last executing test programs: 8.997094861s ago: executing program 1 (id=6197): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a84d", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000000)={0x24, @long}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000000100), 0x0, 0x726, 0x7) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x802, 0x1800000000000000) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88afa5b4, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x3c}}, 0x0) socket$alg(0x26, 0x5, 0x0) r9 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)={0x3c, r11, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 7.480978505s ago: executing program 1 (id=6205): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) write$tun(0xffffffffffffffff, 0x0, 0x3e) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5452, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000080)='veth0_to_bond\x00') sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0xffea, &(0x7f00000001c0)={&(0x7f0000001b00)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x22020600) unshare(0x2a020400) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000140)=ANY=[@ANYRES16=r4, @ANYRESOCT=r1, @ANYRESDEC=r3], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x30}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 7.357358337s ago: executing program 3 (id=6206): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000", @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000080001"], 0xe0}}, 0x0) 7.321167752s ago: executing program 3 (id=6208): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, 0x0, &(0x7f0000000680)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000d80), &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r5, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300a10256c7f84828bff8136e312eacc2e9bf2e4e3aeed11e088cca4fc856d05011f17e10dafd4dc82b54c1", @ANYBLOB], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000b40)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x6, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7ff9}, @initial, @device_a, @device_b, {0xb, 0x4}}, @a_msdu}, 0x18) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) 6.940610583s ago: executing program 1 (id=6212): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x9833bf88d1b218f5, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x30}, 0x4d6, 0x6c}, 0x0, @in6=@loopback, 0xfffffffb, 0x2, 0x2, 0x4, 0x8, 0x0, 0x40000}}, 0xe8) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000001540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r3, r3, 0x2e}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r2, 0x4, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r6 = socket(0x8, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a320004", 0x5f, 0x2251197285d76a80, 0x0, 0x0) ioctl$IMGETCOUNT(r6, 0x40106183, &(0x7f0000000000)) 6.784928651s ago: executing program 4 (id=6213): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000009c0)={0x0, 0x2, 0xf000}, &(0x7f0000000a00)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5}, 0x1c, &(0x7f0000000480)}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000500)='\x00', 0x1}], 0x1}}], 0x2, 0x4048010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x18) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x5}}, 0x14}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006}, 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x9, 0xe}}, @TCA_FW_MASK={0x8, 0x5, 0x4}]}}]}, 0x40}}, 0x20040054) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r5}, 0x0, 0x0}, 0x20) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f00000006c0)={0x2, 0x8, 0x1, 0xf9, 0x0, [@mcast2, @mcast2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3c756697f260f2c0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x55, &(0x7f0000000180)=""/85, 0x41100, 0x32, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) close(r0) 4.632664311s ago: executing program 4 (id=6215): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000) unshare(0x2c060000) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8040000) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x4000) socket(0x10, 0x803, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x20c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x1dc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_EMATCHES={0x110, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x7}, {0x7, 0x10001, 0x7, 0xfffffff7}}}, @TCF_EM_IPT={0x34, 0x3, 0x0, 0x0, {{0x359f, 0x9, 0x3ff}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x15, 0x5, "d128be47491207a500026fa0e16dde76bb"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x94, 0x3, 0x0, 0x0, {{0x2, 0x0, 0x3}, "e445ef8ddba2d24479a52789b4cb566a0ce5a32ddb92e89c66cf45c59a8b2422e80ecab561f72357741710446bf02abca4a6f51e129d3ff769246a03ea53ccae7aa51b758eb1eea382eabc55faa8101a1dfc84cf99e9555ed54f918ebb67d441ee3dfb1741c2e32f5d6d52d5a1ec45b4a4c5f7cebce0465ae68ee70f3dad8331dd8e39e52be1f9"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0x2c}, {0x2, 0x2, 0x3}}}]}]}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xbc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0xfffffee9, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x8, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfffc}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x2, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x3}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x20c}}, 0x2000c800) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.468781277s ago: executing program 2 (id=6217): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4040055) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000140)) pwritev(r11, &(0x7f0000000040)=[{&(0x7f0000000380)="80fd01fff140", 0x6}], 0x1, 0x2, 0x3) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) 3.810996981s ago: executing program 2 (id=6219): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r1) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x3}}]}}}]}, 0x78}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x50, 0x13, 0x8, 0x70bd2a, 0x25dfdbff, {0x26, 0x6, 0x0, 0x8e, {0x4e20, 0x4e24, [0x3, 0x7, 0xc0000000, 0xea48], [0xffffcf9c, 0x3, 0x7fffffff, 0x100], r5, [0x5, 0x6]}, 0x1, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000020605000000000000000000000000050500010007000000090000050004000000000013000300686173683a6e65742c69666163650000"], 0x44}}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r7, &(0x7f0000000380)={{0x3, @null, 0x1}, [@null={0x40, 0x40, 0x40, 0x40, 0x40, 0x40, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007b243ce4b3daa7804f"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$alg(0x26, 0x5, 0x0) accept4(r9, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r8}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 3.646829682s ago: executing program 0 (id=6220): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0xd}, 0x94) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r2, 0x1, 0x10, 0xfff, 0x55b}, &(0x7f00000000c0)=0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x5, 0x0, 0x0, &(0x7f0000000a40)='syzkaller\x00', 0x8, 0x85, &(0x7f0000000a80)=""/133, 0x41100, 0x65, '\x00', r3, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x2, 0x1, 0xe, 0x3}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4, 0x0, 0x4}, 0x18) unshare(0x2a020400) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r5}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x1df3, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x64000041}, 0x44885) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_SIGNAL_INFO(r6, &(0x7f00000009c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x4048000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r8, 0x9c3fa077fa966179, 0x70bd29, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) 3.30507222s ago: executing program 0 (id=6221): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0x7f, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r13, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x34, r2, 0x1, 0x80000000, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xa, 0x44}}}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xffff}]}]}, 0x34}}, 0x0) r14 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r14, 0x0, 0x485, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000006880)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000006840)={&(0x7f00000067c0)={0x4c, r11, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) socket$can_raw(0x1d, 0x3, 0x1) 2.933185329s ago: executing program 3 (id=6222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4b, 0x2, {{0x0, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x8, 0x80000001, 0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000001c0)=0x14) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) accept4(r6, 0x0, 0x0, 0x800) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x30, r1, 0x701, 0x0, 0x25dfdbfc, {0x41}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}}, 0x4c000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000020000000900010073797a300000000044000000090a010400000000000000000300000008000a4000000000090002007379fa31000000000900010073797a300000000008000540ec00002308000440"], 0x8c}}, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {}, {0x4}}}, 0x24}}, 0x4008805) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r11, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) setsockopt$XDP_TX_RING(r11, 0x11b, 0x3, &(0x7f0000000040)=0x400e01, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x1000) listen(r10, 0x5) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0xfffff000) 2.876995341s ago: executing program 1 (id=6223): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0xe, 0x0, 0x0, &(0x7f0000000100)={0x3ff, 0xee, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 2.808863528s ago: executing program 0 (id=6224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="64000000020601010000000000000000000a000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x8, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0xff, &(0x7f0000000cc0)=""/255, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="07022cbd7000000000000100000008000880040007012c0004800500030001000000050003000000000005000300010000000500030080ff0000050003000200000008000100030000000800020001"], 0x58}}, 0x880) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, 0x3fa, 0x100, 0x70bd29, 0x25dfdbfe, {0x1, 0x1, 0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x4040090}, 0xf295f80aa4c245dc) 2.599011869s ago: executing program 4 (id=6225): epoll_create1(0x80000) socket$kcm(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x800000000000002, 0x0) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000d"], 0x48) socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x28, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$rds(0x15, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0], 0x20) 2.476488671s ago: executing program 2 (id=6226): socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) epoll_create1(0x80000) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x800000000000002, 0x0) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000d"], 0x48) socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x28, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='task_newtask\x00', r1, 0x0, 0x2000000000}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRES64=0x0, @ANYRESOCT=r0], 0x20) 2.431388721s ago: executing program 4 (id=6227): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x1d, 0x0, 0x3, 0x80ffffff}, {}, {}, {}, {0x6}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sys_exit\x00', r2, 0x0, 0x100000000}, 0x18) r3 = accept(r1, &(0x7f00000002c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000180)=0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x78, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x47}}}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xd7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x0) tee(r2, 0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180002000000eb75b6b94281661000006110b26a42eb1b0d336300efc2d05b03"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@float={0x4, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x30, 0x0, 0x2e]}}, &(0x7f0000000680)=""/135, 0x29, 0x87, 0x1, 0x4}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x90) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r9, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r8}, 0x20) close(r9) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0xe7, '\x00', r4, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="16000000000000000100000006"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={r12, 0x0, 0x20000000}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x3, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x7f}}, &(0x7f0000000500)='syzkaller\x00', 0x1, 0xdf, &(0x7f0000000540)=""/223, 0x41000, 0x11, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000780)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0xa, 0x2, 0x1ff}, 0x10, 0x209b3, 0xffffffffffffffff, 0x1, &(0x7f0000000900)=[0x1, r7, r9, 0x1, r10, r11, r12, 0x1], &(0x7f0000000940)=[{0x2, 0x5, 0x2, 0x2}], 0x10, 0x5}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x403, 0x70bd26, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x7}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xa1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x1000000}, 0xc) 2.341257992s ago: executing program 2 (id=6228): bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x9, 0x0, 0x0, 0x40, 0x4, {0x11, 0x4, 0x2, 0x1, 0x4, 0x67, 0x5, 0x5, 0x67, 0x598f, @local, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0xd6, 0x1, 0x3, [{@multicast2, 0xbede}, {@local, 0xb0e9}, {@loopback, 0x4}, {@multicast1, 0xf}, {@broadcast, 0xfffffffa}]}]}}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x2, 0x84) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0xc51e000) socket$inet_sctp(0x2, 0x5, 0x84) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 1.937037109s ago: executing program 4 (id=6229): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4040055) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000140)) pwritev(r11, &(0x7f0000000040)=[{&(0x7f0000000380)="80fd01fff140", 0x6}], 0x1, 0x2, 0x3) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) 1.830836019s ago: executing program 0 (id=6230): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000180)=0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r2 = socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r4, {0x7}, {0xd, 0xc}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000740)="fe", 0x1}], 0x2}}], 0x1, 0x4000800) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000050c0), r8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) 1.754576936s ago: executing program 3 (id=6231): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) listen(r0, 0x208) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x66, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6012000800303a00feffffff000000000000000000000001ff020000000000000000000000000001010390781000001065fba1b30038e8eea6879c836386ba00088801ff010000000000000000000000000001fc00000000"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg(r2, 0x0, 0x105aa) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x2, 0xb8}, 0x90) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x200c00ca) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'team0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r6, 0x29, 0x48, &(0x7f0000000180)=0x5cdd, 0x4) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x20, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x844) 1.456793767s ago: executing program 2 (id=6232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x400c000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.377013854s ago: executing program 3 (id=6233): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x20000) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000600a843000142f00fe8000"/37, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xffffffff, 0x0]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000a80)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa8f}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@mark={0xc, 0x15, {0x35075d, 0x9}}]}, 0xc4}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="cc000000210001000000000004000000ff010000000000000000000000000001fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011"], 0xcc}}, 0x0) socketpair(0x2, 0x1, 0x0, &(0x7f00000005c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffff"], 0x24}, 0x1, 0x5502000000000000}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r6, &(0x7f00000004c0)="a18ebb456b596b4d02693a4c7f14b733b93ee561506f41b2b8ae55f74c2855d46843ca40c69fb281bf89019c8f3edbb94de50af7452f7ba33e1cada0282f9196467604a587f870dead494956d771482671cdbea7bcfd7fd7118e95eecae50b432f1e111d4a2eef8460127faf58fde16bca588457fb6106bb709ab5787a886962ba71fd7afc0d731d7b96fb39b5390989fd081ca6a99721a8cc2718cf4759e3dc43a0dd596afb591b3bad2ee02ebdbf048fb95bfd3088a1ca1a6431c0d6bf9a867956ef2ecb8969cab86c3a44f6261555619a2b8c8fbdd9fd", 0xd8, 0x44000, &(0x7f0000000440)={0xa, 0x4e20, 0x800, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6e}, 0x1c) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) 937.091519ms ago: executing program 1 (id=6234): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) recvfrom$ax25(r5, &(0x7f0000000140)=""/29, 0x1d, 0x10000, &(0x7f00000001c0)={{0x3, @bcast, 0x1}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r8, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r11 = socket$unix(0x1, 0x2, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r13, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x4e21, 0xf14, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c) 829.518827ms ago: executing program 3 (id=6235): bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x4010}, 0x18) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) socket$unix(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000070000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x0, 0x28011, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r7, 0x0) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x50) r8 = socket$inet(0x2, 0x3, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'vlan1\x00'}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x68}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r8, 0x8983, &(0x7f0000000400)={0x8, 'vlan0\x00', {'wlan1\x00'}, 0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000aa5441358564c6f600b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff", @ANYRES32, @ANYBLOB="0000000000000000b70500000c0000318d0000"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xc}, 0x94) 789.441653ms ago: executing program 0 (id=6236): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x9, 0x4, 0x2, 0x2, 0x0, 0x70bd29, 0x25dfdbfe}, 0x10}}, 0x20000c04) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[{0x10, 0x1}, {0x10, 0x84, 0x1}], 0x20}, 0x20000000) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x3, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d242d7728c9386c4a0ac7e05bafbae38"}]}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = socket(0x10, 0x80003, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0xa, 0x89c8, 0x40401, r4, 0x7f, '\x00', r7, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x2}, 0x50) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x4000005) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9a}}, 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r0, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 675.656616ms ago: executing program 4 (id=6237): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}]}, 0x3c}}, 0x0) r4 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0002ebff00feff", @ANYRES32], 0x50) r5 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f0000000000)=0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) 488.860188ms ago: executing program 2 (id=6238): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xf, 0x1ff, 0x600000, 0x4, 0xdf, 0x2}, &(0x7f00000002c0)={0x3, 0x8000, 0x3, 0xfffffffffffffffb, 0x4d, 0x1, 0x8000, 0x3}, &(0x7f0000000300)={0x7, 0x6, 0x1, 0xd, 0x6, 0x7ff, 0x9, 0x6}, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000440)={&(0x7f0000000400)={[0x7]}, 0x8}) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0], 0x28}}, 0x802) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)={0x3c, r5, 0x1, 0x70bd2e, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "727afffa97"}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x818}, 0x4000) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) readv(r8, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="9d5ab229d99f6a8e10bb5fd52316e117eee892d86a067b4ae693515c2f15508e4d2d7c3d8a0ca7d2f3469320bce3097147e2e1816fe001f04afec25f5b9aaa55646b232a465b2c0deb426a084a2220ab94ff8be945f2a80ac0b0d740961893e41b80741213be111e59de4d56b3f64fb98fbf7b1153833e89545ca0f5b265", 0x7e) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000019440), 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) 50.418763ms ago: executing program 0 (id=6239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000580)="c705e395312d4e1a5df95256a640a7570000000087eeb182", 0xffffffffffffffe6) r4 = accept4(r3, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r5, &(0x7f0000000e80)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)="be520b39ee0eec58dea2bf1efa027df3646073995c1194dfd8e1640e7aef69e5978d8ca658bc98fe3984e39be1d393650084302062687d35b3373223efbbba58f8e01a1b687a950d358232ba4a17ef5c541991b959794208f29eba4c0a27d0facaa937dfc8bd5813d59397afb9835cdef72582a2fd3d0f3d8d931bf19367f7ffe09f7ecad3944a52236d88e726742bfb28425a03595dd1f02063204d5745d52c4dc039ebca2e74cd4edce0770ba2246d8aaeaefc672d05f7b230e7c29040e2af1c677c9930b87a96ee509824c80a5b461f3a18762ba3fd", 0xd7}, {&(0x7f0000000200)="35d23d54d84d0d3c46509b5f068cc04702aed26ba2d81fc46fff24a43acce8cdee822cee5287f4c72034c5666b7e41237b348bf94d33ff5766e85954b94dd2a9528381ceadd9c080cbc680790cd52cd087318a4fd9911092329736a99031f76b2cb1c704c0e8e79c6a5f9fec5a4258a48401d76547b1788dbdae9577f3138864efd058922d184ac5b1d270de9e881287cfd803ed5c69ebee069d58ac84c11d89eacbe5a00c", 0xa5}, {&(0x7f0000000400)="c079b09883300562afbf1441dbd9e2cb3b2d929be5e00e7937ab448971a7dbfbad61ba07cdde07016f83f55456781949444f1eabd5d8f4cdc37a5dd070b25657a585906c3c53ccee5bf5a5152e1b4acdb6a446a4978a4e689272e8dcf8ba762082ab129c855a23fb", 0x68}, {&(0x7f0000000480)="b7d645662f88dd7f3a188182d4deb411b6427b3ace83a0f01176f533b148e925fa3389246f9748be5c6f69fe8c20966997c4bba3eabfc3656911d17b6898d33648eb56721e3c5e6a6d200176cfa37b08ca04b880b046124483df87efdaea48f1a82099a1fee2862910cb08eb23a22972b2ecd05f61eca925cb385e8ee62bf952a41a3f1b458f8c7f652c6b24a67f2156e5ec873f920a3e626af30ea3ebc246e41adfc63f35", 0xa5}, {&(0x7f00000005c0)="393d8c923b54352e545748e732e8dac9d2f37ca999e0a3e06c3038202be0caaa61d2c27cb2a65308cbfb167befac4f66f85dfa9964e38374d0285cadb61aaa5ef5b8ae241a8434d7349789e1b507d7f366778d195d10fdb3d1c0e2f95f584cf5c76c0c7c90ef3e2986e37fa3b341c1d7ee578456c4c9bf78178069b0b25286c729423b83b3e99baeccd2c0382f6010053b1a3eaec998f8f6", 0x98}, {&(0x7f0000000680)="21f590dc23b63ea13f5aafc8047c214914532b22ae3cf65cc7a540b8c20dd10bc89d6f4ef8cc1b5539dc2ee24c99332c9fb1f7942f375082555afaf3d04df4ed54743b06984ffd6783e5ba40c5501fec97609e9265b93919bbe6fddd75d6f49f44d397fdc0a95979255f4eb2f497db48b58f3e", 0x73}], 0x6, &(0x7f00000007c0)=[@op={0x18}, @iv={0x20, 0x117, 0x2, 0x6, "dcc6eb5e6dce"}, @assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18}], 0x68, 0x4001}, {0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000840)}, {&(0x7f00000008c0)="4b7cb955af7d007f53da7af50846ca52323a9d121fad99947e7af7ba2700fa5c0ae0ab6bfd8d0ab70b395b6fa1d3851c07e03301afc7a6a1ac6b9f5e3f3e15f229bff7e1efcdcb976e39058d62fcc7f8c51f1d39e2984e1712dd4033d285a10b3508132765f49038ed764af68baaf2582ad078aaa55b2555aac3cfdfaf16ef0f329c21", 0x83}, {&(0x7f0000000f00)="99838852c0febf58dc4fcdd22d8e5f1c23f1aa36e6d1b4fb2236d3c46e140666d575beb88e8fa1c7365a6d440ac9f391e8213977bf7bd4ed8e7e278de1e55b1ca0ea229a5b0d13b3a5876420141a272342d782c8a9c0ee8fa6aadb2cecbae3c7dad3116b4de01929fb21017bf248dc1ac550a8b9cbfd734c4ee62966f195bf2f281dcc5ad1", 0x85}, {&(0x7f0000000a00)="05d0d0ed0b560db3d9a998bc8a4284084033f1913c340b9666aeda5b93a2fbd14fd31fba5269f005777e54f4fe971f3b46ad680000b05a9592ee13a9d071fec073", 0x41}, {&(0x7f0000000ac0)="2e2e610a87eb7a52b1a2d6b17e54e760667dcfec12923de1d260ce96208ffd9c3a3aa0054a7f51c790e2c2a1a66cac773d6b7e035b83b1f208f4afd7c96ca456ad0f366910f62e6aa7d0ba8a6e774aefe167893fed99727b6d3f983bb48f8cbe672cf65734fcf1506416d847f24a871c5ea9fe951e0d42adf330c8e7fa4fe9e6a5b3412684dba2187135fbe0375d4cf21de7ee5cd98116a458ca995720a07df9e0c32eb2d1c1cde7e69a04535d9ee4f743986f2b2830fe097572c4b7b9251ecd92aaaa9307e6d162f54d673c", 0xcc}, {&(0x7f0000000bc0)="af180d348826e86f54d1d68d9d01d0ae6683cd76d304798427a97fccc513e844c83a4e82286d43543446e25b427e6d6d1fb85a75c26245c7b132b076c46aaee5a8fdd0316ebfdbab3a5292782d8573fb8e1cb7a202e75ed62e2cfb5c98641905818d3c8405c3ff469bad17923c26693e13c03749ae3a43d90cc0c600da", 0x7d}, {&(0x7f0000000c40)="e6eb755e73624e2c2bf86a0657caec4e06aad817bd25e0580363170ca18519e920720e", 0x23}, {&(0x7f0000000d00)="8e105f50cfd25f9d792b5feda9c5d524bd3d165bce84cd272d9a0c723a52503dc3d35c00cadfca0e4af8f17989a58b34c57b70550f48bafd182f59b464a642ebad9a4cfb225ef61f810acdd65cf3073f24dfbe6c954fe8966b072722f841489e3b", 0x61}], 0x8, &(0x7f0000000980)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18}], 0x78, 0x800}], 0x2, 0x20048080) sendfile(r5, r4, 0x0, 0x5) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f00000002c0)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000200000005000100070000000500040003000000090002009e5acbd473797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, 0x6, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r8, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000100)={0x3, 'sit0\x00', {}, 0x8001}) 0s ago: executing program 1 (id=6240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10001, 0x7, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80001, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x10, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x8, 0x4, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc874}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): 1.360412][T19978] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 492.276540][T19991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5248'. [ 492.335001][T19990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5249'. [ 492.564064][T19997] delete_channel: no stack [ 493.108009][T20008] Set syz1 is full, maxelem 65536 reached [ 493.480362][T20017] lo speed is unknown, defaulting to 1000 [ 493.678975][T20020] Bluetooth: MGMT ver 1.23 [ 493.866743][T20026] tipc: Enabled bearer , priority 0 [ 493.886499][T20024] netlink: 'syz.1.5261': attribute type 1 has an invalid length. [ 493.890310][T20026] syzkaller0: entered promiscuous mode [ 493.912560][T20026] syzkaller0: entered allmulticast mode [ 493.984468][T20024] 8021q: adding VLAN 0 to HW filter on device bond7 [ 494.059562][T20024] veth7: entered promiscuous mode [ 494.068800][T20024] bond7: (slave veth7): Enslaving as an active interface with a down link [ 494.084344][T20024] erspan0: entered allmulticast mode [ 494.101555][T20024] bond7: (slave erspan0): making interface the new active one [ 494.114269][T20024] erspan0: entered promiscuous mode [ 494.135387][T20024] bond7: (slave erspan0): Enslaving as an active interface with an up link [ 494.161812][T20030] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 494.176142][T20031] tipc: Resetting bearer [ 494.182876][T20017] lo speed is unknown, defaulting to 1000 [ 494.190461][T20029] tipc: Enabling of bearer rejected, already enabled [ 494.216184][T20025] tipc: Resetting bearer [ 494.237581][T20025] tipc: Disabling bearer [ 494.473775][T20042] netlink: 'syz.3.5266': attribute type 17 has an invalid length. [ 494.482459][T20038] tipc: Enabling of bearer rejected, already enabled [ 494.718440][T20048] tipc: Enabled bearer , priority 0 [ 494.740733][T20048] syzkaller0: entered promiscuous mode [ 494.760653][T20048] syzkaller0: entered allmulticast mode [ 494.853122][T20054] tipc: New replicast peer: 255.255.255.255 [ 494.877971][T20054] tipc: Enabled bearer , priority 10 [ 494.911372][T20050] tipc: Resetting bearer [ 494.952059][T20047] tipc: Resetting bearer [ 495.004585][T20047] tipc: Disabling bearer [ 495.049804][T20053] syzkaller0: entered promiscuous mode [ 495.055317][T20053] syzkaller0: entered allmulticast mode [ 495.111451][T20055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5268'. [ 495.872297][T20071] bridge_slave_0: left promiscuous mode [ 495.878610][T20075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5277'. [ 495.892741][T20071] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.896217][T20075] netlink: 'syz.3.5277': attribute type 1 has an invalid length. [ 495.912842][T20075] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5277'. [ 495.927210][T20071] bridge_slave_1: left promiscuous mode [ 495.932323][T20075] siw: device registration error -23 [ 495.941330][T20071] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.006634][T20071] team0: Port device team_slave_0 removed [ 496.034126][T20071] team0: Port device team_slave_1 removed [ 496.049204][T20071] bond1: (slave gretap2): Releasing active interface [ 496.084818][T20071] bond2: (slave gretap3): Releasing active interface [ 496.100857][T20071] bond3: (slave bridge1): Releasing active interface [ 496.112893][T20071] bond4: (slave veth3): Releasing active interface [ 496.143404][T20071] bond8: (slave wireguard0): Releasing backup interface [ 496.166816][T20071] bond8: (slave wireguard1): making interface the new active one [ 496.182844][T20071] bond8: (slave wireguard1): Releasing backup interface [ 496.197526][T20071] batadv0: left allmulticast mode [ 496.244277][T20071] team0: Port device batadv0 removed [ 496.292187][T20080] team0: Mode changed to "loadbalance" [ 496.628602][T20097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.702051][T20097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.770218][T20097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.837721][T20091] batadv1: left promiscuous mode [ 496.867043][T20091] team0 (unregistering): Port device batadv1 removed [ 497.114824][T20105] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5280'. [ 497.232069][T20113] tipc: Enabled bearer , priority 0 [ 497.249298][T20113] syzkaller0: entered promiscuous mode [ 497.255089][T20113] syzkaller0: entered allmulticast mode [ 497.271881][T20113] tipc: Resetting bearer [ 497.279320][T20112] tipc: Resetting bearer [ 497.323627][T20112] tipc: Disabling bearer [ 497.418525][T20119] lo speed is unknown, defaulting to 1000 [ 497.496609][T20123] tipc: New replicast peer: 255.255.255.255 [ 497.596858][T20123] tipc: Enabled bearer , priority 10 [ 497.670556][T20125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5286'. [ 498.890299][T20122] lo speed is unknown, defaulting to 1000 [ 498.908248][T20119] lo speed is unknown, defaulting to 1000 [ 499.486573][T20148] netlink: 'syz.1.5293': attribute type 4 has an invalid length. [ 499.513443][T20148] netlink: 'syz.1.5293': attribute type 4 has an invalid length. [ 500.202503][T20122] lo speed is unknown, defaulting to 1000 [ 500.202514][T20137] lo speed is unknown, defaulting to 1000 [ 500.669856][T20137] lo speed is unknown, defaulting to 1000 [ 500.680789][T20151] siw: device registration error -23 [ 500.834821][T20160] tipc: Enabling of bearer rejected, already enabled [ 501.885523][T20173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5313'. [ 501.942094][T20177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5304'. [ 501.950090][T20173] vlan1: entered promiscuous mode [ 502.035483][T20175] lo speed is unknown, defaulting to 1000 [ 502.729102][T20199] netlink: 'syz.4.5309': attribute type 18 has an invalid length. [ 502.741369][T20195] tipc: Enabled bearer , priority 0 [ 502.759123][T20195] syzkaller0: entered promiscuous mode [ 502.764630][T20195] syzkaller0: entered allmulticast mode [ 502.831024][T20175] lo speed is unknown, defaulting to 1000 [ 502.882865][T20201] tipc: Enabled bearer , priority 0 [ 502.900170][T20203] syzkaller0: entered promiscuous mode [ 502.913555][T20203] syzkaller0: entered allmulticast mode [ 502.943465][T20205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5314'. [ 503.013266][T20206] tipc: Resetting bearer [ 503.089240][T20194] tipc: Resetting bearer [ 503.104639][T20194] tipc: Disabling bearer [ 503.127151][T20207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5314'. [ 503.140210][T20200] tipc: Resetting bearer [ 503.181496][T20200] tipc: Disabling bearer [ 504.118330][T20224] tipc: Enabled bearer , priority 0 [ 504.136946][T20226] tipc: Enabled bearer , priority 0 [ 504.145479][T20226] syzkaller0: entered promiscuous mode [ 504.163100][T20226] syzkaller0: entered allmulticast mode [ 504.180623][T20224] syzkaller0: entered promiscuous mode [ 504.193670][T20224] syzkaller0: entered allmulticast mode [ 504.223763][T20226] tipc: Resetting bearer [ 504.231518][T20229] tipc: Enabled bearer , priority 0 [ 504.255424][T20225] tipc: Resetting bearer [ 504.277158][T20225] tipc: Disabling bearer [ 504.295396][T20230] tipc: Enabling of bearer rejected, already enabled [ 504.305809][T20229] syzkaller0: entered promiscuous mode [ 504.314568][T20229] syzkaller0: entered allmulticast mode [ 504.325364][T20234] tipc: Resetting bearer [ 504.397526][T20223] tipc: Resetting bearer [ 504.437184][T20223] tipc: Disabling bearer [ 504.478019][T20235] tipc: Resetting bearer [ 504.486439][T20236] tipc: New replicast peer: 255.255.255.255 [ 504.493108][T20236] tipc: Enabled bearer , priority 10 [ 504.565448][T20228] tipc: Resetting bearer [ 504.602423][T20228] tipc: Disabling bearer [ 505.210409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.219151][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.273931][T20246] tipc: Enabled bearer , priority 0 [ 505.301255][T20246] syzkaller0: entered promiscuous mode [ 505.326552][T20246] syzkaller0: entered allmulticast mode [ 505.437997][T20241] tipc: Resetting bearer [ 505.516135][T20241] tipc: Disabling bearer [ 505.516374][T16714] tipc: Node number set to 2373536855 [ 505.533971][ T2946] erspan0: left promiscuous mode [ 505.552889][T20264] netlink: 'syz.4.5331': attribute type 11 has an invalid length. [ 505.725429][T20270] xt_policy: neither incoming nor outgoing policy selected [ 505.790247][T20272] syzkaller0: entered promiscuous mode [ 505.796210][T20272] syzkaller0: entered allmulticast mode [ 505.814839][T20274] tipc: Enabled bearer , priority 0 [ 505.824939][T20274] syzkaller0: entered promiscuous mode [ 505.843622][T20274] syzkaller0: entered allmulticast mode [ 505.916940][T20274] tipc: Resetting bearer [ 505.935204][T20273] tipc: Resetting bearer [ 505.979306][T20273] tipc: Disabling bearer [ 506.039435][T20283] syzkaller1: entered promiscuous mode [ 506.044947][T20283] syzkaller1: entered allmulticast mode [ 506.240245][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.248493][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.662770][T20294] tipc: Enabled bearer , priority 0 [ 506.686657][T20294] syzkaller0: entered promiscuous mode [ 506.692392][T20294] syzkaller0: entered allmulticast mode [ 506.757029][T20294] tipc: Resetting bearer [ 506.774067][T20293] tipc: Resetting bearer [ 506.821095][T20293] tipc: Disabling bearer [ 507.098977][T20300] vlan2: entered promiscuous mode [ 507.111544][T20300] dummy0: entered promiscuous mode [ 507.290225][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.699696][T20326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5351'. [ 507.939131][T20335] tipc: Enabled bearer , priority 0 [ 507.965805][T20335] syzkaller0: entered promiscuous mode [ 507.988318][T20335] syzkaller0: entered allmulticast mode [ 508.035089][T20335] tipc: Resetting bearer [ 508.100369][T20334] tipc: Resetting bearer [ 508.167122][T20334] tipc: Disabling bearer [ 508.320652][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.328931][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.389848][T20355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5357'. [ 508.525173][T20355] batadv0: entered promiscuous mode [ 508.545097][T20355] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 508.558150][T20355] batadv0: left promiscuous mode [ 508.628163][T20348] lo speed is unknown, defaulting to 1000 [ 508.845427][T20365] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.869194][T20365] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.008587][T20365] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.022194][T20365] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.102730][T20373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5364'. [ 509.175115][T20365] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.196141][T20365] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.289703][T20365] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.308499][T20365] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.362066][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.652707][T20343] lo speed is unknown, defaulting to 1000 [ 509.658700][T20348] lo speed is unknown, defaulting to 1000 [ 509.821187][ T2934] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.830171][ T2934] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.897748][ T2946] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.931872][ T2946] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.974719][ T55] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.983545][ T55] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.992888][T20384] lo speed is unknown, defaulting to 1000 [ 509.993151][T20343] lo speed is unknown, defaulting to 1000 [ 510.066381][ T55] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.074596][ T55] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.205607][T20401] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.235469][T20401] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.395342][T20401] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.410203][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.418470][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.421184][T20401] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.437578][T20408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5372'. [ 510.466092][T20406] tipc: Enabled bearer , priority 0 [ 510.487088][T20404] syzkaller0: entered promiscuous mode [ 510.493852][T20404] syzkaller0: entered allmulticast mode [ 510.523007][T20401] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.534762][T20401] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.562039][T20384] lo speed is unknown, defaulting to 1000 [ 510.621980][T20401] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.669824][T20401] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.798269][T20404] tipc: Resetting bearer [ 510.824146][T20403] tipc: Resetting bearer [ 510.882201][T20403] tipc: Disabling bearer [ 511.440539][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.448818][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.474866][T20416] lo speed is unknown, defaulting to 1000 [ 511.922876][T20429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5379'. [ 511.939818][T20429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5379'. [ 512.373947][T20431] tipc: Enabled bearer , priority 0 [ 512.397843][T20431] syzkaller0: entered promiscuous mode [ 512.403360][T20431] syzkaller0: entered allmulticast mode [ 512.454487][T20431] tipc: Resetting bearer [ 512.484849][T20430] tipc: Resetting bearer [ 512.555146][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.587791][T20430] tipc: Disabling bearer [ 512.684214][T20416] lo speed is unknown, defaulting to 1000 [ 513.438083][ T2934] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.473415][ T2934] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.585765][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.596146][T20444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5382'. [ 513.610280][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.618479][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.636285][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.702334][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.724049][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.847711][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.874474][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.930364][T20446] tipc: Enabled bearer , priority 0 [ 513.942467][T20450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5385'. [ 513.978853][T20446] syzkaller0: entered promiscuous mode [ 513.984372][T20446] syzkaller0: entered allmulticast mode [ 514.027570][T20446] tipc: Resetting bearer [ 514.061922][T20445] tipc: Resetting bearer [ 514.106887][ T2934] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 514.125144][T20445] tipc: Disabling bearer [ 514.297041][T20462] wg1: left promiscuous mode [ 514.302268][T20462] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 514.323364][T20462] macsec1: left promiscuous mode [ 514.650276][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.867132][T20475] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5392'. [ 514.881278][T20475] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5392'. [ 514.925212][T20477] tipc: Enabled bearer , priority 0 [ 514.933162][T20479] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5392'. [ 514.942515][T20479] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5392'. [ 514.953174][T20477] syzkaller0: entered promiscuous mode [ 514.959351][T20477] syzkaller0: entered allmulticast mode [ 515.034382][T20477] tipc: Resetting bearer [ 515.049294][T20476] tipc: Resetting bearer [ 515.094396][T20476] tipc: Disabling bearer [ 515.197363][T20484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5395'. [ 515.668798][T20499] syzkaller1: entered promiscuous mode [ 515.674729][T20499] syzkaller1: entered allmulticast mode [ 515.684773][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.693018][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.342284][T20502] C: renamed from team_slave_0 [ 516.368067][T20502] netlink: 'syz.4.5402': attribute type 2 has an invalid length. [ 516.375832][T20502] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5402'. [ 516.426122][T20502] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 516.511024][T20507] tipc: Enabling of bearer rejected, already enabled [ 516.567746][T20507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5401'. [ 516.659775][T20414] Set syz1 is full, maxelem 65536 reached [ 516.730325][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.738621][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.677787][T20520] tipc: Enabled bearer , priority 0 [ 517.693247][T20520] syzkaller0: entered promiscuous mode [ 517.716761][T20520] syzkaller0: entered allmulticast mode [ 517.760269][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.820814][T20529] tipc: Resetting bearer [ 517.842806][T20519] tipc: Resetting bearer [ 517.894269][T20519] tipc: Disabling bearer [ 518.298895][T20537] tipc: Enabled bearer , priority 0 [ 518.324195][T20537] syzkaller0: entered promiscuous mode [ 518.346063][T20537] syzkaller0: entered allmulticast mode [ 518.374781][T20537] syzkaller0: left promiscuous mode [ 518.380749][T20537] syzkaller0: left allmulticast mode [ 518.488810][T20542] tipc: Resetting bearer [ 518.506675][T20540] tipc: Enabling of bearer rejected, already enabled [ 518.596500][T20536] tipc: Resetting bearer [ 518.648770][T20536] tipc: Disabling bearer [ 519.482966][T20551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5415'. [ 519.708820][T20563] tipc: Enabled bearer , priority 0 [ 519.724191][T20563] syzkaller0: entered promiscuous mode [ 519.732825][T20563] syzkaller0: entered allmulticast mode [ 519.821744][T20566] tipc: Resetting bearer [ 519.903864][T20559] tipc: Resetting bearer [ 519.974286][T20571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5420'. [ 519.999193][T20559] tipc: Disabling bearer [ 520.300130][T20579] netlink: 'syz.0.5422': attribute type 39 has an invalid length. [ 520.552449][T20586] lo speed is unknown, defaulting to 1000 [ 520.559582][T20588] tipc: Enabled bearer , priority 0 [ 520.575715][T20588] syzkaller0: entered promiscuous mode [ 520.620073][T20588] syzkaller0: entered allmulticast mode [ 520.674058][T20588] tipc: Resetting bearer [ 520.726180][T20587] tipc: Resetting bearer [ 520.838701][T20587] tipc: Disabling bearer [ 520.957109][T20600] netlink: 'syz.4.5429': attribute type 18 has an invalid length. [ 521.334554][T20589] lo speed is unknown, defaulting to 1000 [ 521.342839][T20586] lo speed is unknown, defaulting to 1000 [ 521.492625][ T30] audit: type=1800 audit(1754327432.810:5): pid=20613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5433" name="memory.events" dev="tmpfs" ino=5318 res=0 errno=0 [ 521.808564][T20589] lo speed is unknown, defaulting to 1000 [ 523.529619][T20659] tipc: Enabling of bearer rejected, already enabled [ 523.716272][T20667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.839943][T20675] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.5446'. [ 523.982803][T20678] wireguard0: entered promiscuous mode [ 523.989525][T20678] wireguard0: entered allmulticast mode [ 524.065027][T20677] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 524.140526][T20681] lo speed is unknown, defaulting to 1000 [ 524.632401][T20681] lo speed is unknown, defaulting to 1000 [ 524.870040][T20701] lo speed is unknown, defaulting to 1000 [ 524.911946][T20706] netlink: 'syz.4.5457': attribute type 1 has an invalid length. [ 524.959386][T20706] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5457'. [ 525.501891][T20713] pim6reg: entered allmulticast mode [ 525.687864][T20718] tipc: Enabled bearer , priority 0 [ 525.706810][T20718] syzkaller0: entered promiscuous mode [ 525.712844][T20718] syzkaller0: entered allmulticast mode [ 525.744987][T20718] tipc: Resetting bearer [ 525.770894][T20717] tipc: Resetting bearer [ 525.805253][T20717] tipc: Disabling bearer [ 525.858133][T20728] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 525.901165][T20724] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5465'. [ 525.983817][T20730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5466'. [ 526.023753][T20730] macvtap0: entered promiscuous mode [ 526.037138][T20730] macvtap0: entered allmulticast mode [ 526.043742][T20732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5467'. [ 526.059673][T20730] dummy0: entered allmulticast mode [ 526.075085][T20732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5467'. [ 526.088439][T20701] lo speed is unknown, defaulting to 1000 [ 526.199394][T20735] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5468'. [ 526.297320][T20739] tipc: New replicast peer: 255.255.255.255 [ 526.303855][T20739] tipc: Enabled bearer , priority 10 [ 526.491274][T20742] tipc: Resetting bearer [ 526.520514][T20742] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 526.816560][T20740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5469'. [ 526.838469][T20740] tipc: Disabling bearer [ 527.219071][T20749] netlink: 'syz.4.5471': attribute type 12 has an invalid length. [ 527.385479][T20753] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 527.485092][T20751] syzkaller0: entered promiscuous mode [ 527.490681][T20751] syzkaller0: entered allmulticast mode [ 527.978669][T20771] tipc: Enabled bearer , priority 0 [ 528.120765][T20771] syzkaller0: entered promiscuous mode [ 528.129440][T20771] syzkaller0: entered allmulticast mode [ 528.150479][T20772] tipc: New replicast peer: 255.255.255.255 [ 528.170533][T20772] tipc: Enabled bearer , priority 10 [ 528.180623][T20775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5476'. [ 528.195734][T20777] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 528.207026][T20778] tipc: Resetting bearer [ 530.550106][T20768] tipc: Resetting bearer [ 530.565597][T20768] tipc: Disabling bearer [ 530.606037][T20787] tipc: Enabling of bearer rejected, failed to enable media [ 530.704428][T20799] tipc: Enabling of bearer rejected, already enabled [ 530.714410][T20799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5480'. [ 530.723686][T20799] tipc: Disabling bearer [ 530.862384][T20803] tipc: Enabled bearer , priority 0 [ 530.882621][T20803] syzkaller0: entered promiscuous mode [ 530.910724][T20803] syzkaller0: entered allmulticast mode [ 530.972398][T20803] tipc: Resetting bearer [ 530.994156][T20802] tipc: Resetting bearer [ 531.061242][T20802] tipc: Disabling bearer [ 531.195261][T20823] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.216220][T20823] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.335538][T20828] tipc: Enabled bearer , priority 0 [ 531.344648][T20828] syzkaller0: entered promiscuous mode [ 531.363372][T20828] syzkaller0: entered allmulticast mode [ 531.401283][T20828] tipc: Resetting bearer [ 531.424363][T20840] netlink: 'syz.1.5496': attribute type 1 has an invalid length. [ 531.440888][T20823] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.459815][T20823] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.503600][T20841] gretap0: left promiscuous mode [ 531.517332][T20841] bridge0: port 3(gretap0) entered disabled state [ 531.532838][T20841] bridge_slave_0: left promiscuous mode [ 531.541364][T20841] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.557486][T20841] bridge_slave_1: left promiscuous mode [ 531.563377][T20841] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.578451][T20841] bond4: left promiscuous mode [ 531.595725][T20841] team0: Port device team_slave_0 removed [ 531.608799][T20841] team0: Port device team_slave_1 removed [ 531.615521][T20841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.624218][T20841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.642647][T20841] bond4: left allmulticast mode [ 531.660257][T20841] bridge0: port 4(bond4) entered disabled state [ 531.673399][T20841] bond5: (slave gretap1): Releasing active interface [ 531.685748][T20841] gretap1: left allmulticast mode [ 531.694887][T20841] bond6: (slave veth17): Releasing active interface [ 531.722776][T20841] bond7: (slave bond8): Releasing backup interface [ 531.731045][T20841] bond7: (slave bond8): the permanent HWaddr of slave - 86:2a:ae:ac:5d:29 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 531.753890][T20841] bond7: (slave gretap2): making interface the new active one [ 531.786370][T20841] bond7: (slave gretap2): Releasing backup interface [ 531.810860][T20826] tipc: Resetting bearer [ 531.829733][T20826] tipc: Disabling bearer [ 531.861307][T20840] 8021q: adding VLAN 0 to HW filter on device bond8 [ 531.895292][T20843] team0: Mode changed to "loadbalance" [ 531.920283][T20823] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.952780][T20823] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.055648][T20854] tipc: Enabling of bearer rejected, already enabled [ 532.067238][T20850] tipc: Enabled bearer , priority 0 [ 532.074260][T20852] netlink: 'syz.0.5500': attribute type 1 has an invalid length. [ 532.081022][T20850] syzkaller0: entered promiscuous mode [ 532.088526][T20850] syzkaller0: entered allmulticast mode [ 532.121465][T20852] smc: adding net device bond0 with user defined pnetid SYZ2 [ 532.132963][T20852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.140906][T20854] netem: change failed [ 532.149899][T20823] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.161047][T20823] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.193517][T20858] bond0: (slave geneve3): making interface the new active one [ 532.203390][T20858] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 532.219465][T20852] bond0: entered promiscuous mode [ 532.224647][T20852] geneve3: entered promiscuous mode [ 532.234734][ T2934] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.246073][ T2934] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.254811][ T2934] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.282420][ T2934] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.294706][T20850] tipc: Resetting bearer [ 532.325404][T20848] tipc: Resetting bearer [ 532.362558][T20848] tipc: Disabling bearer [ 532.395463][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.413567][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.500283][ T55] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.525434][ T55] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.603859][ T3019] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.612651][ T3019] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.650087][T20869] tipc: Started in network mode [ 532.655292][T20869] tipc: Node identity , cluster identity 4711 [ 532.664998][T20868] lo speed is unknown, defaulting to 1000 [ 532.689613][T20874] tipc: Enabled bearer , priority 0 [ 532.708385][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.725720][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.753429][T20874] syzkaller0: entered promiscuous mode [ 532.761604][T20874] syzkaller0: entered allmulticast mode [ 532.786179][T20874] tipc: Resetting bearer [ 532.795317][T20872] tipc: Resetting bearer [ 532.833687][T20872] tipc: Disabling bearer [ 533.102727][T20868] lo speed is unknown, defaulting to 1000 [ 533.167164][T20871] lo speed is unknown, defaulting to 1000 [ 533.543414][T20899] netlink: 'syz.3.5509': attribute type 1 has an invalid length. [ 533.616569][T20904] netlink: 'syz.1.5511': attribute type 1 has an invalid length. [ 533.699534][T20899] 8021q: adding VLAN 0 to HW filter on device bond7 [ 533.779914][T20905] bond7: (slave gretap1): making interface the new active one [ 533.795329][T20905] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 533.843847][T20904] 8021q: adding VLAN 0 to HW filter on device bond9 [ 533.852263][T20873] lo speed is unknown, defaulting to 1000 [ 533.858673][T20871] lo speed is unknown, defaulting to 1000 [ 533.904451][T20910] bond9: entered promiscuous mode [ 534.211741][T20914] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5512'. [ 534.221224][T20914] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5512'. [ 534.588601][T20917] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.862277][T20917] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.064735][T20917] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.103435][T20873] lo speed is unknown, defaulting to 1000 [ 535.164270][T20917] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.257566][T20932] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5518'. [ 535.582953][ T2934] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.612402][ T2934] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.745196][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.777994][T20938] tipc: Enabling of bearer rejected, already enabled [ 535.837001][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.053802][T20948] tipc: Enabling of bearer rejected, already enabled [ 536.075435][T20943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5523'. [ 536.307009][T20953] tipc: Enabled bearer , priority 0 [ 536.327523][T20953] syzkaller0: entered promiscuous mode [ 536.333039][T20953] syzkaller0: entered allmulticast mode [ 536.353287][T20958] tipc: Enabled bearer , priority 0 [ 536.432204][T20966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5528'. [ 536.445724][T20958] syzkaller0: entered promiscuous mode [ 536.460344][T20958] syzkaller0: entered allmulticast mode [ 536.473584][T20959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5529'. [ 536.713699][T20969] tipc: Resetting bearer [ 536.749037][T20957] tipc: Resetting bearer [ 536.798648][T20957] tipc: Disabling bearer [ 536.841652][T20952] tipc: Resetting bearer [ 536.917404][T20952] tipc: Disabling bearer [ 536.991971][T20972] syzkaller0: entered promiscuous mode [ 537.016142][T20972] syzkaller0: entered allmulticast mode [ 537.235149][T20989] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5536'. [ 537.656362][T20999] lo speed is unknown, defaulting to 1000 [ 537.819135][T21006] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 538.164619][T21015] tipc: Enabled bearer , priority 0 [ 538.186368][T21015] syzkaller0: entered promiscuous mode [ 538.191962][T21015] syzkaller0: entered allmulticast mode [ 538.201656][T21017] netlink: zone id is out of range [ 538.216858][T21017] netlink: zone id is out of range [ 538.236379][T21017] netlink: zone id is out of range [ 538.241545][T21017] netlink: zone id is out of range [ 538.256187][T21017] netlink: zone id is out of range [ 538.266002][T21017] netlink: zone id is out of range [ 538.273666][T21013] tipc: Resetting bearer [ 538.274065][T21021] netlink: 'syz.4.5546': attribute type 1 has an invalid length. [ 538.286494][T21017] netlink: zone id is out of range [ 538.295082][T21017] netlink: zone id is out of range [ 538.300664][T21021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5546'. [ 538.319784][T21017] netlink: zone id is out of range [ 538.337130][T21017] netlink: zone id is out of range [ 538.337615][T21013] tipc: Disabling bearer [ 538.368035][T20999] lo speed is unknown, defaulting to 1000 [ 538.594058][T21027] netlink: 'syz.1.5547': attribute type 10 has an invalid length. [ 538.745332][T21027] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 538.782009][T21036] tipc: Enabling of bearer rejected, already enabled [ 538.875608][T21041] tipc: Enabled bearer , priority 0 [ 538.960812][T21039] syzkaller0: entered promiscuous mode [ 538.971921][T21039] syzkaller0: entered allmulticast mode [ 539.088512][T21039] tipc: Resetting bearer [ 539.106602][T21038] tipc: Resetting bearer [ 539.141226][T21048] siw: device registration error -23 [ 539.178376][T21038] tipc: Disabling bearer [ 539.371012][T21049] netlink: 'syz.4.5554': attribute type 1 has an invalid length. [ 539.588696][T21060] lo speed is unknown, defaulting to 1000 [ 539.600649][T21062] netlink: 'syz.1.5558': attribute type 13 has an invalid length. [ 539.615937][T21062] netlink: 'syz.1.5558': attribute type 17 has an invalid length. [ 539.672225][T21062] erspan0: left allmulticast mode [ 539.869447][T21062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.890286][T21062] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.975640][T21069] tipc: Enabled bearer , priority 0 [ 540.005092][T21067] syzkaller0: entered promiscuous mode [ 540.056122][T21067] syzkaller0: entered allmulticast mode [ 540.254494][T21066] tipc: Resetting bearer [ 540.305167][T21066] tipc: Disabling bearer [ 540.322414][T21060] lo speed is unknown, defaulting to 1000 [ 540.411906][T21076] tipc: Enabled bearer , priority 0 [ 540.452098][T21076] syzkaller0: entered promiscuous mode [ 540.461828][T21076] syzkaller0: entered allmulticast mode [ 540.571346][T21081] tipc: Enabling of bearer rejected, already enabled [ 540.652034][T21076] tipc: Resetting bearer [ 540.660911][T21075] tipc: Resetting bearer [ 540.714004][T21075] tipc: Disabling bearer [ 540.969251][T21086] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5567'. [ 541.046542][T21086] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5567'. [ 541.162474][T21093] rdma_rxe: rxe_newlink: failed to add lo [ 541.279417][T21093] lo: left allmulticast mode [ 541.306975][T21093] tunl0: left allmulticast mode [ 541.331644][T21093] gre0: left allmulticast mode [ 541.398626][T21093] gretap0: left allmulticast mode [ 541.405060][T21093] erspan0: left promiscuous mode [ 541.434675][T21093] erspan0: left allmulticast mode [ 541.471108][T21093] ip_vti0: left allmulticast mode [ 541.542732][T21093] ip6_vti0: left allmulticast mode [ 541.592752][ T30] audit: type=1800 audit(1754327452.910:6): pid=21095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5568" name="memory.events" dev="tmpfs" ino=5704 res=0 errno=0 [ 541.623423][T21093] sit0: left allmulticast mode [ 541.658630][T21093] ip6tnl0: left allmulticast mode [ 541.692161][T21093] ip6gre0: left allmulticast mode [ 541.773344][T21093] ip6gretap0: left allmulticast mode [ 541.841344][T21093] team0: left allmulticast mode [ 541.873413][T21093] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.947292][T21093] dummy0: left allmulticast mode [ 541.987056][T21093] nlmon0: left allmulticast mode [ 542.016662][T21093] caif0: left allmulticast mode [ 542.021654][ T977] lo speed is unknown, defaulting to 1000 [ 542.032831][ T977] syz2: Port: 1 Link ACTIVE [ 542.040908][T21106] tipc: Enabled bearer , priority 0 [ 542.067204][T21107] syzkaller0: entered promiscuous mode [ 542.073117][T21107] syzkaller0: entered allmulticast mode [ 542.121022][T21100] tipc: Resetting bearer [ 542.168102][T21100] tipc: Disabling bearer [ 542.200848][T21121] tipc: Enabling of bearer rejected, already enabled [ 542.222826][T21119] lo speed is unknown, defaulting to 1000 [ 542.419607][T21127] tipc: Enabling of bearer rejected, already enabled [ 542.441009][T21127] tipc: Resetting bearer [ 542.494043][T21126] tipc: Enabled bearer , priority 0 [ 542.506662][T21131] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 542.531657][T21130] syzkaller0: entered promiscuous mode [ 542.548145][T21130] syzkaller0: entered allmulticast mode [ 542.565424][T21119] lo speed is unknown, defaulting to 1000 [ 542.640338][T21125] tipc: Resetting bearer [ 542.679386][T21125] tipc: Disabling bearer [ 543.005343][T21143] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5582'. [ 543.011100][T21145] pimreg: entered allmulticast mode [ 543.201299][T21153] netlink: 'syz.3.5583': attribute type 1 has an invalid length. [ 543.230808][T21153] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5583'. [ 543.355607][T21155] tipc: Enabled bearer , priority 0 [ 543.381186][T21155] syzkaller0: entered promiscuous mode [ 543.388249][T21155] syzkaller0: entered allmulticast mode [ 543.429359][T21161] net_ratelimit: 17 callbacks suppressed [ 543.429378][T21161] openvswitch: netlink: Message has 4 unknown bytes. [ 543.523137][T21155] tipc: Resetting bearer [ 543.586394][T21154] tipc: Resetting bearer [ 543.660040][T21154] tipc: Disabling bearer [ 543.681920][T21164] tipc: Enabled bearer , priority 0 [ 543.691147][T21166] syzkaller0: entered promiscuous mode [ 543.700704][T21166] syzkaller0: entered allmulticast mode [ 543.771950][T21162] tipc: Resetting bearer [ 543.905086][T21162] tipc: Disabling bearer [ 543.942684][T21175] GUP no longer grows the stack in syz.0.5589 (21175): 200000006000-20000000a000 (200000005000) [ 543.963199][T21175] CPU: 0 UID: 0 PID: 21175 Comm: syz.0.5589 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 543.963227][T21175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 543.963245][T21175] Call Trace: [ 543.963253][T21175] [ 543.963266][T21175] dump_stack_lvl+0x189/0x250 [ 543.963294][T21175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 543.963313][T21175] ? __pfx__printk+0x10/0x10 [ 543.963331][T21175] ? find_vma+0xe7/0x160 [ 543.963371][T21175] __get_user_pages+0x2a60/0x30b0 [ 543.963428][T21175] ? __pfx___get_user_pages+0x10/0x10 [ 543.963450][T21175] ? __gup_longterm_locked+0xbf7/0x15b0 [ 543.963471][T21175] ? down_read_killable+0x1d1/0x350 [ 543.963486][T21175] ? try_get_folio+0x633/0x660 [ 543.963513][T21175] __gup_longterm_locked+0xd66/0x15b0 [ 543.963540][T21175] ? try_grab_folio_fast+0x1be/0x4f0 [ 543.963574][T21175] ? gup_fast_fallback+0x1afc/0x2260 [ 543.963600][T21175] gup_fast_fallback+0x1cd4/0x2260 [ 543.963661][T21175] ? __pfx_gup_fast_fallback+0x10/0x10 [ 543.963681][T21175] ? __mutex_lock+0x335/0x1340 [ 543.963726][T21175] ? is_valid_gup_args+0x11f/0x200 [ 543.963751][T21175] ? get_user_pages_fast+0x4d/0xb0 [ 543.963776][T21175] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 543.963808][T21175] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 543.963825][T21175] ? wait_for_space+0x24d/0x2d0 [ 543.963852][T21175] iov_iter_get_pages2+0x5e/0xa0 [ 543.963879][T21175] __se_sys_vmsplice+0x548/0x10d0 [ 543.963907][T21175] ? futex_private_hash_put+0x4b/0x280 [ 543.963934][T21175] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 543.963962][T21175] ? __pfx_futex_wake+0x10/0x10 [ 543.963992][T21175] ? trace_sched_exit_tp+0x38/0x120 [ 543.964048][T21175] ? __pfx___schedule+0x10/0x10 [ 543.964079][T21175] ? rcu_is_watching+0x15/0xb0 [ 543.964110][T21175] ? do_syscall_64+0xbe/0x3b0 [ 543.964139][T21175] do_syscall_64+0xfa/0x3b0 [ 543.964163][T21175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.964178][T21175] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 543.964195][T21175] ? clear_bhb_loop+0x60/0xb0 [ 543.964218][T21175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.964233][T21175] RIP: 0033:0x7fe7e098eb69 [ 543.964250][T21175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.964265][T21175] RSP: 002b:00007fe7e17e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 543.964295][T21175] RAX: ffffffffffffffda RBX: 00007fe7e0bb5fa0 RCX: 00007fe7e098eb69 [ 543.964308][T21175] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009 [ 543.964319][T21175] RBP: 00007fe7e0a11df1 R08: 0000000000000000 R09: 0000000000000000 [ 543.964331][T21175] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 543.964341][T21175] R13: 0000000000000000 R14: 00007fe7e0bb5fa0 R15: 00007ffe768a80d8 [ 543.964373][T21175] [ 543.965182][T21177] bond6: (slave veth11): Releasing active interface [ 544.279214][T21177] bond7: (slave gretap1): Releasing active interface [ 544.473381][T21181] lo speed is unknown, defaulting to 1000 [ 544.505087][T21183] tipc: Enabled bearer , priority 0 [ 544.538058][T21183] syzkaller0: entered promiscuous mode [ 544.555892][T21183] syzkaller0: entered allmulticast mode [ 544.753038][T21185] tipc: Resetting bearer [ 544.799873][T21182] tipc: Resetting bearer [ 544.877023][T21187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5593'. [ 544.898034][T21182] tipc: Disabling bearer [ 545.121952][T21191] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5596'. [ 545.269801][T21199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5598'. [ 545.414642][T21206] team0: Unable to change to the same mode the team is in [ 545.536892][T21181] lo speed is unknown, defaulting to 1000 [ 546.129929][T21226] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5607'. [ 547.167059][T21233] lo speed is unknown, defaulting to 1000 [ 547.204680][T21238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5611'. [ 547.315276][T21240] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5612'. [ 547.526412][T21250] netlink: 'syz.3.5615': attribute type 1 has an invalid length. [ 547.708966][T21256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5617'. [ 548.168285][T21233] lo speed is unknown, defaulting to 1000 [ 548.360064][T21280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5620'. [ 548.401578][T21275] tipc: Enabled bearer , priority 0 [ 548.485565][T21275] syzkaller0: entered promiscuous mode [ 548.498217][T21275] syzkaller0: entered allmulticast mode [ 548.617762][T21286] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5621'. [ 548.655530][T21282] tipc: Resetting bearer [ 548.673217][T21273] tipc: Resetting bearer [ 548.702672][T21273] tipc: Disabling bearer [ 549.142608][T21301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5625'. [ 549.171321][T21300] tipc: Enabled bearer , priority 0 [ 549.211448][T21308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5628'. [ 549.265408][T21308] dummy0: entered promiscuous mode [ 549.272192][T21308] macvtap2: entered promiscuous mode [ 549.279062][T21308] macvtap2: entered allmulticast mode [ 549.284618][T21308] dummy0: entered allmulticast mode [ 549.294000][T21310] dummy0: left allmulticast mode [ 549.307840][T21310] dummy0: left promiscuous mode [ 549.320141][T21300] tipc: Resetting bearer [ 549.358595][T21299] tipc: Disabling bearer [ 549.470669][T21312] tipc: Enabled bearer , priority 0 [ 549.479774][T21312] syzkaller0: entered promiscuous mode [ 549.485477][T21312] syzkaller0: entered allmulticast mode [ 549.578836][T21312] tipc: Resetting bearer [ 549.596028][T21312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.615689][T21314] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5630'. [ 549.641850][T21311] tipc: Resetting bearer [ 549.716696][T21311] tipc: Disabling bearer [ 549.932484][T21326] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 549.964701][T21329] tipc: Enabled bearer , priority 0 [ 549.975957][T21329] tipc: Resetting bearer [ 550.015743][T21328] tipc: Disabling bearer [ 550.038817][T21326] openvswitch: netlink: VXLAN extension message has 9 unknown bytes. [ 550.524734][T21345] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5638'. [ 550.556697][T21346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5636'. [ 550.919707][T21358] tipc: Enabled bearer , priority 0 [ 550.931014][T21358] tipc: Resetting bearer [ 550.950208][T21356] tipc: Disabling bearer [ 550.982071][T21354] netlink: 'syz.0.5640': attribute type 83 has an invalid length. [ 551.004847][T21361] tipc: Enabled bearer , priority 0 [ 551.066984][T21362] tipc: Resetting bearer [ 551.082990][T21354] lo speed is unknown, defaulting to 1000 [ 551.165279][T21360] tipc: Disabling bearer [ 551.385168][T21367] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5644'. [ 551.562728][T21354] lo speed is unknown, defaulting to 1000 [ 551.637418][T21373] netlink: 'syz.2.5648': attribute type 1 has an invalid length. [ 551.651467][T21373] netlink: 'syz.2.5648': attribute type 2 has an invalid length. [ 551.713866][T21373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5648'. [ 551.733300][T21371] tipc: Enabled bearer , priority 0 [ 551.837491][T21376] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 551.851147][T21371] syzkaller0: entered promiscuous mode [ 551.861176][T21371] syzkaller0: entered allmulticast mode [ 553.134160][T21399] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5652'. [ 554.365430][T21383] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 554.368420][T21381] tipc: Resetting bearer [ 554.385231][T21370] tipc: Resetting bearer [ 554.420585][T21370] tipc: Disabling bearer [ 554.644055][T21402] tipc: Enabled bearer , priority 0 [ 554.652717][T21402] syzkaller0: entered promiscuous mode [ 554.658979][T21402] syzkaller0: entered allmulticast mode [ 554.700114][T21401] tipc: Resetting bearer [ 554.726129][T21404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5655'. [ 554.738301][T21401] tipc: Disabling bearer [ 554.784786][T21404] tipc: Resetting bearer [ 554.831780][T21404] tipc: Resetting bearer [ 554.905144][T21408] tipc: Enabled bearer , priority 0 [ 554.960519][T21408] tipc: Resetting bearer [ 555.089530][T21405] tipc: Disabling bearer [ 555.113214][T21417] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5659'. [ 555.131719][T21398] Bluetooth: hci4: command 0x0405 tx timeout [ 555.313578][T21425] tipc: Enabled bearer , priority 0 [ 555.330929][T21425] syzkaller0: entered promiscuous mode [ 555.345520][T21425] syzkaller0: entered allmulticast mode [ 555.429183][T21425] tipc: Resetting bearer [ 555.455340][T21422] tipc: Resetting bearer [ 555.517989][T21422] tipc: Disabling bearer [ 555.773149][ T30] audit: type=1800 audit(1754327467.090:7): pid=21427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5662" name="memory.events" dev="tmpfs" ino=5901 res=0 errno=0 [ 556.300707][T21447] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5669'. [ 556.312776][T21447] tipc: Resetting bearer [ 556.322428][T21447] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 556.447243][T21454] syzkaller0: entered promiscuous mode [ 556.453061][T21454] syzkaller0: entered allmulticast mode [ 556.575250][T21461] syzkaller0: entered promiscuous mode [ 556.581219][T21461] syzkaller0: entered allmulticast mode [ 556.599950][T21458] lo speed is unknown, defaulting to 1000 [ 556.772171][T21470] netlink: 'syz.3.5676': attribute type 13 has an invalid length. [ 557.533909][T21470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.545227][T21470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 558.022399][T21458] lo speed is unknown, defaulting to 1000 [ 558.029772][T21481] lo speed is unknown, defaulting to 1000 [ 558.195561][T21488] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5681'. [ 558.603068][T21499] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5684'. [ 558.628645][T21488] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 558.681948][T21488] bond2: left promiscuous mode [ 558.700094][T21488] bond3: left promiscuous mode [ 558.897232][T21488] bond7: left promiscuous mode [ 559.113238][T21488] dummy0: left allmulticast mode [ 559.121936][T21488] macvtap0: left promiscuous mode [ 559.131153][ T9] lo speed is unknown, defaulting to 1000 [ 559.137853][ T9] syz0: Port: 1 Link DOWN [ 559.270254][ T36] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.296008][ T36] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.318144][ T36] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.343973][ T36] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.366024][ T36] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.380088][ T36] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.422779][T21500] veth17: left promiscuous mode [ 559.449360][T21500] bond0: left promiscuous mode [ 559.461428][T21500] geneve3: left promiscuous mode [ 559.483613][T21500] macvtap2: left promiscuous mode [ 559.531329][ T977] lo speed is unknown, defaulting to 1000 [ 559.545535][T21481] lo speed is unknown, defaulting to 1000 [ 559.556330][ T36] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.605377][ T36] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.619861][ T9] lo speed is unknown, defaulting to 1000 [ 559.627232][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.635900][ T9] syz2: Port: 1 Link DOWN [ 559.748344][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.765992][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.805021][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.100668][T21527] tipc: Enabled bearer , priority 0 [ 561.152587][T21526] syzkaller0: entered promiscuous mode [ 561.189754][T21526] syzkaller0: entered allmulticast mode [ 561.426479][T21527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5690'. [ 561.459070][T21530] tipc: Resetting bearer [ 561.496284][T21525] tipc: Resetting bearer [ 561.559967][T21525] tipc: Disabling bearer [ 561.832418][T21539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5692'. [ 561.906414][T21539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5692'. [ 562.288496][T21558] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5697'. [ 562.369093][T21557] netlink: 39532 bytes leftover after parsing attributes in process `syz.1.5699'. [ 562.598964][T21562] bond7: (slave erspan0): Releasing active interface [ 562.611491][T21562] bond7: (slave ip6gretap1): making interface the new active one [ 562.651845][T21562] ip6gretap1: entered promiscuous mode [ 562.709522][T21562] bond5: (slave bridge0): Releasing active interface [ 562.751220][T21562] bond6: (slave gretap2): Releasing active interface [ 562.770832][T21562] gretap2: left promiscuous mode [ 562.786213][T21562] gretap2: left allmulticast mode [ 562.858852][T21562] team0: Port device batadv1 removed [ 562.907166][T21562] bond7: (slave veth7): Releasing active interface [ 562.914001][T21562] bond7: (slave veth7): the permanent HWaddr of slave - 2e:d5:c9:34:ee:19 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 563.051920][T21562] bond7: (slave ip6gretap1): Releasing active interface [ 563.069749][T21562] ip6gretap1: left promiscuous mode [ 563.199639][T21565] team0: Mode changed to "loadbalance" [ 563.426452][T21577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5703'. [ 563.512546][T21576] bond0: (slave geneve3): Releasing active interface [ 563.541764][T21576] netlink: 'syz.0.5713': attribute type 10 has an invalid length. [ 563.560930][T21582] tipc: Enabled bearer , priority 0 [ 563.575661][T21582] tipc: Resetting bearer [ 563.691649][T21579] tipc: Disabling bearer [ 563.995335][T21588] syzkaller0: entered promiscuous mode [ 564.016672][T21588] syzkaller0: entered allmulticast mode [ 564.287203][T21593] syzkaller0: entered promiscuous mode [ 564.302961][T21593] syzkaller0: entered allmulticast mode [ 564.684147][ T2946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.715080][T21600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.735354][ T2946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.910980][T21464] Set syz1 is full, maxelem 65536 reached [ 565.261230][T21613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5714'. [ 565.545274][T21623] syzkaller0: entered promiscuous mode [ 565.551392][T21623] syzkaller0: entered allmulticast mode [ 565.561357][T21624] syzkaller0: entered promiscuous mode [ 565.568702][T21624] syzkaller0: entered allmulticast mode [ 566.178550][T21632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5720'. [ 566.653331][T21655] IPv6: syztnl1: Disabled Multicast RS [ 566.733002][T21657] tipc: Enabling of bearer rejected, already enabled [ 567.639006][T21669] syzkaller0: entered promiscuous mode [ 567.653909][T21669] syzkaller0: entered allmulticast mode [ 567.673699][T21671] tipc: Enabled bearer , priority 10 [ 567.869480][T21677] netlink: 'syz.0.5734': attribute type 12 has an invalid length. [ 567.974615][T21679] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5737'. [ 569.164253][T21712] syz.3.5745: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 569.261301][T21712] CPU: 0 UID: 0 PID: 21712 Comm: syz.3.5745 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 569.261329][T21712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 569.261340][T21712] Call Trace: [ 569.261348][T21712] [ 569.261356][T21712] dump_stack_lvl+0x189/0x250 [ 569.261385][T21712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 569.261404][T21712] ? __pfx__printk+0x10/0x10 [ 569.261425][T21712] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 569.261447][T21712] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 569.261469][T21712] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 569.261491][T21712] warn_alloc+0x214/0x310 [ 569.261509][T21712] ? stack_depot_save_flags+0x40/0x900 [ 569.261531][T21712] ? __pfx_warn_alloc+0x10/0x10 [ 569.261552][T21712] ? kasan_save_track+0x4f/0x80 [ 569.261576][T21712] ? xskq_create+0x56/0x170 [ 569.261596][T21712] ? xsk_init_queue+0xb0/0x110 [ 569.261614][T21712] ? xsk_setsockopt+0x4dc/0x8d0 [ 569.261632][T21712] ? do_sock_setsockopt+0x17c/0x1b0 [ 569.261649][T21712] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 569.261665][T21712] ? do_syscall_64+0xfa/0x3b0 [ 569.261686][T21712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.261713][T21712] __vmalloc_node_range_noprof+0x125/0x12f0 [ 569.261765][T21712] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 569.261790][T21712] ? __kasan_kmalloc+0x93/0xb0 [ 569.261893][T21712] vmalloc_user_noprof+0xad/0xf0 [ 569.261912][T21712] ? xskq_create+0xbf/0x170 [ 569.261935][T21712] xskq_create+0xbf/0x170 [ 569.261961][T21712] xsk_init_queue+0xb0/0x110 [ 569.261985][T21712] xsk_setsockopt+0x4dc/0x8d0 [ 569.262010][T21712] ? __pfx_xsk_setsockopt+0x10/0x10 [ 569.262031][T21712] ? __pfx_aa_sk_perm+0x10/0x10 [ 569.262054][T21712] ? aa_sock_opt_perm+0x74/0x110 [ 569.262076][T21712] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 569.262095][T21712] ? __pfx_xsk_setsockopt+0x10/0x10 [ 569.262119][T21712] do_sock_setsockopt+0x17c/0x1b0 [ 569.262142][T21712] __x64_sys_setsockopt+0x13f/0x1b0 [ 569.262166][T21712] do_syscall_64+0xfa/0x3b0 [ 569.262188][T21712] ? lockdep_hardirqs_on+0x9c/0x150 [ 569.262210][T21712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.262227][T21712] ? clear_bhb_loop+0x60/0xb0 [ 569.262249][T21712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.262266][T21712] RIP: 0033:0x7f6d74f8eb69 [ 569.262283][T21712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.262299][T21712] RSP: 002b:00007f6d75e81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 569.262321][T21712] RAX: ffffffffffffffda RBX: 00007f6d751b6080 RCX: 00007f6d74f8eb69 [ 569.262334][T21712] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 569.262346][T21712] RBP: 00007f6d75011df1 R08: 0000000000000004 R09: 0000000000000000 [ 569.262357][T21712] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.262369][T21712] R13: 0000000000000000 R14: 00007f6d751b6080 R15: 00007fff2bbf2768 [ 569.262400][T21712] [ 569.262422][T21712] Mem-Info: [ 569.646603][T21712] active_anon:8173 inactive_anon:0 isolated_anon:0 [ 569.646603][T21712] active_file:1357 inactive_file:40029 isolated_file:0 [ 569.646603][T21712] unevictable:768 dirty:433 writeback:0 [ 569.646603][T21712] slab_reclaimable:11856 slab_unreclaimable:153251 [ 569.646603][T21712] mapped:30145 shmem:1994 pagetables:944 [ 569.646603][T21712] sec_pagetables:0 bounce:0 [ 569.646603][T21712] kernel_misc_reclaimable:0 [ 569.646603][T21712] free:1241255 free_pcp:24921 free_cma:0 [ 569.719857][T21712] Node 0 active_anon:30792kB inactive_anon:0kB active_file:5428kB inactive_file:159912kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120580kB dirty:1728kB writeback:0kB shmem:4540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12824kB pagetables:3656kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 569.794011][T21712] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 569.817535][T21730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5752'. [ 569.832381][T21712] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 569.925189][T21712] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 569.954283][T21736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5754'. [ 569.963686][T21712] Node 0 DMA32 free:1036856kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30948kB inactive_anon:0kB active_file:5428kB inactive_file:158060kB unevictable:1536kB writepending:1728kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:88436kB local_pcp:61852kB free_cma:0kB [ 569.975207][T21730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5752'. [ 570.000916][T21712] lowmem_reserve[]: 0 0 1 1 1 [ 570.012514][T21712] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1852kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 570.063688][T21712] lowmem_reserve[]: 0 0 0 0 0 [ 570.070972][T21712] Node 1 Normal free:3906756kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:11840kB local_pcp:1632kB free_cma:0kB [ 570.086625][T21730] geneve2: entered promiscuous mode [ 570.108999][T21730] geneve2: entered allmulticast mode [ 570.117398][ T2946] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.126128][ T2946] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.161213][T21712] lowmem_reserve[]: 0 0 0 0 0 [ 570.172162][ T2946] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.187127][T21712] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 570.191753][ T2946] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.215365][T21712] Node 0 DMA32: 2066*4kB (UME) 861*8kB (UME) 511*16kB (UME) 389*32kB (UME) 223*64kB (UME) 93*128kB (UME) 41*256kB (UME) 20*512kB (UME) 18*1024kB (UM) 4*2048kB (UME) 229*4096kB (UM) = 1047296kB [ 570.241307][T21712] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 570.290009][T21712] Node 1 Normal: 199*4kB (UME) 53*8kB (UME) 40*16kB (UME) 246*32kB (UME) 67*64kB (UME) 10*128kB (UME) 3*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 948*4096kB (M) = 3906756kB [ 570.313103][T21712] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 570.323288][T21712] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 570.339577][T21712] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 570.350545][T21712] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 570.364074][T21712] 42875 total pagecache pages [ 570.370031][T21712] 0 pages in swap cache [ 570.374571][T21712] Free swap = 124996kB [ 570.383302][T21712] Total swap = 124996kB [ 570.395734][T21712] 2097051 pages RAM [ 570.412556][T21712] 0 pages HighMem/MovableOnly [ 570.423852][T21712] 424872 pages reserved [ 570.434779][T21749] vlan2: entered promiscuous mode [ 570.447307][T21712] 0 pages cma reserved [ 570.449543][T21749] batadv0: entered promiscuous mode [ 570.501066][T21752] tipc: Enabled bearer , priority 0 [ 570.519325][T21752] tipc: Resetting bearer [ 570.553968][T21751] tipc: Disabling bearer [ 570.888457][T21767] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5763'. [ 570.953092][T21763] lo speed is unknown, defaulting to 1000 [ 571.730449][T21763] lo speed is unknown, defaulting to 1000 [ 571.994254][T21801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5771'. [ 572.782047][T21812] syzkaller0: entered promiscuous mode [ 572.801081][T21812] syzkaller0: entered allmulticast mode [ 573.003554][T21819] netlink: 'syz.3.5775': attribute type 10 has an invalid length. [ 574.951356][T21823] tipc: Enabling of bearer rejected, failed to enable media [ 575.023905][T21838] netlink: 'syz.3.5777': attribute type 1 has an invalid length. [ 575.128809][T21838] 8021q: adding VLAN 0 to HW filter on device bond8 [ 575.203260][T21842] 8021q: adding VLAN 0 to HW filter on device bond8 [ 575.211252][T21842] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 575.227466][T21842] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 575.250902][T21848] gretap2: entered promiscuous mode [ 575.260554][T21848] bond8: (slave gretap2): making interface the new active one [ 575.271220][T21848] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 575.333319][T21838] macvlan0: entered promiscuous mode [ 575.339250][T21838] macvlan0: entered allmulticast mode [ 575.346522][T21838] bond8: entered promiscuous mode [ 575.363257][T21838] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 575.375497][T21838] bond8: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 575.519052][T21838] bond8: left promiscuous mode [ 575.665714][T21859] lo speed is unknown, defaulting to 1000 [ 575.881392][T21869] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5785'. [ 576.036313][T21877] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5788'. [ 576.207880][T21880] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5789'. [ 576.649055][T21893] tipc: Enabling of bearer rejected, already enabled [ 576.667518][T21893] tipc: Resetting bearer [ 576.834024][T21859] lo speed is unknown, defaulting to 1000 [ 576.907822][T21895] tipc: Enabling of bearer rejected, already enabled [ 577.051392][T21897] netlink: 'syz.0.5794': attribute type 13 has an invalid length. [ 577.820974][T21905] tipc: Enabling of bearer rejected, already enabled [ 578.640369][T21932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5801'. [ 578.662759][T21932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5801'. [ 579.100491][T21942] tipc: Enabled bearer , priority 0 [ 579.122536][T21942] tipc: Resetting bearer [ 579.156874][T21939] tipc: Disabling bearer [ 579.198950][T21951] tipc: Enabling of bearer rejected, already enabled [ 579.438799][T21958] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5811'. [ 579.465628][T21962] xfrm1: entered allmulticast mode [ 579.668611][T21966] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5812'. [ 580.608435][T21983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5815'. [ 581.490254][T22004] lo speed is unknown, defaulting to 1000 [ 581.750036][T22004] lo speed is unknown, defaulting to 1000 [ 581.840282][T22006] tipc: Enabling of bearer rejected, failed to enable media [ 582.271983][T22018] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5823'. [ 582.480283][T22023] macsec1: left allmulticast mode [ 582.485720][T22023] veth3: left allmulticast mode [ 582.492264][T22023] bond3: left allmulticast mode [ 582.500612][T22023] bond7: left allmulticast mode [ 582.507877][T22023] bridge10: left allmulticast mode [ 582.513533][T22023] macvtap0: left allmulticast mode [ 582.620175][T22028] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5825'. [ 582.658569][T22023] geneve2: left promiscuous mode [ 582.665793][T22023] geneve2: left allmulticast mode [ 582.682323][ T55] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.725639][ T55] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.758056][ T55] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.860053][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.913174][T22032] netlink: 'syz.4.5826': attribute type 10 has an invalid length. [ 583.063392][T22048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.100511][T22048] IPVS: length: 144 != 8 [ 583.707524][T22059] netlink: 'syz.4.5831': attribute type 1 has an invalid length. [ 583.715302][T22059] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5831'. [ 584.101672][T22063] netlink: 248 bytes leftover after parsing attributes in process `syz.4.5833'. [ 584.490402][T22068] tipc: Enabling of bearer rejected, already enabled [ 584.500285][T22068] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 584.509143][T22068] tipc: Resetting bearer [ 584.525709][T22066] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5834'. [ 584.658138][T22071] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5836'. [ 584.699776][T22070] gretap2: left promiscuous mode [ 584.715509][T22078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5837'. [ 584.744293][T22078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5837'. [ 584.953070][T22084] netlink: 'syz.0.5839': attribute type 13 has an invalid length. [ 585.000905][T22084] netlink: 'syz.0.5839': attribute type 17 has an invalid length. [ 585.017073][T22083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5837'. [ 585.065060][T22084] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.143021][T22084] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 585.201352][T16708] lo speed is unknown, defaulting to 1000 [ 585.216184][T16708] syz2: Port: 1 Link ACTIVE [ 585.235759][T22094] tipc: Enabling of bearer rejected, failed to enable media [ 585.413683][T22096] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5841'. [ 585.674821][T22104] tipc: Enabling of bearer rejected, failed to enable media [ 586.083339][T22119] tipc: Enabling of bearer rejected, failed to enable media [ 586.111109][T22116] rdma_rxe: rxe_newlink: failed to add lo [ 586.218672][T22125] tipc: Enabling of bearer rejected, already enabled [ 586.436414][T22131] vlan1: entered promiscuous mode [ 586.504243][T22138] team0: Unable to change to the same mode the team is in [ 587.041722][T22161] netlink: 'syz.4.5856': attribute type 10 has an invalid length. [ 587.069338][T22161] dummy0: entered promiscuous mode [ 587.074824][T22161] dummy0: left allmulticast mode [ 587.090270][T22161] bridge0: port 1(dummy0) entered blocking state [ 587.101335][T22161] bridge0: port 1(dummy0) entered disabled state [ 587.109562][T22161] dummy0: entered allmulticast mode [ 587.483832][T22171] tipc: Enabling of bearer rejected, already enabled [ 587.709601][T22175] lo speed is unknown, defaulting to 1000 [ 587.752390][T22179] tipc: Enabling of bearer rejected, already enabled [ 587.968831][T22184] __nla_validate_parse: 3 callbacks suppressed [ 587.968849][T22184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5858'. [ 588.241695][T22184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5858'. [ 588.464441][T22175] lo speed is unknown, defaulting to 1000 [ 588.932305][T22202] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5867'. [ 589.021961][ T9] lo speed is unknown, defaulting to 1000 [ 589.041925][ T9] syz2: Port: 1 Link DOWN [ 589.051406][T22205] dummy0: left allmulticast mode [ 589.068954][T22205] bridge0: port 1(dummy0) entered disabled state [ 589.148386][T22205] tipc: Resetting bearer [ 589.212699][T22207] team0: Mode changed to "activebackup" [ 589.236183][T22205] vlan0: entered promiscuous mode [ 589.246896][T22205] veth1: entered promiscuous mode [ 589.260003][T22205] vlan0: left allmulticast mode [ 589.309316][T22207] tipc: Enabled bearer , priority 0 [ 589.321401][T22210] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5869'. [ 589.404286][T22212] tipc: Enabled bearer , priority 0 [ 589.414516][T22212] syzkaller0: entered promiscuous mode [ 589.432279][T22212] syzkaller0: entered allmulticast mode [ 589.530397][T22212] sch_fq: defrate 257 ignored. [ 589.542060][T22216] tipc: Enabling of bearer rejected, failed to enable media [ 589.563358][T22212] tipc: Resetting bearer [ 589.582178][T22211] tipc: Resetting bearer [ 589.598446][T22223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5875'. [ 589.640755][T22211] tipc: Disabling bearer [ 589.674306][T22221] bond8: (slave gretap2): Releasing active interface [ 589.710701][T22228] tipc: Enabling of bearer rejected, failed to enable media [ 590.147106][T22248] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5877'. [ 590.280388][T22258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5878'. [ 590.317285][T22258] netlink: 'syz.2.5878': attribute type 1 has an invalid length. [ 590.369881][T22258] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5878'. [ 590.689456][T22267] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5883'. [ 590.722009][T22267] dummy0: left promiscuous mode [ 590.729748][T22267] vlan0: left promiscuous mode [ 590.734652][T22267] veth1: left promiscuous mode [ 590.749162][T22267] tipc: Resetting bearer [ 590.764412][T22267] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 591.509007][T22274] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 592.176424][T22304] tipc: Enabling of bearer rejected, failed to enable media [ 592.209420][T22302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 592.662797][T22319] lo: left allmulticast mode [ 592.678861][T22319] tunl0: left allmulticast mode [ 592.683942][T22319] gre0: left allmulticast mode [ 592.732438][T22319] gretap0: left allmulticast mode [ 592.779162][T22319] erspan0: left allmulticast mode [ 592.788594][T22319] ip6_vti0: left allmulticast mode [ 592.794041][T22319] sit0: left allmulticast mode [ 592.819785][T22319] ip6tnl0: left allmulticast mode [ 592.865581][T22319] ip6gre0: left allmulticast mode [ 592.886608][T22319] syz_tun: left allmulticast mode [ 592.905228][T22319] ip6gretap0: left allmulticast mode [ 592.916931][T22319] bridge0: left allmulticast mode [ 592.936793][T22319] team0: left allmulticast mode [ 592.957480][T22319] nlmon0: left allmulticast mode [ 592.966116][T22319] caif0: left allmulticast mode [ 592.981960][T22319] veth0: left allmulticast mode [ 592.997942][T22319] wg0: left allmulticast mode [ 593.024859][T22319] wg1: left allmulticast mode [ 593.039562][T22319] wg2: left allmulticast mode [ 593.056081][T22319] veth0_to_bridge: left allmulticast mode [ 593.070151][T22319] bridge_slave_0: left allmulticast mode [ 593.092242][T22319] veth1_to_bridge: left allmulticast mode [ 593.103723][T22319] bridge_slave_1: left allmulticast mode [ 593.133062][T22319] veth0_to_bond: left allmulticast mode [ 593.164042][T22319] bond_slave_0: left allmulticast mode [ 593.174195][T22319] veth1_to_bond: left allmulticast mode [ 593.194477][T22319] bond_slave_1: left allmulticast mode [ 593.200732][T22319] veth0_to_team: left allmulticast mode [ 593.219385][T22319] C: left allmulticast mode [ 593.224125][T22319] veth1_to_team: left allmulticast mode [ 593.274004][T22319] team_slave_1: left allmulticast mode [ 593.293307][T22319] veth0_to_batadv: left allmulticast mode [ 593.314013][T22319] batadv_slave_0: left allmulticast mode [ 593.343122][T22319] xfrm0: left allmulticast mode [ 593.355625][T22319] veth0_to_hsr: left allmulticast mode [ 593.369109][T22319] hsr_slave_0: left allmulticast mode [ 593.375046][T22319] veth1_virt_wifi: left allmulticast mode [ 593.387510][T22319] veth0_virt_wifi: left allmulticast mode [ 593.393645][T22319] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 593.402572][T22319] veth1_vlan: left allmulticast mode [ 593.409209][T22319] vlan1: left allmulticast mode [ 593.414558][T22319] macvlan1: left allmulticast mode [ 593.423338][T22319] ipvlan0: left allmulticast mode [ 593.429730][T22319] ipvlan1: left allmulticast mode [ 593.435035][T22319] veth0_vlan: left allmulticast mode [ 593.442020][T22319] geneve0: left allmulticast mode [ 593.456524][T22319] geneve1: left allmulticast mode [ 593.462011][T22319] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 593.471709][T22319] gre1: left allmulticast mode [ 593.477229][T22319] @: left allmulticast mode [ 593.482097][T22319] ip6gre1: left allmulticast mode [ 593.491602][T22319] ipip0: left allmulticast mode [ 593.499051][T22319] ip6gre2: left allmulticast mode [ 593.504339][T22319] ip6tnl1: left allmulticast mode [ 593.510336][T22319] gre2: left allmulticast mode [ 593.515334][T22319] ip6gre3: left allmulticast mode [ 593.523512][T22319] macvtap0: left allmulticast mode [ 593.530265][T22319] gretap1: left allmulticast mode [ 593.535614][T22319] bond1: left allmulticast mode [ 593.543870][T22319] gretap2: left allmulticast mode [ 593.549746][T22319] geneve2: left allmulticast mode [ 593.555126][T22319] bond2: left allmulticast mode [ 593.561131][T22319] gretap3: left allmulticast mode [ 593.567095][T22319] bond3: left allmulticast mode [ 593.572395][T22319] bridge1: left allmulticast mode [ 593.579093][T22319] sit1: left allmulticast mode [ 593.584281][T22319] bond4: left allmulticast mode [ 593.590215][T22319] veth2: left allmulticast mode [ 593.595426][T22319] veth3: left allmulticast mode [ 593.601997][T22319] veth4: left allmulticast mode [ 593.608236][T22319] veth5: left allmulticast mode [ 593.613621][T22319] veth6: left allmulticast mode [ 593.619818][T22319] veth7: left allmulticast mode [ 593.624970][T22319] veth8: left allmulticast mode [ 593.631922][T22319] veth9: left allmulticast mode [ 593.638162][T22319] bridge2: left allmulticast mode [ 593.643668][T22319] geneve3: left allmulticast mode [ 593.649582][T22319] veth10: left allmulticast mode [ 593.654880][T22319] veth11: left allmulticast mode [ 593.660351][T22319] veth12: left allmulticast mode [ 593.665673][T22319] veth13: left allmulticast mode [ 593.671017][T22319] gre3: left allmulticast mode [ 593.676970][T22319] veth14: left allmulticast mode [ 593.682145][T22319] veth15: left allmulticast mode [ 593.687889][T22319] bridge3: left allmulticast mode [ 593.693109][T22319] bond5: left allmulticast mode [ 593.698713][T22319] gre4: left allmulticast mode [ 593.703668][T22319] gre5: left allmulticast mode [ 593.709244][T22319] bridge4: left allmulticast mode [ 593.714554][T22319] bridge5: left allmulticast mode [ 593.720428][T22319] gre6: left allmulticast mode [ 593.725413][T22319] gre7: left allmulticast mode [ 593.730913][T22319] bond6: left allmulticast mode [ 593.736025][T22319] veth16: left allmulticast mode [ 593.741411][T22319] veth17: left allmulticast mode [ 593.750171][T22319] gre8: left allmulticast mode [ 593.797319][T22319] gre9: left allmulticast mode [ 593.802366][T22319] gre10: left allmulticast mode [ 593.826343][T22319] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 593.834245][T22319] bond7: left allmulticast mode [ 593.844695][T22319] bond8: left allmulticast mode [ 593.849933][T22319] wireguard0: left allmulticast mode [ 593.856786][T22319] wireguard1: left allmulticast mode [ 593.862532][T22319] bridge6: left allmulticast mode [ 593.868219][T22319] syztnl2: left allmulticast mode [ 593.880835][T22319] pim6reg: left allmulticast mode [ 593.889734][T22327] tipc: Enabling of bearer rejected, failed to enable media [ 593.951478][T22333] geneve3: entered promiscuous mode [ 594.015719][ T2934] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 594.030983][ T2934] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 594.097640][ T2934] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 594.120668][ T2934] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 594.175031][T22373] netlink: 'syz.2.5901': attribute type 1 has an invalid length. [ 594.185024][T22373] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5901'. [ 594.216122][T22374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.236523][T22376] tipc: Enabling of bearer rejected, already enabled [ 594.245965][T22376] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 594.253834][T22376] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 594.267263][T22376] tipc: Resetting bearer [ 594.270468][T22374] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5904'. [ 594.354742][T22378] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5907'. [ 594.392547][T22380] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5908'. [ 594.434980][T22383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5909'. [ 594.463105][T22383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5909'. [ 594.498684][T22383] netlink: 'syz.4.5909': attribute type 1 has an invalid length. [ 594.518957][T22383] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5909'. [ 594.586700][T22383] nbd: socks must be embedded in a SOCK_ITEM attr [ 594.593798][T22383] block nbd1: shutting down sockets [ 594.657355][T22391] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5910'. [ 594.675323][T22391] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5910'. [ 594.711733][T22391] syz0: rxe_newlink: already configured on lo [ 594.743071][T22391] erspan0: left promiscuous mode [ 594.775219][T22391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.797766][T22391] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 594.822094][ T5924] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 594.844816][ T9] lo speed is unknown, defaulting to 1000 [ 594.856226][T22394] netlink: 'syz.4.5911': attribute type 1 has an invalid length. [ 594.856434][ T9] syz0: Port: 1 Link ACTIVE [ 594.983272][T22394] bond9: entered promiscuous mode [ 595.006480][T22394] 8021q: adding VLAN 0 to HW filter on device bond9 [ 595.040321][ T9] lo speed is unknown, defaulting to 1000 [ 595.098573][T22396] bond9: (slave bridge8): making interface the new active one [ 595.106713][T22396] bridge8: entered promiscuous mode [ 595.114472][T22396] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 595.125593][ T3019] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 595.268806][T22401] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5914'. [ 595.308051][T22398] vlan2: entered promiscuous mode [ 595.313263][T22398] bond0: entered promiscuous mode [ 595.330090][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 595.462724][T22410] netlink: 'syz.0.5913': attribute type 1 has an invalid length. [ 595.629246][T22424] pimreg: left allmulticast mode [ 595.658573][T22423] netlink: 'syz.2.5916': attribute type 10 has an invalid length. [ 595.688302][T22424] dvmrp1: left allmulticast mode [ 595.828786][T22423] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 595.923503][T22437] tipc: Enabling of bearer rejected, failed to enable media [ 596.159079][ T2934] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 596.316866][ T2934] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 596.619279][T16714] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 596.877171][T22467] team0: Mode changed to "activebackup" [ 596.962215][T22467] tipc: Enabled bearer , priority 0 [ 597.362381][T22487] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 597.422640][T22489] tipc: Resetting bearer [ 597.490252][T22489] team0: Unable to change to the same mode the team is in [ 597.652201][T22496] vlan1: entered promiscuous mode [ 597.662590][T22496] vlan1: entered allmulticast mode [ 597.668851][T22496] hsr_slave_1: entered allmulticast mode [ 597.678004][T22498] tipc: Enabling of bearer rejected, failed to enable media [ 598.307690][T22512] block nbd1: server does not support multiple connections per device. [ 598.318018][T22512] block nbd1: shutting down sockets [ 598.367485][T22518] tipc: Enabling of bearer rejected, failed to enable media [ 598.633360][T22538] tipc: Resetting bearer [ 598.667236][T22538] bond9: (slave bridge8): Releasing backup interface [ 598.702581][T22538] bridge8: left promiscuous mode [ 598.797599][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 598.806813][T22538] netlink: 'syz.4.5945': attribute type 10 has an invalid length. [ 599.502255][T22578] __nla_validate_parse: 8 callbacks suppressed [ 599.502274][T22578] netlink: 388 bytes leftover after parsing attributes in process `syz.0.5954'. [ 599.582317][T22582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5954'. [ 599.608575][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 599.952746][T22590] lo speed is unknown, defaulting to 1000 [ 600.326326][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 600.544995][T22603] tipc: Enabling of bearer rejected, already enabled [ 600.711578][T22599] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5958'. [ 600.766528][T22590] lo speed is unknown, defaulting to 1000 [ 600.906720][T22608] tipc: Resetting bearer [ 600.993283][T22608] team0: Mode changed to "loadbalance" [ 601.185506][T22619] netlink: 204 bytes leftover after parsing attributes in process `syz.4.5964'. [ 601.421910][T22623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5966'. [ 601.431111][T22625] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5967'. [ 601.593809][T22632] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5970'. [ 601.822982][T22630] netlink: 'syz.4.5969': attribute type 303 has an invalid length. [ 601.890879][T22630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5969'. [ 602.221506][T22651] tipc: Resetting bearer [ 602.234473][T22651] team0: Unable to change to the same mode the team is in [ 602.331546][T22653] netlink: 204 bytes leftover after parsing attributes in process `syz.0.5976'. [ 602.371105][T22656] netlink: 87 bytes leftover after parsing attributes in process `syz.4.5978'. [ 602.633796][T22675] netlink: 'syz.0.5980': attribute type 16 has an invalid length. [ 602.642639][T22675] netlink: 'syz.0.5980': attribute type 17 has an invalid length. [ 602.710664][T22675] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.718493][T22675] tipc: Resetting bearer [ 602.826589][T22675] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 602.856096][ T9] lo speed is unknown, defaulting to 1000 [ 602.866716][ T9] syz2: Port: 1 Link ACTIVE [ 603.143650][T22682] netlink: 'syz.2.5984': attribute type 2 has an invalid length. [ 603.203016][T22682] k›*·]‘: entered promiscuous mode [ 603.267854][T16708] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 603.298031][T22684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 603.372702][T22682] veth0_to_team: entered promiscuous mode [ 603.378796][T22682] veth0_to_team: entered allmulticast mode [ 603.456551][T22693] tipc: Enabling of bearer rejected, failed to enable media [ 603.616110][T16708] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 603.780397][T22710] tipc: Enabling of bearer rejected, failed to enable media [ 604.319417][T22732] bpq0: entered promiscuous mode [ 604.345693][T22734] tipc: Enabling of bearer rejected, failed to enable media [ 604.776808][T22759] __nla_validate_parse: 6 callbacks suppressed [ 604.776827][T22759] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6002'. [ 604.798406][T22757] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6001'. [ 605.015451][T22766] batadv_slave_1: entered promiscuous mode [ 605.105720][T22765] batadv_slave_1: left promiscuous mode [ 605.113922][T22764] tipc: Enabled bearer , priority 0 [ 605.205525][T22763] tipc: Resetting bearer [ 607.500831][T22763] tipc: Disabling bearer [ 607.530645][T22796] tipc: Enabling of bearer rejected, failed to enable media [ 607.550565][T22775] lo speed is unknown, defaulting to 1000 [ 607.656699][T22809] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 607.765679][T22815] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 607.814300][T22815] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 607.852324][T22815] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 607.986592][T22775] lo speed is unknown, defaulting to 1000 [ 608.371743][T22830] lo speed is unknown, defaulting to 1000 [ 608.486133][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 608.671090][T22838] lo speed is unknown, defaulting to 1000 [ 608.741668][T22830] lo speed is unknown, defaulting to 1000 [ 609.504986][T22838] lo speed is unknown, defaulting to 1000 [ 610.074203][T22862] tipc: Resetting bearer [ 610.085456][T22862] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 610.094671][T22862] bond9: left promiscuous mode [ 610.132967][T22865] tipc: Enabled bearer , priority 0 [ 610.177713][T22865] tipc: Resetting bearer [ 610.395148][T22864] tipc: Disabling bearer [ 610.465270][T22873] netlink: 196 bytes leftover after parsing attributes in process `syz.4.6028'. [ 611.733804][T22881] syz.0.6031: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 611.770195][T22884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6033'. [ 611.780137][T22881] CPU: 1 UID: 0 PID: 22881 Comm: syz.0.6031 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 611.780162][T22881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 611.780174][T22881] Call Trace: [ 611.780182][T22881] [ 611.780191][T22881] dump_stack_lvl+0x189/0x250 [ 611.780222][T22881] ? __pfx_dump_stack_lvl+0x10/0x10 [ 611.780251][T22881] ? __pfx__printk+0x10/0x10 [ 611.780273][T22881] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 611.780294][T22881] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 611.780316][T22881] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 611.780338][T22881] warn_alloc+0x214/0x310 [ 611.780357][T22881] ? stack_depot_save_flags+0x40/0x900 [ 611.780378][T22881] ? __pfx_warn_alloc+0x10/0x10 [ 611.780399][T22881] ? kasan_save_track+0x4f/0x80 [ 611.780423][T22881] ? xskq_create+0x56/0x170 [ 611.780443][T22881] ? xsk_init_queue+0xb0/0x110 [ 611.780461][T22881] ? xsk_setsockopt+0x4dc/0x8d0 [ 611.780480][T22881] ? do_sock_setsockopt+0x17c/0x1b0 [ 611.780495][T22881] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 611.780510][T22881] ? do_syscall_64+0xfa/0x3b0 [ 611.780533][T22881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.780559][T22881] __vmalloc_node_range_noprof+0x125/0x12f0 [ 611.780609][T22881] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 611.780633][T22881] ? __kasan_kmalloc+0x93/0xb0 [ 611.780660][T22881] vmalloc_user_noprof+0xad/0xf0 [ 611.780677][T22881] ? xskq_create+0xbf/0x170 [ 611.780699][T22881] xskq_create+0xbf/0x170 [ 611.780724][T22881] xsk_init_queue+0xb0/0x110 [ 611.780748][T22881] xsk_setsockopt+0x4dc/0x8d0 [ 611.780772][T22881] ? __pfx_xsk_setsockopt+0x10/0x10 [ 611.780793][T22881] ? __pfx_aa_sk_perm+0x10/0x10 [ 611.780820][T22881] ? aa_sock_opt_perm+0x74/0x110 [ 611.780844][T22881] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 611.780862][T22881] ? __pfx_xsk_setsockopt+0x10/0x10 [ 611.780881][T22881] do_sock_setsockopt+0x17c/0x1b0 [ 611.780900][T22881] __x64_sys_setsockopt+0x13f/0x1b0 [ 611.780921][T22881] do_syscall_64+0xfa/0x3b0 [ 611.780943][T22881] ? lockdep_hardirqs_on+0x9c/0x150 [ 611.780964][T22881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.780985][T22881] ? clear_bhb_loop+0x60/0xb0 [ 611.781006][T22881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.781023][T22881] RIP: 0033:0x7fe7e098eb69 [ 611.781039][T22881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.781055][T22881] RSP: 002b:00007fe7e17e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 611.781075][T22881] RAX: ffffffffffffffda RBX: 00007fe7e0bb5fa0 RCX: 00007fe7e098eb69 [ 611.781087][T22881] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 611.781098][T22881] RBP: 00007fe7e0a11df1 R08: 0000000000000004 R09: 0000000000000000 [ 611.781108][T22881] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.781119][T22881] R13: 0000000000000000 R14: 00007fe7e0bb5fa0 R15: 00007ffe768a80d8 [ 611.781146][T22881] [ 611.781154][T22881] Mem-Info: [ 611.804124][T22884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6033'. [ 611.921271][T22881] active_anon:10674 inactive_anon:0 isolated_anon:0 [ 611.921271][T22881] active_file:1357 inactive_file:40045 isolated_file:0 [ 611.921271][T22881] unevictable:768 dirty:450 writeback:0 [ 611.921271][T22881] slab_reclaimable:11906 slab_unreclaimable:180940 [ 611.921271][T22881] mapped:30075 shmem:2442 pagetables:965 [ 611.921271][T22881] sec_pagetables:0 bounce:0 [ 611.921271][T22881] kernel_misc_reclaimable:0 [ 611.921271][T22881] free:1219727 free_pcp:23586 free_cma:0 [ 612.148713][T22881] Node 0 active_anon:43984kB inactive_anon:0kB active_file:5428kB inactive_file:159976kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125720kB dirty:1828kB writeback:0kB shmem:9644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12904kB pagetables:3848kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 612.184866][T22881] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 612.432812][T22881] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 612.570603][T22896] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6035'. [ 612.615452][T22881] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 612.631991][T22881] Node 0 DMA32 free:942536kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:59340kB inactive_anon:0kB active_file:5428kB inactive_file:158124kB unevictable:1536kB writepending:1228kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:80464kB local_pcp:33756kB free_cma:0kB [ 612.692709][T22881] lowmem_reserve[]: 0 0 1 1 1 [ 612.706100][T22881] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1852kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 612.738445][T22896] veth0_to_team: left promiscuous mode [ 612.752287][T22896] geneve3: left promiscuous mode [ 612.761480][T16714] lo speed is unknown, defaulting to 1000 [ 612.768038][ T2946] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 612.776327][T16714] syz0: Port: 1 Link DOWN [ 612.788174][ T2946] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 612.807130][T22881] lowmem_reserve[]: 0 0 0 0 0 [ 612.818082][T22881] Node 1 Normal free:3907268kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:11348kB local_pcp:1120kB free_cma:0kB [ 612.874524][T16714] lo speed is unknown, defaulting to 1000 [ 612.874570][ T2946] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 612.906357][T22881] lowmem_reserve[]: 0 0 0 0 0 [ 612.911174][T22881] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 612.936021][ T2946] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 612.976394][T22881] Node 0 DMA32: 398*4kB (UM) 15*8kB (U) 425*16kB (UME) 1216*32kB (UME) 232*64kB (UME) 42*128kB (U) 38*256kB (U) 36*512kB (UM) 22*1024kB (UME) 4*2048kB (M) 197*4096kB (UM) = 933440kB [ 613.046317][T22881] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 613.050754][T22903] tipc: Enabling of bearer rejected, already enabled [ 613.096771][T22881] Node 1 Normal: 199*4kB (UME) 53*8kB (UME) 40*16kB (UME) 250*32kB (UME) 73*64kB (UME) 10*128kB (UME) 3*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 948*4096kB (M) = 3907268kB [ 613.142385][T22881] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 613.176199][T22881] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 613.196817][T22881] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 613.236716][T22881] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 613.282351][T22881] 47039 total pagecache pages [ 613.292405][T22881] 0 pages in swap cache [ 613.302543][T22881] Free swap = 124996kB [ 613.312712][T22881] Total swap = 124996kB [ 613.322797][T22881] 2097051 pages RAM [ 613.377231][T22881] 0 pages HighMem/MovableOnly [ 613.566064][T22881] 424872 pages reserved [ 613.573755][T22881] 0 pages cma reserved [ 613.882938][T22918] tipc: Enabled bearer , priority 0 [ 613.927601][T22918] tipc: Resetting bearer [ 613.957667][T22920] syzkaller0: entered promiscuous mode [ 613.963903][T22920] syzkaller0: entered allmulticast mode [ 614.055559][T22922] netlink: 196 bytes leftover after parsing attributes in process `syz.4.6043'. [ 614.220971][T22917] tipc: Disabling bearer [ 614.297379][T22928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.435267][T22935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6046'. [ 614.574646][T22936] sctp: [Deprecated]: syz.0.6047 (pid 22936) Use of int in max_burst socket option. [ 614.574646][T22936] Use struct sctp_assoc_value instead [ 614.784789][T22940] wg1: left allmulticast mode [ 614.815075][T22940] geneve0: left allmulticast mode [ 614.844966][T22940] macsec1: left allmulticast mode [ 614.898292][T22940] xfrm1: left allmulticast mode [ 614.980459][T22946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.043642][T22946] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6050'. [ 615.135571][T22954] tipc: Enabling of bearer rejected, failed to enable media [ 615.348563][T22967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6054'. [ 615.433206][T22963] lo speed is unknown, defaulting to 1000 [ 615.747517][T22978] tipc: Enabled bearer , priority 0 [ 615.758462][T22978] tipc: Resetting bearer [ 615.799466][T22976] tipc: Disabling bearer [ 616.240484][T22963] lo speed is unknown, defaulting to 1000 [ 616.616859][T23000] tipc: Enabled bearer , priority 0 [ 616.630670][T22998] tipc: Resetting bearer [ 616.712569][T22997] tipc: Disabling bearer [ 616.768885][T23002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6063'. [ 616.797406][T23002] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6063'. [ 616.898459][T23002] geneve4: entered promiscuous mode [ 616.903795][T23002] geneve4: entered allmulticast mode [ 616.984177][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.006310][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.237849][ T2946] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 617.260015][T23008] tipc: Resetting bearer [ 617.354034][T23008] vlan0: left promiscuous mode [ 617.360423][T23008] bond6: left promiscuous mode [ 617.365513][T23008] vlan0: left allmulticast mode [ 617.370682][T23008] bond6: left allmulticast mode [ 617.387743][T23008] veth7: left promiscuous mode [ 617.394716][T23008] bond9: left promiscuous mode [ 617.425350][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.466953][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.565174][ T36] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.621936][ T36] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.645688][ T36] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.710263][ T36] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.767394][T23048] netlink: 'syz.4.6074': attribute type 1 has an invalid length. [ 619.252332][T23052] tap0: tun_chr_ioctl cmd 1074025677 [ 619.267626][T23052] tap0: linktype set to 0 [ 619.803078][T23063] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6078'. [ 619.902384][T23063] tipc: Enabled bearer , priority 0 [ 619.927537][T23063] syzkaller0: entered promiscuous mode [ 619.946149][T23063] syzkaller0: entered allmulticast mode [ 619.987983][T23062] tipc: Resetting bearer [ 620.017244][T23069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.029563][T23062] tipc: Disabling bearer [ 620.489174][T23084] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6083'. [ 620.628067][T23087] syzkaller0: entered promiscuous mode [ 620.635552][T23087] syzkaller0: entered allmulticast mode [ 620.720520][T23082] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6082'. [ 620.981495][T23091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6085'. [ 621.090160][T23095] bridge0: entered allmulticast mode [ 621.266850][T23101] tipc: Resetting bearer [ 621.401342][T23101] team0: Unable to change to the same mode the team is in [ 621.685612][T23116] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6091'. [ 621.939803][T23127] tipc: Resetting bearer [ 621.951867][T23127] batadv0: left allmulticast mode [ 621.957476][T23127] veth0: left allmulticast mode [ 621.962639][T23127] veth1: left allmulticast mode [ 621.968087][T23127] wg1: left allmulticast mode [ 621.972924][T23127] wg2: left allmulticast mode [ 621.978614][T23127] veth0_to_bridge: left allmulticast mode [ 621.985292][T23127] bridge_slave_0: left allmulticast mode [ 621.992349][T23127] veth0_to_bond: left allmulticast mode [ 621.999455][T23127] ÿ: left allmulticast mode [ 622.004381][T23127] veth1_to_bond: left allmulticast mode [ 622.011058][T23127] bond_slave_1: left allmulticast mode [ 622.017588][T23127] veth0_to_team: left allmulticast mode [ 622.023857][T23127] team_slave_0: left allmulticast mode [ 622.030335][T23127] veth1_to_team: left allmulticast mode [ 622.036314][T23127] team_slave_1: left allmulticast mode [ 622.042054][T23127] veth0_to_batadv: left allmulticast mode [ 622.048233][T23127] batadv_slave_0: left allmulticast mode [ 622.054129][T23127] veth1_to_batadv: left allmulticast mode [ 622.060331][T23127] batadv_slave_1: left allmulticast mode [ 622.066350][T23127] xfrm0: left allmulticast mode [ 622.071400][T23127] veth0_to_hsr: left allmulticast mode [ 622.077370][T23127] veth1_to_hsr: left allmulticast mode [ 622.083192][T23127] hsr0: left allmulticast mode [ 622.088042][T23127] hsr_slave_0: left allmulticast mode [ 622.093433][T23127] hsr_slave_1: left allmulticast mode [ 622.099264][T23127] veth1_virt_wifi: left allmulticast mode [ 622.105274][T23127] veth0_virt_wifi: left allmulticast mode [ 622.115973][T23127] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 622.123375][T23127] veth1_macvtap: left allmulticast mode [ 622.141706][T23127] veth0_macvtap: left allmulticast mode [ 622.148078][T23127] macvtap0: left allmulticast mode [ 622.153518][T23127] geneve0: left allmulticast mode [ 622.159087][T23127] geneve1: left allmulticast mode [ 622.164470][T23127] @: left allmulticast mode [ 622.169490][T23127] gre1: left allmulticast mode [ 622.174686][T23127] ipip0: left allmulticast mode [ 622.180216][T23127] team1: left allmulticast mode [ 622.207137][T23127] ip6gre1: left allmulticast mode [ 622.212876][T23127] geneve2: left allmulticast mode [ 622.218309][T23127] mac80211_hwsim hwsim13 wlan2: left allmulticast mode [ 622.225451][T23127] bond1: left allmulticast mode [ 622.230729][T23127] macvtap1: left allmulticast mode [ 622.236535][T23127] veth2: left allmulticast mode [ 622.241597][T23127] veth3: left allmulticast mode [ 622.247001][T23127] veth4: left allmulticast mode [ 622.252298][T23127] veth5: left allmulticast mode [ 622.257922][T23127] veth6: left allmulticast mode [ 622.263197][T23127] veth7: left allmulticast mode [ 622.270877][T23127] veth8: left allmulticast mode [ 622.276016][T23127] veth9: left allmulticast mode [ 622.281031][T23127] vxlan0: left allmulticast mode [ 622.288677][T23127] veth10: left allmulticast mode [ 622.293774][T23127] veth11: left allmulticast mode [ 622.299897][T23127] gtp0: left allmulticast mode [ 622.304788][T23127] bridge1: left allmulticast mode [ 622.310352][T23127] veth12: left allmulticast mode [ 622.315433][T23127] veth13: left allmulticast mode [ 622.320715][T23127] ip6tnl1: left allmulticast mode [ 622.326006][T23127] bridge2: left allmulticast mode [ 622.331280][T23127] gre2: left allmulticast mode [ 622.336484][T23127] veth14: left allmulticast mode [ 622.341551][T23127] veth15: left allmulticast mode [ 622.346734][T23127] bridge3: left allmulticast mode [ 622.351860][T23127] gre3: left allmulticast mode [ 622.357059][T23127] gre4: left allmulticast mode [ 622.361959][T23127] gre5: left allmulticast mode [ 622.366944][T23127] gre6: left allmulticast mode [ 622.371861][T23127] bond2: left allmulticast mode [ 622.377471][T23127] bridge4: left allmulticast mode [ 622.383543][T23127] macvtap2: left allmulticast mode [ 622.400820][ T5924] lo speed is unknown, defaulting to 1000 [ 622.402459][T23134] tipc: Enabling of bearer rejected, failed to enable media [ 622.406933][ T5924] syz2: Port: 1 Link DOWN [ 622.572582][T23140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6097'. [ 622.737350][T23152] netlink: 120 bytes leftover after parsing attributes in process `syz.4.6098'. [ 622.955490][T23149] syzkaller0: entered promiscuous mode [ 622.969048][T23149] syzkaller0: entered allmulticast mode [ 623.003396][T23147] veth19: entered promiscuous mode [ 623.138816][T23167] batman_adv: batadv0: Adding interface: ip6gretap1 [ 623.145578][T23167] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 623.168667][T23167] batman_adv: batadv0: Interface activated: ip6gretap1 [ 623.295425][T23170] netlink: 176956 bytes leftover after parsing attributes in process `syz.3.6102'. [ 623.336311][T23174] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6103'. [ 623.347929][T23174] unsupported nlmsg_type 40 [ 623.349557][T23173] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 623.505651][T23179] lo speed is unknown, defaulting to 1000 [ 624.218880][T23192] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6109'. [ 624.250370][T23179] lo speed is unknown, defaulting to 1000 [ 624.269160][T23192] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 624.654234][T23198] lo speed is unknown, defaulting to 1000 [ 624.676291][T23205] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6112'. [ 625.150993][ T5924] IPVS: starting estimator thread 0... [ 625.194547][T23217] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 625.246568][T23218] IPVS: using max 31 ests per chain, 74400 per kthread [ 625.395732][T23197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.414979][T23213] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6113'. [ 625.483405][T23198] lo speed is unknown, defaulting to 1000 [ 625.502732][T23209] lo speed is unknown, defaulting to 1000 [ 626.059222][T23239] netlink: 'syz.1.6119': attribute type 10 has an invalid length. [ 626.087470][T23239] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.140870][T23239] team0: entered promiscuous mode [ 626.213231][T23209] lo speed is unknown, defaulting to 1000 [ 626.247572][T23220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.691197][ T3019] IPVS: stop unused estimator thread 0... [ 627.285247][T23273] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 627.336849][T23273] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 627.376270][T23273] tipc: Resetting bearer [ 627.787013][T23282] lo speed is unknown, defaulting to 1000 [ 627.918622][T23287] netlink: 'syz.4.6129': attribute type 4 has an invalid length. [ 627.946101][T23287] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6129'. [ 628.012309][T23282] lo speed is unknown, defaulting to 1000 [ 628.154236][T23292] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6131'. [ 628.742472][T23311] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 628.784414][T23311] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 628.828371][T23311] tipc: Resetting bearer [ 629.088026][T23317] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.234129][T23323] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.260901][T23323] tipc: Resetting bearer [ 629.271868][T23323] tipc: Resetting bearer [ 629.297273][T23323] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 629.348581][T23319] syzkaller0: entered promiscuous mode [ 629.406057][T23319] syzkaller0: entered allmulticast mode [ 629.479171][T23317] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.580105][T23317] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.663479][T23317] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.864785][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.926078][ T2960] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.046388][ T2934] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.054605][ T2934] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.066562][T23342] netlink: 136 bytes leftover after parsing attributes in process `syz.3.6140'. [ 630.512202][T23352] ipvlan2: entered promiscuous mode [ 630.964761][T23351] lo speed is unknown, defaulting to 1000 [ 631.085445][T23359] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6144'. [ 631.331624][T23362] syzkaller0: entered promiscuous mode [ 631.346081][T23362] syzkaller0: entered allmulticast mode [ 631.366479][T23364] syzkaller0: entered promiscuous mode [ 631.382217][T23364] syzkaller0: entered allmulticast mode [ 631.576841][T23351] lo speed is unknown, defaulting to 1000 [ 632.255983][T23382] tipc: Enabling of bearer rejected, failed to enable media [ 632.683079][T23400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6152'. [ 633.040717][T23411] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6156'. [ 633.099137][T23413] syzkaller0: entered promiscuous mode [ 633.125225][T23413] syzkaller0: entered allmulticast mode [ 633.232716][T23415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6158'. [ 633.241786][T23415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6158'. [ 633.252227][T23415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6158'. [ 633.276313][T23415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6158'. [ 633.509545][T23424] syzkaller0: entered promiscuous mode [ 633.538878][T23424] syzkaller0: entered allmulticast mode [ 633.571951][T23424] netlink: 'syz.0.6160': attribute type 11 has an invalid length. [ 633.993820][T23442] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6163'. [ 634.202506][T23444] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6163'. [ 634.305425][T23452] lo speed is unknown, defaulting to 1000 [ 634.539926][T23452] lo speed is unknown, defaulting to 1000 [ 634.745135][T23458] tipc: Enabled bearer , priority 0 [ 634.755973][T23458] tipc: Resetting bearer [ 634.893345][T23457] tipc: Disabling bearer [ 634.968148][T23465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6166'. [ 635.192069][T23470] syzkaller0: entered promiscuous mode [ 635.243666][T23470] syzkaller0: entered allmulticast mode [ 635.447235][T23479] netlink: 'syz.2.6171': attribute type 13 has an invalid length. [ 635.484589][T23479] netlink: 'syz.2.6171': attribute type 17 has an invalid length. [ 635.611358][T23479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.630821][T23479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 635.656103][ T5924] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 635.716285][ T9] lo speed is unknown, defaulting to 1000 [ 635.722063][ T9] syz0: Port: 1 Link ACTIVE [ 635.743695][ T977] lo speed is unknown, defaulting to 1000 [ 635.863148][T23482] lo speed is unknown, defaulting to 1000 [ 635.929041][ T977] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 636.066601][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 636.083480][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 636.206132][T16708] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 636.443188][T23482] lo speed is unknown, defaulting to 1000 [ 636.457134][T23478] lo speed is unknown, defaulting to 1000 [ 637.265422][T23478] lo speed is unknown, defaulting to 1000 [ 637.277683][T23490] lo speed is unknown, defaulting to 1000 [ 637.901519][T23490] lo speed is unknown, defaulting to 1000 [ 638.406709][T23510] bpq0: left promiscuous mode [ 638.628032][T23512] lo speed is unknown, defaulting to 1000 [ 638.717837][T23518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6178'. [ 638.759367][T23520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6179'. [ 638.962718][T23521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6178'. [ 638.976030][ T30] audit: type=1804 audit(1754327550.270:8): pid=23525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6181" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=5955 res=1 errno=0 [ 639.002325][ T30] audit: type=1800 audit(1754327550.280:9): pid=23525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6181" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=5955 res=0 errno=0 [ 639.048209][T23512] lo speed is unknown, defaulting to 1000 [ 639.206301][T23531] syzkaller0: entered promiscuous mode [ 639.213745][T23531] syzkaller0: entered allmulticast mode [ 639.589161][T23536] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.6184'. [ 639.654949][T23536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6184'. [ 639.972839][T23544] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 640.236116][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 640.620676][T23566] batman_adv: batadv0: Adding interface: ip6gretap2 [ 640.642082][T23566] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.723679][T23566] batman_adv: batadv0: Interface activated: ip6gretap2 [ 640.983998][T23574] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.000761][T23577] Unsupported ieee802154 address type: 0 [ 641.040401][T23579] netlink: 248 bytes leftover after parsing attributes in process `syz.3.6192'. [ 641.051145][T23579] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6192'. [ 641.076978][T23574] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.080704][T23579] rdma_rxe: rxe_newlink: failed to add lo [ 641.234799][T23579] bridge0: left allmulticast mode [ 641.251627][T23579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.264987][T23579] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 641.296578][T23574] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.368400][T23574] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.549693][ T2934] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.602971][ T2934] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.656337][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.882280][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.341297][T23616] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 642.634242][T23623] netlink: 'syz.4.6204': attribute type 1 has an invalid length. [ 642.658449][T23623] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6204'. [ 642.686290][T23624] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 642.808930][T23623] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6204'. [ 643.211413][T23640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6205'. [ 643.344984][T23639] lo speed is unknown, defaulting to 1000 [ 643.436282][T21398] Bluetooth: hci4: command 0x0405 tx timeout [ 643.503341][T23645] syzkaller0: entered promiscuous mode [ 643.530379][T23650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 643.537169][T23645] syzkaller0: entered allmulticast mode [ 645.770142][T23639] lo speed is unknown, defaulting to 1000 [ 645.770729][T23661] lo speed is unknown, defaulting to 1000 [ 646.159796][T23683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6216'. [ 646.354338][T23661] lo speed is unknown, defaulting to 1000 [ 646.354349][T23672] lo speed is unknown, defaulting to 1000 [ 646.622175][T23693] syzkaller0: entered promiscuous mode [ 646.639617][T23693] syzkaller0: entered allmulticast mode [ 646.830953][T23672] lo speed is unknown, defaulting to 1000 [ 647.345227][T23700] IPVS: Scheduler module ip_vs_sip not found [ 647.742967][T23712] lo speed is unknown, defaulting to 1000 [ 648.217897][T23712] lo speed is unknown, defaulting to 1000 [ 648.763830][T23742] team0: entered promiscuous mode [ 648.774078][T23744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6230'. [ 648.796002][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 649.380257][T23767] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6233'. [ 649.513218][T23744] team0 (unregistering): left promiscuous mode [ 649.532885][T23744] tipc: Disabling bearer [ 649.649552][T23758] syzkaller0: entered promiscuous mode [ 649.655227][T23758] syzkaller0: entered allmulticast mode [ 649.875636][T23790] netlink: 'syz.0.6236': attribute type 12 has an invalid length. [ 649.892597][T23785] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 649.935775][T23785] batman_adv: batadv0: Removing interface: ip6gretap2 [ 649.945957][T23790] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.6236'. [ 650.022527][T23785] netlink: 'syz.1.6234': attribute type 10 has an invalid length. [ 650.361113][T23799] 8021q: adding VLAN 0 to HW filter on device bond10 [ 650.424488][T23799] bond0: (slave bond10): Enslaving as an active interface with a down link [ 650.474481][T23789] lo speed is unknown, defaulting to 1000 [ 650.506108][ T3019] ------------[ cut here ]------------ [ 650.512042][ T3019] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 650.537078][ T3019] WARNING: CPU: 1 PID: 3019 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x303/0x350 [ 650.547813][ T3019] Modules linked in: [ 650.552041][ T3019] CPU: 1 UID: 0 PID: 3019 Comm: kworker/u8:9 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 650.564162][ T3019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 650.574525][ T3019] Workqueue: bond0 bond_mii_monitor [ 650.579815][ T3019] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 650.585964][ T3019] Code: 7c fe ff ff e8 de d8 5d f8 c6 05 d7 a6 28 06 01 90 48 c7 c7 e0 11 92 8c 48 c7 c6 d2 0c 9c 8d ba 48 00 00 00 e8 6e 7c 21 f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 650.605895][ T3019] RSP: 0018:ffffc9000bf97670 EFLAGS: 00010246 [ 650.612081][ T3019] RAX: e257165c8e199100 RBX: ffff888023d64000 RCX: ffff88802fa6bc00 [ 650.620398][ T3019] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 650.628646][ T3019] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 650.636798][ T3019] R10: dffffc0000000000 R11: fffffbfff1bfa5cc R12: 1ffff110047ac85d [ 650.644889][ T3019] R13: dffffc0000000000 R14: ffffffff8c1a32e8 R15: 0000000000000000 [ 650.653052][ T3019] FS: 0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 650.662223][ T3019] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 650.668972][ T3019] CR2: 00007f6ec2df5f98 CR3: 00000000217f2000 CR4: 00000000003526f0 [ 650.677002][ T3019] Call Trace: [ 650.680292][ T3019] [ 650.683324][ T3019] ? ethtool_op_get_link+0xd/0x70 [ 650.688429][ T3019] ethtool_op_get_link+0x15/0x70 [ 650.693414][ T3019] bond_check_dev_link+0x447/0x6c0 [ 650.698619][ T3019] ? __pfx_bond_check_dev_link+0x10/0x10 [ 650.704384][ T3019] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 650.711038][ T3019] bond_mii_monitor+0x428/0x2e00 [ 650.716274][ T3019] ? __lock_acquire+0xab9/0xd20 [ 650.721211][ T3019] ? bond_mii_monitor+0x153/0x2e00 [ 650.726460][ T3019] ? __pfx_bond_mii_monitor+0x10/0x10 [ 650.731861][ T3019] ? register_lock_class+0x51/0x320 [ 650.737261][ T3019] ? __lock_acquire+0xab9/0xd20 [ 650.742155][ T3019] ? process_scheduled_works+0x9ef/0x17b0 [ 650.747984][ T3019] ? _raw_spin_unlock_irq+0x23/0x50 [ 650.753211][ T3019] ? process_scheduled_works+0x9ef/0x17b0 [ 650.759036][ T3019] ? process_scheduled_works+0x9ef/0x17b0 [ 650.764881][ T3019] process_scheduled_works+0xae1/0x17b0 [ 650.770580][ T3019] ? __pfx_process_scheduled_works+0x10/0x10 [ 650.776732][ T3019] worker_thread+0x8a0/0xda0 [ 650.781364][ T3019] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 650.787802][ T3019] ? __kthread_parkme+0x7b/0x200 [ 650.792770][ T3019] kthread+0x70e/0x8a0 [ 650.797508][ T3019] ? __pfx_worker_thread+0x10/0x10 [ 650.802838][ T3019] ? __pfx_kthread+0x10/0x10 [ 650.807753][ T3019] ? _raw_spin_unlock_irq+0x23/0x50 [ 650.813165][ T3019] ? lockdep_hardirqs_on+0x9c/0x150 [ 650.818490][ T3019] ? __pfx_kthread+0x10/0x10 [ 650.823111][ T3019] ret_from_fork+0x3fc/0x770 [ 650.827823][ T3019] ? __pfx_ret_from_fork+0x10/0x10 [ 650.833057][ T3019] ? __switch_to_asm+0x39/0x70 [ 650.837875][ T3019] ? __switch_to_asm+0x33/0x70 [ 650.842828][ T3019] ? __pfx_kthread+0x10/0x10 [ 650.847504][ T3019] ret_from_fork_asm+0x1a/0x30 [ 650.852403][ T3019] [ 650.855457][ T3019] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 650.862765][ T3019] CPU: 1 UID: 0 PID: 3019 Comm: kworker/u8:9 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 650.874583][ T3019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 650.884654][ T3019] Workqueue: bond0 bond_mii_monitor [ 650.889898][ T3019] Call Trace: [ 650.893428][ T3019] [ 650.896388][ T3019] dump_stack_lvl+0x99/0x250 [ 650.901004][ T3019] ? __asan_memcpy+0x40/0x70 [ 650.905637][ T3019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 650.910860][ T3019] ? __pfx__printk+0x10/0x10 [ 650.915487][ T3019] panic+0x2db/0x790 [ 650.919436][ T3019] ? __pfx_panic+0x10/0x10 [ 650.924071][ T3019] ? ret_from_fork_asm+0x1a/0x30 [ 650.929144][ T3019] __warn+0x31b/0x4b0 [ 650.933145][ T3019] ? __linkwatch_sync_dev+0x303/0x350 [ 650.938549][ T3019] ? __linkwatch_sync_dev+0x303/0x350 [ 650.944006][ T3019] report_bug+0x2be/0x4f0 [ 650.948371][ T3019] ? __linkwatch_sync_dev+0x303/0x350 [ 650.953764][ T3019] ? __linkwatch_sync_dev+0x303/0x350 [ 650.959159][ T3019] ? __linkwatch_sync_dev+0x305/0x350 [ 650.964543][ T3019] handle_bug+0x84/0x160 [ 650.968867][ T3019] exc_invalid_op+0x1a/0x50 [ 650.973361][ T3019] asm_exc_invalid_op+0x1a/0x20 [ 650.978288][ T3019] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 650.984261][ T3019] Code: 7c fe ff ff e8 de d8 5d f8 c6 05 d7 a6 28 06 01 90 48 c7 c7 e0 11 92 8c 48 c7 c6 d2 0c 9c 8d ba 48 00 00 00 e8 6e 7c 21 f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 651.003950][ T3019] RSP: 0018:ffffc9000bf97670 EFLAGS: 00010246 [ 651.010033][ T3019] RAX: e257165c8e199100 RBX: ffff888023d64000 RCX: ffff88802fa6bc00 [ 651.018023][ T3019] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 651.025993][ T3019] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 651.033974][ T3019] R10: dffffc0000000000 R11: fffffbfff1bfa5cc R12: 1ffff110047ac85d [ 651.041966][ T3019] R13: dffffc0000000000 R14: ffffffff8c1a32e8 R15: 0000000000000000 [ 651.050066][ T3019] ? ethtool_op_get_link+0xd/0x70 [ 651.055089][ T3019] ethtool_op_get_link+0x15/0x70 [ 651.060037][ T3019] bond_check_dev_link+0x447/0x6c0 [ 651.065159][ T3019] ? __pfx_bond_check_dev_link+0x10/0x10 [ 651.071132][ T3019] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 651.077580][ T3019] bond_mii_monitor+0x428/0x2e00 [ 651.082533][ T3019] ? __lock_acquire+0xab9/0xd20 [ 651.087383][ T3019] ? bond_mii_monitor+0x153/0x2e00 [ 651.092500][ T3019] ? __pfx_bond_mii_monitor+0x10/0x10 [ 651.097864][ T3019] ? register_lock_class+0x51/0x320 [ 651.103148][ T3019] ? __lock_acquire+0xab9/0xd20 [ 651.108000][ T3019] ? process_scheduled_works+0x9ef/0x17b0 [ 651.113720][ T3019] ? _raw_spin_unlock_irq+0x23/0x50 [ 651.118912][ T3019] ? process_scheduled_works+0x9ef/0x17b0 [ 651.124626][ T3019] ? process_scheduled_works+0x9ef/0x17b0 [ 651.130368][ T3019] process_scheduled_works+0xae1/0x17b0 [ 651.135956][ T3019] ? __pfx_process_scheduled_works+0x10/0x10 [ 651.142005][ T3019] worker_thread+0x8a0/0xda0 [ 651.146708][ T3019] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 651.153119][ T3019] ? __kthread_parkme+0x7b/0x200 [ 651.158105][ T3019] kthread+0x70e/0x8a0 [ 651.162345][ T3019] ? __pfx_worker_thread+0x10/0x10 [ 651.167453][ T3019] ? __pfx_kthread+0x10/0x10 [ 651.172076][ T3019] ? _raw_spin_unlock_irq+0x23/0x50 [ 651.177349][ T3019] ? lockdep_hardirqs_on+0x9c/0x150 [ 651.182537][ T3019] ? __pfx_kthread+0x10/0x10 [ 651.187138][ T3019] ret_from_fork+0x3fc/0x770 [ 651.191742][ T3019] ? __pfx_ret_from_fork+0x10/0x10 [ 651.196850][ T3019] ? __switch_to_asm+0x39/0x70 [ 651.201704][ T3019] ? __switch_to_asm+0x33/0x70 [ 651.206468][ T3019] ? __pfx_kthread+0x10/0x10 [ 651.211081][ T3019] ret_from_fork_asm+0x1a/0x30 [ 651.215846][ T3019] [ 651.219228][ T3019] Kernel Offset: disabled [ 651.223560][ T3019] Rebooting in 86400 seconds..