T12265] lo speed is unknown, defaulting to 1000 [ 383.535441][T12279] lo speed is unknown, defaulting to 1000 [ 383.557876][T12279] lo speed is unknown, defaulting to 1000 [ 383.565698][T12279] virt_wifi0 speed is unknown, defaulting to 1000 [ 383.761743][T12279] lo speed is unknown, defaulting to 1000 [ 384.241782][T12286] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1371'. [ 384.562175][T12288] netlink: 'syz.1.1372': attribute type 16 has an invalid length. [ 385.059390][T12292] netlink: 'syz.1.1375': attribute type 1 has an invalid length. [ 385.097328][T12292] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1375'. [ 385.187479][ T9] IPVS: starting estimator thread 0... [ 385.217502][T12292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1375'. [ 385.287342][T12296] IPVS: using max 23 ests per chain, 55200 per kthread [ 385.288012][T12298] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1375'. [ 385.661482][T12305] netlink: 'syz.3.1378': attribute type 4 has an invalid length. [ 385.705059][T12305] netlink: 'syz.3.1378': attribute type 4 has an invalid length. [ 385.749435][T12309] tipc: Enabling of bearer <eth:ipvlan1> rejected, already enabled [ 385.790326][ T5891] lo speed is unknown, defaulting to 1000 [ 385.951807][T12313] netlink: 'syz.1.1379': attribute type 16 has an invalid length. [ 385.977627][T12313] netlink: 'syz.1.1379': attribute type 17 has an invalid length. [ 386.056528][T12313] bridge0: left promiscuous mode [ 386.064902][T12313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.075015][T12313] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.092214][T12313] dummy0: left promiscuous mode [ 386.149697][T12313] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 386.212832][T12317] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1381'. [ 386.236360][T12317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1381'. [ 386.267493][T12322] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 386.311259][T12318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1381'. [ 386.459451][T12322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1382'. [ 386.506389][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1382'. [ 386.627962][T12330] netlink: 'syz.4.1383': attribute type 1 has an invalid length. [ 386.755235][T12332] bond3: (slave gretap1): making interface the new active one [ 386.823434][T12332] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 387.014799][T12340] netlink: 'syz.1.1385': attribute type 16 has an invalid length. [ 387.235970][T12344] lo speed is unknown, defaulting to 1000 [ 387.244307][T12344] lo speed is unknown, defaulting to 1000 [ 387.301027][T12344] virt_wifi0 speed is unknown, defaulting to 1000 [ 387.388618][T12344] lo speed is unknown, defaulting to 1000 [ 387.872800][T12355] netlink: 'syz.2.1391': attribute type 4 has an invalid length. [ 387.981035][T12356] netlink: 'syz.2.1391': attribute type 4 has an invalid length. [ 388.375090][T12348] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1387'. [ 389.228367][T12374] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 389.258600][T12374] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 389.291870][T12361] tipc: Enabling of bearer <eth:ipvlan1> rejected, already enabled [ 389.836280][T12379] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 389.880539][T12384] lo speed is unknown, defaulting to 1000 [ 389.917693][T12384] lo speed is unknown, defaulting to 1000 [ 389.970398][T12379] lo speed is unknown, defaulting to 1000 [ 389.985318][T12384] virt_wifi0 speed is unknown, defaulting to 1000 [ 390.035769][T12379] lo speed is unknown, defaulting to 1000 [ 390.088827][T12384] lo speed is unknown, defaulting to 1000 [ 390.103026][T12380] tap0: tun_chr_ioctl cmd 1074025677 [ 390.139386][T12380] tap0: linktype set to 804 [ 390.172803][T12379] virt_wifi0 speed is unknown, defaulting to 1000 [ 390.212437][T12390] netlink: 'syz.0.1403': attribute type 4 has an invalid length. [ 390.253917][T12379] lo speed is unknown, defaulting to 1000 [ 390.276550][ T9] lo speed is unknown, defaulting to 1000 [ 390.290927][T12390] netlink: 'syz.0.1403': attribute type 4 has an invalid length. [ 390.431112][T12397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1402'. [ 390.482075][T12397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1402'. [ 390.592183][T12397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1402'. [ 390.644641][ T5891] lo speed is unknown, defaulting to 1000 [ 391.288056][T12405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1405'. [ 391.340878][T12405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1405'. [ 391.358541][T12408] vlan2: entered promiscuous mode [ 391.381159][T12409] lo speed is unknown, defaulting to 1000 [ 391.408072][T12408] netlink: 'syz.2.1406': attribute type 10 has an invalid length. [ 391.410576][T12405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1405'. [ 391.544846][T12409] lo speed is unknown, defaulting to 1000 [ 391.840154][T12409] virt_wifi0 speed is unknown, defaulting to 1000 [ 391.950044][T12405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1405'. [ 391.959292][T12405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1405'. [ 392.060917][T12409] lo speed is unknown, defaulting to 1000 [ 392.429787][T12431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1411'. [ 392.494345][T12434] netlink: 'syz.1.1411': attribute type 10 has an invalid length. [ 392.578284][T12431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1411'. [ 392.635204][T12435] lo speed is unknown, defaulting to 1000 [ 392.645942][T12435] lo speed is unknown, defaulting to 1000 [ 392.657470][T12435] virt_wifi0 speed is unknown, defaulting to 1000 [ 393.047755][T12435] lo speed is unknown, defaulting to 1000 [ 393.064513][T12449] netlink: 'syz.4.1414': attribute type 4 has an invalid length. [ 393.095499][T12449] netlink: 'syz.4.1414': attribute type 4 has an invalid length. [ 393.674434][T12462] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$���UL�vy��آ�D��UD�w�}�zR' [ 393.707328][T12462] CPU: 0 UID: 0 PID: 12462 Comm: syz.1.1418 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 393.707373][T12462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 393.707384][T12462] Call Trace: [ 393.707392][T12462] <TASK> [ 393.707402][T12462] dump_stack_lvl+0x241/0x360 [ 393.707441][T12462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.707466][T12462] ? __pfx__printk+0x10/0x10 [ 393.707492][T12462] ? __kmalloc_cache_noprof+0x243/0x390 [ 393.707521][T12462] ? sysfs_warn_dup+0x51/0xa0 [ 393.707550][T12462] sysfs_warn_dup+0x8e/0xa0 [ 393.707575][T12462] sysfs_do_create_link_sd+0xbe/0x110 [ 393.707601][T12462] device_add_class_symlinks+0x1c5/0x250 [ 393.707626][T12462] device_add+0x553/0xbf0 [ 393.707654][T12462] wiphy_register+0x1922/0x2650 [ 393.707701][T12462] ? __pfx_wiphy_register+0x10/0x10 [ 393.707728][T12462] ? minstrel_ht_alloc+0x84b/0x940 [ 393.707779][T12462] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 393.707815][T12462] ieee80211_register_hw+0x35d9/0x42e0 [ 393.707851][T12462] ? ieee80211_register_hw+0x1681/0x42e0 [ 393.707880][T12462] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 393.707913][T12462] ? __asan_memset+0x23/0x50 [ 393.707932][T12462] ? __hrtimer_init+0x170/0x250 [ 393.707961][T12462] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 393.708024][T12462] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 393.708049][T12462] ? trace_kmalloc+0x1f/0xd0 [ 393.708072][T12462] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 393.708101][T12462] ? kstrndup+0xbb/0x150 [ 393.708143][T12462] hwsim_new_radio_nl+0xece/0x2290 [ 393.708185][T12462] ? __pfx___nla_validate_parse+0x10/0x10 [ 393.708215][T12462] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 393.708285][T12462] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 393.708323][T12462] genl_rcv_msg+0xb1f/0xec0 [ 393.708359][T12462] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.708409][T12462] ? __pfx_lock_acquire+0x10/0x10 [ 393.708437][T12462] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 393.708462][T12462] ? __pfx___might_resched+0x10/0x10 [ 393.708497][T12462] netlink_rcv_skb+0x206/0x480 [ 393.708522][T12462] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.708545][T12462] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.708603][T12462] genl_rcv+0x28/0x40 [ 393.708622][T12462] netlink_unicast+0x7f6/0x990 [ 393.708657][T12462] ? __pfx_netlink_unicast+0x10/0x10 [ 393.708678][T12462] ? __virt_addr_valid+0x45f/0x530 [ 393.708698][T12462] ? __phys_addr_symbol+0x2f/0x70 [ 393.708714][T12462] ? __check_object_size+0x47a/0x730 [ 393.708745][T12462] netlink_sendmsg+0x8de/0xcb0 [ 393.708795][T12462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.708826][T12462] ? aa_sock_msg_perm+0x91/0x160 [ 393.708866][T12462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.708892][T12462] __sock_sendmsg+0x221/0x270 [ 393.708921][T12462] ____sys_sendmsg+0x53a/0x860 [ 393.708952][T12462] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.708971][T12462] ? __fget_files+0x2a/0x410 [ 393.709003][T12462] ? __fget_files+0x2a/0x410 [ 393.709036][T12462] __sys_sendmsg+0x269/0x350 [ 393.709055][T12462] ? __pfx_futex_wake+0x10/0x10 [ 393.709086][T12462] ? __pfx___sys_sendmsg+0x10/0x10 [ 393.709163][T12462] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 393.709193][T12462] ? do_syscall_64+0x100/0x230 [ 393.709222][T12462] ? do_syscall_64+0xb6/0x230 [ 393.709251][T12462] do_syscall_64+0xf3/0x230 [ 393.709278][T12462] ? clear_bhb_loop+0x35/0x90 [ 393.709312][T12462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.709340][T12462] RIP: 0033:0x7f73ac78d169 [ 393.709362][T12462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.709379][T12462] RSP: 002b:00007f73ad587038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.709402][T12462] RAX: ffffffffffffffda RBX: 00007f73ac9a6080 RCX: 00007f73ac78d169 [ 393.709415][T12462] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000008 [ 393.709427][T12462] RBP: 00007f73ac80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 393.709438][T12462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.709449][T12462] R13: 0000000000000000 R14: 00007f73ac9a6080 R15: 00007fff24ca7f78 [ 393.709479][T12462] </TASK> [ 394.457846][T12479] lo speed is unknown, defaulting to 1000 [ 395.358150][T12494] lo speed is unknown, defaulting to 1000 [ 395.388457][T12494] lo speed is unknown, defaulting to 1000 [ 395.414684][T12494] virt_wifi0 speed is unknown, defaulting to 1000 [ 395.446473][T12494] lo speed is unknown, defaulting to 1000 [ 395.809993][T12503] netlink: 'syz.2.1427': attribute type 4 has an invalid length. [ 395.827357][T12499] lo speed is unknown, defaulting to 1000 [ 395.851363][T12499] lo speed is unknown, defaulting to 1000 [ 395.865455][T12501] netlink: 'syz.2.1427': attribute type 4 has an invalid length. [ 395.901278][T12486] __nla_validate_parse: 7 callbacks suppressed [ 395.901307][T12486] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1423'. [ 396.018252][T12499] virt_wifi0 speed is unknown, defaulting to 1000 [ 396.026138][T12499] lo speed is unknown, defaulting to 1000 [ 396.107345][T12486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1423'. [ 396.224472][T12486] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1423'. [ 396.361711][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1429'. [ 396.371107][T12486] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1423'. [ 396.381392][T12511] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1429'. [ 396.569386][T12516] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1431'. [ 396.626515][T12497] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1426'. [ 396.770083][T12520] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1432'. [ 396.945803][T12525] lo speed is unknown, defaulting to 1000 [ 397.108158][T12533] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1433'. [ 397.139067][T12525] lo speed is unknown, defaulting to 1000 [ 397.341195][T12525] virt_wifi0 speed is unknown, defaulting to 1000 [ 397.433673][T12531] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.484643][T12531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 397.870572][T12512] xt_hashlimit: size too large, truncated to 1048576 [ 397.964573][T12536] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.979020][T12536] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.997486][T12536] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.006201][T12536] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.047823][T12525] lo speed is unknown, defaulting to 1000 [ 398.176415][T12499] x_tables: duplicate entry at hook 2 [ 398.322649][T12542] tipc: Bearer <udp:syz2>: already 2 bearers with priority 10 [ 398.348460][T12542] tipc: Bearer <udp:syz2>: trying with adjusted priority [ 398.357434][T12542] tipc: New replicast peer: 0.0.0.0 [ 398.363269][T12542] tipc: Enabled bearer <udp:syz2>, priority 9 [ 400.788243][T12621] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 401.425190][T12639] smc: net device bond0 applied user defined pnetid SYZ2 [ 401.524932][T12644] macsec0: entered allmulticast mode [ 401.561671][T12644] dummy0: entered allmulticast mode [ 401.737429][T12653] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 401.786680][T12653] __nla_validate_parse: 6 callbacks suppressed [ 401.786710][T12653] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1457'. [ 402.144501][T12644] dummy0: left allmulticast mode [ 402.477748][T12661] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 402.709736][T10724] lo speed is unknown, defaulting to 1000 [ 402.730633][T12664] lo speed is unknown, defaulting to 1000 [ 402.775244][T12664] lo speed is unknown, defaulting to 1000 [ 402.882808][T12664] virt_wifi0 speed is unknown, defaulting to 1000 [ 403.056033][T12664] lo speed is unknown, defaulting to 1000 [ 403.448473][T12682] netlink: 'syz.4.1466': attribute type 1 has an invalid length. [ 403.457619][T12682] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1466'. [ 403.578932][T12682] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1466'. [ 404.183811][T12702] netlink: 'syz.4.1471': attribute type 4 has an invalid length. [ 404.448585][T12705] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1472'. [ 404.498938][T12707] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1473'. [ 404.575899][T12712] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1474'. [ 404.606048][T12712] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1474'. [ 404.751090][T12707] netlink: 'syz.1.1473': attribute type 10 has an invalid length. [ 404.783318][T12707] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1473'. [ 404.791159][T12721] netlink: 'syz.2.1476': attribute type 4 has an invalid length. [ 404.800867][T12707] team0: entered promiscuous mode [ 404.820886][T12721] netlink: 'syz.2.1476': attribute type 4 has an invalid length. [ 405.265225][T12725] syzkaller0: entered promiscuous mode [ 405.290595][T12725] syzkaller0: entered allmulticast mode [ 405.353923][T12727] lo speed is unknown, defaulting to 1000 [ 405.360765][T12735] sch_fq: defrate 511 ignored. [ 405.569103][T12740] netlink: 'syz.0.1482': attribute type 4 has an invalid length. [ 406.125870][T12727] lo speed is unknown, defaulting to 1000 [ 409.636207][ T9] lo speed is unknown, defaulting to 1000 [ 409.636271][T12727] virt_wifi0 speed is unknown, defaulting to 1000 [ 409.679737][T12756] batman_adv: batadv0: Adding interface: dummy0 [ 409.693791][T12756] batman_adv: batadv0: Interface activated: dummy0 [ 409.705837][T12757] macvtap1: mtu less than device minimum [ 409.738552][T12757] macvlan2: mtu less than device minimum [ 409.744301][T12757] macvlan3: mtu less than device minimum [ 409.778979][T12757] batadv0: mtu less than device minimum [ 409.786701][T12757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 409.800527][T12757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 409.812697][T12757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 409.825204][T12757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 409.837834][T12757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 409.849472][T12757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 409.938565][T12764] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 409.974304][T12727] lo speed is unknown, defaulting to 1000 [ 410.213248][T12770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1488'. [ 410.591171][T12790] lo speed is unknown, defaulting to 1000 [ 410.605828][T12790] lo speed is unknown, defaulting to 1000 [ 410.648524][T12790] virt_wifi0 speed is unknown, defaulting to 1000 [ 410.667336][T12790] lo speed is unknown, defaulting to 1000 [ 410.811711][T12796] netlink: 'syz.4.1495': attribute type 4 has an invalid length. [ 410.925457][T12801] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1496'. [ 411.170600][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1493'. [ 411.238541][T12808] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1498'. [ 411.407453][T12792] tipc: Enabling of bearer <eth:ipvlan1> rejected, already enabled [ 411.432795][T12813] lo speed is unknown, defaulting to 1000 [ 411.478574][T12813] lo speed is unknown, defaulting to 1000 [ 411.519566][T12813] virt_wifi0 speed is unknown, defaulting to 1000 [ 411.549387][T12813] lo speed is unknown, defaulting to 1000 [ 411.738240][T12819] lo speed is unknown, defaulting to 1000 [ 411.745329][T12819] lo speed is unknown, defaulting to 1000 [ 411.842917][T12819] virt_wifi0 speed is unknown, defaulting to 1000 [ 411.878223][T12808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.894636][T12819] lo speed is unknown, defaulting to 1000 [ 411.920604][T12821] lo speed is unknown, defaulting to 1000 [ 411.987358][T12821] lo speed is unknown, defaulting to 1000 [ 412.044014][T12821] virt_wifi0 speed is unknown, defaulting to 1000 [ 412.126355][T12821] lo speed is unknown, defaulting to 1000 [ 412.350421][T12831] team0: Mode changed to "loadbalance" [ 412.366912][T12831] netlink: 'syz.1.1503': attribute type 1 has an invalid length. [ 413.038226][T12846] netlink: 'syz.1.1507': attribute type 4 has an invalid length. [ 413.812640][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1512'. [ 413.824403][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1512'. [ 413.837585][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1512'. [ 413.854425][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1512'. [ 413.871751][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1512'. [ 413.902575][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1512'. [ 414.078597][T12876] syzkaller1: entered promiscuous mode [ 414.104488][T12876] syzkaller1: entered allmulticast mode [ 414.687312][T12892] pimreg: entered allmulticast mode [ 414.898206][T12891] lo speed is unknown, defaulting to 1000 [ 414.905372][T12891] lo speed is unknown, defaulting to 1000 [ 415.043470][T12897] netlink: 'syz.0.1519': attribute type 1 has an invalid length. [ 415.058567][T12891] virt_wifi0 speed is unknown, defaulting to 1000 [ 415.066279][T12891] lo speed is unknown, defaulting to 1000 [ 415.206604][ T5854] block nbd0: Receive control failed (result -32) [ 415.259363][T12902] netlink: 'syz.1.1520': attribute type 4 has an invalid length. [ 415.314016][T12904] netlink: 'syz.1.1520': attribute type 4 has an invalid length. [ 415.371551][T12886] pimreg: left allmulticast mode [ 415.455381][T12908] __nla_validate_parse: 80 callbacks suppressed [ 415.455409][T12908] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1522'. [ 415.537495][ T5891] lo speed is unknown, defaulting to 1000 [ 415.685368][T12909] lo speed is unknown, defaulting to 1000 [ 415.698579][T12909] lo speed is unknown, defaulting to 1000 [ 415.705545][T12909] virt_wifi0 speed is unknown, defaulting to 1000 [ 415.712250][ T5891] lo speed is unknown, defaulting to 1000 [ 415.965278][T12908] 8021q: adding VLAN 0 to HW filter on device [ 415.989184][T12908] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.082272][T12908] net_ratelimit: 14 callbacks suppressed [ 416.082286][T12908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 416.117671][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 416.185523][ T5891] lo speed is unknown, defaulting to 1000 [ 416.197481][T12909] lo speed is unknown, defaulting to 1000 [ 416.211099][ T5891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 416.494107][T12937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1528'. [ 416.653407][T12941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1528'. [ 416.749629][T12946] rdma_rxe: rxe_newlink: failed to add lo [ 416.777547][ T5891] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 416.836814][ T6026] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 416.987457][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 417.672906][T12960] lo speed is unknown, defaulting to 1000 [ 417.708562][T12960] lo speed is unknown, defaulting to 1000 [ 417.730379][T12960] virt_wifi0 speed is unknown, defaulting to 1000 [ 417.748248][T12960] lo speed is unknown, defaulting to 1000 [ 417.867849][ T6026] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 417.876731][ T6026] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 418.167186][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 418.302653][T12975] netlink: 'syz.1.1535': attribute type 4 has an invalid length. [ 418.358000][T12981] netlink: 'syz.1.1535': attribute type 4 has an invalid length. [ 418.411992][ T9] lo speed is unknown, defaulting to 1000 [ 418.420582][ T5891] lo speed is unknown, defaulting to 1000 [ 418.510251][T12970] lo speed is unknown, defaulting to 1000 [ 418.542897][T12970] lo speed is unknown, defaulting to 1000 [ 418.667630][T12970] virt_wifi0 speed is unknown, defaulting to 1000 [ 418.747503][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 418.759530][T12970] lo speed is unknown, defaulting to 1000 [ 418.766896][T12976] lo speed is unknown, defaulting to 1000 [ 418.862487][T12976] lo speed is unknown, defaulting to 1000 [ 418.882637][T12989] lo speed is unknown, defaulting to 1000 [ 418.956740][T12976] virt_wifi0 speed is unknown, defaulting to 1000 [ 418.974414][T12989] lo speed is unknown, defaulting to 1000 [ 418.994303][T12976] lo speed is unknown, defaulting to 1000 [ 419.023370][T12989] virt_wifi0 speed is unknown, defaulting to 1000 [ 419.077211][T12989] lo speed is unknown, defaulting to 1000 [ 419.088343][T12993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1538'. [ 419.127145][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 419.135573][T12993] netlink: 'syz.2.1538': attribute type 1 has an invalid length. [ 419.444650][T12991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1537'. [ 419.663147][T12970] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1544'. [ 420.303151][T13007] netlink: 'syz.2.1541': attribute type 4 has an invalid length. [ 420.371912][T13008] netlink: 'syz.2.1541': attribute type 4 has an invalid length. [ 420.556451][T13017] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 420.610790][T13020] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 420.743741][T13020] lo speed is unknown, defaulting to 1000 [ 420.840906][T13019] tipc: Can't bind to reserved service type 1 [ 420.864103][T13030] netlink: 'syz.1.1548': attribute type 4 has an invalid length. [ 420.877592][T13020] lo speed is unknown, defaulting to 1000 [ 420.913466][T13020] virt_wifi0 speed is unknown, defaulting to 1000 [ 420.914818][T13028] netlink: 'syz.1.1548': attribute type 4 has an invalid length. [ 420.979114][T13020] lo speed is unknown, defaulting to 1000 [ 420.989411][ T26] lo speed is unknown, defaulting to 1000 [ 421.024549][ T26] lo speed is unknown, defaulting to 1000 [ 421.177133][ C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 421.177165][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 421.567801][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 421.596828][T13044] : (slave team0): Releasing backup interface [ 421.808502][T13044] bond0: (slave ip6gretap2): Removing an active aggregator [ 421.824637][T13044] bond0: (slave ip6gretap2): Releasing backup interface [ 421.832305][T13044] bond0: (slave ip6gretap2): the permanent HWaddr of slave - 02:6f:a6:8d:47:2c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 421.867199][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 421.934047][T13044] bond0: (slave veth3): Releasing backup interface [ 422.022156][T13029] tipc: Enabling of bearer <udp:s> rejected, already enabled [ 422.064455][T13047] lo speed is unknown, defaulting to 1000 [ 422.180529][T13047] lo speed is unknown, defaulting to 1000 [ 422.266543][T13047] virt_wifi0 speed is unknown, defaulting to 1000 [ 422.267354][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 422.287123][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 422.306722][T13047] lo speed is unknown, defaulting to 1000 [ 422.606399][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 422.749963][T13050] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1554'. [ 423.267156][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 423.273761][T13070] lo speed is unknown, defaulting to 1000 [ 423.282398][T13070] lo speed is unknown, defaulting to 1000 [ 423.295306][T13070] virt_wifi0 speed is unknown, defaulting to 1000 [ 423.346365][T13071] lo speed is unknown, defaulting to 1000 [ 423.405054][T13071] lo speed is unknown, defaulting to 1000 [ 423.408208][T13070] lo speed is unknown, defaulting to 1000 [ 423.490627][T13071] virt_wifi0 speed is unknown, defaulting to 1000 [ 423.525745][T13071] lo speed is unknown, defaulting to 1000 [ 424.130764][T13082] lo speed is unknown, defaulting to 1000 [ 424.148738][T13082] lo speed is unknown, defaulting to 1000 [ 424.184006][T13082] virt_wifi0 speed is unknown, defaulting to 1000 [ 424.254432][T13082] lo speed is unknown, defaulting to 1000 [ 424.457223][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 424.570363][T13070] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1568'. [ 424.603761][T13095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1564'. [ 425.437125][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 425.485712][T13112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1569'. [ 425.593752][T13112] rdma_op ffff88807d1b51f0 conn xmit_rdma 0000000000000000 [ 425.658192][T13118] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 425.689360][T13120] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1571'. [ 426.238784][ T5891] lo speed is unknown, defaulting to 1000 [ 426.352364][T13125] 8021q: adding VLAN 0 to HW filter on device [ 426.363105][T13125] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.370943][ T5916] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 426.400899][T13125] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 426.424442][ T9] lo speed is unknown, defaulting to 1000 [ 426.447143][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 426.652693][T13040] Set syz1 is full, maxelem 65536 reached [ 426.697467][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 426.918420][T13143] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1587'. [ 426.944143][T13142] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 427.054665][T10724] lo speed is unknown, defaulting to 1000 [ 427.064585][T13142] lo speed is unknown, defaulting to 1000 [ 427.098898][T13142] lo speed is unknown, defaulting to 1000 [ 427.102251][T13146] lo speed is unknown, defaulting to 1000 [ 427.112457][T13147] tap0: tun_chr_ioctl cmd 1074025677 [ 427.127813][T13147] tap0: linktype set to 804 [ 427.172203][T13144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.180557][T13144] team0: left promiscuous mode [ 427.186102][T13144] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.203889][T13144] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 427.228697][T10724] lo speed is unknown, defaulting to 1000 [ 427.228749][T13146] lo speed is unknown, defaulting to 1000 [ 427.241763][T13142] virt_wifi0 speed is unknown, defaulting to 1000 [ 427.263615][T13142] lo speed is unknown, defaulting to 1000 [ 427.318450][T13146] virt_wifi0 speed is unknown, defaulting to 1000 [ 427.367579][T13153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1578'. [ 427.387757][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 427.413959][T13146] lo speed is unknown, defaulting to 1000 [ 427.851543][T13161] netlink: 'syz.0.1580': attribute type 4 has an invalid length. [ 427.866606][T13161] netlink: 'syz.0.1580': attribute type 4 has an invalid length. [ 427.896864][ T5891] lo speed is unknown, defaulting to 1000 [ 427.922860][ T6037] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 428.457209][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 428.711141][T13162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1579'. [ 429.119044][T13178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1583'. [ 429.173909][ T6033] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 429.197421][ T6033] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 429.226645][T13178] ax25_connect(): syz.0.1583 uses autobind, please contact jreuter@yaina.de [ 429.379426][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 429.467510][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 429.555141][T13187] lo speed is unknown, defaulting to 1000 [ 429.591118][T13192] 8021q: VLANs not supported on sit0 [ 429.675678][T13187] lo speed is unknown, defaulting to 1000 [ 429.719578][T13187] virt_wifi0 speed is unknown, defaulting to 1000 [ 429.812217][T13187] lo speed is unknown, defaulting to 1000 [ 430.102399][T13203] netlink: 'syz.3.1592': attribute type 10 has an invalid length. [ 430.133728][T13203] veth1_macvtap: left promiscuous mode [ 430.141334][T13203] team0: Device veth1_macvtap failed to register rx_handler [ 430.204365][T13203] netlink: 'syz.3.1592': attribute type 1 has an invalid length. [ 430.215985][T13203] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1592'. [ 430.233882][T13203] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1592'. [ 430.272354][T13212] lo speed is unknown, defaulting to 1000 [ 430.302050][T13212] lo speed is unknown, defaulting to 1000 [ 430.351914][T13212] virt_wifi0 speed is unknown, defaulting to 1000 [ 430.420122][T13212] lo speed is unknown, defaulting to 1000 [ 431.098548][T13229] lo speed is unknown, defaulting to 1000 [ 431.105661][T13229] lo speed is unknown, defaulting to 1000 [ 431.198116][T13229] virt_wifi0 speed is unknown, defaulting to 1000 [ 431.223301][T13229] lo speed is unknown, defaulting to 1000 [ 431.727202][ C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 431.727230][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 432.046444][T13259] lo speed is unknown, defaulting to 1000 [ 432.084399][T13259] lo speed is unknown, defaulting to 1000 [ 432.117802][T13259] virt_wifi0 speed is unknown, defaulting to 1000 [ 432.163290][T13259] lo speed is unknown, defaulting to 1000 [ 432.547659][T13273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1601'. [ 432.617237][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 432.629509][T13273] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 432.668380][T13273] tipc: Enabled bearer <udp:syz1>, priority 10 [ 432.869677][T13283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1602'. [ 432.880264][T13284] netlink: 'syz.4.1604': attribute type 4 has an invalid length. [ 432.901582][T13284] netlink: 'syz.4.1604': attribute type 4 has an invalid length. [ 432.922489][T13283] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1602'. [ 433.457812][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1608'. [ 433.547307][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 433.656742][T13298] lo speed is unknown, defaulting to 1000 [ 433.687123][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 433.755244][T13298] lo speed is unknown, defaulting to 1000 [ 433.787506][ T5916] tipc: Node number set to 1 [ 433.824277][T13298] virt_wifi0 speed is unknown, defaulting to 1000 [ 433.920252][T13298] lo speed is unknown, defaulting to 1000 [ 434.437119][T13322] lo speed is unknown, defaulting to 1000 [ 434.498218][T13322] lo speed is unknown, defaulting to 1000 [ 434.505720][T13322] virt_wifi0 speed is unknown, defaulting to 1000 [ 434.631420][T13332] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1609'. [ 434.641363][T13322] lo speed is unknown, defaulting to 1000 [ 434.687082][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 435.485450][T13342] netlink: 'syz.1.1612': attribute type 29 has an invalid length. [ 435.601172][T13356] netlink: 'syz.1.1612': attribute type 29 has an invalid length. [ 435.707540][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 436.133749][T13342] IPv6: sit1: Disabled Multicast RS [ 436.190751][T13342] sit1: entered allmulticast mode [ 436.827454][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 437.334337][T13386] lo speed is unknown, defaulting to 1000 [ 437.366525][T13386] lo speed is unknown, defaulting to 1000 [ 437.411733][T13386] virt_wifi0 speed is unknown, defaulting to 1000 [ 437.426113][T13386] lo speed is unknown, defaulting to 1000 [ 437.613377][T13392] netlink: 'syz.3.1618': attribute type 4 has an invalid length. [ 437.717415][T13392] netlink: 'syz.3.1618': attribute type 4 has an invalid length. [ 437.751904][ T9] lo speed is unknown, defaulting to 1000 [ 437.761714][ T5891] lo speed is unknown, defaulting to 1000 [ 437.847102][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 438.304627][T13412] lo speed is unknown, defaulting to 1000 [ 438.353748][T13412] lo speed is unknown, defaulting to 1000 [ 438.360637][T13413] lo speed is unknown, defaulting to 1000 [ 438.378506][T13412] virt_wifi0 speed is unknown, defaulting to 1000 [ 438.398524][T13413] lo speed is unknown, defaulting to 1000 [ 438.418549][T13412] lo speed is unknown, defaulting to 1000 [ 438.438727][T13413] virt_wifi0 speed is unknown, defaulting to 1000 [ 438.599240][T13413] lo speed is unknown, defaulting to 1000 [ 438.947173][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 439.074587][T13426] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1626'. [ 439.547984][T13413] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1624'. [ 439.573306][T13413] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 439.686532][T13418] lo speed is unknown, defaulting to 1000 [ 439.698330][T13418] lo speed is unknown, defaulting to 1000 [ 439.705267][T13418] virt_wifi0 speed is unknown, defaulting to 1000 [ 439.904979][T13418] lo speed is unknown, defaulting to 1000 [ 440.017135][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 440.031413][T13440] lo speed is unknown, defaulting to 1000 [ 440.063722][T13441] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1630'. [ 440.091296][T13440] lo speed is unknown, defaulting to 1000 [ 440.128684][T13440] virt_wifi0 speed is unknown, defaulting to 1000 [ 440.197539][T13440] lo speed is unknown, defaulting to 1000 [ 440.947306][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 441.027160][T13457] lo speed is unknown, defaulting to 1000 [ 441.038428][T13457] lo speed is unknown, defaulting to 1000 [ 441.143398][T13459] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1633'. [ 441.177053][T13457] virt_wifi0 speed is unknown, defaulting to 1000 [ 441.184716][T13457] lo speed is unknown, defaulting to 1000 [ 441.199285][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1633'. [ 441.562924][T13473] netlink: 'syz.2.1634': attribute type 16 has an invalid length. [ 441.571183][T13473] netlink: 'syz.2.1634': attribute type 17 has an invalid length. [ 441.612801][T13473] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.689419][T13473] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 441.742814][T13466] IPVS: Scheduler module ip_vs_sip not found [ 441.776389][T13471] IPVS: length: 24 != 16106127384 [ 442.037212][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 442.667158][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 442.876178][T13489] can: request_module (can-proto-3) failed. [ 442.961071][T13496] lo speed is unknown, defaulting to 1000 [ 442.979990][T13496] lo speed is unknown, defaulting to 1000 [ 443.005152][T13496] virt_wifi0 speed is unknown, defaulting to 1000 [ 443.023534][T13496] lo speed is unknown, defaulting to 1000 [ 443.097580][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 443.293808][T13481] tipc: Enabling of bearer <eth:ipvlan1> rejected, already enabled [ 444.037230][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 444.054433][ T6039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.122650][ T6039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.588983][ T5854] Bluetooth: hci4: command 0x0405 tx timeout [ 444.750702][T13546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.812299][T13546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.840862][T13549] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 444.991405][T13545] lo speed is unknown, defaulting to 1000 [ 445.058520][T13545] lo speed is unknown, defaulting to 1000 [ 445.087189][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 445.108927][T13545] virt_wifi0 speed is unknown, defaulting to 1000 [ 445.142991][T13545] lo speed is unknown, defaulting to 1000 [ 445.396514][T13556] lo speed is unknown, defaulting to 1000 [ 445.497924][T13556] lo speed is unknown, defaulting to 1000 [ 445.506457][T13556] virt_wifi0 speed is unknown, defaulting to 1000 [ 445.533890][T13556] lo speed is unknown, defaulting to 1000 [ 446.070461][T13575] lo speed is unknown, defaulting to 1000 [ 446.071759][T13568] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1656'. [ 446.079504][T13575] lo speed is unknown, defaulting to 1000 [ 446.101272][T13575] virt_wifi0 speed is unknown, defaulting to 1000 [ 446.114306][T13575] lo speed is unknown, defaulting to 1000 [ 446.136810][T13568] pimreg: entered allmulticast mode [ 446.137113][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 446.436563][T13583] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1659'. [ 446.504031][T13564] pimreg: left allmulticast mode [ 446.692951][T13587] netlink: 'syz.0.1660': attribute type 7 has an invalid length. [ 446.711584][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1660'. [ 446.717111][T13571] tipc: Enabling of bearer <eth:ipvlan1> rejected, already enabled [ 447.167073][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 447.176627][T13595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1661'. [ 447.249150][T13595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1661'. [ 447.477919][T13604] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1663'. [ 447.625942][T13616] netlink: 'syz.0.1664': attribute type 1 has an invalid length. [ 447.635277][T13616] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1664'. [ 447.923185][T13623] lo speed is unknown, defaulting to 1000 [ 447.969538][T13623] lo speed is unknown, defaulting to 1000 [ 448.101566][T13623] virt_wifi0 speed is unknown, defaulting to 1000 [ 448.121690][T13634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1670'. [ 448.197170][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 448.197255][T13623] lo speed is unknown, defaulting to 1000 [ 449.221911][T13653] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1672'. [ 449.337064][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 449.354317][T13658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1672'. [ 449.420361][T13663] rdma_rxe: rxe_newlink: failed to add lo [ 449.806063][T13672] syzkaller1: entered promiscuous mode [ 449.845425][T13672] syzkaller1: entered allmulticast mode [ 450.357148][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 450.372359][T13685] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 450.416689][T13684] netlink: 'syz.4.1676': attribute type 4 has an invalid length. [ 450.859072][T13690] lo speed is unknown, defaulting to 1000 [ 450.888516][T13690] lo speed is unknown, defaulting to 1000 [ 450.895534][T13690] virt_wifi0 speed is unknown, defaulting to 1000 [ 450.953858][T13690] lo speed is unknown, defaulting to 1000 [ 451.066673][T13695] netlink: 'syz.4.1679': attribute type 6 has an invalid length. [ 451.288347][T13715] __nla_validate_parse: 3 callbacks suppressed [ 451.288374][T13715] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1683'. [ 451.310891][T13719] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1684'. [ 451.320508][T13719] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 451.347124][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 451.383152][T13719] netlink: 'syz.0.1684': attribute type 2 has an invalid length. [ 452.497261][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 453.462478][T13782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1692'. [ 453.595090][ T5891] lo speed is unknown, defaulting to 1000 [ 453.623413][T13767] lo speed is unknown, defaulting to 1000 [ 453.725984][T13767] lo speed is unknown, defaulting to 1000 [ 453.756242][T13786] ip6tnl2: entered promiscuous mode [ 453.775378][T13786] ip6tnl2: entered allmulticast mode [ 453.833461][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1695'. [ 453.894409][T13793] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1696'. [ 454.010014][T13767] virt_wifi0 speed is unknown, defaulting to 1000 [ 454.043752][T13767] lo speed is unknown, defaulting to 1000 [ 454.328445][T13809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1698'. [ 454.337673][T13809] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1698'. [ 454.419229][T13817] rdma_rxe: rxe_newlink: failed to add lo [ 455.306290][T13812] bond0: left promiscuous mode [ 455.313751][T13812] vlan2: left promiscuous mode [ 455.325568][T13818] bridge0: port 1(30�X��D) entered blocking state [ 455.334817][T13818] bridge0: port 1(30�X��D) entered disabled state [ 455.346264][T13818] 0�X��D: entered allmulticast mode [ 455.362145][T13818] 0�X��D: entered promiscuous mode [ 455.404860][T13834] netlink: 'syz.4.1702': attribute type 4 has an invalid length. [ 455.460155][T13836] netlink: 'syz.4.1702': attribute type 4 has an invalid length. [ 455.572661][T13840] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 455.601172][T13821] 0�X��D: left allmulticast mode [ 455.640069][T13821] 0�X��D: left promiscuous mode [ 455.647410][T13821] bridge0: port 1(30�X��D) entered disabled state [ 455.751139][T13819] lo speed is unknown, defaulting to 1000 [ 455.824968][T13819] lo speed is unknown, defaulting to 1000 [ 455.967408][T13819] virt_wifi0 speed is unknown, defaulting to 1000 [ 456.018337][T13819] lo speed is unknown, defaulting to 1000 [ 456.039664][T13851] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1707'. [ 456.187729][T13855] lo speed is unknown, defaulting to 1000 [ 456.194763][T13855] lo speed is unknown, defaulting to 1000 [ 456.297994][T13859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1706'. [ 456.397062][T13855] virt_wifi0 speed is unknown, defaulting to 1000 [ 456.486448][T13861] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1706'. [ 456.551462][T13863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.677904][T13867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1706'. [ 456.756582][T13855] lo speed is unknown, defaulting to 1000 [ 456.813794][T13859] lo speed is unknown, defaulting to 1000 [ 457.143059][T13874] IPVS: length: 78 != 8 [ 458.075943][T13887] siw: device registration error -23 [ 458.189044][T13897] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1710'. [ 458.208444][T13897] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1710'. [ 458.255372][T13897] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1710'. [ 458.318025][T13897] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1710'. [ 458.359695][T13889] lo speed is unknown, defaulting to 1000 [ 458.367309][T13889] lo speed is unknown, defaulting to 1000 [ 458.372784][T13896] lo speed is unknown, defaulting to 1000 [ 458.380744][T13889] virt_wifi0 speed is unknown, defaulting to 1000 [ 458.389829][T13896] lo speed is unknown, defaulting to 1000 [ 458.431304][T13889] lo speed is unknown, defaulting to 1000 [ 458.508202][T13896] virt_wifi0 speed is unknown, defaulting to 1000 [ 458.568517][T13896] lo speed is unknown, defaulting to 1000 [ 459.017483][T13911] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1713'. [ 459.498599][T13898] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1711'. [ 459.640125][T13932] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1716'. [ 459.787935][T13903] tipc: Enabling of bearer <eth:ipvlan1> rejected, already enabled [ 459.853990][ T30] audit: type=1800 audit(1742307402.087:10): pid=13940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1717" name="memory.events" dev="tmpfs" ino=1691 res=0 errno=0 [ 459.897288][ T30] audit: type=1804 audit(1742307402.097:11): pid=13940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1717" name="memory.events" dev="tmpfs" ino=1691 res=1 errno=0 [ 460.500321][T13955] lo speed is unknown, defaulting to 1000 [ 460.529462][T13957] netlink: 'syz.2.1720': attribute type 10 has an invalid length. [ 460.536631][T13955] lo speed is unknown, defaulting to 1000 [ 460.572952][T13955] virt_wifi0 speed is unknown, defaulting to 1000 [ 460.604730][T13955] lo speed is unknown, defaulting to 1000 [ 460.693046][T13965] rdma_rxe: rxe_newlink: failed to add lo [ 461.961080][T13988] ipt_ECN: cannot use operation on non-tcp rule [ 462.095408][T13995] __nla_validate_parse: 5 callbacks suppressed [ 462.095435][T13995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1731'. [ 462.133189][T13997] syzkaller0: entered allmulticast mode [ 462.197256][T13991] wireguard0: entered promiscuous mode [ 462.207315][T13991] wireguard0: entered allmulticast mode [ 462.295997][T13996] syzkaller0 (unregistering): left allmulticast mode [ 462.563181][T14004] syz.2.1733: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 462.595984][T14004] CPU: 0 UID: 0 PID: 14004 Comm: syz.2.1733 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 462.596024][T14004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 462.596038][T14004] Call Trace: [ 462.596047][T14004] <TASK> [ 462.596057][T14004] dump_stack_lvl+0x241/0x360 [ 462.596093][T14004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.596115][T14004] ? __pfx__printk+0x10/0x10 [ 462.596151][T14004] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 462.596177][T14004] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 462.596209][T14004] warn_alloc+0x278/0x410 [ 462.596235][T14004] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 462.596260][T14004] ? __pfx_warn_alloc+0x10/0x10 [ 462.596283][T14004] ? kasan_save_track+0x3f/0x80 [ 462.596304][T14004] ? __kasan_kmalloc+0x98/0xb0 [ 462.596335][T14004] ? xsk_setsockopt+0x4aa/0x810 [ 462.596353][T14004] ? do_sock_setsockopt+0x3af/0x720 [ 462.596373][T14004] ? __x64_sys_setsockopt+0x1ee/0x280 [ 462.596393][T14004] ? do_syscall_64+0xf3/0x230 [ 462.596416][T14004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.596450][T14004] __vmalloc_node_range_noprof+0x126/0x1380 [ 462.596495][T14004] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 462.596516][T14004] ? __kasan_kmalloc+0x98/0xb0 [ 462.596540][T14004] vmalloc_user_noprof+0x74/0x80 [ 462.596558][T14004] ? xskq_create+0xb6/0x170 [ 462.596575][T14004] xskq_create+0xb6/0x170 [ 462.596597][T14004] xsk_init_queue+0xa1/0x100 [ 462.596618][T14004] xsk_setsockopt+0x4aa/0x810 [ 462.596638][T14004] ? __pfx_xsk_setsockopt+0x10/0x10 [ 462.596654][T14004] ? __pfx_aa_sk_perm+0x10/0x10 [ 462.596682][T14004] ? aa_sock_opt_perm+0x79/0x120 [ 462.596714][T14004] ? __pfx_xsk_setsockopt+0x10/0x10 [ 462.596730][T14004] do_sock_setsockopt+0x3af/0x720 [ 462.596756][T14004] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 462.596782][T14004] ? __fget_files+0x395/0x410 [ 462.596806][T14004] ? __fget_files+0x2a/0x410 [ 462.596840][T14004] __x64_sys_setsockopt+0x1ee/0x280 [ 462.596867][T14004] do_syscall_64+0xf3/0x230 [ 462.596889][T14004] ? clear_bhb_loop+0x35/0x90 [ 462.596916][T14004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.596937][T14004] RIP: 0033:0x7f3cbcf8d169 [ 462.596961][T14004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.596977][T14004] RSP: 002b:00007f3cbdd6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 462.597002][T14004] RAX: ffffffffffffffda RBX: 00007f3cbd1a5fa0 RCX: 00007f3cbcf8d169 [ 462.597015][T14004] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 462.597028][T14004] RBP: 00007f3cbd00e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 462.597041][T14004] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.597053][T14004] R13: 0000000000000000 R14: 00007f3cbd1a5fa0 R15: 00007ffdf5b10f58 [ 462.597085][T14004] </TASK> [ 462.923013][T14004] Mem-Info: [ 462.926247][T14004] active_anon:13443 inactive_anon:0 isolated_anon:0 [ 462.926247][T14004] active_file:1419 inactive_file:38449 isolated_file:0 [ 462.926247][T14004] unevictable:768 dirty:501 writeback:0 [ 462.926247][T14004] slab_reclaimable:11480 slab_unreclaimable:112459 [ 462.926247][T14004] mapped:28897 shmem:4313 pagetables:920 [ 462.926247][T14004] sec_pagetables:0 bounce:0 [ 462.926247][T14004] kernel_misc_reclaimable:0 [ 462.926247][T14004] free:1302699 free_pcp:445 free_cma:0 [ 463.048245][T14004] Node 0 active_anon:42372kB inactive_anon:0kB active_file:5676kB inactive_file:153720kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115588kB dirty:2004kB writeback:0kB shmem:4316kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11328kB pagetables:3480kB sec_pagetables:0kB all_unreclaimable? no [ 463.170786][T14015] netlink: 'syz.4.1734': attribute type 27 has an invalid length. [ 463.202646][T14004] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 463.262014][T14004] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 463.377312][T14004] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 463.407342][T14004] Node 0 DMA32 free:1293592kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:47632kB inactive_anon:0kB active_file:5676kB inactive_file:153400kB unevictable:1536kB writepending:2004kB present:3129332kB managed:2549708kB mlocked:0kB bounce:0kB free_pcp:2224kB local_pcp:1020kB free_cma:0kB [ 463.506309][T14004] lowmem_reserve[]: 0 0 0 0 0 [ 463.524540][T14004] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 463.589082][T14004] lowmem_reserve[]: 0 0 0 0 0 [ 463.594756][T14004] Node 1 Normal free:3906500kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 463.660950][T14028] lo speed is unknown, defaulting to 1000 [ 463.676742][T14004] lowmem_reserve[]: 0 0 0 0 0 [ 463.679390][T14028] lo speed is unknown, defaulting to 1000 [ 463.682508][T14004] Node 0 [ 463.696144][T14028] virt_wifi0 speed is unknown, defaulting to 1000 [ 463.699427][T14004] DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 463.714057][T14028] lo speed is unknown, defaulting to 1000 [ 463.767225][T14004] Node 0 DMA32: 3*4kB (E) 109*8kB (UE) 556*16kB (UME) 1151*32kB (UME) 1160*64kB (UME) 725*128kB (UME) 400*256kB (UM) 254*512kB (UME) 141*1024kB (UM) 10*2048kB (UME) 167*4096kB (UM) = 1294996kB [ 463.772615][T14029] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1738'. [ 463.838526][T14004] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 463.861527][T14004] Node 1 Normal: 225*4kB (UME) 62*8kB (UME) 47*16kB (UME) 209*32kB (UME) 85*64kB (UME) 32*128kB (UME) 18*256kB (UME) 7*512kB (UME) 5*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3906500kB [ 463.890285][ T5854] Bluetooth: hci4: command 0x0405 tx timeout [ 463.894742][T14004] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 463.907937][T14004] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 463.954275][T14004] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 464.030879][T14004] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 464.060378][T14004] 42216 total pagecache pages [ 464.065323][T14004] 0 pages in swap cache [ 464.075065][T14004] Free swap = 124996kB [ 464.138108][T14035] batman_adv: batadv0: Interface deactivated: dummy0 [ 464.145505][T14035] batman_adv: batadv0: Removing interface: dummy0 [ 464.152439][T14004] Total swap = 124996kB [ 464.157253][T14004] 2097051 pages RAM [ 464.161135][T14004] 0 pages HighMem/MovableOnly [ 464.165925][T14004] 427902 pages reserved [ 464.228652][T14004] 0 pages cma reserved [ 464.248057][T14035] bond0: (slave gretap1): Releasing active interface [ 464.287867][T14040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1742'. [ 464.310958][T14035] gtp0: left allmulticast mode [ 464.404233][T14042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1743'. [ 464.423609][T14035] team0: Port device gtp0 removed [ 464.474134][T14046] netlink: 'syz.2.1745': attribute type 3 has an invalid length. [ 464.745622][T14049] lo speed is unknown, defaulting to 1000 [ 464.766575][T14059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1746'. [ 464.807956][T14059] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1746'. [ 464.818397][T14049] lo speed is unknown, defaulting to 1000 [ 464.825377][T14049] virt_wifi0 speed is unknown, defaulting to 1000 [ 464.852967][T14059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1746'. [ 464.919340][T14049] lo speed is unknown, defaulting to 1000 [ 464.994184][T14064] lo speed is unknown, defaulting to 1000 [ 465.033600][T14064] lo speed is unknown, defaulting to 1000 [ 465.074324][T14064] virt_wifi0 speed is unknown, defaulting to 1000 [ 465.116426][T14069] lo speed is unknown, defaulting to 1000 [ 465.119627][T14064] lo speed is unknown, defaulting to 1000 [ 465.158178][T14069] lo speed is unknown, defaulting to 1000 [ 465.213420][T14069] virt_wifi0 speed is unknown, defaulting to 1000 [ 465.293031][T14069] lo speed is unknown, defaulting to 1000 [ 465.745109][T14076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 465.883798][T14077] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 465.964686][T14069] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1750'. [ 466.040528][T14069] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 466.213445][T14072] lo speed is unknown, defaulting to 1000 [ 466.244691][T14090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1754'. [ 466.296209][T14090] netlink: 'syz.1.1754': attribute type 13 has an invalid length. [ 466.330327][T14094] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1756'. [ 466.371514][T14090] gretap0: refused to change device tx_queue_len [ 466.389786][T14090] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 466.426538][T14072] lo speed is unknown, defaulting to 1000 [ 466.442076][T10724] lo speed is unknown, defaulting to 1000 [ 466.676359][T14072] virt_wifi0 speed is unknown, defaulting to 1000 [ 466.698360][T14092] lo speed is unknown, defaulting to 1000 [ 466.705961][T14092] lo speed is unknown, defaulting to 1000 [ 466.717889][T14100] lo speed is unknown, defaulting to 1000 [ 466.718389][T14072] lo speed is unknown, defaulting to 1000 [ 466.737536][T14100] lo speed is unknown, defaulting to 1000 [ 466.747253][ T5854] Bluetooth: hci4: command 0x0405 tx timeout [ 466.775235][T14092] virt_wifi0 speed is unknown, defaulting to 1000 [ 466.822007][T14105] lo speed is unknown, defaulting to 1000 [ 466.828283][T14100] virt_wifi0 speed is unknown, defaulting to 1000 [ 466.909640][T14092] lo speed is unknown, defaulting to 1000 [ 467.100471][T14100] lo speed is unknown, defaulting to 1000 [ 467.179786][T14105] lo speed is unknown, defaulting to 1000 [ 467.527364][T14105] virt_wifi0 speed is unknown, defaulting to 1000 [ 467.726316][T14105] lo speed is unknown, defaulting to 1000 [ 468.407206][T14125] lo speed is unknown, defaulting to 1000 [ 468.511814][T14127] team0: left allmulticast mode [ 468.562452][T14127] macvlan4: left promiscuous mode [ 468.577585][T14127] macvlan4: left allmulticast mode [ 468.602580][T14125] lo speed is unknown, defaulting to 1000 [ 468.609177][ T26] lo speed is unknown, defaulting to 1000 [ 468.747892][T14129] bridge0: port 1(gretap0) entered blocking state [ 468.783594][T14129] bridge0: port 1(gretap0) entered disabled state [ 468.807494][T14129] gretap0: entered allmulticast mode [ 468.814483][T14129] gretap0: entered promiscuous mode [ 468.886636][T14132] gretap0: left allmulticast mode [ 468.905435][T14132] gretap0: left promiscuous mode [ 468.909395][T14128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1762'. [ 468.914630][T14132] bridge0: port 1(gretap0) entered disabled state [ 468.938562][T14125] virt_wifi0 speed is unknown, defaulting to 1000 [ 468.946423][T14125] lo speed is unknown, defaulting to 1000 [ 468.953829][T14136] netlink: 'syz.3.1763': attribute type 10 has an invalid length. [ 468.966210][T14136] wlan1: mtu less than device minimum [ 468.975927][T14130] siw: device registration error -23 [ 469.073372][T14137] macsec0: entered promiscuous mode [ 469.095412][T14137] macsec0: entered allmulticast mode [ 469.153173][T14139] ================================================================== [ 469.161373][T14139] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x1b6/0x6f0 [ 469.169296][T14139] Read of size 1 at addr ffff88807b278030 by task syz.0.1764/14139 [ 469.177360][T14139] [ 469.179719][T14139] CPU: 1 UID: 0 PID: 14139 Comm: syz.0.1764 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 469.179749][T14139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 469.179764][T14139] Call Trace: [ 469.179772][T14139] <TASK> [ 469.179781][T14139] dump_stack_lvl+0x241/0x360 [ 469.179815][T14139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.179839][T14139] ? __pfx__printk+0x10/0x10 [ 469.179861][T14139] ? _printk+0xd5/0x120 [ 469.179880][T14139] ? __virt_addr_valid+0x183/0x530 [ 469.179902][T14139] ? __virt_addr_valid+0x183/0x530 [ 469.179924][T14139] print_report+0x16e/0x5b0 [ 469.179949][T14139] ? __virt_addr_valid+0x183/0x530 [ 469.179967][T14139] ? __virt_addr_valid+0x183/0x530 [ 469.179984][T14139] ? __virt_addr_valid+0x45f/0x530 [ 469.180002][T14139] ? __phys_addr+0xba/0x170 [ 469.180029][T14139] ? rose_get_neigh+0x1b6/0x6f0 [ 469.180060][T14139] kasan_report+0x143/0x180 [ 469.180085][T14139] ? rose_get_neigh+0x1b6/0x6f0 [ 469.180116][T14139] rose_get_neigh+0x1b6/0x6f0 [ 469.180151][T14139] rose_connect+0x45a/0x1170 [ 469.180181][T14139] ? aa_sk_perm+0x96d/0xab0 [ 469.180211][T14139] ? __pfx_rose_connect+0x10/0x10 [ 469.180235][T14139] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 469.180267][T14139] ? __pfx_aa_sk_perm+0x10/0x10 [ 469.180294][T14139] ? __might_fault+0xc6/0x120 [ 469.180321][T14139] __sys_connect+0x288/0x2d0 [ 469.180345][T14139] ? __pfx___sys_connect+0x10/0x10 [ 469.180370][T14139] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 469.180401][T14139] ? do_syscall_64+0x100/0x230 [ 469.180429][T14139] __x64_sys_connect+0x7a/0x90 [ 469.180450][T14139] do_syscall_64+0xf3/0x230 [ 469.180477][T14139] ? clear_bhb_loop+0x35/0x90 [ 469.180505][T14139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.180531][T14139] RIP: 0033:0x7f3459f8d169 [ 469.180551][T14139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.180568][T14139] RSP: 002b:00007f3457df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 469.180589][T14139] RAX: ffffffffffffffda RBX: 00007f345a1a5fa0 RCX: 00007f3459f8d169 [ 469.180603][T14139] RDX: 000000000000001c RSI: 0000400000000080 RDI: 0000000000000007 [ 469.180615][T14139] RBP: 00007f345a00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 469.180629][T14139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.180641][T14139] R13: 0000000000000000 R14: 00007f345a1a5fa0 R15: 00007fff9bbf5f88 [ 469.180663][T14139] </TASK> [ 469.180670][T14139] [ 469.431083][T14139] Allocated by task 14006: [ 469.435544][T14139] kasan_save_track+0x3f/0x80 [ 469.440259][T14139] __kasan_kmalloc+0x98/0xb0 [ 469.444867][T14139] __kmalloc_noprof+0x285/0x4c0 [ 469.449817][T14139] copy_splice_read+0x17f/0xb40 [ 469.454675][T14139] splice_direct_to_actor+0x4fa/0xc80 [ 469.460142][T14139] do_splice_direct+0x289/0x3e0 [ 469.465001][T14139] do_sendfile+0x564/0x8a0 [ 469.469427][T14139] __se_sys_sendfile64+0x17c/0x1e0 [ 469.474547][T14139] do_syscall_64+0xf3/0x230 [ 469.479057][T14139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.485044][T14139] [ 469.487371][T14139] Freed by task 14006: [ 469.491464][T14139] kasan_save_track+0x3f/0x80 [ 469.496226][T14139] kasan_save_free_info+0x40/0x50 [ 469.501376][T14139] __kasan_slab_free+0x59/0x70 [ 469.506156][T14139] kfree+0x196/0x430 [ 469.510152][T14139] copy_splice_read+0x9db/0xb40 [ 469.515064][T14139] splice_direct_to_actor+0x4fa/0xc80 [ 469.520531][T14139] do_splice_direct+0x289/0x3e0 [ 469.525416][T14139] do_sendfile+0x564/0x8a0 [ 469.529844][T14139] __se_sys_sendfile64+0x17c/0x1e0 [ 469.534963][T14139] do_syscall_64+0xf3/0x230 [ 469.539473][T14139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.545374][T14139] [ 469.547701][T14139] The buggy address belongs to the object at ffff88807b278000 [ 469.547701][T14139] which belongs to the cache kmalloc-512 of size 512 [ 469.561877][T14139] The buggy address is located 48 bytes inside of [ 469.561877][T14139] freed 512-byte region [ffff88807b278000, ffff88807b278200) [ 469.575709][T14139] [ 469.578042][T14139] The buggy address belongs to the physical page: [ 469.584541][T14139] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b278 [ 469.593307][T14139] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 469.601943][T14139] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 469.609491][T14139] page_type: f5(slab) [ 469.613475][T14139] raw: 00fff00000000040 ffff88801b041c80 ffffea00009ccb00 dead000000000002 [ 469.622061][T14139] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 469.630665][T14139] head: 00fff00000000040 ffff88801b041c80 ffffea00009ccb00 dead000000000002 [ 469.639426][T14139] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 469.648121][T14139] head: 00fff00000000002 ffffea0001ec9e01 ffffffffffffffff 0000000000000000 [ 469.656886][T14139] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 469.665559][T14139] page dumped because: kasan: bad access detected [ 469.672097][T14139] page_owner tracks the page as allocated [ 469.677917][T14139] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5833, tgid 5833 (syz-executor), ts 82405498590, free_ts 82256743541 [ 469.697656][T14139] post_alloc_hook+0x1f4/0x240 [ 469.702463][T14139] get_page_from_freelist+0x365c/0x37a0 [ 469.708116][T14139] __alloc_frozen_pages_noprof+0x292/0x710 [ 469.713929][T14139] alloc_pages_mpol+0x311/0x660 [ 469.718802][T14139] allocate_slab+0x8f/0x3a0 [ 469.723331][T14139] ___slab_alloc+0xc27/0x14a0 [ 469.728055][T14139] __slab_alloc+0x58/0xa0 [ 469.732574][T14139] __kmalloc_noprof+0x2e6/0x4c0 [ 469.737432][T14139] fib6_info_alloc+0x2e/0xf0 [ 469.742030][T14139] ip6_route_info_create+0x445/0x12b0 [ 469.747862][T14139] ip6_route_add+0x28/0x160 [ 469.752411][T14139] addrconf_permanent_addr+0x7c7/0xc50 [ 469.757913][T14139] addrconf_notify+0x9f5/0x1020 [ 469.762781][T14139] notifier_call_chain+0x1a5/0x3f0 [ 469.768194][T14139] __dev_notify_flags+0x207/0x400 [ 469.773402][T14139] netif_change_flags+0xf0/0x1a0 [ 469.778354][T14139] page last free pid 5898 tgid 5898 stack trace: [ 469.784680][T14139] free_frozen_pages+0xe0d/0x10e0 [ 469.789709][T14139] __put_partials+0x160/0x1c0 [ 469.794385][T14139] put_cpu_partial+0x17c/0x250 [ 469.799272][T14139] __slab_free+0x290/0x380 [ 469.803725][T14139] qlist_free_all+0x9a/0x140 [ 469.808333][T14139] kasan_quarantine_reduce+0x14f/0x170 [ 469.813842][T14139] __kasan_slab_alloc+0x23/0x80 [ 469.818731][T14139] kmem_cache_alloc_noprof+0x1d9/0x380 [ 469.824279][T14139] vm_area_alloc+0x24/0x1d0 [ 469.828814][T14139] mmap_region+0x1b04/0x2fa0 [ 469.833464][T14139] do_mmap+0xecc/0x13a0 [ 469.837678][T14139] vm_mmap_pgoff+0x214/0x430 [ 469.842306][T14139] do_syscall_64+0xf3/0x230 [ 469.847023][T14139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.852964][T14139] [ 469.855301][T14139] Memory state around the buggy address: [ 469.860939][T14139] ffff88807b277f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.869073][T14139] ffff88807b277f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 469.877138][T14139] >ffff88807b278000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 469.885310][T14139] ^ [ 469.890940][T14139] ffff88807b278080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 469.899263][T14139] ffff88807b278100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 469.907328][T14139] ================================================================== [ 469.915578][T14139] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 469.922927][T14139] CPU: 1 UID: 0 PID: 14139 Comm: syz.0.1764 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 469.933811][T14139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 469.943881][T14139] Call Trace: [ 469.947176][T14139] <TASK> [ 469.950117][T14139] dump_stack_lvl+0x241/0x360 [ 469.954815][T14139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.960042][T14139] ? __pfx__printk+0x10/0x10 [ 469.964733][T14139] ? vscnprintf+0x5d/0x90 [ 469.969069][T14139] panic+0x349/0x880 [ 469.973008][T14139] ? check_panic_on_warn+0x21/0xb0 [ 469.978220][T14139] ? __pfx_panic+0x10/0x10 [ 469.982660][T14139] ? mark_lock+0x9a/0x360 [ 469.987003][T14139] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 469.992913][T14139] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 469.998818][T14139] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 470.005161][T14139] ? print_report+0x519/0x5b0 [ 470.010111][T14139] check_panic_on_warn+0x86/0xb0 [ 470.015180][T14139] ? rose_get_neigh+0x1b6/0x6f0 [ 470.020042][T14139] end_report+0x77/0x160 [ 470.024289][T14139] kasan_report+0x154/0x180 [ 470.028884][T14139] ? rose_get_neigh+0x1b6/0x6f0 [ 470.033757][T14139] rose_get_neigh+0x1b6/0x6f0 [ 470.038451][T14139] rose_connect+0x45a/0x1170 [ 470.043051][T14139] ? aa_sk_perm+0x96d/0xab0 [ 470.047597][T14139] ? __pfx_rose_connect+0x10/0x10 [ 470.052701][T14139] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 470.058735][T14139] ? __pfx_aa_sk_perm+0x10/0x10 [ 470.063638][T14139] ? __might_fault+0xc6/0x120 [ 470.068340][T14139] __sys_connect+0x288/0x2d0 [ 470.073050][T14139] ? __pfx___sys_connect+0x10/0x10 [ 470.078428][T14139] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 470.084949][T14139] ? do_syscall_64+0x100/0x230 [ 470.089723][T14139] __x64_sys_connect+0x7a/0x90 [ 470.094496][T14139] do_syscall_64+0xf3/0x230 [ 470.099009][T14139] ? clear_bhb_loop+0x35/0x90 [ 470.103699][T14139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.109774][T14139] RIP: 0033:0x7f3459f8d169 [ 470.114196][T14139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.134558][T14139] RSP: 002b:00007f3457df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 470.143212][T14139] RAX: ffffffffffffffda RBX: 00007f345a1a5fa0 RCX: 00007f3459f8d169 [ 470.151538][T14139] RDX: 000000000000001c RSI: 0000400000000080 RDI: 0000000000000007 [ 470.159611][T14139] RBP: 00007f345a00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 470.167693][T14139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.175853][T14139] R13: 0000000000000000 R14: 00007f345a1a5fa0 R15: 00007fff9bbf5f88 [ 470.183875][T14139] </TASK> [ 470.187454][T14139] Kernel Offset: disabled [ 470.191776][T14139] Rebooting in 86400 seconds..