last executing test programs: 4.796960601s ago: executing program 3 (id=1462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x18, r1, 0x1, 0x4, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1c881}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xc, 0xffff}, {0xffe0, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_MPU={0x8, 0xe, 0x80}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x2000c0c1) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r7, 0x890c, 0x0) write$tun(r4, &(0x7f00000004c0)={@val={0x0, 0x88f8}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x0, 0xfff}}, {@generic={0x88fb}}}}, 0x16) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000200), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) write$cgroup_subtree(r9, &(0x7f0000000280)={[{0x2d, 'cpuset'}, {0x2b, 'freezer'}, {0x2d, 'net'}, {0x2d, 'cpuacct'}, {0x2b, 'net_prio'}, {0x2b, 'io'}, {0x2b, 'net_prio'}, {0x2b, 'net_prio'}, {0x2b, 'cpuacct'}]}, 0x4a) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r10, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r10, 0x1) 3.92959676s ago: executing program 4 (id=1473): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x80fe, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="657bf44a5a5204df71a4bed3d21de91aa405ea0f1e9d41c9ceb80910d7621490ab4234f082d4df0e550cc405b49fcfb81cfa5bc726f69ecebfab7dcdaf800ca316692f8318a8ea334bb69ff2a307319e81e8e8ed41c88d1af45b7e0defaf1287282f3d9e78714097a41a8f"], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) socket$nl_xfrm(0x10, 0x3, 0x6) 3.60036731s ago: executing program 4 (id=1477): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8001, 0x0}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000040)={0x2, 0x6e27, @multicast1}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x7}, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r4, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r4, 0x0, 0xc, &(0x7f0000000080)=0x40, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r3}, 0x38) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x25, 0x8, @val=@tracing={r2, 0x486d44a0}}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000b40)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f0000001600)=[{&(0x7f00000005c0)="ea", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0xe22, 0x4, @remote, 0x40}, 0x1c, &(0x7f0000000b00)}}, {{&(0x7f00000000c0)={0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, '\x00', 0x29}, 0x8001}, 0x1c, &(0x7f0000000940), 0x0, &(0x7f0000001640)=[@dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @hopopts_2292={{0x1020, 0x29, 0x36, {0x11, 0x200, '\x00', [@generic={0x19, 0x1000, "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"}]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x2e, 0x2, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}], 0x1080}}], 0x3, 0x24004045) 3.5707208s ago: executing program 1 (id=1478): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) read(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x70, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x6, 0x1f, {0x15, 0x4, 0x3, 0x3a, 0x7ff, 0x68, 0x1ce2, 0xd9, 0x32, 0xe5c, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x11, 0x3, [{0x7, 0x9, "a88022eba18f92"}, {0x1, 0x2}]}, @timestamp_addr={0x44, 0x2c, 0x4c, 0x1, 0x0, [{@multicast2, 0x9}, {@loopback, 0x5}, {@loopback, 0x20005}, {@loopback}, {@remote, 0x329}]}]}}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x10004080}, 0x40000) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000006000000080000000100000000000000", @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200000000000000000000000000000000000000162ea917ab3e3429a025db72a0e16a7c48da2f4ec3591834d98310dfb65112863c84d5c2a609706939569544495301045be88164e61537f6a18015cf32e6732f2b3d56821068ecc685e4a49cd451f0ddd565bf150e09915bc368e76b995a22bfb953a07c736ee1a47e2e9b246a2d56"], 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x13, r9, 0x0) socket$inet(0x2, 0x2, 0x1) close(0x3) 3.491165691s ago: executing program 4 (id=1479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000023c0)) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xff0b) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r4, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_netdev_private(r3, 0x89f4, &(0x7f0000000380)="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") sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 3.337043032s ago: executing program 3 (id=1482): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESOCT, @ANYBLOB="000000000000b774070000edff556c8fe6890000757c6f213ff3ad415c6994e2b30a21cf38d8550c10d8fd26e313be96843cdde6c78cd995b60b6307c3cf489af03d47c72ec031c0e0e0cf5db8208f53dea6290b9cffd9901fc458b6f7d510c2e1d9dad546b69834c12eeb99b1ba756eef42f59959", @ANYRES32=0x0, @ANYRES32, @ANYRES32], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @generic={0x1, 0x0, 0xa, 0x4, 0x4}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x6, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[r0, r0], &(0x7f0000000400)=[{0x3, 0x2, 0x2, 0xa}, {0x2, 0x2, 0x8, 0xa}], 0x10, 0x80000001}, 0x94) (rerun: 32) bpf$PROG_BIND_MAP(0x23, &(0x7f00000005c0)={r2, r0}, 0xc) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001900010000000000fcdbdf250a000000000000e1ff15000008001e003f0000000c0016"], 0x30}}, 0x40080) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000200000018140000", @ANYRES32=r0, @ANYBLOB="0000000000009e19c669fa00000000000004000000f260ea3a23bca6f6326075f9a5bf8df79cfa103643899e72e6a2036c4b204c6a53df09804591242bf2959a0ac0dea13cd7f8d1fefb367bd09009bc644defaeec38473330acfc66c3a0e8c7471a40b3c03aa35e1729fdcc84a12deadb6680c2e1c61fad70d949afbf4711d516d8d5e8e6aa2480057236904de3876b838cea12830e6dae4eaf7604c17eb290e51ba7a2c1923f324dd350f6c9270000000000"], &(0x7f0000000300)='GPL\x00', 0x8}, 0x94) 3.037691468s ago: executing program 3 (id=1485): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000140)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="a7", 0x1}], 0x1}}], 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000ec0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f00000007c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'vlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000003940)=""/4113, 0x1011}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f0000000000)=""/225, 0xe1}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/212, 0xd4}], 0x6}, 0x80000002}], 0x4, 0x6000, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0x7) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$isdn(0x22, 0x3, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000500)=0x14) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x9}, {0x77cf, 0x7c, 0x1, 0x80000001}, {0x217, 0x11, 0xcf, 0x7}]}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000340)={"908363d22079de6abe8f859279687f02", 0x0, 0x0, {0x9, 0x5}, {0x0, 0x9}, 0x3, [0x8001, 0x7, 0x5, 0x9, 0x2, 0x5, 0x6, 0x100000001, 0x100, 0x616e, 0x7, 0xffffffffffffffff, 0x3, 0x3, 0x8d, 0x1]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001480)={{r4}, r8, 0x10, @inherit={0x90, &(0x7f0000000bc0)=ANY=[@ANYRESDEC, @ANYRES8=r3, @ANYRESHEX=0x0, @ANYRESHEX=r2, @ANYBLOB="14fb84bcbbb9334ebfec7b07931c3d49c5db23948f653bb83994d3b7af5c98f14bfbab0eaffd48baa5bd6c32596d80bf578bcfd90175daef956f2b8c4cdd21f90381f032c2ecee847be5bbf4459be8b6318748c5fe8b415968ed1c", @ANYRES8=r3]}, @subvolid=0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00'}, 0x18) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) 2.87572174s ago: executing program 3 (id=1486): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000180)="a4", 0x1, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @local}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x8, 0x3, 0xfffffff7}, &(0x7f0000000380)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) unshare(0x62040200) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x8f02}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000002c0)={'macsec0\x00', 0x4000}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001000030525bd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000044460000140012800a000100647863616e00000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f00000033c0)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r8, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000880)={0x194, r7, 0x1, 0x0, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0xb8, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x79ec}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x54c3}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xbadb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xf}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xef}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xbc, 0x22, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xea6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x66e}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xef}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x57}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x142d}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x54}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}]}]}]}, 0x194}}, 0x40090) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="796129bd7000000000007e0000000c0099006d910000150000006a941b5e1089278c0d1c9ab378b1"], 0x20}}, 0x4000054) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="14c7a401b2c24ffc700000000000000001000007"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8041) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 2.638481356s ago: executing program 1 (id=1488): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x4}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000000)=0x8, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150005000000280016"], 0x4c}}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@delqdisc={0x16c, 0x25, 0x800, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x8}, {0x0, 0x4}, {0xffe0, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x4a, 0x5}}, @TCA_STAB={0x88, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6f, 0xe5, 0xe32a, 0xed, 0x0, 0x2, 0x9, 0x5}}, {0xe, 0x2, [0x77, 0x8001, 0x6, 0x8, 0x3]}}, {{0x1c, 0x1, {0x4, 0x4, 0x10, 0x8, 0x1, 0x2000000, 0x2, 0x5}}, {0xe, 0x2, [0x8, 0x2, 0x1, 0x7, 0xfffe]}}, {{0x1c, 0x1, {0x58, 0x9, 0x6, 0x0, 0x1, 0x4, 0x5, 0x6}}, {0x10, 0x2, [0x4, 0x2f, 0x0, 0x5, 0xb, 0x2]}}]}, @TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x9, 0x7, 0x6, 0x2, 0x8, 0x800, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x6, 0x6, 0xcd68, 0x6, 0x0, 0x1, 0x9, 0x9}}, {0x16, 0x2, [0x4, 0x40, 0xff, 0x100, 0x7, 0x1, 0xf4c, 0x8001, 0x1ff]}}, {{0x1c, 0x1, {0xb, 0x3, 0x6, 0xc, 0x0, 0x7, 0x8, 0x7}}, {0x12, 0x2, [0x200, 0x3, 0x5, 0xff, 0x3, 0x7ff, 0x5]}}, {{0x1c, 0x1, {0x6, 0x5, 0x5, 0x1, 0x0, 0x3, 0x8000, 0x2}}, {0x8, 0x2, [0x4, 0x1]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x16c}}, 0x0) 1.9606305s ago: executing program 1 (id=1491): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x38}}], 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000180)) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x8, 0x0, 0x8000) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x80000000, 0x0, 0x5, 0x802, r6, 0x10000, '\x00', 0x0, r0, 0x1, 0x1, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r9 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) 1.710343199s ago: executing program 0 (id=1493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r6 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x1c, 0x0) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffe17532bd6a4f88480000000000000000000000000000ffffffffe5ff65b182f7914634190f57935917e679d95408773bcf34c2be6ce69672cd9ed1e10c7dd204f241a398b561a5bbdc4bcc422f160839ef91b700bd9edb558a78650bd212d76be077b532bd407763a97c76e64a6274dd204c49379c274f2a36231c8539f4d48dbe7660d07d6a8b201b2148b107080eb99181fec5711c709e00"/168], 0xa8) recvmmsg(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000200)=""/40, 0x28}, {&(0x7f0000000540)=""/204, 0xb7}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/86, 0xffffffffffffffe1}], 0x4}, 0x8000064}], 0x5a, 0x40000000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) 1.523714604s ago: executing program 0 (id=1496): r0 = socket(0x15, 0x5, 0x0) connect$netrom(r0, &(0x7f00000000c0)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {0x2}, 0x401}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="350a00000000000061198800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) getsockname$tipc(r0, 0x0, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002b00)=@newlink={0x44, 0x10, 0x1, 0x4, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}]}, @IFLA_MTU={0x8}]}, 0x44}}, 0x0) socket(0x15, 0x5, 0x0) (async) connect$netrom(r0, &(0x7f00000000c0)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {0x2}, 0x401}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="350a00000000000061198800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) (async) getsockname$tipc(r0, 0x0, &(0x7f0000000080)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) (async) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002b00)=@newlink={0x44, 0x10, 0x1, 0x4, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}]}, @IFLA_MTU={0x8}]}, 0x44}}, 0x0) (async) 1.386578411s ago: executing program 4 (id=1498): socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)=ANY=[@ANYBLOB="914f53ca31afa5b8988019a145ed52dbe46f0009248d27baf2b08bf6c2ab1be10c4045e11b469282bd9260e296", @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf2525000000050029000000000005002b000300000005002e00970000000a0001007770616e30000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4c0d0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) shutdown(r4, 0x0) connect$unix(r4, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = accept(r5, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000080)="5ebd740b", 0x4, 0x4080, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000000)="2a000200010078", 0x7) shutdown(r2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0000001800030727bd7000fddbdf2502142004fd02ff"], 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000600)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000140)=0x10) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r9, &(0x7f0000000000)=ANY=[], 0x38) r10 = socket(0x40000000015, 0x805, 0x0) getsockopt(r10, 0x114, 0x271b, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) 1.326531544s ago: executing program 0 (id=1499): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200087bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a40)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_ACT={0x4}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x40}}, 0x40000000) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400140076657468305f746f5f62726964676500140003006772653000000000000000000000000014001680100001800c000700274d97e6"], 0x5c}}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 1.119037247s ago: executing program 0 (id=1500): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd600a843500142bfffe8000000000000000000000000000bbfe8000000000000000000000000000aa00020000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES16=r0], 0x0) r1 = socket(0x10, 0x3, 0x3) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x2}, 0x50) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000015c0)) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000380)={0x1f, 0xfeff, 0x1}, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r4, &(0x7f0000000340)=""/49, 0x31) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x400c845}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x200002, 0x30}, 0xc) 1.103572741s ago: executing program 1 (id=1501): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = accept(r0, &(0x7f0000000080), &(0x7f0000000100)=0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r4, 0x0, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket(0x2, 0x3, 0xff) close(0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x884) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r0, 0x1) gettid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004c40)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x40004}}], 0x1, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000a80)) getgid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRESOCT], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() 961.143283ms ago: executing program 1 (id=1503): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000bc0)={0x3, {{0xa, 0x4e24, 0x6, @mcast2, 0x6d00}}, {{0xa, 0x4e24, 0x3, @private1, 0x1000}}}, 0x108) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000140)=0xc71, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) close(0x3) (async) close(0x3) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000)=0x2, 0x4) close(r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYRES64, @ANYRES16=r4, @ANYBLOB="04002cbd7000ffdbdf250200000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4040001) (async) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYRES64, @ANYRES16=r4, @ANYBLOB="04002cbd7000ffdbdf250200000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4040001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="29270100000000001811ffe3", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000004da7120008000000"], &(0x7f00000001c0)='GPL\x00', 0x40, 0x0, &(0x7f00000002c0), 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0xf, 0xe, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="29270100000000001811ffe3", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000004da7120008000000"], &(0x7f00000001c0)='GPL\x00', 0x40, 0x0, &(0x7f00000002c0), 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0xf, 0xe, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6, 0x0, 0x6}, 0x18) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x40011}, 0x4048090) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x40011}, 0x4048090) bpf$PROG_LOAD(0x5, 0x0, 0x35) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) r8 = socket(0x40000000015, 0x805, 0x0) accept$unix(r8, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000200)) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 878.475765ms ago: executing program 2 (id=1504): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf250100000000000000014100000008001700"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x44) (async, rerun: 32) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="006566d7c97d8ac12a0425bd7000fedbdf250100000000000000014100000018001700000004000000007564703a73797a30000000000877d2d21bb33d8d10"], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) (rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async, rerun: 64) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) (async, rerun: 32) sendmsg$inet(r3, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[], 0x1e8}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r5}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 823.736445ms ago: executing program 2 (id=1505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001bc0)=@newtfilter={0x88c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x9, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xb, 0x7, 0x4, 0x8, 0x5, 0x1, 0x0, 0xc0, 0x6, 0x101, 0x920, 0x7, 0x3, 0x2, 0x2c9d, 0x6, 0x26, 0x2, 0x10, 0xffffffa0, 0x7d0, 0xffff, 0x10000, 0x3, 0x3, 0xfffffff9, 0xe5, 0x3, 0x8, 0x3, 0x3, 0x9, 0x1, 0xfffffff9, 0x22, 0x2, 0x1, 0x2, 0x0, 0x0, 0xea3, 0x1, 0x0, 0x4, 0x91, 0x4, 0x3, 0x5, 0x7, 0x4, 0x7f, 0x6, 0xf9a, 0xc, 0xb, 0x100, 0xed7, 0x8, 0xad4, 0x15, 0x9, 0xfffffff5, 0x31, 0x7, 0x1, 0x3, 0x8, 0x17028692, 0x3, 0x4, 0x7f, 0x4, 0xfe, 0x4, 0xffff, 0x3f, 0x6, 0x5, 0xdf, 0x40000, 0x9, 0x7, 0xb, 0x7ff, 0x3fb3c724, 0x7, 0x7, 0x8, 0x6, 0x7fff, 0x8, 0x6, 0x2, 0x3, 0x5, 0x5, 0x1, 0x10, 0x3, 0x97, 0x3, 0x0, 0x1, 0x5b5b, 0x9, 0x8, 0x9, 0x2000, 0x4ce, 0x8, 0xfff, 0x6, 0x8db3, 0x9, 0x6, 0x279, 0x6, 0x6, 0xffff, 0x0, 0x3, 0x4, 0x4, 0xfff, 0x5, 0x2, 0x800, 0xffff, 0x4, 0x0, 0x7, 0x10000, 0x8000, 0x6, 0xad9b, 0x7, 0x0, 0x3ff, 0x7, 0x8, 0x1, 0x1, 0x7, 0xd6e4, 0x4, 0x533, 0x9, 0x276, 0x7, 0xff, 0x4, 0x2, 0x1166, 0xfffffffa, 0x3, 0xb20e, 0xe8, 0x4, 0x7f4, 0x7, 0x1, 0xfff, 0x3, 0x8001, 0x4, 0x3, 0x4, 0x7, 0x8, 0xca2, 0x6, 0x1000, 0x3, 0x2, 0x4, 0x18, 0xc6, 0x7, 0x7, 0x4, 0x80000000, 0x0, 0x7, 0xb68, 0x7ab, 0x52, 0x3, 0x80, 0x9, 0x2da, 0x5, 0x9, 0x7fff, 0x2, 0xd5916ed, 0x0, 0xb8, 0x6, 0x5, 0x9, 0x2cc, 0x0, 0x2, 0xb7, 0x3, 0xb6b6, 0x0, 0x4, 0x9, 0x5, 0x2, 0x0, 0x4, 0xfce2, 0x8, 0xc, 0x3f5c, 0x100, 0xdb03, 0xfffffff9, 0x4, 0xf84, 0x6, 0xd7d2, 0xffffffff, 0xf300, 0x9a84, 0x8, 0x516, 0x3, 0x3, 0x8, 0x2, 0x1000, 0xffffffff, 0x3, 0x6, 0x200, 0xfffffffc, 0x6, 0x7fff, 0x8, 0x6, 0x8001, 0x8, 0x4, 0x5, 0x8, 0x1, 0xcdb9, 0x70, 0xf1, 0x10, 0x6, 0x93d5eea, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0xb, 0x7, 0x5, 0x101, 0x8000, 0x80000000, 0x5, 0x10, 0xffffffff, 0x7, 0x7fffffff, 0xffffffff, 0x4, 0x3ff, 0x8, 0x693d24ac, 0x9, 0x5, 0x7f, 0x9, 0x2, 0xe9, 0x14b, 0x3, 0x40, 0x8d, 0x1, 0x6, 0x101, 0xfff, 0x7, 0x7, 0x6, 0x10000, 0x8, 0x8001, 0x10c4, 0x3, 0x205, 0x9, 0x8, 0x60b, 0xd, 0xffff, 0x4, 0x1, 0xe, 0x1, 0x9, 0xffff, 0x8, 0x5, 0x0, 0x9, 0x5, 0x8, 0xfffffff9, 0x401, 0xd, 0x800, 0x4, 0x6, 0x3, 0x9, 0x3ff, 0x10, 0x8, 0x80000000, 0x6, 0x2afa, 0xffffffff, 0x6, 0x2, 0x3ff, 0x0, 0xd, 0x5, 0x6, 0x8, 0x2, 0x2000000, 0x7, 0x6, 0xfff, 0x3, 0x7, 0x8, 0x8, 0x6, 0x5, 0x7fff, 0x3, 0x1200, 0x9, 0xbc, 0x1, 0x8001, 0x9, 0xf, 0x5, 0x2, 0x3192212c, 0x3, 0x1, 0x3, 0x1000, 0x0, 0x9, 0x8000, 0xfffffff8, 0x3dae, 0x80, 0x5, 0x9, 0x9, 0x7, 0x698, 0x1, 0x7, 0x7f, 0x6, 0x401, 0x5, 0x7, 0x7, 0x7, 0x10001, 0xffffffe3, 0x7ff, 0x4, 0x10, 0x7, 0x1, 0x7, 0x9, 0x1ff, 0x7, 0xc5dd, 0x2, 0x7, 0x80, 0x3, 0xa, 0xff, 0x9, 0x10, 0x1, 0xd, 0x45, 0x10000, 0x553, 0x800, 0x0, 0x3, 0x4, 0x1b, 0xb, 0x1, 0x8, 0x59, 0x200, 0x1, 0x6, 0x5, 0xd, 0x8001, 0x5c34a762, 0x4, 0x9, 0x3, 0xf, 0x0, 0x9, 0x3, 0x40, 0xf9, 0xfffffff8, 0x2d1f, 0x0, 0x6, 0x3, 0x80000001, 0x4, 0x40, 0x0, 0xffffffff, 0x80000000, 0x9, 0x8, 0x7, 0xfffffff1, 0x5, 0x7f, 0x9, 0x81, 0x9, 0xeb5e, 0x4, 0x6, 0x2, 0x3, 0xf9d, 0xf, 0xce, 0xea8, 0x6, 0x4, 0x6, 0x400, 0x1, 0x300, 0x15, 0x8, 0x2, 0x6, 0x3, 0x9, 0x800, 0xa, 0x200, 0x6, 0x442b89e0, 0x3, 0x0, 0x35b4, 0x10001, 0x3, 0x10001, 0x5, 0x9, 0x4, 0xf, 0x6, 0x7, 0x0, 0x7, 0x0, 0x8ba2, 0x8, 0x2, 0x10001, 0x8, 0x9, 0x6, 0x7fffffff, 0x1, 0x3, 0x6, 0xbd3, 0x9, 0x7fffffff, 0x7, 0xffffd4a4, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x6, 0xbc, 0x7fffffff, 0x12b0abb7, {0xe, 0x0, 0x3, 0x9, 0x40, 0xfffffffb}, {0x1, 0x2, 0xfff7, 0x101, 0x5, 0x3}, 0x8, 0x9}}]}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1d}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0xf}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd2d8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x7, @none, 0x6, 0x1}, 0xe) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x20, 0x5, 0x0, 0xfffff03c}, {0x6, 0x1, 0x8}]}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x82, &(0x7f0000000440), &(0x7f0000000480)=0x10) r11 = socket$unix(0x1, 0x5, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r12, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r11], 0x38}}, 0x10) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) 735.946506ms ago: executing program 3 (id=1506): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r1, 0x7) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) listen(r2, 0x8) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) (async) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="04010000100001002bbd7000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000008000200140003006e657464657673696d300000000000000a000100aaaaaaaaaaaa0000c4001680c000018010000600070080008d8700000800000077000c8014"], 0x104}, 0x1, 0x0, 0x0, 0x4044810}, 0x0) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0}}], 0x1, 0x4000000) 598.410971ms ago: executing program 3 (id=1507): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000600000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_delrule={0x24, 0x21, 0x129, 0x40000, 0x25dfdbff, {}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e24}}]}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000000000000100000400000000010000000000000000000000005f2060"], 0x0, 0x35}, 0x28) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x1882}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r11}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe46a}, 0x94) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r12}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x0) r13 = socket(0xa, 0x3, 0xff) recvmmsg(r13, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x40000322, 0x0) syz_emit_ethernet(0x166, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6c00000001302b0100000000000000000000ffffac1414aafe8000000000000000000000000000aaff"], 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x884) 476.855476ms ago: executing program 2 (id=1508): r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000000c0), 0x3f, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000100)) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x2}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1e, 0x4, 0x0) bind$bt_hci(r4, &(0x7f0000000040), 0x6) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x157b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 399.205348ms ago: executing program 4 (id=1509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000014c0)=ANY=[@ANYBLOB="050000000000000069115a00000000008510000002000000850000000b00000095000000000000009500c4050000000077d8f3b423cdac8d80000000000000102be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d756751dfb265a0e3ccae669e173a649c1cfd6587d452d6453559c3421eed73d5661cfe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff050011bbecc2f4e6779af2551ce935b0f327cb3f011a7d0660d1a13ed38ae89d24e1cebfba2f87925bfacba83109751fe6c0541cd027edd68149ee99eebc677d6dd4aed4af7500d7900a63278f4e92895614cd50cbe43a1ed2526814bcf11887d8dc91dd6f469f9740bf3a73b100000000000009d27d753a3066a096e9e086cea20e0000b6670c3df2660900000000000000447c106a08893ed20fa7a050fbbef9e326e827e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada127414d0b2877ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000000000000000000000000000000000000000000000000000000000000000000005233226ee7b4de17ff24000c52f4ebf1c893bb97734a83584898eccb26f3b789cfc4cd985fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4e48f35530a0af4aac9d07713f05de969c38331973d55a17690b6f7f9ccbe44b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cfde6c25a3836978d2efa286a87f7a32417f1b825a16857aa54a859989d893ad4bf9180ca85ed3ee19843e13f642af0c90f8fca010812ccb3758ec9afe9f8db501b4061f60f06e8410c96edd9701a64657d5b3983c4ac41b154eebfe64d2c2ef1816cb11565679eb6640b32a49fd991811dfb258713624a757a6cc4fff48a27dab16ebbd8405a1abd85e0e946b9fe8e1dfa80eddb3ed496aa46b5eea7c7119f09e2d9d48a1d7367611d7c68cd1cd02074d6e38074230417d2d4424de5897bd110e6294bcfe98000bfa6e9919b956fa369d5e652e6cbe58d52990e65c6b7aac9553ca7d273d7a43e536be2f212f8788c2d1b3929f466c1ef408b2a8e71029a65f2a2f21f710acfd1b9f9ce56114a69e6f9e2861a8a56d9d604a56e2dbcd2fbe9cb4db180a145785f94b27a380dffa612eee33056cd0824374f1bf2f89de1bb4fa70d6c8000000001342faa8040807c0276b5ac9647e7491c1e21cd5bfdce4ddcc1b7f50a4a51d87fb0000000000000000000000000050b5d4375adcef4b0365e0a910a1d3ff536f18efaa6d163fbeb8c92072153d8d10f30884b8b15bf441a42935eaaef2d9a277a83fb74c00a041d97fb2f23223cc784be3f11f9992225ab0edbe92b25c5c41905583108a4b68984338a916d3ea05ecca45f99beecf56341075ed4387159b563501166f7a8abcbcd38c5852ef7f624ca8a2f91a17304a92919f66bc72534c0e197679796a667d987abea7a09d263988539b0d89bef76cac0f3d3ea4a139e108a4bdc148695a7518e425dba2b8acaa1ef7c736c88cea7c93bbc366ec3d8a5897a5e40442772784ffe1808e6335edb6fe1125c548698fcd02c74945ab7dffa618ff39fb89b633b74b5572d41dbac30051f5b263ed9a5a590d45c6eb37a059f9117a9923b4f8e78bba39b6801d2a57bea49bfe546c765d8a52a6bec46a26c022f7508ddd6c7e6161ba51408ba085fb506fd53173d1bf33d3a633568888bfc657f524a156dd54bcb16355c9a4200a7afcadff35f7e97ce8f63aa4f5686dbfab1d13128cde60a40a5721b281ee2d8f4e81c2673e159dd4d8cc11211865a9063b85dab4dc66898ff30b1116aed68403133e79abfbb29cdda78328755c282ff47ce9cbbae753da77a38a5b931cee09c8ebf7974862266f6ee2c3e19833869ba4ef05a99d851aa52d721ee9166e11e50da5ca162823d0c8f89cadac1b1d8bf9134408383104f4a20279fc249b1bfdab79878013773945056304a93179d0d3d6425eede4762b417c1ee8029af2d0b81f6aa2df229dcdaca1e97b184e267690ddd5b90999ef19b5b41d72afdd704c926d9c4a72f2886f73a9e71e5df7403ef6d965e60c938b856edfab81af093f650341de767e3b53fd000000002f764fd240d9fb6eaf864db2b58069eded19fcc4a229c72ee14d424f3d388e3c9d5af2e49f374f7915ee31a3e6c5a0ecfc4e8468d0f2955726d30eedaafc0a251335961796c1e9c2d674509c9eb1062cbe6f68a0323330edbd5224ad7b003e91d8b89e2552cb35c39d2b81addf19be15f455d592dc67f8eb0c631ca7b24d972f5fbb462367738832b7b19663f8cc2ca56e49bad4bd791a8277dfe2261265679b383ab4455fcd02d4686c4fa30d05a53b8e3a228947a16e9329bc9ce25659ad305b1f849128a573aa6fc639de8245067893278df9e1e60a5acdfea4d60415a1beafc4476bd5eaf3d55f05279b63fff168419ad0415bcc3c94f36a9ad19c8bad110eae5dac5bbd9ff33a2e0fb32b9ed37f6193fccb131d45e244479cb123140e0a3ddc39b5546f1e9534133894d95b5de60dbbbcd2936a56a8d42c275385319d11ad49ffd786d187c63a1b2f32d216655ab774d07092044fa526bbd9e7d810421d186e985edcdcd39ec406fb21f94abe57fbdd63d223778a0fd81c17ac2249eb17f1b6e81688e205b657140a77519bcc5f5e7934b724b6f80d065eaa55d017f5b4900c038cd9adbf0ed8e2b05ee372be51147728438c9f980f38293cbb470f722a2b303f9f5ca59ec778733b77a07c97f700000000200000007649cc4b6ab82e9d1cd2e0834b05b51679d5081504038ca0ef0ff01dc554548f86cd1e3eeaee4564f9345d1112ae364ed7ad4511a82fb82b0e9569ca901337058c534f891bcdc81f8756306f9223f5560000000000000000000000000000dae4f25530803f1d21b41f57b89084010334a66351d546380d71fc788a732aec27bbb888f1aee49ab7d418489d5caff0560ef4398cc005c49642366d7004a10093bf46c4d953ae9f13508e42df39e3082511f336a49423a6dfe3861cb476f7c6e0bf65b853ee2a913462ffc50fde069ae009663be77de752f2e5de736d101811d0e876d4de9485b91fd2e3950357c71766a2d663c4869ebd7c60c5aa92f44aae89cf5e4b2da7d372cb9fc486271379207f4a70d41b64d304b71fbf56a0007e2bb2807b2dcd36ad55c115d5e551dd7782f2ae7b7eebd975ce65504ea4897292fd44ae7b1262404276a5c689a8baec8148e39677719309ac73dee5679b9c49286919381caec61bed27b428cb4c861980c15637d667010b88b7fc0cd945f3d9f871e87c0d92da12e46ee2456b42fedfd4f0a4000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000280)={@empty, @loopback, 0xffffffffffffffff, "6cf3c002fc49db9f6cc44d0c0bdecb671ff8d3402486e00e5d0e29da2cbb2b63", 0x45, 0x4, 0x2, 0x4a1}, 0x3c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x2, 0x3, 0xc3, 0x3]}]}, 0x78}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x80) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x2}, &(0x7f0000000340)=0x8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_SE(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x1) 354.141996ms ago: executing program 2 (id=1510): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x20040851}, 0x20000084) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0x3f0, r4, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x47}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x388, 0xfc00, 0x6b73, 0x49e]}, @NL80211_ATTR_FRAME={0x3a1, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1}, {0x8}, @device_b, @broadcast, @initial, {0x5, 0x3}}, 0x2, @random=0x594, 0x8000, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x9}, {0x36, 0x1}, {0x5}]}, @val={0x3, 0x1, 0x7}, @val={0x4, 0x6, {0x52, 0x40, 0x8, 0x9}}, @val={0x6, 0x2, 0xffff}, @void, @val={0x72, 0x6}, @void, [{0xdd, 0xbf, "995f99f143b24d307f54bf61a6ea577583462c5c6d3fed87a9f415afa48cc72be3eb33ac95a2df7ee2c3ed8040be352ad6921dc290df8a3f7561bbface81c39d7ba72c92b6dbebe97eb06bdbdd30a9e7fedfe3986c82ec812e571cc7284ab369655c6c6092ae4f5a7e32538fd013578a74c7ab2b6bfa019862a3aae9f6e7a30100038583678e3670942aa007962170057d07d2a19137b084de75ce83e56a985c3aef9a7bdad34443b12e56121449a4ad468a5cae4d298c6c0cbd226b2e4e16"}, {0xdd, 0x35, "129168b4718c20564bb12bd9c9a8b92d5458161caad06d9b4c14fe653bfb6cefca790fe9a17030aa4a12500a824cc077a87c57a6da"}, {0xdd, 0x54, "6e96c325e5c45eea2f664fc5fd2242de15512d1f4982f65ed7e112065ee40be7e4992685ca1cc892657b406b981bd3952b80868d5ee82659ef365a4c59319e8959c6a34cd8af2c66487651b2c19391a7e6202c69"}, {0xdd, 0xab, "b8468e2adbd53c23c66d232539dabf67609397759ffdecf467e11ba4d4a1e1879a94816abe9abb505e3dbf9811d3ff2effea08cafcc90e7fc3d8c625eecf928f47907135fd39af36dcd698468ab96852c63003bd0bc77e61ff657f0151e8dd3a2f05a89290fd358d6e4da3a8e6aeaf3a0691ed2221477080cb86367b12b01b69ab0463ccf0c43645aa72a2a1412023e050fa819ef64f7c9ba3c49d7e31919d32010a8e7db91abd3fc14097"}, {0xdd, 0x9a, "56c99fdefbb18fd01a2e803c77f5d2e8478f4542d3b40ee7ccf9c474f02f77373801220bffc2781ed0c737acd3b4ee012be870eb9ffcdad2982d9c811ec5776d65a411be2f074bb1cba9fb32aa1f05e6d9e02daa4bfeab7ae16ec27c9a90cd4cf02ad3aa8a40770b5491e327130d7daf5d0594bd01d66227a6e1091685a86cff84cdba472a24493c7c7f3dde7e7ecd3baa924cc27be7553c3f70"}, {0xdd, 0x78, "48e98c4a3abcda474c20e7b85fa2b8b4c8ef72b848365e9d86a98cf5d67ec78ecab5bb4e39a6909757e2eb7b67e0fe1eb700712377e632fde723b9a9132bb57c1e1e14b11eee2f6bf102605960e5b208c311469e2bb3f18bb84e7a2df16927a907168ecc8dcd7de561c1fdccec95d454e073f04be1264e2c"}, {0xdd, 0x42, "ddd750eb6bc60b2a1314a1d7aa88259a08234576a0c9f91ff066557a221b6c498c6b134caa38f0e96d1ab3eafb899d4a034378afd22848c42ddc4c8d16d6e275fd80"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x5, 0x2]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x4000}, 0x800) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0x8) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@RTM_DELMDB={0x38, 0x55, 0x93d, 0x2, 0x25dfdbf8, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x3, 0x0, {@in6_addr=@mcast2, 0x86dd}}}]}, 0x38}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r9, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000002040)={0x4c, r11, 0x1, 0x200000, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) sendmsg$WG_CMD_GET_DEVICE(r9, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, r11, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xc}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}]}, 0x70}}, 0x8000) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x880) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 304.645946ms ago: executing program 4 (id=1511): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x38}}], 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000180)) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x8, 0x0, 0x8000) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x80000000, 0x0, 0x5, 0x802, r6, 0x10000, '\x00', 0x0, r0, 0x1, 0x1, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r9 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) 205.792251ms ago: executing program 2 (id=1512): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, 0x0) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x2}, {0x9, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) (async, rerun: 32) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) 118.516977ms ago: executing program 0 (id=1513): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000003200)={'ip6tnl0\x00', &(0x7f0000003180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x80000001, [0x9, 0x2f], 0x8}, 0x10) 29.435337ms ago: executing program 0 (id=1514): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYBLOB="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", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.661721ms ago: executing program 2 (id=1515): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x68}}, 0x0) (async) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000002c0)=0x3, &(0x7f0000000300)=0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) unshare(0x600) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) (async) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r4, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}], 0x1}}], 0x2, 0x4048884) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 0s ago: executing program 1 (id=1516): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e23, 0xdb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "b4003a00"}, 0x28) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f00000015c0)={0x14, 0x0, 0x5, 0x401, 0x0, 0x0, {0xe, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x15}, 0x4000800) ioctl$sock_netdev_private(r4, 0x8912, &(0x7f0000000080)) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) bind$ax25(r6, &(0x7f0000000480)={{0x3, @default, 0x21}, [@null, @default, @default, @default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) connect$ax25(r6, &(0x7f00000001c0)={{0x3, @default, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000180)=@netrom={'nr', 0x0}, 0x10) shutdown(r2, 0x1) kernel console output (not intermixed with test programs): 71.173782][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.181048][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.188308][ T5859] bridge_slave_1: entered allmulticast mode [ 71.195405][ T5859] bridge_slave_1: entered promiscuous mode [ 71.213431][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.221321][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.228904][ T5866] bridge_slave_1: entered allmulticast mode [ 71.235945][ T5866] bridge_slave_1: entered promiscuous mode [ 71.253506][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.260971][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.268703][ T5868] bridge_slave_0: entered allmulticast mode [ 71.275713][ T5868] bridge_slave_0: entered promiscuous mode [ 71.319292][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.326911][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.334302][ T5857] bridge_slave_0: entered allmulticast mode [ 71.342127][ T5857] bridge_slave_0: entered promiscuous mode [ 71.349357][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.356575][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.363747][ T5868] bridge_slave_1: entered allmulticast mode [ 71.371205][ T5868] bridge_slave_1: entered promiscuous mode [ 71.391369][ T5854] team0: Port device team_slave_0 added [ 71.409423][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.416674][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.423799][ T5857] bridge_slave_1: entered allmulticast mode [ 71.431743][ T5857] bridge_slave_1: entered promiscuous mode [ 71.450804][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.457271][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.478174][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.489058][ T5854] team0: Port device team_slave_1 added [ 71.497434][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.508760][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.535086][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.566738][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.587423][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.633425][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.654670][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.662309][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.689455][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.702908][ T5859] team0: Port device team_slave_0 added [ 71.723245][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.743976][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.751088][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.777508][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.790463][ T5859] team0: Port device team_slave_1 added [ 71.811318][ T5866] team0: Port device team_slave_0 added [ 71.830128][ T5868] team0: Port device team_slave_0 added [ 71.844731][ T5868] team0: Port device team_slave_1 added [ 71.863573][ T5866] team0: Port device team_slave_1 added [ 71.893077][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.900180][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.927016][ T5861] Bluetooth: hci1: command tx timeout [ 71.932687][ T5861] Bluetooth: hci4: command tx timeout [ 71.932787][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.938309][ T5861] Bluetooth: hci0: command tx timeout [ 71.966886][ T5857] team0: Port device team_slave_0 added [ 71.975365][ T5857] team0: Port device team_slave_1 added [ 71.992997][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.000062][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.026193][ T5861] Bluetooth: hci2: command tx timeout [ 72.026616][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.031876][ T5861] Bluetooth: hci3: command tx timeout [ 72.082560][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.089710][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.115913][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.130582][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.137592][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.164067][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.200247][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.207906][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.233911][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.250355][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.257486][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.287040][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.311169][ T5854] hsr_slave_0: entered promiscuous mode [ 72.317747][ T5854] hsr_slave_1: entered promiscuous mode [ 72.324682][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.331848][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.359121][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.400137][ T5859] hsr_slave_0: entered promiscuous mode [ 72.407250][ T5859] hsr_slave_1: entered promiscuous mode [ 72.413647][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 72.419597][ T5859] Cannot create hsr debugfs directory [ 72.429533][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.436529][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.462547][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.568755][ T5866] hsr_slave_0: entered promiscuous mode [ 72.575083][ T5866] hsr_slave_1: entered promiscuous mode [ 72.581315][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 72.587080][ T5866] Cannot create hsr debugfs directory [ 72.605239][ T5857] hsr_slave_0: entered promiscuous mode [ 72.611848][ T5857] hsr_slave_1: entered promiscuous mode [ 72.618451][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 72.624182][ T5857] Cannot create hsr debugfs directory [ 72.674081][ T5868] hsr_slave_0: entered promiscuous mode [ 72.680400][ T5868] hsr_slave_1: entered promiscuous mode [ 72.687341][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 72.693061][ T5868] Cannot create hsr debugfs directory [ 73.192410][ T5854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.204422][ T5854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.214867][ T5854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.232823][ T5854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.301971][ T5859] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.319400][ T5859] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.331030][ T5859] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.348766][ T5859] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.445726][ T5857] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.456628][ T5857] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.478028][ T5857] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.492425][ T5857] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.515531][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.590764][ T5866] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.613318][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.628075][ T5866] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.644956][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.652356][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.679533][ T5866] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.690138][ T5866] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.737255][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.744841][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.799175][ T5868] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.814054][ T5868] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.838069][ T5868] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.867884][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.874874][ T5868] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.958991][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.991347][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.012801][ T5861] Bluetooth: hci0: command tx timeout [ 74.012876][ T5865] Bluetooth: hci1: command tx timeout [ 74.024924][ T51] Bluetooth: hci4: command tx timeout [ 74.033829][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.041000][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.064904][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.072062][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.090279][ T5865] Bluetooth: hci2: command tx timeout [ 74.095767][ T51] Bluetooth: hci3: command tx timeout [ 74.123141][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.173719][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.187893][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.195022][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.252360][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.265984][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.273161][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.284993][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.292134][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.316100][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.323254][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.440867][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.484027][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.573546][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.604643][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.611852][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.673484][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.680687][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.734730][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.859283][ T5859] veth0_vlan: entered promiscuous mode [ 74.925446][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.950084][ T5859] veth1_vlan: entered promiscuous mode [ 75.103342][ T5859] veth0_macvtap: entered promiscuous mode [ 75.132267][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.149982][ T5859] veth1_macvtap: entered promiscuous mode [ 75.178872][ T5857] veth0_vlan: entered promiscuous mode [ 75.239826][ T5857] veth1_vlan: entered promiscuous mode [ 75.254943][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.285322][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.297404][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.319768][ T5866] veth0_vlan: entered promiscuous mode [ 75.327804][ T5854] veth0_vlan: entered promiscuous mode [ 75.347702][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.357047][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.377575][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.386993][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.410245][ T5854] veth1_vlan: entered promiscuous mode [ 75.422709][ T5866] veth1_vlan: entered promiscuous mode [ 75.442418][ T5857] veth0_macvtap: entered promiscuous mode [ 75.455510][ T5857] veth1_macvtap: entered promiscuous mode [ 75.539416][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.558569][ T5854] veth0_macvtap: entered promiscuous mode [ 75.586964][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.596174][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.598782][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.621331][ T5866] veth0_macvtap: entered promiscuous mode [ 75.632927][ T5866] veth1_macvtap: entered promiscuous mode [ 75.645835][ T5854] veth1_macvtap: entered promiscuous mode [ 75.664022][ T5868] veth0_vlan: entered promiscuous mode [ 75.698377][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.707599][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.732100][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.740512][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.745251][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.755646][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.764819][ T5868] veth1_vlan: entered promiscuous mode [ 75.774660][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.785353][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.819354][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.831783][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.845530][ T3539] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.879752][ T3539] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.894584][ T3539] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.917948][ T3539] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.935867][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.983927][ T3539] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.000074][ T3539] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.029820][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.049339][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.062164][ T5868] veth0_macvtap: entered promiscuous mode [ 76.082206][ T3539] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.091048][ T51] Bluetooth: hci0: command tx timeout [ 76.097507][ T51] Bluetooth: hci4: command tx timeout [ 76.102950][ T5865] Bluetooth: hci1: command tx timeout [ 76.111966][ T3539] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.134272][ T5868] veth1_macvtap: entered promiscuous mode [ 76.168083][ T51] Bluetooth: hci3: command tx timeout [ 76.173626][ T5865] Bluetooth: hci2: command tx timeout [ 76.184552][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.209336][ T5971] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.222885][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.311013][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.376132][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.387498][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.421043][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.572699][ T151] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.572988][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.593677][ T151] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.616187][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.659756][ T151] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.681677][ T151] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.566630][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.588172][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.678315][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.702989][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.784750][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.822702][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.001729][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.025666][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.167051][ T51] Bluetooth: hci4: command tx timeout [ 78.172572][ T5865] Bluetooth: hci1: command tx timeout [ 78.172586][ T5861] Bluetooth: hci0: command tx timeout [ 78.246511][ T51] Bluetooth: hci2: command tx timeout [ 78.251985][ T5865] Bluetooth: hci3: command tx timeout [ 78.653395][ T6013] Zero length message leads to an empty skb [ 79.267353][ T6037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13'. [ 80.321595][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'. [ 80.547833][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 80.940313][ T6126] netlink: 'syz.3.25': attribute type 4 has an invalid length. [ 81.138761][ T6129] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.312187][ T6140] warning: `syz.1.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.380371][ T6144] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 81.484949][ T6146] netlink: 32 bytes leftover after parsing attributes in process `syz.2.32'. [ 81.518723][ T6147] netlink: 32 bytes leftover after parsing attributes in process `syz.2.32'. [ 81.575613][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 81.594091][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'. [ 81.596860][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 81.613496][ T6146] bridge_slave_1: left allmulticast mode [ 81.613519][ T6146] bridge_slave_1: left promiscuous mode [ 81.614486][ T6146] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.725011][ T6146] bridge_slave_0: left allmulticast mode [ 81.746823][ T6146] bridge_slave_0: left promiscuous mode [ 81.770282][ T6146] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.905592][ T6165] syz.1.36 uses obsolete (PF_INET,SOCK_PACKET) [ 82.263788][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'. [ 82.523988][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.531088][ T6193] netlink: 'syz.3.41': attribute type 3 has an invalid length. [ 82.531108][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 82.548076][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.775438][ T6185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.795211][ T6185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.904704][ T6058] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.930627][ T6058] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.958526][ T6058] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.005197][ T6058] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.125304][ T6219] bond_slave_0: entered promiscuous mode [ 83.131160][ T6219] bond_slave_1: entered promiscuous mode [ 83.138949][ T6219] vlan2: entered promiscuous mode [ 83.144082][ T6219] bond0: entered promiscuous mode [ 83.185275][ T6222] gretap0: mtu less than device minimum [ 83.457293][ T6240] Bluetooth: MGMT ver 1.23 [ 84.126690][ T6256] hsr_slave_0: left promiscuous mode [ 84.146228][ T6256] hsr_slave_1: left promiscuous mode [ 84.382823][ T6276] pimreg: entered allmulticast mode [ 84.427878][ T6276] __nla_validate_parse: 5 callbacks suppressed [ 84.427896][ T6276] netlink: 388 bytes leftover after parsing attributes in process `syz.4.64'. [ 84.511066][ T6283] pimreg: left allmulticast mode [ 84.875899][ T6300] netlink: 'syz.0.72': attribute type 4 has an invalid length. [ 84.904516][ T6300] netlink: 17 bytes leftover after parsing attributes in process `syz.0.72'. [ 84.907576][ T6298] netlink: 52 bytes leftover after parsing attributes in process `syz.2.69'. [ 85.150399][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 85.467942][ T6328] tipc: Failed to remove unknown binding: 66,1,1/0:3619354902/3619354904 [ 85.491812][ T6330] netlink: 84 bytes leftover after parsing attributes in process `syz.0.79'. [ 85.508603][ T6328] tipc: Failed to remove unknown binding: 66,1,1/0:3619354902/3619354904 [ 85.567016][ T6328] tipc: Failed to remove unknown binding: 66,1,1/0:3619354902/3619354904 [ 85.866504][ T6340] netlink: 40 bytes leftover after parsing attributes in process `syz.0.81'. [ 86.043109][ T6349] netlink: 16 bytes leftover after parsing attributes in process `syz.0.81'. [ 86.075893][ T6355] netlink: 'syz.2.85': attribute type 1 has an invalid length. [ 86.148144][ T6356] netlink: 'syz.2.85': attribute type 3 has an invalid length. [ 86.263463][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.87'. [ 86.316830][ T6361] netlink: 64 bytes leftover after parsing attributes in process `syz.1.89'. [ 86.539602][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.93'. [ 86.707482][ T6382] bridge_slave_1: left allmulticast mode [ 86.713171][ T6382] bridge_slave_1: left promiscuous mode [ 86.792984][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.817667][ T887] cfg80211: failed to load regulatory.db [ 86.842375][ T6382] bridge_slave_0: left allmulticast mode [ 86.861139][ T6382] bridge_slave_0: left promiscuous mode [ 86.877174][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.199400][ T6404] netlink: 'syz.2.98': attribute type 2 has an invalid length. [ 87.907132][ T6446] sctp: [Deprecated]: syz.4.110 (pid 6446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 87.907132][ T6446] Use struct sctp_sack_info instead [ 88.010295][ T6446] sctp: [Deprecated]: syz.4.110 (pid 6446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 88.010295][ T6446] Use struct sctp_sack_info instead [ 94.396024][ T6451] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 94.448359][ T6450] netlink: 'syz.4.110': attribute type 9 has an invalid length. [ 94.580258][ T6455] netlink: 'syz.1.112': attribute type 4 has an invalid length. [ 94.596781][ T6455] __nla_validate_parse: 5 callbacks suppressed [ 94.596797][ T6455] netlink: 17 bytes leftover after parsing attributes in process `syz.1.112'. [ 94.623844][ T6457] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 94.667341][ T6457] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 94.907814][ T6469] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.116'. [ 94.943553][ T6469] netlink: zone id is out of range [ 94.961752][ T6469] netlink: zone id is out of range [ 94.990563][ T6469] netlink: get zone limit has 8 unknown bytes [ 95.002921][ T6475] geneve2: entered promiscuous mode [ 95.190413][ T6484] netlink: 'syz.4.121': attribute type 13 has an invalid length. [ 95.214160][ T6484] netlink: 'syz.4.121': attribute type 17 has an invalid length. [ 95.410041][ T6484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.465070][ T6499] bridge1: entered promiscuous mode [ 95.611062][ T6509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.044580][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.130'. [ 96.996903][ T6519] bridge_slave_1: left allmulticast mode [ 97.002583][ T6519] bridge_slave_1: left promiscuous mode [ 97.009455][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.022845][ T6519] bridge_slave_0: left allmulticast mode [ 97.030542][ T6519] bridge_slave_0: left promiscuous mode [ 97.038060][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.202785][ T6528] netlink: 'syz.3.131': attribute type 14 has an invalid length. [ 97.453535][ T6554] netdevsim netdevsim3: Direct firmware load for ./bus failed with error -2 [ 97.474787][ T6554] netdevsim netdevsim3: Falling back to sysfs fallback for: ./bus [ 97.524114][ T6549] netlink: 24 bytes leftover after parsing attributes in process `syz.0.137'. [ 97.536204][ T5983] IPVS: starting estimator thread 0... [ 97.563745][ T6561] netlink: 'syz.3.140': attribute type 1 has an invalid length. [ 97.599601][ T6561] netlink: 224 bytes leftover after parsing attributes in process `syz.3.140'. [ 97.638385][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.140'. [ 97.657387][ T6562] IPVS: using max 27 ests per chain, 64800 per kthread [ 97.667551][ T6564] syzkaller1: entered promiscuous mode [ 97.687889][ T6564] syzkaller1: entered allmulticast mode [ 97.720695][ T6564] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 97.786834][ T6564] block nbd1: NBD_DISCONNECT [ 97.937419][ T6586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.145'. [ 97.974128][ T6585] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 97.986285][ T6586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.145'. [ 98.621872][ T6603] netlink: 'syz.3.152': attribute type 1 has an invalid length. [ 98.643816][ T6604] netlink: 'syz.3.152': attribute type 1 has an invalid length. [ 98.963861][ T6609] netlink: 'syz.4.154': attribute type 9 has an invalid length. [ 99.499267][ T6617] netlink: 'syz.4.157': attribute type 61 has an invalid length. [ 99.677513][ T6625] netlink: 'syz.4.160': attribute type 1 has an invalid length. [ 99.716460][ T6621] netlink: 'syz.0.158': attribute type 7 has an invalid length. [ 99.754973][ T6621] netlink: 24 bytes leftover after parsing attributes in process `syz.0.158'. [ 99.757121][ T6630] netlink: 'syz.3.162': attribute type 1 has an invalid length. [ 99.807353][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'. [ 99.819987][ T6635] netlink: 16 bytes leftover after parsing attributes in process `syz.0.158'. [ 99.853736][ T6635] netlink: 40 bytes leftover after parsing attributes in process `syz.0.158'. [ 99.878079][ T6630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.885685][ T6635] netlink: 540 bytes leftover after parsing attributes in process `syz.0.158'. [ 99.976519][ T6639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.994738][ T6639] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 100.030985][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.164'. [ 100.037122][ T6639] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 100.040997][ T6649] netlink: 24 bytes leftover after parsing attributes in process `syz.4.164'. [ 100.071213][ T6651] netlink: 224 bytes leftover after parsing attributes in process `syz.1.161'. [ 100.151934][ T6630] veth5: entered promiscuous mode [ 100.171431][ T6630] bond1: (slave veth5): Enslaving as an active interface with a down link [ 100.183336][ T6647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.161'. [ 100.192930][ T6647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.161'. [ 100.202315][ T6647] netlink: 'syz.1.161': attribute type 4 has an invalid length. [ 100.224029][ T6652] ip6gretap0: entered promiscuous mode [ 100.230001][ T6652] macsec1: entered promiscuous mode [ 100.239267][ T6652] ip6gretap0: left promiscuous mode [ 100.267901][ T6654] netlink: 'syz.0.166': attribute type 25 has an invalid length. [ 100.292473][ T6654] netlink: 'syz.0.166': attribute type 7 has an invalid length. [ 100.581892][ T6665] dvmrp8: entered allmulticast mode [ 100.674830][ T6667] dvmrp8: left allmulticast mode [ 100.685078][ T6644] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 101.079899][ T6682] netlink: 'syz.1.174': attribute type 1 has an invalid length. [ 101.928918][ T5865] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.964304][ T6721] bond0: (slave bond_slave_0): Releasing backup interface [ 101.995229][ T6721] bond0: (slave bond_slave_1): Releasing backup interface [ 102.054898][ T6721] team0: Port device team_slave_0 removed [ 102.084910][ T6721] team0: Port device team_slave_1 removed [ 102.093159][ T6721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.101787][ T6721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.114847][ T6721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.123672][ T6721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.140328][ T6721] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 102.408252][ T6747] netlink: 'syz.3.189': attribute type 13 has an invalid length. [ 102.946961][ T6776] syzkaller0: entered promiscuous mode [ 102.952486][ T6776] syzkaller0: entered allmulticast mode [ 104.136596][ T6848] syzkaller1: entered promiscuous mode [ 104.143340][ T6848] syzkaller1: entered allmulticast mode [ 104.888829][ T6875] __nla_validate_parse: 7 callbacks suppressed [ 104.888848][ T6875] netlink: 24 bytes leftover after parsing attributes in process `syz.0.219'. [ 105.266280][ T6897] netlink: 52 bytes leftover after parsing attributes in process `syz.4.225'. [ 105.316804][ T6898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.224'. [ 105.347586][ T6898] netlink: 'syz.1.224': attribute type 10 has an invalid length. [ 105.370059][ T6898] netlink: 40 bytes leftover after parsing attributes in process `syz.1.224'. [ 105.414478][ T6898] dummy0: entered promiscuous mode [ 105.445955][ T6898] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 105.652603][ T6911] netlink: 20 bytes leftover after parsing attributes in process `syz.1.227'. [ 105.706269][ T6911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.227'. [ 105.727879][ T6911] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 105.786025][ T6920] netlink: 'syz.2.229': attribute type 11 has an invalid length. [ 105.788244][ T6907] netlink: 28 bytes leftover after parsing attributes in process `syz.4.226'. [ 105.892955][ T6920] netlink: 36 bytes leftover after parsing attributes in process `syz.2.229'. [ 106.102641][ T6926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.231'. [ 106.260327][ T6932] netlink: 'syz.0.233': attribute type 5 has an invalid length. [ 106.384488][ T6935] netlink: 272 bytes leftover after parsing attributes in process `syz.1.244'. [ 106.772674][ T6954] nbd: must specify at least one socket [ 108.798845][ T6985] Illegal XDP return value 4294967282 on prog (id 92) dev N/A, expect packet loss! [ 108.855113][ T6994] netlink: 'syz.3.247': attribute type 13 has an invalid length. [ 109.384846][ T7017] erspan0: entered promiscuous mode [ 109.440528][ T7012] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.621305][ T7020] team1: entered promiscuous mode [ 109.627082][ T7020] team1: entered allmulticast mode [ 109.669471][ T7012] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.872930][ T7012] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.950086][ T7012] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.353540][ T7053] __nla_validate_parse: 1 callbacks suppressed [ 110.353556][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.264'. [ 110.371793][ T7043] syzkaller1: entered promiscuous mode [ 110.374556][ T7056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.265'. [ 110.388901][ T7043] syzkaller1: entered allmulticast mode [ 110.426352][ T7046] vlan2: entered allmulticast mode [ 110.431624][ T7046] bridge_slave_0: entered allmulticast mode [ 110.450822][ T7057] netlink: 48 bytes leftover after parsing attributes in process `syz.2.265'. [ 110.460816][ T7052] netlink: 84 bytes leftover after parsing attributes in process `syz.4.264'. [ 110.473080][ T7052] netlink: 84 bytes leftover after parsing attributes in process `syz.4.264'. [ 110.485861][ T7052] netlink: 84 bytes leftover after parsing attributes in process `syz.4.264'. [ 110.497992][ T7052] netlink: 84 bytes leftover after parsing attributes in process `syz.4.264'. [ 110.509291][ T7054] netlink: 84 bytes leftover after parsing attributes in process `syz.4.264'. [ 110.549968][ T7054] netlink: 84 bytes leftover after parsing attributes in process `syz.4.264'. [ 110.577186][ T7052] netlink: 84 bytes leftover after parsing attributes in process `syz.4.264'. [ 110.731358][ T6054] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.792101][ T151] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.003029][ T6052] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.087695][ T6054] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.462694][ T7079] bond0: entered promiscuous mode [ 111.485936][ T7079] bond_slave_0: entered promiscuous mode [ 111.505496][ T7079] bond_slave_1: entered promiscuous mode [ 111.525009][ T7079] bond0: left promiscuous mode [ 111.537330][ T7079] bond_slave_0: left promiscuous mode [ 111.543030][ T7079] bond_slave_1: left promiscuous mode [ 111.574821][ T7088] 8021q: VLANs not supported on ip_vti0 [ 111.946554][ T7101] netlink: 'syz.1.280': attribute type 39 has an invalid length. [ 112.459538][ T5983] IPVS: starting estimator thread 0... [ 112.559313][ T7119] IPVS: using max 30 ests per chain, 72000 per kthread [ 113.035871][ T7135] mac80211_hwsim hwsim6 wlan0: Caught tx_queue_len zero misconfig [ 113.121814][ T7137] tipc: Started in network mode [ 113.127171][ T7137] tipc: Node identity 2eeb3db5fdda, cluster identity 4711 [ 113.134563][ T7137] tipc: Enabled bearer , priority 0 [ 113.171267][ T7137] tipc: Disabling bearer [ 113.490206][ T7142] lo: Caught tx_queue_len zero misconfig [ 113.680676][ T7166] netlink: 'syz.0.296': attribute type 13 has an invalid length. [ 115.804683][ T7173] __nla_validate_parse: 72 callbacks suppressed [ 115.804701][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.299'. [ 115.822720][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.298'. [ 115.908673][ T7175] netlink: 'syz.0.298': attribute type 1 has an invalid length. [ 116.113464][ T7185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.301'. [ 116.123150][ T7185] netlink: 'syz.0.301': attribute type 15 has an invalid length. [ 116.216619][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.226527][ T7185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.301'. [ 116.255322][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.281714][ T7185] netlink: 'syz.0.301': attribute type 15 has an invalid length. [ 116.302697][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.318713][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.442869][ T7196] netlink: 48 bytes leftover after parsing attributes in process `syz.0.306'. [ 116.489305][ T7191] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.630888][ T7191] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.671947][ T7196] syz.0.306 (7196) used greatest stack depth: 17864 bytes left [ 116.800401][ T7191] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.821462][ T7209] ieee802154 phy0 wpan0: encryption failed: -22 [ 116.949358][ T7191] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.131730][ T6058] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.148121][ T6058] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.202608][ T6058] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.381857][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 118.122950][ T151] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.152057][ T7234] syzkaller1: entered promiscuous mode [ 118.158775][ T7234] syzkaller1: entered allmulticast mode [ 118.394929][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 118.457255][ T7248] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.519106][ T7256] netlink: 24 bytes leftover after parsing attributes in process `syz.4.320'. [ 118.637289][ T7256] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.320'. [ 118.647277][ T7256] netlink: zone id is out of range [ 118.652426][ T7256] netlink: zone id is out of range [ 118.667865][ T7256] netlink: zone id is out of range [ 118.673006][ T7256] netlink: zone id is out of range [ 118.704564][ T7256] netlink: get zone limit has 8 unknown bytes [ 118.917640][ T7281] netlink: 9 bytes leftover after parsing attributes in process `syz.3.323'. [ 118.945685][ T7281] ..0·: renamed from hsr0 (while UP) [ 118.954992][ T7281] ..0·: entered allmulticast mode [ 118.961069][ T7281] hsr_slave_0: entered allmulticast mode [ 118.986813][ T7281] hsr_slave_1: entered allmulticast mode [ 118.992946][ T7281] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 118.993309][ T7285] netlink: 'syz.0.326': attribute type 4 has an invalid length. [ 119.096505][ T7288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.003360][ T7330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.185809][ T7347] __nla_validate_parse: 4 callbacks suppressed [ 121.185825][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.343'. [ 121.409486][ T7360] netlink: 152 bytes leftover after parsing attributes in process `syz.0.344'. [ 121.446550][ T7365] netlink: 32 bytes leftover after parsing attributes in process `syz.2.345'. [ 121.469116][ T7365] netlink: 'syz.2.345': attribute type 1 has an invalid length. [ 121.818023][ T7377] netlink: 14 bytes leftover after parsing attributes in process `syz.2.347'. [ 122.591767][ T7420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.358'. [ 122.771459][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'. [ 122.782105][ T7432] netlink: 24 bytes leftover after parsing attributes in process `syz.0.359'. [ 122.943762][ T7439] batadv0: entered promiscuous mode [ 122.981010][ T7439] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 123.503594][ T7469] netlink: 'syz.1.365': attribute type 4 has an invalid length. [ 123.922149][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.369'. [ 123.987794][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.369'. [ 125.350238][ T7518] tipc: Started in network mode [ 125.355146][ T7518] tipc: Node identity 080211, cluster identity 4711 [ 125.405641][ T7518] tipc: Enabled bearer , priority 0 [ 125.409854][ T7530] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 125.428041][ T7520] netlink: 'syz.0.371': attribute type 1 has an invalid length. [ 125.447090][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 125.455110][ T7523] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 125.466141][ T7532] netlink: 32 bytes leftover after parsing attributes in process `syz.1.372'. [ 125.479271][ T7523] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 125.495923][ T7523] tipc: Resetting bearer [ 125.738440][ T7532] tap0: tun_chr_ioctl cmd 1074025677 [ 125.744624][ T7532] tap0: linktype set to 776 [ 126.463429][ T7584] __nla_validate_parse: 4 callbacks suppressed [ 126.463446][ T7584] netlink: 52 bytes leftover after parsing attributes in process `syz.3.381'. [ 126.479782][ T5967] tipc: Node number set to 134353152 [ 127.831563][ T7573] tap0: tun_chr_ioctl cmd 1074025676 [ 127.839112][ T7573] tap0: owner set to 0 [ 127.847661][ T7584] netlink: 36 bytes leftover after parsing attributes in process `syz.3.381'. [ 128.373559][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.387'. [ 129.105012][ T7649] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 129.337160][ T7623] delete_channel: no stack [ 129.449993][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.396'. [ 130.392985][ T7630] syz.4.389: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 130.416404][ T7630] CPU: 0 UID: 0 PID: 7630 Comm: syz.4.389 Not tainted syzkaller #0 PREEMPT(full) [ 130.416430][ T7630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.416444][ T7630] Call Trace: [ 130.416455][ T7630] [ 130.416464][ T7630] dump_stack_lvl+0x189/0x250 [ 130.416499][ T7630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.416518][ T7630] ? __pfx__printk+0x10/0x10 [ 130.416541][ T7630] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 130.416560][ T7630] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 130.416581][ T7630] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 130.416602][ T7630] warn_alloc+0x214/0x310 [ 130.416631][ T7630] ? __pfx_warn_alloc+0x10/0x10 [ 130.416664][ T7630] ? __get_vm_area_node+0x28f/0x300 [ 130.416686][ T7630] ? fq_pie_init+0x430/0x840 [ 130.416713][ T7630] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 130.416767][ T7630] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 130.416796][ T7630] ? rcu_is_watching+0x15/0xb0 [ 130.416813][ T7630] ? fq_pie_init+0x430/0x840 [ 130.416835][ T7630] ? fq_pie_init+0x430/0x840 [ 130.416856][ T7630] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 130.416878][ T7630] ? fq_pie_init+0x430/0x840 [ 130.416900][ T7630] ? tcf_block_get+0x67/0xa0 [ 130.416917][ T7630] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 130.416938][ T7630] fq_pie_init+0x430/0x840 [ 130.416963][ T7630] ? __pfx_fq_pie_init+0x10/0x10 [ 130.416986][ T7630] qdisc_create+0x7ac/0xea0 [ 130.417025][ T7630] tc_modify_qdisc+0x1538/0x20e0 [ 130.417067][ T7630] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 130.417124][ T7630] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 130.417146][ T7630] rtnetlink_rcv_msg+0x77c/0xb70 [ 130.417170][ T7630] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 130.417188][ T7630] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 130.417204][ T7630] ? ref_tracker_free+0x63a/0x7d0 [ 130.417229][ T7630] ? __asan_memcpy+0x40/0x70 [ 130.417247][ T7630] ? __pfx_ref_tracker_free+0x10/0x10 [ 130.417282][ T7630] netlink_rcv_skb+0x208/0x470 [ 130.417303][ T7630] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 130.417323][ T7630] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 130.417361][ T7630] ? netlink_deliver_tap+0x2e/0x1b0 [ 130.417388][ T7630] netlink_unicast+0x82f/0x9e0 [ 130.417416][ T7630] ? __pfx_netlink_unicast+0x10/0x10 [ 130.417436][ T7630] ? netlink_sendmsg+0x642/0xb30 [ 130.417453][ T7630] ? skb_put+0x11b/0x210 [ 130.417478][ T7630] netlink_sendmsg+0x805/0xb30 [ 130.417509][ T7630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.417532][ T7630] ? aa_sock_msg_perm+0xf1/0x1d0 [ 130.417558][ T7630] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 130.417575][ T7630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.417595][ T7630] __sock_sendmsg+0x219/0x270 [ 130.417623][ T7630] ____sys_sendmsg+0x505/0x830 [ 130.417650][ T7630] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.417680][ T7630] ? import_iovec+0x74/0xa0 [ 130.417705][ T7630] ___sys_sendmsg+0x21f/0x2a0 [ 130.417728][ T7630] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.417788][ T7630] ? __fget_files+0x2a/0x420 [ 130.417809][ T7630] ? __fget_files+0x3a0/0x420 [ 130.417842][ T7630] __x64_sys_sendmsg+0x19b/0x260 [ 130.417866][ T7630] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 130.417899][ T7630] ? rcu_is_watching+0x15/0xb0 [ 130.417920][ T7630] ? do_syscall_64+0xbe/0x3b0 [ 130.417940][ T7630] do_syscall_64+0xfa/0x3b0 [ 130.417955][ T7630] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.417978][ T7630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.417994][ T7630] ? clear_bhb_loop+0x60/0xb0 [ 130.418014][ T7630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.418031][ T7630] RIP: 0033:0x7f5bdc98eec9 [ 130.418058][ T7630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.418072][ T7630] RSP: 002b:00007f5bdd797038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.418092][ T7630] RAX: ffffffffffffffda RBX: 00007f5bdcbe5fa0 RCX: 00007f5bdc98eec9 [ 130.418105][ T7630] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000007 [ 130.418117][ T7630] RBP: 00007f5bdca11f91 R08: 0000000000000000 R09: 0000000000000000 [ 130.418128][ T7630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.418139][ T7630] R13: 00007f5bdcbe6038 R14: 00007f5bdcbe5fa0 R15: 00007ffc18a78438 [ 130.418170][ T7630] [ 130.418182][ T7630] Mem-Info: [ 130.835854][ T7630] active_anon:7530 inactive_anon:0 isolated_anon:0 [ 130.835854][ T7630] active_file:3077 inactive_file:39895 isolated_file:0 [ 130.835854][ T7630] unevictable:768 dirty:269 writeback:0 [ 130.835854][ T7630] slab_reclaimable:10746 slab_unreclaimable:129317 [ 130.835854][ T7630] mapped:32519 shmem:1360 pagetables:1311 [ 130.835854][ T7630] sec_pagetables:0 bounce:0 [ 130.835854][ T7630] kernel_misc_reclaimable:0 [ 130.835854][ T7630] free:1290458 free_pcp:19223 free_cma:0 [ 130.881592][ T7630] Node 0 active_anon:30120kB inactive_anon:0kB active_file:12308kB inactive_file:159376kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130076kB dirty:1064kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12212kB pagetables:5092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 130.913500][ T7630] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 130.943676][ T7630] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 130.976604][ T7630] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 130.982500][ T7630] Node 0 DMA32 free:1266772kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30032kB inactive_anon:0kB active_file:12308kB inactive_file:157560kB unevictable:1536kB writepending:1076kB present:3129332kB managed:2559904kB mlocked:0kB bounce:0kB free_pcp:52992kB local_pcp:21312kB free_cma:0kB [ 131.015522][ T7630] lowmem_reserve[]: 0 0 1 1 1 [ 131.020277][ T7630] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 131.049533][ T7630] lowmem_reserve[]: 0 0 0 0 0 [ 131.054280][ T7630] Node 1 Normal free:3882912kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:12kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21824kB local_pcp:9056kB free_cma:0kB [ 131.085638][ T7630] lowmem_reserve[]: 0 0 0 0 0 [ 131.090462][ T7630] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 131.103191][ T7630] Node 0 DMA32: 1573*4kB (UME) 924*8kB (UME) 272*16kB (UME) 359*32kB (UME) 132*64kB (UME) 26*128kB (UME) 27*256kB (UME) 16*512kB (UM) 8*1024kB (UM) 3*2048kB (UM) 292*4096kB (M) = 1266772kB [ 131.122008][ T7630] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 131.134858][ T7630] Node 1 Normal: 236*4kB (UME) 60*8kB (UME) 57*16kB (UME) 70*32kB (UME) 19*64kB (UME) 8*128kB (UME) 5*256kB (UME) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3882912kB [ 131.153038][ T7630] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.162732][ T7630] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.172084][ T7630] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.181671][ T7630] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.191003][ T7630] 44328 total pagecache pages [ 131.195683][ T7630] 0 pages in swap cache [ 131.199865][ T7630] Free swap = 124996kB [ 131.204013][ T7630] Total swap = 124996kB [ 131.208368][ T7630] 2097051 pages RAM [ 131.212170][ T7630] 0 pages HighMem/MovableOnly [ 131.216973][ T7630] 424985 pages reserved [ 131.221272][ T7630] 0 pages cma reserved [ 131.235303][ T7637] pim6reg: entered allmulticast mode [ 131.241308][ T7639] pim6reg: left allmulticast mode [ 131.618023][ T7680] tipc: Enabling of bearer rejected, failed to enable media [ 132.146835][ T7676] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 132.299459][ T7710] netlink: 'syz.3.409': attribute type 7 has an invalid length. [ 132.431985][ T7718] netlink: 24 bytes leftover after parsing attributes in process `syz.3.409'. [ 132.483285][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'. [ 132.492473][ T7710] netlink: 16 bytes leftover after parsing attributes in process `syz.3.409'. [ 132.506327][ T7710] netlink: 40 bytes leftover after parsing attributes in process `syz.3.409'. [ 132.515208][ T7710] netlink: 540 bytes leftover after parsing attributes in process `syz.3.409'. [ 132.892662][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.124741][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.416'. [ 134.215645][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 134.242705][ T7744] geneve3: entered promiscuous mode [ 134.417929][ T6055] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.439505][ T6055] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.475638][ T6055] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.508784][ T6055] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.750996][ T7782] syzkaller1: entered promiscuous mode [ 134.771183][ T7782] syzkaller1: entered allmulticast mode [ 135.255528][ T7827] netlink: 'syz.0.428': attribute type 13 has an invalid length. [ 135.450344][ T7841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.431'. [ 135.484351][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.427'. [ 135.599731][ T7827] tipc: Resetting bearer [ 135.639734][ T7838] vlan0: entered promiscuous mode [ 135.657857][ T7838] vlan0: entered allmulticast mode [ 135.683139][ T7838] veth0_vlan: entered allmulticast mode [ 135.713775][ T7822] bridge0: entered promiscuous mode [ 135.719512][ T7822] macsec2: entered allmulticast mode [ 135.724922][ T7822] bridge0: entered allmulticast mode [ 135.736401][ T7822] bridge0: port 3(macsec2) entered blocking state [ 135.743443][ T7822] bridge0: port 3(macsec2) entered disabled state [ 135.762951][ T7822] bridge0: left allmulticast mode [ 135.776272][ T7822] bridge0: left promiscuous mode [ 135.798912][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.431'. [ 136.791787][ T7864] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 136.929707][ T7882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.939109][ T7882] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.966524][ T7882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.362522][ T7896] dummy0: left promiscuous mode [ 137.473982][ T7896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.498181][ T7896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.554462][ T7896] vlan0: left promiscuous mode [ 137.561694][ T7896] vlan0: left allmulticast mode [ 137.568811][ T7896] veth0_vlan: left allmulticast mode [ 137.634946][ T7903] hsr_slave_0: left promiscuous mode [ 137.659229][ T7903] hsr_slave_1: left promiscuous mode [ 137.724139][ T6058] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.753518][ T6058] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.785858][ T6058] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.807381][ T6058] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.142707][ T7976] syzkaller0: entered promiscuous mode [ 139.148570][ T7976] syzkaller0: entered allmulticast mode [ 139.157663][ T7975] tipc: Started in network mode [ 139.169982][ T7975] tipc: Node identity 2ec70f2d9b57, cluster identity 4711 [ 139.187713][ T7975] tipc: Enabled bearer , priority 0 [ 139.201703][ T7981] netlink: 'syz.4.460': attribute type 1 has an invalid length. [ 139.262191][ T7981] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 139.274242][ T7981] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 139.301347][ T7982] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 139.312452][ T7982] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 139.381836][ T7976] tipc: Resetting bearer [ 139.402883][ T7976] tipc: Disabling bearer [ 139.491945][ T7990] netlink: 'syz.4.461': attribute type 9 has an invalid length. [ 139.520418][ T7990] netlink: 'syz.4.461': attribute type 6 has an invalid length. [ 139.532049][ T7990] netlink: 'syz.4.461': attribute type 7 has an invalid length. [ 139.541336][ T7990] netlink: 'syz.4.461': attribute type 8 has an invalid length. [ 139.748013][ T7999] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig [ 139.762642][ T8003] netlink: 'syz.4.466': attribute type 21 has an invalid length. [ 139.865174][ T8011] __nla_validate_parse: 5 callbacks suppressed [ 139.865190][ T8011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.468'. [ 139.881418][ T8003] netlink: 156 bytes leftover after parsing attributes in process `syz.4.466'. [ 139.890722][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.466'. [ 139.911269][ T8013] tipc: Enabling of bearer rejected, failed to enable media [ 139.911913][ T8011] netlink: 'syz.2.468': attribute type 4 has an invalid length. [ 140.147085][ T8023] netlink: 100 bytes leftover after parsing attributes in process `syz.2.473'. [ 140.171741][ T8025] netlink: 100 bytes leftover after parsing attributes in process `syz.2.473'. [ 140.181966][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'. [ 140.362548][ T8009] syzkaller0: entered promiscuous mode [ 140.368423][ T8009] syzkaller0: entered allmulticast mode [ 140.375673][ T8027] bridge_slave_1: left allmulticast mode [ 140.381627][ T8027] bridge_slave_1: left promiscuous mode [ 140.387642][ T8027] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.397857][ T8027] bridge_slave_0: left allmulticast mode [ 140.403497][ T8027] bridge_slave_0: left promiscuous mode [ 140.410791][ T8027] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.646881][ T8046] netlink: 40 bytes leftover after parsing attributes in process `syz.1.479'. [ 140.872943][ T8057] vlan2: entered allmulticast mode [ 140.932102][ T8060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.484'. [ 140.941798][ T8059] netlink: 28 bytes leftover after parsing attributes in process `syz.1.484'. [ 140.941832][ T8059] netlink: 28 bytes leftover after parsing attributes in process `syz.1.484'. [ 140.954083][ T8059] batadv0: entered promiscuous mode [ 140.968207][ T8059] dummy0: entered promiscuous mode [ 140.974523][ T8059] debugfs: 'hsr0' already exists in 'hsr' [ 140.981357][ T8059] Cannot create hsr debugfs directory [ 140.987374][ T8059] hsr0: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 140.999411][ T8059] hsr0: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 141.317083][ T8073] bond1: entered promiscuous mode [ 141.690767][ T8105] netlink: 'syz.3.489': attribute type 1 has an invalid length. [ 141.708760][ T8105] netlink: 'syz.3.489': attribute type 1 has an invalid length. [ 141.831658][ T8112] netlink: 'syz.0.493': attribute type 16 has an invalid length. [ 141.853888][ T8112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.559134][ T8124] tipc: Enabled bearer , priority 0 [ 142.619692][ T8124] tipc: Disabling bearer [ 143.417961][ T8172] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 143.540817][ T5983] IPVS: starting estimator thread 0... [ 143.866273][ T8174] IPVS: using max 37 ests per chain, 88800 per kthread [ 144.965136][ T8221] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 144.975664][ T8221] syzkaller1: linktype set to 6 [ 144.988655][ T8221] validate_nla: 2 callbacks suppressed [ 144.988671][ T8221] netlink: 'syz.3.522': attribute type 1 has an invalid length. [ 145.243339][ T8239] nbd: must specify at least one socket [ 145.440173][ T8240] __nla_validate_parse: 4 callbacks suppressed [ 145.440191][ T8240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.526'. [ 145.653818][ T8259] netlink: 'syz.0.532': attribute type 13 has an invalid length. [ 145.662206][ T8259] netlink: 'syz.0.532': attribute type 17 has an invalid length. [ 145.858398][ T8259] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.979093][ T8271] netlink: 'syz.1.535': attribute type 1 has an invalid length. [ 145.989684][ T8271] netlink: 172 bytes leftover after parsing attributes in process `syz.1.535'. [ 146.037949][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.535'. [ 146.227383][ T8284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'. [ 146.506017][ T8302] netlink: 'syz.2.540': attribute type 13 has an invalid length. [ 147.745367][ T8337] syzkaller1: entered promiscuous mode [ 147.765556][ T8337] syzkaller1: entered allmulticast mode [ 147.886748][ T8353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 148.113087][ T8361] netlink: 32 bytes leftover after parsing attributes in process `syz.0.553'. [ 148.148405][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'. [ 148.271087][ T8369] netlink: 24 bytes leftover after parsing attributes in process `syz.1.556'. [ 148.459184][ T8372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.066759][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'. [ 149.181359][ T8414] syz_tun: entered allmulticast mode [ 149.250498][ T8414] dvmrp8: entered allmulticast mode [ 149.283542][ T8414] netlink: 256 bytes leftover after parsing attributes in process `syz.1.570'. [ 149.352056][ T8418] tipc: Enabled bearer , priority 10 [ 149.454517][ T8425] netlink: 'syz.4.572': attribute type 1 has an invalid length. [ 149.857426][ T8439] netlink: 'syz.4.577': attribute type 12 has an invalid length. [ 150.141506][ T8422] syz_tun: left allmulticast mode [ 150.164810][ T8422] dvmrp8: left allmulticast mode [ 150.166958][ T8455] netlink: 'syz.3.575': attribute type 13 has an invalid length. [ 150.292800][ T8446] tipc: Invalid UDP bearer configuration [ 150.292859][ T8446] tipc: Enabling of bearer rejected, failed to enable media [ 150.348022][ T5907] tipc: Node number set to 3046117165 [ 150.367938][ T8444] veth0: Caught tx_queue_len zero misconfig [ 150.736860][ T8464] IPVS: Scheduler module ip_vs_ not found [ 150.966873][ T6052] wlan1: Trigger new scan to find an IBSS to join [ 151.150232][ T8499] __nla_validate_parse: 5 callbacks suppressed [ 151.150247][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'. [ 151.191452][ T8499] netlink: 'syz.1.588': attribute type 5 has an invalid length. [ 151.200145][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.588'. [ 151.342903][ T8517] netlink: 'syz.0.589': attribute type 30 has an invalid length. [ 151.445128][ T8501] wg2: Caught tx_queue_len zero misconfig [ 151.578915][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.594'. [ 151.707642][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 151.721528][ T51] Bluetooth: hci4: link tx timeout [ 151.728907][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.737796][ T5865] Bluetooth: hci4: link tx timeout [ 151.756318][ T5865] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.936423][ T8552] netlink: 'syz.3.600': attribute type 1 has an invalid length. [ 151.955246][ T8551] veth1: Caught tx_queue_len zero misconfig [ 151.965932][ T8552] netlink: 248 bytes leftover after parsing attributes in process `syz.3.600'. [ 152.031815][ T8550] delete_channel: no stack [ 152.340498][ T8569] netlink: 48 bytes leftover after parsing attributes in process `syz.2.605'. [ 152.356944][ T8571] bridge0: port 3(syz_tun) entered blocking state [ 152.363815][ T8571] bridge0: port 3(syz_tun) entered disabled state [ 152.370737][ T8571] syz_tun: entered allmulticast mode [ 152.390125][ T8571] syz_tun: entered promiscuous mode [ 152.397656][ T8571] bridge0: port 3(syz_tun) entered blocking state [ 152.407135][ T8571] bridge0: port 3(syz_tun) entered forwarding state [ 152.564057][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'. [ 152.574340][ T8578] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.585522][ T8578] bridge0: port 4(bond2) entered blocking state [ 152.593028][ T8578] bridge0: port 4(bond2) entered disabled state [ 152.600405][ T8578] bond2: entered allmulticast mode [ 152.608429][ T8578] bond2: entered promiscuous mode [ 152.614693][ T8578] bridge0: port 4(bond2) entered blocking state [ 152.622030][ T8578] bridge0: port 4(bond2) entered forwarding state [ 152.776118][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.613'. [ 152.785850][ T8593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.613'. [ 152.796927][ T8593] netlink: 10 bytes leftover after parsing attributes in process `syz.1.613'. [ 152.805936][ T8593] nbd: socks must be embedded in a SOCK_ITEM attr [ 153.197723][ T6058] bridge0: port 4(bond2) entered disabled state [ 153.568143][ T8622] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 153.572805][ T8623] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 153.767684][ T5865] Bluetooth: hci4: command 0x0405 tx timeout [ 153.956297][ T6052] wlan1: Trigger new scan to find an IBSS to join [ 154.405155][ T8668] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 155.510348][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.665223][ T8710] netlink: 'syz.2.642': attribute type 1 has an invalid length. [ 156.645486][ T8717] __nla_validate_parse: 29 callbacks suppressed [ 156.645505][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.644'. [ 156.731972][ T8719] netlink: 'syz.2.645': attribute type 3 has an invalid length. [ 156.740935][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'. [ 158.366918][ T8760] netlink: 'syz.0.653': attribute type 2 has an invalid length. [ 158.384051][ T8758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.652'. [ 158.394055][ T8760] netlink: 'syz.0.653': attribute type 1 has an invalid length. [ 158.418813][ T8760] netlink: 152 bytes leftover after parsing attributes in process `syz.0.653'. [ 158.492666][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 158.525648][ T8769] veth1_to_bond: Caught tx_queue_len zero misconfig [ 158.534403][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 158.922093][ T8790] netlink: 'syz.2.662': attribute type 21 has an invalid length. [ 158.985924][ T8777] netlink: 34 bytes leftover after parsing attributes in process `syz.3.660'. [ 159.016942][ T8797] netlink: 'syz.4.661': attribute type 10 has an invalid length. [ 159.109319][ T8791] netlink: 44 bytes leftover after parsing attributes in process `syz.3.660'. [ 159.157469][ T8802] netlink: 64 bytes leftover after parsing attributes in process `syz.2.662'. [ 159.193716][ T8790] netlink: 156 bytes leftover after parsing attributes in process `syz.2.662'. [ 159.218698][ T8805] netlink: 'syz.0.664': attribute type 1 has an invalid length. [ 159.238246][ T8793] syz_tun: left allmulticast mode [ 159.243481][ T8793] syz_tun: left promiscuous mode [ 159.249406][ T8793] bridge0: port 3(syz_tun) entered disabled state [ 159.274099][ T8793] bridge_slave_0: left allmulticast mode [ 159.280079][ T8793] bridge_slave_0: left promiscuous mode [ 159.285962][ T8793] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.303738][ T8793] bridge_slave_1: left allmulticast mode [ 159.309749][ T8793] bridge_slave_1: left promiscuous mode [ 159.315574][ T8793] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.344970][ T8793] bond0: (slave bond_slave_0): Releasing backup interface [ 159.365765][ T8793] bond0: (slave bond_slave_1): Releasing backup interface [ 159.395949][ T8793] team0: Port device team_slave_0 removed [ 159.406331][ T8810] netlink: 'syz.0.664': attribute type 1 has an invalid length. [ 159.421519][ T8793] team0: Port device team_slave_1 removed [ 159.429180][ T8793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.437538][ T8793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.446677][ T8793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.454119][ T8793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.463160][ T8793] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 159.615055][ T8811] bond2: (slave gretap1): making interface the new active one [ 159.624366][ T8811] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 160.081410][ T8831] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 160.092547][ T8831] bond3: (slave macvlan0): Enslaving as an active interface with a down link [ 160.149259][ T8829] bridge0: port 1(syz_tun) entered blocking state [ 160.170552][ T8829] bridge0: port 1(syz_tun) entered disabled state [ 160.177542][ T8829] syz_tun: entered allmulticast mode [ 160.198338][ T8829] syz_tun: entered promiscuous mode [ 160.204489][ T8829] bridge0: port 1(syz_tun) entered blocking state [ 160.211151][ T8829] bridge0: port 1(syz_tun) entered forwarding state [ 160.235499][ T8847] netlink: 'syz.2.673': attribute type 10 has an invalid length. [ 160.288329][ T8847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.344331][ T8847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.380781][ T8847] batadv_slave_0: entered promiscuous mode [ 160.398732][ T8847] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 161.076668][ T8831] infiniband syz1: set active [ 161.081619][ T8831] infiniband syz1: added syz_tun [ 161.103662][ T8831] syz1: rxe_create_cq: returned err = -12 [ 161.132261][ T8831] infiniband syz1: Couldn't create ib_mad CQ [ 161.148776][ T8831] infiniband syz1: Couldn't open port 1 [ 161.250502][ T8831] RDS/IB: syz1: added [ 162.326891][ T8920] netlink: 'syz.1.689': attribute type 1 has an invalid length. [ 162.355165][ T8920] netlink: 'syz.1.689': attribute type 1 has an invalid length. [ 162.365288][ T8920] __nla_validate_parse: 4 callbacks suppressed [ 162.365304][ T8920] netlink: 160 bytes leftover after parsing attributes in process `syz.1.689'. [ 162.406333][ T8920] netlink: 'syz.1.689': attribute type 1 has an invalid length. [ 162.434639][ T8920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.689'. [ 162.551095][ T8920] trusted_key: syz.1.689 sent an empty control message without MSG_MORE. [ 162.865926][ T8920] block nbd0: server does not support multiple connections per device. [ 162.888188][ T8920] block nbd0: shutting down sockets [ 163.039069][ T8928] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20001 [ 163.062481][ T8928] 8021q: VLANs not supported on sit0 [ 163.237787][ T8930] tipc: New replicast peer: 172.20.20.187 [ 163.245087][ T8930] tipc: Enabled bearer , priority 10 [ 163.399395][ T8933] netlink: 76 bytes leftover after parsing attributes in process `syz.1.692'. [ 163.980980][ T8956] netlink: 28 bytes leftover after parsing attributes in process `syz.2.698'. [ 164.599989][ T8973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.702'. [ 164.611186][ T8973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.702'. [ 164.930115][ T8979] netlink: 40 bytes leftover after parsing attributes in process `syz.4.703'. [ 165.355021][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.711'. [ 165.437971][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.711'. [ 165.468430][ T9005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.712'. [ 165.668224][ T9005] netlink: 'syz.0.712': attribute type 3 has an invalid length. [ 165.701471][ T9005] netlink: 'syz.0.712': attribute type 3 has an invalid length. [ 165.990571][ T9024] sock: sock_timestamping_bind_phc: sock not bind to device [ 166.202534][ T9025] bond1: entered promiscuous mode [ 166.216653][ T9025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.698345][ T9025] bond1 (unregistering): Released all slaves [ 167.398971][ T9058] batadv_slave_1: entered promiscuous mode [ 167.517540][ T9057] batadv_slave_1: left promiscuous mode [ 168.100750][ T9078] __nla_validate_parse: 5 callbacks suppressed [ 168.100767][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.734'. [ 168.126646][ T9079] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 168.727714][ T9119] netlink: 248 bytes leftover after parsing attributes in process `syz.2.740'. [ 168.843797][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 168.869028][ T9124] netlink: 72 bytes leftover after parsing attributes in process `syz.4.741'. [ 169.212695][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.743'. [ 169.258932][ T9129] veth4: entered promiscuous mode [ 169.272830][ T9129] veth4: entered allmulticast mode [ 169.338418][ T9132] tipc: Enabling of bearer rejected, already enabled [ 169.427962][ T9132] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 169.574767][ T9132] tipc: Resetting bearer [ 169.659221][ T9151] netlink: 'syz.1.748': attribute type 9 has an invalid length. [ 169.684520][ T9151] netlink: 224 bytes leftover after parsing attributes in process `syz.1.748'. [ 169.932682][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.750'. [ 169.977167][ T9164] netlink: 24 bytes leftover after parsing attributes in process `syz.0.750'. [ 170.002774][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.750'. [ 170.095576][ T9171] netlink: 32 bytes leftover after parsing attributes in process `syz.3.753'. [ 170.253534][ T9180] netlink: 'syz.1.755': attribute type 21 has an invalid length. [ 170.282392][ T9180] netlink: 'syz.1.755': attribute type 21 has an invalid length. [ 170.306961][ T9179] delete_channel: no stack [ 170.549998][ T9190] netlink: 'syz.1.757': attribute type 1 has an invalid length. [ 170.812652][ T9199] gretap1: entered allmulticast mode [ 170.845160][ T9199] bond3: (slave gretap1): making interface the new active one [ 170.864985][ T9199] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 171.050504][ T9221] netlink: 'syz.1.764': attribute type 13 has an invalid length. [ 171.594735][ T9242] tipc: Enabled bearer , priority 0 [ 171.602990][ T9242] syzkaller0: entered promiscuous mode [ 171.609012][ T9242] syzkaller0: entered allmulticast mode [ 171.639127][ T9242] tipc: Resetting bearer [ 171.659366][ T9240] tipc: Resetting bearer [ 171.690580][ T9240] tipc: Disabling bearer [ 171.855627][ T9252] tipc: Enabled bearer , priority 0 [ 172.029779][ T9252] syzkaller0: entered promiscuous mode [ 172.035355][ T9252] syzkaller0: entered allmulticast mode [ 172.099195][ T9255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.107900][ T9255] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.120829][ T9255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.198863][ T9252] tipc: Resetting bearer [ 172.315615][ T9251] tipc: Resetting bearer [ 172.359925][ T9251] tipc: Disabling bearer [ 173.012408][ T9286] tipc: Enabling of bearer rejected, already enabled [ 173.152361][ T9294] __nla_validate_parse: 9 callbacks suppressed [ 173.152375][ T9294] netlink: 104 bytes leftover after parsing attributes in process `syz.2.785'. [ 173.214737][ T9291] netlink: 48 bytes leftover after parsing attributes in process `syz.0.784'. [ 173.223993][ T9291] bridge_slave_0: entered allmulticast mode [ 173.333779][ T9298] netlink: 464 bytes leftover after parsing attributes in process `syz.0.786'. [ 173.577402][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'. [ 173.668734][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.790'. [ 173.742549][ T9316] tap0: tun_chr_ioctl cmd 1074025680 [ 173.752695][ T9316] D: renamed from syzkaller0 [ 173.801313][ T9320] dvmrp0: entered allmulticast mode [ 174.076545][ T9333] netlink: 'syz.4.798': attribute type 1 has an invalid length. [ 174.087000][ T9333] netlink: 228 bytes leftover after parsing attributes in process `syz.4.798'. [ 174.452034][ T9345] siw: device registration error -23 [ 174.461698][ T9345] lo: Caught tx_queue_len zero misconfig [ 174.826869][ T9359] Bluetooth: MGMT ver 1.23 [ 174.839252][ T9359] netlink: 'syz.1.805': attribute type 1 has an invalid length. [ 174.847131][ T9359] netlink: 212 bytes leftover after parsing attributes in process `syz.1.805'. [ 174.856813][ T9359] netlink: 'syz.1.805': attribute type 1 has an invalid length. [ 174.873332][ T9359] geneve2: entered promiscuous mode [ 174.881135][ T8750] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.891358][ T8750] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.902578][ T8750] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.911917][ T8750] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.934472][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.805'. [ 175.163155][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.808'. [ 175.177252][ T9372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.808'. [ 175.293355][ T9382] bridge5: entered allmulticast mode [ 175.338329][ T9382] bridge0: port 1(syz_tun) entered disabled state [ 175.448206][ T9382] bridge1: left promiscuous mode [ 175.465728][ T9382] veth4: left promiscuous mode [ 175.470758][ T9382] veth4: left allmulticast mode [ 175.477102][ T9382] bridge5: left allmulticast mode [ 175.484917][ T5967] syz1: Port: 1 Link DOWN [ 175.484986][ T6071] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.498880][ T6071] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.507881][ T6071] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.517362][ T6071] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.747493][ T9392] nbd: socks must be embedded in a SOCK_ITEM attr [ 175.852379][ T9404] syzkaller1: entered promiscuous mode [ 175.858111][ T9404] syzkaller1: entered allmulticast mode [ 175.992275][ T9411] netlink: 'syz.3.819': attribute type 3 has an invalid length. [ 176.210405][ T9428] netlink: 'syz.3.822': attribute type 1 has an invalid length. [ 176.221156][ T9428] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 176.294761][ T9435] pim6reg1: entered promiscuous mode [ 176.309080][ T9435] pim6reg1: entered allmulticast mode [ 177.561003][ T9488] netlink: 'syz.1.835': attribute type 10 has an invalid length. [ 177.640966][ T9490] netlink: 'syz.1.835': attribute type 10 has an invalid length. [ 177.781968][ T9482] lo: Caught tx_queue_len zero misconfig [ 178.499039][ T9503] __nla_validate_parse: 6 callbacks suppressed [ 178.499058][ T9503] netlink: 19 bytes leftover after parsing attributes in process `syz.0.840'. [ 178.519558][ T9503] netlink: 'syz.0.840': attribute type 3 has an invalid length. [ 178.540128][ T9503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.840'. [ 178.845705][ T9520] netlink: 3 bytes leftover after parsing attributes in process `syz.0.846'. [ 178.860573][ T9514] netlink: 'syz.3.841': attribute type 7 has an invalid length. [ 178.869035][ T9514] netlink: 'syz.3.841': attribute type 8 has an invalid length. [ 178.877150][ T9514] netlink: 36 bytes leftover after parsing attributes in process `syz.3.841'. [ 178.918776][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.842'. [ 179.038588][ T9520] batadv1: entered promiscuous mode [ 179.053344][ T9520] batadv1: entered allmulticast mode [ 179.377155][ T9531] netlink: 'syz.4.849': attribute type 4 has an invalid length. [ 179.531981][ T9536] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 179.677044][ T9539] sctp: [Deprecated]: syz.0.851 (pid 9539) Use of int in max_burst socket option deprecated. [ 179.677044][ T9539] Use struct sctp_assoc_value instead [ 179.772116][ T9543] bond2: entered promiscuous mode [ 179.777833][ T9543] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.823483][ T9548] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.854'. [ 180.389548][ T9597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.871'. [ 180.883863][ T9627] validate_nla: 1 callbacks suppressed [ 180.883881][ T9627] netlink: 'syz.3.880': attribute type 322 has an invalid length. [ 181.211482][ T9657] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 181.447944][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 181.536824][ T9673] netlink: 32 bytes leftover after parsing attributes in process `syz.0.893'. [ 181.585349][ T9669] netlink: 24 bytes leftover after parsing attributes in process `syz.3.892'. [ 181.654320][ T9676] team0: Device ipip0 is of different type [ 181.708156][ T9678] tipc: Enabled bearer , priority 0 [ 181.718258][ T9678] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 181.737351][ T9678] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 181.751118][ T9678] tipc: Resetting bearer [ 181.816681][ T9676] tipc: Resetting bearer [ 182.024457][ T9682] syzkaller1: entered promiscuous mode [ 182.030125][ T9682] syzkaller1: entered allmulticast mode [ 182.171215][ T9687] Bluetooth: MGMT ver 1.23 [ 182.342797][ T6060] tipc: Resetting bearer [ 182.475829][ T9700] batadv1: entered promiscuous mode [ 182.493839][ T9700] batadv1: entered allmulticast mode [ 183.187736][ T9716] sctp: [Deprecated]: syz.1.904 (pid 9716) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.187736][ T9716] Use struct sctp_sack_info instead [ 183.265826][ T9721] netlink: 48 bytes leftover after parsing attributes in process `syz.2.907'. [ 184.246287][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 184.252403][ T5865] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 184.737337][ T9748] netlink: 'syz.2.914': attribute type 9 has an invalid length. [ 184.759339][ T9748] netlink: 224 bytes leftover after parsing attributes in process `syz.2.914'. [ 185.165815][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'. [ 186.016512][ T9793] netlink: 28 bytes leftover after parsing attributes in process `syz.4.929'. [ 186.217881][ T9807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.930'. [ 186.372249][ T9805] ip6tnl2: entered promiscuous mode [ 186.378450][ T9805] ip6tnl2: entered allmulticast mode [ 186.385667][ T9805] team0: Device ip6tnl2 is up. Set it down before adding it as a team port [ 186.426360][ T9811] netlink: 60 bytes leftover after parsing attributes in process `syz.0.936'. [ 186.435469][ T9809] ip6tnl0: Caught tx_queue_len zero misconfig [ 186.445244][ T9815] netlink: 60 bytes leftover after parsing attributes in process `syz.1.932'. [ 186.507231][ T9818] netlink: 28 bytes leftover after parsing attributes in process `syz.4.935'. [ 186.543404][ T9818] netlink: 28 bytes leftover after parsing attributes in process `syz.4.935'. [ 186.596534][ T9818] netlink: 28 bytes leftover after parsing attributes in process `syz.4.935'. [ 186.695968][ T9827] netlink: 16 bytes leftover after parsing attributes in process `syz.1.940'. [ 187.936173][ T8750] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 194.333775][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.406549][ T5871] Bluetooth: hci1: command 0x0406 tx timeout [ 196.411915][ T5865] Bluetooth: hci2: command 0x0401 tx timeout [ 196.413128][ T5858] Bluetooth: hci3: command 0x0406 tx timeout [ 218.952462][ T9845] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 218.973395][ T9845] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 218.981231][ T9845] tipc: Resetting bearer [ 219.209448][ T9859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.947'. [ 219.238841][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.947'. [ 219.286863][ T8750] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 219.323151][ T9861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.949'. [ 219.397594][ T9865] netlink: 52 bytes leftover after parsing attributes in process `syz.4.950'. [ 219.413371][ T9865] netlink: 'syz.4.950': attribute type 1 has an invalid length. [ 219.546527][ T9873] netlink: 'syz.2.952': attribute type 10 has an invalid length. [ 219.593598][ T9871] team_slave_1: Caught tx_queue_len zero misconfig [ 219.927031][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.521712][ T9919] sctp: [Deprecated]: syz.3.965 (pid 9919) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.521712][ T9919] Use struct sctp_sack_info instead [ 220.586500][ T9922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.966'. [ 220.717427][ T9917] netlink: 'syz.2.964': attribute type 303 has an invalid length. [ 220.840821][ T9932] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 221.093128][ T9945] netlink: 'syz.0.971': attribute type 23 has an invalid length. [ 221.389295][ T9960] ieee802154 phy0 wpan0: encryption failed: -22 [ 221.413803][ T9962] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 221.945252][ T9983] openvswitch: netlink: Message has 8 unknown bytes. [ 221.981781][ T9984] erspan0: left promiscuous mode [ 222.029716][ T9984] bridge0: port 1(syz_tun) entered blocking state [ 222.036388][ T9984] bridge0: port 1(syz_tun) entered forwarding state [ 222.048536][ T9984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.058743][ T9984] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.071637][ T9984] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 222.091823][ T5926] syz1: Port: 1 Link ACTIVE [ 222.141395][ T9990] netlink: 24 bytes leftover after parsing attributes in process `syz.4.983'. [ 222.245306][ T9994] netlink: 'syz.4.985': attribute type 13 has an invalid length. [ 222.275719][ T9994] netlink: 'syz.4.985': attribute type 17 has an invalid length. [ 222.425039][ T9994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 222.445660][ T9999] C: renamed from lo [ 222.453576][ T9999] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 222.530517][ T9999] tunl0: Caught tx_queue_len zero misconfig [ 222.888683][T10023] netlink: 'syz.2.995': attribute type 39 has an invalid length. [ 222.903299][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.993'. [ 223.322658][T10046] netlink: 'syz.1.1002': attribute type 1 has an invalid length. [ 223.386905][T10046] bond4: (slave geneve3): making interface the new active one [ 223.395648][T10046] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 223.404452][ T6060] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 223.418696][ T6060] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 223.429572][T10046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1002'. [ 223.438805][ T6060] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 223.448115][ T6060] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 223.762758][T10061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1006'. [ 223.786333][T10058] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1006'. [ 223.865159][ T30] audit: type=1800 audit(1758834534.269:2): pid=10037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1000" name="cgroup.controllers" dev="tmpfs" ino=1184 res=0 errno=0 [ 224.008735][T10063] netlink: 'syz.0.1007': attribute type 9 has an invalid length. [ 224.016669][T10063] netlink: 'syz.0.1007': attribute type 7 has an invalid length. [ 224.686421][T10076] ip6tnl0: Caught tx_queue_len zero misconfig [ 226.561750][T10117] validate_nla: 1 callbacks suppressed [ 226.561769][T10117] netlink: 'syz.2.1024': attribute type 1 has an invalid length. [ 226.698473][T10117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.741939][T10129] __nla_validate_parse: 1 callbacks suppressed [ 226.741955][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1026'. [ 226.749421][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1027'. [ 226.772958][T10130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1027'. [ 226.820242][T10131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1026'. [ 226.915233][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1029'. [ 226.930465][T10136] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1029'. [ 226.986797][T10133] netlink: 'syz.1.1028': attribute type 10 has an invalid length. [ 227.024858][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1028'. [ 227.043082][T10143] tipc: Enabled bearer , priority 0 [ 227.061175][T10143] syzkaller0: entered promiscuous mode [ 227.070286][T10143] syzkaller0: entered allmulticast mode [ 227.159649][T10143] tipc: Resetting bearer [ 227.327170][T10142] tipc: Resetting bearer [ 227.427757][T10142] tipc: Disabling bearer [ 227.804520][T10160] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 227.848594][T10160] bridge0: entered allmulticast mode [ 227.946894][T10164] tipc: Can't bind to reserved service type 1 [ 227.967845][T10164] netlink: 'syz.3.1037': attribute type 39 has an invalid length. [ 228.031912][T10171] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1037'. [ 228.116330][T10171] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1037'. [ 228.166321][T10171] netlink: 'syz.3.1037': attribute type 5 has an invalid length. [ 228.174297][T10171] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1037'. [ 228.199727][T10173] vlan3: entered allmulticast mode [ 228.511239][T10190] wg1: entered promiscuous mode [ 228.528400][T10190] wg1: entered allmulticast mode [ 228.843560][T10208] netlink: 'syz.3.1050': attribute type 13 has an invalid length. [ 228.851891][T10208] netlink: 'syz.3.1050': attribute type 17 has an invalid length. [ 228.902191][T10208] gretap0: refused to change device tx_queue_len [ 228.913476][T10208] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 229.472897][T10230] gretap1: entered allmulticast mode [ 229.634178][T10255] tipc: Enabling of bearer rejected, already enabled [ 230.041886][T10285] bridge5: entered allmulticast mode [ 230.093661][T10276] netlink: 'syz.1.1069': attribute type 9 has an invalid length. [ 230.126412][T10276] netlink: 'syz.1.1069': attribute type 6 has an invalid length. [ 230.349192][T10302] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 230.494638][T10314] netlink: 'syz.1.1080': attribute type 39 has an invalid length. [ 230.636768][T10322] syzkaller1: entered promiscuous mode [ 230.642479][T10322] syzkaller1: entered allmulticast mode [ 230.894045][T10333] netlink: 'syz.3.1085': attribute type 21 has an invalid length. [ 230.906903][T10336] syzkaller0: entered promiscuous mode [ 230.912609][T10336] syzkaller0: entered allmulticast mode [ 231.234209][T10355] syzkaller0: entered promiscuous mode [ 231.250228][T10355] syzkaller0: entered allmulticast mode [ 231.327041][T10360] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 231.750623][T10385] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.938020][T10385] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.079182][T10385] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.164127][T10385] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.527849][ T6055] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.538771][ T6055] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.579016][ T6060] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.588440][ T6060] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.680946][ T6060] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.690539][ T6060] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.924210][ T6060] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.982176][ T6060] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.298416][T10456] __nla_validate_parse: 9 callbacks suppressed [ 233.298434][T10456] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.1121'. [ 233.990823][ T5967] IPVS: starting estimator thread 0... [ 234.087451][T10508] IPVS: using max 34 ests per chain, 81600 per kthread [ 234.105713][T10514] netlink: 'syz.4.1135': attribute type 12 has an invalid length. [ 234.356964][ T5967] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 234.770820][ T5967] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 234.931224][T10546] team0: Device ipip0 is of different type [ 235.024190][T10547] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.036440][T10547] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 235.080465][T10555] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1143'. [ 235.159973][T10547] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.179149][T10547] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 235.243912][T10558] netlink: 'syz.0.1145': attribute type 1 has an invalid length. [ 235.253000][T10558] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1145'. [ 235.262494][T10558] netlink: 'syz.0.1145': attribute type 1 has an invalid length. [ 235.299803][T10547] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.338210][T10547] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 235.501562][T10547] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.546940][T10547] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 235.784018][ T6052] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 235.814032][ T6052] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 235.882151][ T8750] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 235.894069][ T8750] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 235.975826][ T6071] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 235.997936][ T6071] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 236.055431][ T8750] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 236.086569][ T8750] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 238.486201][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 239.395721][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1174'. [ 239.474340][T10667] netlink: 558 bytes leftover after parsing attributes in process `syz.3.1174'. [ 240.195405][T10697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1180'. [ 240.259649][T10699] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 240.503067][T10706] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 240.785004][T10727] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1185'. [ 240.885483][T10730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1185'. [ 241.634699][T10734] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 241.942266][T10740] ip6gre2: entered allmulticast mode [ 242.002452][T10750] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.109136][T10750] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.234178][T10750] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.324824][T10750] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.395655][T10761] sctp: [Deprecated]: syz.4.1195 (pid 10761) Use of int in maxseg socket option. [ 242.395655][T10761] Use struct sctp_assoc_value instead [ 242.483435][ T6052] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.534024][ T6052] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.619992][ T6055] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.651787][ T6055] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.795734][T10784] netlink: 'syz.3.1201': attribute type 1 has an invalid length. [ 242.908203][T10793] tap0: tun_chr_ioctl cmd 2147767507 [ 242.937835][T10796] netlink: 'syz.2.1206': attribute type 1 has an invalid length. [ 243.038761][T10796] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1206'. [ 243.073385][T10800] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1207'. [ 243.088741][T10803] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1208'. [ 243.110295][T10796] netlink: 'syz.2.1206': attribute type 1 has an invalid length. [ 243.267570][T10812] can: request_module (can-proto-0) failed. [ 243.273874][T10808] can: request_module (can-proto-0) failed. [ 243.477790][T10822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1213'. [ 243.554394][T10837] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1216'. [ 243.596981][T10822] veth1_macvtap: left promiscuous mode [ 243.743981][ T30] audit: type=1800 audit(1758834554.149:3): pid=10841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1217" name="memory.events" dev="tmpfs" ino=1187 res=0 errno=0 [ 243.878492][T10838] tipc: Enabling of bearer rejected, already enabled [ 244.053495][ T6052] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20001 - 0 [ 244.084397][ T6052] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20001 - 0 [ 244.124482][ T6052] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20001 - 0 [ 244.154653][ T6052] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20001 - 0 [ 244.469712][T10872] __nla_validate_parse: 6 callbacks suppressed [ 244.469730][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1225'. [ 244.540294][T10874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1226'. [ 244.618446][T10874] netlink: 'syz.0.1226': attribute type 21 has an invalid length. [ 244.671424][T10882] netlink: 'syz.3.1228': attribute type 3 has an invalid length. [ 244.706892][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1228'. [ 244.828252][T10885] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1227'. [ 244.844059][T10885] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1227'. [ 244.862343][T10890] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1227'. [ 244.901282][T10885] netlink: 'syz.1.1227': attribute type 4 has an invalid length. [ 244.913329][T10889] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 244.965426][T10889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.183890][T10902] team_slave_1: Caught tx_queue_len zero misconfig [ 245.241954][T10901] netlink: 'syz.4.1235': attribute type 4 has an invalid length. [ 245.479098][T10909] vlan2: entered allmulticast mode [ 245.742115][T10937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1243'. [ 245.801613][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 245.815206][T10941] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1244'. [ 245.830024][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 245.942906][T10945] syzkaller0: entered promiscuous mode [ 245.956082][T10945] syzkaller0: entered allmulticast mode [ 245.968490][T10945] tipc: Enabled bearer , priority 0 [ 245.982084][T10943] pim6reg: entered allmulticast mode [ 246.026999][T10945] tipc: Resetting bearer [ 247.029502][ T1209] tipc: Node number set to 3543219637 [ 247.716862][T10945] tipc: Disabling bearer [ 248.019970][T10999] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 248.088561][T11006] FAULT_INJECTION: forcing a failure. [ 248.088561][T11006] name failslab, interval 1, probability 0, space 0, times 1 [ 248.113559][T11006] CPU: 0 UID: 0 PID: 11006 Comm: syz.3.1262 Not tainted syzkaller #0 PREEMPT(full) [ 248.113583][T11006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 248.113604][T11006] Call Trace: [ 248.113611][T11006] [ 248.113618][T11006] dump_stack_lvl+0x189/0x250 [ 248.113642][T11006] ? __pfx____ratelimit+0x10/0x10 [ 248.113663][T11006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.113678][T11006] ? __pfx__printk+0x10/0x10 [ 248.113701][T11006] ? __pfx___might_resched+0x10/0x10 [ 248.113722][T11006] ? fs_reclaim_acquire+0x7d/0x100 [ 248.113752][T11006] should_fail_ex+0x414/0x560 [ 248.113778][T11006] should_failslab+0xa8/0x100 [ 248.113800][T11006] __kmalloc_noprof+0xcb/0x4f0 [ 248.113817][T11006] ? kfree+0x4d/0x440 [ 248.113831][T11006] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 248.113854][T11006] tomoyo_realpath_from_path+0xe3/0x5d0 [ 248.113872][T11006] ? tomoyo_domain+0xd9/0x130 [ 248.113893][T11006] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 248.113914][T11006] tomoyo_path_number_perm+0x1e8/0x5a0 [ 248.113937][T11006] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 248.113973][T11006] ? __lock_acquire+0xab9/0xd20 [ 248.114013][T11006] ? __fget_files+0x2a/0x420 [ 248.114037][T11006] ? __fget_files+0x2a/0x420 [ 248.114056][T11006] ? __fget_files+0x3a0/0x420 [ 248.114074][T11006] ? __fget_files+0x2a/0x420 [ 248.114097][T11006] security_file_ioctl+0xcb/0x2d0 [ 248.114120][T11006] __se_sys_ioctl+0x47/0x170 [ 248.114141][T11006] do_syscall_64+0xfa/0x3b0 [ 248.114156][T11006] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.114177][T11006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.114193][T11006] ? clear_bhb_loop+0x60/0xb0 [ 248.114213][T11006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.114229][T11006] RIP: 0033:0x7f2ba718eec9 [ 248.114244][T11006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.114257][T11006] RSP: 002b:00007f2ba8074038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.114275][T11006] RAX: ffffffffffffffda RBX: 00007f2ba73e6090 RCX: 00007f2ba718eec9 [ 248.114287][T11006] RDX: 00002000000000c0 RSI: 00000000000089f1 RDI: 0000000000000009 [ 248.114297][T11006] RBP: 00007f2ba8074090 R08: 0000000000000000 R09: 0000000000000000 [ 248.114307][T11006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.114316][T11006] R13: 00007f2ba73e6128 R14: 00007f2ba73e6090 R15: 00007ffdd0e84378 [ 248.114353][T11006] [ 248.114366][T11006] ERROR: Out of memory at tomoyo_realpath_from_path. [ 248.619839][T11028] xfrm1: entered promiscuous mode [ 248.624907][T11028] xfrm1: entered allmulticast mode [ 248.719025][T11028] IPVS: Scheduler module ip_vs_ not found [ 248.726177][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 249.151111][T11051] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.190942][T11054] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 249.312858][T11051] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.423362][T11051] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.534026][T11051] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.555395][T11038] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 249.595609][T11074] netlink: 'syz.4.1281': attribute type 3 has an invalid length. [ 249.603753][T11074] netlink: 'syz.4.1281': attribute type 1 has an invalid length. [ 249.614184][T11074] __nla_validate_parse: 9 callbacks suppressed [ 249.614202][T11074] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1281'. [ 249.631422][T11074] netlink: 'syz.4.1281': attribute type 3 has an invalid length. [ 249.642924][T11074] netlink: 'syz.4.1281': attribute type 1 has an invalid length. [ 249.650965][T11074] netlink: 7855 bytes leftover after parsing attributes in process `syz.4.1281'. [ 249.712192][ T6071] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.732497][ T6071] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.756402][ T6071] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.764642][ T6071] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.989555][T11093] bridge1: entered promiscuous mode [ 250.211360][T11096] bridge0: port 1(syz_tun) entered disabled state [ 250.299372][T11096] ip6gre2: left allmulticast mode [ 250.314901][ T5983] syz1: Port: 1 Link DOWN [ 250.465323][T11114] vlan3: entered allmulticast mode [ 250.470892][T11114] bridge_slave_0: entered allmulticast mode [ 250.574284][T11117] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.613650][T11116] netlink: 'syz.1.1290': attribute type 10 has an invalid length. [ 250.617799][ T6052] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 250.775026][T11117] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.839842][T11117] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.901830][T11117] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.287060][ T6055] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 251.301059][T11134] netlink: 'syz.0.1295': attribute type 5 has an invalid length. [ 251.416438][T11145] tipc: Started in network mode [ 251.425667][T11145] tipc: Node identity 4e8288119ec9, cluster identity 4711 [ 251.434708][T11145] tipc: Enabled bearer , priority 0 [ 251.442480][T11146] bridge0: port 1(erspan0) entered blocking state [ 251.450346][T11146] bridge0: port 1(erspan0) entered disabled state [ 251.457216][T11146] erspan0: entered allmulticast mode [ 251.464320][T11146] erspan0: entered promiscuous mode [ 251.474225][T11150] netlink: 'syz.1.1301': attribute type 3 has an invalid length. [ 251.491417][T11145] syzkaller0: entered promiscuous mode [ 251.497578][T11145] syzkaller0: entered allmulticast mode [ 251.505253][T11146] erspan0: left allmulticast mode [ 251.510810][T11146] erspan0: left promiscuous mode [ 251.516016][T11146] bridge0: port 1(erspan0) entered disabled state [ 251.541418][T11145] tipc: Resetting bearer [ 251.572998][T11144] tipc: Resetting bearer [ 251.592431][T11144] tipc: Disabling bearer [ 251.651226][T11164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1304'. [ 251.660575][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1304'. [ 251.689328][T11164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1304'. [ 251.920893][T11187] sctp: [Deprecated]: syz.1.1302 (pid 11187) Use of int in max_burst socket option deprecated. [ 251.920893][T11187] Use struct sctp_assoc_value instead [ 252.038704][T11197] netlink: 'syz.2.1311': attribute type 3 has an invalid length. [ 252.628028][T11215] syz.1.1315 (11215) used obsolete PPPIOCDETACH ioctl [ 252.769517][T11224] veth0: entered promiscuous mode [ 252.791053][T11227] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1319'. [ 252.800951][T11227] netlink: 'syz.0.1319': attribute type 7 has an invalid length. [ 252.808950][T11227] netlink: 'syz.0.1319': attribute type 8 has an invalid length. [ 252.819796][T11227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1319'. [ 252.834015][T11229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1317'. [ 252.855813][T11231] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1320'. [ 252.880932][T11229] veth0 (unregistering): left promiscuous mode [ 253.000127][ T6071] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.035249][ T6071] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.057543][ T8750] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.091807][ T6055] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.156283][T11245] 8021q: VLANs not supported on lo [ 253.221226][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1326'. [ 253.894228][T11298] gretap2: entered promiscuous mode [ 254.297580][T11315] FAULT_INJECTION: forcing a failure. [ 254.297580][T11315] name failslab, interval 1, probability 0, space 0, times 0 [ 254.311028][T11315] CPU: 1 UID: 0 PID: 11315 Comm: syz.0.1344 Not tainted syzkaller #0 PREEMPT(full) [ 254.311054][T11315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 254.311065][T11315] Call Trace: [ 254.311072][T11315] [ 254.311080][T11315] dump_stack_lvl+0x189/0x250 [ 254.311104][T11315] ? __pfx____ratelimit+0x10/0x10 [ 254.311128][T11315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.311147][T11315] ? __pfx__printk+0x10/0x10 [ 254.311175][T11315] ? __pfx___might_resched+0x10/0x10 [ 254.311196][T11315] ? fs_reclaim_acquire+0x7d/0x100 [ 254.311224][T11315] should_fail_ex+0x414/0x560 [ 254.311251][T11315] should_failslab+0xa8/0x100 [ 254.311275][T11315] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 254.311295][T11315] ? __d_alloc+0x36/0x7a0 [ 254.311317][T11315] __d_alloc+0x36/0x7a0 [ 254.311340][T11315] d_alloc_parallel+0xe5/0x15e0 [ 254.311359][T11315] ? __lock_acquire+0xab9/0xd20 [ 254.311391][T11315] ? __lock_acquire+0xab9/0xd20 [ 254.311418][T11315] ? __pfx_d_alloc_parallel+0x10/0x10 [ 254.311443][T11315] ? __raw_spin_lock_init+0x45/0x100 [ 254.311463][T11315] ? __init_waitqueue_head+0xa9/0x150 [ 254.311487][T11315] __lookup_slow+0x116/0x3d0 [ 254.311508][T11315] ? __pfx___lookup_slow+0x10/0x10 [ 254.311537][T11315] ? d_lookup+0x8a/0xa0 [ 254.311554][T11315] ? lookup_noperm+0x112/0x220 [ 254.311576][T11315] simple_start_creating+0xfd/0x1e0 [ 254.311599][T11315] ? __pfx_simple_start_creating+0x10/0x10 [ 254.311634][T11315] start_creating+0x10f/0x180 [ 254.311658][T11315] __debugfs_create_file+0x79/0x4f0 [ 254.311697][T11315] debugfs_create_file_full+0x3f/0x60 [ 254.311723][T11315] ref_tracker_dir_debugfs+0x14e/0x270 [ 254.311747][T11315] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 254.311798][T11315] ? rcu_is_watching+0x15/0xb0 [ 254.311813][T11315] ? alloc_netdev_mqs+0xa3/0x11b0 [ 254.311840][T11315] ? __raw_spin_lock_init+0x45/0x100 [ 254.311861][T11315] alloc_netdev_mqs+0x26f/0x11b0 [ 254.311881][T11315] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 254.311908][T11315] ip6_tnl_locate+0x658/0x810 [ 254.311941][T11315] ? __pfx_ip6_tnl_locate+0x10/0x10 [ 254.311963][T11315] ? ip6_tnl_siocdevprivate+0x60c/0xad0 [ 254.311989][T11315] ip6_tnl_siocdevprivate+0x630/0xad0 [ 254.312016][T11315] ? __pfx_ip6_tnl_siocdevprivate+0x10/0x10 [ 254.312033][T11315] ? trace_contention_end+0x39/0x120 [ 254.312071][T11315] ? full_name_hash+0x92/0xe0 [ 254.312091][T11315] ? netdev_name_node_lookup+0xdf/0x120 [ 254.312117][T11315] dev_ifsioc+0xb54/0xf00 [ 254.312145][T11315] dev_ioctl+0x84c/0x1150 [ 254.312173][T11315] sock_ioctl+0x719/0x790 [ 254.312201][T11315] ? __pfx_sock_ioctl+0x10/0x10 [ 254.312225][T11315] ? __fget_files+0x3a0/0x420 [ 254.312245][T11315] ? __fget_files+0x2a/0x420 [ 254.312270][T11315] ? bpf_lsm_file_ioctl+0x9/0x20 [ 254.312290][T11315] ? __pfx_sock_ioctl+0x10/0x10 [ 254.312311][T11315] __se_sys_ioctl+0xfc/0x170 [ 254.312332][T11315] do_syscall_64+0xfa/0x3b0 [ 254.312347][T11315] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.312370][T11315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.312387][T11315] ? clear_bhb_loop+0x60/0xb0 [ 254.312407][T11315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.312423][T11315] RIP: 0033:0x7f765278eec9 [ 254.312440][T11315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.312454][T11315] RSP: 002b:00007f76536d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.312473][T11315] RAX: ffffffffffffffda RBX: 00007f76529e6090 RCX: 00007f765278eec9 [ 254.312485][T11315] RDX: 00002000000000c0 RSI: 00000000000089f1 RDI: 0000000000000009 [ 254.312497][T11315] RBP: 00007f76536d7090 R08: 0000000000000000 R09: 0000000000000000 [ 254.312508][T11315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.312518][T11315] R13: 00007f76529e6128 R14: 00007f76529e6090 R15: 00007ffde700ce88 [ 254.312548][T11315] [ 254.915564][T11325] tipc: Enabling of bearer rejected, already enabled [ 254.956651][T11327] validate_nla: 4 callbacks suppressed [ 254.956667][T11327] netlink: 'syz.1.1348': attribute type 9 has an invalid length. [ 254.974987][T11335] netlink: 'syz.4.1349': attribute type 2 has an invalid length. [ 255.001426][T11335] __nla_validate_parse: 1 callbacks suppressed [ 255.001443][T11335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1349'. [ 255.024513][T11325] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 255.041523][T11325] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 255.053579][T11339] netlink: 'syz.4.1349': attribute type 96 has an invalid length. [ 255.064619][T11325] tipc: Resetting bearer [ 255.089231][T11335] netlink: 'syz.4.1349': attribute type 39 has an invalid length. [ 255.112807][T11337] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 255.296413][T11340] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1346'. [ 255.776477][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.014479][T11379] tipc: Resetting bearer [ 256.031073][T11379] tipc: Resetting bearer [ 256.171288][T11387] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 256.188181][T11387] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 256.198119][T11387] tipc: Resetting bearer [ 256.425563][T11396] IPVS: set_ctl: invalid protocol: 48500 127.0.0.1:20000 [ 256.840155][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1373'. [ 257.045303][T11432] netlink: 'syz.3.1374': attribute type 11 has an invalid length. [ 257.054864][T11432] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1374'. [ 257.223600][T11434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1375'. [ 257.997481][T11468] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1383'. [ 258.053922][T11470] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1385'. [ 258.080054][T11470] 0ªX¹¦À: renamed from caif0 [ 258.096454][T11470] 0ªX¹¦À: entered allmulticast mode [ 258.101679][T11470] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 258.118467][T11474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1386'. [ 258.154570][T11474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1386'. [ 258.187772][T11477] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1387'. [ 258.209064][T11479] openvswitch: netlink: Message has 8 unknown bytes. [ 258.251481][T11480] netlink: 'syz.4.1387': attribute type 1 has an invalid length. [ 258.259378][T11480] netlink: 'syz.4.1387': attribute type 1 has an invalid length. [ 258.323619][T11482] netlink: 'syz.0.1388': attribute type 11 has an invalid length. [ 258.785517][T11522] netlink: 'syz.2.1395': attribute type 13 has an invalid length. [ 258.796680][T11522] netlink: 'syz.2.1395': attribute type 17 has an invalid length. [ 258.923636][T11522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.262944][T11553] openvswitch: netlink: Message has -2 unknown bytes. [ 259.750540][ T30] audit: type=1800 audit(1758834570.159:4): pid=11568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1405" name="memory.events" dev="tmpfs" ino=1399 res=0 errno=0 [ 259.772675][ T30] audit: type=1804 audit(1758834570.159:5): pid=11568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1405" name="memory.events" dev="tmpfs" ino=1399 res=1 errno=0 [ 259.810103][T11569] syzkaller1: entered promiscuous mode [ 259.815801][T11569] syzkaller1: entered allmulticast mode [ 259.871610][T11573] raw_sendmsg: syz.3.1406 forgot to set AF_INET. Fix it! [ 260.027663][T11580] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 260.052262][T11580] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 260.079372][T11591] __nla_validate_parse: 5 callbacks suppressed [ 260.079389][T11591] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1409'. [ 260.094654][T11593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1412'. [ 260.155187][T11591] macvlan3: entered promiscuous mode [ 260.185008][T11591] macvlan3: entered allmulticast mode [ 260.208333][T11591] bond3: entered promiscuous mode [ 260.210058][T11596] Bluetooth: MGMT ver 1.23 [ 260.219859][T11591] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 260.238069][T11596] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1414'. [ 260.261076][T11591] bond3: left promiscuous mode [ 260.428806][T11601] validate_nla: 2 callbacks suppressed [ 260.428823][T11601] netlink: 'syz.3.1415': attribute type 1 has an invalid length. [ 260.442253][T11601] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1415'. [ 260.481894][T11601] netlink: 'syz.3.1415': attribute type 2 has an invalid length. [ 260.552373][T11601] netlink: 'syz.3.1415': attribute type 1 has an invalid length. [ 260.557871][T11607] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1416'. [ 260.744938][T11615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1419'. [ 261.003321][T11633] batadv3: entered promiscuous mode [ 261.209353][T11641] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1424'. [ 261.228245][T11641] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1424'. [ 261.272644][T11641] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 261.292621][T11641] gretap2: entered promiscuous mode [ 261.318702][T11641] gretap2: entered allmulticast mode [ 261.623896][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1429'. [ 261.753411][T11663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 261.782246][T11664] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1432'. [ 262.325227][T11683] tipc: Enabled bearer , priority 0 [ 262.339236][T11683] syzkaller0: entered promiscuous mode [ 262.344813][T11683] syzkaller0: entered allmulticast mode [ 262.412704][T11683] tipc: Resetting bearer [ 262.437892][T11682] tipc: Resetting bearer [ 262.475828][T11682] tipc: Disabling bearer [ 263.178751][T11719] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.270889][T11719] 8021q: VLANs not supported on vcan0 [ 263.299340][T11718] can: request_module (can-proto-0) failed. [ 264.121566][T11758] vlan2: entered promiscuous mode [ 264.159425][T11758] gretap0: entered promiscuous mode [ 264.920483][T11773] netlink: 'syz.2.1461': attribute type 1 has an invalid length. [ 264.956524][T11773] netlink: 'syz.2.1461': attribute type 1 has an invalid length. [ 264.964383][T11773] netlink: 'syz.2.1461': attribute type 2 has an invalid length. [ 265.212938][T11782] __nla_validate_parse: 8 callbacks suppressed [ 265.212957][T11782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1462'. [ 265.266083][T11782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'. [ 265.300659][T11782] netlink: 'syz.3.1462': attribute type 12 has an invalid length. [ 265.333454][T11782] netlink: 'syz.3.1462': attribute type 14 has an invalid length. [ 265.559887][T11804] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1468'. [ 265.703222][T11812] ieee802154 phy0 wpan0: encryption failed: -90 [ 265.816973][T11820] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1474'. [ 265.858850][T11822] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 265.870615][T11822] team0: Device macvtap1 is already an upper device of the team interface [ 265.910062][T11820] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 265.919063][T11820] netlink: 364 bytes leftover after parsing attributes in process `syz.0.1474'. [ 265.919298][T11832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1475'. [ 265.941915][T11820] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 266.409574][T11852] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1481'. [ 266.542014][T11860] netlink: 'syz.0.1483': attribute type 4 has an invalid length. [ 266.576188][T11860] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1483'. [ 266.661103][T11863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1483'. [ 266.793966][T11870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1484'. [ 266.804763][T11869] netlink: 'syz.2.1484': attribute type 1 has an invalid length. [ 266.889651][T11869] 8021q: adding VLAN 0 to HW filter on device bond4 [ 267.269782][T11887] pim6reg: entered allmulticast mode [ 267.576484][T11884] pim6reg: left allmulticast mode [ 268.097043][T11912] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 268.104553][T11912] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 268.112563][T11912] tipc: Resetting bearer [ 268.207558][T11917] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 268.480869][T11926] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 269.765897][T11987] [ 269.768254][T11987] ====================================================== [ 269.775273][T11987] WARNING: possible circular locking dependency detected [ 269.782300][T11987] syzkaller #0 Not tainted [ 269.786714][T11987] ------------------------------------------------------ [ 269.793721][T11987] syz.1.1516/11987 is trying to acquire lock: [ 269.799780][T11987] ffffffff8f68faf8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 269.809260][T11987] [ 269.809260][T11987] but task is already holding lock: [ 269.816612][T11987] ffffffff8f68fa98 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 269.826175][T11987] [ 269.826175][T11987] which lock already depends on the new lock. [ 269.826175][T11987] [ 269.836560][T11987] [ 269.836560][T11987] the existing dependency chain (in reverse order) is: [ 269.845551][T11987] [ 269.845551][T11987] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 269.853442][T11987] lock_acquire+0x120/0x360 [ 269.858457][T11987] _raw_spin_lock_bh+0x36/0x50 [ 269.863727][T11987] nr_rt_ioctl+0x390/0xd50 [ 269.868650][T11987] sock_do_ioctl+0xd9/0x300 [ 269.873664][T11987] sock_ioctl+0x576/0x790 [ 269.878501][T11987] __se_sys_ioctl+0xfc/0x170 [ 269.883605][T11987] do_syscall_64+0xfa/0x3b0 [ 269.888608][T11987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.895002][T11987] [ 269.895002][T11987] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 269.902977][T11987] lock_acquire+0x120/0x360 [ 269.907993][T11987] _raw_spin_lock_bh+0x36/0x50 [ 269.913259][T11987] nr_rt_ioctl+0x193/0xd50 [ 269.918266][T11987] sock_do_ioctl+0xd9/0x300 [ 269.923281][T11987] sock_ioctl+0x576/0x790 [ 269.928122][T11987] __se_sys_ioctl+0xfc/0x170 [ 269.933218][T11987] do_syscall_64+0xfa/0x3b0 [ 269.938232][T11987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.944642][T11987] [ 269.944642][T11987] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 269.952451][T11987] validate_chain+0xb9b/0x2140 [ 269.957729][T11987] __lock_acquire+0xab9/0xd20 [ 269.962914][T11987] lock_acquire+0x120/0x360 [ 269.967922][T11987] _raw_spin_lock_bh+0x36/0x50 [ 269.973206][T11987] nr_rt_device_down+0xa9/0x720 [ 269.978559][T11987] nr_device_event+0x137/0x150 [ 269.983826][T11987] notifier_call_chain+0x1b3/0x3e0 [ 269.989437][T11987] __dev_notify_flags+0x18d/0x2e0 [ 269.994965][T11987] netif_change_flags+0xe8/0x1a0 [ 270.000404][T11987] dev_change_flags+0x130/0x260 [ 270.005760][T11987] dev_ioctl+0x7b4/0x1150 [ 270.010590][T11987] sock_do_ioctl+0x22c/0x300 [ 270.015685][T11987] sock_ioctl+0x576/0x790 [ 270.020522][T11987] __se_sys_ioctl+0xfc/0x170 [ 270.025617][T11987] do_syscall_64+0xfa/0x3b0 [ 270.030623][T11987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.037019][T11987] [ 270.037019][T11987] other info that might help us debug this: [ 270.037019][T11987] [ 270.047227][T11987] Chain exists of: [ 270.047227][T11987] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 270.047227][T11987] [ 270.061035][T11987] Possible unsafe locking scenario: [ 270.061035][T11987] [ 270.068467][T11987] CPU0 CPU1 [ 270.073815][T11987] ---- ---- [ 270.079161][T11987] lock(nr_neigh_list_lock); [ 270.083823][T11987] lock(&nr_node->node_lock); [ 270.091097][T11987] lock(nr_neigh_list_lock); [ 270.098303][T11987] lock(nr_node_list_lock); [ 270.102891][T11987] [ 270.102891][T11987] *** DEADLOCK *** [ 270.102891][T11987] [ 270.111034][T11987] 2 locks held by syz.1.1516/11987: [ 270.116222][T11987] #0: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 270.125022][T11987] #1: ffffffff8f68fa98 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 270.135015][T11987] [ 270.135015][T11987] stack backtrace: [ 270.140891][T11987] CPU: 1 UID: 0 PID: 11987 Comm: syz.1.1516 Not tainted syzkaller #0 PREEMPT(full) [ 270.140909][T11987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 270.140918][T11987] Call Trace: [ 270.140924][T11987] [ 270.140932][T11987] dump_stack_lvl+0x189/0x250 [ 270.140949][T11987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.140963][T11987] ? __pfx__printk+0x10/0x10 [ 270.140981][T11987] ? print_lock_name+0xde/0x100 [ 270.140997][T11987] print_circular_bug+0x2ee/0x310 [ 270.141013][T11987] check_noncircular+0x134/0x160 [ 270.141028][T11987] validate_chain+0xb9b/0x2140 [ 270.141043][T11987] ? rt6_disable_ip+0x6b3/0x720 [ 270.141060][T11987] ? __lock_acquire+0xab9/0xd20 [ 270.141078][T11987] __lock_acquire+0xab9/0xd20 [ 270.141102][T11987] ? nr_rt_device_down+0xa9/0x720 [ 270.141115][T11987] lock_acquire+0x120/0x360 [ 270.141131][T11987] ? nr_rt_device_down+0xa9/0x720 [ 270.141147][T11987] ? nr_rt_device_down+0xa9/0x720 [ 270.141159][T11987] _raw_spin_lock_bh+0x36/0x50 [ 270.141176][T11987] ? nr_rt_device_down+0xa9/0x720 [ 270.141188][T11987] nr_rt_device_down+0xa9/0x720 [ 270.141202][T11987] ? do_raw_spin_unlock+0x122/0x240 [ 270.141219][T11987] nr_device_event+0x137/0x150 [ 270.141238][T11987] notifier_call_chain+0x1b3/0x3e0 [ 270.141254][T11987] __dev_notify_flags+0x18d/0x2e0 [ 270.141271][T11987] ? __pfx___dev_notify_flags+0x10/0x10 [ 270.141285][T11987] ? __dev_change_flags+0x4cc/0x6d0 [ 270.141302][T11987] ? __pfx___dev_change_flags+0x10/0x10 [ 270.141317][T11987] ? full_name_hash+0x92/0xe0 [ 270.141332][T11987] netif_change_flags+0xe8/0x1a0 [ 270.141350][T11987] dev_change_flags+0x130/0x260 [ 270.141367][T11987] dev_ioctl+0x7b4/0x1150 [ 270.141382][T11987] sock_do_ioctl+0x22c/0x300 [ 270.141401][T11987] ? __pfx_sock_do_ioctl+0x10/0x10 [ 270.141417][T11987] ? __lock_acquire+0xab9/0xd20 [ 270.141439][T11987] sock_ioctl+0x576/0x790 [ 270.141456][T11987] ? __pfx_sock_ioctl+0x10/0x10 [ 270.141473][T11987] ? __fget_files+0x2a/0x420 [ 270.141489][T11987] ? __fget_files+0x3a0/0x420 [ 270.141506][T11987] ? __fget_files+0x2a/0x420 [ 270.141523][T11987] ? bpf_lsm_file_ioctl+0x9/0x20 [ 270.141539][T11987] ? __pfx_sock_ioctl+0x10/0x10 [ 270.141555][T11987] __se_sys_ioctl+0xfc/0x170 [ 270.141570][T11987] do_syscall_64+0xfa/0x3b0 [ 270.141583][T11987] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.141602][T11987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.141615][T11987] ? clear_bhb_loop+0x60/0xb0 [ 270.141630][T11987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.141643][T11987] RIP: 0033:0x7fb31678eec9 [ 270.141656][T11987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.141668][T11987] RSP: 002b:00007fb317594038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.141683][T11987] RAX: ffffffffffffffda RBX: 00007fb3169e5fa0 RCX: 00007fb31678eec9 [ 270.141693][T11987] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000007 [ 270.141702][T11987] RBP: 00007fb316811f91 R08: 0000000000000000 R09: 0000000000000000 [ 270.141711][T11987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.141720][T11987] R13: 00007fb3169e6038 R14: 00007fb3169e5fa0 R15: 00007ffcf8504c98 [ 270.141736][T11987]