last executing test programs: 6.87075338s ago: executing program 1 (id=1317): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000039040000000000000000711222000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, r3, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}]}, 0x30}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34005af6", @ANYRES16=r3, @ANYBLOB="00082dbd7000ffdbdf250700000008000400e000000108000500ac1e0001"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24000010) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x1c) unshare(0x2040600) r5 = socket$alg(0x26, 0x5, 0x0) close(0x3) socket$kcm(0x29, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000000), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x4, 0x8, 0xd}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f0000000440)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r9) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r7, 0x80089419, &(0x7f0000000240)) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="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"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r9) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x38, r11, 0x401, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000050) 5.86941005s ago: executing program 1 (id=1323): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000080)='\'', 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x40}, 0x2000c0c4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000100)=""/141, 0x1a, 0x8d, 0x1, 0x7}, 0x28) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000008000000000000000000008500000041000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000c00)="289e9f87916cbdf80a0000000000", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000"], 0x48) socket$rds(0x15, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='snd_soc_dapm_connected\x00', r6}, 0x18) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x0, 0x2}, {0x6}]}, 0x10) sendmmsg(r7, &(0x7f0000001c00), 0x400000000000159, 0x40840) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0xa, 0x801, 0x84) 4.775061728s ago: executing program 1 (id=1345): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xfffc}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x94, 0x2}]}}, {0x0, 0x4e22, 0x8}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xfffffffe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xac}]}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 4.650434156s ago: executing program 0 (id=1347): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) unshare(0x68040080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="cc02c057dd7365f250151e46071ded0d7509667aabac8cb9536ac0de1fdd7ba19016b9fd3a22eec2615d6de9ddad53e80c37e4769a4c10c7523bf07d6c5d24c65cffb7ed5cdb54e9c05129d8b26830e80f55bcee831330aa9fb523529f6622b9c8428f88d347069f053ad471520a2d6f900020e045f44ba31a452f9bb83572cb1342b0aba814bb91efd95c1b9fa583feb2a8777c2f255631572ce5dec4eb636f9e2f6fc4c77d411a1c8fc65ce769f560de3a4d37f923ecd6", 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000f40)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}], 0x1}}], 0x2, 0x4048884) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}, 0x74, 0x4, 0xe68e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000b0000000704000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000710300"/28], 0x50) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e20, @remote}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x40, {0x2, 0x4e21, @rand_addr=0x64010101}, 'wg0\x00'}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f0000000040)={'veth0_macvtap\x00', {0x2, 0x0, @loopback}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}}, 0x4044004) 3.339900553s ago: executing program 1 (id=1350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x15, 0x1, 0x3, 0xfffffff8}, {0x60, 0x8}, {}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x32, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x13, 0x1, {{0x0, 0x0, 0x0, 0x12000000, 0x6}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 2.991814008s ago: executing program 1 (id=1355): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000020000006d05000002"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000020000006d05000002"], 0x48) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) shutdown(r3, 0x0) (async) shutdown(r3, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000080)=0x59cc, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x8, 0x8, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095", @ANYRES64, @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r5, @ANYBLOB="d393ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000200000000"], 0x50) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r5, @ANYBLOB="d393ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000200000000"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r7, 0x58, &(0x7f0000000300)}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="53000000100001002cbd3000000000", @ANYRES32=0x0, @ANYBLOB="8021000000800400140003006e657464657673696d3000000000"], 0x4c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140faff"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r9 = socket$nl_rdma(0x10, 0x3, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x28, 0x0, 0xe985e4df3848afb5, 0x20, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x28}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 2.487387247s ago: executing program 4 (id=1359): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x33db, @rand_addr=' \x01\x00', 0x8fd}}, 0x1ff}, &(0x7f00000000c0)=0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000007c0)='nv\x00', 0x3) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x14, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff}, [@map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xffff}, @map_fd={0x18, 0x3, 0x1, 0x0, r4}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x84, &(0x7f00000004c0)=""/132, 0x41000, 0x48, '\x00', r6, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x3, 0xd, 0x1, 0x8001}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000640)=[{0x4, 0x4, 0x1, 0xc}, {0x4, 0x3, 0x1, 0x6}, {0x2, 0x1, 0xc, 0x1}, {0x2, 0x1, 0xf, 0x7}, {0x3, 0x3, 0x6, 0x2}, {0x1, 0x5, 0x1, 0x5}, {0x5, 0x1, 0xa, 0xa}, {0x0, 0x5, 0x5, 0xa}, {0x4, 0x5, 0x1, 0x5}, {0x5, 0x3, 0x10, 0x2}], 0x10, 0xe2d}, 0x94) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2, 0x2}, &(0x7f0000000140)=0x8) 2.229685007s ago: executing program 2 (id=1362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000007a7cdaf21e00b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x2802db3f}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000003c0)={0x4, 0x7fff, 0x8, 0x3, 0x8001, 0x8, 0x0, 0x3, r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808980200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebfcaad34732181feb215139f15eafddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca3905689a1f3db9c24db65c1e0001581d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86c0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8dd4fc7ea0000af3904ea0f3698cd9492794b8212a350d726bff873339c4cad4ead1348474250eda2c8067ab730c1d82a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c3fc74c00000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860e44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cd32941a815e3f3ceafe3065b9594fdcb24ebb6eddb9e87c9ecec7a42c0000abe1c6ea55887dfa18d0aea1b6eca5a883702b0bf3aefcb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3c0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5b0300000026d3c27e7945b29996e5cefbc9f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac2bc3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa1784d927aca9b8540534c5c49a0300cfbc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984ae4e679107a14bbb24851f6199eaf9a1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a55594616020f72f1c55ee3d325c7496a7c2f10cfeae16ae436751227378f0b1ee78bd33c50206700dd90b96a330f92bff736c83ca53e7f02b734d1a9292337e2be3896f7e7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cde00995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb6961c07b47521973cf0bb6f5530f6216b047b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d420e7b2a9e2f87f7b44949fe14c00000000000f47030c09f62d444b4981db81799776eeb4448278de519705fa8b56779bc8cc927b308c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dedc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982ebddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bffc30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c20024032e9b3bba7d6ceca38d3e96db049b92fc32ee34fe7b8419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab61213bf50000000000e1000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba3759fa55249b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be5732f29eed98d5b3688d80f7c66f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bb850f8035040ad9e57abe58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc053e64bfcfd057980136d6e9faca03b24fa300ef90bfe4ad364256937796f941c2fead94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808d409b5e36fc7fdd40080361427b6b9c118e5c9a0a1d5ca24886eb8a78796540635ac3530b9025d8bad0533a7f81b2188ec75a5fc9302e3815bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124bad23e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3018c7d48c4b6c2f6910975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df745ae7a4e446ca16d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf378ca2e577e206a758a3d46e45e7949c5b5069103009693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000b84b11308b6636b735b3c654cbc0000000000000019a4e9a9c2cbc906f97fd6eb00b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea02023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6085100d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac4bf5c06c6398c1b28bdd3f4c2353c330d8457cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a99d747d38ef5042053299b8e95decc637a022a49664742606cfdb2a3258498a6a0a82369d70177433e52b851ac396163ca09e6c22ad796a565cf23d87ae9be7235553aa6b8ab74842d3d4ba738b3fa997f079d225335f2af55644478e514aed8ba202805ad458d9ae6ab8d156f11f3cfe7def690f2bbbb463063664625223d23386540e0db96d8eb1755ad49ae817683de97a6dd32d584391302e65594b12bb2e6630217401031c8a1b964ca32f735421bbf64c9f1f9329e5cfda139ea79619e1d00a9a3ab49993362f30d191aa3387101feaa3e326190804eae2114437f8f4b27480900dd6511844a643886588fbdee7f8863a8dfdd75a9e128c6c15166a5f92d3c2d4952e5d07c59bfce0724a02600094c3369be3024edf451ff76a59855fd90353a0de907834bb77a059c56e92eed2f1415b3d8178453c7aecd8fbd161e2ffd66bcf2be175e45184f06bafd1c1c4fd7006a6c90d8afd126f1c51ee0f724ffbbed25a286c95d17c8b4297f8bba8efd565ecb157f0be244fb9657f737354b20e3a5012abb36052eec7a4fe9bc5b5283581b208d90d28d78f1c5422c3bcad67278e8bb88d7e6ccf72dd61319b44aa617d667000000000000a5edbd3e8605225681090853fc66a20e30fb9938e5886ae748236f5e071278763e070b2b75ce0a9e6870033d25dd19733152b01b507d812216e0f7fc89bbe200806f079e9515dd886a781a46ebe3da4c8307885b535109bb1678d08eeef3717bea30f64282ee844b6d64ec51b1221d175b59c1537089dfa803275ab6dcd40b1fe4e851597c1993a477c225201087b7b0977be62a71927bb01b705267aabe967add451795dfd5114726193415cc3e0784a37db8ab8b97a171bc4ad9593f7c750ad440a26b93d24ee8f080de0f2a16cbd5cd1f370bc1235d88d5cbd25acf91daa392731dab4c9c15015de2fded6332b6ebccf6e1588f3f1a5a3e853587a6843ee1a3f3c270e3ab4462bcff01c70b03e8f8c9d816d7d69e4040155e9f999ce4e366a816c6e7224f41df7eead6d6d214ed98708e1d269f4b469af2e2a2559258439758f4fded2780e736568c7eea209c5ed54a1beaf06013bb4b330d39518528a46d68b277faf926672650cad335ae285aeb0b0130a9c7016580a857722b9c51a5a37a856ccb9b6673f58ebfa66f1db4d041741e104cdd91efa4b3248ebecff3568f31b547b19a939708c3b4b45f46377b4a345248489ddef4bc87426717971de1c0049006d2fb99c311fa91c364749917ee81ea8fd51365449d568eadbad6aead6101b7e6582e793670492d814d58e4a9faa8a4a3027b230e8f5b2349fb3ff3c4365df6bd85aa7f76c388ef94f0155c81b04863624fb4708f83ebf93a51d1438d7761d4b1b929d9aa8faef691676834a2591b75205ede2e4a709c3a9899d06c5cb5a571159402e429c5cf839f49957aed76dc7db43f9fdc754e40d7c662ad7939a09bfdbc31deb0d327895afae1eca61820e09abc2c0ed5ce083aceb89c8e24ad45483d3128f0547869970dc84c8787a06046bf79f28a7678b03baeff239ce600d91a07236e255ff7ea441ff0602bb38d7aaa1c414a94c4e143ea2cca9d14a01bb70ff93057a03288bd71c45b025731765ca5250b162f08be1a29460a53f213bfb88a8e80e4c46dbfa5936894a95d27c4e90c151748f8ee457c29cb7e21deb805a9c5c6abf373a4bad5e1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000280)="aa9b258ca2ac1f08a1abe51703a4c5684cf52f00512ae1fd704b139509611e20024aef85b9e4af88a42f37c6ce628c26da6ec8a061ff6ee80d0a0422ffaffebe018a23b658f53253a6ae1607eca70ed41690ed03c64b23e6186a842bf8a52c30be69bc7c6bf663e31050ad0e65f59cc10caf66"}, 0x20) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000400)={r7, 0x2, 0x0, 0x81}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0xd9, 0x1, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x700, 0x8000, 0x4, 0x6}}) sendto$packet(r9, &(0x7f0000000540)="8d0b094d26ef1ce7a24a52a6f5117b093a7dbf45c43b7be524ce9de73922b2a21658f0911a2f923c2635e6628848fe742b8d1d300d275f7ec7190be601ad822d6bc41095aa8aa6de8be06f0f2b79eedbd9c2a7677dbf49fbc3736bc6c1742e", 0x5f, 0x4040041, &(0x7f0000000740)={0x11, 0x3, r10, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x14) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff0307e804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.220636977s ago: executing program 4 (id=1363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r1) (async) r2 = socket(0x10, 0x803, 0x0) (async, rerun: 64) r3 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) socket(0x400000000010, 0x3, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000002bf6000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) (async) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000006000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00:\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) close(0x3) (async) unshare(0x6a040000) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r8}, 0x0, &(0x7f0000001040)}, 0x20) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r10, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x5bc}, 0x8) bind$inet(r2, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) 2.00857198s ago: executing program 2 (id=1365): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1, &(0x7f0000000300)=@raw=[@jmp={0x5, 0x1, 0x9, 0x7, 0x8, 0x4, 0x1}], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, r0, 0x3f, &(0x7f0000000080)={0x2, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000004851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000003400000095"], &(0x7f00000006c0)='syzkaller\x00'}, 0x94) 2.008081261s ago: executing program 0 (id=1366): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x6, 0x8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) shutdown(r2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x9, 0x3, 0x268, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xe, 0x8, [0x1a, 0xf, 0xf, 0x2f, 0x23, 0x3e, 0x30, 0x15, 0x3b, 0xe, 0x1e, 0x17, 0x1b, 0x3c, 0x36, 0x4], 0x2, 0x2, 0x8}}}, {{@uncond, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x6, 0x0, 'snmp\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) ppoll(&(0x7f0000000500)=[{r11}], 0x1, 0x0, 0x0, 0x0) 1.930524002s ago: executing program 2 (id=1367): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x5, &(0x7f0000000040)=@framed={{}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0xffffffff}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 1.83654224s ago: executing program 2 (id=1368): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="230000000100", 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0xbc, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0x6e, 0x8, "3508b5e76aa2f87ee41208d5ef7c97117a22f4980d3d10b473350059d839890e6f50ed84c553875f519858e8c7539c27d0fd6385525d6db51eecab600f24296c8ef54fa8652300ead0a735da0aac95d5d141ab6bb5615c532036a36caff8899bb2e6508efc5f6b58ca01"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0xc0, 0x18, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x94, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6c5247fd}, @NFTA_HOOK_DEV={0x14, 0x3, 'dummy0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_DELOBJ={0x74, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x3b, 0x8, "0f9f94f251ca849f8c6ae35bb66c8ae91348471e27af66003dfcc8a1d37d383f9f5cefca72960d92371f540996eee435c2b751b7a30789"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x288}, 0x1, 0x0, 0x0, 0x48c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)={0x120, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x49e}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x8000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x1}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x24000000) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000880)={@rand_addr=' \x01\x00', @empty, @mcast1, 0xcf14, 0x0, 0x2, 0x0, 0x179a, 0x44000121, r7}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) 1.551812746s ago: executing program 3 (id=1370): socket(0xa, 0x3, 0x3a) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) socket$netlink(0x10, 0x3, 0xf) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x17f, 0x0, 0x0, 0x300}, 0x9c) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x4c, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a320000000009008eb673dabeb5e45600000900020073797a32000000001400000011000100001374abd28656388f2a9c74"], 0x80}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xffff, 0x7, 0xdd5, 0x1e69}, 0x8) (async) sendmmsg$inet6(r2, &(0x7f0000000240), 0x0, 0x200448c4) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xffff, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdbd, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0) (async) connect$inet6(r5, 0x0, 0x0) (async, rerun: 64) close(r5) (async, rerun: 64) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xffffedcffff, 0x1000, 0xffffffff, 0x1}, 0x20) (rerun: 32) r6 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async, rerun: 32) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) 1.371232398s ago: executing program 4 (id=1371): ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f00000001c0)={{}, "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"}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000011c0), &(0x7f0000001200)=0x30) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001240)={&(0x7f00000014c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="300129bd7000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="0c009900f6ffffff4e0000000400870003005700a90900003c003300c094118b199b8342106102136318aeb5fa11000001080211000001c7e9a88681fa53930200498135008c180e02d574ba8cb4e4d6afbe390f9d5477ff763fb9dcdaf4e6c09183ad8f469414032729ddd59477a728400120c59e56926c82eda72893f79e905caefb596b0032eacef513efd05ce5702f14d2374659e640dcb2a06e0a1f9dc8c75a71"], 0x70}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f0000000240)=0x8) getsockopt$packet_buf(r4, 0x107, 0x2, &(0x7f0000001400)=""/99, &(0x7f0000001480)=0x63) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r7, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x3e8, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r2) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x40, r8, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x20040810) 1.232673661s ago: executing program 3 (id=1372): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000280)={0x20, r1, 0x405, 0x70bd27, 0x25dfdbfa, {}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x10008001}, 0x44080) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xa, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 952.645315ms ago: executing program 4 (id=1373): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f37481d90eeaead391345b4da9d27e24c9c670da3afc5c00009700"/50, 0x32}, {&(0x7f0000000200)="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"/278, 0x116}, {&(0x7f0000000180)="f3f97053495b072215aee864193557c0dabdd253711d5ed9b131c5abd8796e5759ab1f639211e68e24bf4471b6ab1429b165c7248cded82bfb4a3f48e8d0", 0x3e}], 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c9301ffffffff0000000000000000000000000000000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa0a7da2c0f2e8db8dea8dce5ef7eb517ee000000200000000"], 0x50}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000380)="c1ad061c5d914eadd95de7fb63eb7b0306d91c25f3fba6497eda8a5e3820dfe1fe0f007a01d724be33a44f1cd52028110d8f7dd4b3421a3fe4b2066d1746938ba15c3956e1aaad35035bcde7b90ed59ee2de06c8a4af3de95bda", 0x5a}, {&(0x7f0000000400)="ae8174697aace4a42cfce5d6ba9712a41317a438ef425d9b5b03cc4913c5de2b815173d2e3", 0x25}, {&(0x7f0000000100)="017cd9172a004f15543520f061c76ab646404bd4b1259eba64d00b82f483de8587", 0x21}, {&(0x7f0000000340)="c6907c60cfc3ceda96", 0x9}, {&(0x7f00000009c0)="e427d5feec20e358d7dc795ff0c23840b37a9c4f2477646592a3a1872e67b590d937407daa85405eb2b06383c555eb8dde960698d2bcad493de83635c7d97855c26d7d5c9297316faf658fb40f411f734f0aaf1e2ffe9471142f869eb8e9f48716a003fb68ccd18b56456e7d04414928", 0x70}], 0x5}}, {{0x0, 0x0, &(0x7f0000001780)}}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000003140)="01", 0x1}], 0x1}}], 0x4, 0xc080) 922.538042ms ago: executing program 0 (id=1374): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000208000a40000000000900020073797a32000000000900010073797a30000000000800054000000023600000000c0a01010000000000000000010000000900020073797a32000000003400038030000080080003400000000100000b80200001800e000100636f6e6e6c696d69740000000c0002800800014000000000090001"], 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x20000800}, 0x4000042) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000006c000100"/20, @ANYBLOB="00000000000000001800348014003580"], 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2a4efb95d92e40d63e89b86ab9fd4aa3d63cfa7f164d2b902f0ab503c7ac8e1a2e2f3fa24f1f85bddff3a9992c99eaf758c16af54d51423ca51300"/70, @ANYRES16=r6, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r6, 0x321, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x79, 0x46}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x131}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 861.67927ms ago: executing program 3 (id=1375): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}}) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="040100001c0007000000000000000000ff020000000000000000000000000001e00000"], 0x104}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001780)=ANY=[@ANYBLOB="980000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000000002800400120008000a00", @ANYRES32=0x0, @ANYBLOB="140035007665746831000000000000000000000044002b8008000800", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="0a000100"], 0x98}, 0x1, 0x0, 0x0, 0x24000804}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}}) (async) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="040100001c0007000000000000000000ff020000000000000000000000000001e00000"], 0x104}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001780)=ANY=[@ANYBLOB="980000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000000002800400120008000a00", @ANYRES32=0x0, @ANYBLOB="140035007665746831000000000000000000000044002b8008000800", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="0a000100"], 0x98}, 0x1, 0x0, 0x0, 0x24000804}, 0x10) (async) 716.467941ms ago: executing program 0 (id=1376): sendmmsg(0xffffffffffffffff, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000240)="aae434a1d5a583c7f64d975f9084bf03c8708925dbe9a133d662cb170d14f43fec4de147a944cf938a7e6026593f8f50b97d0b36d74fe7", 0x37}, {0x0}], 0x2}}], 0x1, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_deladdr={0x44, 0x15, 0x0, 0x70bd25, 0x25dfdbfe, {0x2, 0x38}, [@IFA_CACHEINFO={0x14, 0x6, {0x6ea, 0x100, 0x6, 0x5}}, @IFA_TARGET_NETNSID={0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0xc}, @IFA_BROADCAST={0x8, 0x4, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) 715.038716ms ago: executing program 4 (id=1377): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x14, r1, 0xf21, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x8010) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x3, 0x3a) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r7 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000540)={0x2, &(0x7f00000001c0)=[{0xe80f, 0xd1, 0x3, 0x1ff}, {0x1, 0xc0, 0x4, 0x7}]}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x0) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 714.400602ms ago: executing program 2 (id=1378): clock_gettime(0x8, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1000}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x5c}}, 0x4000010) (async) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="740000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="4606090000000000440012800b00010065727370616e00003400028006000e00030000000600030009000000080006000000000005000a00010000000500090004000000080004000000000008000500", @ANYRES32=r6, @ANYBLOB="8800", @ANYRES32=r4, @ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x600}, 0x0) 585.343572ms ago: executing program 3 (id=1379): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000400c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x7, 0x20, 0x5, 0x800, {{0x1a, 0x4, 0x1, 0x1, 0x68, 0x67, 0x0, 0x1, 0x2f, 0x0, @multicast2, @remote, {[@generic={0x8b, 0x2}, @ssrr={0x89, 0xb, 0x7c, [@multicast1, @private=0xa010100]}, @lsrr={0x83, 0x17, 0x27, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x1f}, @dev={0xac, 0x14, 0x14, 0x3a}, @loopback]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0xd0, [@multicast1, @rand_addr=0x64010100]}, @generic={0x94, 0xd, "0647c6784d1df8895318af"}, @rr={0x7, 0xb, 0x21, [@broadcast, @dev={0xac, 0x14, 0x14, 0x18}]}, @end, @generic={0x86, 0x7, "57e16113dc"}, @noop]}}}}}) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}}], 0x2, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)={0x28, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}}, 0x891) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="cd71c0ff080000008510000004000000950000000000000095000000000000001861000000000000000008000e00000018440000fbffffff00000000000000008d99e0ffffffffff8510000005000000850000004b000000ebe3decb20490217f0d5ac7a7fb427463c224ceee5cb42f95051c5"], &(0x7f0000000100)='GPL\x00', 0x8, 0x10, &(0x7f0000000140)=""/16, 0x40f00, 0x10, '\x00', r0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xd, 0xe, 0x40}, 0x10, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000240)=[{0x2, 0x5, 0x2, 0x8}, {0x1, 0x3, 0xb, 0x9}, {0xf979, 0x2, 0x1, 0x2}, {0x5, 0x1, 0xa, 0x1}, {0x3, 0x3, 0x0, 0x3}, {0x2, 0x5, 0x6}, {0x4, 0x4, 0x9, 0x8}], 0x10, 0x3}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000094}, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f00000003c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000300", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x20, r6, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x2000c0c0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 548.355268ms ago: executing program 2 (id=1380): socket$can_j1939(0x1d, 0x2, 0x7) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x1, 0x3, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x5}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048002}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0x10, 0x3, 0x0) (async) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r6, 0x6, 0xd, 0x0, 0x0) (async) getsockopt$inet6_tcp_buf(r6, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="08008863040002"], 0xfce) (async) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="08008863040002"], 0xfce) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r7, &(0x7f0000003540)=[{{&(0x7f0000000100)={0x2, 0x4e1d, @multicast1}, 0x10, &(0x7f00000009c0)=[{&(0x7f00000004c0)="2b3dcb037cf6eefdd865abf4cb8b1d17613cba0add0fc611e8e8edeb824ba694c30ed1d75eafde7ef357f25d275ad90b0ad65c4e3181039007d9096ab1a098bbd39415dc16914bbe91674f0deb1055864e2dc88798e3b3bf82e866c36f30af92cf204c04b58ef42e2744042bb5d5af77aff174539bd796f35aedbcaef63cce67d65f3321eb7700beef47308d9fc2b6d1a18e0484c097d27c0b2fc3b708c2897b9f55dd06c88b6db07b64431bff78a7eea64b1300bd6de2393e21f640e8b377e934245cd31a70d7f4823df271b235bd3d0b356a6bf5e7bd476d4ab8dd640f746dc0b90e080a494f", 0xe7}, {&(0x7f00000005c0)="1da91706353d671ffb11e4f447350c1aae5cc28fae8c0c90a2ed9a62073ca09b91a212a31f3550b813a7c81cf5d7fa8a08958f0dc0f394799f81", 0x3a}, {&(0x7f0000000600)="862581263117a595cc8b4d91c81820960c318c8396349d812700e75e525fa32b7544ceb489026264e882e6b071a12ffdb5e7ff35e2e1002046d831da9a75680854fe172d076b8dc3803ff9d26d49bf4b103373dff834806016adcd95ad25f436a81a0bd5d8cdc59c4ade543b23b68110ccfd37ccc3c778d40629a5e61b0e8cd6af005f30363c40c4bca955232d75b1609cd8da8771356513bf156c823aed462a5773220cfff599bc209f5f2d7baf2ac7cb7a896eb9708cef3b8c24cb243997889d197ee8bc4ab9a5c69628751008577fcf4074fbdee3591a3a2641", 0xdb}, {&(0x7f0000000700)="fd3f12b11bb32a8a76e016794ce0643bb98d1c07715d51090783781fefb0a7b2b3e618c882ed4d2251b83d733eb420ce93c78f2f93f899e2bf36f1c58b9703d0ba118ad0b3f2cb5b3e51b06e5925d81e6e4fd80f16431e01f64990254de92d67902dd61b93f3006dfe188282923bb8aa3c7af13dec03b0521221868f11d0301d273e3f6726d107520e8b6aed0a1b", 0x8e}, {&(0x7f0000000b40)="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", 0x337}], 0x5}}], 0x1, 0x40080a0) setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000280)=0x3, 0x4) sendmmsg$inet(r7, &(0x7f0000003500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x98}}], 0x1, 0x40012) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000300)={0x1d, r10, 0x2, {0x0, 0xf0}, 0xc295a7c9ee09b05c}, 0x18) (async) bind$can_j1939(r0, &(0x7f0000000300)={0x1d, r10, 0x2, {0x0, 0xf0}, 0xc295a7c9ee09b05c}, 0x18) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4008080}, 0x2000c801) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r11, 0x400448ca, 0x0) 336.625258ms ago: executing program 0 (id=1381): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e01, @private=0xa010101}, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'veth0_vlan\x00', {0x921}, 0x7098}) r2 = accept4(r0, &(0x7f0000000080)=@sco={0x1f, @fixed}, &(0x7f0000000180)=0x80, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="0180000000010101000000000000aaedd7d3dc5daa10dad529b2000000000006080007409c26e5095400108008000240000000040800034000000009080003400000040008000140fffffff90800034000007fff080002400000000a0800014000000fff080001400000000508000140"], 0x70}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) socket$inet_mptcp(0x2, 0x1, 0x106) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e01, @private=0xa010101}, 0x10) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, 0x0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) (async) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'veth0_vlan\x00', {0x921}, 0x7098}) (async) accept4(r0, &(0x7f0000000080)=@sco={0x1f, @fixed}, &(0x7f0000000180)=0x80, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="0180000000010101000000000000aaedd7d3dc5daa10dad529b2000000000006080007409c26e5095400108008000240000000040800034000000009080003400000040008000140fffffff90800034000007fff080002400000000a0800014000000fff080001400000000508000140"], 0x70}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) (async) 330.903599ms ago: executing program 3 (id=1382): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a000100000000000000001881000800004000000000000008e22c749ceaf70cf05e7193a2d13605259d687cc62df361af037c0bcc2cd9d2b68a9f3e581e5f8fe05a3caec017ba97c44e9043bf3a850be5d929c1f3ba936a8d2a26c3ec6e412235ae1a231da67ea5694578f6c5b176246bf60a42e1e52870b265e7aca1ea7b1b763f325060385a06a1e8dc8ff1c3c663d37c841af7581244f27bcc9625d326f8c9b75aa3a5d34cbb8bd9505477f3498aa2bb86f6615d784fc51c7cbeefe20ac08193946f051cb05a89ea1fa14ebb541b83df584bf0d9a15a9b39b596bb00000000439d7452008da53da27bad3b"], 0x24}}, 0x10000000) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000040)=0x15, 0x4) sendmsg$netlink(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)={0x14, 0x22, 0x723, 0x0, 0x0, "", [@nested={0x4, 0xa9}]}, 0x14}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) 139.406314ms ago: executing program 4 (id=1383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000140000001000000", @ANYRES32=r5], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r6, &(0x7f0000000900)}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000840)={{r3}, r7, 0x0, @inherit={0x48, &(0x7f0000000180)={0x1, 0x0, 0x8, 0x7, {0x20, 0x8, 0x2, 0xff, 0x1263eb7}}}, @name="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"}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000880)={{r0}, r7, 0x10, @inherit={0x60, &(0x7f0000000000)={0x0, 0x3, 0x5, 0x8, {0x0, 0xb31, 0x3, 0x2, 0x8}, [0x8000000000000001, 0x2, 0x1]}}, @name="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"}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x100, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x54, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2ee6871a}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5771d014}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip_vti0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2a95cfa9}]}]}], {0x14}}, 0x128}}, 0x0) 29.783389ms ago: executing program 0 (id=1384): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@mcast2, @private1, @loopback, 0x1, 0x2, 0xc, 0xd00, 0xe, 0xc80032, r1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40455d00000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106402f11e7ef8e766bc851286d7b851917a8c4428e9e9e091293cae490c16826a3c85a205f678852b43a06c61d63ba42373a00bb7c1ad7f1758c6b2ce8b1f597542c5b20d1abf3d9cba06aa296695acaa0facffbd68f6cafc22503df4d5c27c256f0b4f6c49fa2d43becd9c27d04488658cebd38947517a7ab12195f2e5a26fccf5baa41dc0bb3b777019eabb057c0db7069c109a9f969da3d7fa87b35f7cad005636d9e278b22a111b90dda70832b9773e6c964339bb3c4185e0ceb9a1cf08e553c244fba9bf1f098ed541e3501b56b576e78f951702b8be38082aacc094274456d93eff9f781adecbc6401bb5575b1d0d0dbf948cc15c194fb002ddc28f42b06001400000010000100"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r5) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000002fc0)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) read$alg(r8, &(0x7f0000000cc0)=""/4084, 0x12a) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x0, 0x114}]}, &(0x7f0000000000)='GPL\x00', 0x8001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x8000000, 0x0, 0x0, 0x8000000}, 0x90) sendmmsg$alg(r8, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef6b", 0x88}, {&(0x7f0000000600)="faab78d5e4201d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c02080809000000000000009cd1df31c662ff364cbace61fcb7e067b266f3fed7c325d75bd964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163ccf71e6f0ce625cddf3ac464cae067dc59d35ab8c", 0x76}, {&(0x7f0000002300)="5599e749c873ff12bae277e2d5027ac7b6e8af5edec249a07e720054d05658cc7c3d17e4ccebd593ef74c49b", 0x2c}], 0x3, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000850}], 0x1, 0x4000080) 28.694308ms ago: executing program 3 (id=1385): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x62, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}}, 0x0) socket$inet(0x2, 0x3, 0x9) 0s ago: executing program 1 (id=1386): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0xf}, [@NFQA_CFG_CMD={0x2b, 0x1, {0x1}}]}, 0xe}}, 0x20000840) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r2}]}, 0x24}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) nanosleep(&(0x7f0000000340)={r11, r12+10000000}, &(0x7f0000000380)) (async) getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r14 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r14, &(0x7f0000000040)={0x1d, r15, 0x8000000000000003}, 0x18) (async) recvfrom$inet(r14, 0x0, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r13}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0xf}, {0xe, 0xfff3}, {0x9, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x4}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) kernel console output (not intermixed with test programs): _1 (retrying later): interface not active [ 75.426847][ T5852] hsr_slave_0: entered promiscuous mode [ 75.433195][ T5852] hsr_slave_1: entered promiscuous mode [ 75.440654][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 75.446385][ T5852] Cannot create hsr debugfs directory [ 75.563088][ T5846] hsr_slave_0: entered promiscuous mode [ 75.569511][ T5846] hsr_slave_1: entered promiscuous mode [ 75.575543][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 75.581521][ T5846] Cannot create hsr debugfs directory [ 75.882928][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.921113][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.933885][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.978640][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.071182][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.083851][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.110794][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.120603][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.182044][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.213840][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.234809][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.256759][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.343845][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.355149][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.382901][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.397045][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.522058][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.547130][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.555483][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.580595][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.601400][ T5158] Bluetooth: hci0: command tx timeout [ 76.617444][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.625000][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.636887][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.665201][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.680422][ T5838] Bluetooth: hci2: command tx timeout [ 76.685860][ T5838] Bluetooth: hci4: command tx timeout [ 76.691746][ T5849] Bluetooth: hci1: command tx timeout [ 76.697589][ T5158] Bluetooth: hci3: command tx timeout [ 76.711881][ T3421] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.719164][ T3421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.730589][ T3421] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.737690][ T3421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.746978][ T3421] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.754073][ T3421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.793264][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.815439][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.822563][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.896099][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.933849][ T3421] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.941031][ T3421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.964565][ T3421] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.971746][ T3421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.025367][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.105924][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.133659][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.140845][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.217700][ T3421] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.224905][ T3421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.347054][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.433939][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.512312][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.585239][ T3421] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.592496][ T3421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.650039][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.657175][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.755829][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.781389][ T5846] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.791907][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.821233][ T5836] veth0_vlan: entered promiscuous mode [ 77.866395][ T5836] veth1_vlan: entered promiscuous mode [ 77.891755][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.932031][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.066199][ T5836] veth0_macvtap: entered promiscuous mode [ 78.100606][ T5836] veth1_macvtap: entered promiscuous mode [ 78.176287][ T5852] veth0_vlan: entered promiscuous mode [ 78.188971][ T5845] veth0_vlan: entered promiscuous mode [ 78.204909][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.217064][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.243326][ T5852] veth1_vlan: entered promiscuous mode [ 78.267949][ T3421] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.303193][ T5845] veth1_vlan: entered promiscuous mode [ 78.328894][ T3421] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.354863][ T3421] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.369060][ T3421] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.432709][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.451718][ T5852] veth0_macvtap: entered promiscuous mode [ 78.496286][ T5845] veth0_macvtap: entered promiscuous mode [ 78.505309][ T5852] veth1_macvtap: entered promiscuous mode [ 78.545611][ T5845] veth1_macvtap: entered promiscuous mode [ 78.557811][ T5835] veth0_vlan: entered promiscuous mode [ 78.559922][ T3421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.573659][ T5835] veth1_vlan: entered promiscuous mode [ 78.590647][ T3421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.636158][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.665087][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.679322][ T5158] Bluetooth: hci0: command tx timeout [ 78.699464][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.713318][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.719885][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.728918][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.750266][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.760861][ T5158] Bluetooth: hci2: command tx timeout [ 78.775382][ T5158] Bluetooth: hci3: command tx timeout [ 78.778258][ T5838] Bluetooth: hci4: command tx timeout [ 78.780822][ T5849] Bluetooth: hci1: command tx timeout [ 78.793056][ T5835] veth0_macvtap: entered promiscuous mode [ 78.801689][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.814231][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.853097][ T1167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.863310][ T1167] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.887621][ T5835] veth1_macvtap: entered promiscuous mode [ 78.893067][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.910091][ T1167] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.925772][ T5846] veth0_vlan: entered promiscuous mode [ 78.953493][ T1167] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.973808][ T1167] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.013352][ T5846] veth1_vlan: entered promiscuous mode [ 79.034733][ T5957] tipc: Started in network mode [ 79.047059][ T5957] tipc: Node identity 9229136f2a97, cluster identity 4711 [ 79.056749][ T5957] tipc: Enabled bearer , priority 0 [ 79.087078][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.099826][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.119565][ T5957] syzkaller0: entered promiscuous mode [ 79.125055][ T5957] syzkaller0: entered allmulticast mode [ 79.144346][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.176197][ T5846] veth0_macvtap: entered promiscuous mode [ 79.199491][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.213712][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.226810][ T5846] veth1_macvtap: entered promiscuous mode [ 79.246665][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.265898][ T3421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.274571][ T3421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.312768][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.321209][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.327557][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.367342][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.396383][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 79.426486][ T5957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 79.436704][ T1167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.437124][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.453706][ T1167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.462862][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.474640][ T5956] tipc: Resetting bearer [ 79.506715][ T5956] tipc: Disabling bearer [ 79.517743][ T4922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.525460][ T1167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.534986][ T4922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.552495][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.715927][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.745018][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.806477][ T5967] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.808936][ T5970] netlink: 'syz.2.3': attribute type 3 has an invalid length. [ 79.875949][ T4922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.886318][ T4922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.000268][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.028365][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.033020][ T5971] netlink: 248 bytes leftover after parsing attributes in process `syz.3.6'. [ 80.046242][ T5979] Zero length message leads to an empty skb [ 80.093671][ T5979] bridge_slave_0: left allmulticast mode [ 80.105195][ T5979] bridge_slave_0: left promiscuous mode [ 80.113104][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.126069][ T5979] bridge_slave_1: left allmulticast mode [ 80.133423][ T5979] bridge_slave_1: left promiscuous mode [ 80.140550][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.154326][ T5979] bond0: (slave bond_slave_0): Releasing backup interface [ 80.166280][ T5979] bond0: (slave bond_slave_1): Releasing backup interface [ 80.180726][ T5979] team0: Port device team_slave_0 removed [ 80.191624][ T5981] netlink: 'syz.2.7': attribute type 10 has an invalid length. [ 80.202218][ T5979] team0: Port device team_slave_1 removed [ 80.212516][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.220214][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.229249][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.236773][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.282050][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.293624][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.375289][ T5981] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 80.762538][ T5158] Bluetooth: hci0: command tx timeout [ 80.801454][ T5992] netlink: 'syz.2.8': attribute type 11 has an invalid length. [ 80.844080][ T5158] Bluetooth: hci4: command tx timeout [ 80.849679][ T5158] Bluetooth: hci3: command tx timeout [ 80.855129][ T5158] Bluetooth: hci1: command tx timeout [ 80.860954][ T5849] Bluetooth: hci2: command tx timeout [ 81.055118][ T5996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.210114][ T5996] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 81.258172][ T5996] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1'. [ 81.552307][ T6027] sctp: [Deprecated]: syz.4.15 (pid 6027) Use of struct sctp_assoc_value in delayed_ack socket option. [ 81.552307][ T6027] Use struct sctp_sack_info instead [ 81.620254][ T6017] tipc: Started in network mode [ 81.625258][ T6017] tipc: Node identity 7a5caba9793e, cluster identity 4711 [ 81.634388][ T6031] syz.0.16 uses obsolete (PF_INET,SOCK_PACKET) [ 81.712929][ T6017] tipc: Enabled bearer , priority 0 [ 81.995323][ T6050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19'. [ 82.055788][ T6029] syzkaller0: entered promiscuous mode [ 82.086528][ T6029] syzkaller0: entered allmulticast mode [ 82.106300][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 82.192016][ T6054] netlink: 260 bytes leftover after parsing attributes in process `syz.2.19'. [ 82.222312][ T6054] netlink: 260 bytes leftover after parsing attributes in process `syz.2.19'. [ 82.293135][ T6045] syzkaller0: entered promiscuous mode [ 82.299887][ T6045] syzkaller0: entered allmulticast mode [ 82.343726][ T6015] tipc: Resetting bearer [ 82.404636][ T6015] tipc: Disabling bearer [ 84.117769][ T6113] netlink: 32 bytes leftover after parsing attributes in process `syz.1.31'. [ 84.338297][ T6115] netlink: 28 bytes leftover after parsing attributes in process `syz.4.32'. [ 84.342169][ T6114] tipc: Started in network mode [ 84.392776][ T6114] tipc: Node identity 4a931964c6ac, cluster identity 4711 [ 84.422902][ T6114] tipc: Enabled bearer , priority 0 [ 84.613882][ T6114] tipc: Disabling bearer [ 84.713571][ T6094] __nla_validate_parse: 1 callbacks suppressed [ 84.713589][ T6094] netlink: 20 bytes leftover after parsing attributes in process `syz.2.26'. [ 84.756409][ T6094] netlink: 'syz.2.26': attribute type 13 has an invalid length. [ 84.807628][ T6094] netlink: 'syz.2.26': attribute type 17 has an invalid length. [ 84.808664][ T6136] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 84.836716][ T6094] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 84.877454][ T6135] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 85.424670][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.42'. [ 85.572456][ T6159] hsr0: entered promiscuous mode [ 85.582285][ T6160] hsr_slave_0: left promiscuous mode [ 85.589584][ T6160] hsr_slave_1: left promiscuous mode [ 85.624116][ T6160] hsr0 (unregistering): left promiscuous mode [ 85.811295][ T6172] netlink: 76 bytes leftover after parsing attributes in process `syz.0.45'. [ 85.865051][ T6174] netlink: 'syz.4.46': attribute type 1 has an invalid length. [ 85.947108][ T6174] netlink: 120 bytes leftover after parsing attributes in process `syz.4.46'. [ 86.053077][ T6179] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.074608][ T6185] Bluetooth: MGMT ver 1.23 [ 86.267349][ T6197] netlink: 56 bytes leftover after parsing attributes in process `syz.3.52'. [ 86.295776][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.52'. [ 86.342590][ T6199] netlink: 24 bytes leftover after parsing attributes in process `syz.3.52'. [ 86.593859][ T6214] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 86.685474][ T9] cfg80211: failed to load regulatory.db [ 86.798705][ T6208] syzkaller1: entered promiscuous mode [ 86.804210][ T6208] syzkaller1: entered allmulticast mode [ 87.072820][ T6229] netlink: 44 bytes leftover after parsing attributes in process `syz.3.60'. [ 87.136919][ T6234] openvswitch: netlink: Duplicate or invalid key (type 0). [ 87.168651][ T6234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.476833][ T6249] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 87.579051][ T6253] netlink: 68 bytes leftover after parsing attributes in process `syz.1.67'. [ 87.741937][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 87.876096][ T6266] dummy0: entered promiscuous mode [ 87.919330][ T6266] macsec1: entered promiscuous mode [ 87.925678][ T6266] macsec1: entered allmulticast mode [ 87.935550][ T6266] dummy0: entered allmulticast mode [ 88.195487][ T6282] erspan0: entered promiscuous mode [ 88.898649][ T6306] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20001 [ 89.414796][ T6323] syzkaller0: entered promiscuous mode [ 89.466183][ T6323] syzkaller0: entered allmulticast mode [ 89.492316][ T6326] tipc: Started in network mode [ 89.497443][ T6326] tipc: Node identity , cluster identity 4711 [ 89.505803][ T6326] tipc: Failed to set node id, please configure manually [ 89.518276][ T6326] tipc: Enabling of bearer rejected, failed to enable media [ 89.732550][ T6338] IPv6: sit1: Disabled Multicast RS [ 89.909527][ T6347] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.010615][ T6352] __nla_validate_parse: 3 callbacks suppressed [ 90.010632][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.91'. [ 90.325602][ T6264] syz.2.70: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 90.351107][ T6264] CPU: 0 UID: 0 PID: 6264 Comm: syz.2.70 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 90.351135][ T6264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.351152][ T6264] Call Trace: [ 90.351159][ T6264] [ 90.351170][ T6264] dump_stack_lvl+0x189/0x250 [ 90.351200][ T6264] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 90.351225][ T6264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.351244][ T6264] ? __pfx__printk+0x10/0x10 [ 90.351266][ T6264] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 90.351287][ T6264] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 90.351316][ T6264] warn_alloc+0x214/0x310 [ 90.351343][ T6264] ? __pfx_warn_alloc+0x10/0x10 [ 90.351371][ T6264] ? __get_vm_area_node+0x28f/0x300 [ 90.351405][ T6264] ? hash_ipmark_create+0x3e6/0x1080 [ 90.351433][ T6264] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 90.351450][ T6264] ? do_syscall_64+0xfa/0x3b0 [ 90.351506][ T6264] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 90.351531][ T6264] ? rcu_is_watching+0x15/0xb0 [ 90.351557][ T6264] ? hash_ipmark_create+0x3e6/0x1080 [ 90.351577][ T6264] ? hash_ipmark_create+0x3e6/0x1080 [ 90.351597][ T6264] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 90.351623][ T6264] ? hash_ipmark_create+0x3e6/0x1080 [ 90.351646][ T6264] ? hash_ipmark_create+0x387/0x1080 [ 90.351673][ T6264] hash_ipmark_create+0x3e6/0x1080 [ 90.351705][ T6264] ? __nla_parse+0x40/0x60 [ 90.351725][ T6264] ? __pfx_hash_ipmark_create+0x10/0x10 [ 90.351750][ T6264] ip_set_create+0xa97/0x1940 [ 90.351772][ T6264] ? ip_set_create+0x4a2/0x1940 [ 90.351806][ T6264] ? __pfx_ip_set_create+0x10/0x10 [ 90.351867][ T6264] nfnetlink_rcv_msg+0xb4d/0x1130 [ 90.351891][ T6264] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 90.351934][ T6264] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 90.351953][ T6264] ? kasan_save_free_info+0x46/0x50 [ 90.352033][ T6264] netlink_rcv_skb+0x205/0x470 [ 90.352060][ T6264] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 90.352085][ T6264] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 90.352131][ T6264] ? bpf_lsm_capable+0x9/0x20 [ 90.352154][ T6264] ? security_capable+0x7e/0x2e0 [ 90.352186][ T6264] nfnetlink_rcv+0x26a/0x2520 [ 90.352213][ T6264] ? __dev_queue_xmit+0x1d79/0x3b50 [ 90.352246][ T6264] ? __dev_queue_xmit+0x27b/0x3b50 [ 90.352281][ T6264] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 90.352304][ T6264] ? __pfx___dev_queue_xmit+0x10/0x10 [ 90.352340][ T6264] ? ref_tracker_free+0x63a/0x7d0 [ 90.352360][ T6264] ? __asan_memcpy+0x40/0x70 [ 90.352382][ T6264] ? __pfx_ref_tracker_free+0x10/0x10 [ 90.352406][ T6264] ? __skb_clone+0x63/0x7a0 [ 90.352430][ T6264] ? __skb_clone+0x483/0x7a0 [ 90.352458][ T6264] ? skb_clone+0x246/0x3a0 [ 90.352481][ T6264] ? __netlink_deliver_tap+0x807/0x850 [ 90.352505][ T6264] ? netlink_deliver_tap+0x2e/0x1b0 [ 90.352537][ T6264] ? netlink_deliver_tap+0x2e/0x1b0 [ 90.352571][ T6264] netlink_unicast+0x82c/0x9e0 [ 90.352604][ T6264] ? __pfx_netlink_unicast+0x10/0x10 [ 90.352630][ T6264] ? netlink_sendmsg+0x642/0xb30 [ 90.352653][ T6264] ? skb_put+0x11b/0x210 [ 90.352675][ T6264] netlink_sendmsg+0x805/0xb30 [ 90.352710][ T6264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.352740][ T6264] ? aa_sock_msg_perm+0x94/0x160 [ 90.352765][ T6264] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 90.352785][ T6264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.352811][ T6264] __sock_sendmsg+0x219/0x270 [ 90.352839][ T6264] ____sys_sendmsg+0x505/0x830 [ 90.352866][ T6264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 90.352896][ T6264] ? import_iovec+0x74/0xa0 [ 90.352924][ T6264] ___sys_sendmsg+0x21f/0x2a0 [ 90.352946][ T6264] ? __pfx____sys_sendmsg+0x10/0x10 [ 90.353007][ T6264] ? __fget_files+0x2a/0x420 [ 90.353024][ T6264] ? __fget_files+0x3a0/0x420 [ 90.353054][ T6264] __x64_sys_sendmsg+0x19b/0x260 [ 90.353076][ T6264] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 90.353108][ T6264] ? rcu_is_watching+0x15/0xb0 [ 90.353139][ T6264] ? do_syscall_64+0xbe/0x3b0 [ 90.353168][ T6264] do_syscall_64+0xfa/0x3b0 [ 90.353190][ T6264] ? lockdep_hardirqs_on+0x9c/0x150 [ 90.353214][ T6264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.353232][ T6264] ? clear_bhb_loop+0x60/0xb0 [ 90.353255][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.353272][ T6264] RIP: 0033:0x7f071378eb69 [ 90.353294][ T6264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.353309][ T6264] RSP: 002b:00007f0714657038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.353330][ T6264] RAX: ffffffffffffffda RBX: 00007f07139b5fa0 RCX: 00007f071378eb69 [ 90.353343][ T6264] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000008 [ 90.353355][ T6264] RBP: 00007f0713811df1 R08: 0000000000000000 R09: 0000000000000000 [ 90.353367][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.353378][ T6264] R13: 0000000000000000 R14: 00007f07139b5fa0 R15: 00007ffd1e45e188 [ 90.353414][ T6264] [ 90.841255][ T6264] Mem-Info: [ 90.844392][ T6264] active_anon:9778 inactive_anon:0 isolated_anon:0 [ 90.844392][ T6264] active_file:1413 inactive_file:39827 isolated_file:0 [ 90.844392][ T6264] unevictable:768 dirty:552 writeback:0 [ 90.844392][ T6264] slab_reclaimable:10421 slab_unreclaimable:97863 [ 90.844392][ T6264] mapped:34597 shmem:5392 pagetables:1162 [ 90.844392][ T6264] sec_pagetables:0 bounce:0 [ 90.844392][ T6264] kernel_misc_reclaimable:0 [ 90.844392][ T6264] free:1306921 free_pcp:27472 free_cma:0 [ 90.891148][ T6264] Node 0 active_anon:39116kB inactive_anon:0kB active_file:5652kB inactive_file:159104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138480kB dirty:2192kB writeback:0kB shmem:20108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12144kB pagetables:4560kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 90.924664][ T6264] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 90.962393][ T6264] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 90.991631][ T6264] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 90.997440][ T6264] Node 0 DMA32 free:1315120kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39572kB inactive_anon:0kB active_file:5652kB inactive_file:157268kB unevictable:1536kB writepending:2188kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:87640kB local_pcp:35784kB free_cma:0kB [ 91.035769][ T6264] lowmem_reserve[]: 0 0 1 1 1 [ 91.040689][ T6264] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1836kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 91.070749][ T6264] lowmem_reserve[]: 0 0 0 0 0 [ 91.075499][ T6264] Node 1 Normal free:3897280kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:16kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21536kB local_pcp:12512kB free_cma:0kB [ 91.107539][ T6264] lowmem_reserve[]: 0 0 0 0 0 [ 91.112359][ T6264] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 91.128441][ T6264] Node 0 DMA32: 2*4kB (UM) 3*8kB (UE) 3*16kB (UE) 21*32kB (ME) 27*64kB (ME) 15*128kB (UME) 8*256kB (UME) 20*512kB (UM) 10*1024kB (UM) 9*2048kB (UM) 310*4096kB (UM) = 1315120kB [ 91.146133][ T6264] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 91.160908][ T6264] Node 1 Normal: 174*4kB (UE) 49*8kB (UME) 38*16kB (UME) 57*32kB (UME) 26*64kB (UME) 7*128kB (UME) 6*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3897280kB [ 91.181558][ T6264] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 91.191198][ T6264] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 91.200557][ T6264] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 91.210199][ T6264] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 91.220068][ T6264] 47272 total pagecache pages [ 91.225219][ T6264] 0 pages in swap cache [ 91.229449][ T6264] Free swap = 124996kB [ 91.233631][ T6264] Total swap = 124996kB [ 91.237811][ T6264] 2097051 pages RAM [ 91.241766][ T6264] 0 pages HighMem/MovableOnly [ 91.246469][ T6264] 424872 pages reserved [ 91.250680][ T6264] 0 pages cma reserved [ 92.006807][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.96'. [ 92.486460][ T6376] netlink: 28 bytes leftover after parsing attributes in process `syz.3.98'. [ 92.557879][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.97'. [ 92.568418][ T6376] netlink: 32 bytes leftover after parsing attributes in process `syz.3.98'. [ 92.577215][ T6376] netlink: 28 bytes leftover after parsing attributes in process `syz.3.98'. [ 92.580428][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.97'. [ 92.602754][ T6386] netlink: 'syz.2.97': attribute type 5 has an invalid length. [ 92.623622][ T6376] netlink: 32 bytes leftover after parsing attributes in process `syz.3.98'. [ 92.665607][ T6387] IPVS: Scheduler module ip_vs_sip not found [ 92.824273][ T59] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.857201][ T59] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.887719][ T6402] tipc: Enabling of bearer rejected, failed to enable media [ 92.900488][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.103'. [ 92.914984][ T6412] netlink: 'syz.3.104': attribute type 4 has an invalid length. [ 92.958399][ T6412] netlink: 'syz.3.104': attribute type 4 has an invalid length. [ 92.989059][ T6404] vlan2: entered promiscuous mode [ 93.008171][ T6404] bridge0: entered promiscuous mode [ 93.025815][ T6404] vlan2: entered allmulticast mode [ 93.050490][ T6404] bridge0: entered allmulticast mode [ 93.103455][ T59] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.129634][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.106'. [ 93.183530][ T59] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.198870][ T6422] veth1: entered promiscuous mode [ 93.206425][ T6424] netlink: 'syz.4.106': attribute type 1 has an invalid length. [ 93.212065][ T6422] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 93.615621][ T6441] openvswitch: netlink: Flow key attr not present in new flow. [ 93.809631][ T6446] tipc: Failed to remove unknown binding: 66,1,1/0:27013453/27013455 [ 93.817970][ T6446] tipc: Failed to remove unknown binding: 66,1,1/0:27013453/27013455 [ 94.387995][ T6441] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 95.243300][ T6481] netlink: 'syz.4.123': attribute type 3 has an invalid length. [ 95.274576][ T6481] __nla_validate_parse: 3 callbacks suppressed [ 95.274594][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.123'. [ 95.357729][ T6492] netlink: 24 bytes leftover after parsing attributes in process `syz.2.126'. [ 95.386327][ T6490] nbd: must specify at least one socket [ 95.392316][ T6493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.127'. [ 95.421515][ T6492] vlan2: entered promiscuous mode [ 95.426582][ T6492] bridge0: entered promiscuous mode [ 95.431468][ T6493] openvswitch: netlink: Missing valid actions attribute. [ 95.447042][ T6493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.635947][ T6502] netlink: 16 bytes leftover after parsing attributes in process `syz.2.129'. [ 95.652598][ T5158] Bluetooth: hci0: command 0x0401 tx timeout [ 95.705221][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'. [ 95.826838][ T6511] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 95.853397][ T6511] macvtap1: entered allmulticast mode [ 95.875405][ T6511] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 95.942873][ T6511] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 95.978350][ T6511] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 96.323739][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.138'. [ 96.525159][ T1167] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 96.543889][ T1167] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 96.552151][ T981] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 96.651612][ T6546] pimreg: entered allmulticast mode [ 96.657290][ T6546] pimreg: left allmulticast mode [ 96.733266][ T981] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 96.831614][ T6522] syz.1.135 (6522) used greatest stack depth: 19416 bytes left [ 97.107029][ T6572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.146690][ T6570] sctp: [Deprecated]: syz.0.149 (pid 6570) Use of struct sctp_assoc_value in delayed_ack socket option. [ 97.146690][ T6570] Use struct sctp_sack_info instead [ 97.210917][ T6572] netlink: 24 bytes leftover after parsing attributes in process `syz.1.148'. [ 97.335057][ T6562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.399907][ T5837] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 97.410550][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 97.517971][ T6584] veth3: entered allmulticast mode [ 97.615018][ T6588] lo speed is unknown, defaulting to 1000 [ 97.672539][ T6588] lo speed is unknown, defaulting to 1000 [ 97.702679][ T6588] lo speed is unknown, defaulting to 1000 [ 97.725002][ T6588] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 97.811226][ T6588] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 97.823169][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 97.834814][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 97.931778][ T6598] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.939563][ T6598] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.076901][ T6598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.093721][ T6598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.249075][ T6598] dummy0: left allmulticast mode [ 98.294404][ T6588] lo speed is unknown, defaulting to 1000 [ 98.336368][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.355752][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.378199][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.397356][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.426989][ T6588] lo speed is unknown, defaulting to 1000 [ 98.438550][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.459985][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.474442][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.498864][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.513833][ T6588] lo speed is unknown, defaulting to 1000 [ 98.536619][ T6588] lo speed is unknown, defaulting to 1000 [ 98.579279][ T6588] lo speed is unknown, defaulting to 1000 [ 98.789340][ T6620] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 98.990035][ T6629] netlink: 'syz.0.165': attribute type 8 has an invalid length. [ 99.325874][ T6632] lo speed is unknown, defaulting to 1000 [ 99.859126][ T6649] tipc: Enabled bearer , priority 0 [ 99.895044][ T6649] syzkaller0: entered promiscuous mode [ 99.909580][ T6649] syzkaller0: entered allmulticast mode [ 100.122510][ T6649] tipc: Resetting bearer [ 100.162615][ T6648] tipc: Resetting bearer [ 100.198451][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 100.228549][ T6658] nbd: must specify at least one socket [ 100.238886][ T6648] tipc: Disabling bearer [ 100.337993][ T6669] __nla_validate_parse: 3 callbacks suppressed [ 100.338010][ T6669] netlink: 28 bytes leftover after parsing attributes in process `syz.4.173'. [ 100.452753][ T6676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.176'. [ 100.494953][ T6674] vlan2: entered allmulticast mode [ 100.501064][ T6674] veth1: entered allmulticast mode [ 100.648961][ T6674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.862753][ T6694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.179'. [ 101.865850][ T6688] kthread_run failed with err -4 [ 101.934525][ T6696] sch_tbf: burst 0 is lower than device bridge1 mtu (1514) ! [ 102.186849][ T6727] netlink: 'syz.3.188': attribute type 10 has an invalid length. [ 102.269616][ T6727] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.188'. [ 103.332681][ T6769] lo speed is unknown, defaulting to 1000 [ 103.372221][ T6778] netlink: 37 bytes leftover after parsing attributes in process `syz.1.203'. [ 103.548360][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'. [ 103.589233][ T6787] netlink: 'syz.4.204': attribute type 16 has an invalid length. [ 103.596993][ T6787] netlink: 'syz.4.204': attribute type 17 has an invalid length. [ 103.629432][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'. [ 103.665276][ T6787] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.120711][ T6812] lo speed is unknown, defaulting to 1000 [ 104.340640][ T6791] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 104.684149][ T6833] bridge_slave_0: entered promiscuous mode [ 104.748759][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.218'. [ 105.160110][ T6852] netlink: 24 bytes leftover after parsing attributes in process `syz.1.226'. [ 105.278931][ T6854] netlink: 24 bytes leftover after parsing attributes in process `syz.4.227'. [ 105.441214][ T6857] netlink: 248 bytes leftover after parsing attributes in process `syz.1.228'. [ 105.718801][ T5158] Bluetooth: hci0: command 0x0401 tx timeout [ 106.003194][ T6880] netlink: 32 bytes leftover after parsing attributes in process `syz.2.238'. [ 106.195429][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.241'. [ 106.247341][ T6898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.241'. [ 106.319109][ T6886] netlink: 16 bytes leftover after parsing attributes in process `syz.4.241'. [ 106.431185][ T6905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.469540][ T9] lo speed is unknown, defaulting to 1000 [ 106.478678][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.245'. [ 106.487732][ T6905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.245'. [ 106.524564][ T6918] batadv_slave_1: entered promiscuous mode [ 106.531629][ T6918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.247'. [ 106.545622][ T6918] bridge_slave_1: left allmulticast mode [ 106.551567][ T6918] bridge_slave_1: left promiscuous mode [ 106.557508][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.634321][ T6918] bridge_slave_0: left allmulticast mode [ 106.654826][ T6918] bridge_slave_0: left promiscuous mode [ 106.664088][ T6922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.244'. [ 106.669587][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.735231][ T6925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.249'. [ 106.837711][ T6915] batadv_slave_1: left promiscuous mode [ 107.621125][ T5837] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 107.798263][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 107.863705][ T6966] fido_id[6966]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 108.315142][ T6989] IPv6: sit2: Disabled Multicast RS [ 108.330302][ T6989] sit2: entered allmulticast mode [ 108.452898][ T6985] lo speed is unknown, defaulting to 1000 [ 108.651884][ T9] IPVS: starting estimator thread 0... [ 108.668453][ T6999] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 108.788282][ T7010] IPVS: using max 28 ests per chain, 67200 per kthread [ 108.939981][ T7018] raw_sendmsg: syz.2.272 forgot to set AF_INET. Fix it! [ 109.618232][ T7044] lo speed is unknown, defaulting to 1000 [ 109.870340][ T59] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.884722][ T59] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.985670][ T7066] netlink: 'syz.4.286': attribute type 30 has an invalid length. [ 110.000208][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.027016][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.051392][ T7064] veth0: entered promiscuous mode [ 110.100513][ T7066] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 110.148763][ T7066] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 110.207211][ T7064] veth0: left promiscuous mode [ 110.241129][ T7072] dummy0: entered promiscuous mode [ 110.247561][ T7072] bond0: entered promiscuous mode [ 110.258961][ T7072] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 110.272648][ T7072] debugfs: 'hsr0' already exists in 'hsr' [ 110.279573][ T7072] Cannot create hsr debugfs directory [ 110.607134][ T7093] __nla_validate_parse: 11 callbacks suppressed [ 110.607151][ T7093] netlink: 20 bytes leftover after parsing attributes in process `syz.0.294'. [ 110.631218][ T7093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.294'. [ 110.658711][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.290'. [ 110.667978][ T7093] netlink: 31 bytes leftover after parsing attributes in process `syz.0.294'. [ 110.692066][ T7093] netlink: 'syz.0.294': attribute type 3 has an invalid length. [ 110.763003][ T7101] netlink: 104 bytes leftover after parsing attributes in process `syz.3.290'. [ 110.768569][ T7093] netlink: 'syz.0.294': attribute type 2 has an invalid length. [ 110.788998][ T7093] netlink: 31 bytes leftover after parsing attributes in process `syz.0.294'. [ 110.793321][ T7101] netlink: 48 bytes leftover after parsing attributes in process `syz.3.290'. [ 110.801087][ T7093] netlink: 16 bytes leftover after parsing attributes in process `syz.0.294'. [ 110.825214][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.290'. [ 110.834797][ T7101] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 110.860238][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 110.969444][ T7104] ip6erspan0: entered promiscuous mode [ 111.647225][ T7152] netlink: 'syz.3.310': attribute type 1 has an invalid length. [ 111.659660][ T7153] netlink: 'syz.4.311': attribute type 7 has an invalid length. [ 111.795594][ T7157] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 111.965472][ T7152] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 112.066081][ T7152] bond1 (unregistering): Released all slaves [ 112.142170][ T7177] 8021q: VLANs not supported on vxcan1 [ 112.149378][ T7176] 8021q: VLANs not supported on vxcan1 [ 112.336779][ T7186] netlink: 'syz.2.317': attribute type 1 has an invalid length. [ 112.362834][ T7187] ip6gre0: Master is either lo or non-ether device [ 112.511195][ T7198] openvswitch: netlink: Multiple metadata blocks provided [ 112.645041][ T7210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.835067][ T7217] syz.0.325 uses old SIOCAX25GETINFO [ 112.895584][ T7220] gtp0: entered promiscuous mode [ 112.911895][ T7220] gtp0: entered allmulticast mode [ 112.947796][ T7220] syzkaller1: entered promiscuous mode [ 112.954488][ T7220] syzkaller1: entered allmulticast mode [ 114.272916][ T7286] »»»»»»: renamed from ip6_vti0 (while UP) [ 114.299468][ T7285] netlink: 'syz.0.335': attribute type 9 has an invalid length. [ 114.308014][ T7285] netlink: 'syz.0.335': attribute type 6 has an invalid length. [ 114.965443][ T7300] lo speed is unknown, defaulting to 1000 [ 115.109602][ T7315] lo speed is unknown, defaulting to 1000 [ 115.429695][ T7329] tipc: Started in network mode [ 115.442829][ T7329] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 115.479244][ T7329] tipc: Enabled bearer , priority 14 [ 115.678304][ T7326] lo speed is unknown, defaulting to 1000 [ 116.211752][ T7325] lo speed is unknown, defaulting to 1000 [ 116.218792][ T7321] netlink: 'syz.2.341': attribute type 4 has an invalid length. [ 116.252542][ T7321] __nla_validate_parse: 12 callbacks suppressed [ 116.252559][ T7321] netlink: 17 bytes leftover after parsing attributes in process `syz.2.341'. [ 116.518435][ T7350] netlink: 28 bytes leftover after parsing attributes in process `syz.0.345'. [ 116.599555][ T9] tipc: Node number set to 10136234 [ 116.905233][ T7355] netlink: 'syz.2.346': attribute type 139 has an invalid length. [ 116.933143][ T7354] netlink: 'syz.2.346': attribute type 139 has an invalid length. [ 116.963990][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.348'. [ 116.970551][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 117.131155][ T7367] netlink: 772 bytes leftover after parsing attributes in process `syz.0.349'. [ 117.483131][ T7389] netlink: 20 bytes leftover after parsing attributes in process `syz.4.354'. [ 117.579268][ T7398] tipc: Started in network mode [ 117.593836][ T7398] tipc: Node identity ac14140f, cluster identity 4711 [ 117.608923][ T7398] tipc: New replicast peer: 255.255.255.83 [ 117.627640][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.357'. [ 117.630736][ T7398] tipc: Enabled bearer , priority 10 [ 117.775961][ T7408] veth0: entered promiscuous mode [ 117.785331][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.359'. [ 117.986626][ T7422] netlink: 424 bytes leftover after parsing attributes in process `syz.3.364'. [ 118.004936][ T7422] netlink: 424 bytes leftover after parsing attributes in process `syz.3.364'. [ 118.037535][ T7416] lo speed is unknown, defaulting to 1000 [ 118.162482][ T7428] tipc: Enabled bearer , priority 0 [ 118.192687][ T7428] syzkaller0: entered promiscuous mode [ 118.223388][ T7428] syzkaller0: entered allmulticast mode [ 118.336259][ T7435] tap0: tun_chr_ioctl cmd 1074025677 [ 118.351234][ T7435] tap0: linktype set to 804 [ 118.376258][ T7428] tipc: Resetting bearer [ 118.457953][ T7428] tipc: Resetting bearer [ 118.496064][ T7428] tipc: Disabling bearer [ 118.748208][ T9] tipc: Node number set to 2886997007 [ 119.014970][ T7467] !: renamed from dummy0 (while UP) [ 119.408681][ T7468] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.427429][ T7468] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.635515][ T7468] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.650582][ T7468] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.680519][ T7467] lo speed is unknown, defaulting to 1000 [ 119.702411][ T7487] netlink: 'syz.3.379': attribute type 4 has an invalid length. [ 119.743124][ T978] lo speed is unknown, defaulting to 1000 [ 119.766847][ T978] syz2: Port: 1 Link DOWN [ 119.862803][ T7468] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.882999][ T7468] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.954838][ T7468] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.967104][ T7468] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.011498][ T7494] netlink: 'syz.1.380': attribute type 2 has an invalid length. [ 120.192102][ T7510] tipc: Enabled bearer , priority 0 [ 120.219597][ T7510] syzkaller0: entered promiscuous mode [ 120.226360][ T7510] syzkaller0: entered allmulticast mode [ 120.324603][ T3421] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.343461][ T3421] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.387537][ T7510] tipc: Resetting bearer [ 120.402628][ T7509] tipc: Resetting bearer [ 120.450681][ T7509] tipc: Disabling bearer [ 120.467117][ T3421] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.482601][ T3421] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.503517][ T30] audit: type=1804 audit(1754261069.665:2): pid=7524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.386" name="memory.events" dev="tmpfs" ino=465 res=1 errno=0 [ 120.567502][ T3421] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.576019][ T30] audit: type=1800 audit(1754261069.665:3): pid=7524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.386" name="memory.events" dev="tmpfs" ino=465 res=0 errno=0 [ 120.604403][ T3421] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.691041][ T59] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.701329][ T59] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.216666][ T7551] pim6reg1: entered promiscuous mode [ 121.233124][ T7551] pim6reg1: entered allmulticast mode [ 121.374858][ T7559] netlink: 'syz.4.397': attribute type 39 has an invalid length. [ 121.569995][ T7564] netlink: zone id is out of range [ 121.583675][ T7564] netlink: zone id is out of range [ 121.597518][ T7564] netlink: zone id is out of range [ 121.612861][ T7564] netlink: zone id is out of range [ 121.634014][ T7564] netlink: zone id is out of range [ 121.642357][ T7564] netlink: zone id is out of range [ 121.647623][ T7564] netlink: set zone limit has 8 unknown bytes [ 121.877797][ T7577] __nla_validate_parse: 6 callbacks suppressed [ 121.877813][ T7577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.402'. [ 121.906985][ T7574] vlan3: entered promiscuous mode [ 121.916912][ T7574] gretap0: entered promiscuous mode [ 121.989470][ T7581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.402'. [ 122.014899][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'. [ 122.219862][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.407'. [ 122.257021][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.406'. [ 122.283387][ T7597] netlink: 52 bytes leftover after parsing attributes in process `syz.2.409'. [ 122.309368][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.406'. [ 122.364868][ T7601] netlink: 72 bytes leftover after parsing attributes in process `syz.3.406'. [ 122.383705][ T7601] nbd: couldn't find a device at index 0 [ 122.480850][ T7607] netlink: 32 bytes leftover after parsing attributes in process `syz.1.411'. [ 122.518210][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.762279][ T7626] netlink: 248 bytes leftover after parsing attributes in process `syz.1.415'. [ 122.941243][ T7628] netlink: 'syz.1.415': attribute type 3 has an invalid length. [ 122.971652][ T7634] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 123.414866][ T7652] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 123.786892][ T7661] macsec1: left promiscuous mode [ 123.802234][ T7661] macsec1: left allmulticast mode [ 123.819320][ T7661] vlan2: left promiscuous mode [ 123.840491][ T7661] bridge0: left promiscuous mode [ 123.864096][ T7661] vlan2: left allmulticast mode [ 123.882987][ T7661] bridge0: left allmulticast mode [ 124.047039][ T59] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 124.067906][ T59] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 124.253439][ T59] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 124.293447][ T59] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 124.406620][ T7672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.612307][ T7689] tipc: Invalid UDP bearer configuration [ 124.612363][ T7689] tipc: Enabling of bearer rejected, failed to enable media [ 124.644969][ T7689] netlink: 'syz.1.432': attribute type 1 has an invalid length. [ 124.746904][ T7694] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 124.761272][ T7694] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 124.970354][ T7704] netlink: 'syz.4.439': attribute type 1 has an invalid length. [ 124.985265][ T7704] netlink: 'syz.4.439': attribute type 39 has an invalid length. [ 125.076183][ T7707] netlink: 'syz.1.440': attribute type 1 has an invalid length. [ 125.090309][ T7709] netlink: 'syz.0.442': attribute type 64 has an invalid length. [ 125.130785][ T7711] sctp: [Deprecated]: syz.4.441 (pid 7711) Use of int in max_burst socket option. [ 125.130785][ T7711] Use struct sctp_assoc_value instead [ 125.183058][ T7713] netlink: 'syz.1.443': attribute type 2 has an invalid length. [ 125.203081][ T7713] netlink: 'syz.1.443': attribute type 2 has an invalid length. [ 125.230108][ T7717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.455295][ T7729] 8021q: VLANs not supported on caif0 [ 125.630850][ T7745] Bluetooth: MGMT ver 1.23 [ 125.689725][ T7749] tipc: New replicast peer: 255.255.255.255 [ 125.710353][ T7749] tipc: Enabled bearer , priority 10 [ 132.762796][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 152.598290][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 177.690194][ T7796] __nla_validate_parse: 16 callbacks suppressed [ 177.690211][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.466'. [ 177.698578][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.467'. [ 177.771254][ T7796] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2 [ 178.067505][ T7824] netlink: 16 bytes leftover after parsing attributes in process `syz.0.475'. [ 178.083464][ T7824] netlink: 120 bytes leftover after parsing attributes in process `syz.0.475'. [ 178.134711][ T7820] lo speed is unknown, defaulting to 1000 [ 178.135949][ T7834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.475'. [ 178.141268][ T7824] netlink: 16 bytes leftover after parsing attributes in process `syz.0.475'. [ 178.159447][ T7834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.475'. [ 178.194145][ T7834] netlink: 40 bytes leftover after parsing attributes in process `syz.0.475'. [ 178.610595][ T7855] tipc: Enabled bearer , priority 0 [ 178.657757][ T7856] batadv_slave_0: entered promiscuous mode [ 178.673757][ T7857] syzkaller0: entered promiscuous mode [ 178.680178][ T7857] syzkaller0: entered allmulticast mode [ 178.688380][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.483'. [ 178.755275][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.483'. [ 178.786167][ T7849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.883430][ T7849] batadv_slave_0 (unregistering): left promiscuous mode [ 178.913271][ T7849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.114551][ T7870] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 179.753037][ T7889] netlink: 'syz.0.494': attribute type 322 has an invalid length. [ 179.776304][ T7896] tipc: Enabled bearer , priority 0 [ 179.783754][ T7900] netlink: 'syz.1.497': attribute type 1 has an invalid length. [ 179.792310][ T7896] syzkaller0: entered promiscuous mode [ 179.797946][ T7896] syzkaller0: entered allmulticast mode [ 179.819431][ T7896] tipc: Resetting bearer [ 179.942248][ T7894] tipc: Resetting bearer [ 179.980429][ T7914] netlink: 'syz.0.499': attribute type 10 has an invalid length. [ 180.002929][ T7894] tipc: Disabling bearer [ 180.117909][ T7917] bridge_slave_0: left allmulticast mode [ 180.146167][ T7917] bridge_slave_0: left promiscuous mode [ 180.159527][ T7917] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.192923][ T7917] bridge_slave_1: left allmulticast mode [ 180.208294][ T7917] bridge_slave_1: left promiscuous mode [ 180.214311][ T7917] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.249596][ T7917] bond0: (slave bond_slave_0): Releasing backup interface [ 180.265050][ T7917] bond0: (slave bond_slave_1): Releasing backup interface [ 180.278154][ T7917] team0: Port device team_slave_0 removed [ 180.294878][ T7917] team0: Port device team_slave_1 removed [ 180.302783][ T7917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.312346][ T7917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.320789][ T7917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.328861][ T7917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.800678][ T7951] wireguard0: entered promiscuous mode [ 180.806186][ T7951] wireguard0: entered allmulticast mode [ 180.897233][ T7961] netlink: 'syz.2.512': attribute type 10 has an invalid length. [ 180.937065][ T7948] lo speed is unknown, defaulting to 1000 [ 181.109082][ T7962] netlink: 'syz.4.513': attribute type 13 has an invalid length. [ 181.154554][ T7962] tipc: Enabling of bearer rejected, failed to enable media [ 181.499032][ T7986] netlink: 'syz.1.516': attribute type 39 has an invalid length. [ 181.814468][ T8000] pimreg: entered allmulticast mode [ 181.847036][ T8000] pimreg: left allmulticast mode [ 181.908482][ T8004] netlink: 'syz.0.522': attribute type 16 has an invalid length. [ 182.202014][ T8022] veth0_to_bond: entered allmulticast mode [ 182.459723][ T8043] geneve2: entered promiscuous mode [ 182.603880][ T8053] ipvlan2: entered promiscuous mode [ 182.641941][ T8053] bridge0: port 1(ipvlan2) entered blocking state [ 182.659213][ T8053] bridge0: port 1(ipvlan2) entered disabled state [ 182.676134][ T8053] ipvlan2: entered allmulticast mode [ 182.684710][ T8053] bridge0: entered allmulticast mode [ 182.699360][ T8053] ipvlan2: left allmulticast mode [ 182.705651][ T8053] bridge0: left allmulticast mode [ 182.873397][ T8052] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.916625][ T8058] tipc: Enabled bearer , priority 0 [ 182.925072][ T8063] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 182.951593][ T8058] tipc: Resetting bearer [ 182.991642][ T8057] tipc: Disabling bearer [ 183.024718][ T8052] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.149892][ T8052] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.245099][ T8072] netlink: 'syz.1.537': attribute type 1 has an invalid length. [ 183.324758][ T8052] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.365056][ T8081] __nla_validate_parse: 15 callbacks suppressed [ 183.365072][ T8081] netlink: 40 bytes leftover after parsing attributes in process `syz.2.539'. [ 183.499561][ T8088] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 183.524421][ T8088] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 183.538312][ T7254] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.555023][ T7245] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.625970][ T7254] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.664764][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.106582][ T8114] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 184.392358][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.552'. [ 184.405366][ T8122] syzkaller0: entered promiscuous mode [ 184.416108][ T8122] syzkaller0: entered allmulticast mode [ 184.424634][ T8131] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.554'. [ 184.666237][ T8133] netlink: 16 bytes leftover after parsing attributes in process `syz.0.555'. [ 186.094298][ T8145] lo speed is unknown, defaulting to 1000 [ 186.284100][ T8160] 8021q: VLANs not supported on ip_vti0 [ 186.751832][ T8191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.568'. [ 186.768446][ T8191] netlink: 'syz.4.568': attribute type 2 has an invalid length. [ 186.808786][ T8191] netlink: 240 bytes leftover after parsing attributes in process `syz.4.568'. [ 186.864176][ T8192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.569'. [ 186.969291][ T8200] netlink: 56 bytes leftover after parsing attributes in process `syz.0.572'. [ 186.982449][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 187.061634][ T8199] netlink: 24 bytes leftover after parsing attributes in process `syz.0.572'. [ 187.858015][ T8228] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 188.021422][ T8236] netlink: 'syz.0.583': attribute type 10 has an invalid length. [ 188.072137][ T8234] warn_alloc: 1 callbacks suppressed [ 188.072155][ T8234] syz.4.582: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 188.137661][ T8234] CPU: 1 UID: 0 PID: 8234 Comm: syz.4.582 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 188.137688][ T8234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 188.137699][ T8234] Call Trace: [ 188.137706][ T8234] [ 188.137715][ T8234] dump_stack_lvl+0x189/0x250 [ 188.137752][ T8234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.137771][ T8234] ? __pfx__printk+0x10/0x10 [ 188.137792][ T8234] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 188.137812][ T8234] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 188.137833][ T8234] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 188.137856][ T8234] warn_alloc+0x214/0x310 [ 188.137881][ T8234] ? __pfx_warn_alloc+0x10/0x10 [ 188.137909][ T8234] ? __get_vm_area_node+0x28f/0x300 [ 188.137936][ T8234] ? xskq_create+0xbf/0x170 [ 188.137963][ T8234] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 188.138012][ T8234] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 188.138040][ T8234] ? __kasan_kmalloc+0x93/0xb0 [ 188.138072][ T8234] vmalloc_user_noprof+0xad/0xf0 [ 188.138089][ T8234] ? xskq_create+0xbf/0x170 [ 188.138111][ T8234] xskq_create+0xbf/0x170 [ 188.138135][ T8234] xsk_init_queue+0xb0/0x110 [ 188.138160][ T8234] xsk_setsockopt+0x57b/0x8d0 [ 188.138184][ T8234] ? __pfx_xsk_setsockopt+0x10/0x10 [ 188.138204][ T8234] ? __pfx_aa_sk_perm+0x10/0x10 [ 188.138227][ T8234] ? __fget_files+0x2a/0x420 [ 188.138244][ T8234] ? aa_sock_opt_perm+0x74/0x110 [ 188.138268][ T8234] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 188.138286][ T8234] ? __pfx_xsk_setsockopt+0x10/0x10 [ 188.138308][ T8234] do_sock_setsockopt+0x17c/0x1b0 [ 188.138330][ T8234] __x64_sys_setsockopt+0x13f/0x1b0 [ 188.138354][ T8234] do_syscall_64+0xfa/0x3b0 [ 188.138376][ T8234] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.138398][ T8234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.138414][ T8234] ? clear_bhb_loop+0x60/0xb0 [ 188.138434][ T8234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.138450][ T8234] RIP: 0033:0x7f22a6b8eb69 [ 188.138472][ T8234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.138485][ T8234] RSP: 002b:00007f22a7a4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 188.138505][ T8234] RAX: ffffffffffffffda RBX: 00007f22a6db5fa0 RCX: 00007f22a6b8eb69 [ 188.138517][ T8234] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000007 [ 188.138527][ T8234] RBP: 00007f22a6c11df1 R08: 0000000000000004 R09: 0000000000000000 [ 188.138537][ T8234] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 188.138548][ T8234] R13: 0000000000000000 R14: 00007f22a6db5fa0 R15: 00007ffe822e28c8 [ 188.138578][ T8234] [ 188.518622][ T8234] Mem-Info: [ 188.522091][ T8234] active_anon:7774 inactive_anon:0 isolated_anon:0 [ 188.522091][ T8234] active_file:1444 inactive_file:39883 isolated_file:0 [ 188.522091][ T8234] unevictable:768 dirty:87 writeback:0 [ 188.522091][ T8234] slab_reclaimable:10827 slab_unreclaimable:98995 [ 188.522091][ T8234] mapped:31987 shmem:4210 pagetables:1048 [ 188.522091][ T8234] sec_pagetables:0 bounce:0 [ 188.522091][ T8234] kernel_misc_reclaimable:0 [ 188.522091][ T8234] free:1310757 free_pcp:27314 free_cma:0 [ 188.713771][ T8234] Node 0 active_anon:30796kB inactive_anon:0kB active_file:5776kB inactive_file:159328kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127848kB dirty:348kB writeback:0kB shmem:15304kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11696kB pagetables:3944kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 188.866155][ T8255] __nla_validate_parse: 2 callbacks suppressed [ 188.866172][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.587'. [ 188.913735][ T8234] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 188.951740][ T8244] lo speed is unknown, defaulting to 1000 [ 189.008944][ T8234] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 189.066542][ T8262] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 189.127326][ T8234] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 189.135439][ T8234] Node 0 DMA32 free:1330244kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30832kB inactive_anon:0kB active_file:5776kB inactive_file:157492kB unevictable:1568kB writepending:360kB present:3129332kB managed:2560292kB mlocked:32kB bounce:0kB free_pcp:86816kB local_pcp:55848kB free_cma:0kB [ 189.191867][ T8234] lowmem_reserve[]: 0 0 1 1 1 [ 189.197131][ T8234] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1836kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 189.251110][ T8266] tipc: Enabling of bearer rejected, already enabled [ 189.276963][ T8266] syzkaller0: Caught tx_queue_len zero misconfig [ 189.308442][ T8268] tipc: Enabling of bearer rejected, already enabled [ 189.359146][ T8234] lowmem_reserve[]: 0 0 0 0 0 [ 189.364167][ T8234] Node 1 Normal free:3897536kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21568kB local_pcp:8864kB free_cma:0kB [ 189.448815][ T8234] lowmem_reserve[]: 0 0 0 0 0 [ 189.453584][ T8234] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 189.487516][ T8234] Node 0 DMA32: 3*4kB (UE) 2*8kB (UE) 55*16kB (UME) 1229*32kB (UM) 105*64kB (UM) 72*128kB (UM) 33*256kB (UM) 15*512kB (UME) 6*1024kB (UME) 3*2048kB (ME) 304*4096kB (M) = 1329772kB [ 189.506372][ T8234] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 189.518873][ T8234] Node 1 Normal: 174*4kB (UE) 49*8kB (UME) 38*16kB (UME) 61*32kB (UME) 28*64kB (UME) 7*128kB (UME) 6*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3897536kB [ 189.537306][ T8234] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 189.579889][ T8234] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 189.597250][ T8234] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 189.618976][ T8234] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 189.649583][ T8234] 45560 total pagecache pages [ 189.666024][ T8234] 0 pages in swap cache [ 189.682653][ T8234] Free swap = 124996kB [ 189.686956][ T8234] Total swap = 124996kB [ 189.691434][ T8234] 2097051 pages RAM [ 189.732993][ T8234] 0 pages HighMem/MovableOnly [ 189.742852][ T8234] 424872 pages reserved [ 189.747023][ T8234] 0 pages cma reserved [ 189.891653][ T7254] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.920163][ T7254] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.959260][ T7254] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.024376][ T7254] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.172354][ T8301] netlink: 152 bytes leftover after parsing attributes in process `syz.1.599'. [ 190.224488][ T8294] veth1: left promiscuous mode [ 190.349168][ T8303] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 190.379824][ T8294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.425389][ T8294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.674090][ T8294] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 190.713491][ T8294] ip6erspan0: left promiscuous mode [ 190.741158][ T8294] geneve2: left promiscuous mode [ 190.845930][ T8304] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 190.851792][ T8304] dvmrp1: linktype set to 805 [ 190.856834][ T36] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.878198][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.913918][ T36] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.958223][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.069116][ T36] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.078338][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.109242][ T7245] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.144643][ T7245] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.189644][ T8315] pim6reg: entered allmulticast mode [ 191.308439][ T8320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.348877][ T8320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.931857][ T8341] !: renamed from dummy0 [ 191.969081][ T8339] netlink: 'syz.0.608': attribute type 1 has an invalid length. [ 191.987104][ T8339] netlink: 224 bytes leftover after parsing attributes in process `syz.0.608'. [ 192.252205][ T8356] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 192.396034][ T8368] netlink: 'syz.4.618': attribute type 21 has an invalid length. [ 192.404001][ T8368] netlink: 36 bytes leftover after parsing attributes in process `syz.4.618'. [ 192.486212][ T8364] nbd3: detected capacity change from 0 to 63 [ 192.503445][ T8372] block nbd3: NBD_DISCONNECT [ 192.514935][ T8372] block nbd3: Disconnected due to user request. [ 192.535413][ T8372] block nbd3: shutting down sockets [ 192.558279][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.567588][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 192.576852][ C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.585942][ C1] Buffer I/O error on dev nbd3, logical block 1, async page read [ 192.586534][ T8380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 192.593801][ C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.593832][ C1] Buffer I/O error on dev nbd3, logical block 2, async page read [ 192.593894][ C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.593916][ C1] Buffer I/O error on dev nbd3, logical block 3, async page read [ 192.595141][ T7808] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.642210][ T8382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.620'. [ 192.658181][ T7808] Buffer I/O error on dev nbd3, logical block 0, async page read [ 192.677315][ T8376] lo speed is unknown, defaulting to 1000 [ 192.696416][ T7808] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.707534][ T7808] Buffer I/O error on dev nbd3, logical block 1, async page read [ 192.720339][ T7808] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.737865][ T7808] Buffer I/O error on dev nbd3, logical block 2, async page read [ 192.747531][ T7808] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.761439][ T7808] Buffer I/O error on dev nbd3, logical block 3, async page read [ 192.771709][ T7808] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.817211][ T7808] Buffer I/O error on dev nbd3, logical block 0, async page read [ 192.826104][ T7808] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 192.840389][ T7808] Buffer I/O error on dev nbd3, logical block 1, async page read [ 192.855576][ T7808] ldm_validate_partition_table(): Disk read failed. [ 192.871700][ T7808] Dev nbd3: unable to read RDB block 0 [ 192.884187][ T7808] nbd3: unable to read partition table [ 192.924200][ T8388] netlink: 52 bytes leftover after parsing attributes in process `syz.4.623'. [ 192.941029][ T7808] ldm_validate_partition_table(): Disk read failed. [ 192.950588][ T7808] Dev nbd3: unable to read RDB block 0 [ 192.959943][ T7808] nbd3: unable to read partition table [ 192.985157][ T8388] netlink: 52 bytes leftover after parsing attributes in process `syz.4.623'. [ 193.006587][ T8388] netlink: 52 bytes leftover after parsing attributes in process `syz.4.623'. [ 193.030581][ T8389] netlink: 52 bytes leftover after parsing attributes in process `syz.4.623'. [ 193.654467][ T8410] netlink: 'syz.0.625': attribute type 1 has an invalid length. [ 193.665505][ T8411] tipc: Enabled bearer , priority 0 [ 193.674132][ T8409] tipc: Enabling of bearer rejected, already enabled [ 193.758619][ T8409] tipc: Resetting bearer [ 194.215543][ T8444] netlink: 'syz.2.636': attribute type 13 has an invalid length. [ 194.360554][ T8444] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.424594][ T8408] tipc: Disabling bearer [ 194.705194][ T8454] pimreg: entered allmulticast mode [ 194.720041][ T8455] __nla_validate_parse: 4 callbacks suppressed [ 194.720058][ T8455] netlink: 16 bytes leftover after parsing attributes in process `syz.2.642'. [ 194.753949][ T8454] pimreg: left allmulticast mode [ 194.759232][ T8455] netlink: 'syz.2.642': attribute type 1 has an invalid length. [ 195.249144][ T8471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.645'. [ 195.262568][ T8475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.307278][ T8474] netlink: 9280 bytes leftover after parsing attributes in process `syz.3.648'. [ 195.319139][ T8471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.645'. [ 195.350509][ T8479] tipc: Enabling of bearer rejected, already enabled [ 195.669049][ T8488] netlink: 'syz.3.650': attribute type 8 has an invalid length. [ 195.704747][ T8490] lo speed is unknown, defaulting to 1000 [ 195.856778][ T8502] netlink: 'syz.1.651': attribute type 6 has an invalid length. [ 196.017191][ T8512] netlink: 'syz.1.651': attribute type 6 has an invalid length. [ 196.161691][ T8502] lo speed is unknown, defaulting to 1000 [ 196.279283][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 196.281368][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 196.285449][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 196.752018][ T8540] lo speed is unknown, defaulting to 1000 [ 196.816339][ T8548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.663'. [ 197.055171][ T8548] team0 (unregistering): Port device team_slave_0 removed [ 197.067372][ T8548] team0 (unregistering): Port device team_slave_1 removed [ 197.320596][ T8577] netlink: 'syz.0.670': attribute type 1 has an invalid length. [ 197.396176][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 197.421029][ T8577] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 197.437337][ T8587] openvswitch: netlink: Missing valid actions attribute. [ 197.457330][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 197.469429][ T8587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.490994][ T8577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.577337][ T8593] netlink: 17 bytes leftover after parsing attributes in process `syz.0.676'. [ 197.747772][ T8603] netlink: 196 bytes leftover after parsing attributes in process `syz.2.679'. [ 198.071524][ T8627] netlink: 'syz.4.688': attribute type 1 has an invalid length. [ 198.177552][ T8627] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.454782][ T8647] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.695'. [ 198.469341][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.495648][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.507697][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.516678][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.525588][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.534980][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.543928][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.552882][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.572946][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.582003][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.591193][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.600185][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.609086][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.617761][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.629883][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.638941][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.647571][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.656747][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.665640][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.674566][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.684036][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.750593][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.778444][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.802832][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.822959][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.838983][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.847596][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.856584][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.870698][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.908392][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.934553][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.958845][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 198.973043][ T8643] bond0: option mode: unable to set because the bond device has slaves [ 199.355798][ T8695] tipc: Enabled bearer , priority 0 [ 199.363901][ T8695] syzkaller0: entered promiscuous mode [ 199.372106][ T8695] syzkaller0: entered allmulticast mode [ 199.423265][ T8694] tipc: Resetting bearer [ 199.442240][ T8694] tipc: Disabling bearer [ 199.600909][ T8700] IPv6: Can't replace route, no match found [ 199.672186][ T9] IPVS: starting estimator thread 0... [ 199.758218][ T8706] IPVS: using max 32 ests per chain, 76800 per kthread [ 199.929914][ T8715] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 200.427313][ T8759] netlink: 'syz.2.725': attribute type 6 has an invalid length. [ 200.697793][ T8772] netlink: 'syz.0.730': attribute type 3 has an invalid length. [ 200.705831][ T8772] __nla_validate_parse: 5 callbacks suppressed [ 200.705846][ T8772] netlink: 49 bytes leftover after parsing attributes in process `syz.0.730'. [ 200.767283][ T8774] netlink: 40 bytes leftover after parsing attributes in process `syz.0.731'. [ 200.852863][ T8774] tipc: Resetting bearer [ 200.877102][ T8774] tipc: Resetting bearer [ 201.073175][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.734'. [ 201.592650][ T8796] infiniband syz1: set active [ 201.597705][ T8796] infiniband syz1: added macvlan1 [ 201.662693][ T8796] RDS/IB: syz1: added [ 201.669289][ T8796] smc: adding ib device syz1 with port count 1 [ 201.675781][ T8796] smc: ib device syz1 port 1 has pnetid [ 202.004445][ T8807] netlink: 28 bytes leftover after parsing attributes in process `syz.1.738'. [ 202.027566][ T8807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.738'. [ 202.243019][ T8813] netlink: 128 bytes leftover after parsing attributes in process `syz.0.740'. [ 202.315261][ T7245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.337438][ T7245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.425321][ T8813] syz.0.740 (8813) used greatest stack depth: 17864 bytes left [ 202.580944][ T8824] netlink: 132 bytes leftover after parsing attributes in process `syz.1.742'. [ 202.621058][ T8823] vlan2: entered promiscuous mode [ 202.626122][ T8823] !: entered promiscuous mode [ 202.660793][ T8825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.742'. [ 203.447537][ T8836] macsec1: entered promiscuous mode [ 203.484423][ T8836] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 203.493901][ T8824] wg1 speed is unknown, defaulting to 1000 [ 203.504273][ T8824] wg1 speed is unknown, defaulting to 1000 [ 203.513539][ T8824] wg1 speed is unknown, defaulting to 1000 [ 203.553721][ T8824] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 203.591870][ T8824] wg1 speed is unknown, defaulting to 1000 [ 203.613007][ T8824] wg1 speed is unknown, defaulting to 1000 [ 203.629631][ T8824] wg1 speed is unknown, defaulting to 1000 [ 203.639383][ T8824] wg1 speed is unknown, defaulting to 1000 [ 203.649304][ T8824] wg1 speed is unknown, defaulting to 1000 [ 203.818261][ T8859] netlink: 76 bytes leftover after parsing attributes in process `syz.1.755'. [ 204.150173][ T8870] lo speed is unknown, defaulting to 1000 [ 204.407780][ T8881] sctp: [Deprecated]: syz.4.760 (pid 8881) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.407780][ T8881] Use struct sctp_sack_info instead [ 204.800617][ T8870] wg1 speed is unknown, defaulting to 1000 [ 204.954996][ T8896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.990467][ T8896] tipc: Enabling of bearer rejected, failed to enable media [ 205.008847][ T8901] tipc: Enabling of bearer rejected, failed to enable media [ 205.026808][ T8896] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 205.425743][ T8923] netlink: 'syz.0.771': attribute type 2 has an invalid length. [ 205.462891][ T8923] k›*·]‘: entered promiscuous mode [ 205.754739][ T8937] tipc: Enabling of bearer rejected, already enabled [ 205.834503][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'. [ 205.852469][ T8937] tipc: Resetting bearer [ 205.874277][ T8937] tipc: Resetting bearer [ 206.101328][ T8954] netlink: 'syz.1.779': attribute type 1 has an invalid length. [ 206.173202][ T8954] tipc: Invalid UDP bearer configuration [ 206.173256][ T8954] tipc: Enabling of bearer rejected, failed to enable media [ 206.290334][ T8969] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 206.500449][ T8980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.788'. [ 206.512743][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.787'. [ 206.537067][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.787'. [ 206.553153][ T8980] bond0: entered promiscuous mode [ 206.572958][ T8986] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 206.583479][ T8980] bond0: left promiscuous mode [ 206.957268][ T9005] netlink: 212 bytes leftover after parsing attributes in process `syz.1.796'. [ 207.004147][ T9007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.797'. [ 207.055078][ T9008] netlink: 'syz.2.795': attribute type 9 has an invalid length. [ 207.324001][ T9024] syz.2.801: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 207.403343][ T9024] CPU: 0 UID: 0 PID: 9024 Comm: syz.2.801 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 207.403369][ T9024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.403379][ T9024] Call Trace: [ 207.403388][ T9024] [ 207.403396][ T9024] dump_stack_lvl+0x189/0x250 [ 207.403423][ T9024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.403440][ T9024] ? __pfx__printk+0x10/0x10 [ 207.403462][ T9024] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 207.403484][ T9024] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 207.403506][ T9024] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 207.403530][ T9024] warn_alloc+0x214/0x310 [ 207.403549][ T9024] ? stack_depot_save_flags+0x40/0x900 [ 207.403572][ T9024] ? __pfx_warn_alloc+0x10/0x10 [ 207.403593][ T9024] ? kasan_save_track+0x4f/0x80 [ 207.403617][ T9024] ? xskq_create+0x56/0x170 [ 207.403637][ T9024] ? xsk_init_queue+0xb0/0x110 [ 207.403657][ T9024] ? xsk_setsockopt+0x4dc/0x8d0 [ 207.403676][ T9024] ? do_sock_setsockopt+0x17c/0x1b0 [ 207.403692][ T9024] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 207.403708][ T9024] ? do_syscall_64+0xfa/0x3b0 [ 207.403730][ T9024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.403758][ T9024] __vmalloc_node_range_noprof+0x125/0x12f0 [ 207.403810][ T9024] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 207.403836][ T9024] ? __kasan_kmalloc+0x93/0xb0 [ 207.403863][ T9024] vmalloc_user_noprof+0xad/0xf0 [ 207.403881][ T9024] ? xskq_create+0xbf/0x170 [ 207.403911][ T9024] xskq_create+0xbf/0x170 [ 207.403935][ T9024] xsk_init_queue+0xb0/0x110 [ 207.403959][ T9024] xsk_setsockopt+0x4dc/0x8d0 [ 207.403983][ T9024] ? __pfx_xsk_setsockopt+0x10/0x10 [ 207.404003][ T9024] ? __pfx_aa_sk_perm+0x10/0x10 [ 207.404029][ T9024] ? aa_sock_opt_perm+0x74/0x110 [ 207.404050][ T9024] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 207.404068][ T9024] ? __pfx_xsk_setsockopt+0x10/0x10 [ 207.404091][ T9024] do_sock_setsockopt+0x17c/0x1b0 [ 207.404113][ T9024] __x64_sys_setsockopt+0x13f/0x1b0 [ 207.404136][ T9024] do_syscall_64+0xfa/0x3b0 [ 207.404157][ T9024] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.404179][ T9024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.404197][ T9024] ? clear_bhb_loop+0x60/0xb0 [ 207.404219][ T9024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.404236][ T9024] RIP: 0033:0x7f071378eb69 [ 207.404253][ T9024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.404267][ T9024] RSP: 002b:00007f0714657038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 207.404288][ T9024] RAX: ffffffffffffffda RBX: 00007f07139b5fa0 RCX: 00007f071378eb69 [ 207.404301][ T9024] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 207.404312][ T9024] RBP: 00007f0713811df1 R08: 0000000000000004 R09: 0000000000000000 [ 207.404323][ T9024] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.404334][ T9024] R13: 0000000000000000 R14: 00007f07139b5fa0 R15: 00007ffd1e45e188 [ 207.404366][ T9024] [ 207.404373][ T9024] Mem-Info: [ 207.572574][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.804'. [ 207.612492][ T9024] active_anon:7224 inactive_anon:0 isolated_anon:0 [ 207.612492][ T9024] active_file:1494 inactive_file:39893 isolated_file:0 [ 207.612492][ T9024] unevictable:768 dirty:233 writeback:0 [ 207.612492][ T9024] slab_reclaimable:11620 slab_unreclaimable:111203 [ 207.612492][ T9024] mapped:29026 shmem:1364 pagetables:991 [ 207.612492][ T9024] sec_pagetables:0 bounce:0 [ 207.612492][ T9024] kernel_misc_reclaimable:0 [ 207.612492][ T9024] free:1304488 free_pcp:18016 free_cma:0 [ 207.808317][ T9024] Node 0 active_anon:29492kB inactive_anon:0kB active_file:6032kB inactive_file:159376kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116244kB dirty:840kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12052kB pagetables:4188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 207.870049][ T9024] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 207.922980][ T9024] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 207.972221][ T9057] netlink: 'syz.4.806': attribute type 1 has an invalid length. [ 207.982709][ T9024] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 207.991633][ T9024] Node 0 DMA32 free:1301892kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29048kB inactive_anon:0kB active_file:6032kB inactive_file:157540kB unevictable:1536kB writepending:840kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:51872kB local_pcp:21140kB free_cma:0kB [ 208.030243][ T9024] lowmem_reserve[]: 0 0 1 1 1 [ 208.035714][ T9024] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1836kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 208.070609][ T9024] lowmem_reserve[]: 0 0 0 0 0 [ 208.076092][ T9024] Node 1 Normal free:3897792kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21344kB local_pcp:12736kB free_cma:0kB [ 208.113767][ T9024] lowmem_reserve[]: 0 0 0 0 0 [ 208.119279][ T9024] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 208.137635][ T9024] Node 0 DMA32: 1591*4kB (UME) 553*8kB (UM) 170*16kB (UME) 1348*32kB (UM) 288*64kB (UME) 85*128kB (UME) 18*256kB (UME) 4*512kB (UM) 3*1024kB (M) 1*2048kB (M) 294*4096kB (M) = 1301956kB [ 208.173359][ T9067] netlink: 676 bytes leftover after parsing attributes in process `syz.3.810'. [ 208.178121][ T9024] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 208.182811][ T9067] netlink: 676 bytes leftover after parsing attributes in process `syz.3.810'. [ 208.202378][ T9024] Node 1 Normal: 174*4kB (UE) 49*8kB (UME) 38*16kB (UME) 67*32kB (UME) 29*64kB (UME) 7*128kB (UME) 6*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3897792kB [ 208.252964][ T9024] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 208.267164][ T9024] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 208.283274][ T9024] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 208.293228][ T9024] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 208.310586][ T9024] 42764 total pagecache pages [ 208.315298][ T9024] 0 pages in swap cache [ 208.323371][ T9024] Free swap = 124996kB [ 208.330183][ T9024] Total swap = 124996kB [ 208.334435][ T9024] 2097051 pages RAM [ 208.341355][ T9024] 0 pages HighMem/MovableOnly [ 208.346121][ T9024] 424872 pages reserved [ 208.350595][ T9024] 0 pages cma reserved [ 208.644103][ T9088] bridge_slave_0: left promiscuous mode [ 208.680005][ T9088] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.711530][ T9088] bridge_slave_1: left allmulticast mode [ 208.729433][ T9088] bridge_slave_1: left promiscuous mode [ 208.735235][ T9088] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.834105][ T9088] bond0: (slave bond_slave_0): Releasing backup interface [ 208.844142][ T9109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.817'. [ 208.857290][ T9088] bond0: (slave bond_slave_1): Releasing backup interface [ 208.912303][ T9088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.921491][ T9088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.285440][ T9135] netlink: 'syz.1.824': attribute type 8 has an invalid length. [ 209.506724][ T9105] lo speed is unknown, defaulting to 1000 [ 209.591237][ T7245] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.605426][ T9145] can: request_module (can-proto-0) failed. [ 209.619093][ T7245] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.656110][ T7245] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.788314][ T7245] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.796713][ T7245] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.818090][ T7245] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.843326][ T7245] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.869157][ T7245] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.248648][ T9105] wg1 speed is unknown, defaulting to 1000 [ 210.469427][ T9175] lo speed is unknown, defaulting to 1000 [ 210.928988][ T9199] __nla_validate_parse: 13 callbacks suppressed [ 210.929006][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.839'. [ 211.287064][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'. [ 211.385383][ T9218] netlink: 'syz.3.845': attribute type 13 has an invalid length. [ 211.573220][ T9212] tipc: Resetting bearer [ 211.590679][ T9220] vxcan1: MTU too low for tipc bearer [ 211.628639][ T9220] tipc: Enabling of bearer rejected, failed to enable media [ 211.709614][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'. [ 212.032539][ T9175] wg1 speed is unknown, defaulting to 1000 [ 212.032558][ T140] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.048159][ T140] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.063476][ T9] syz1: Port: 1 Link DOWN [ 212.137801][ T36] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.157194][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.851'. [ 212.162529][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.205584][ T36] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.217728][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.243287][ T36] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.260495][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.283517][ T9247] netlink: 'syz.2.853': attribute type 1 has an invalid length. [ 212.301493][ T7254] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.320405][ T7254] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.341187][ T7254] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.341314][ T9247] netlink: 244 bytes leftover after parsing attributes in process `syz.2.853'. [ 212.358700][ T7254] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.461773][ T9252] nbd: must specify at least one socket [ 212.468582][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.855'. [ 212.640211][ T9259] netlink: 'syz.3.857': attribute type 1 has an invalid length. [ 212.661837][ T9259] netlink: 132 bytes leftover after parsing attributes in process `syz.3.857'. [ 212.693687][ T9259] netlink: 'syz.3.857': attribute type 2 has an invalid length. [ 212.722936][ T9259] netlink: 'syz.3.857': attribute type 1 has an invalid length. [ 212.736570][ T9259] netlink: 2 bytes leftover after parsing attributes in process `syz.3.857'. [ 212.982937][ T9278] netlink: 36 bytes leftover after parsing attributes in process `syz.2.863'. [ 212.984261][ T9280] netlink: 36 bytes leftover after parsing attributes in process `syz.0.864'. [ 213.595406][ T9304] netlink: 'syz.3.868': attribute type 2 has an invalid length. [ 213.616168][ T9304] k›*·]‘: entered promiscuous mode [ 213.692156][ T9304] erspan0: left promiscuous mode [ 213.774029][ T9304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.811681][ T9304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.860181][ T5910] lo speed is unknown, defaulting to 1000 [ 213.867309][ T5910] syz2: Port: 1 Link ACTIVE [ 214.343722][ T9340] 8021q: adding VLAN 0 to HW filter on device bond3 [ 214.384390][ T9340] macvlan2: entered promiscuous mode [ 214.393503][ T9340] macvlan2: entered allmulticast mode [ 214.504716][ T9347] vxcan0: entered promiscuous mode [ 214.997279][ T9397] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 215.010360][ T9397] Bluetooth: MGMT ver 1.23 [ 215.301739][ T9411] lo speed is unknown, defaulting to 1000 [ 215.486869][ T9416] lo speed is unknown, defaulting to 1000 [ 215.543017][ T9424] netlink: zone id is out of range [ 215.580253][ T9424] netlink: zone id is out of range [ 215.597169][ T9424] netlink: zone id is out of range [ 215.625368][ T9424] netlink: zone id is out of range [ 215.641847][ T9424] netlink: zone id is out of range [ 215.662258][ T9424] netlink: zone id is out of range [ 215.667831][ T9424] netlink: zone id is out of range [ 215.694373][ T9433] syzkaller1: entered promiscuous mode [ 215.700176][ T9433] syzkaller1: entered allmulticast mode [ 215.716865][ T9424] netlink: zone id is out of range [ 215.730314][ T9424] netlink: zone id is out of range [ 215.791871][ T9430] lo speed is unknown, defaulting to 1000 [ 215.850796][ T9411] wg1 speed is unknown, defaulting to 1000 [ 216.084652][ T9440] __nla_validate_parse: 10 callbacks suppressed [ 216.084670][ T9440] netlink: 20 bytes leftover after parsing attributes in process `syz.4.899'. [ 216.117814][ T9440] tipc: Cannot configure node identity twice [ 216.239498][ T9415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.663602][ T9430] wg1 speed is unknown, defaulting to 1000 [ 216.732712][ T9416] wg1 speed is unknown, defaulting to 1000 [ 217.078476][ T5848] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 217.078598][ T5158] Bluetooth: hci2: command 0x0406 tx timeout [ 218.291747][ T9498] netlink: 'syz.0.916': attribute type 13 has an invalid length. [ 218.449488][ T9503] netlink: 'syz.1.917': attribute type 1 has an invalid length. [ 218.575236][ T9510] lo speed is unknown, defaulting to 1000 [ 218.625670][ T9509] lo speed is unknown, defaulting to 1000 [ 218.771520][ T9518] lo speed is unknown, defaulting to 1000 [ 219.318764][ T9510] wg1 speed is unknown, defaulting to 1000 [ 219.366568][ T9540] netlink: 28 bytes leftover after parsing attributes in process `syz.2.929'. [ 219.741249][ T9555] netlink: 'syz.0.934': attribute type 4 has an invalid length. [ 220.333975][ T9562] netlink: 48 bytes leftover after parsing attributes in process `syz.0.937'. [ 220.617255][ T9518] wg1 speed is unknown, defaulting to 1000 [ 220.683474][ T9509] wg1 speed is unknown, defaulting to 1000 [ 220.932073][ T9575] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 221.751446][ T9584] netlink: 'syz.1.944': attribute type 21 has an invalid length. [ 221.777301][ T9584] netlink: 128 bytes leftover after parsing attributes in process `syz.1.944'. [ 221.793947][ T9584] netlink: 'syz.1.944': attribute type 4 has an invalid length. [ 221.814069][ T9584] netlink: 'syz.1.944': attribute type 5 has an invalid length. [ 221.824660][ T9584] netlink: 3 bytes leftover after parsing attributes in process `syz.1.944'. [ 221.919084][ T9587] netlink: 'syz.2.945': attribute type 2 has an invalid length. [ 221.926757][ T9587] netlink: 64 bytes leftover after parsing attributes in process `syz.2.945'. [ 221.969279][ T9587] netlink: 'syz.2.945': attribute type 1 has an invalid length. [ 221.976952][ T9587] netlink: 16134 bytes leftover after parsing attributes in process `syz.2.945'. [ 222.053965][ T9589] nft_compat: unsupported protocol 0 [ 222.081409][ T9587] netlink: 'syz.2.945': attribute type 10 has an invalid length. [ 222.586541][ T9617] netlink: 80 bytes leftover after parsing attributes in process `syz.0.953'. [ 222.604473][ T9618] trusted_key: syz.0.953 sent an empty control message without MSG_MORE. [ 222.926711][ T9624] netlink: 'syz.0.956': attribute type 2 has an invalid length. [ 222.946428][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.956'. [ 222.972599][ T9626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.957'. [ 223.278151][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'. [ 223.307575][ T9641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.962'. [ 223.362136][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'. [ 223.481976][ T9635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.524262][ T9635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.542739][ T9635] bond0 (unregistering): Released all slaves [ 223.572968][ T9657] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 225.417432][ T9715] delete_channel: no stack [ 225.457802][ T9716] net_ratelimit: 724 callbacks suppressed [ 225.457820][ T9716] netlink: zone id is out of range [ 225.621821][ T9729] netlink: 'syz.1.985': attribute type 4 has an invalid length. [ 226.401776][ T9746] lo speed is unknown, defaulting to 1000 [ 226.511657][ T9749] lo speed is unknown, defaulting to 1000 [ 226.844892][ T9744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.863169][ T9757] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 226.879416][ T9759] netlink: 'syz.0.992': attribute type 2 has an invalid length. [ 226.907345][ T9759] þ: entered promiscuous mode [ 227.077491][ T9764] lo speed is unknown, defaulting to 1000 [ 227.133484][ T9746] wg1 speed is unknown, defaulting to 1000 [ 227.553812][ T9779] __nla_validate_parse: 8 callbacks suppressed [ 227.553830][ T9779] netlink: 16 bytes leftover after parsing attributes in process `syz.1.998'. [ 227.569777][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.997'. [ 227.614788][ T9749] wg1 speed is unknown, defaulting to 1000 [ 227.686336][ T9781] netlink: 'syz.3.999': attribute type 1 has an invalid length. [ 227.712242][ T9781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.999'. [ 227.756941][ T9783] netlink: 'syz.4.1000': attribute type 1 has an invalid length. [ 227.948630][ T9789] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 228.005988][ T9783] 8021q: adding VLAN 0 to HW filter on device bond4 [ 228.013870][ T140] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 228.138871][ T140] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 228.156608][ T9792] veth7: entered promiscuous mode [ 228.167532][ T9792] bond4: (slave veth7): Enslaving as a backup interface with a down link [ 228.174832][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'. [ 228.192144][ T9799] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1003'. [ 228.207598][ T9764] wg1 speed is unknown, defaulting to 1000 [ 228.574695][ T9811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1008'. [ 228.705818][ T9825] netlink: 788 bytes leftover after parsing attributes in process `syz.4.1011'. [ 228.834190][ T9830] netlink: 308 bytes leftover after parsing attributes in process `syz.1.1012'. [ 228.850738][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1012'. [ 228.864311][ T9830] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 228.996926][ T9838] netlink: 'syz.1.1015': attribute type 1 has an invalid length. [ 229.027370][ T9836] rdma_rxe: rxe_newlink: failed to add lo [ 229.585209][ T9868] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1025'. [ 230.383940][ T9911] tipc: Enabled bearer , priority 0 [ 230.417678][ T9911] syzkaller0: entered promiscuous mode [ 230.443571][ T9911] syzkaller0: entered allmulticast mode [ 230.455809][ T9906] syzkaller1: entered promiscuous mode [ 230.462113][ T9906] syzkaller1: entered allmulticast mode [ 230.476953][ T9915] netlink: 'syz.1.1038': attribute type 15 has an invalid length. [ 230.490630][ T9911] tipc: Resetting bearer [ 230.524782][ T7254] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.527159][ T9915] netlink: 'syz.1.1038': attribute type 15 has an invalid length. [ 230.551389][ T9909] tipc: Resetting bearer [ 230.577490][ T9909] tipc: Disabling bearer [ 230.593624][ T36] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.602171][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.613625][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.921602][ T9939] lo speed is unknown, defaulting to 1000 [ 231.404760][ T9962] lo speed is unknown, defaulting to 1000 [ 231.420433][ T9970] bond0: (slave wlan1): Releasing backup interface [ 231.465012][ T9970] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 231.497091][ T9939] wg1 speed is unknown, defaulting to 1000 [ 231.914915][ T9962] wg1 speed is unknown, defaulting to 1000 [ 231.925544][ T9986] netlink: 'syz.4.1056': attribute type 1 has an invalid length. [ 232.447683][T10007] lo speed is unknown, defaulting to 1000 [ 232.770986][T10021] __nla_validate_parse: 13 callbacks suppressed [ 232.771005][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1067'. [ 233.422417][T10027] lo speed is unknown, defaulting to 1000 [ 233.432072][T10007] wg1 speed is unknown, defaulting to 1000 [ 233.696990][T10028] netlink: 'syz.4.1068': attribute type 13 has an invalid length. [ 233.715384][T10028] netlink: 'syz.4.1068': attribute type 17 has an invalid length. [ 234.330411][T10028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.390592][T10028] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.548198][T10028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.049377][T10027] wg1 speed is unknown, defaulting to 1000 [ 235.957137][T10036] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 235.966674][T10047] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.134492][T10056] nbd: couldn't find device at index 0 [ 236.348512][T10059] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1074'. [ 236.504696][T10080] netlink: del zone limit has 4 unknown bytes [ 237.093402][T10112] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 237.175824][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1093'. [ 237.476334][T10128] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1097'. [ 237.593242][ T7245] nci: nci_rx_work: unknown MT 0x1 [ 237.781599][T10145] syzkaller0: entered promiscuous mode [ 237.798437][T10145] syzkaller0: entered allmulticast mode [ 237.813288][T10146] netlink: 'syz.3.1100': attribute type 3 has an invalid length. [ 238.579353][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1105'. [ 238.599435][T10155] syzkaller1: entered promiscuous mode [ 238.604931][T10155] syzkaller1: entered allmulticast mode [ 238.611665][T10155] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 238.678997][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 239.032734][T10166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1112'. [ 239.157154][T10176] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1113'. [ 239.286361][T10182] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1114'. [ 239.490457][T10182] lo speed is unknown, defaulting to 1000 [ 239.513673][T10190] netlink: 'syz.2.1115': attribute type 303 has an invalid length. [ 239.621765][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1115'. [ 239.779545][T10196] sctp: [Deprecated]: syz.0.1118 (pid 10196) Use of int in max_burst socket option. [ 239.779545][T10196] Use struct sctp_assoc_value instead [ 240.073187][T10203] sctp: [Deprecated]: syz.2.1120 (pid 10203) Use of int in maxseg socket option. [ 240.073187][T10203] Use struct sctp_assoc_value instead [ 240.669625][T10237] sctp: [Deprecated]: syz.3.1129 (pid 10237) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.669625][T10237] Use struct sctp_sack_info instead [ 240.960303][T10255] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 240.962176][T10250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1133'. [ 240.982540][T10255] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 241.008450][T10182] wg1 speed is unknown, defaulting to 1000 [ 241.403393][T10282] netlink: 'syz.1.1142': attribute type 2 has an invalid length. [ 241.614969][T10300] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1144'. [ 241.765745][T10305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1148'. [ 241.781494][T10305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1148'. [ 241.819548][T10293] lo speed is unknown, defaulting to 1000 [ 241.928447][T10308] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.949100][T10310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1150'. [ 242.389714][T10323] netlink: 'syz.4.1153': attribute type 1 has an invalid length. [ 242.618284][T10324] bond5: (slave geneve3): Opening slave failed [ 242.674394][T10323] 8021q: adding VLAN 0 to HW filter on device bond5 [ 242.697091][T10293] wg1 speed is unknown, defaulting to 1000 [ 243.387996][ T59] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.447576][ T59] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.476295][ T59] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.491465][ T59] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.962686][T10373] sit0: entered promiscuous mode [ 244.006858][T10373] netlink: 'syz.4.1164': attribute type 1 has an invalid length. [ 244.028147][T10373] __nla_validate_parse: 4 callbacks suppressed [ 244.028166][T10373] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1164'. [ 244.207362][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1166'. [ 244.714809][T10402] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1171'. [ 245.010237][T10408] lo speed is unknown, defaulting to 1000 [ 245.623673][T10439] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1180'. [ 245.630546][T10438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1179'. [ 245.696388][T10438] netlink: 'syz.1.1179': attribute type 1 has an invalid length. [ 245.815450][T10452] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1181'. [ 245.827295][T10408] wg1 speed is unknown, defaulting to 1000 [ 245.895331][T10442] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1172'. [ 245.950343][T10453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1183'. [ 245.990573][T10453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1183'. [ 246.007967][T10455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1183'. [ 246.509758][T10479] netlink: 'syz.0.1189': attribute type 29 has an invalid length. [ 246.584051][T10478] tipc: Resetting bearer [ 246.706010][T10492] tipc: Enabling of bearer rejected, failed to enable media [ 246.729276][T10489] netlink: 'syz.4.1192': attribute type 2 has an invalid length. [ 247.034355][T10509] lo speed is unknown, defaulting to 1000 [ 247.072341][T10512] lo speed is unknown, defaulting to 1000 [ 247.555162][T10509] wg1 speed is unknown, defaulting to 1000 [ 247.760460][T10519] lo speed is unknown, defaulting to 1000 [ 248.472076][T10512] wg1 speed is unknown, defaulting to 1000 [ 248.496485][T10519] wg1 speed is unknown, defaulting to 1000 [ 248.678196][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 248.684263][ T5158] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 248.864373][T10560] netlink: 'syz.3.1211': attribute type 1 has an invalid length. [ 248.934437][T10562] netlink: 'syz.4.1210': attribute type 3 has an invalid length. [ 249.154909][T10571] __nla_validate_parse: 11 callbacks suppressed [ 249.154927][T10571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1213'. [ 249.422653][T10579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1214'. [ 249.691429][T10589] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1217'. [ 249.702329][T10589] batadv_slave_1: entered promiscuous mode [ 250.085742][T10603] IPVS: length: 169 != 24 [ 250.536784][T10641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1233'. [ 250.758630][T10652] tipc: Enabled bearer , priority 0 [ 250.766253][T10652] syzkaller0: entered promiscuous mode [ 250.772244][T10652] syzkaller0: entered allmulticast mode [ 250.816159][T10652] tipc: Resetting bearer [ 250.827489][T10651] tipc: Resetting bearer [ 250.856210][T10651] tipc: Disabling bearer [ 250.920137][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'. [ 250.974766][T10664] netlink: 'syz.4.1242': attribute type 1 has an invalid length. [ 251.115037][T10661] netlink: 'syz.1.1241': attribute type 3 has an invalid length. [ 251.149416][T10661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.233167][T10687] netlink: 'syz.3.1246': attribute type 10 has an invalid length. [ 251.524537][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1250'. [ 251.611325][T10707] netlink: 'syz.3.1253': attribute type 18 has an invalid length. [ 251.708528][T10704] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1250'. [ 251.923378][T10732] netlink: 'syz.3.1259': attribute type 13 has an invalid length. [ 251.935960][T10732] netlink: 'syz.3.1259': attribute type 17 has an invalid length. [ 252.063967][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1262'. [ 252.076927][T10732] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.224033][T10745] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 252.302067][T10748] netlink: 'syz.3.1265': attribute type 1 has an invalid length. [ 252.353904][T10750] bond1 (unregistering): Released all slaves [ 252.358605][T10755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1266'. [ 252.412683][T10748] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 252.414552][T10755] vcan0: Master is either lo or non-ether device [ 252.581995][T10768] tipc: Enabled bearer , priority 0 [ 252.600047][T10768] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1269'. [ 252.621470][T10768] tipc: Enabling of bearer rejected, already enabled [ 252.630730][T10768] syzkaller0: entered promiscuous mode [ 252.636220][T10768] syzkaller0: entered allmulticast mode [ 252.665445][T10767] tipc: Resetting bearer [ 252.711910][T10767] tipc: Disabling bearer [ 252.793643][T10781] netlink: 'syz.0.1274': attribute type 32 has an invalid length. [ 252.856582][T10779] lo speed is unknown, defaulting to 1000 [ 253.014395][T10786] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 253.020793][T10786] syzkaller1: ignored: set checksum disabled [ 253.090214][T10788] netlink: 'syz.4.1275': attribute type 1 has an invalid length. [ 253.109573][T10788] nbd: error processing sock list [ 253.116897][T10788] block nbd2: shutting down sockets [ 253.117359][T10804] syzkaller0: entered promiscuous mode [ 253.140680][T10804] syzkaller0: entered allmulticast mode [ 253.803204][T10832] lo speed is unknown, defaulting to 1000 [ 253.925090][T10841] lo speed is unknown, defaulting to 1000 [ 254.143867][T10779] wg1 speed is unknown, defaulting to 1000 [ 254.225557][T10861] __nla_validate_parse: 3 callbacks suppressed [ 254.225575][T10861] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1291'. [ 254.299998][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1289'. [ 254.590356][T10832] wg1 speed is unknown, defaulting to 1000 [ 254.923870][T10841] wg1 speed is unknown, defaulting to 1000 [ 255.591300][T10885] lo speed is unknown, defaulting to 1000 [ 256.036573][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1301'. [ 256.191439][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1302'. [ 256.227041][T10906] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1302'. [ 256.398774][T10885] wg1 speed is unknown, defaulting to 1000 [ 256.404804][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1302'. [ 256.413837][T10920] syz_tun: entered allmulticast mode [ 256.424958][T10918] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1306'. [ 256.434477][T10920] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1306'. [ 256.460122][T10918] dvmrp1: entered allmulticast mode [ 256.495535][T10906] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1302'. [ 256.525893][T10925] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1307'. [ 257.304873][T10957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.167896][T10979] batman_adv: batadv0: Adding interface: macvlan2 [ 258.177042][T10979] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.212217][T10979] batman_adv: batadv0: Interface activated: macvlan2 [ 258.394387][T10993] pim6reg: entered allmulticast mode [ 258.662027][T11008] openvswitch: netlink: Message has 24 unknown bytes. [ 258.680916][T11008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.807254][T11017] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 259.454521][T11060] __nla_validate_parse: 6 callbacks suppressed [ 259.454540][T11060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1345'. [ 259.478762][T11063] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1346'. [ 259.484080][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1345'. [ 259.501287][T11060] netlink: 'syz.1.1345': attribute type 13 has an invalid length. [ 259.518178][T11060] netlink: 'syz.1.1345': attribute type 12 has an invalid length. [ 259.704108][T11067] lo speed is unknown, defaulting to 1000 [ 259.724080][T11073] tipc: Enabling of bearer rejected, already enabled [ 260.943724][T11092] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1352'. [ 260.947833][T11088] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1351'. [ 260.965265][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1350'. [ 260.978397][T11087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1351'. [ 260.981324][T11088] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1351'. [ 261.007156][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1350'. [ 261.033689][T11087] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1351'. [ 261.103648][T11067] wg1 speed is unknown, defaulting to 1000 [ 261.379365][T11113] smc: removing ib device syz1 [ 262.555895][T11157] tipc: Enabling of bearer rejected, already enabled [ 262.576202][T11159] tipc: Resetting bearer [ 263.037832][T11174] netlink: 'syz.3.1372': attribute type 10 has an invalid length. [ 263.397845][T11180] veth1: entered promiscuous mode [ 263.450859][T11180] netlink: 'syz.3.1375': attribute type 1 has an invalid length. [ 263.471063][T11180] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 263.509267][T11186] netlink: 'syz.2.1378': attribute type 1 has an invalid length. [ 263.646888][T11183] nbd: socks must be embedded in a SOCK_ITEM attr [ 263.715827][T11195] syzkaller1: entered promiscuous mode [ 263.748167][T11195] syzkaller1: entered allmulticast mode [ 264.138676][T11214] netlink: 'syz.4.1383': attribute type 4 has an invalid length. [ 265.139676][ T5852] syz_tun (unregistering): left allmulticast mode [ 265.490016][ T3432] bridge_slave_1: left allmulticast mode [ 265.495774][ T3432] bridge_slave_1: left promiscuous mode [ 265.503776][ T3432] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.513029][ T3432] bridge_slave_0: left allmulticast mode [ 265.520090][ T3432] bridge_slave_0: left promiscuous mode [ 265.525766][ T3432] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.964305][ T3432] bond1 (unregistering): Released all slaves [ 265.986660][ T3432] bond0 (unregistering): Released all slaves [ 266.112486][ T3432] tipc: Left network mode [ 266.134274][ T3432] IPVS: stopping backup sync thread 8262 ... [ 266.325668][ T3432] hsr_slave_0: left promiscuous mode [ 266.332879][ T3432] hsr_slave_1: left promiscuous mode [ 266.347005][ T3432] pim6reg (unregistering): left allmulticast mode [ 266.645728][ T3432] team0 (unregistering): Port device team_slave_1 removed [ 266.680596][ T3432] team0 (unregistering): Port device team_slave_0 removed [ 267.222447][ T3432] IPVS: stop unused estimator thread 0... [ 267.411087][ T3432] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 267.434583][ T3432] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 267.446489][ T3432] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 267.456009][ T3432] CPU: 1 UID: 0 PID: 3432 Comm: kworker/u8:8 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 267.467781][ T3432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.477813][ T3432] Workqueue: netns cleanup_net [ 267.482566][ T3432] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 267.488182][ T3432] Code: ff ff ff e8 a3 ba 41 01 89 c5 31 ff 89 c6 e8 98 a3 91 f7 85 ed 74 45 e8 4f 9f 91 f7 eb 05 e8 48 9f 91 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 22 c2 f4 f7 49 8b 2c 24 49 8d 7c [ 267.507772][ T3432] RSP: 0018:ffffc9000c2a7080 EFLAGS: 00010206 [ 267.513828][ T3432] RAX: 000000001fffe000 RBX: 1ffff1100ae72e82 RCX: ffff88803103da00 [ 267.521787][ T3432] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 267.529750][ T3432] RBP: 0000000000000001 R08: ffffffff8fa07af7 R09: 1ffffffff1f40f5e [ 267.537739][ T3432] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: 00000000ffff0000 [ 267.545779][ T3432] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff888057397410 [ 267.553741][ T3432] FS: 0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 267.562649][ T3432] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 267.569219][ T3432] CR2: 000056098d103000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 267.577167][ T3432] Call Trace: [ 267.580425][ T3432] [ 267.583338][ T3432] mld_clear_delrec+0x160/0x660 [ 267.588172][ T3432] ipv6_mc_destroy_dev+0x45/0x5a0 [ 267.593171][ T3432] ? addrconf_ifdown+0x1396/0x1880 [ 267.598259][ T3432] addrconf_ifdown+0x139e/0x1880 [ 267.603172][ T3432] ? tls_dev_event+0x717/0xec0 [ 267.607908][ T3432] ? __pfx_addrconf_ifdown+0x10/0x10 [ 267.613187][ T3432] addrconf_notify+0x1bc/0x1010 [ 267.618016][ T3432] notifier_call_chain+0x1b3/0x3e0 [ 267.623108][ T3432] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 267.629514][ T3432] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 267.636270][ T3432] ? __pfx_net_passive_dec+0x10/0x10 [ 267.641532][ T3432] ? rtnl_net_dev_lock+0x36/0x2f0 [ 267.646535][ T3432] ? mutex_is_locked+0x17/0x50 [ 267.651271][ T3432] ? nsim_destroy+0xe5/0x670 [ 267.655836][ T3432] unregister_netdevice_queue+0x33c/0x380 [ 267.661532][ T3432] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 267.667747][ T3432] nsim_destroy+0x1dd/0x670 [ 267.672234][ T3432] __nsim_dev_port_del+0x14d/0x1b0 [ 267.677324][ T3432] nsim_dev_reload_destroy+0x288/0x490 [ 267.682780][ T3432] nsim_dev_reload_down+0x8a/0xc0 [ 267.687789][ T3432] devlink_reload+0x1b6/0x8d0 [ 267.692444][ T3432] ? xa_get_mark+0x67/0x7b0 [ 267.696918][ T3432] ? __pfx_devlink_reload+0x10/0x10 [ 267.702088][ T3432] ? xa_get_mark+0x70f/0x7b0 [ 267.706655][ T3432] devlink_pernet_pre_exit+0x1d9/0x3d0 [ 267.712090][ T3432] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 267.718049][ T3432] ? class_remove_file_ns+0x121/0x160 [ 267.723409][ T3432] ops_undo_list+0x187/0x990 [ 267.727979][ T3432] ? __pfx_ops_undo_list+0x10/0x10 [ 267.733070][ T3432] ? do_raw_spin_unlock+0x122/0x240 [ 267.738252][ T3432] cleanup_net+0x4c5/0x800 [ 267.742650][ T3432] ? __pfx_cleanup_net+0x10/0x10 [ 267.747578][ T3432] ? _raw_spin_unlock_irq+0x23/0x50 [ 267.752765][ T3432] ? process_scheduled_works+0x9ef/0x17b0 [ 267.758466][ T3432] ? process_scheduled_works+0x9ef/0x17b0 [ 267.764162][ T3432] process_scheduled_works+0xae1/0x17b0 [ 267.769692][ T3432] ? __pfx_process_scheduled_works+0x10/0x10 [ 267.775653][ T3432] worker_thread+0x8a0/0xda0 [ 267.780229][ T3432] kthread+0x70e/0x8a0 [ 267.784277][ T3432] ? __pfx_worker_thread+0x10/0x10 [ 267.789367][ T3432] ? __pfx_kthread+0x10/0x10 [ 267.793931][ T3432] ? _raw_spin_unlock_irq+0x23/0x50 [ 267.799105][ T3432] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.804277][ T3432] ? __pfx_kthread+0x10/0x10 [ 267.808840][ T3432] ret_from_fork+0x3fc/0x770 [ 267.813409][ T3432] ? __pfx_ret_from_fork+0x10/0x10 [ 267.818500][ T3432] ? __switch_to_asm+0x39/0x70 [ 267.823242][ T3432] ? __switch_to_asm+0x33/0x70 [ 267.827981][ T3432] ? __pfx_kthread+0x10/0x10 [ 267.832549][ T3432] ret_from_fork_asm+0x1a/0x30 [ 267.837298][ T3432] [ 267.840293][ T3432] Modules linked in: [ 267.844838][ T3432] ---[ end trace 0000000000000000 ]--- [ 267.850537][ T3432] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 267.856158][ T3432] Code: ff ff ff e8 a3 ba 41 01 89 c5 31 ff 89 c6 e8 98 a3 91 f7 85 ed 74 45 e8 4f 9f 91 f7 eb 05 e8 48 9f 91 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 22 c2 f4 f7 49 8b 2c 24 49 8d 7c [ 267.875809][ T3432] RSP: 0018:ffffc9000c2a7080 EFLAGS: 00010206 [ 267.881950][ T3432] RAX: 000000001fffe000 RBX: 1ffff1100ae72e82 RCX: ffff88803103da00 [ 267.889932][ T3432] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 267.897883][ T3432] RBP: 0000000000000001 R08: ffffffff8fa07af7 R09: 1ffffffff1f40f5e [ 267.905865][ T3432] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: 00000000ffff0000 [ 267.913839][ T3432] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff888057397410 [ 267.921816][ T3432] FS: 0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 267.930768][ T3432] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 267.937359][ T3432] CR2: 000056098d103000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 267.945348][ T3432] Kernel panic - not syncing: Fatal exception [ 267.951652][ T3432] Kernel Offset: disabled [ 267.955962][ T3432] Rebooting in 86400 seconds..