last executing test programs: 8.683683629s ago: executing program 3 (id=3180): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0xe8, 0xa8, 0x6, 0x53, @mcast1, @private2, 0x20, 0x8000, 0x0, 0x4}}) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x48, 0x4, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1000}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044}, 0x20008810) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40448c5}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r7, {0xfff2, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0400008ebbb9cffa0b21b2a25602f9bd000100"/41], 0x50) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r7, @ANYBLOB="1400050000000000000000000000e3"], 0x3c}, 0x1, 0x11}, 0x0) 8.33335741s ago: executing program 3 (id=3182): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000001001000001000000dc0000000000000079ddf87a6fb3d45ac1383b9f9d6edae23406000000000000003c6de234f51a47928ddb022e4ad434cb99572b858bb59e38"], 0x18}, 0xfc00) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1002}, 0x28) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0x1d0}, {r3, 0x80}, {r2}], 0x3, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r3, 0x0, 0x86, 0xc1, &(0x7f0000000580)="45340c8c727786e54b91e248e8b1cf41f1ea91c80b98d1ce27dec79f11e27fb4c5155c6af658c0705d999b3c1016fd0ae365ae934d9093cb400e2f29cd0587c44d7bfc69e6e19bd132e4513038c907f654cf38cad12eeceb1c8bf151c7d627c8899cc47e98731d59c2b523184053c35e6c434ffa11fd7ff102809e446bec5c9240cba55141ef", &(0x7f0000000780)=""/193, 0x94, 0x0, 0x12, 0x5, &(0x7f00000001c0)="ecfc9bbae35bbe4d410f35c21f195557215a", &(0x7f0000000640)="e8ac8497c3", 0x1, 0x0, 0x9a77}, 0x50) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r5, &(0x7f0000000380)='/', 0x0}, 0x20) recvmmsg(r4, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) r6 = socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$NFT_BATCH(r6, 0x0, 0x40) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 5.13487092s ago: executing program 2 (id=3198): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0xa}, {0xffff, 0xffff}, {0x1, 0xffef}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x5, 0xf, 0xffff, 0x17f32da6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000500)="3aab39f4a67f8595d38cb18b21aab0c3ef43fccd3c005845deee3a7a7916c7b4887d182330018c563fcfd42fc492a2c78a38cfbb198a0054b765674c483f22c2a2d7066e1ce428841a3f2aeb7c5231121edaba30308c7696f1829ee53fbb4b", &(0x7f0000000180)=""/9, 0x2}, 0x20) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) socket(0x2, 0x80805, 0x0) sendmsg(r5, &(0x7f0000006800)={0x0, 0x0, 0x0}, 0x810) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, &(0x7f0000006240)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x68, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x202b}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x39, 0x2, '\xe2\x00\x00\x00D\x00t\x95\xf7OL\xd1C\v\x0f\x03\xde\xc9\xb8\xfc\x1e\xdbPMs\xaf\xa9\xc4\xb9\x97E\xa1>\x97\x8d\x88\xb5\xbe6y\x84\x1b\'\xb7A\xa8Kn\x00Pn\xd3\xd0'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x10, 0x400000002, 0x0) 4.95979781s ago: executing program 0 (id=3200): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="b7000000810003c3bfa300000000000007030000f0ffffff720af1fff8ffffff71a4f0ff0000000065040200000000ff2d400400000000003400000001ede4ff7b1300ff000000001d440100000000007a0a00fe00ffffffdb03000040000000b500f7ff350900009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4fc2495f74baaa876156de9078d687348ef1e50becb19bc461e94f4061cff1db39271a7168e51815548000000000000000275dff00000001b6bf01c8e8b19aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cd90eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a950812d7aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031bc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d040000000000000090205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d86047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23886ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a97429ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10ef454c7702c98c4c38451fc5c702084e3fa9b184e0d0fba44acf3bb8a846cf680dfbf312cddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad801800"/3222], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80400) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r6, 0x0, 0x0, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="185ea4ae00000000000000000700"/30], &(0x7f0000000000)='syzkaller\x00'}, 0x90) socket(0x11, 0x800000003, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="b7eb0100000000180000f8ffffff0200000066fbe212aa7b5a1a"], 0x0, 0x1a, 0x0, 0x0, 0xfc5b, 0x10000}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r8}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r8}, 0x38) 4.449040293s ago: executing program 4 (id=3201): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r3, 0x0, 0x80, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) write(r3, 0x0, 0x0) write(r1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r3], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r9, 0x0, 0x7f}, 0x18) r10 = socket$inet6(0xa, 0x3, 0x3c) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e24, @broadcast}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) sendmsg$nl_generic(r8, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x10) 4.137041734s ago: executing program 3 (id=3202): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) socket$inet(0xa, 0x801, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x11) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x6, 0x0}, 0x8) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r2, @ANYBLOB="0300fcbb3700"/20, @ANYRES32=0x0, @ANYBLOB="04000000050000000300"/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="789daf9e", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0xf5, &(0x7f0000000640)=""/245, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x0, 0x4, 0x5}, 0x10, r6, 0x0, 0x0, &(0x7f0000000880)=[r2, r2, r2, r7], 0x0, 0x10, 0x80}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) 3.943022911s ago: executing program 0 (id=3204): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000055090100000000009500000000000000181100"/60, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000010000008500000085000000b70000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x12) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c01000013000500"/20, @ANYRES32=r2, @ANYBLOB="000000000000000014000300766c616e3000000000000000000000000a0001"], 0x11c}}, 0x4) 3.898352365s ago: executing program 2 (id=3205): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x6a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00200000000808004b00005c0000000000069078ac141400ac1e0001890b6be0000001ac1414aa440c070300000000000000000000000000dab5fcf1c92cb73b9c11de524f3666dae20a136f90a93c7ad13e2b89a2fe0d86a535c885c55fea522325987ccf3ac8516bf8fa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c0007727907800000204080000fe5af989782e00220f2f95447b1cd3e351f40cce23cf00"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmmsg$sock(r2, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f00000006c0)="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", 0xfc}], 0x2}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0xfffc, 0x0, 0xfffe, 0x7}, 0x8) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/uts\x00') ioctl$NS_GET_NSTYPE(r5, 0x8004b708, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x6, 0x4) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 3.792745636s ago: executing program 0 (id=3206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r7, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) ppoll(&(0x7f0000000100)=[{r4}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r9, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x6, 0x81, 0x5}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) 3.456050012s ago: executing program 1 (id=3207): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0x4, 0x4, 0x398, 0xffffffff, 0x1a8, 0x1a8, 0xd0, 0xfeffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private2, [0x0, 0x0, 0x0, 0xff000000], [0xff000000], 'pim6reg0\x00', 'team_slave_1\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x0, 0x1}, {0x4, 0x5, 0x7}, 0x1, 0xf0f}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x58}}, @common=@eui64={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYRESDEC=0x0, @ANYRES16=r0], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20a0, 0x3b10c}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x11, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x5, 0x6, 0x7ff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x51}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000780)={0x74, 0x101, 0x406, 0x7, 0x6, 0x81}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xb8}}, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x89, 0x0, 0x0, 0x0, @empty, @private}}}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x2c, r10, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x15}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0x28, r8, 0x8, 0x870bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffff8fc, 0x3a}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) 3.44572275s ago: executing program 2 (id=3208): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000005280)) 3.310078843s ago: executing program 4 (id=3209): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r7, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) ppoll(&(0x7f0000000100)=[{r4}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r9, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x6, 0x81, 0x5}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) 3.289345008s ago: executing program 2 (id=3210): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="911007000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)={0x1b8, r2, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1a}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4a5920b9b604a315f65f63d88a1166fece939cd3fdbbabe9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5c9f3742ee8a6ad4d63ed2f369d9a3e9e81ef5871088eafd"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ba808baba74dc5f5def77f2f81d27c62948b7c1bf2c6194b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ea478da876730ba9936ff5b0901b40d53dea2c26721e11fa"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "81b3d4a803074632d5b7291e91294eb9b76292467d738689"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d73214edb6ed65683f93ba5bc0696b8ac290fef255c75251"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "101dc76fc95a172b077c6dcd8ba0b8c2091047a6db6d84d2"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x3}, &(0x7f0000000140)=0x4, 0x0, 0x2, 0x3ff, 0x7, 0x8000000000000000, 0x8, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfffffff4, 0x5}, 0x0, 0x0, 0x1c4f, 0x5, 0x8, 0x8, 0x13}}], 0xb0}, 0x0) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="84010000", @ANYRES16=r9, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000fffe00080009000000000008000a000000000008000a00000002"], 0x184}}, 0x0) 3.18447677s ago: executing program 3 (id=3211): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1eae8f721276f1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001080)={0x34, r4, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x24000010}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r9, 0x89e4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) socket$inet6(0xa, 0x6, 0x20005) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000800000a5c000000090a010320000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c0800034000000008080007400000002e080006400000000008000f4000000002140000001000010000000000000000000084000a"], 0x84}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x28, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x0, 0x4021}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ac1}]}, 0x28}}, 0x0) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, 0x0, 0x8008090) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x40000) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) 3.043143999s ago: executing program 1 (id=3212): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0xe8, 0xa8, 0x6, 0x53, @mcast1, @private2, 0x20, 0x8000, 0x0, 0x4}}) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x48, 0x4, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1000}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044}, 0x20008810) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40448c5}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r7, {0xfff2, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0400008ebbb9cffa0b21b2a25602f9bd000100"/41], 0x50) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r7, @ANYBLOB="1400050000000000000000000000e3"], 0x3c}, 0x1, 0x11}, 0x0) 2.504760196s ago: executing program 0 (id=3213): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01030000030000000008000b00", @ANYRES32, @ANYBLOB, @ANYRESHEX, @ANYRESOCT=r3, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x400c001}, 0x20000090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x40}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r5}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70300000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 2.487678702s ago: executing program 2 (id=3214): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r4, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="400000b29e29d1582b61c6002652703400"/33, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000280), &(0x7f00000000c0)='%pi6 \x00'}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x1d, 0x2, 0x6) unshare(0x22020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7, 0x0, 0x4}, 0x18) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r9 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) recvmmsg$unix(r9, &(0x7f0000012b80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)=""/20, 0x14}, {0x0}], 0x2}}], 0x1, 0x60, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000006800090300000000000000000a0000000000000004000b0008000100010000000f6a02d5b1ed4c2b472ed789c8e16fb93900944afee4e9d1ebe61a73338763c48514ddd87ca22aef3a27b825ca64838018e95043918cb58855cfe6fa90501c98361290a7ae06f87eb9fb2900eba0dc71daa100624d31d74d7444ba5d974fdc4fabb2da2b698b63615289fa2934243816b4e079debcbac135ae8ca0afc2d561d203082bfcd2424b91e3e69a9679830f8b5743786bf6c07fbeae45a353d1308c998d22c81c098adc916e7165e99428d86e5962886bf2e8059e743fd79f5e9bf9cec09b3261f900448a24"], 0x24}}, 0x0) socket(0x2, 0x5, 0x0) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 2.421733484s ago: executing program 1 (id=3215): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x22020400) unshare(0x24020400) r2 = socket(0x1, 0x2, 0x0) bind$unix(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d61637365630000180002800c000400010000010002800008000500feffff7f08000500", @ANYRES32=r10], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000240000000400000002"], 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r11}, &(0x7f0000000700), &(0x7f0000000740)=r7, 0x600}, 0x20) 2.159689988s ago: executing program 4 (id=3216): connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x3) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8004) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002180)=@o_path={&(0x7f0000001080)='./file0\x00', 0x0, 0x8, r6}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) 1.572044633s ago: executing program 3 (id=3217): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x6a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00200000000808004b00005c0000000000069078ac141400ac1e0001890b6be0000001ac1414aa440c070300000000000000000000000000dab5fcf1c92cb73b9c11de524f3666dae20a136f90a93c7ad13e2b89a2fe0d86a535c885c55fea522325987ccf3ac8516bf8fa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c0007727907800000204080000fe5af989782e00220f2f95447b1cd3e351f40cce23cf00"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmmsg$sock(r2, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f00000006c0)="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", 0xfc}], 0x2}}], 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0xfffc, 0x0, 0xfffe, 0x7}, 0x8) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/uts\x00') ioctl$NS_GET_NSTYPE(r5, 0x8004b708, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x6, 0x4) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 1.543171589s ago: executing program 1 (id=3218): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) unshare(0x6a040000) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000880)=0x7ffffffd, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x24, r3, 0x1, 0x70bd27, 0x2000004, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) getsockopt$ARPT_SO_GET_REVISION_TARGET(r9, 0x0, 0x63, &(0x7f00000007c0)={'ipvs\x00'}, &(0x7f0000000800)=0x1e) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000020008207b8af8ff00000000bfa2000000000000070200632e1895ffb703000008000000b70400000200000085000000a600000095000000000000002c4f2f9f9dc80605a97d1dca2e1ecad5b90193db7bb561f018f61efa575d583d23f3e37a5dfd19e871b376fc8fb92d91bf49537f683361dab9faef232652d66d6e20fea00a5d765208820e6b87f2d9c0cfd36c11f8"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$IPSET_CMD_GET_BYINDEX(r7, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0xf, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x60008014}, 0x80000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) 1.352739409s ago: executing program 2 (id=3219): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x6a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00200000000808004b00005c0000000000069078ac141400ac1e0001890b6be0000001ac1414aa440c070300000000000000000000000000dab5fcf1c92cb73b9c11de524f3666dae20a136f90a93c7ad13e2b89a2fe0d86a535c885c55fea522325987ccf3ac8516bf8fa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c0007727907800000204080000fe5af989782e00220f2f95447b1cd3e351f40cce23cf00"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r1, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0xfffc, 0x0, 0xfffe, 0x7}, 0x8) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/uts\x00') ioctl$NS_GET_NSTYPE(r5, 0x8004b708, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x6, 0x4) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 1.079963193s ago: executing program 4 (id=3220): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000005280)) 1.057267191s ago: executing program 0 (id=3221): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2fc4}, 0x20) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0xffffffe1, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x44040}, 0x20000800) ioctl$sock_netrom_SIOCADDRT(r0, 0x61f0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@newtaction={0x18, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x4}]}, 0x18}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@deltclass={0x24, 0x29, 0xf0a, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0xd}, {0xd, 0x6}, {0x4, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008080}, 0x880) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000000040)=0xcb) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x3, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xb, 0x20000000, 0x806, 0x3}, @private=0xa010100, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x44904) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x20010, 0xffffffffffffffff, 0x3000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000740)=""/235, 0xeb}, 0x0) sendmsg$tipc(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1f6fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f906", 0x8f}, {&(0x7f0000000040)="8d03cab9cb86bcdcffec", 0xa}], 0x2, 0x0, 0x0, 0x24044840}, 0x4000000) close(r7) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCGUNIT(r4, 0x80047456, &(0x7f00000001c0)) 854.423986ms ago: executing program 4 (id=3222): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0x4, 0x4, 0x398, 0xffffffff, 0x1a8, 0x1a8, 0xd0, 0xfeffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private2, [0x0, 0x0, 0x0, 0xff000000], [0xff000000], 'pim6reg0\x00', 'team_slave_1\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x0, 0x1}, {0x4, 0x5, 0x7}, 0x1, 0xf0f}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x58}}, @common=@eui64={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYRESDEC=0x0, @ANYRES16=r0], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20a0, 0x3b10c}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x11, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x5, 0x6, 0x7ff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x51}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000780)={0x74, 0x101, 0x406, 0x7, 0x6, 0x81}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r13 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x89, 0x0, 0x0, 0x0, @empty, @private}}}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x2c, r11, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x15}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0x28, r8, 0x8, 0x870bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xfffff8fc, 0x3a}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) 813.920795ms ago: executing program 1 (id=3223): socket$inet6(0xa, 0x6, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000096d132478102268d00", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0xfffffffd}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$packet(0x11, 0x3, 0x300) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x34, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x18, 0x0, 0x0, r4}, [@IFA_LABEL={0x14, 0x3, 'ip_vti0\x00'}, @IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x34}}, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2, 0x8}, 0x1c) getsockopt$inet_mreqn(r6, 0x0, 0x20, 0x0, &(0x7f0000000080)) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x9, 0x1000, &(0x7f0000000b00)=""/4096, 0x41000, 0x44, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000100)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x1, 0x3, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000240)="960b8b3978bb28beb2a7a6632df4", 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x50) 600.334182ms ago: executing program 4 (id=3224): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r7, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) ppoll(&(0x7f0000000100)=[{r4}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r9, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x6, 0x81, 0x5}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) 456.457371ms ago: executing program 3 (id=3225): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000dac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="e8000000100003052abd70000c00000000000000", @ANYRES32=0x0, @ANYBLOB="3a000000a0010200a80012800b00010069703676746900009800028014000400fe80000000000000000000000000000a09c6dc94fda091da000000000000000000000000080002000700000014000500fc00000000000000000000000000000014000400fe8000000000000000000000000000bb140004000000000000000000000000000000000114000500fc00000000000000000000000000000114000500fe88000000000000000000000000000108002300f9ffffff0a000100aaaaaaaaaaaa00000a000200aaaaaaaaaabb0000"], 0xe8}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$packet(r2, &(0x7f0000000680)={0x11, 0x2, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x4008880) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d339707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf90a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089070000009876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13a0100000082c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72705edfa2cddb01f44c850e4ea450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e8894680600000000000000db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534c88d443ac8b3685135dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6faa21b0f5a0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f416661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7ea6a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d136ecc87185f2437c4fce146d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae0000000000007c012779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53d2f64ec521f6fa1cd02843a5e16074d86c9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61af8e8c473a7585436730db75da167481ab8921fe051b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a1167b948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfea4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f0000b2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730daa68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d01005a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303d000000000000000000000000000000b17fedd6b6501a47d0e5b510f4a4fab5a62d5fa7e8ead851b01dbfdfe5823c2600"/3432], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x18, 0x1412, 0x200, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x8881}, 0x200000c0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r7) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r8, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040001}, 0x810) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x40, r11, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x40}}, 0x40048a4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r3, 0x4, 0x53, 0x5, 0x3, 0x40, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x700, 0x8, 0xe, 0xce}}) r14 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r14, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x35, 0x8, 0x0, 0xffffffff}, {0x6, 0xdf, 0x0, 0x1}]}, 0x10) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000500)={@empty, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x5, 0xfffb, 0x0, 0x9, 0x1800000, r13}) r15 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r15, 0x2000000, 0x4, 0x0, &(0x7f00000000c0)="3a1d5bd9", 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_DEL_PMK(r6, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="08002dbd7000fddbdf257c0000000a0106000802110000010000"], 0x1d}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 327.384319ms ago: executing program 1 (id=3226): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x6a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00200000000808004b00005c0000000000069078ac141400ac1e0001890b6be0000001ac1414aa440c070300000000000000000000000000dab5fcf1c92cb73b9c11de524f3666dae20a136f90a93c7ad13e2b89a2fe0d86a535c885c55fea522325987ccf3ac8516bf8fa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c0007727907800000204080000fe5af989782e00220f2f95447b1cd3e351f40cce23cf00"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmmsg$sock(r2, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f00000006c0)="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", 0xfc}], 0x2}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0xfffc, 0x0, 0xfffe, 0x7}, 0x8) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/uts\x00') ioctl$NS_GET_NSTYPE(r5, 0x8004b708, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x6, 0x4) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 0s ago: executing program 0 (id=3227): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x7, 0x9450}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344, 0x41424344}, 0x4, 0xffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x2, 0x2e, 0x3c, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote, {[@timestamp_addr={0x44, 0xc, 0x9d, 0x1, 0x9, [{@broadcast, 0x898}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0x91, 0x1, 0x1}]}}, {{0x4e24, 0x4e23, 0x41424344, r1, 0x1, 0x0, 0x5, 0x8, 0xfffd, 0x0, 0x57}}}}}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200)=0x10001, 0x12) sendfile(r3, r2, 0x0, 0xf03a0005) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$inet(r5, &(0x7f0000000d00)={&(0x7f0000000400)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000900), 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x280}, 0x8080) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="7c0000001200050926bd7000fedbdf25210c0b004e224e260400000023090000000000000500000001040020040000000700000002000000", @ANYRES32=0x0, @ANYBLOB="0000010005200000560000009d0400002e000100060008"], 0x7c}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x38, r10, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_IE={0xb, 0x3, "73d84474b3f432"}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r8, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r11}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r12, &(0x7f00000000c0), 0x9) sendfile(r12, r4, 0x0, 0x10000) kernel console output (not intermixed with test programs): defaulting to 1000 [ 398.777159][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 398.992756][T14841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2332'. [ 399.255447][T14850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2334'. [ 399.473660][T14850] bond6 (unregistering): Released all slaves [ 399.686897][T14860] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2337'. [ 399.700608][T14860] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2337'. [ 399.737697][T14863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2338'. [ 399.757223][T14860] dvmrp0: left allmulticast mode [ 399.789590][T14864] rdma_rxe: rxe_newlink: failed to add lo [ 399.826598][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 400.236243][T14864] tipc: Resetting bearer [ 400.253138][T14864] tipc: Resetting bearer [ 400.308010][T14864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.340124][T14864] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.361990][T14864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.533759][T14874] wg1 speed is unknown, defaulting to 1000 [ 400.857040][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 401.351020][T14897] tipc: Resetting bearer [ 401.358202][T14897] syzkaller0: left promiscuous mode [ 401.363433][T14897] syzkaller0: left allmulticast mode [ 401.462288][T14899] syzkaller0: entered promiscuous mode [ 401.468256][T14899] syzkaller0: entered allmulticast mode [ 401.487462][T14897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2346'. [ 401.547788][T14897] hsr_slave_0: left promiscuous mode [ 401.555727][T14897] hsr_slave_1: left promiscuous mode [ 401.576024][T14901] netlink: 'syz.1.2345': attribute type 1 has an invalid length. [ 401.623434][T14901] netlink: 'syz.1.2345': attribute type 1 has an invalid length. [ 401.637578][T14901] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2345'. [ 401.896574][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 402.564456][T14914] syzkaller0: entered promiscuous mode [ 402.578278][T14914] syzkaller0: entered allmulticast mode [ 402.885118][T14926] wg1 speed is unknown, defaulting to 1000 [ 402.936882][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 402.975763][T14923] netlink: 'syz.3.2354': attribute type 16 has an invalid length. [ 402.994568][T14923] netlink: 'syz.3.2354': attribute type 17 has an invalid length. [ 403.490060][T14931] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2355'. [ 403.603710][T14939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2355'. [ 403.990813][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 404.800582][T14935] wg1 speed is unknown, defaulting to 1000 [ 404.809755][T14936] wg1 speed is unknown, defaulting to 1000 [ 405.026968][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 405.115063][T14952] tipc: Enabling of bearer rejected, already enabled [ 405.125346][T14952] syzkaller0: entered promiscuous mode [ 405.131192][T14952] syzkaller0: entered allmulticast mode [ 405.181670][T14950] wg1 speed is unknown, defaulting to 1000 [ 405.221801][T14956] wg1 speed is unknown, defaulting to 1000 [ 405.618959][T14965] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 406.023819][T14982] lo speed is unknown, defaulting to 1000 [ 406.035237][T14982] lo speed is unknown, defaulting to 1000 [ 406.045533][T14985] wg1 speed is unknown, defaulting to 1000 [ 406.056585][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 406.143229][T14982] lo speed is unknown, defaulting to 1000 [ 406.145978][T14986] netlink: 'syz.0.2367': attribute type 4 has an invalid length. [ 406.166019][T14982] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 406.275169][T14982] lo speed is unknown, defaulting to 1000 [ 406.333294][T14982] lo speed is unknown, defaulting to 1000 [ 406.353637][T14982] lo speed is unknown, defaulting to 1000 [ 406.367887][T14982] lo speed is unknown, defaulting to 1000 [ 406.375665][T14982] lo speed is unknown, defaulting to 1000 [ 406.398948][T14982] lo speed is unknown, defaulting to 1000 [ 406.565483][T14992] netlink: 'syz.3.2368': attribute type 16 has an invalid length. [ 406.582541][T14992] netlink: 'syz.3.2368': attribute type 17 has an invalid length. [ 406.602711][T14992] tipc: Resetting bearer [ 406.696980][T14997] netlink: 'syz.0.2369': attribute type 12 has an invalid length. [ 406.995965][T15005] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2371'. [ 407.038726][T15007] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2370'. [ 407.070340][T15008] pimreg: entered allmulticast mode [ 407.097005][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 407.144391][T15011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2371'. [ 408.114428][T15024] gtp0: entered promiscuous mode [ 408.146550][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 408.166585][T15024] gtp0: entered allmulticast mode [ 408.213697][T15029] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2376'. [ 408.291302][T15026] wg1 speed is unknown, defaulting to 1000 [ 408.308356][T15026] lo speed is unknown, defaulting to 1000 [ 408.350784][T15029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.494901][T15042] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2381'. [ 408.504868][T15042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2381'. [ 408.548362][T15042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2381'. [ 408.765839][T15045] tipc: Enabled bearer , priority 0 [ 408.775122][T15045] syzkaller0: entered promiscuous mode [ 408.781574][T15045] syzkaller0: entered allmulticast mode [ 408.805282][T15045] tipc: Resetting bearer [ 408.815692][T15044] tipc: Resetting bearer [ 408.830062][T15044] tipc: Disabling bearer [ 409.103031][T15051] netlink: 'syz.3.2383': attribute type 6 has an invalid length. [ 409.120176][T15051] netlink: 'syz.3.2383': attribute type 12 has an invalid length. [ 409.129087][T15051] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.2383'. [ 409.177078][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 409.359150][T15058] wg1 speed is unknown, defaulting to 1000 [ 409.366069][T15058] lo speed is unknown, defaulting to 1000 [ 409.414751][T15061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2384'. [ 409.733245][T15065] wg1 speed is unknown, defaulting to 1000 [ 409.743272][T15065] lo speed is unknown, defaulting to 1000 [ 410.193391][T15075] wg1 speed is unknown, defaulting to 1000 [ 410.216556][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 410.241387][T15075] lo speed is unknown, defaulting to 1000 [ 410.475554][T15081] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2389'. [ 410.552899][T15089] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2390'. [ 411.067794][T15107] netlink: 'syz.1.2396': attribute type 6 has an invalid length. [ 411.082650][T15107] netlink: 'syz.1.2396': attribute type 12 has an invalid length. [ 411.092501][T15107] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2396'. [ 411.246721][T15109] wg1 speed is unknown, defaulting to 1000 [ 411.256976][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 411.281470][T15109] lo speed is unknown, defaulting to 1000 [ 412.192979][T15138] netdevsim0: entered promiscuous mode [ 412.257873][T15138] netdevsim0: entered allmulticast mode [ 412.263993][T15138] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 412.306526][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 412.459868][T15151] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2405'. [ 413.346902][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 414.230796][ T5232] udevd[5232]: worker [5873] /devices/virtual/block/nbd0 timeout; kill it [ 414.246209][ T5232] udevd[5232]: seq 17450 '/devices/virtual/block/nbd0' killed [ 414.380085][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 414.579100][T15158] wg1 speed is unknown, defaulting to 1000 [ 414.598458][T15158] lo speed is unknown, defaulting to 1000 [ 414.684679][T15182] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2414'. [ 414.705451][T15175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2411'. [ 414.928723][T15178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.321738][T15200] wg1 speed is unknown, defaulting to 1000 [ 415.330624][T15200] lo speed is unknown, defaulting to 1000 [ 415.416901][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 415.551133][T15205] syz_tun: entered allmulticast mode [ 415.624207][T15205] dvmrp8: entered allmulticast mode [ 415.658454][T15204] wg1 speed is unknown, defaulting to 1000 [ 415.669524][T15204] lo speed is unknown, defaulting to 1000 [ 415.777196][T15213] netlink: 'syz.0.2418': attribute type 23 has an invalid length. [ 415.819130][T15205] wg1 speed is unknown, defaulting to 1000 [ 415.865359][T15215] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2421'. [ 415.894429][T15215] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2421'. [ 415.903833][T15215] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2421'. [ 415.914566][T15215] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2421'. [ 415.923901][T15215] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2421'. [ 415.934077][T15215] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2421'. [ 415.944849][T15215] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2421'. [ 415.954491][T15215] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2421'. [ 415.984123][T15205] lo speed is unknown, defaulting to 1000 [ 416.142190][T15228] netlink: 'syz.4.2425': attribute type 10 has an invalid length. [ 416.190173][T15230] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 416.198477][T15222] wg1 speed is unknown, defaulting to 1000 [ 416.264479][T15234] netlink: 'syz.4.2425': attribute type 10 has an invalid length. [ 416.284653][T15228] dummy0: entered promiscuous mode [ 416.298866][T15236] netlink: 'syz.2.2427': attribute type 16 has an invalid length. [ 416.307593][T15236] netlink: 'syz.2.2427': attribute type 17 has an invalid length. [ 416.325534][T15228] team0: Port device dummy0 added [ 416.341083][T15222] lo speed is unknown, defaulting to 1000 [ 416.384554][T15234] dummy0: left promiscuous mode [ 416.392133][T15234] team0: Port device dummy0 removed [ 416.466669][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 416.700056][T15202] syz_tun: left allmulticast mode [ 416.717812][T15202] dvmrp8: left allmulticast mode [ 417.046216][T15244] wg1 speed is unknown, defaulting to 1000 [ 417.055603][T15244] lo speed is unknown, defaulting to 1000 [ 417.064253][T15248] !: renamed from dummy0 (while UP) [ 417.182603][T15259] netlink: 'syz.2.2433': attribute type 6 has an invalid length. [ 417.195707][T15248] wg1 speed is unknown, defaulting to 1000 [ 417.216057][T15248] lo speed is unknown, defaulting to 1000 [ 417.254717][T15259] netlink: 'syz.2.2433': attribute type 12 has an invalid length. [ 417.507141][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 418.227056][ T51] Bluetooth: hci0: command tx timeout [ 418.546523][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 419.291755][T15291] tipc: Enabling of bearer rejected, failed to enable media [ 419.500216][T15312] tipc: Resetting bearer [ 419.522485][T15314] netlink: 'syz.3.2440': attribute type 13 has an invalid length. [ 419.542338][T15314] netlink: 'syz.3.2440': attribute type 17 has an invalid length. [ 419.577193][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 419.675474][ T9570] lo speed is unknown, defaulting to 1000 [ 419.696276][ T9570] syz2: Port: 1 Link DOWN [ 420.011579][T15314] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.075747][T15341] __nla_validate_parse: 128 callbacks suppressed [ 420.075764][T15341] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2443'. [ 420.317739][ T55] block nbd0: Possible stuck request ffff888025790000: control (read@0,1024B). Runtime 210 seconds [ 420.329235][ T55] block nbd0: Possible stuck request ffff8880257901c0: control (read@1024,1024B). Runtime 210 seconds [ 420.341010][ T55] block nbd0: Possible stuck request ffff888025790380: control (read@2048,1024B). Runtime 210 seconds [ 420.352823][ T55] block nbd0: Possible stuck request ffff888025790540: control (read@3072,1024B). Runtime 210 seconds [ 420.530397][T15314] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 420.551716][T15352] netlink: 'syz.0.2444': attribute type 23 has an invalid length. [ 420.607507][T15354] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2445'. [ 420.626733][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 420.644830][T15325] xfrm0: entered promiscuous mode [ 420.662938][T15325] xfrm0: entered allmulticast mode [ 420.822833][T15342] syz_tun: entered allmulticast mode [ 420.853762][T15346] syz_tun: left allmulticast mode [ 420.933538][T15317] wg1 speed is unknown, defaulting to 1000 [ 420.954627][T15361] netlink: 'syz.1.2445': attribute type 1 has an invalid length. [ 420.973943][T15330] wg1 speed is unknown, defaulting to 1000 [ 420.980572][T15317] lo speed is unknown, defaulting to 1000 [ 421.002650][T15347] wg1 speed is unknown, defaulting to 1000 [ 421.054163][T15347] lo speed is unknown, defaulting to 1000 [ 421.092892][T15330] lo speed is unknown, defaulting to 1000 [ 421.656906][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 421.683336][T15376] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2449'. [ 422.229019][T15388] tipc: Enabled bearer , priority 0 [ 422.238606][T15388] syzkaller0: entered promiscuous mode [ 422.244090][T15388] syzkaller0: entered allmulticast mode [ 422.284395][T15388] tipc: Resetting bearer [ 422.306805][T15387] tipc: Resetting bearer [ 422.331373][T15387] tipc: Disabling bearer [ 422.423258][T15392] tipc: Enabling of bearer rejected, failed to enable media [ 422.434227][T15392] syzkaller0: entered promiscuous mode [ 422.439817][T15392] syzkaller0: entered allmulticast mode [ 422.461039][T15392] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 422.523490][T15394] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 422.696646][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 422.781157][T15401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2458'. [ 422.793910][T15401] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2458'. [ 422.885811][T15405] wg1 speed is unknown, defaulting to 1000 [ 422.910126][T15405] lo speed is unknown, defaulting to 1000 [ 422.929681][T15403] tipc: Started in network mode [ 422.934564][T15403] tipc: Node identity 4, cluster identity 4711 [ 422.942114][T15403] tipc: Node number set to 4 [ 422.978039][T15403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2459'. [ 423.011869][T15412] netlink: 'syz.4.2461': attribute type 13 has an invalid length. [ 423.025934][T15412] netlink: 'syz.4.2461': attribute type 17 has an invalid length. [ 423.043308][T15403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.065634][T15409] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 423.192570][T15412] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.245134][T15412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 423.343680][T15424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2463'. [ 423.454017][T15412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.618819][T15421] wg1 speed is unknown, defaulting to 1000 [ 423.627043][T15421] lo speed is unknown, defaulting to 1000 [ 423.694088][T15446] tipc: Enabling of bearer rejected, failed to enable media [ 423.708911][T15444] netlink: 'syz.0.2467': attribute type 16 has an invalid length. [ 423.719132][T15444] netlink: 'syz.0.2467': attribute type 17 has an invalid length. [ 423.737153][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 423.788308][T15450] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 423.803275][T15447] tipc: Enabled bearer , priority 0 [ 423.827723][T15451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2464'. [ 423.834412][T15444] IPv6: NLM_F_REPLACE set, but no existing node found! [ 423.863880][T15449] syzkaller0: entered promiscuous mode [ 423.870903][T15449] syzkaller0: entered allmulticast mode [ 423.993865][T15446] syzkaller0: entered promiscuous mode [ 424.003601][T15446] syzkaller0: entered allmulticast mode [ 424.018849][T15449] tipc: Resetting bearer [ 424.064231][T15437] tipc: Resetting bearer [ 424.086120][T15437] tipc: Disabling bearer [ 424.124557][T15457] wg1 speed is unknown, defaulting to 1000 [ 424.134372][T15457] lo speed is unknown, defaulting to 1000 [ 424.156960][T15461] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2469'. [ 424.187717][T15461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2469'. [ 424.215861][T15461] netlink: 'syz.3.2469': attribute type 2 has an invalid length. [ 424.775686][T15486] nbd: socks must be embedded in a SOCK_ITEM attr [ 424.786656][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 425.222000][T15496] bond2: (slave erspan0): Releasing active interface [ 425.243114][T15496] ip6gretap2: entered promiscuous mode [ 425.369430][T15496] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 425.392005][T15511] netlink: 'syz.0.2480': attribute type 1 has an invalid length. [ 425.503636][T15503] veth5: entered promiscuous mode [ 425.555569][T15506] wg1 speed is unknown, defaulting to 1000 [ 425.566079][T15506] lo speed is unknown, defaulting to 1000 [ 425.736944][T15520] tipc: Enabling of bearer rejected, failed to enable media [ 425.787533][T15520] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 425.816856][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 425.824198][T15520] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 425.868905][T15520] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 426.014137][T15529] netlink: 'syz.2.2483': attribute type 1 has an invalid length. [ 426.029766][T15529] __nla_validate_parse: 3 callbacks suppressed [ 426.029782][T15529] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2483'. [ 426.087036][T15529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2483'. [ 426.856604][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 427.350946][T15568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2491'. [ 427.429974][T15573] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2491'. [ 427.443731][T15573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.472931][T15570] wg1 speed is unknown, defaulting to 1000 [ 427.498540][T15570] lo speed is unknown, defaulting to 1000 [ 427.896947][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 428.059239][T15583] bridge0: entered promiscuous mode [ 428.371071][T15586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2495'. [ 428.411686][T15588] tipc: Enabling of bearer rejected, failed to enable media [ 428.422531][T15588] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 428.493056][T15593] tipc: Resetting bearer [ 428.523211][T15594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2494'. [ 428.681879][T15604] netlink: 'syz.0.2499': attribute type 16 has an invalid length. [ 428.692910][T15604] netlink: 'syz.0.2499': attribute type 17 has an invalid length. [ 428.745566][T15604] IPv6: NLM_F_REPLACE set, but no existing node found! [ 428.823162][T15606] tipc: Enabled bearer , priority 0 [ 428.832135][T15606] syzkaller0: entered promiscuous mode [ 428.837376][T15610] netlink: 'syz.0.2502': attribute type 16 has an invalid length. [ 428.838183][T15606] syzkaller0: entered allmulticast mode [ 428.857017][T15610] netlink: 'syz.0.2502': attribute type 17 has an invalid length. [ 428.901124][T15610] IPv6: NLM_F_REPLACE set, but no existing node found! [ 428.902823][T15606] tipc: Resetting bearer [ 428.946642][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 429.288885][T15623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2504'. [ 429.315601][T15623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2504'. [ 429.515381][T15627] wg1 speed is unknown, defaulting to 1000 [ 429.539638][T15627] lo speed is unknown, defaulting to 1000 [ 429.544963][T15630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2506'. [ 429.606119][T15631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2505'. [ 429.903589][T15605] tipc: Resetting bearer [ 429.939170][T15605] tipc: Disabling bearer [ 429.977056][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 430.126783][T15639] tipc: Enabling of bearer rejected, failed to enable media [ 430.211029][T15647] netlink: 'syz.1.2508': attribute type 2 has an invalid length. [ 430.394646][T15646] wg1 speed is unknown, defaulting to 1000 [ 430.497125][T15646] lo speed is unknown, defaulting to 1000 [ 430.583304][T15662] netlink: 'syz.1.2512': attribute type 16 has an invalid length. [ 430.612156][T15662] netlink: 'syz.1.2512': attribute type 17 has an invalid length. [ 430.768064][T15662] IPv6: NLM_F_REPLACE set, but no existing node found! [ 431.016534][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 431.387717][T15684] netlink: 'syz.2.2516': attribute type 16 has an invalid length. [ 431.400202][T15684] netlink: 'syz.2.2516': attribute type 17 has an invalid length. [ 431.491605][T15684] IPv6: NLM_F_REPLACE set, but no existing node found! [ 431.624244][T15686] __nla_validate_parse: 1 callbacks suppressed [ 431.624261][T15686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2517'. [ 431.730623][T15691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2517'. [ 432.066916][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 432.193784][T15700] wg1 speed is unknown, defaulting to 1000 [ 432.219682][T15700] lo speed is unknown, defaulting to 1000 [ 432.320939][T15703] tipc: Enabling of bearer rejected, failed to enable media [ 432.350148][T15703] syzkaller0: entered promiscuous mode [ 432.365642][T15703] syzkaller0: entered allmulticast mode [ 432.399332][T15703] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 432.838880][T15719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2525'. [ 432.871626][T15719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2525'. [ 432.944992][T15721] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.2526'. [ 433.042431][ T59] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.064000][ T59] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.096634][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 433.309111][ T59] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.360216][ T59] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.372540][T15731] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2529'. [ 433.384644][T15731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2529'. [ 433.408475][T15731] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2529'. [ 433.608452][T15744] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2533'. [ 433.708817][T15745] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2533'. [ 433.730466][T15745] netlink: zone id is out of range [ 433.766522][T15745] netlink: zone id is out of range [ 433.775814][T15745] netlink: get zone limit has 8 unknown bytes [ 434.136834][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 434.523943][T15759] wg1 speed is unknown, defaulting to 1000 [ 434.591425][T15759] lo speed is unknown, defaulting to 1000 [ 434.724545][T15762] wg1 speed is unknown, defaulting to 1000 [ 434.776761][ T5876] Bluetooth: hci4: command 0x0405 tx timeout [ 434.804406][T15769] wg1 speed is unknown, defaulting to 1000 [ 434.817584][T15762] lo speed is unknown, defaulting to 1000 [ 434.833258][T15769] lo speed is unknown, defaulting to 1000 [ 434.967864][T15783] netlink: 'syz.1.2540': attribute type 10 has an invalid length. [ 435.176555][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 435.286235][T15794] netlink: zone id is out of range [ 435.292704][T15794] netlink: zone id is out of range [ 435.297932][T15794] netlink: get zone limit has 8 unknown bytes [ 436.215741][T15821] syz.0.2547: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 436.236853][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 436.356590][T15821] CPU: 0 UID: 0 PID: 15821 Comm: syz.0.2547 Not tainted syzkaller #0 PREEMPT(full) [ 436.356618][T15821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 436.356637][T15821] Call Trace: [ 436.356648][T15821] [ 436.356658][T15821] dump_stack_lvl+0x189/0x250 [ 436.356688][T15821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.356709][T15821] ? __pfx__printk+0x10/0x10 [ 436.356733][T15821] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 436.356753][T15821] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 436.356775][T15821] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 436.356798][T15821] warn_alloc+0x214/0x310 [ 436.356823][T15821] ? stack_depot_save_flags+0x40/0x860 [ 436.356849][T15821] ? __pfx_warn_alloc+0x10/0x10 [ 436.356875][T15821] ? kasan_save_track+0x4f/0x80 [ 436.356895][T15821] ? xskq_create+0x56/0x170 [ 436.356916][T15821] ? xsk_init_queue+0xb0/0x110 [ 436.356935][T15821] ? xsk_setsockopt+0x4dc/0x8d0 [ 436.356960][T15821] ? do_sock_setsockopt+0x179/0x1b0 [ 436.356976][T15821] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 436.356992][T15821] ? do_syscall_64+0xfa/0x3b0 [ 436.357007][T15821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.357032][T15821] __vmalloc_node_range_noprof+0x125/0x12f0 [ 436.357088][T15821] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 436.357112][T15821] ? __kasan_kmalloc+0x93/0xb0 [ 436.357136][T15821] vmalloc_user_noprof+0xad/0xf0 [ 436.357157][T15821] ? xskq_create+0xbf/0x170 [ 436.357178][T15821] xskq_create+0xbf/0x170 [ 436.357202][T15821] xsk_init_queue+0xb0/0x110 [ 436.357225][T15821] xsk_setsockopt+0x4dc/0x8d0 [ 436.357248][T15821] ? __pfx_xsk_setsockopt+0x10/0x10 [ 436.357271][T15821] ? __pfx_aa_sk_perm+0x10/0x10 [ 436.357302][T15821] ? aa_sock_opt_perm+0xff/0x1b0 [ 436.357322][T15821] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 436.357339][T15821] ? __pfx_xsk_setsockopt+0x10/0x10 [ 436.357364][T15821] do_sock_setsockopt+0x179/0x1b0 [ 436.357391][T15821] __x64_sys_setsockopt+0x13f/0x1b0 [ 436.357418][T15821] do_syscall_64+0xfa/0x3b0 [ 436.357434][T15821] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.357457][T15821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.357474][T15821] ? clear_bhb_loop+0x60/0xb0 [ 436.357495][T15821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.357512][T15821] RIP: 0033:0x7ff87538eec9 [ 436.357539][T15821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.357555][T15821] RSP: 002b:00007ff8762b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 436.357575][T15821] RAX: ffffffffffffffda RBX: 00007ff8755e6180 RCX: 00007ff87538eec9 [ 436.357588][T15821] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 436.357600][T15821] RBP: 00007ff875411f91 R08: 0000000000000004 R09: 0000000000000000 [ 436.357611][T15821] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.357623][T15821] R13: 00007ff8755e6218 R14: 00007ff8755e6180 R15: 00007fff53c92de8 [ 436.357655][T15821] [ 436.357782][T15821] Mem-Info: [ 436.766963][T15821] active_anon:13209 inactive_anon:0 isolated_anon:0 [ 436.766963][T15821] active_file:3464 inactive_file:40025 isolated_file:0 [ 436.766963][T15821] unevictable:768 dirty:271 writeback:0 [ 436.766963][T15821] slab_reclaimable:12470 slab_unreclaimable:160004 [ 436.766963][T15821] mapped:40899 shmem:5252 pagetables:1267 [ 436.766963][T15821] sec_pagetables:0 bounce:0 [ 436.766963][T15821] kernel_misc_reclaimable:0 [ 436.766963][T15821] free:1240338 free_pcp:24265 free_cma:0 [ 436.896997][T15821] Node 0 active_anon:53448kB inactive_anon:0kB active_file:13856kB inactive_file:159896kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:167352kB dirty:1172kB writeback:0kB shmem:20300kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14032kB pagetables:4916kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 437.007100][T15821] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 437.093757][T15821] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 437.136052][T15821] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 437.147564][T15821] Node 0 DMA32 free:1056076kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52900kB inactive_anon:0kB active_file:13856kB inactive_file:158068kB unevictable:1536kB writepending:1172kB present:3129332kB managed:2559912kB mlocked:0kB bounce:0kB free_pcp:87476kB local_pcp:37112kB free_cma:0kB [ 437.181795][T15821] lowmem_reserve[]: 0 0 1 1 1 [ 437.207063][T15821] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 437.256526][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 437.267025][T15821] lowmem_reserve[]: 0 0 0 0 0 [ 437.271833][T15821] Node 1 Normal free:3898452kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13952kB local_pcp:2848kB free_cma:0kB [ 437.352606][T15821] lowmem_reserve[]: 0 0 0 0 0 [ 437.453559][T15821] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 437.467462][T15821] Node 0 DMA32: 3057*4kB (UM) 1252*8kB (UME) 562*16kB (UME) 388*32kB (UME) 159*64kB (UME) 33*128kB (UME) 13*256kB (UE) 12*512kB (UME) 11*1024kB (UE) 5*2048kB (M) 237*4096kB (M) = 1059780kB [ 437.487240][T15821] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 437.500118][T15821] Node 1 Normal: 195*4kB (UME) 55*8kB (UME) 43*16kB (UME) 169*32kB (UME) 53*64kB (UME) 17*128kB (UME) 6*256kB (UME) 2*512kB (M) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3898452kB [ 437.547130][T15821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 437.643699][T15821] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 437.796415][T15821] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 437.817643][T15821] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 437.848635][T15821] 47156 total pagecache pages [ 437.862413][T15821] 0 pages in swap cache [ 437.881079][T15821] Free swap = 124996kB [ 437.895359][T15821] Total swap = 124996kB [ 437.907083][T15821] 2097051 pages RAM [ 437.911040][T15821] 0 pages HighMem/MovableOnly [ 437.915954][T15821] 424983 pages reserved [ 437.920876][T15821] 0 pages cma reserved [ 438.296814][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 438.462096][T15852] wg1 speed is unknown, defaulting to 1000 [ 438.536455][T15852] lo speed is unknown, defaulting to 1000 [ 438.552755][T15861] __nla_validate_parse: 6 callbacks suppressed [ 438.552771][T15861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2552'. [ 438.616774][T15861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2552'. [ 438.672069][T15859] syz_tun: entered allmulticast mode [ 438.685569][T15862] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2551'. [ 438.741259][T15859] dvmrp8: entered allmulticast mode [ 438.999546][T15859] wg1 speed is unknown, defaulting to 1000 [ 439.043508][T15859] lo speed is unknown, defaulting to 1000 [ 439.221249][T15872] syz_tun: left allmulticast mode [ 439.244659][T15872] dvmrp8: left allmulticast mode [ 439.336752][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 439.384052][T15881] wg1 speed is unknown, defaulting to 1000 [ 439.430514][T15881] lo speed is unknown, defaulting to 1000 [ 439.471239][T15883] wg1 speed is unknown, defaulting to 1000 [ 439.505944][T15883] lo speed is unknown, defaulting to 1000 [ 440.203609][T15906] wg1 speed is unknown, defaulting to 1000 [ 440.324248][T15906] lo speed is unknown, defaulting to 1000 [ 440.377506][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 440.445055][T15911] geneve0: left promiscuous mode [ 440.455463][T15911] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 440.474078][T15911] team0: Port device geneve0 removed [ 440.481302][T15911] bond2: (slave geneve2): Releasing active interface [ 440.495880][T15911] bond0: (slave bond3): Releasing backup interface [ 440.505911][T15911] bond4: (slave bridge9): Releasing backup interface [ 440.565014][T15910] team0: Failed to send options change via netlink (err -105) [ 440.578438][T15910] team0: Mode changed to "activebackup" [ 440.685987][T15910] syzkaller0: left promiscuous mode [ 440.693549][T15910] syzkaller0: left allmulticast mode [ 440.726279][T15913] wg1 speed is unknown, defaulting to 1000 [ 440.756071][T15913] lo speed is unknown, defaulting to 1000 [ 440.907747][T15915] netlink: 'syz.4.2565': attribute type 16 has an invalid length. [ 440.940017][T15915] netlink: 'syz.4.2565': attribute type 17 has an invalid length. [ 440.996161][T15915] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 441.139632][T15933] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2569'. [ 441.162256][T15935] netlink: 'syz.2.2572': attribute type 1 has an invalid length. [ 441.416634][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 441.452066][T15939] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 441.465135][T15939] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 441.502521][T15943] gretap1: entered promiscuous mode [ 441.511210][T15943] bond4: (slave gretap1): making interface the new active one [ 441.526130][T15943] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 441.701461][T15946] wg1 speed is unknown, defaulting to 1000 [ 441.715762][T15955] wg1 speed is unknown, defaulting to 1000 [ 441.719285][T15946] lo speed is unknown, defaulting to 1000 [ 441.771869][T15955] lo speed is unknown, defaulting to 1000 [ 442.282462][T15973] netlink: 'syz.1.2578': attribute type 2 has an invalid length. [ 442.457280][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 442.980145][T15983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2580'. [ 443.041028][T15991] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2579'. [ 443.053473][T15983] bond5 (unregistering): Released all slaves [ 443.107698][T15977] netdevsim0: left allmulticast mode [ 443.159104][T15999] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 443.490448][T16012] wg1 speed is unknown, defaulting to 1000 [ 443.496760][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 443.531166][T16012] lo speed is unknown, defaulting to 1000 [ 443.881137][T16023] wg1 speed is unknown, defaulting to 1000 [ 443.993153][T16023] lo speed is unknown, defaulting to 1000 [ 444.537018][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 444.668528][T16039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2590'. [ 444.687556][T16039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2590'. [ 444.721590][T16039] netlink: 'syz.1.2590': attribute type 4 has an invalid length. [ 444.738777][T16039] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2590'. [ 444.882323][T16041] netlink: 'syz.3.2591': attribute type 1 has an invalid length. [ 444.945141][T16041] bond6: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 444.960015][T16041] 8021q: adding VLAN 0 to HW filter on device bond6 [ 444.978477][ T8120] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 445.022237][T16041] veth9: entered promiscuous mode [ 445.054268][T16048] bond6: (slave ip6gretap2): Removing an active aggregator [ 445.068595][T16048] bond6: (slave ip6gretap2): Releasing backup interface [ 445.391462][T16063] !: renamed from dummy0 (while UP) [ 445.514245][T16060] wg1 speed is unknown, defaulting to 1000 [ 445.576618][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 445.592686][T16060] lo speed is unknown, defaulting to 1000 [ 445.606821][T16063] wg1 speed is unknown, defaulting to 1000 [ 445.657286][T16063] lo speed is unknown, defaulting to 1000 [ 445.719895][T16067] wg1 speed is unknown, defaulting to 1000 [ 445.909997][T16067] lo speed is unknown, defaulting to 1000 [ 445.930782][T16065] netlink: 'syz.4.2596': attribute type 16 has an invalid length. [ 445.949838][T16065] netlink: 'syz.4.2596': attribute type 17 has an invalid length. [ 446.022979][T16077] geneve3: entered promiscuous mode [ 446.029349][T16077] geneve3: entered allmulticast mode [ 446.155086][T16065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 446.170953][ T1160] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 46334 - 0 [ 446.183653][ T1160] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 37636 - 0 [ 446.192782][ T1160] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 46334 - 0 [ 446.232302][ T1160] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 37636 - 0 [ 446.313836][ T1160] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 46334 - 0 [ 446.332449][T16079] netlink: 284 bytes leftover after parsing attributes in process `syz.3.2599'. [ 446.356995][ T1160] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 37636 - 0 [ 446.605681][ T59] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 46334 - 0 [ 446.616951][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 446.619909][ T59] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 37636 - 0 [ 446.724173][T16088] wg1 speed is unknown, defaulting to 1000 [ 446.825394][T16088] lo speed is unknown, defaulting to 1000 [ 446.969313][ T5876] block nbd2: Receive control failed (result -107) [ 447.007264][T16095] nbd2: detected capacity change from 0 to 32 [ 447.110706][T11217] block nbd2: Dead connection, failed to find a fallback [ 447.124911][T11217] block nbd2: shutting down sockets [ 447.150410][T11217] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.181214][T11217] Buffer I/O error on dev nbd2, logical block 0, async page read [ 447.213213][T11217] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.266701][T11217] Buffer I/O error on dev nbd2, logical block 0, async page read [ 447.286095][T11217] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.316269][T11217] Buffer I/O error on dev nbd2, logical block 0, async page read [ 447.367030][T11217] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.406576][T11217] Buffer I/O error on dev nbd2, logical block 0, async page read [ 447.427636][T11217] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.438491][T11217] Buffer I/O error on dev nbd2, logical block 0, async page read [ 447.447475][T11217] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.459069][T11217] Buffer I/O error on dev nbd2, logical block 0, async page read [ 447.467272][T11217] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.476888][T11217] Buffer I/O error on dev nbd2, logical block 0, async page read [ 447.484787][T11217] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.494381][T11217] Buffer I/O error on dev nbd2, logical block 0, async page read [ 447.502362][T11217] ldm_validate_partition_table(): Disk read failed. [ 447.510259][T11217] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.550406][T11217] Buffer I/O error on dev nbd2, logical block 0, async page read [ 447.562728][T11217] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.590063][T11217] Buffer I/O error on dev nbd2, logical block 0, async page read [ 447.598425][T11217] Dev nbd2: unable to read RDB block 0 [ 447.604566][T11217] nbd2: unable to read partition table [ 447.625981][T11217] ldm_validate_partition_table(): Disk read failed. [ 447.656621][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 447.677422][T11217] Dev nbd2: unable to read RDB block 0 [ 447.683527][T11217] nbd2: unable to read partition table [ 448.059247][T16113] netlink: 'syz.4.2605': attribute type 16 has an invalid length. [ 448.076996][T16113] netlink: 'syz.4.2605': attribute type 17 has an invalid length. [ 448.597932][T16118] macvlan8: entered promiscuous mode [ 448.603428][T16118] vlan0: entered promiscuous mode [ 448.613658][T16118] geneve1: entered promiscuous mode [ 448.696994][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 448.761406][T16125] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2607'. [ 449.163400][T16123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2606'. [ 449.243975][T16123] bond6 (unregistering): Released all slaves [ 449.438082][T16135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2608'. [ 449.463227][T16137] netlink: 'syz.1.2609': attribute type 4 has an invalid length. [ 449.475667][T16137] netlink: 'syz.1.2609': attribute type 4 has an invalid length. [ 449.553959][T16135] bond6 (unregistering): Released all slaves [ 449.736621][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 450.777025][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 450.811977][T16155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2613'. [ 450.821033][T16155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2613'. [ 450.844777][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.854188][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.885676][ T55] block nbd0: Possible stuck request ffff888025790000: control (read@0,1024B). Runtime 240 seconds [ 450.898686][ T55] block nbd0: Possible stuck request ffff8880257901c0: control (read@1024,1024B). Runtime 240 seconds [ 450.910558][ T55] block nbd0: Possible stuck request ffff888025790380: control (read@2048,1024B). Runtime 240 seconds [ 450.922974][ T55] block nbd0: Possible stuck request ffff888025790540: control (read@3072,1024B). Runtime 240 seconds [ 450.936665][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.989103][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.074929][T16156] wg1 speed is unknown, defaulting to 1000 [ 451.106198][T16156] lo speed is unknown, defaulting to 1000 [ 451.349476][T16010] Set syz1 is full, maxelem 65536 reached [ 451.394440][T16164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.460222][T16169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 451.822374][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 452.351806][T16191] wg1 speed is unknown, defaulting to 1000 [ 452.528980][T16191] lo speed is unknown, defaulting to 1000 [ 452.544832][T16202] wg1 speed is unknown, defaulting to 1000 [ 452.684816][T16202] lo speed is unknown, defaulting to 1000 [ 452.725736][T16208] netlink: 'syz.4.2624': attribute type 23 has an invalid length. [ 452.773412][T16205] wg1 speed is unknown, defaulting to 1000 [ 452.857124][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 452.887747][T16205] lo speed is unknown, defaulting to 1000 [ 453.124448][T16216] wg1 speed is unknown, defaulting to 1000 [ 453.174981][T16216] lo speed is unknown, defaulting to 1000 [ 453.896564][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 454.257965][T16239] wg1 speed is unknown, defaulting to 1000 [ 454.278665][T16239] lo speed is unknown, defaulting to 1000 [ 454.780522][T16260] wg1 speed is unknown, defaulting to 1000 [ 454.790594][T16260] lo speed is unknown, defaulting to 1000 [ 454.887517][T16265] IPv6: NLM_F_REPLACE set, but no existing node found! [ 454.936986][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 455.004956][T16264] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.138008][T16281] wg1 speed is unknown, defaulting to 1000 [ 455.153545][T16264] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.294471][T16264] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.361838][T16281] lo speed is unknown, defaulting to 1000 [ 455.480639][T16264] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.632422][ T1160] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.707918][ T49] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.718224][ T49] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.804666][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.986742][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 457.002167][T16337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2649'. [ 457.017011][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 457.034196][T16337] bridge21: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 457.336097][T16343] wg1 speed is unknown, defaulting to 1000 [ 457.358656][T16343] lo speed is unknown, defaulting to 1000 [ 457.820056][T16375] wg1 speed is unknown, defaulting to 1000 [ 457.955374][T16373] wg1 speed is unknown, defaulting to 1000 [ 457.961393][T16375] lo speed is unknown, defaulting to 1000 [ 457.974295][T16373] lo speed is unknown, defaulting to 1000 [ 457.991391][T16378] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2657'. [ 458.057346][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 458.181790][T16378] nbd: socks must be embedded in a SOCK_ITEM attr [ 458.451204][ T5884] udevd[5884]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 458.981862][T16399] netlink: 'syz.4.2660': attribute type 2 has an invalid length. [ 459.096988][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 459.513222][T16414] openvswitch: netlink: Message has 8 unknown bytes. [ 459.541792][T16418] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 459.692514][T16421] bond0: (slave gretap0): Opening slave failed [ 459.990019][T16424] netlink: 'syz.2.2666': attribute type 1 has an invalid length. [ 460.029642][T16424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2666'. [ 460.146606][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 460.192047][T16433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2667'. [ 460.239134][T16435] tipc: Can't bind to reserved service type 1 [ 460.259629][T16435] netlink: 'syz.4.2668': attribute type 39 has an invalid length. [ 460.308237][T16438] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2668'. [ 460.343465][T16438] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2668'. [ 460.413525][T16438] netlink: 'syz.4.2668': attribute type 5 has an invalid length. [ 460.426196][T16438] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2668'. [ 460.948872][T16439] tipc: Resetting bearer [ 461.053200][T16438] vlan4: entered allmulticast mode [ 461.082019][T16438] bridge_slave_0: entered allmulticast mode [ 461.171808][T16437] wg1 speed is unknown, defaulting to 1000 [ 461.190675][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 461.198659][T16437] lo speed is unknown, defaulting to 1000 [ 461.199312][T16450] wg1 speed is unknown, defaulting to 1000 [ 461.235765][T16450] lo speed is unknown, defaulting to 1000 [ 461.241614][T16452] macsec0: entered promiscuous mode [ 461.241636][T16452] macsec0: entered allmulticast mode [ 461.242338][T16452] veth1_macvtap: entered allmulticast mode [ 461.259496][T16452] macsec0: left promiscuous mode [ 461.264718][T16452] macsec0: left allmulticast mode [ 461.270058][T16452] veth1_macvtap: left allmulticast mode [ 462.216600][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 462.559502][T16484] netlink: 'syz.3.2679': attribute type 1 has an invalid length. [ 462.589108][T16484] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2679'. [ 462.619740][T16484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2679'. [ 462.707672][T16484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2679'. [ 463.130215][T16510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2683'. [ 463.184346][T16509] IPv6: NLM_F_REPLACE set, but no existing node found! [ 463.209937][T16510] bond6 (unregistering): Released all slaves [ 463.256986][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 463.287447][T16513] netlink: 284 bytes leftover after parsing attributes in process `syz.3.2685'. [ 463.442172][T16520] vlan0: entered promiscuous mode [ 463.456451][T16520] macvtap0: entered promiscuous mode [ 463.488528][T16524] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2688'. [ 463.628062][T16526] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.703780][T16526] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.779930][T16526] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.868384][T16539] syzkaller0: entered allmulticast mode [ 464.231888][T16539] syzkaller0 (unregistering): left allmulticast mode [ 464.261557][T16539] tipc: Disabling bearer [ 464.279480][T16541] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 464.296822][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 464.566022][T16526] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.676915][T16546] wg1 speed is unknown, defaulting to 1000 [ 464.686970][T16546] lo speed is unknown, defaulting to 1000 [ 464.687754][T16543] wg1 speed is unknown, defaulting to 1000 [ 464.819418][T16543] lo speed is unknown, defaulting to 1000 [ 464.846775][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.909567][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.918275][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.956039][T16550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2696'. [ 464.965649][T16550] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2696'. [ 465.024980][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.190893][T16552] wg1 speed is unknown, defaulting to 1000 [ 465.218363][T16565] wg1 speed is unknown, defaulting to 1000 [ 465.220710][T16552] lo speed is unknown, defaulting to 1000 [ 465.337141][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 465.338716][T16564] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 465.368502][T16565] lo speed is unknown, defaulting to 1000 [ 465.395900][T16569] netlink: 'syz.2.2699': attribute type 4 has an invalid length. [ 465.640644][T16573] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2700'. [ 466.033093][T16572] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2700'. [ 466.067049][T16572] netlink: 'syz.4.2700': attribute type 4 has an invalid length. [ 466.075345][ T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.084427][ T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.305535][ T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.337089][ T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.376772][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 466.572637][T16590] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 466.791914][T16588] wg1 speed is unknown, defaulting to 1000 [ 466.808244][T16588] lo speed is unknown, defaulting to 1000 [ 467.257880][T16604] bond6 (unregistering): Released all slaves [ 467.417012][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 467.659252][T16617] IPv6: NLM_F_REPLACE set, but no existing node found! [ 467.681263][T16621] __nla_validate_parse: 2 callbacks suppressed [ 467.681281][T16621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2709'. [ 467.786899][T16623] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2712'. [ 467.941369][T16625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2713'. [ 467.987495][T16625] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 468.018769][T16630] netlink: 'syz.3.2715': attribute type 16 has an invalid length. [ 468.037289][T16630] netlink: 'syz.3.2715': attribute type 17 has an invalid length. [ 468.128192][T16636] netlink: 844 bytes leftover after parsing attributes in process `syz.0.2717'. [ 468.137536][T16630] IPv6: NLM_F_REPLACE set, but no existing node found! [ 468.167627][T16628] netlink: 'syz.2.2716': attribute type 1 has an invalid length. [ 468.176333][T16628] nbd: error processing sock list [ 468.189071][T16628] block nbd3: shutting down sockets [ 468.281481][T16636] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2717'. [ 468.285951][T16643] wg1 speed is unknown, defaulting to 1000 [ 468.299997][T16643] lo speed is unknown, defaulting to 1000 [ 468.456661][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 468.755382][T16652] IPv6: NLM_F_REPLACE set, but no existing node found! [ 469.079144][T16667] geneve0: left promiscuous mode [ 469.093972][T16667] team0: Port device geneve0 removed [ 469.106253][T16667] bond0: (slave wlan1): Releasing backup interface [ 469.139534][T16667] bond1: (slave gretap1): Releasing active interface [ 469.148667][T16667] gretap1: left allmulticast mode [ 469.166003][T16667] bond2: (slave veth3): Releasing active interface [ 469.175403][T16667] macvlan2: left allmulticast mode [ 469.182970][T16667] macvlan2: left promiscuous mode [ 469.188853][T16667] bridge4: port 1(macvlan2) entered disabled state [ 469.201425][T16667] bond5: (slave gretap2): Releasing active interface [ 469.299135][T16671] wg1 speed is unknown, defaulting to 1000 [ 469.314845][T16671] lo speed is unknown, defaulting to 1000 [ 469.412577][T16670] team0: Mode changed to "loadbalance" [ 469.497024][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 469.634590][T16682] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2726'. [ 469.696118][T16680] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.723312][T16680] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 46334 - 0 [ 469.735028][T16680] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 37636 - 0 [ 469.895163][T16682] batadv0: entered promiscuous mode [ 469.905108][T16682] batadv0: entered allmulticast mode [ 470.039483][T16680] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.074235][T16680] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 46334 - 0 [ 470.095320][T16694] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2729'. [ 470.117340][T16680] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 37636 - 0 [ 470.214766][T16694] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2729'. [ 470.236492][T16694] netlink: zone id is out of range [ 470.247981][T16694] netlink: zone id is out of range [ 470.261243][T16694] netlink: get zone limit has 8 unknown bytes [ 470.282018][T16680] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.292684][T16680] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 46334 - 0 [ 470.328206][T16680] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 37636 - 0 [ 470.450795][T16680] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.516317][T16680] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 46334 - 0 [ 470.534580][T16680] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 37636 - 0 [ 470.544696][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 470.645989][T16702] netlink: 'syz.4.2731': attribute type 39 has an invalid length. [ 470.675142][T16704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2733'. [ 470.753375][ T8120] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.786892][ T8120] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 37636 - 0 [ 470.806915][ T8120] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 46334 - 0 [ 470.835380][ T8120] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.850434][ T8120] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 37636 - 0 [ 470.861553][ T8120] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 46334 - 0 [ 470.925118][T16713] netlink: 'syz.4.2737': attribute type 16 has an invalid length. [ 470.933628][T16713] netlink: 'syz.4.2737': attribute type 17 has an invalid length. [ 470.968378][ T59] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.002999][ T59] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 37636 - 0 [ 471.145149][ T59] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 46334 - 0 [ 471.202605][ T59] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.231760][ T59] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 37636 - 0 [ 471.246541][ T59] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 46334 - 0 [ 471.587189][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 472.000477][T16733] IPv6: NLM_F_REPLACE set, but no existing node found! [ 472.611001][T16760] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2748'. [ 472.620327][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 472.948955][T16771] wg1 speed is unknown, defaulting to 1000 [ 472.979739][T16771] lo speed is unknown, defaulting to 1000 [ 473.064448][T16779] netlink: 'syz.2.2751': attribute type 3 has an invalid length. [ 473.134794][T16783] netlink: 'syz.0.2754': attribute type 1 has an invalid length. [ 473.180137][T16783] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 473.192447][ T1160] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 473.206058][T16783] 8021q: adding VLAN 0 to HW filter on device bond6 [ 473.235393][T16783] veth7: entered promiscuous mode [ 473.245354][T16783] bond6: (slave veth7): Enslaving as a backup interface with a down link [ 473.262579][T16783] bond6: (slave ip6gretap1): Removing an active aggregator [ 473.272786][T16783] bond6: (slave ip6gretap1): Releasing backup interface [ 473.280858][T16783] bond6: (slave ip6gretap1): the permanent HWaddr of slave - ca:54:41:87:b2:f6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 473.303781][T16783] bond6: (slave veth7): Releasing backup interface [ 473.405469][T16794] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2756'. [ 473.447537][T16793] wg1 speed is unknown, defaulting to 1000 [ 473.455988][T16793] lo speed is unknown, defaulting to 1000 [ 473.528736][T16800] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 473.560027][T16800] syz.4.2759: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 473.563798][T16796] wg1 speed is unknown, defaulting to 1000 [ 473.576032][T16800] CPU: 1 UID: 0 PID: 16800 Comm: syz.4.2759 Not tainted syzkaller #0 PREEMPT(full) [ 473.576056][T16800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 473.576068][T16800] Call Trace: [ 473.576076][T16800] [ 473.576085][T16800] dump_stack_lvl+0x189/0x250 [ 473.576115][T16800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.576135][T16800] ? __pfx__printk+0x10/0x10 [ 473.576158][T16800] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 473.576176][T16800] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 473.576197][T16800] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 473.576219][T16800] warn_alloc+0x214/0x310 [ 473.576273][T16800] ? stack_depot_save_flags+0x40/0x860 [ 473.576301][T16800] ? __pfx_warn_alloc+0x10/0x10 [ 473.576325][T16800] ? kasan_save_track+0x4f/0x80 [ 473.576346][T16800] ? xskq_create+0x56/0x170 [ 473.576371][T16800] ? xsk_init_queue+0xb0/0x110 [ 473.576392][T16800] ? xsk_setsockopt+0x4dc/0x8d0 [ 473.576411][T16800] ? do_sock_setsockopt+0x179/0x1b0 [ 473.576429][T16800] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 473.576490][T16800] ? do_syscall_64+0xfa/0x3b0 [ 473.576525][T16800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.576552][T16800] __vmalloc_node_range_noprof+0x125/0x12f0 [ 473.576608][T16800] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 473.576638][T16800] ? __kasan_kmalloc+0x93/0xb0 [ 473.576662][T16800] vmalloc_user_noprof+0xad/0xf0 [ 473.576684][T16800] ? xskq_create+0xbf/0x170 [ 473.576708][T16800] xskq_create+0xbf/0x170 [ 473.576733][T16800] xsk_init_queue+0xb0/0x110 [ 473.576757][T16800] xsk_setsockopt+0x4dc/0x8d0 [ 473.576782][T16800] ? __pfx_xsk_setsockopt+0x10/0x10 [ 473.576803][T16800] ? __pfx_aa_sk_perm+0x10/0x10 [ 473.576830][T16800] ? aa_sock_opt_perm+0xff/0x1b0 [ 473.576849][T16800] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 473.576865][T16800] ? __pfx_xsk_setsockopt+0x10/0x10 [ 473.576889][T16800] do_sock_setsockopt+0x179/0x1b0 [ 473.576913][T16800] __x64_sys_setsockopt+0x13f/0x1b0 [ 473.576938][T16800] do_syscall_64+0xfa/0x3b0 [ 473.576953][T16800] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.576976][T16800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.576992][T16800] ? clear_bhb_loop+0x60/0xb0 [ 473.577013][T16800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.577029][T16800] RIP: 0033:0x7f604bb8eec9 [ 473.577046][T16800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.577060][T16800] RSP: 002b:00007f6049df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 473.577079][T16800] RAX: ffffffffffffffda RBX: 00007f604bde5fa0 RCX: 00007f604bb8eec9 [ 473.577092][T16800] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 473.577103][T16800] RBP: 00007f604bc11f91 R08: 0000000000000004 R09: 0000000000000000 [ 473.577114][T16800] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.577125][T16800] R13: 00007f604bde6038 R14: 00007f604bde5fa0 R15: 00007fff5f87a1e8 [ 473.577156][T16800] [ 473.577963][T16800] Mem-Info: [ 473.611774][T16796] lo speed is unknown, defaulting to 1000 [ 473.614041][T16800] active_anon:10794 inactive_anon:0 isolated_anon:0 [ 473.614041][T16800] active_file:3464 inactive_file:40039 isolated_file:0 [ 473.614041][T16800] unevictable:768 dirty:244 writeback:0 [ 473.614041][T16800] slab_reclaimable:12470 slab_unreclaimable:167866 [ 473.614041][T16800] mapped:30630 shmem:1380 pagetables:1211 [ 473.614041][T16800] sec_pagetables:0 bounce:0 [ 473.614041][T16800] kernel_misc_reclaimable:0 [ 473.614041][T16800] free:1238493 free_pcp:23236 free_cma:0 [ 473.667023][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 473.689533][T16800] Node 0 active_anon:43176kB inactive_anon:0kB active_file:13856kB inactive_file:159952kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123320kB dirty:972kB writeback:0kB shmem:3984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13480kB pagetables:4696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 473.805654][T16805] netlink: 'syz.4.2759': attribute type 4 has an invalid length. [ 473.989262][T16800] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 474.013469][T16805] netlink: 'syz.4.2759': attribute type 4 has an invalid length. [ 474.197026][T16800] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 474.264486][T16814] netlink: 'syz.3.2761': attribute type 16 has an invalid length. [ 474.286730][T16800] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 474.297152][T16814] netlink: 'syz.3.2761': attribute type 17 has an invalid length. [ 474.306057][T16800] Node 0 DMA32 free:1032840kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:62900kB inactive_anon:0kB active_file:13856kB inactive_file:158124kB unevictable:1536kB writepending:1180kB present:3129332kB managed:2559912kB mlocked:0kB bounce:0kB free_pcp:66432kB local_pcp:33528kB free_cma:0kB [ 474.359193][T16810] netlink: 'syz.2.2760': attribute type 10 has an invalid length. [ 474.409936][T16800] lowmem_reserve[]: 0 0 1 1 1 [ 474.536807][T16800] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 474.617830][T16800] lowmem_reserve[]: 0 0 0 0 0 [ 474.677269][T16800] Node 1 Normal free:3899452kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12928kB local_pcp:2080kB free_cma:0kB [ 474.716602][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 474.737214][T16816] IPv6: NLM_F_REPLACE set, but no existing node found! [ 474.770354][T16800] lowmem_reserve[]: 0 0 0 0 0 [ 474.800504][T16800] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 474.827447][T16800] Node 0 DMA32: 1776*4kB (UE) 926*8kB (UM) 394*16kB (UE) 147*32kB (UME) 83*64kB (UM) 27*128kB (UM) 16*256kB (UME) 16*512kB (UME) 13*1024kB (UE) 4*2048kB (M) 234*4096kB (M) = 1026544kB [ 474.857115][T16800] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 474.895405][T16800] Node 1 Normal: 197*4kB (UME) 55*8kB (UME) 43*16kB (UME) 183*32kB (UME) 60*64kB (UME) 18*128kB (UME) 6*256kB (UME) 2*512kB (M) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3899484kB [ 474.976214][T16800] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 475.021108][T16800] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 475.061668][T16800] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 475.092078][T16800] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 475.118024][T16800] 46826 total pagecache pages [ 475.125425][T16831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2764'. [ 475.135164][T16800] 0 pages in swap cache [ 475.140597][T16800] Free swap = 124996kB [ 475.144766][T16800] Total swap = 124996kB [ 475.170410][T16800] 2097051 pages RAM [ 475.174260][T16800] 0 pages HighMem/MovableOnly [ 475.194621][T16800] 424983 pages reserved [ 475.200707][T16832] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2764'. [ 475.210386][T16800] 0 pages cma reserved [ 475.229656][T16832] netlink: zone id is out of range [ 475.257594][T16832] netlink: zone id is out of range [ 475.264645][T16832] netlink: get zone limit has 8 unknown bytes [ 475.570406][T16841] wg1 speed is unknown, defaulting to 1000 [ 475.623047][T16841] lo speed is unknown, defaulting to 1000 [ 475.636497][T16843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2767'. [ 475.742685][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 475.822853][T16865] netlink: 'syz.1.2769': attribute type 10 has an invalid length. [ 475.916601][T16865] bridge0: entered promiscuous mode [ 475.922043][T16865] bridge0: entered allmulticast mode [ 476.024936][T16865] tipc: Enabling of bearer rejected, failed to enable media [ 476.284349][T16870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2772'. [ 476.694849][T16880] netlink: 'syz.4.2774': attribute type 16 has an invalid length. [ 476.713725][T16880] netlink: 'syz.4.2774': attribute type 17 has an invalid length. [ 476.776601][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 476.835685][T16880] IPv6: NLM_F_REPLACE set, but no existing node found! [ 476.991254][T16882] netlink: 'syz.3.2775': attribute type 13 has an invalid length. [ 477.030230][T16882] netlink: 'syz.3.2775': attribute type 17 has an invalid length. [ 477.210289][T16882] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.311131][T16882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 477.457585][T16885] wg1 speed is unknown, defaulting to 1000 [ 477.479956][T16885] lo speed is unknown, defaulting to 1000 [ 477.817060][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 478.407771][T16911] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2781'. [ 478.547738][T16914] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2781'. [ 478.562449][T16914] netlink: zone id is out of range [ 478.568543][T16914] netlink: zone id is out of range [ 478.573693][T16914] netlink: get zone limit has 8 unknown bytes [ 478.694880][T16916] netlink: 'syz.3.2783': attribute type 1 has an invalid length. [ 478.726727][T16916] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2783'. [ 478.748406][T16919] lo speed is unknown, defaulting to 1000 [ 478.761906][T16919] lo speed is unknown, defaulting to 1000 [ 478.800308][T16916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2783'. [ 478.837291][T16919] lo speed is unknown, defaulting to 1000 [ 478.856584][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 478.924190][T16919] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 479.129686][T16919] lo speed is unknown, defaulting to 1000 [ 479.189623][T16919] lo speed is unknown, defaulting to 1000 [ 479.248700][T16919] lo speed is unknown, defaulting to 1000 [ 479.269461][T16919] lo speed is unknown, defaulting to 1000 [ 479.295691][T16919] lo speed is unknown, defaulting to 1000 [ 479.664668][T16944] wg1 speed is unknown, defaulting to 1000 [ 479.709254][T16944] lo speed is unknown, defaulting to 1000 [ 479.745670][T16944] lo speed is unknown, defaulting to 1000 [ 479.896850][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 480.600516][T16967] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2794'. [ 480.642450][T16967] wg1 speed is unknown, defaulting to 1000 [ 480.714437][T16971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2794'. [ 480.781138][T16967] lo speed is unknown, defaulting to 1000 [ 480.854543][T16971] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 480.889959][T16967] lo speed is unknown, defaulting to 1000 [ 480.936825][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 480.977310][ T55] block nbd0: Possible stuck request ffff888025790000: control (read@0,1024B). Runtime 270 seconds [ 480.990460][ T55] block nbd0: Possible stuck request ffff8880257901c0: control (read@1024,1024B). Runtime 270 seconds [ 481.002701][ T55] block nbd0: Possible stuck request ffff888025790380: control (read@2048,1024B). Runtime 270 seconds [ 481.014854][ T55] block nbd0: Possible stuck request ffff888025790540: control (read@3072,1024B). Runtime 270 seconds [ 481.157717][T16955] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 481.758330][T16993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2799'. [ 481.977038][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 482.442687][T17008] wg1 speed is unknown, defaulting to 1000 [ 482.470457][T17008] lo speed is unknown, defaulting to 1000 [ 482.487325][T17008] lo speed is unknown, defaulting to 1000 [ 482.671556][T17018] netdevsim0: left promiscuous mode [ 482.742763][T17018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.762996][T17018] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 483.016567][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 483.018035][T17023] gtp0: left promiscuous mode [ 483.046998][T17023] gtp0: left allmulticast mode [ 483.978823][T17046] IPVS: set_ctl: invalid protocol: 48500 127.0.0.1:20000 [ 484.056846][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 484.380658][T17061] wg1 speed is unknown, defaulting to 1000 [ 484.430793][T17061] lo speed is unknown, defaulting to 1000 [ 484.499073][T17061] lo speed is unknown, defaulting to 1000 [ 484.683301][T17073] wg1 speed is unknown, defaulting to 1000 [ 484.691510][T17073] lo speed is unknown, defaulting to 1000 [ 484.699235][T17073] lo speed is unknown, defaulting to 1000 [ 485.096626][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 485.421459][T17084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2814'. [ 485.573715][T17084] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2814'. [ 485.618822][T17084] netlink: 34 bytes leftover after parsing attributes in process `syz.0.2814'. [ 485.735277][T17092] wg1 speed is unknown, defaulting to 1000 [ 485.808815][T17092] lo speed is unknown, defaulting to 1000 [ 485.853611][T17092] lo speed is unknown, defaulting to 1000 [ 485.938382][T17098] netlink: 'syz.1.2816': attribute type 1 has an invalid length. [ 486.125834][T17098] 8021q: adding VLAN 0 to HW filter on device bond6 [ 486.136846][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 486.255578][T17100] bond5: (slave wlan0): Releasing active interface [ 486.284342][T17100] bond6: (slave wlan0): Enslaving as an active interface with a down link [ 486.370920][T17102] vlan1: entered allmulticast mode [ 486.377733][T17102] bond6: (slave vlan1): Opening slave failed [ 486.447890][T17025] Set syz1 is full, maxelem 65536 reached [ 486.913822][T17112] syzkaller0: create flow: hash 1809115270 index 1 [ 486.941637][T17121] netlink: 'syz.0.2820': attribute type 10 has an invalid length. [ 486.994043][T17122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2820'. [ 487.122797][T17111] syzkaller0: delete flow: hash 1809115270 index 1 [ 487.184689][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 488.328639][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 488.347429][T17141] netlink: 'syz.3.2825': attribute type 16 has an invalid length. [ 488.355424][T17141] netlink: 'syz.3.2825': attribute type 17 has an invalid length. [ 488.415670][T17145] netlink: 'syz.0.2826': attribute type 1 has an invalid length. [ 488.532014][T17147] IPv6: NLM_F_REPLACE set, but no existing node found! [ 489.337867][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 490.386983][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 490.787675][T17151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2827'. [ 490.890477][T17155] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2827'. [ 490.926781][T17155] netlink: zone id is out of range [ 490.936453][T17155] netlink: zone id is out of range [ 490.941605][T17155] netlink: get zone limit has 8 unknown bytes [ 490.985828][T17148] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 491.160215][T17166] netlink: 'syz.3.2830': attribute type 5 has an invalid length. [ 491.383100][T17177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2829'. [ 491.416621][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 491.594477][T17185] ip6tnl2: entered promiscuous mode [ 491.630964][T17185] ip6tnl2: entered allmulticast mode [ 491.998277][T17201] wg1 speed is unknown, defaulting to 1000 [ 492.006279][T17201] lo speed is unknown, defaulting to 1000 [ 492.014491][T17201] lo speed is unknown, defaulting to 1000 [ 492.118788][T17204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2838'. [ 492.209998][T17204] bond7 (unregistering): Released all slaves [ 492.438319][T17207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2839'. [ 492.456830][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 492.643067][T17214] netlink: 'syz.0.2841': attribute type 16 has an invalid length. [ 492.652514][T17214] netlink: 'syz.0.2841': attribute type 17 has an invalid length. [ 493.000516][T17227] rdma_rxe: rxe_newlink: failed to add lo [ 493.001603][T17223] veth0: entered promiscuous mode [ 493.030696][T17223] syzkaller0: Caught tx_queue_len zero misconfig [ 493.090303][T17222] veth0: left promiscuous mode [ 493.283358][T17238] netlink: 'syz.2.2848': attribute type 6 has an invalid length. [ 493.327357][T17238] netlink: 'syz.2.2848': attribute type 12 has an invalid length. [ 493.348831][T17238] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2848'. [ 493.496481][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 493.840683][T17261] netlink: 'syz.2.2855': attribute type 16 has an invalid length. [ 493.849762][T17261] netlink: 'syz.2.2855': attribute type 17 has an invalid length. [ 494.313185][T17272] nbd: must specify at least one socket [ 494.325089][T17270] wg1 speed is unknown, defaulting to 1000 [ 494.359305][T17270] lo speed is unknown, defaulting to 1000 [ 494.403812][T17270] lo speed is unknown, defaulting to 1000 [ 494.442175][T17277] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2860'. [ 494.497710][T17279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2861'. [ 494.531832][T17281] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2860'. [ 494.542156][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 494.552516][T17281] netlink: zone id is out of range [ 494.558566][T17281] netlink: zone id is out of range [ 494.566148][T17281] netlink: get zone limit has 8 unknown bytes [ 494.608120][T17279] bond7 (unregistering): Released all slaves [ 494.675066][T17273] netlink: 'syz.2.2858': attribute type 2 has an invalid length. [ 494.801125][T17273] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2858'. [ 494.867206][T17285] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 495.342749][T17301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 495.586803][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 495.633629][T17317] wg1 speed is unknown, defaulting to 1000 [ 495.662723][T17317] lo speed is unknown, defaulting to 1000 [ 495.690764][T17317] lo speed is unknown, defaulting to 1000 [ 496.029714][T17325] wg1 speed is unknown, defaulting to 1000 [ 496.050468][T17328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2870'. [ 496.086079][T17325] lo speed is unknown, defaulting to 1000 [ 496.122306][T17328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2870'. [ 496.145657][T17325] lo speed is unknown, defaulting to 1000 [ 496.537969][T17338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2873'. [ 496.616944][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 497.123505][T17362] netlink: 'syz.1.2879': attribute type 1 has an invalid length. [ 497.162052][T17354] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 497.181467][T17354] veth5: left promiscuous mode [ 497.195190][T17366] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2879'. [ 497.200741][T17354] veth7: left promiscuous mode [ 497.405016][T17359] geneve3: left promiscuous mode [ 497.432943][T17359] macvlan8: left promiscuous mode [ 497.462436][T17359] vlan0: left promiscuous mode [ 497.513982][T17359] geneve1: left promiscuous mode [ 497.531471][T17359] bridge0: left promiscuous mode [ 497.547674][T17359] ip6tnl2: left promiscuous mode [ 497.656504][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 497.762707][T17379] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2882'. [ 497.774947][T17370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2881'. [ 497.823786][T17370] bond7 (unregistering): Released all slaves [ 497.826152][T17379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2882'. [ 497.921122][T17376] wg1 speed is unknown, defaulting to 1000 [ 497.931159][T17376] lo speed is unknown, defaulting to 1000 [ 497.970721][T17376] lo speed is unknown, defaulting to 1000 [ 498.078640][T17389] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2885'. [ 498.393030][T17400] netlink: 'syz.0.2890': attribute type 16 has an invalid length. [ 498.401171][T17400] netlink: 'syz.0.2890': attribute type 17 has an invalid length. [ 498.484932][T17400] IPv6: NLM_F_REPLACE set, but no existing node found! [ 498.540225][T17406] netlink: 'syz.4.2889': attribute type 16 has an invalid length. [ 498.567012][T17406] netlink: 'syz.4.2889': attribute type 17 has an invalid length. [ 498.696915][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 499.211168][T17424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2896'. [ 499.227430][T17424] bond7 (unregistering): Released all slaves [ 499.485105][T17434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2897'. [ 499.664406][T17442] netlink: 'syz.2.2901': attribute type 16 has an invalid length. [ 499.672881][T17442] netlink: 'syz.2.2901': attribute type 17 has an invalid length. [ 499.736642][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 499.781912][T17442] IPv6: NLM_F_REPLACE set, but no existing node found! [ 499.902762][T17449] netlink: 'syz.0.2902': attribute type 16 has an invalid length. [ 499.913040][T17449] netlink: 'syz.0.2902': attribute type 17 has an invalid length. [ 500.095435][T17449] IPv6: NLM_F_REPLACE set, but no existing node found! [ 500.404613][T17468] bond7 (unregistering): Released all slaves [ 500.434238][T17472] syzkaller1: entered promiscuous mode [ 500.440466][T17472] syzkaller1: entered allmulticast mode [ 500.451117][T17478] netlink: 'syz.1.2908': attribute type 16 has an invalid length. [ 500.717396][ T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.727801][ T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 37636 - 0 [ 500.737211][ T13] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 46334 - 0 [ 500.768535][ T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.787369][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 500.798611][ T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 37636 - 0 [ 500.813468][ T13] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 46334 - 0 [ 500.850768][ T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.869667][ T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 37636 - 0 [ 500.879486][ T13] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 46334 - 0 [ 500.889308][ T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.900045][ T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 37636 - 0 [ 500.909690][ T13] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 46334 - 0 [ 500.933845][T17485] wg1 speed is unknown, defaulting to 1000 [ 500.943163][T17485] lo speed is unknown, defaulting to 1000 [ 500.951990][T17485] lo speed is unknown, defaulting to 1000 [ 501.435883][T17497] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 501.542190][T17500] __nla_validate_parse: 1 callbacks suppressed [ 501.542209][T17500] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.2914'. [ 501.674475][T17509] tipc: Enabling of bearer rejected, already enabled [ 501.683786][T17509] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 501.816667][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 502.138908][T17526] wg1 speed is unknown, defaulting to 1000 [ 502.191172][T17526] lo speed is unknown, defaulting to 1000 [ 502.205478][T17527] wg1 speed is unknown, defaulting to 1000 [ 502.214673][T17526] lo speed is unknown, defaulting to 1000 [ 502.233694][T17527] lo speed is unknown, defaulting to 1000 [ 502.308653][T17527] lo speed is unknown, defaulting to 1000 [ 502.615953][T17537] validate_nla: 1 callbacks suppressed [ 502.615972][T17537] netlink: 'syz.1.2918': attribute type 16 has an invalid length. [ 502.633098][T17537] netlink: 'syz.1.2918': attribute type 17 has an invalid length. [ 502.740935][T17537] IPv6: NLM_F_REPLACE set, but no existing node found! [ 502.830612][T17541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2920'. [ 502.856632][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 502.870878][T17541] bond10 (unregistering): Released all slaves [ 503.149539][T17555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2923'. [ 503.152860][T17552] wg1 speed is unknown, defaulting to 1000 [ 503.179527][T17552] lo speed is unknown, defaulting to 1000 [ 503.188068][T17552] lo speed is unknown, defaulting to 1000 [ 503.742638][T17572] 8021q: adding VLAN 0 to HW filter on device bond7 [ 503.846081][T17572] 8021q: adding VLAN 0 to HW filter on device macvlan17 [ 503.859971][T17572] bond7: (slave macvlan17): Enslaving as a backup interface with a down link [ 503.896665][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 503.929809][T17581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2928'. [ 503.949697][T17581] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 504.819022][T17600] wg1 speed is unknown, defaulting to 1000 [ 504.921905][T17600] lo speed is unknown, defaulting to 1000 [ 504.936767][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 505.091595][T17600] lo speed is unknown, defaulting to 1000 [ 505.266759][T17615] tipc: Enabling of bearer rejected, already enabled [ 505.286269][T17615] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 505.445805][T17616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2935'. [ 505.464625][T17622] wg1 speed is unknown, defaulting to 1000 [ 505.612222][T17616] bond10 (unregistering): Released all slaves [ 505.619152][T17622] lo speed is unknown, defaulting to 1000 [ 505.738914][T17622] lo speed is unknown, defaulting to 1000 [ 505.757326][T17638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2938'. [ 505.976490][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 506.361813][T17651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2941'. [ 506.772975][T17664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2946'. [ 506.794288][T17665] rdma_rxe: rxe_newlink: failed to add team0 [ 506.804703][T17660] netlink: 'syz.2.2943': attribute type 4 has an invalid length. [ 506.816241][T17661] wg1 speed is unknown, defaulting to 1000 [ 506.829098][T17660] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2943'. [ 506.847269][T17671] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2946'. [ 506.883221][T17661] lo speed is unknown, defaulting to 1000 [ 506.920570][T17661] lo speed is unknown, defaulting to 1000 [ 507.016761][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 507.890338][T17703] wg1 speed is unknown, defaulting to 1000 [ 507.898968][T17703] lo speed is unknown, defaulting to 1000 [ 507.908598][T17703] lo speed is unknown, defaulting to 1000 [ 508.056770][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 508.183934][T17722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2953'. [ 508.253353][T17713] wg1 speed is unknown, defaulting to 1000 [ 508.294320][T17713] lo speed is unknown, defaulting to 1000 [ 508.359687][T17713] lo speed is unknown, defaulting to 1000 [ 509.096746][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 509.204887][T17735] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2956'. [ 509.219393][T17735] tipc: Invalid UDP bearer configuration [ 509.219454][T17735] tipc: Enabling of bearer rejected, failed to enable media [ 509.422664][T17740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2958'. [ 509.626939][T17745] wg1 speed is unknown, defaulting to 1000 [ 509.671099][T17745] lo speed is unknown, defaulting to 1000 [ 509.705945][T17750] wg1 speed is unknown, defaulting to 1000 [ 509.716061][T17745] lo speed is unknown, defaulting to 1000 [ 509.861036][T17750] lo speed is unknown, defaulting to 1000 [ 509.882331][T17750] lo speed is unknown, defaulting to 1000 [ 510.136858][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 510.320631][T17757] netlink: 'syz.2.2961': attribute type 10 has an invalid length. [ 510.372549][T17758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2961'. [ 511.017864][T17774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2964'. [ 511.043218][ T55] block nbd0: Possible stuck request ffff888025790000: control (read@0,1024B). Runtime 300 seconds [ 511.054946][ T55] block nbd0: Possible stuck request ffff8880257901c0: control (read@1024,1024B). Runtime 300 seconds [ 511.069340][ T55] block nbd0: Possible stuck request ffff888025790380: control (read@2048,1024B). Runtime 300 seconds [ 511.081350][ T55] block nbd0: Possible stuck request ffff888025790540: control (read@3072,1024B). Runtime 300 seconds [ 511.088346][T17774] bond10 (unregistering): Released all slaves [ 511.176639][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 511.301576][T17786] wg1 speed is unknown, defaulting to 1000 [ 511.313017][T17786] lo speed is unknown, defaulting to 1000 [ 511.324650][T17786] lo speed is unknown, defaulting to 1000 [ 511.874406][T17812] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2973'. [ 511.917885][T17812] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 512.216717][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 512.566056][T17827] wg1 speed is unknown, defaulting to 1000 [ 512.609346][T17827] lo speed is unknown, defaulting to 1000 [ 512.652700][T17827] lo speed is unknown, defaulting to 1000 [ 512.811314][T17838] wg1 speed is unknown, defaulting to 1000 [ 512.821056][T17838] lo speed is unknown, defaulting to 1000 [ 512.835882][T17838] lo speed is unknown, defaulting to 1000 [ 513.225985][T17848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2982'. [ 513.266721][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 513.392857][T17853] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2983'. [ 513.588870][T17855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2984'. [ 513.839835][T17859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2986'. [ 513.858560][T17859] bond5 (unregistering): Released all slaves [ 513.957542][T17862] wg1 speed is unknown, defaulting to 1000 [ 513.965718][T17862] lo speed is unknown, defaulting to 1000 [ 514.212287][T17862] lo speed is unknown, defaulting to 1000 [ 514.296803][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 514.359963][T17875] netlink: 'syz.4.2988': attribute type 1 has an invalid length. [ 514.419980][T17876] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2989'. [ 514.485764][T17875] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2988'. [ 514.510460][T17869] wg1 speed is unknown, defaulting to 1000 [ 514.518545][T17869] lo speed is unknown, defaulting to 1000 [ 514.527115][T17869] lo speed is unknown, defaulting to 1000 [ 515.085115][T17897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2995'. [ 515.121550][T17897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2995'. [ 515.176053][T17900] wg1 speed is unknown, defaulting to 1000 [ 515.191712][T17900] lo speed is unknown, defaulting to 1000 [ 515.225522][T17898] bond0: (slave wlan1): Releasing backup interface [ 515.346937][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 515.506163][T17900] lo speed is unknown, defaulting to 1000 [ 515.747006][T17911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2996'. [ 515.891317][T17917] netlink: 'syz.2.2998': attribute type 5 has an invalid length. [ 515.894287][T17914] bond7: option mode: unable to set because the bond device has slaves [ 515.948759][T17912] netlink: 'syz.1.2996': attribute type 10 has an invalid length. [ 516.402986][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 516.588442][T17919] bond7 (unregistering): (slave macvlan17): Releasing backup interface [ 516.674536][T17919] bond7 (unregistering): Released all slaves [ 516.704842][T17912] bond0: (slave wlan1): refused to change device type [ 516.724176][T17911] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 516.749914][T17911] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 516.764471][T17911] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 516.804944][T17921] wg1 speed is unknown, defaulting to 1000 [ 516.870169][T17921] lo speed is unknown, defaulting to 1000 [ 516.888770][T17921] lo speed is unknown, defaulting to 1000 [ 517.002847][T17928] __nla_validate_parse: 6 callbacks suppressed [ 517.002866][T17928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3000'. [ 517.097866][T17926] netlink: 'syz.0.2999': attribute type 1 has an invalid length. [ 517.116188][T17926] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2999'. [ 517.268392][T17932] netlink: 'syz.1.3001': attribute type 13 has an invalid length. [ 517.305140][T17932] netlink: 'syz.1.3001': attribute type 17 has an invalid length. [ 517.426669][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 517.476086][T17938] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3003'. [ 517.486316][T17932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.555760][T17932] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 517.600535][T17947] netlink: 'syz.2.3003': attribute type 2 has an invalid length. [ 517.709015][T17931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.834363][T17933] wg1 speed is unknown, defaulting to 1000 [ 517.843580][T17933] lo speed is unknown, defaulting to 1000 [ 517.844178][T17899] Set syz1 is full, maxelem 65536 reached [ 517.875220][T17933] lo speed is unknown, defaulting to 1000 [ 518.179569][T17963] netlink: 'syz.4.3008': attribute type 10 has an invalid length. [ 518.191934][T17956] wg1 speed is unknown, defaulting to 1000 [ 518.193351][T17963] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3008'. [ 518.204255][T17956] lo speed is unknown, defaulting to 1000 [ 518.215947][T17956] lo speed is unknown, defaulting to 1000 [ 518.290535][T17963] batman_adv: batadv0: Adding interface: virt_wifi0 [ 518.330131][T17963] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.372362][T17963] batman_adv: batadv0: Interface activated: virt_wifi0 [ 518.466547][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 518.519498][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3010'. [ 518.529221][T17977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3010'. [ 518.811990][T17987] wg1 speed is unknown, defaulting to 1000 [ 518.848776][T17987] lo speed is unknown, defaulting to 1000 [ 518.879508][T17987] lo speed is unknown, defaulting to 1000 [ 518.930395][T17971] wg1 speed is unknown, defaulting to 1000 [ 518.944590][T17991] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3013'. [ 518.988625][T17971] lo speed is unknown, defaulting to 1000 [ 519.030043][T17971] lo speed is unknown, defaulting to 1000 [ 519.384661][T17995] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 519.496765][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 519.545155][T18010] netlink: 'syz.0.3017': attribute type 10 has an invalid length. [ 519.727303][T18010] bond0: (slave wlan1): refused to change device type [ 520.122077][T18020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3020'. [ 520.379679][T18034] netlink: 'syz.4.3022': attribute type 13 has an invalid length. [ 520.389757][T18034] netlink: 'syz.4.3022': attribute type 17 has an invalid length. [ 520.526075][T18036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.536733][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 520.690844][T18036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.704190][T18034] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.732823][T18034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 520.818694][T18035] wg1 speed is unknown, defaulting to 1000 [ 520.903089][T18035] lo speed is unknown, defaulting to 1000 [ 520.953928][T18035] lo speed is unknown, defaulting to 1000 [ 521.034729][T18034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.092175][T18050] tipc: Enabling of bearer rejected, already enabled [ 521.327421][T18057] netlink: 'syz.3.3030': attribute type 3 has an invalid length. [ 521.339723][T18058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3029'. [ 521.414008][T18062] ip6tnl3: entered promiscuous mode [ 521.420491][T18062] ip6tnl3: entered allmulticast mode [ 521.429215][T18062] team0: Device ip6tnl3 is up. Set it down before adding it as a team port [ 521.528451][T18064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3031'. [ 521.576847][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 522.021565][T18075] bond7 (unregistering): Released all slaves [ 522.551598][T18091] wg1 speed is unknown, defaulting to 1000 [ 522.616565][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 522.625755][T18091] lo speed is unknown, defaulting to 1000 [ 522.656021][T18091] lo speed is unknown, defaulting to 1000 [ 522.758282][T18096] netlink: 'syz.0.3047': attribute type 16 has an invalid length. [ 522.811415][T18096] netlink: 'syz.0.3047': attribute type 17 has an invalid length. [ 522.880079][T18096] tipc: Resetting bearer [ 522.923244][T18097] IPv6: NLM_F_REPLACE set, but no existing node found! [ 523.223589][T18106] tipc: Enabling of bearer rejected, already enabled [ 523.491372][T18111] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 523.620471][T18113] __nla_validate_parse: 5 callbacks suppressed [ 523.620490][T18113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3040'. [ 523.666639][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 523.758354][T18116] netlink: 'syz.3.3041': attribute type 4 has an invalid length. [ 523.782331][T18113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3040'. [ 523.823082][T18114] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 523.874083][T18122] netlink: 'syz.1.3042': attribute type 13 has an invalid length. [ 523.885584][T18122] netlink: 'syz.1.3042': attribute type 17 has an invalid length. [ 524.020892][T18130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.117002][T18122] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 524.208076][T18130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.216670][T18125] wg1 speed is unknown, defaulting to 1000 [ 524.226842][T18125] lo speed is unknown, defaulting to 1000 [ 524.235167][T18125] lo speed is unknown, defaulting to 1000 [ 524.284864][T18136] netlink: 'syz.0.3046': attribute type 16 has an invalid length. [ 524.304895][T18136] netlink: 'syz.0.3046': attribute type 17 has an invalid length. [ 524.363949][T18136] tipc: Resetting bearer [ 524.396060][T18132] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3045'. [ 524.462256][T18136] IPv6: NLM_F_REPLACE set, but no existing node found! [ 524.533522][T18140] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3048'. [ 524.608464][T18145] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3048'. [ 524.630917][T18147] netlink: 'syz.3.3050': attribute type 16 has an invalid length. [ 524.648946][T18147] netlink: 'syz.3.3050': attribute type 17 has an invalid length. [ 524.665132][T18140] netlink: 34 bytes leftover after parsing attributes in process `syz.4.3048'. [ 524.696611][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 524.757701][T18147] IPv6: NLM_F_REPLACE set, but no existing node found! [ 525.110827][T18153] wg1 speed is unknown, defaulting to 1000 [ 525.118688][T18153] lo speed is unknown, defaulting to 1000 [ 525.127221][T18153] lo speed is unknown, defaulting to 1000 [ 525.263216][T18156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3053'. [ 525.725088][T18175] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3054'. [ 525.736435][T17850] Bluetooth: hci4: command 0x0405 tx timeout [ 525.746723][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 526.022795][T18179] veth11: entered promiscuous mode [ 526.168510][T18172] wg1 speed is unknown, defaulting to 1000 [ 526.261233][T18172] lo speed is unknown, defaulting to 1000 [ 526.529524][T18172] lo speed is unknown, defaulting to 1000 [ 526.536276][T18187] wg1 speed is unknown, defaulting to 1000 [ 526.639915][T18187] lo speed is unknown, defaulting to 1000 [ 526.662199][T18187] lo speed is unknown, defaulting to 1000 [ 526.786504][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 527.229037][T18200] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3055'. [ 527.289838][T18174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3055'. [ 527.461059][T18204] netlink: 'syz.2.3059': attribute type 16 has an invalid length. [ 527.481721][T18204] netlink: 'syz.2.3059': attribute type 17 has an invalid length. [ 527.781978][T18204] IPv6: NLM_F_REPLACE set, but no existing node found! [ 527.816702][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 528.145851][T18221] bpq0: entered promiscuous mode [ 528.162434][T18224] tipc: Enabling of bearer rejected, already enabled [ 528.435181][T18235] netlink: 'syz.0.3065': attribute type 16 has an invalid length. [ 528.462828][T18235] netlink: 'syz.0.3065': attribute type 17 has an invalid length. [ 528.498695][T18235] tipc: Resetting bearer [ 528.670553][T18235] IPv6: NLM_F_REPLACE set, but no existing node found! [ 528.687033][T18241] team0: Device macvtap3 is already an upper device of the team interface [ 528.859651][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 529.069877][T18256] __nla_validate_parse: 3 callbacks suppressed [ 529.069896][T18256] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3080'. [ 529.162145][T18258] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3080'. [ 529.265282][T18260] wg1 speed is unknown, defaulting to 1000 [ 529.316047][T18260] lo speed is unknown, defaulting to 1000 [ 529.320748][T18264] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3071'. [ 529.357409][T18260] lo speed is unknown, defaulting to 1000 [ 529.518822][T18267] rdma_rxe: rxe_newlink: failed to add lo [ 529.896645][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 529.941558][T18271] wg1 speed is unknown, defaulting to 1000 [ 530.088869][T18271] lo speed is unknown, defaulting to 1000 [ 530.107857][T18271] lo speed is unknown, defaulting to 1000 [ 530.232691][T18297] siw: device registration error -23 [ 530.841618][T18302] wg1 speed is unknown, defaulting to 1000 [ 530.871537][T18301] wg1 speed is unknown, defaulting to 1000 [ 530.928701][T18317] wg1 speed is unknown, defaulting to 1000 [ 530.936471][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 530.958918][T18302] lo speed is unknown, defaulting to 1000 [ 530.966724][T18301] lo speed is unknown, defaulting to 1000 [ 530.967823][T18302] lo speed is unknown, defaulting to 1000 [ 530.974199][T18317] lo speed is unknown, defaulting to 1000 [ 530.990135][T18301] lo speed is unknown, defaulting to 1000 [ 531.139074][T18317] lo speed is unknown, defaulting to 1000 [ 531.976608][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 532.292169][T18340] netlink: 'syz.2.3085': attribute type 5 has an invalid length. [ 532.398039][T18341] wg1 speed is unknown, defaulting to 1000 [ 532.405615][T18341] lo speed is unknown, defaulting to 1000 [ 532.425706][T18341] lo speed is unknown, defaulting to 1000 [ 532.659469][T18354] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3088'. [ 532.715296][T18344] wg1 speed is unknown, defaulting to 1000 [ 532.741832][T18354] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3088'. [ 532.762483][T18351] netlink: 'syz.3.3089': attribute type 16 has an invalid length. [ 532.771495][T18351] netlink: 'syz.3.3089': attribute type 17 has an invalid length. [ 532.813332][T18354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3088'. [ 532.849779][T18344] lo speed is unknown, defaulting to 1000 [ 532.878728][T18344] lo speed is unknown, defaulting to 1000 [ 532.981921][T18355] IPv6: NLM_F_REPLACE set, but no existing node found! [ 533.016499][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 533.349624][T18366] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3090'. [ 533.382560][T18370] netlink: 'syz.3.3092': attribute type 16 has an invalid length. [ 533.419473][T18370] netlink: 'syz.3.3092': attribute type 17 has an invalid length. [ 533.607262][T18370] IPv6: NLM_F_REPLACE set, but no existing node found! [ 533.863615][T18390] wg1 speed is unknown, defaulting to 1000 [ 533.876080][T18390] lo speed is unknown, defaulting to 1000 [ 533.905879][T18390] lo speed is unknown, defaulting to 1000 [ 534.056999][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 534.127978][T18402] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3096'. [ 534.322736][T18403] wg1 speed is unknown, defaulting to 1000 [ 534.331937][T18403] lo speed is unknown, defaulting to 1000 [ 534.348138][T18403] lo speed is unknown, defaulting to 1000 [ 534.609687][T18416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3099'. [ 534.649446][T18416] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 534.866619][T18428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3101'. [ 534.959042][T18428] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3101'. [ 535.003615][T18428] netlink: 34 bytes leftover after parsing attributes in process `syz.1.3101'. [ 535.054150][T18424] wg1 speed is unknown, defaulting to 1000 [ 535.096479][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 535.303768][T18424] lo speed is unknown, defaulting to 1000 [ 535.331402][T18424] lo speed is unknown, defaulting to 1000 [ 535.907985][T18449] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 536.095865][T18449] netlink: 'syz.4.3104': attribute type 10 has an invalid length. [ 536.143268][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 536.230437][T18453] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3105'. [ 536.417356][T18458] netlink: 'syz.0.3106': attribute type 16 has an invalid length. [ 536.430118][T18458] netlink: 'syz.0.3106': attribute type 17 has an invalid length. [ 536.510182][T18460] netlink: 'syz.2.3107': attribute type 16 has an invalid length. [ 536.518781][T18460] netlink: 'syz.2.3107': attribute type 17 has an invalid length. [ 536.565086][T18458] IPv6: NLM_F_REPLACE set, but no existing node found! [ 536.605254][T18460] IPv6: NLM_F_REPLACE set, but no existing node found! [ 536.792103][T18471] wg1 speed is unknown, defaulting to 1000 [ 536.813847][T18471] lo speed is unknown, defaulting to 1000 [ 536.821628][T18470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3111'. [ 536.835530][T18470] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 536.869843][T18471] lo speed is unknown, defaulting to 1000 [ 536.929154][T18476] : renamed from bond_slave_0 [ 536.995267][T18474] wg1 speed is unknown, defaulting to 1000 [ 537.024062][T18474] lo speed is unknown, defaulting to 1000 [ 537.176480][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 537.207593][T18486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3116'. [ 537.311112][T18495] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3116'. [ 537.366493][T18474] lo speed is unknown, defaulting to 1000 [ 537.556248][T18501] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3115'. [ 538.216657][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 538.742611][T18517] wg1 speed is unknown, defaulting to 1000 [ 538.819347][T18517] lo speed is unknown, defaulting to 1000 [ 538.839033][T18517] lo speed is unknown, defaulting to 1000 [ 539.256526][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 539.389568][T18543] netlink: 'syz.1.3127': attribute type 1 has an invalid length. [ 539.412409][T18544] __nla_validate_parse: 5 callbacks suppressed [ 539.412429][T18544] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3126'. [ 539.480298][T18547] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3127'. [ 539.583736][T18539] veth11: left promiscuous mode [ 539.590782][T18544] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 539.638382][T18542] wg1 speed is unknown, defaulting to 1000 [ 539.647613][T18542] lo speed is unknown, defaulting to 1000 [ 539.667723][T18542] lo speed is unknown, defaulting to 1000 [ 540.296693][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 540.595087][T18576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3133'. [ 540.745565][T18584] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3134'. [ 540.954421][T18589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3136'. [ 541.057980][T18589] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3136'. [ 541.081073][T18589] netlink: zone id is out of range [ 541.097147][ T55] block nbd0: Possible stuck request ffff888025790000: control (read@0,1024B). Runtime 330 seconds [ 541.109503][ T55] block nbd0: Possible stuck request ffff8880257901c0: control (read@1024,1024B). Runtime 330 seconds [ 541.121549][ T55] block nbd0: Possible stuck request ffff888025790380: control (read@2048,1024B). Runtime 330 seconds [ 541.133079][T18589] netlink: zone id is out of range [ 541.134041][ T55] block nbd0: Possible stuck request ffff888025790540: control (read@3072,1024B). Runtime 330 seconds [ 541.138718][T18589] netlink: get zone limit has 8 unknown bytes [ 541.168462][T18595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.272224][T18598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3139'. [ 541.285361][T18601] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3140'. [ 541.346648][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 541.530934][T18612] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3143'. [ 541.758068][T18625] netlink: 'syz.4.3146': attribute type 16 has an invalid length. [ 541.766021][T18625] netlink: 'syz.4.3146': attribute type 17 has an invalid length. [ 541.785190][T18621] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3145'. [ 541.886260][T18629] netlink: 'syz.0.3147': attribute type 16 has an invalid length. [ 541.914270][T18629] netlink: 'syz.0.3147': attribute type 17 has an invalid length. [ 541.959789][T18630] IPv6: NLM_F_REPLACE set, but no existing node found! [ 541.998185][T18625] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 542.048781][T18621] batadv1: entered promiscuous mode [ 542.054335][T18621] batadv1: entered allmulticast mode [ 542.064873][T18634] IPv6: NLM_F_REPLACE set, but no existing node found! [ 542.286025][T18643] netlink: 'syz.3.3149': attribute type 1 has an invalid length. [ 542.376686][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 542.661332][T18650] netlink: 'syz.4.3151': attribute type 1 has an invalid length. [ 542.714061][T18650] 8021q: adding VLAN 0 to HW filter on device bond6 [ 542.872775][T18652] 8021q: adding VLAN 0 to HW filter on device bond6 [ 542.900691][T18652] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 542.977567][T18652] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 543.177284][T18650] veth15: entered promiscuous mode [ 543.217537][T18650] bond6: (slave veth15): Enslaving as an active interface with a down link [ 543.315848][T18664] wg1 speed is unknown, defaulting to 1000 [ 543.332112][T18664] lo speed is unknown, defaulting to 1000 [ 543.337277][T18673] wg1 speed is unknown, defaulting to 1000 [ 543.352839][T18664] lo speed is unknown, defaulting to 1000 [ 543.379434][T18673] lo speed is unknown, defaulting to 1000 [ 543.416483][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 543.423766][T18673] lo speed is unknown, defaulting to 1000 [ 544.456621][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 544.721152][T18707] netlink: 'syz.0.3168': attribute type 4 has an invalid length. [ 544.778727][T18705] wg1 speed is unknown, defaulting to 1000 [ 544.859031][T18705] lo speed is unknown, defaulting to 1000 [ 544.908332][T18705] lo speed is unknown, defaulting to 1000 [ 545.361839][T18721] wg1 speed is unknown, defaulting to 1000 [ 545.374707][T18721] lo speed is unknown, defaulting to 1000 [ 545.402423][T18721] lo speed is unknown, defaulting to 1000 [ 545.496501][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 545.806533][T18734] netlink: 'syz.4.3164': attribute type 16 has an invalid length. [ 545.814385][T18734] netlink: 'syz.4.3164': attribute type 17 has an invalid length. [ 546.055386][T18734] IPv6: NLM_F_REPLACE set, but no existing node found! [ 546.135824][T18741] wg1 speed is unknown, defaulting to 1000 [ 546.149542][T18741] lo speed is unknown, defaulting to 1000 [ 546.168312][T18741] lo speed is unknown, defaulting to 1000 [ 546.536711][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 546.703799][T18758] veth15: left promiscuous mode [ 546.711374][T18758] netlink: 'syz.4.3170': attribute type 1 has an invalid length. [ 546.783413][T18765] __nla_validate_parse: 2 callbacks suppressed [ 546.783430][T18765] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3170'. [ 547.163785][T18775] wg1 speed is unknown, defaulting to 1000 [ 547.171988][T18775] lo speed is unknown, defaulting to 1000 [ 547.180033][T18775] lo speed is unknown, defaulting to 1000 [ 547.343578][T18776] wg1 speed is unknown, defaulting to 1000 [ 547.352300][T18776] lo speed is unknown, defaulting to 1000 [ 547.361390][T18776] lo speed is unknown, defaulting to 1000 [ 547.576482][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 548.141372][T18800] pim6reg: entered allmulticast mode [ 548.193606][T18805] pim6reg: left allmulticast mode [ 548.610673][T18817] netlink: 'syz.1.3177': attribute type 1 has an invalid length. [ 548.618856][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 548.659956][T18817] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3177'. [ 549.123151][T18827] netlink: 'syz.3.3180': attribute type 16 has an invalid length. [ 549.131849][T18827] netlink: 'syz.3.3180': attribute type 17 has an invalid length. [ 549.238926][T18827] IPv6: NLM_F_REPLACE set, but no existing node found! [ 549.368640][T18832] 8021q: adding VLAN 0 to HW filter on device bond7 [ 549.486142][T18837] 8021q: adding VLAN 0 to HW filter on device macvlan13 [ 549.515770][T18837] bond7: (slave macvlan13): Enslaving as a backup interface with a down link [ 549.559095][T18839] veth0_to_bond: left allmulticast mode [ 549.564700][T18839] veth0_to_bond: left promiscuous mode [ 549.579706][T18839] bridge6: port 2(veth0_to_bond) entered disabled state [ 549.600284][T18839] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 549.656487][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 549.671142][T18838] wg1 speed is unknown, defaulting to 1000 [ 549.704918][T18838] lo speed is unknown, defaulting to 1000 [ 549.755655][T18838] lo speed is unknown, defaulting to 1000 [ 550.696557][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 550.864647][T18859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3185'. [ 550.874878][T18859] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 550.971162][T18861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3186'. [ 550.983249][T18861] bond7 (unregistering): Released all slaves [ 551.320775][T18873] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3189'. [ 551.736497][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 551.854274][T18886] netlink: 'syz.1.3192': attribute type 16 has an invalid length. [ 551.871592][T18886] netlink: 'syz.1.3192': attribute type 17 has an invalid length. [ 552.167692][T18886] IPv6: NLM_F_REPLACE set, but no existing node found! [ 552.630357][T18902] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3197'. [ 552.640441][T18902] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 552.776600][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 552.837051][T18909] netlink: 'syz.0.3200': attribute type 1 has an invalid length. [ 552.903332][T18909] 8021q: adding VLAN 0 to HW filter on device bond7 [ 552.913992][T18910] bond7: option mode: unable to set because the bond device has slaves [ 552.933097][T18913] netem: incorrect ge model size [ 552.941043][T18910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3199'. [ 552.987166][T18913] netem: change failed [ 553.072021][T18914] 8021q: adding VLAN 0 to HW filter on device bond7 [ 553.089048][T18914] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 553.115404][T18914] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 553.249353][T18909] veth11: entered promiscuous mode [ 553.282016][T18909] bond7: (slave veth11): Enslaving as an active interface with a down link [ 553.639951][T18910] bond7 (unregistering): (slave macvlan13): Releasing backup interface [ 553.650605][T18910] bond7 (unregistering): Released all slaves [ 553.696073][T18906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 553.779097][ T9566] lo speed is unknown, defaulting to 1000 [ 553.787046][ T9566] syz1: Port: 1 Link ACTIVE [ 553.816489][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 553.880293][T18930] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3204'. [ 554.399488][T18946] netlink: 'syz.1.3207': attribute type 1 has an invalid length. [ 554.482331][T18950] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3207'. [ 554.763929][T18958] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3210'. [ 554.816984][T18958] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3210'. [ 554.824477][T18961] netlink: 'syz.1.3212': attribute type 16 has an invalid length. [ 554.866679][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 554.916072][T18961] netlink: 'syz.1.3212': attribute type 17 has an invalid length. [ 555.027151][T18961] IPv6: NLM_F_REPLACE set, but no existing node found! [ 555.424808][T18978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3214'. [ 555.896554][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 555.990300][T18956] bond0 (unregistering): Released all slaves [ 556.380553][T18996] wg1 speed is unknown, defaulting to 1000 [ 556.412416][T18996] lo speed is unknown, defaulting to 1000 [ 556.593802][T18996] lo speed is unknown, defaulting to 1000 [ 556.827898][T19007] wg1 speed is unknown, defaulting to 1000 [ 556.851180][T19007] lo speed is unknown, defaulting to 1000 [ 556.936744][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 556.945240][T19007] lo speed is unknown, defaulting to 1000 [ 556.957526][T19014] netlink: 'syz.4.3222': attribute type 1 has an invalid length. [ 557.062910][T19022] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3222'. [ 557.145014][T19021] wg1 speed is unknown, defaulting to 1000 [ 557.153830][T19021] lo speed is unknown, defaulting to 1000 [ 557.161968][T19021] lo speed is unknown, defaulting to 1000 [ 557.388470][T19032] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3225'. [ 557.736743][ T31] INFO: task udevd:5873 blocked for more than 143 seconds. [ 557.752296][ T31] Not tainted syzkaller #0 [ 557.770499][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 557.815058][ T31] task:udevd state:D stack:19712 pid:5873 tgid:5873 ppid:5232 task_flags:0x400140 flags:0x00004006 [ 557.841440][ T31] Call Trace: [ 557.847662][ T31] [ 557.850743][ T31] __schedule+0x1798/0x4cc0 [ 557.855364][ T31] ? __pfx___schedule+0x10/0x10 [ 557.860705][ T31] ? schedule+0x91/0x360 [ 557.865097][ T31] schedule+0x165/0x360 [ 557.869790][ T31] io_schedule+0x80/0xd0 [ 557.875697][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 557.881822][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 557.889383][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 557.895165][ T31] ? __filemap_get_folio+0x6e0/0xaf0 [ 557.901718][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 557.908537][ T31] do_read_cache_folio+0x1aa/0x590 [ 557.913895][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 557.920370][ T31] read_part_sector+0xb6/0x2b0 [ 557.925455][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 557.931794][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 557.938436][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 557.944698][ T31] bdev_disk_changed+0x75c/0x14b0 [ 557.950353][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 557.956064][ T31] ? wait_on_inode+0xc0/0x230 [ 557.961080][ T31] blkdev_get_whole+0x380/0x510 [ 557.966159][ T31] bdev_open+0x31e/0xd30 [ 557.971248][ T31] blkdev_open+0x457/0x600 [ 557.975805][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 557.982514][ T31] do_dentry_open+0x950/0x13f0 [ 557.986459][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 557.988010][ T31] vfs_open+0x3b/0x340 [ 557.999252][ T31] ? path_openat+0x2ecd/0x3830 [ 558.004198][ T31] path_openat+0x2ee5/0x3830 [ 558.009954][ T31] ? arch_stack_walk+0xfc/0x150 [ 558.015290][ T31] ? stack_depot_save_flags+0x40/0x860 [ 558.021982][ T31] ? __pfx_path_openat+0x10/0x10 [ 558.027746][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.034149][ T31] do_filp_open+0x1fa/0x410 [ 558.039768][ T31] ? __lock_acquire+0xab9/0xd20 [ 558.044935][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 558.051401][ T31] ? _raw_spin_unlock+0x28/0x50 [ 558.057843][ T31] ? alloc_fd+0x64c/0x6c0 [ 558.063948][ T31] do_sys_openat2+0x121/0x1c0 [ 558.070315][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 558.075967][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 558.082075][ T31] ? rcu_is_watching+0x15/0xb0 [ 558.087547][ T31] __x64_sys_openat+0x138/0x170 [ 558.092686][ T31] do_syscall_64+0xfa/0x3b0 [ 558.098163][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.104528][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 558.111500][ T31] ? clear_bhb_loop+0x60/0xb0 [ 558.117085][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.123122][ T31] RIP: 0033:0x7fc32d8a7407 [ 558.128693][ T31] RSP: 002b:00007fff9e07a7d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 558.137954][ T31] RAX: ffffffffffffffda RBX: 00007fc32df56880 RCX: 00007fc32d8a7407 [ 558.146243][ T31] RDX: 00000000000a0800 RSI: 000056478e66da50 RDI: ffffffffffffff9c [ 558.155519][ T31] RBP: 000056478e654910 R08: 0000000000000000 R09: 0000000000000000 [ 558.164999][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000056478e654710 [ 558.173760][ T31] R13: 000056478e662190 R14: 0000000000000000 R15: 000056478e654710 [ 558.189500][ T31] [ 558.193394][ T31] [ 558.193394][ T31] Showing all locks held in the system: [ 558.237096][ T31] 1 lock held by pool_workqueue_/3: [ 558.242501][ T31] #0: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 558.253980][ T31] 1 lock held by khungtaskd/31: [ 558.259707][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 558.272138][ T31] 4 locks held by kworker/u8:4/59: [ 558.278665][ T31] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 558.290362][ T31] #1: ffffc9000210fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 558.309259][ T31] #2: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 558.319350][ T31] #3: ffffffff8e13fa40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 558.330069][ T31] 2 locks held by getty/5626: [ 558.334862][ T31] #0: ffff88814d09e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 558.346028][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 558.357122][ T31] 1 lock held by udevd/5873: [ 558.361865][ T31] #0: ffff888025641358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 558.372291][ T31] 3 locks held by kworker/1:7/9566: [ 558.379341][ T31] #0: ffff88801a481148 ((wq_completion)events#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 558.393295][ T31] #1: ffffc900041efbc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 558.405383][ T31] #2: ffffffff8e13fa40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 558.416106][ T31] 3 locks held by syz.1.3226/19035: [ 558.422060][ T31] #0: ffff88805aa57408 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 558.433270][ T31] #1: ffff888040bc2258 (sk_lock-AF_CAN){+.+.}-{0:0}, at: bcm_release+0x1cd/0x940 [ 558.443215][ T31] #2: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 558.454922][ T31] 1 lock held by syz.0.3227/19044: [ 558.461126][ T31] [ 558.463607][ T31] ============================================= [ 558.463607][ T31] [ 558.473735][ T31] NMI backtrace for cpu 1 [ 558.473755][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 558.473774][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 558.473784][ T31] Call Trace: [ 558.473791][ T31] [ 558.473799][ T31] dump_stack_lvl+0x189/0x250 [ 558.473826][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.473846][ T31] ? __pfx__printk+0x10/0x10 [ 558.473879][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 558.473904][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 558.473928][ T31] ? __pfx__printk+0x10/0x10 [ 558.473952][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 558.473978][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 558.474001][ T31] watchdog+0xf93/0xfe0 [ 558.474027][ T31] ? watchdog+0x1de/0xfe0 [ 558.474054][ T31] kthread+0x70e/0x8a0 [ 558.474077][ T31] ? __pfx_watchdog+0x10/0x10 [ 558.474096][ T31] ? __pfx_kthread+0x10/0x10 [ 558.474117][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 558.474139][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 558.474160][ T31] ? __pfx_kthread+0x10/0x10 [ 558.474180][ T31] ret_from_fork+0x439/0x7d0 [ 558.474206][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 558.474229][ T31] ? __switch_to_asm+0x39/0x70 [ 558.474246][ T31] ? __switch_to_asm+0x33/0x70 [ 558.474263][ T31] ? __pfx_kthread+0x10/0x10 [ 558.474283][ T31] ret_from_fork_asm+0x1a/0x30 [ 558.474319][ T31] [ 558.474325][ T31] Sending NMI from CPU 1 to CPUs 0: [ 558.630231][ C0] NMI backtrace for cpu 0 [ 558.630252][ C0] CPU: 0 UID: 0 PID: 19044 Comm: syz.0.3227 Not tainted syzkaller #0 PREEMPT(full) [ 558.630270][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 558.630280][ C0] RIP: 0010:rcu_is_watching+0x5a/0xb0 [ 558.630299][ C0] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 4c cd 7c 00 48 c7 c3 98 5f 9f 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 34 8b 03 65 ff 0d d9 cf f7 10 74 11 83 e0 04 c1 e8 02 5b [ 558.630313][ C0] RSP: 0018:ffffc9000f5d7540 EFLAGS: 00000806 [ 558.630327][ C0] RAX: 0000000000000000 RBX: ffff8880b8632f98 RCX: 7e64fb738c3d7000 [ 558.630339][ C0] RDX: 0000000000000000 RSI: ffffffff8be33ee0 RDI: ffffffff8be33ea0 [ 558.630350][ C0] RBP: ffffc9000f5d7618 R08: ffffffff8fa2ee37 R09: 1ffffffff1f45dc6 [ 558.630362][ C0] R10: dffffc0000000000 R11: fffffbfff1f45dc7 R12: dffffc0000000000 [ 558.630373][ C0] R13: ffff888052b6e000 R14: ffffffff8dbd6d10 R15: dffffc0000000000 [ 558.630386][ C0] FS: 00007ff8762f36c0(0000) GS:ffff888125c3d000(0000) knlGS:0000000000000000 [ 558.630399][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 558.630410][ C0] CR2: 00007fff29667ff8 CR3: 000000007e2ea000 CR4: 00000000003526f0 [ 558.630424][ C0] Call Trace: [ 558.630430][ C0] [ 558.630438][ C0] trace_irq_enable+0x37/0x110 [ 558.630456][ C0] trace_hardirqs_on+0x18/0x40 [ 558.630472][ C0] _raw_spin_unlock_irqrestore+0x85/0x110 [ 558.630492][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 558.630517][ C0] debug_check_no_obj_freed+0x451/0x470 [ 558.630540][ C0] ? __page_table_check_zero+0xba/0x530 [ 558.630562][ C0] __free_frozen_pages+0x4dd/0xd30 [ 558.630586][ C0] __folio_put+0x21b/0x2c0 [ 558.630607][ C0] ? __pfx___folio_put+0x10/0x10 [ 558.630631][ C0] iter_file_splice_write+0xb45/0x10e0 [ 558.630662][ C0] ? __pfx_iter_file_splice_write+0x10/0x10 [ 558.630682][ C0] ? rcu_read_lock_any_held+0xb3/0x120 [ 558.630700][ C0] ? direct_splice_actor+0x10c/0x160 [ 558.630720][ C0] ? __pfx_iter_file_splice_write+0x10/0x10 [ 558.630739][ C0] direct_splice_actor+0xfe/0x160 [ 558.630759][ C0] splice_direct_to_actor+0x5a8/0xcc0 [ 558.630787][ C0] ? __pfx_direct_splice_actor+0x10/0x10 [ 558.630805][ C0] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 558.630828][ C0] do_splice_direct+0x181/0x270 [ 558.630847][ C0] ? __pfx_do_splice_direct+0x10/0x10 [ 558.630866][ C0] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 558.630888][ C0] ? rw_verify_area+0x255/0x4d0 [ 558.630912][ C0] do_sendfile+0x4da/0x7e0 [ 558.630926][ C0] ? __pfx_vfs_write+0x10/0x10 [ 558.630945][ C0] ? __pfx_do_sendfile+0x10/0x10 [ 558.630962][ C0] ? __se_sys_futex+0x36f/0x400 [ 558.630981][ C0] __se_sys_sendfile64+0x13e/0x190 [ 558.631002][ C0] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 558.631020][ C0] ? rcu_is_watching+0x15/0xb0 [ 558.631035][ C0] ? do_syscall_64+0xbe/0x3b0 [ 558.631052][ C0] do_syscall_64+0xfa/0x3b0 [ 558.631066][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 558.631085][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.631100][ C0] ? clear_bhb_loop+0x60/0xb0 [ 558.631116][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.631130][ C0] RIP: 0033:0x7ff87538eec9 [ 558.631143][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.631155][ C0] RSP: 002b:00007ff8762f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 558.631171][ C0] RAX: ffffffffffffffda RBX: 00007ff8755e5fa0 RCX: 00007ff87538eec9 [ 558.631181][ C0] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 000000000000000d [ 558.631191][ C0] RBP: 00007ff875411f91 R08: 0000000000000000 R09: 0000000000000000 [ 558.631201][ C0] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000000 [ 558.631211][ C0] R13: 00007ff8755e6038 R14: 00007ff8755e5fa0 R15: 00007fff53c92de8 [ 558.631231][ C0] [ 558.632365][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 559.025280][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 559.034465][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 559.044520][ T31] Call Trace: [ 559.047793][ T31] [ 559.050712][ T31] dump_stack_lvl+0x99/0x250 [ 559.055293][ T31] ? __asan_memcpy+0x40/0x70 [ 559.059872][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 559.065108][ T31] ? __pfx__printk+0x10/0x10 [ 559.069694][ T31] vpanic+0x281/0x750 [ 559.073663][ T31] ? __pfx_vpanic+0x10/0x10 [ 559.078152][ T31] ? preempt_schedule+0xae/0xc0 [ 559.082993][ T31] ? preempt_schedule_common+0x83/0xd0 [ 559.088450][ T31] panic+0xb9/0xc0 [ 559.092194][ T31] ? __pfx_panic+0x10/0x10 [ 559.096595][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 559.101957][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 559.108118][ T31] watchdog+0xfd2/0xfe0 [ 559.112263][ T31] ? watchdog+0x1de/0xfe0 [ 559.116584][ T31] kthread+0x70e/0x8a0 [ 559.120643][ T31] ? __pfx_watchdog+0x10/0x10 [ 559.125315][ T31] ? __pfx_kthread+0x10/0x10 [ 559.130151][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 559.135352][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.140542][ T31] ? __pfx_kthread+0x10/0x10 [ 559.145127][ T31] ret_from_fork+0x439/0x7d0 [ 559.149704][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 559.155333][ T31] ? __switch_to_asm+0x39/0x70 [ 559.160087][ T31] ? __switch_to_asm+0x33/0x70 [ 559.164843][ T31] ? __pfx_kthread+0x10/0x10 [ 559.169508][ T31] ret_from_fork_asm+0x1a/0x30 [ 559.174274][ T31] [ 559.177543][ T31] Kernel Offset: disabled [ 559.181866][ T31] Rebooting in 86400 seconds..