last executing test programs: 2m4.785624002s ago: executing program 2 (id=2325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008090}, 0x8094) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x840) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000400)='cpu.pressure\x00', 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)={0x474, 0x3f3, 0x1, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0x2f, [0x4, 0x5, 0x7, 0x8, 0x7, 0xfffffffd, 0x0, 0x401, 0x6, 0x5, 0x5, 0x0, 0x60, 0x6, 0x1, 0x4, 0xfffffff8, 0x5, 0xbdca, 0x8000, 0x8001, 0x0, 0x9, 0x0, 0x4, 0x1000, 0x72, 0x8, 0xc5, 0x55, 0x4, 0x3ff, 0x4, 0x9, 0x5, 0x8, 0x10001, 0x4, 0x0, 0x6, 0x439, 0x7d6, 0xfffffff7, 0x8001, 0x6, 0xffffffff, 0x7, 0x4, 0x1f3e, 0x1, 0x3, 0x2, 0x2, 0x1, 0x100, 0xac4, 0x2, 0x5, 0x4, 0xa7, 0xfffffffc, 0xe31f, 0x9, 0x38a4], [0x8000, 0x7, 0x81, 0x6, 0x40, 0xd, 0x845, 0x8, 0x80000000, 0xe, 0x3, 0x84, 0x0, 0x2, 0x40, 0x401, 0xad, 0x948e, 0x7, 0x7fff, 0x6, 0x7f, 0xfffffff9, 0xfffffffd, 0xffffffff, 0x400, 0x101, 0x5, 0x7, 0x50000, 0x5, 0x5, 0x176, 0x4, 0x8, 0x8001, 0x1, 0xf, 0x1, 0xd3, 0x8, 0xb3, 0x4, 0xf, 0x1, 0x5, 0x1, 0x6, 0x3, 0x0, 0xe, 0xd0, 0x8, 0x401, 0x7075, 0x9, 0x6, 0xc, 0x0, 0x1, 0x5, 0x6, 0x8, 0x5], [0x76a313c7, 0x5, 0x0, 0x5, 0xf, 0x8000000, 0x2, 0x6934, 0x5, 0x5, 0x1, 0x4, 0x0, 0x3, 0x4, 0x3d6a, 0x9, 0x7, 0x10, 0x2, 0xc, 0x10000, 0x200, 0x8000, 0x3, 0x7ff, 0x1, 0x2, 0x9, 0x4, 0x5cbb, 0x6, 0x0, 0x40, 0xe, 0x8, 0x80000001, 0x3, 0x4, 0x100000, 0x43, 0x8, 0xfffffff7, 0x0, 0x3, 0x6, 0x2, 0x5, 0x0, 0x5, 0x7000, 0xffff, 0x4, 0xffffffcc, 0x4, 0xf, 0x9, 0x80, 0x7, 0x7c, 0x7, 0xdc0, 0x1, 0x8000], [0x2, 0x7, 0x3, 0x100, 0x3, 0xbd29, 0x7, 0x7, 0x9, 0x7, 0x5, 0x7, 0x11a, 0x5, 0x3, 0x0, 0x4, 0x0, 0x5, 0x5, 0xc8e1, 0x85d, 0x0, 0x8, 0x0, 0x2, 0xb, 0x4, 0x4, 0x6, 0x51, 0x2, 0x2, 0x0, 0x1000, 0x1, 0xfffffffc, 0x6, 0xe, 0xf, 0x1, 0x1000, 0x0, 0x8, 0x4, 0xfff, 0x5, 0x5, 0x2c76, 0x7, 0x7, 0x5, 0x2, 0x1c3, 0x200, 0x409, 0x8, 0x2, 0x1000, 0x80, 0x2, 0x5, 0x5, 0x5bd], 0x52, ['threaded\x00', 'NLBL_CALIPSO\x00', 'NLBL_CALIPSO\x00', 'blkio.throttle.io_serviced_recursive\x00', ',,#/]\xf7\xd8{/\x00']}, ["", "", "", "", "", "", "", ""]}, 0x474}, 0x1, 0x0, 0x0, 0x40}, 0x4e0c978cd5dcf268) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000c00)={'ip_vti0\x00', &(0x7f0000000b00)={'gre0\x00', 0x0, 0x8, 0x7800, 0xffffff79, 0x401, {{0x2a, 0x4, 0x1, 0x6, 0xa8, 0x64, 0x0, 0x3, 0x29, 0x0, @multicast1, @loopback, {[@timestamp={0x44, 0x2c, 0xf2, 0x0, 0x1, [0x6, 0x8001, 0x3, 0x1, 0x3, 0x10000, 0x29a, 0x9, 0x80000001, 0xe]}, @ssrr={0x89, 0x7, 0x2b, [@broadcast]}, @generic={0x0, 0x12, "cf6722b7777a4e83dae03d3207127d59"}, @generic={0x94, 0x2}, @timestamp={0x44, 0x24, 0xb1, 0x0, 0x6, [0xa1cc, 0x2, 0x4, 0x7f, 0x8000, 0x7, 0x4, 0xa]}, @ssrr={0x89, 0xf, 0x6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @rand_addr=0x64010100]}, @generic={0x86, 0x8, "d19775bfc70a"}, @generic={0x89, 0x10, "9c2830aa92a65f0721705e3c1f91"}]}}}}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r2, 0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x4, &(0x7f0000000980)=@raw=[@alu={0x7, 0x1, 0x4, 0x0, 0x8, 0x100}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}, @jmp={0x5, 0x0, 0xc, 0x7, 0x2, 0xfffffffffffffffc, 0x4}], &(0x7f00000009c0)='syzkaller\x00', 0xe, 0xd0, &(0x7f0000000a00)=""/208, 0x1f00, 0x42, '\x00', r3, 0x25, r2, 0x8, &(0x7f0000000c40)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000c80)={0x1, 0x4, 0x7fffffff, 0x2ed}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000d80)=[r2, r2, r2, r4, 0xffffffffffffffff, r2], &(0x7f0000000dc0)=[{0x0, 0x4, 0xd, 0xb}, {0x2, 0x3, 0x9, 0x1}]}, 0x94) pipe(&(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DESTROY(r5, &(0x7f0000002080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002040)={&(0x7f0000000f40)={0x10f8, 0x15, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x34, 0x1, "aae340e347be6db03d2405053cd6ee9c3ca38641fb8f7b104c1fa56705e38abe32c2a53b42b7704ed39b801ada3e0afc"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "c59cb9dd68d0ffd4f13d5786c9b6dd2a6a43fe270da7f96852577c909581acf8cc697f571c0032364af96e74851a6c9c568e25b88fe3dfccf60869d51914288c29dce683a90df1717c58441c8f49749c1f3998c6421a8564e5260fb086e950e4655cd9dd7da9cc4d0887942b05b64e765c74fde1b2c20af50e3da1e80dffb2a5d6dad93e462ed6baae6fdb6429cff8835bd1b1d65641664d416d82"}, @INET_DIAG_REQ_BYTECODE={0x5, 0x1, '9'}]}, 0x10f8}, 0x1, 0x0, 0x0, 0x800}, 0x20044800) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat$cgroup(r5, &(0x7f00000020c0)='syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000002100)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) connect$unix(r5, &(0x7f0000002140)=@file={0x0, './file0\x00'}, 0x6e) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000025c0)={0x11, 0x2a, &(0x7f0000002200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffa}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @jmp={0x5, 0x0, 0x1, 0x5, 0xb, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x69f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @map_idx_val={0x18, 0xf, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8000}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002380)='GPL\x00', 0xe, 0x9f, &(0x7f00000023c0)=""/159, 0x41000, 0x19, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000002480)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000024c0)=[r6, r2], &(0x7f0000002500)=[{0x2, 0x4, 0xf, 0x4}, {0x5, 0x1, 0x8, 0x8}, {0x3, 0x1, 0x8, 0x1}, {0x1, 0x1, 0xf, 0x7}, {0x4, 0x4, 0x6, 0xa}, {0x2, 0x5, 0xc, 0xa}, {0x5, 0x4, 0xa, 0xc}, {0x3, 0x2, 0x1, 0xb}, {0x3, 0x1, 0x3, 0x4}], 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002680)={&(0x7f00000021c0)='cachefiles_mark_inactive\x00', r9, 0x0, 0x40}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0x16, 0x13, &(0x7f00000026c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xaf889af5, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@alu={0x4, 0x1, 0x85ee34cbefd0b161, 0x4, 0x8, 0x20, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x511ea898e9f99fc1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002780)='syzkaller\x00', 0xeab5, 0x7f, &(0x7f00000027c0)=""/127, 0x41100, 0x6f, '\x00', r3, @fallback=0x2d, r6, 0x8, &(0x7f0000002840)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000002880)={0x4, 0xe, 0x2, 0xfff}, 0x10, 0xffffffffffffffff, r8, 0x3, 0x0, &(0x7f00000028c0)=[{0x4, 0x5, 0xc}, {0x0, 0x1, 0x6, 0x9}, {0x4, 0x3, 0x1, 0x9}], 0x10, 0x4}, 0x94) ioctl$sock_inet_SIOCSIFBRDADDR(r8, 0x891a, &(0x7f00000029c0)={'veth0_to_team\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000002a00)={0x0, @in={{0x2, 0x4e21, @multicast1}}, [0x5, 0x5, 0x0, 0x7, 0x3ff, 0x1ff, 0x9, 0x40, 0xb, 0x3b8d19e4, 0x7, 0x0, 0x8000000000000000, 0x8, 0x6]}, &(0x7f0000002b00)=0x100) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000002b40)={0x3, 0x3, 0x200, 0x400, 0xff, 0x0, 0x5, 0x6, r11}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r12, 0x84, 0x7c, &(0x7f0000002b80)={r11, 0x8, 0x2}, &(0x7f0000002bc0)=0x8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x11, r10, 0x5fcca000) 2m4.701354487s ago: executing program 2 (id=2326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x20, 0xf5, 0xc, 0xfffff01c}, {0x6, 0x4, 0x0, 0x5}]}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r4, 0x11, 0x68, &(0x7f0000000080), 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0xc000}, 0x48000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)=@delchain={0x128, 0x65, 0x2, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0xec, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xd4, 0x1, [@m_skbedit={0xa0, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8e}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x200}]}, {0x54, 0x6, "e694237e5368d7ffa3b6902e867a74d28928d9c60c5545d197aed0ec6ae835ef8d6a9da336c44092b74bda2299f780b216b499fbe27d758019db25c266280e79bc55f4fa69e0bc5288f64828bf15b516"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c005a80380000800c0001000202", @ANYRESDEC=r5, @ANYBLOB="010000712f00090000000000000008000308", @ANYBLOB='X\x00\x00\x00', @ANYRES32=r6, @ANYRES64=r6, @ANYBLOB="555a29e470e8e068c8083214e2c999a74e96aaba137eb26aecce071a65d08f3d566b080c291a57edc3e5c5adebb280ced1149309a2b5705ef3770853131c1559f2e6f7bc3f794f55", @ANYRES8=r6, @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x4000044}, 0x40011) socket$inet6_udp(0xa, 0x2, 0x0) 2m3.743488686s ago: executing program 2 (id=2335): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000340)={0xfff8, 0xfffd, 0xa0, 0xffff}, 0x8) (async) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}], 0x4000000000000fc, 0x24004010) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000380)={0x0, 0x5}, &(0x7f00000003c0)=0x8) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0], 0x0, 0x53, &(0x7f00000007c0)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_ext={0x1c, 0x1d, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5e}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b00)='GPL\x00', 0xffffffff, 0x79, &(0x7f0000000b40)=""/121, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000c00)={0x5, 0x10, 0x2, 0xffffffff}, 0x10, 0x234d9, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000c40)=[{0x0, 0x5, 0xa, 0x5}], 0x10, 0x4}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)}, 0x20) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ppoll(&(0x7f0000000500)=[{r9}], 0x1, 0x0, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r10}, 0x10) r12 = bpf$ITER_CREATE(0xb, &(0x7f00000000c0)={r11}, 0x8) close(r12) (async) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0xd, 0x18, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, {}, {}, [@tail_call, @call={0x85, 0x0, 0x0, 0x3c}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5e}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0xffffc857, 0xa6, &(0x7f00000004c0)=""/166, 0x41100, 0x4, '\x00', 0x0, @fallback=0x28, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x3, 0x3, 0x9, 0x677c}, 0x10, r4, r5, 0x5, &(0x7f0000000ec0)=[r6, 0x1, r7, r8, 0x1, r9, r12, r13], &(0x7f0000000f00)=[{0x1, 0x1, 0x1, 0x3}, {0x1, 0x1, 0x9, 0x9}, {0x5, 0x1, 0x7, 0x3}, {0x1, 0x3, 0x6, 0x5}, {0x1, 0x3, 0x2, 0xb}], 0x10, 0x4}, 0x94) pipe(0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0x8, 0xec, 0xc, @empty, @local, 0x700, 0x7800, 0xcec, 0x1}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x8000, 0x5, 0x100, 0x6, 0x300, r14}) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000) 2m3.535753641s ago: executing program 2 (id=2338): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r1}, 0x10) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) write$cgroup_subtree(r3, &(0x7f0000000800)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r3, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r3, 0x4) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1000}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x81}, 0x1c) (async) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) (async) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, 0xffffffffffffffff, 0x913e0000) (async) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r5, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f2000/0x4000)=nil, 0x4000, 0x4, 0x12, r6, 0xa2ec9000) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r7, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0xc010, r6, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0xa6762000) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f0000000dc0)={{r2}, "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"}) (async) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) 2m3.500237591s ago: executing program 3 (id=2339): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x18, 0x0, 0x1, 0x101, 0x0, 0x0, {0x9, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c2}, 0x24000044) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000ad9a000080000000a60000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) sendmmsg$inet6(r4, &(0x7f00000003c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@hopopts={{0x18, 0x29, 0x36, {0x2f}}}], 0x18}}], 0x1, 0x80) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x1, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62d57c08a90b189d190c341035de53a9a13608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600d8ded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bce38ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2d03aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c87acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b907d25379897e851e7106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10e53a9f792ecb28ec39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8132301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979ce67c7a1f8924017e73bcf1ae3ed821a4b9839725000000000000000000000000000000f0ce2bf979256f99e89e05d466843d32b983d19cfa3c2a04e9f48311b786927c6c2d505637cad9ae8ae32fbee21a721e38edf6e80ff33a3a3cef251918374de4d4636348ef77a7bad1e8250117d604f59921f29bda75f135865bdc3e10906562e01af1fef96e49b969eaf4ec6b4c51fa2dcc7c1a117243fd64d641426e6a582fcda4be9f58724d4a66e46c032e6f6b3d46fb9616b4b6efc5d083e003fdcf3d78fea7ee48b2a5cc89"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="05806ab382844306d758e60803dc", 0x0, 0x6b2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000002000000000000000085000000170000009500000000000000"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r8, 0x25, 0x0, @val=@netkit={@void, @value=r9}}, 0x1c) syz_emit_ethernet(0x1352, &(0x7f0000004000)=ANY=[], 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl(r1, 0xa, &(0x7f00000014c0)="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") r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x300}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newchain={0x40, 0x64, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x8, 0x5}, {0x0, 0xffff}, {0x8, 0x2}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0xfffffffffffffeb8, 0xb, 0x6}]}}]}, 0x40}}, 0x4000) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m3.403830964s ago: executing program 2 (id=2341): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x730) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x19, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xe8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @ldst={0x3, 0x2, 0x3, 0x2, 0x4, 0x20, 0x8}, @exit, @map_val={0x18, 0xdb94307ad4ce4b4d, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @ldst={0x3, 0x1, 0x0, 0x3, 0x6, 0xffffffffffffffe0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x200000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r5}, 0x18) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r6) (async) socket$kcm(0x10, 0x2, 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r7 = socket$kcm(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) (async) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8b0f, &(0x7f0000000000)={'virt_wifi0\x00', @random='4\x00'}) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000002700), &(0x7f0000002780)=0x80) (async) sendmmsg$inet(r0, &(0x7f0000000700), 0x0, 0x0) 2m3.169507186s ago: executing program 3 (id=2344): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f00000002c0)=0x1e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000000800a0018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000080085000000c800000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0xe3, &(0x7f0000000140)=""/127, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x104, r3, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf651}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x89e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x101}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r4) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRES16=r5, @ANYBLOB="200028bd7000fedbdf25040000003c0007800c00030008000000000000000c00040080000000000000000c000400010400000000000008000200ffff00000c0004000300000000000000a0000180080003000180000008000300ff0000000d0001007564703a73797a320000000014000280080001000700000008000100170000000d0001007564703a73797a30000000000c0002800800020001040000340002800800030002000000080002000400000008000300070000000800020010000000080001001d000000080003008100000008000300060000000d0001007564703a73797a3200000000"], 0xf0}, 0x1, 0x0, 0x0, 0x4040000}, 0x200000c0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xd, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4000) recvmmsg(r6, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000740)=""/181, 0xb5}, {&(0x7f0000000900)=""/219, 0xdb}, {&(0x7f0000003e00)=""/4093, 0xffd}, {&(0x7f0000000800)=""/239, 0xef}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0xff7}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000006c0)=""/124, 0x7c}, {&(0x7f00000003c0)=""/215, 0xd7}, {&(0x7f0000004e40)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/4087, 0xff7}, {&(0x7f00000004c0)=""/107, 0x6b}, {&(0x7f0000000540)=""/130, 0x82}], 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x40010000, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0xc6e9f000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x80000) write(r8, &(0x7f0000000340)="13001f040d5700f9", 0x8) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0xffffe000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x0) 2m3.074321083s ago: executing program 2 (id=2347): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x20000000) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810540010000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203b}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000005e000102000000000000000000be7e"], 0x1c}}, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) 2m2.943212053s ago: executing program 0 (id=2349): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r2, 0x309, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000080) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/70, 0x46}}], 0x1, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="08c193490000000024001280090e010076fc01ab4a7d3a18fb000280100004800c010000040000000200000014000300766c616e3000"/64], 0x58}}, 0x0) 2m2.839935398s ago: executing program 3 (id=2350): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) r0 = socket(0x8, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000280)=""/49, &(0x7f0000000240)=0x31) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) (async) close(r0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2m2.778172113s ago: executing program 0 (id=2352): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0b00000007000000010001000900000005"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x20000000000000c2, &(0x7f0000000000)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x25, r1}, 0x94) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000001900)=""/4108, &(0x7f00000000c0), &(0x7f0000000440), 0x2, r0}, 0x38) 2m2.690030512s ago: executing program 3 (id=2353): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x30, 0x10, 0x503, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x880}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f0000000080)=0x80, 0x81000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) (async) r3 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000400)={{{@in=@local, @in=@rand_addr=0x64010101, 0x4e20, 0x2, 0x4e22, 0xd2, 0xa, 0x20, 0xa0, 0x89, r2, r3}, {0xfff, 0x0, 0x30000000000000, 0x5, 0x5, 0x3d06, 0x3, 0x8}, {0x0, 0x8000000000000000, 0x0, 0xa93}, 0x7, 0x6e6bb1, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d3, 0xff}, 0x8, @in=@loopback, 0x6, 0x0, 0x2, 0x3, 0x4, 0x193d, 0x7fffffff}}, 0xffffff37) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r5, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) 2m2.637098818s ago: executing program 0 (id=2354): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket(0x1e, 0x4, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r2 = socket(0x11, 0x3, 0x0) socket$caif_stream(0x25, 0x1, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf8}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000007"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000200000000000000000000001801000078"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r7, @ANYBLOB="000000000000000018100000", @ANYRES32=r8, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r9, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)=ANY=[@ANYRES8=r5, @ANYRESDEC=r6], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x40044800) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x6a040000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r12, 0x84, 0x1b, &(0x7f00000003c0)={0x0, 0x46, "1de7622608a20101c5e807415812b6a8d000d2503e5520231c71f2db6b166557f98fc57bf86a2f8075fb802126a064fdf88d6ca748fe5fe21eda1d8c4cabd78b97b8acf2e60b"}, &(0x7f0000000340)=0x4e) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r10, 0x500, 0x20000}, [@IFLA_ADDRESS={0xa, 0x1, @random="79b6b2d61cb7"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) setsockopt$MRT6_PIM(r12, 0x29, 0xcf, &(0x7f0000000300)=0x4, 0x4) 2m2.367731097s ago: executing program 3 (id=2355): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xf, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd96", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$alg(r1, 0x0, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000200)=0xda, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000)=0x48b, 0x4) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', 0x0, 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000500)=""/129, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x4e20, 0x9, @mcast1, 0x8}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6, 0x0, 0x5}, 0x18) socket(0x1, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000340)) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf2"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2m2.059748094s ago: executing program 0 (id=2356): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x2081}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xfffffffe}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0xf7}]}}}]}, 0x40}}, 0x28000000) 2m1.791601727s ago: executing program 0 (id=2359): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x8, @remote, 0x7}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x4e23, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x2, 0x7, 0x4, 0x0, 0x81, 0xff, 0x6, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x47, 0x1, 0x2, 0x800, 0x3, 0x8, 0x0, 0x6, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x5, 0x7, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x2, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0x7fffffff, 0xc7, 0x4, 0x6, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x5, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x800, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x1, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x87, 0x10, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x1020, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0x2, 0x3, 0x10001, 0xffff, 0x4d, 0x10000d, 0x8, 0x2, 0x2, 0x8]}]}]}}]}, 0x43c}}, 0x4000) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="070000000000000000000200000008002500000000000c0099"], 0x28}}, 0x0) write(r2, &(0x7f0000000240)="94", 0x1) tee(r1, r5, 0x8f5, 0x100000000000000) write$cgroup_type(r5, &(0x7f0000000180), 0x9) write(r3, 0x0, 0x0) 2m1.307352194s ago: executing program 3 (id=2365): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="05220000000000001400128009000100766c616e00000000040002803c001a800b"], 0x70}, 0x1, 0xba01}, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) 2m0.823639615s ago: executing program 0 (id=2369): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1f642cbd70010080000034000000080073000000000008000300fdffffff0e00020000000000000002696d0011000f0002006e657464657673696d3000000016b28ff8d7ca76c6f0018bcac7f5cdcf2685ee2b7de79102147b5dcc4410041e0e51179043aac75d352a402a603743ba61a5043770bc1f599d9a767fa03e"], 0x44}, 0x1, 0x0, 0x0, 0x8880}, 0x20000000) (async) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da2"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async, rerun: 64) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240), r8) sendmsg$TIPC_NL_NET_GET(r8, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="110725bd7000ffdbdf250e"], 0x14}, 0x1, 0x0, 0x0, 0x8048045}, 0x40c0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1m46.924078744s ago: executing program 32 (id=2347): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x20000000) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810540010000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203b}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000005e000102000000000000000000be7e"], 0x1c}}, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) 1m45.129475215s ago: executing program 33 (id=2365): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="05220000000000001400128009000100766c616e00000000040002803c001a800b"], 0x70}, 0x1, 0xba01}, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) 1m44.28022126s ago: executing program 34 (id=2369): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1f642cbd70010080000034000000080073000000000008000300fdffffff0e00020000000000000002696d0011000f0002006e657464657673696d3000000016b28ff8d7ca76c6f0018bcac7f5cdcf2685ee2b7de79102147b5dcc4410041e0e51179043aac75d352a402a603743ba61a5043770bc1f599d9a767fa03e"], 0x44}, 0x1, 0x0, 0x0, 0x8880}, 0x20000000) (async) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da2"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async, rerun: 64) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240), r8) sendmsg$TIPC_NL_NET_GET(r8, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="110725bd7000ffdbdf250e"], 0x14}, 0x1, 0x0, 0x0, 0x8048045}, 0x40c0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1m39.908238241s ago: executing program 4 (id=2377): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000680)=0xffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}, @IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) 1m32.824381031s ago: executing program 4 (id=2380): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) (async) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000200000000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) (async) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000440)="5800000014001d2340834b80040d8d560a067ee500ff000000000000000058000b4824ca945f64009400140425010ebc000000000000008000f0fffeffe809005300fff5dd80000010000100080c10000000000000000100", 0x58}], 0x1) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000580)={@private2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x930311}) (async) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0x3f}, @loopback, 0x6, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ca95deaa14d67204e271c124cbd30f04f82308442a65329670667d017314ae8392cb1b5bdae58b931de5e72f84bfad616cc8a93ee80d42f919877a1136f763794c1d65b12f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) (async) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, 0x34, 0x1, 0x470bd2b, 0x25dbdbfe, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}, @typed={0xc, 0x5, 0x0, 0x0, @u64=0x73b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 1m25.828291193s ago: executing program 4 (id=2381): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {0x0, 0x4102}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=r4, @ANYBLOB="00000000140001"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockname$netrom(r4, &(0x7f0000000300)={{0x3, @bcast}, [@rose, @bcast, @default, @netrom, @netrom, @rose, @rose, @netrom]}, &(0x7f0000000380)=0x48) sendto$packet(r0, &(0x7f0000000180)="10031200e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x38}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r6}, 0x18) nanosleep(&(0x7f00000001c0)={0x77359400}, &(0x7f0000001280)) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="300000002d0001000000000000000000040000801c001a80040001001200792e6576656e747300"/48], 0x30}], 0x1, 0x0, 0x0, 0x851}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) unshare(0x6a040000) syz_emit_ethernet(0x0, 0x0, 0x0) 1m16.207902333s ago: executing program 4 (id=2383): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x79281e99}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x40040) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) (async) socket(0x14, 0x2, 0x4) (async, rerun: 64) r3 = accept4$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) (rerun: 64) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000240)=0x1, 0x4) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000001c0)={0x70000000}) 1m12.299522458s ago: executing program 4 (id=2385): r0 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m2.976434425s ago: executing program 4 (id=2387): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 55.857914063s ago: executing program 1 (id=2388): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="03001c000700"], 0xa) 50.699203547s ago: executing program 1 (id=2389): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002d00)={0x9, {{0xa, 0x4e33, 0x1000, @dev={0xfe, 0x80, '\x00', 0x24}, 0x3}}, {{0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc3f}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x3, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r6, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8, 0x0, 0xeacc}, 0x18) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0xa420, 0xfffffffffffffffd, 0x0, 0x80, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x5, 0x7fffffff, 0x6}, 0x0, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r9, @ANYBLOB="040027bd7000fddbdf2502000000280001800600010002000000140004002001000000000000000000000000000105000200030000005000068014000400fc02000000000000000000000000000114000400fe8000000000000000000000000000aa050002000100000014000400fc02000000000000000000000000000108000700", @ANYRES8=r1, @ANYRES16=r5, @ANYRES32=r10, @ANYBLOB="080003000200000008000400ff000000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x54}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) clock_gettime(0x0, &(0x7f0000000200)) socket$inet_sctp(0x2, 0x1, 0x84) ppoll(&(0x7f00000001c0)=[{r1, 0x230}], 0x1, 0x0, 0x0, 0xfffffffffffffca2) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r1, &(0x7f0000000340)={0x4, 0x0, 0x1, 0x0, 0x1}, 0x8) 46.970568909s ago: executing program 35 (id=2387): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 41.349018485s ago: executing program 1 (id=2391): socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r3, 0x0, 0x80, 0x6) write$bt_hci(r3, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x7) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000280)={r5, r5, 0x1, 0x1, &(0x7f00000000c0)='\x00', 0x9, 0x1, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = accept4$x25(r0, &(0x7f0000000040), &(0x7f0000000140)=0x12, 0x80000) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000000180)=""/41, &(0x7f0000000240)=0x29) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xd5}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c0c0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x41, &(0x7f0000000580)={'nat\x00', 0x2, [{}, {}]}, 0x48) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r6) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r6) 34.832728886s ago: executing program 1 (id=2392): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0xecfadfd}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}, 0x6, 0x1}, &(0x7f00000000c0)=0x90) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}], 0x1, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x1, 0x10008095, 0x0, 0x0) close(r0) 25.98613691s ago: executing program 1 (id=2393): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r1], 0x40}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001840), 0x3b, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x8}, 0x18) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) r8 = socket(0x2b, 0x80801, 0x1) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250a001c00", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r10, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x28, r11, 0x401, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x7}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0xc000) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0x6, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x667, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x9ce, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6ae, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x1000004, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x10, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xaa82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597e, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0xffffffff, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b60, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) 16.93430926s ago: executing program 1 (id=2394): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4d, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x5}}) unshare(0x6a040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000008000000000003cf5e04e0ee07f1e641a612a62c3f3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) unshare(0x600) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r4, &(0x7f0000000500)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x3961, @remote, 0x6}}, 0x24) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000340)=""/75, &(0x7f00000003c0)="6adcd3da9edb59240e8971b926407c19a8db884ccf7520c146ca6edb19f42d4968f43cd7a91f6ba3cfc2d4a4928cbf8fa0c9f5f856fa20b0f68eb27fdd7c1987a97ad1f49baa2def4f0c06178e846da8145f985c8c28e09877a6f224ff9052f2fd6ba0391e6ae51fe41d0fc111df8c4333c19c132d90d1610bb045ea7c38a353c2d06655128be785752e4518a82b52f9f2", &(0x7f0000000600)="d8b8554e0d1c686676f67bbefb4ee16c42942a8c43e0c658346dc9986923ceb17a2ef6127fde361aa8d16af81ded9ed06086bd48a6943f0e3993ab3e441b2b866b307d0d4e5acabed95342d9ce0f56481d96384ac6a0bd6dcbc7b3ceec14fa41bf168985127e0ec1bd704712757912095afc44cdde636606f69f55e83e43e019fa60dd8e6b9aa3087857dd2d1ed56f2e868a7c0b5bba892bf7fe2f37468c7fa01b9a318d20b26c3d407a933023079b751749ed22cf7fe6f6f5aa6d6b81504eae68dbfa27615014224736b18f102f2f060c1ca564f4c9beab26e0ec299942490f66bbe76d2c9c276c4e", 0x4, r2, 0x4}, 0x38) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, r6, 0x0, 0xffffffff004) sendmsg$nl_generic(r6, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="a00000001e00110c29bc7000fbdbdf251100000000f3eabccbeb7d824e583533227ef36fd76f501fe09c3a725b9e14abb8ad81b78416d9dbda1a0c31db5776ad72cb21680c625443d9eed7304c4b9c075f709b1a8b11dadfd312d74af859a2af294fe25ec696c74fde7bbc4fdcb1828e4c5abdc95ac0eb60131ae26208dd189e07148cf6f005b47f6e026bc2f7ca45a2c9e7b8f9ad20de3d72ff50159d31d231d46b85b8290ce597faf16aa3"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000058a43ba74c1300b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000907080000f8ffff00f0ffffffc70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc250}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000180)=@req={0x10, 0xb780, 0x2, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xa, 0xc, &(0x7f00000009c0)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x5, 0x10001, 0xa, 0x1, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) 0s ago: executing program 36 (id=2394): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4d, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x5}}) unshare(0x6a040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000008000000000003cf5e04e0ee07f1e641a612a62c3f3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) unshare(0x600) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r4, &(0x7f0000000500)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x3961, @remote, 0x6}}, 0x24) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000340)=""/75, &(0x7f00000003c0)="6adcd3da9edb59240e8971b926407c19a8db884ccf7520c146ca6edb19f42d4968f43cd7a91f6ba3cfc2d4a4928cbf8fa0c9f5f856fa20b0f68eb27fdd7c1987a97ad1f49baa2def4f0c06178e846da8145f985c8c28e09877a6f224ff9052f2fd6ba0391e6ae51fe41d0fc111df8c4333c19c132d90d1610bb045ea7c38a353c2d06655128be785752e4518a82b52f9f2", &(0x7f0000000600)="d8b8554e0d1c686676f67bbefb4ee16c42942a8c43e0c658346dc9986923ceb17a2ef6127fde361aa8d16af81ded9ed06086bd48a6943f0e3993ab3e441b2b866b307d0d4e5acabed95342d9ce0f56481d96384ac6a0bd6dcbc7b3ceec14fa41bf168985127e0ec1bd704712757912095afc44cdde636606f69f55e83e43e019fa60dd8e6b9aa3087857dd2d1ed56f2e868a7c0b5bba892bf7fe2f37468c7fa01b9a318d20b26c3d407a933023079b751749ed22cf7fe6f6f5aa6d6b81504eae68dbfa27615014224736b18f102f2f060c1ca564f4c9beab26e0ec299942490f66bbe76d2c9c276c4e", 0x4, r2, 0x4}, 0x38) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, r6, 0x0, 0xffffffff004) sendmsg$nl_generic(r6, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="a00000001e00110c29bc7000fbdbdf251100000000f3eabccbeb7d824e583533227ef36fd76f501fe09c3a725b9e14abb8ad81b78416d9dbda1a0c31db5776ad72cb21680c625443d9eed7304c4b9c075f709b1a8b11dadfd312d74af859a2af294fe25ec696c74fde7bbc4fdcb1828e4c5abdc95ac0eb60131ae26208dd189e07148cf6f005b47f6e026bc2f7ca45a2c9e7b8f9ad20de3d72ff50159d31d231d46b85b8290ce597faf16aa3"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000058a43ba74c1300b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000907080000f8ffff00f0ffffffc70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc250}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000180)=@req={0x10, 0xb780, 0x2, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xa, 0xc, &(0x7f00000009c0)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x5, 0x10001, 0xa, 0x1, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) kernel console output (not intermixed with test programs): +0x5c6/0xb30 [ 148.079104][ T7927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.079135][ T7927] ? aa_sock_msg_perm+0xf1/0x1d0 [ 148.079163][ T7927] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 148.079181][ T7927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.079203][ T7927] __sock_sendmsg+0x21c/0x270 [ 148.079232][ T7927] ____sys_sendmsg+0x505/0x830 [ 148.079259][ T7927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.079289][ T7927] ? import_iovec+0x74/0xa0 [ 148.079310][ T7927] ___sys_sendmsg+0x21f/0x2a0 [ 148.079335][ T7927] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.079396][ T7927] ? __fget_files+0x2a/0x420 [ 148.079412][ T7927] ? __fget_files+0x3a0/0x420 [ 148.079441][ T7927] __x64_sys_sendmsg+0x19b/0x260 [ 148.079467][ T7927] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 148.079500][ T7927] ? __pfx_ksys_write+0x10/0x10 [ 148.079530][ T7927] ? do_syscall_64+0xbe/0xfa0 [ 148.079558][ T7927] do_syscall_64+0xfa/0xfa0 [ 148.079580][ T7927] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.079603][ T7927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.079622][ T7927] ? clear_bhb_loop+0x60/0xb0 [ 148.079645][ T7927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.079664][ T7927] RIP: 0033:0x7f9b7278eec9 [ 148.079685][ T7927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.079701][ T7927] RSP: 002b:00007f9b7361b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.079723][ T7927] RAX: ffffffffffffffda RBX: 00007f9b729e5fa0 RCX: 00007f9b7278eec9 [ 148.079737][ T7927] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 148.079749][ T7927] RBP: 00007f9b7361b090 R08: 0000000000000000 R09: 0000000000000000 [ 148.079776][ T7927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.079787][ T7927] R13: 00007f9b729e6038 R14: 00007f9b729e5fa0 R15: 00007ffe09525758 [ 148.079821][ T7927] [ 148.424445][ T7931] netlink: 'syz.0.479': attribute type 13 has an invalid length. [ 148.438000][ T7931] netlink: 'syz.0.479': attribute type 17 has an invalid length. [ 148.776933][ T7931] dummy0: left promiscuous mode [ 148.784341][ T5910] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 148.796254][ T7931] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.896145][ T7945] netlink: 200 bytes leftover after parsing attributes in process `syz.2.485'. [ 148.938846][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'. [ 149.086223][ T5910] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 149.918670][ T7989] ªªªªªªòÓ»ö濾1I: entered promiscuous mode [ 149.959966][ T7989] A link change request failed with some changes committed already. Interface ªªªªªªòÓ»ö濾1I may have been left with an inconsistent configuration, please check. [ 150.241713][ T7997] ipvlan2: entered promiscuous mode [ 150.270218][ T7997] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 150.612254][ T8017] FAULT_INJECTION: forcing a failure. [ 150.612254][ T8017] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 150.659280][ T8017] CPU: 0 UID: 0 PID: 8017 Comm: syz.0.505 Not tainted syzkaller #0 PREEMPT(full) [ 150.659305][ T8017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 150.659315][ T8017] Call Trace: [ 150.659322][ T8017] [ 150.659330][ T8017] dump_stack_lvl+0x189/0x250 [ 150.659354][ T8017] ? __pfx____ratelimit+0x10/0x10 [ 150.659384][ T8017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.659403][ T8017] ? __pfx__printk+0x10/0x10 [ 150.659418][ T8017] ? __might_fault+0xb0/0x130 [ 150.659453][ T8017] should_fail_ex+0x414/0x560 [ 150.659477][ T8017] _copy_from_iter+0x1de/0x1790 [ 150.659508][ T8017] ? rcu_is_watching+0x15/0xb0 [ 150.659533][ T8017] ? kmalloc_reserve+0xbd/0x290 [ 150.659553][ T8017] ? __pfx__copy_from_iter+0x10/0x10 [ 150.659581][ T8017] ? __build_skb_around+0x262/0x3f0 [ 150.659603][ T8017] ? netlink_sendmsg+0x642/0xb30 [ 150.659621][ T8017] ? skb_put+0x11b/0x210 [ 150.659643][ T8017] netlink_sendmsg+0x6b2/0xb30 [ 150.659671][ T8017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.659695][ T8017] ? aa_sock_msg_perm+0xf1/0x1d0 [ 150.659728][ T8017] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 150.659745][ T8017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.659766][ T8017] __sock_sendmsg+0x21c/0x270 [ 150.659796][ T8017] ____sys_sendmsg+0x505/0x830 [ 150.659824][ T8017] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.659862][ T8017] ? import_iovec+0x74/0xa0 [ 150.659884][ T8017] ___sys_sendmsg+0x21f/0x2a0 [ 150.659908][ T8017] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.659966][ T8017] ? __fget_files+0x2a/0x420 [ 150.659982][ T8017] ? __fget_files+0x3a0/0x420 [ 150.660009][ T8017] __x64_sys_sendmsg+0x19b/0x260 [ 150.660034][ T8017] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 150.660068][ T8017] ? __pfx_ksys_write+0x10/0x10 [ 150.660099][ T8017] ? do_syscall_64+0xbe/0xfa0 [ 150.660125][ T8017] do_syscall_64+0xfa/0xfa0 [ 150.660146][ T8017] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.660168][ T8017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.660188][ T8017] ? clear_bhb_loop+0x60/0xb0 [ 150.660210][ T8017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.660228][ T8017] RIP: 0033:0x7fb23838eec9 [ 150.660245][ T8017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.660261][ T8017] RSP: 002b:00007fb2391ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.660281][ T8017] RAX: ffffffffffffffda RBX: 00007fb2385e5fa0 RCX: 00007fb23838eec9 [ 150.660294][ T8017] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 150.660306][ T8017] RBP: 00007fb2391ae090 R08: 0000000000000000 R09: 0000000000000000 [ 150.660317][ T8017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.660328][ T8017] R13: 00007fb2385e6038 R14: 00007fb2385e5fa0 R15: 00007ffc29789b18 [ 150.660360][ T8017] [ 150.719438][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.504'. [ 150.758205][ T8025] netlink: 'syz.1.508': attribute type 3 has an invalid length. [ 151.444831][ T8055] FAULT_INJECTION: forcing a failure. [ 151.444831][ T8055] name failslab, interval 1, probability 0, space 0, times 0 [ 151.469538][ T8055] CPU: 1 UID: 0 PID: 8055 Comm: syz.0.519 Not tainted syzkaller #0 PREEMPT(full) [ 151.469562][ T8055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 151.469573][ T8055] Call Trace: [ 151.469581][ T8055] [ 151.469590][ T8055] dump_stack_lvl+0x189/0x250 [ 151.469614][ T8055] ? __pfx____ratelimit+0x10/0x10 [ 151.469635][ T8055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.469654][ T8055] ? __pfx__printk+0x10/0x10 [ 151.469679][ T8055] ? __lock_acquire+0xab9/0xd20 [ 151.469704][ T8055] should_fail_ex+0x414/0x560 [ 151.469731][ T8055] should_failslab+0xa8/0x100 [ 151.469751][ T8055] kmem_cache_alloc_noprof+0x74/0x6e0 [ 151.469778][ T8055] ? skb_clone+0x212/0x3a0 [ 151.469806][ T8055] skb_clone+0x212/0x3a0 [ 151.469831][ T8055] __netlink_deliver_tap+0x404/0x850 [ 151.469863][ T8055] ? netlink_deliver_tap+0x2e/0x1b0 [ 151.469892][ T8055] netlink_deliver_tap+0x19c/0x1b0 [ 151.469914][ T8055] netlink_unicast+0x7fa/0x9e0 [ 151.469950][ T8055] ? __pfx_netlink_unicast+0x10/0x10 [ 151.469979][ T8055] ? netlink_sendmsg+0x642/0xb30 [ 151.469997][ T8055] ? skb_put+0x11b/0x210 [ 151.470022][ T8055] netlink_sendmsg+0x805/0xb30 [ 151.470049][ T8055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.470071][ T8055] ? aa_sock_msg_perm+0xf1/0x1d0 [ 151.470096][ T8055] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 151.470112][ T8055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.470132][ T8055] __sock_sendmsg+0x21c/0x270 [ 151.470163][ T8055] ____sys_sendmsg+0x505/0x830 [ 151.470190][ T8055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.470222][ T8055] ? import_iovec+0x74/0xa0 [ 151.470244][ T8055] ___sys_sendmsg+0x21f/0x2a0 [ 151.470269][ T8055] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.470330][ T8055] ? __fget_files+0x2a/0x420 [ 151.470345][ T8055] ? __fget_files+0x3a0/0x420 [ 151.470372][ T8055] __x64_sys_sendmsg+0x19b/0x260 [ 151.470396][ T8055] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 151.470428][ T8055] ? __pfx_ksys_write+0x10/0x10 [ 151.470457][ T8055] ? do_syscall_64+0xbe/0xfa0 [ 151.470484][ T8055] do_syscall_64+0xfa/0xfa0 [ 151.470504][ T8055] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.470525][ T8055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.470542][ T8055] ? clear_bhb_loop+0x60/0xb0 [ 151.470564][ T8055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.470582][ T8055] RIP: 0033:0x7fb23838eec9 [ 151.470598][ T8055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.470613][ T8055] RSP: 002b:00007fb2391ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.470632][ T8055] RAX: ffffffffffffffda RBX: 00007fb2385e5fa0 RCX: 00007fb23838eec9 [ 151.470645][ T8055] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 151.470657][ T8055] RBP: 00007fb2391ae090 R08: 0000000000000000 R09: 0000000000000000 [ 151.470669][ T8055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.470680][ T8055] R13: 00007fb2385e6038 R14: 00007fb2385e5fa0 R15: 00007ffc29789b18 [ 151.470713][ T8055] [ 151.787425][ T8065] netlink: 44 bytes leftover after parsing attributes in process `syz.1.517'. [ 151.805447][ T8065] netlink: 35 bytes leftover after parsing attributes in process `syz.1.517'. [ 151.862399][ T8065] netlink: 'syz.1.517': attribute type 6 has an invalid length. [ 151.909178][ T8065] netlink: 35 bytes leftover after parsing attributes in process `syz.1.517'. [ 151.967837][ T8063] netlink: 'syz.3.520': attribute type 6 has an invalid length. [ 152.400822][ T148] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.429250][ T148] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.552618][ T148] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.571872][ T148] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.600129][ T148] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.612378][ T148] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.636049][ T148] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.656009][ T148] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.667406][ T8095] netlink: 28 bytes leftover after parsing attributes in process `syz.1.524'. [ 152.688404][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.522'. [ 152.821954][ T8102] IPVS: Unknown mcast interface: ip6erspan0 [ 152.853583][ T8101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.525'. [ 152.969650][ T8101] netlink: 36 bytes leftover after parsing attributes in process `syz.4.525'. [ 153.287452][ T8118] pim6reg1: entered promiscuous mode [ 153.306687][ T8118] pim6reg1: entered allmulticast mode [ 153.448063][ T8128] netlink: 68 bytes leftover after parsing attributes in process `syz.1.532'. [ 153.585170][ T8136] netlink: 136 bytes leftover after parsing attributes in process `syz.3.533'. [ 153.799104][ T8148] netlink: 24 bytes leftover after parsing attributes in process `syz.2.537'. [ 153.949108][ T8154] netlink: 20824 bytes leftover after parsing attributes in process `syz.1.538'. [ 154.035765][ T8156] netlink: 34 bytes leftover after parsing attributes in process `syz.3.539'. [ 154.355626][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 154.778732][ T8184] netlink: 16 bytes leftover after parsing attributes in process `syz.2.551'. [ 154.933399][ T8196] pimreg: entered allmulticast mode [ 155.146537][ T8206] netlink: 'syz.1.557': attribute type 1 has an invalid length. [ 155.242017][ T8213] bond0: (slave gretap1): making interface the new active one [ 155.251497][ T8213] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 155.264421][ T8210] tipc: Enabling of bearer rejected, failed to enable media [ 156.062455][ T8247] delete_channel: no stack [ 157.365918][ T8325] netlink: 'syz.0.588': attribute type 21 has an invalid length. [ 157.542081][ T8330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.568428][ T8330] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.585759][ T8330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.843521][ T8320] netlink: 'syz.3.587': attribute type 1 has an invalid length. [ 157.855159][ T8320] netlink: 'syz.3.587': attribute type 4 has an invalid length. [ 157.867922][ T8320] __nla_validate_parse: 8 callbacks suppressed [ 157.867936][ T8320] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.587'. [ 157.888673][ T8320] netlink: 'syz.3.587': attribute type 1 has an invalid length. [ 157.898348][ T8320] netlink: 'syz.3.587': attribute type 4 has an invalid length. [ 157.906989][ T8320] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.587'. [ 157.910275][ T8343] netlink: 'syz.1.594': attribute type 3 has an invalid length. [ 157.916249][ T8345] netlink: 'syz.1.594': attribute type 3 has an invalid length. [ 157.945639][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.594'. [ 157.967579][ T8341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.587'. [ 157.990621][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.594'. [ 158.112540][ T8348] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.596'. [ 158.135277][ T8357] netlink: 24 bytes leftover after parsing attributes in process `syz.4.597'. [ 158.214165][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.597'. [ 158.405642][ T8366] netlink: 34 bytes leftover after parsing attributes in process `syz.0.599'. [ 158.545618][ T8368] bond3: entered promiscuous mode [ 158.550782][ T8368] bond3: entered allmulticast mode [ 158.556733][ T8368] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.630648][ T30] audit: type=1800 audit(1760580598.092:4): pid=8365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.601" name="memory.events" dev="tmpfs" ino=623 res=0 errno=0 [ 158.785792][ T8368] bond3 (unregistering): Released all slaves [ 158.931184][ T8375] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.006369][ T8384] netlink: 'syz.4.605': attribute type 2 has an invalid length. [ 159.020793][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.605'. [ 159.134552][ T8375] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.257175][ T8375] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.352915][ T8375] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.440408][ T7592] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.470796][ T1140] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.523928][ T1140] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.568635][ T1140] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.679586][ T8408] pim6reg1: entered allmulticast mode [ 159.844250][ T8412] netlink: 'syz.2.612': attribute type 15 has an invalid length. [ 160.411777][ T7592] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 160.450579][ T8456] tipc: Enabled bearer , priority 0 [ 161.077594][ T8463] netlink: 'syz.4.622': attribute type 17 has an invalid length. [ 161.093502][ T8463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.173933][ T8489] netlink: 'syz.3.631': attribute type 9 has an invalid length. [ 161.563723][ T8493] dvmrp12: entered allmulticast mode [ 161.811227][ T8492] dvmrp12: left allmulticast mode [ 162.306091][ T8548] syzkaller0: entered promiscuous mode [ 162.311929][ T8548] syzkaller0: entered allmulticast mode [ 162.342671][ T8548] tipc: Enabling of bearer rejected, already enabled [ 162.402951][ T8548] tipc: Resetting bearer [ 162.417219][ T8550] ip6gre1: entered promiscuous mode [ 162.613504][ T8555] bond1 (unregistering): Released all slaves [ 162.866267][ T8561] team_slave_0 (unregistering): left promiscuous mode [ 162.873079][ T8561] team_slave_0 (unregistering): left allmulticast mode [ 162.912456][ T8561] team0: Port device team_slave_0 removed [ 163.221013][ T8589] __nla_validate_parse: 9 callbacks suppressed [ 163.221030][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.658'. [ 163.364983][ T8593] netlink: 68 bytes leftover after parsing attributes in process `syz.1.661'. [ 163.377691][ T8593] netlink: 156 bytes leftover after parsing attributes in process `syz.1.661'. [ 163.541245][ T8597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.663'. [ 163.569451][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.666'. [ 163.584004][ T8597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.663'. [ 163.645467][ T8597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.663'. [ 163.657773][ T8597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.663'. [ 163.676088][ T8597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.663'. [ 163.741805][ T8597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.663'. [ 163.876107][ T8597] bridge0: port 3(dummy0) entered disabled state [ 163.877436][ T5834] Bluetooth: hci3: command 0x0405 tx timeout [ 163.882817][ T8597] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.146399][ T8597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.173427][ T8597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.562034][ T148] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.603284][ T148] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.664848][ T148] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.682736][ T148] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.771010][ T8645] 0ªX¹¦D: renamed from gretap0 (while UP) [ 164.796809][ T8645] 0ªX¹¦D: entered allmulticast mode [ 164.821809][ T8645] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 164.862498][ T8648] bridge_slave_1: entered promiscuous mode [ 165.074208][ T8657] tipc: Enabling of bearer rejected, failed to enable media [ 165.084811][ T8657] syzkaller0: entered promiscuous mode [ 165.092841][ T8657] syzkaller0: entered allmulticast mode [ 165.994593][ T8704] geneve2: entered promiscuous mode [ 166.004066][ T8704] geneve2: entered allmulticast mode [ 166.153138][ T8711] bpq0: left promiscuous mode [ 166.165889][ T8711] bpq0: left allmulticast mode [ 166.543882][ T8717] netlink: 'syz.4.692': attribute type 1 has an invalid length. [ 166.653933][ T8730] gretap0: entered allmulticast mode [ 166.668271][ T8730] bond3: (slave gretap0): making interface the new active one [ 166.677992][ T8730] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 167.705004][ T8773] netlink: 'syz.2.704': attribute type 7 has an invalid length. [ 168.234401][ T8801] netlink: 'syz.0.709': attribute type 1 has an invalid length. [ 168.401023][ T8802] bond4: (slave gretap2): making interface the new active one [ 168.449666][ T8802] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 168.554600][ T8826] __nla_validate_parse: 134 callbacks suppressed [ 168.554618][ T8826] netlink: 830 bytes leftover after parsing attributes in process `syz.1.713'. [ 168.570673][ T8829] netlink: 48 bytes leftover after parsing attributes in process `syz.3.714'. [ 169.829102][ T8867] netlink: 1372 bytes leftover after parsing attributes in process `syz.2.723'. [ 170.253048][ T8880] netlink: 'syz.1.727': attribute type 1 has an invalid length. [ 170.254658][ T8890] ip6tnl1: entered promiscuous mode [ 170.269014][ T8890] ip6tnl1: entered allmulticast mode [ 170.299869][ T8890] team0: Device ip6tnl1 is of different type [ 170.559780][ T8881] bond1: (slave gretap2): making interface the new active one [ 170.577001][ T8881] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 170.646227][ T8905] netlink: 140 bytes leftover after parsing attributes in process `syz.3.731'. [ 170.678460][ T8906] netlink: 'syz.0.734': attribute type 1 has an invalid length. [ 170.692251][ T8901] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 170.786792][ T8911] netlink: 16 bytes leftover after parsing attributes in process `syz.4.736'. [ 170.833166][ T8911] openvswitch: netlink: Flow key attr not present in new flow. [ 170.853991][ T8913] netlink: 16 bytes leftover after parsing attributes in process `syz.4.736'. [ 170.863650][ T8909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.888402][ T8913] openvswitch: netlink: Flow key attr not present in new flow. [ 170.932125][ T8909] bridge0: port 3(dummy0) entered blocking state [ 170.938837][ T8909] bridge0: port 3(dummy0) entered forwarding state [ 170.975783][ T8909] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.005081][ T8918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.737'. [ 171.392732][ T8932] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 171.474052][ T8932] netlink: 'syz.0.742': attribute type 10 has an invalid length. [ 171.483968][ T8939] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 171.504324][ T5941] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 171.504970][ T8949] netlink: 36 bytes leftover after parsing attributes in process `syz.2.746'. [ 171.552848][ T8941] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.583871][ T8941] bridge0: port 4(bond2) entered blocking state [ 171.591187][ T8941] bridge0: port 4(bond2) entered disabled state [ 171.598697][ T8941] bond2: entered allmulticast mode [ 171.609232][ T8941] bond2: entered promiscuous mode [ 171.615168][ T8941] bridge0: port 4(bond2) entered blocking state [ 171.621763][ T8941] bridge0: port 4(bond2) entered forwarding state [ 171.641219][ T8954] netlink: 'syz.1.748': attribute type 1 has an invalid length. [ 171.648980][ T8954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.748'. [ 171.790566][ T8944] bond4: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 171.812410][ T8944] bond4 (unregistering): Released all slaves [ 171.868672][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.749'. [ 171.886868][ T8949] bridge0: port 3(dummy0) entered disabled state [ 171.911909][ T8932] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 172.108758][ T8961] bond2: left allmulticast mode [ 172.124237][ T8961] bond2: left promiscuous mode [ 172.129787][ T8961] bridge0: port 4(bond2) entered disabled state [ 172.148451][ T8961] team0: left allmulticast mode [ 172.153489][ T8961] team_slave_1: left allmulticast mode [ 172.162759][ T8961] bridge0: port 3(team0) entered disabled state [ 172.173225][ T8961] bridge_slave_1: left allmulticast mode [ 172.179173][ T8961] bridge_slave_1: left promiscuous mode [ 172.184995][ T8961] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.199534][ T8961] bridge_slave_0: left allmulticast mode [ 172.205989][ T8961] bridge_slave_0: left promiscuous mode [ 172.215021][ T8961] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.357495][ T5941] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 172.958040][ T8993] geneve2: entered promiscuous mode [ 172.963759][ T8993] geneve2: entered allmulticast mode [ 173.222803][ T9004] wg2: entered promiscuous mode [ 173.229502][ T9004] wg2: entered allmulticast mode [ 173.431627][ T9011] syzkaller0: entered promiscuous mode [ 173.454534][ T9011] syzkaller0: entered allmulticast mode [ 173.464151][ T9010] tipc: Enabled bearer , priority 0 [ 173.529623][ T9010] tipc: Resetting bearer [ 173.576968][ T9017] netlink: 'syz.1.766': attribute type 58 has an invalid length. [ 173.585210][ T9017] __nla_validate_parse: 2 callbacks suppressed [ 173.585225][ T9017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.766'. [ 173.587051][ T9010] tipc: Disabling bearer [ 173.814455][ T9034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'. [ 173.872412][ T9034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.769'. [ 174.005689][ T9043] tipc: Enabling of bearer rejected, failed to enable media [ 174.141919][ T9052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 174.607005][ T9064] netlink: 20 bytes leftover after parsing attributes in process `syz.4.776'. [ 174.665524][ T9077] netlink: 'syz.1.778': attribute type 1 has an invalid length. [ 174.849799][ T9084] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 174.921817][ T9077] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 174.944930][ T9077] bond2 (unregistering): Released all slaves [ 174.998039][ T9098] netlink: 5 bytes leftover after parsing attributes in process `syz.2.784'. [ 175.008921][ T9098] 0ªX¹¦D: renamed from gretap0 (while UP) [ 175.041922][ T9098] 0ªX¹¦D: entered allmulticast mode [ 175.077414][ T9098] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 175.282214][ T9115] netlink: 20 bytes leftover after parsing attributes in process `syz.1.788'. [ 175.489167][ T9121] netlink: 156 bytes leftover after parsing attributes in process `syz.1.792'. [ 175.644808][ T9130] bond5: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 175.683800][ T9130] bond5 (unregistering): Released all slaves [ 175.724628][ T9140] netlink: 36 bytes leftover after parsing attributes in process `syz.0.793'. [ 175.845170][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'. [ 175.863244][ T9141] syzkaller0: entered promiscuous mode [ 175.895377][ T9141] syzkaller0: entered allmulticast mode [ 175.921004][ T9139] bridge0: entered promiscuous mode [ 175.932385][ T9139] bridge0: port 3(macvlan2) entered blocking state [ 175.952880][ T9139] bridge0: port 3(macvlan2) entered disabled state [ 175.959982][ T9139] macvlan2: entered allmulticast mode [ 175.965799][ T9139] bridge0: entered allmulticast mode [ 175.973641][ T9139] macvlan2: left allmulticast mode [ 175.979735][ T9139] bridge0: left allmulticast mode [ 175.987066][ T9139] bridge0: left promiscuous mode [ 176.120564][ T9156] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 176.121054][ T9136] syzkaller0: left allmulticast mode [ 176.290250][ T9161] openvswitch: netlink: Message has 4 unknown bytes. [ 176.299843][ T9161] openvswitch: netlink: Message has 4 unknown bytes. [ 177.594886][ T9182] netlink: 'syz.4.806': attribute type 17 has an invalid length. [ 177.678334][ T9182] 0ªX¹¦D: left allmulticast mode [ 177.726739][ T9182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.697385][ T9208] __nla_validate_parse: 2 callbacks suppressed [ 178.697404][ T9208] netlink: 156 bytes leftover after parsing attributes in process `syz.1.813'. [ 179.585608][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.817'. [ 179.870241][ T9242] netlink: 156 bytes leftover after parsing attributes in process `syz.2.821'. [ 180.263624][ T9258] netlink: 'syz.3.825': attribute type 6 has an invalid length. [ 180.512339][ T9269] 8021q: adding VLAN 0 to HW filter on device bond4 [ 180.588550][ T9265] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 180.639678][ T9275] xt_l2tp: v2 tid > 0xffff: 37482740 [ 180.800000][ T9282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.831'. [ 180.917127][ T9287] xt_TCPMSS: Only works on TCP SYN packets [ 181.150985][ T9295] netlink: 68 bytes leftover after parsing attributes in process `syz.0.834'. [ 181.193272][ T9295] netlink: 156 bytes leftover after parsing attributes in process `syz.0.834'. [ 181.605808][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.839'. [ 181.622296][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.839'. [ 181.679186][ T9315] netlink: 'syz.0.839': attribute type 13 has an invalid length. [ 181.695939][ T9315] netlink: 'syz.0.839': attribute type 11 has an invalid length. [ 181.748171][ T9321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'. [ 181.798161][ T9321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'. [ 182.391181][ T9345] netlink: 'syz.1.847': attribute type 6 has an invalid length. [ 182.412823][ T9348] netlink: 'syz.1.847': attribute type 6 has an invalid length. [ 182.539896][ T9346] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 182.882501][ T9366] geneve2: entered promiscuous mode [ 183.761009][ T9423] __nla_validate_parse: 5 callbacks suppressed [ 183.761027][ T9423] netlink: 44 bytes leftover after parsing attributes in process `syz.4.863'. [ 183.772569][ T9418] netlink: 68 bytes leftover after parsing attributes in process `syz.3.864'. [ 183.817616][ T9418] netlink: 156 bytes leftover after parsing attributes in process `syz.3.864'. [ 183.836551][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.865'. [ 183.851021][ T9422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'. [ 183.875515][ T9422] netlink: 'syz.1.865': attribute type 12 has an invalid length. [ 184.210276][ T9440] netlink: 'syz.4.869': attribute type 32 has an invalid length. [ 184.233743][ T9446] syzkaller0: left promiscuous mode [ 184.251718][ T9446] syzkaller0: left allmulticast mode [ 184.257729][ T5147] Bluetooth: hci3: link tx timeout [ 184.263522][ T5147] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 184.272909][ T5834] Bluetooth: hci3: link tx timeout [ 184.281668][ T5834] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 184.289707][ T5834] Bluetooth: hci3: link tx timeout [ 184.297977][ T5834] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 184.478304][ T9456] netlink: 60 bytes leftover after parsing attributes in process `syz.3.872'. [ 184.539753][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.874'. [ 184.617567][ T9458] netlink: 'syz.0.874': attribute type 1 has an invalid length. [ 184.795112][ T9473] netlink: 40 bytes leftover after parsing attributes in process `syz.3.878'. [ 184.924717][ T9477] netlink: 'syz.3.880': attribute type 4 has an invalid length. [ 184.949317][ T9477] netlink: 'syz.3.880': attribute type 4 has an invalid length. [ 184.969400][ T9480] syzkaller1: entered promiscuous mode [ 184.979990][ T9480] syzkaller1: entered allmulticast mode [ 185.152664][ T9485] netlink: 68 bytes leftover after parsing attributes in process `syz.4.882'. [ 185.172643][ T9485] netlink: 156 bytes leftover after parsing attributes in process `syz.4.882'. [ 185.692338][ T9504] netlink: 'syz.2.888': attribute type 58 has an invalid length. [ 185.997135][ T9511] bond5: option lp_interval: invalid value (0) [ 186.020802][ T9511] bond5: option lp_interval: allowed values 1 - 2147483647 [ 186.065617][ T9511] bond5 (unregistering): Released all slaves [ 186.277266][ T5834] Bluetooth: hci3: command 0x0405 tx timeout [ 186.368378][ T9530] team_slave_1: left promiscuous mode [ 187.101621][ T9530] team0 (unregistering): Port device team_slave_1 removed [ 187.219561][ T9542] bridge2: entered allmulticast mode [ 187.446932][ T9538] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 187.452999][ T9538] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 187.552467][ T9579] tipc: Cannot configure node identity twice [ 187.577789][ T9579] tipc: Cannot configure node identity twice [ 187.661147][ T9538] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 187.668819][ T9538] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 187.680208][ T9584] x_tables: duplicate underflow at hook 1 [ 187.720255][ T9538] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 187.779470][ T9538] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 187.885453][ T9538] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 187.917204][ T9538] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 187.960681][ T9538] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 187.970422][ T9538] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 188.846584][ T9651] __nla_validate_parse: 9 callbacks suppressed [ 188.846601][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'. [ 188.913856][ T9651] netlink: 96 bytes leftover after parsing attributes in process `syz.0.913'. [ 189.065953][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'. [ 189.117882][ T9666] netlink: 224 bytes leftover after parsing attributes in process `syz.3.922'. [ 189.145262][ T9666] Bluetooth: MGMT ver 1.23 [ 189.151584][ T9663] syzkaller1: entered promiscuous mode [ 189.172318][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.922'. [ 189.173305][ T9663] syzkaller1: entered allmulticast mode [ 189.273959][ T9677] netlink: del zone limit has 8 unknown bytes [ 189.412107][ T9682] pim6reg1: entered promiscuous mode [ 189.423143][ T9682] pim6reg1: entered allmulticast mode [ 189.474486][ T9685] bridge0: entered promiscuous mode [ 189.502533][ T9685] bridge0: entered allmulticast mode [ 189.528985][ T9635] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 189.697352][ T9694] netlink: zone id is out of range [ 189.702516][ T9694] netlink: zone id is out of range [ 189.717592][ T9694] netlink: zone id is out of range [ 189.775493][ T9694] netlink: zone id is out of range [ 189.811100][ T9694] netlink: zone id is out of range [ 189.835831][ T9703] nbd: must specify a size in bytes for the device [ 189.849099][ T9694] netlink: zone id is out of range [ 189.895383][ T9694] netlink: zone id is out of range [ 189.900531][ T9694] netlink: del zone limit has 4 unknown bytes [ 189.974477][ T9709] netlink: 68 bytes leftover after parsing attributes in process `syz.1.933'. [ 189.988792][ T9709] netlink: 156 bytes leftover after parsing attributes in process `syz.1.933'. [ 190.044203][ T9706] netlink: 64 bytes leftover after parsing attributes in process `syz.4.932'. [ 190.095431][ T9706] nbd: couldn't find a device at index 0 [ 190.226515][ T9706] netlink: 48 bytes leftover after parsing attributes in process `syz.4.932'. [ 190.672233][ T9754] netlink: 28 bytes leftover after parsing attributes in process `syz.1.943'. [ 191.445240][ T9799] netlink: 'syz.2.954': attribute type 10 has an invalid length. [ 191.453996][ T9799] bond0: (slave wlan1): Opening slave failed [ 191.677630][ T9800] veth5: entered promiscuous mode [ 192.227574][ T9826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.783751][ T9879] netlink: 'syz.3.970': attribute type 1 has an invalid length. [ 193.814247][ T9883] netlink: 'syz.3.970': attribute type 1 has an invalid length. [ 193.899065][ T9886] __nla_validate_parse: 13 callbacks suppressed [ 193.899084][ T9886] netlink: 20 bytes leftover after parsing attributes in process `syz.1.972'. [ 194.370700][ T9908] x_tables: duplicate underflow at hook 1 [ 194.659243][ T9915] netlink: 'syz.0.980': attribute type 11 has an invalid length. [ 194.667119][ T9915] netlink: 'syz.0.980': attribute type 4 has an invalid length. [ 194.674758][ T9915] netlink: 224 bytes leftover after parsing attributes in process `syz.0.980'. [ 194.688945][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.114724][ T9943] netlink: 'syz.0.985': attribute type 1 has an invalid length. [ 196.149455][ T9944] netlink: 68 bytes leftover after parsing attributes in process `syz.2.986'. [ 196.174833][ T9944] netlink: 156 bytes leftover after parsing attributes in process `syz.2.986'. [ 196.311708][ T9956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.989'. [ 196.404850][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.991'. [ 196.522851][ T9965] veth1_to_bond: entered allmulticast mode [ 196.568127][ T9968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'. [ 196.579819][ T9965] veth1_to_bond: entered promiscuous mode [ 196.658238][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.993'. [ 196.695421][ T9963] veth1_to_bond: left promiscuous mode [ 196.701532][ T9963] veth1_to_bond: left allmulticast mode [ 196.922868][ T9987] netlink: 20 bytes leftover after parsing attributes in process `syz.1.996'. [ 197.032985][ T9977] macvtap0: entered allmulticast mode [ 197.042186][ T9977] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 197.062302][ T9977] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 197.146996][ T9992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.999'. [ 197.168851][ T9992] netlink: 'syz.3.999': attribute type 1 has an invalid length. [ 197.250389][ T9996] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 197.962226][T10018] tipc: Enabled bearer , priority 0 [ 197.984034][T10018] syzkaller0: entered promiscuous mode [ 198.000387][T10018] syzkaller0: entered allmulticast mode [ 198.040747][T10025] netlink: 'syz.4.1009': attribute type 1 has an invalid length. [ 198.141843][T10018] tipc: Resetting bearer [ 198.182706][T10018] tipc: Resetting bearer [ 198.234253][T10018] tipc: Disabling bearer [ 198.252573][T10032] netlink: 'syz.0.1011': attribute type 1 has an invalid length. [ 198.266403][T10035] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 198.367002][T10038] netlink: 'syz.2.1013': attribute type 1 has an invalid length. [ 198.419820][T10038] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 198.431243][T10038] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 198.512007][T10040] bond5: (slave bridge3): Enslaving as an active interface with a down link [ 198.670534][T10052] netlink: 'syz.0.1016': attribute type 12 has an invalid length. [ 198.990268][ T1598] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 199.048122][T10078] netlink: 'syz.0.1024': attribute type 1 has an invalid length. [ 199.059818][T10078] netlink: zone id is out of range [ 199.065109][T10078] netlink: zone id is out of range [ 199.071879][T10078] netlink: zone id is out of range [ 199.077907][T10078] netlink: zone id is out of range [ 199.083296][T10078] netlink: zone id is out of range [ 199.089100][T10078] netlink: zone id is out of range [ 199.094736][T10078] netlink: zone id is out of range [ 199.100721][T10078] netlink: zone id is out of range [ 199.106764][T10078] netlink: zone id is out of range [ 199.113317][T10078] netlink: zone id is out of range [ 199.234390][T10084] macsec1: entered promiscuous mode [ 199.496028][ T1598] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 199.746722][T10109] __nla_validate_parse: 7 callbacks suppressed [ 199.746740][T10109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1031'. [ 199.758406][T10103] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 199.895434][T10115] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1032'. [ 199.950343][T10115] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1032'. [ 200.013458][ T5197] udevd[5197]: worker [6069] terminated by signal 33 (Unknown signal 33) [ 200.406581][T10141] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 200.414110][T10141] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 200.588394][T10151] netlink: 'syz.2.1041': attribute type 1 has an invalid length. [ 200.778602][T10159] netlink: 'syz.1.1045': attribute type 2 has an invalid length. [ 200.831530][T10159] netlink: 'syz.1.1045': attribute type 5 has an invalid length. [ 200.946061][T10164] 8021q: VLANs not supported on xfrm0 [ 200.982775][T10169] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 200.990065][T10169] dvmrp1: linktype set to 773 [ 201.062970][T10169] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 201.164653][T10176] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1051'. [ 201.227891][T10178] syzkaller0: refused to change device tx_queue_len [ 201.244936][T10176] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 201.483236][T10181] erspan0: entered promiscuous mode [ 201.545273][T10181] erspan0: left promiscuous mode [ 201.676998][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1053'. [ 201.682743][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'. [ 201.711749][T10199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1059'. [ 201.719869][T10195] x_tables: duplicate underflow at hook 4 [ 201.738770][T10195] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1058'. [ 201.859714][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1061'. [ 202.200051][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1065'. [ 202.815967][T10235] netlink: 'syz.1.1070': attribute type 3 has an invalid length. [ 203.010165][T10248] netlink: 'syz.0.1074': attribute type 1 has an invalid length. [ 203.026807][T10248] netlink: 'syz.0.1074': attribute type 2 has an invalid length. [ 204.856286][T10307] net_ratelimit: 4 callbacks suppressed [ 204.856303][T10307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.026313][T10312] tipc: Enabling of bearer rejected, already enabled [ 205.066069][T10312] syzkaller0: entered promiscuous mode [ 205.071578][T10312] syzkaller0: entered allmulticast mode [ 205.102151][T10312] netlink: 'syz.1.1093': attribute type 3 has an invalid length. [ 205.217822][T10323] __nla_validate_parse: 7 callbacks suppressed [ 205.217839][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1095'. [ 205.233402][T10326] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1096'. [ 205.462098][T10336] Bluetooth: MGMT ver 1.23 [ 205.481233][T10322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1096'. [ 205.673997][T10349] veth0: entered promiscuous mode [ 205.719352][T10349] veth0: left promiscuous mode [ 205.987168][T10372] netlink: 'syz.1.1105': attribute type 1 has an invalid length. [ 206.005442][T10372] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1105'. [ 206.146348][T10379] batadv0: entered allmulticast mode [ 206.153784][T10385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1108'. [ 206.232984][T10385] veth1_macvtap: left promiscuous mode [ 206.538794][T10405] tipc: Started in network mode [ 206.543696][T10405] tipc: Node identity 080211, cluster identity 4711 [ 206.550714][T10405] tipc: Enabled bearer , priority 0 [ 206.559722][T10405] netem: change failed [ 206.565746][T10405] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1114'. [ 206.606728][T10405] tipc: Resetting bearer [ 206.782706][T10412] netlink: 'syz.0.1115': attribute type 23 has an invalid length. [ 207.405288][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1120'. [ 207.483169][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1120'. [ 207.599060][ T1598] tipc: Node number set to 134353152 [ 207.969066][T10470] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1126'. [ 208.279788][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1133'. [ 208.305807][T10485] netlink: 'syz.1.1133': attribute type 5 has an invalid length. [ 208.334041][T10485] geneve3: entered promiscuous mode [ 208.339881][T10485] geneve3: entered allmulticast mode [ 208.386177][T10487] netlink: 'syz.3.1134': attribute type 4 has an invalid length. [ 208.527764][T10496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.070770][T10561] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 210.104042][T10561] SET target dimension over the limit! [ 210.467240][T10582] __nla_validate_parse: 10 callbacks suppressed [ 210.467258][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1165'. [ 210.663106][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1167'. [ 210.931070][T10599] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 210.952325][T10599] bond3 (unregistering): Released all slaves [ 211.374667][ T1163] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.385605][ T1163] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.439819][ T1163] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.473511][ T1163] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.799941][T10642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1177'. [ 211.928264][T10649] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1173'. [ 211.937651][T10649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1173'. [ 211.947411][T10649] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1173'. [ 211.957767][T10649] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1173'. [ 212.235244][T10665] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1181'. [ 212.281738][T10667] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 212.741189][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 212.924252][T10701] syzkaller0: left promiscuous mode [ 212.929708][T10701] syzkaller0: left allmulticast mode [ 213.288727][T10718] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1198'. [ 213.457135][T10735] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 213.522850][T10738] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 213.561735][ T1598] IPVS: starting estimator thread 0... [ 213.605994][T10745] tipc: Started in network mode [ 213.610885][T10745] tipc: Node identity 0e89c093e04c, cluster identity 4711 [ 213.618760][T10745] tipc: Enabled bearer , priority 0 [ 213.628831][T10745] syzkaller0: entered promiscuous mode [ 213.634309][T10745] syzkaller0: entered allmulticast mode [ 213.655503][T10743] IPVS: using max 28 ests per chain, 67200 per kthread [ 213.666620][T10745] tipc: Resetting bearer [ 213.675195][T10744] tipc: Resetting bearer [ 213.698487][T10744] tipc: Disabling bearer [ 213.748332][T10765] netlink: 'syz.0.1209': attribute type 1 has an invalid length. [ 213.844349][T10769] x_tables: unsorted entry at hook 2 [ 213.856263][T10771] x_tables: unsorted entry at hook 2 [ 214.412610][T10797] netlink: 'syz.1.1218': attribute type 9 has an invalid length. [ 215.047424][T10837] hsr0: entered promiscuous mode [ 215.511439][T10860] __nla_validate_parse: 10 callbacks suppressed [ 215.511458][T10860] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1233'. [ 215.663004][T10871] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1236'. [ 215.688248][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1237'. [ 215.713018][T10873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.720439][T10873] IPv6: NLM_F_CREATE should be set when creating new route [ 215.755779][ T30] audit: type=1800 audit(1760580655.222:5): pid=10880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1238" name="memory.events" dev="tmpfs" ino=1166 res=0 errno=0 [ 215.804527][ T30] audit: type=1800 audit(1760580655.222:6): pid=10878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1238" name="memory.events" dev="tmpfs" ino=1166 res=0 errno=0 [ 215.849732][ T30] audit: type=1804 audit(1760580655.232:7): pid=10880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1238" name="/newroot/226/memory.events" dev="tmpfs" ino=1166 res=1 errno=0 [ 215.974710][T10894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1239'. [ 215.984590][T10891] veth1_to_team: entered promiscuous mode [ 215.994795][T10891] bond0: entered promiscuous mode [ 216.000447][T10891] bond_slave_0: entered promiscuous mode [ 216.018781][T10891] bond_slave_1: entered promiscuous mode [ 216.038297][T10891] bond0: left promiscuous mode [ 216.053693][T10891] bond_slave_0: left promiscuous mode [ 216.091749][T10891] bond_slave_1: left promiscuous mode [ 216.108529][T10891] veth1_to_team: left promiscuous mode [ 216.605483][T10922] netlink: 9896 bytes leftover after parsing attributes in process `syz.0.1247'. [ 217.369044][T10956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1254'. [ 217.395769][T10960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1251'. [ 217.460693][T10963] netlink: 664 bytes leftover after parsing attributes in process `syz.4.1255'. [ 217.474610][T10960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1251'. [ 217.495474][T10963] netlink: 664 bytes leftover after parsing attributes in process `syz.4.1255'. [ 217.914671][T10988] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 218.317332][T11000] syzkaller0: entered promiscuous mode [ 218.323142][T11000] syzkaller0: entered allmulticast mode [ 218.406084][T11012] netlink: 'syz.3.1263': attribute type 17 has an invalid length. [ 218.588524][T11015] netlink: 'syz.2.1266': attribute type 10 has an invalid length. [ 218.639671][T11016] netlink: 'syz.2.1266': attribute type 2 has an invalid length. [ 219.705032][T11012] ªªªªªªòÓ»ö濾1I: left promiscuous mode [ 219.712192][T11012] A link change request failed with some changes committed already. Interface ªªªªªªòÓ»ö濾1I may have been left with an inconsistent configuration, please check. [ 219.730960][T11015] veth0_vlan: entered allmulticast mode [ 220.068037][T11051] nbd: couldn't find a device at index 0 [ 220.667936][T11069] pim6reg1: entered promiscuous mode [ 220.674121][T11069] pim6reg1: entered allmulticast mode [ 220.689473][ T6003] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 220.699289][ T6003] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 42821 - 0 [ 220.707853][ T6003] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 220.729311][ T6003] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 220.738522][ T6003] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 42821 - 0 [ 220.747297][ T6003] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 220.800636][ T6003] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 220.825482][ T6003] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 42821 - 0 [ 220.834031][ T6003] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 220.911116][ T1140] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 220.921489][ T1140] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 42821 - 0 [ 220.965611][ T1140] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 221.107590][T11089] tc_dump_action: action bad kind [ 221.341443][T11095] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 221.389588][T11102] __nla_validate_parse: 11 callbacks suppressed [ 221.389606][T11102] netlink: 4660 bytes leftover after parsing attributes in process `syz.3.1290'. [ 221.435553][T11102] openvswitch: netlink: Flow key attr not present in new flow. [ 221.462387][T11106] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1288'. [ 221.546759][T11109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1291'. [ 221.683726][T11116] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1292'. [ 221.923002][T11128] netlink: 'syz.2.1296': attribute type 1 has an invalid length. [ 221.974822][T11134] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1296'. [ 222.039145][T11137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1295'. [ 222.077684][T11138] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1296'. [ 222.105015][T11128] 8021q: adding VLAN 0 to HW filter on device bond7 [ 222.138764][T11140] tipc: Enabling of bearer rejected, already enabled [ 222.188253][T11147] netlink: 'syz.4.1302': attribute type 9 has an invalid length. [ 222.192318][T11129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1295'. [ 222.269756][T11150] syzkaller0: entered promiscuous mode [ 222.289507][T11150] syzkaller0: entered allmulticast mode [ 222.508883][T11151] vlan3: entered promiscuous mode [ 222.519525][T11151] batadv0: entered promiscuous mode [ 222.564644][T11160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1303'. [ 222.767194][T11167] syzkaller0: entered promiscuous mode [ 222.782904][T11167] syzkaller0: entered allmulticast mode [ 222.954725][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1312'. [ 223.048034][T11185] netlink: 'syz.2.1309': attribute type 4 has an invalid length. [ 223.469284][T11215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.555139][T11220] netlink: 'syz.2.1325': attribute type 10 has an invalid length. [ 223.593199][T11220] dummy0: left allmulticast mode [ 223.601498][T11220] dummy0: left promiscuous mode [ 223.625148][T11220] bridge0: port 3(dummy0) entered disabled state [ 223.645999][T11220] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 223.721606][T11224] geneve2: entered promiscuous mode [ 223.730305][T11224] geneve2: entered allmulticast mode [ 223.739009][ T50] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 41315 - 0 [ 223.748827][ T50] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 41409 - 0 [ 223.782127][ T50] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 41315 - 0 [ 223.825385][ T50] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 41409 - 0 [ 223.848389][ T50] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 41315 - 0 [ 223.860347][ T50] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 41409 - 0 [ 223.869514][ T50] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 41315 - 0 [ 223.880123][ T50] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 41409 - 0 [ 224.300337][T11265] batadv_slave_0: entered promiscuous mode [ 224.377264][T11263] batadv_slave_0: left promiscuous mode [ 224.648769][T11285] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 224.854159][T11306] netlink: 'syz.4.1347': attribute type 58 has an invalid length. [ 224.864887][T11303] xt_TCPMSS: Only works on TCP SYN packets [ 224.878665][T11303] netlink: 'syz.0.1348': attribute type 1 has an invalid length. [ 225.077564][T11322] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 225.098839][T11322] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 42821 - 0 [ 225.129570][T11322] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 225.189579][T11329] tipc: Enabling of bearer rejected, already enabled [ 225.223141][T11322] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 225.233027][T11322] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 42821 - 0 [ 225.245925][T11322] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 225.323553][T11337] delete_channel: no stack [ 225.362251][T11322] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 225.375650][T11322] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 42821 - 0 [ 225.385777][T11322] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 225.689535][T11347] bridge1: left promiscuous mode [ 225.694613][T11347] bridge1: left allmulticast mode [ 225.700638][T11347] vlan2: left promiscuous mode [ 225.709305][T11347] bond0: left promiscuous mode [ 225.716238][T11347] gretap1: left allmulticast mode [ 225.722126][T11347] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 225.735757][T11347] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 225.746389][T11347] macsec1: left promiscuous mode [ 225.767686][T11322] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 225.789220][T11322] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 42821 - 0 [ 225.809634][T11358] netlink: 'syz.4.1363': attribute type 1 has an invalid length. [ 225.825110][T11322] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 226.018408][ T7592] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 226.030401][ T7592] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 42821 - 0 [ 226.044035][ T7592] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 226.066646][ T7592] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 226.074819][ T7592] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 42821 - 0 [ 226.083250][ T7592] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 226.154494][ T7592] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 226.173023][ T7592] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 42821 - 0 [ 226.204157][ T7592] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 226.247591][ T7592] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 226.262936][T11373] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 226.270254][T11373] IPv6: NLM_F_CREATE should be set when creating new route [ 226.279901][ T7592] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 42821 - 0 [ 226.289409][ T7592] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 226.337455][T11373] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 226.344729][T11373] IPv6: NLM_F_CREATE should be set when creating new route [ 226.653062][T11388] __nla_validate_parse: 14 callbacks suppressed [ 226.653081][T11388] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1370'. [ 226.812864][T11391] vlan2: entered allmulticast mode [ 226.818450][T11391] bridge_slave_0: entered allmulticast mode [ 227.026039][T11400] : renamed from bond_slave_0 [ 227.128267][T11402] syzkaller0: entered promiscuous mode [ 227.141027][T11402] syzkaller0: entered allmulticast mode [ 227.343962][T11411] tipc: Enabling of bearer rejected, already enabled [ 227.363688][T11411] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 227.371642][T11411] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 227.469261][T11421] netlink: 'syz.1.1381': attribute type 5 has an invalid length. [ 227.545987][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1383'. [ 227.598714][T11429] xt_time: unknown flags 0xf4 [ 227.774438][T11438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1387'. [ 228.090996][T11453] netlink: 'syz.4.1391': attribute type 39 has an invalid length. [ 228.349837][T11462] netlink: 'syz.2.1395': attribute type 13 has an invalid length. [ 228.370174][T11467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.388610][T11462] netlink: 'syz.2.1395': attribute type 17 has an invalid length. [ 228.431320][T11462] 0ªX¹¦D: left allmulticast mode [ 228.469748][T11477] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1398'. [ 228.506389][T11477] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1398'. [ 228.534115][T11462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.732458][T11496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1403'. [ 228.970653][T11512] netlink: 'syz.0.1410': attribute type 11 has an invalid length. [ 229.000743][T11512] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1410'. [ 229.134270][T11513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1411'. [ 229.366608][T11536] netlink: 'syz.0.1414': attribute type 1 has an invalid length. [ 229.374490][T11536] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1414'. [ 229.675816][T11556] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20003 [ 230.327292][T11567] netlink: 'syz.2.1424': attribute type 4 has an invalid length. [ 230.371468][T11564] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1423'. [ 230.380893][T11564] nbd: couldn't find a device at index 0 [ 230.416758][T11564] tc_dump_action: action bad kind [ 230.976890][T11590] netlink: 'syz.2.1428': attribute type 1 has an invalid length. [ 230.987080][T11590] netlink: 'syz.2.1428': attribute type 2 has an invalid length. [ 231.028277][T11590] netlink: 'syz.2.1428': attribute type 3 has an invalid length. [ 231.553896][T11616] erspan0: entered promiscuous mode [ 231.723894][T11631] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.976903][T11639] __nla_validate_parse: 6 callbacks suppressed [ 231.976920][T11639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1443'. [ 232.006735][T11639] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1443'. [ 232.029762][T11644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1441'. [ 232.037522][T11639] geneve2: entered promiscuous mode [ 232.052666][T11639] geneve2: entered allmulticast mode [ 232.073956][ T1140] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 232.082500][ T1140] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 232.097408][ T1140] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 232.117674][ T1140] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 232.290508][T11653] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1446'. [ 232.602606][T11661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1449'. [ 232.986483][T11682] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1455'. [ 233.018425][T11682] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1455'. [ 233.075235][T11689] validate_nla: 4 callbacks suppressed [ 233.075252][T11689] netlink: 'syz.3.1457': attribute type 1 has an invalid length. [ 233.161329][T11699] netlink: 'syz.1.1458': attribute type 9 has an invalid length. [ 233.180407][T11699] netlink: 'syz.1.1458': attribute type 7 has an invalid length. [ 233.188721][T11699] netlink: 'syz.1.1458': attribute type 8 has an invalid length. [ 233.231649][T11689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1457'. [ 233.262852][T11703] netlink: 'syz.0.1460': attribute type 1 has an invalid length. [ 233.271121][T11703] netlink: 'syz.0.1460': attribute type 4 has an invalid length. [ 233.278976][T11703] netlink: 15538 bytes leftover after parsing attributes in process `syz.0.1460'. [ 233.298518][T11703] netlink: 'syz.0.1460': attribute type 1 has an invalid length. [ 233.309919][T11703] netlink: 'syz.0.1460': attribute type 4 has an invalid length. [ 233.318835][T11703] netlink: 15538 bytes leftover after parsing attributes in process `syz.0.1460'. [ 233.640089][T11724] ieee802154 phy0 wpan0: encryption failed: -90 [ 234.133247][T11746] xt_TCPMSS: Only works on TCP SYN packets [ 234.205007][T11748] tipc: Enabling of bearer rejected, already enabled [ 234.265542][T11748] tipc: Enabling of bearer rejected, already enabled [ 234.279610][T11757] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6_vti0, syncid = 3, id = 0 [ 234.704663][T11773] nbd: socks must be embedded in a SOCK_ITEM attr [ 235.002056][T11810] netlink: 'syz.4.1488': attribute type 1 has an invalid length. [ 235.023704][T11808] netlink: 'syz.0.1489': attribute type 37 has an invalid length. [ 236.201054][T11863] veth1_to_team: entered promiscuous mode [ 236.211847][T11863] bond0: entered promiscuous mode [ 236.221812][T11863] bond_slave_0: entered promiscuous mode [ 236.227947][T11863] bond_slave_1: entered promiscuous mode [ 236.233913][T11863] dummy0: entered promiscuous mode [ 236.243276][T11863] debugfs: 'hsr0' already exists in 'hsr' [ 236.249897][T11863] Cannot create hsr debugfs directory [ 236.291962][T11863] hsr0: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 236.304294][T11863] hsr0: entered allmulticast mode [ 236.311082][T11863] veth1_to_team: entered allmulticast mode [ 236.317452][T11863] bond0: entered allmulticast mode [ 236.322640][T11863] bond_slave_0: entered allmulticast mode [ 236.329533][T11863] bond_slave_1: entered allmulticast mode [ 236.335467][T11863] dummy0: entered allmulticast mode [ 236.410380][T11868] netdevsim0: renamed from gre0 [ 236.427375][T11868] netdevsim0: entered promiscuous mode [ 236.546925][T11885] nbd: must specify a size in bytes for the device [ 237.100095][T11931] xt_time: unknown flags 0xf4 [ 237.384141][T11947] tc_dump_action: action bad kind [ 237.389660][T11949] tc_dump_action: action bad kind [ 238.217230][T11964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.414252][T11986] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 238.524707][T11992] validate_nla: 1 callbacks suppressed [ 238.524725][T11992] netlink: 'syz.2.1540': attribute type 1 has an invalid length. [ 238.619899][T11992] 8021q: adding VLAN 0 to HW filter on device bond8 [ 238.695802][T12001] netlink: 'syz.1.1543': attribute type 4 has an invalid length. [ 238.724905][T11992] 8021q: adding VLAN 0 to HW filter on device bond8 [ 238.732894][T11992] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 238.744898][T11992] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 238.748065][T12011] netlink: 'syz.1.1543': attribute type 4 has an invalid length. [ 238.801085][T12004] veth7: entered promiscuous mode [ 238.818839][T12004] bond8: (slave veth7): Enslaving as an active interface with a down link [ 239.250641][T12040] netlink: 'syz.3.1551': attribute type 12 has an invalid length. [ 239.308718][T12042] __nla_validate_parse: 14 callbacks suppressed [ 239.308735][T12042] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1553'. [ 239.444376][T12053] netlink: 'syz.4.1555': attribute type 1 has an invalid length. [ 239.452592][T12053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1555'. [ 239.507740][T12057] tc_dump_action: action bad kind [ 239.588822][T12063] sctp: [Deprecated]: syz.2.1560 (pid 12063) Use of int in max_burst socket option. [ 239.588822][T12063] Use struct sctp_assoc_value instead [ 239.882053][T12079] ip6tnl1: entered promiscuous mode [ 239.980435][ T8631] IPVS: starting estimator thread 0... [ 240.016726][T12086] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1565'. [ 240.095427][T12087] IPVS: using max 27 ests per chain, 64800 per kthread [ 240.152042][T12100] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1567'. [ 240.163213][T12100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1567'. [ 240.173879][T12099] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1567'. [ 240.191668][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1567'. [ 240.285595][T12103] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1568'. [ 240.459204][T12111] netlink: 'syz.4.1572': attribute type 12 has an invalid length. [ 241.559581][T12169] netlink: 'syz.2.1586': attribute type 1 has an invalid length. [ 241.761731][T12169] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 242.260963][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1592'. [ 242.415962][T12215] netlink: 'syz.1.1594': attribute type 32 has an invalid length. [ 242.434186][T12216] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1593'. [ 242.504704][T12222] netlink: 'syz.0.1596': attribute type 37 has an invalid length. [ 242.520932][T12215] bond2: Setting coupled_control to off (0) [ 242.874025][T12244] netlink: 'syz.4.1600': attribute type 1 has an invalid length. [ 243.781699][T12307] tipc: Enabling of bearer rejected, already enabled [ 244.317301][T12335] dummy0: entered allmulticast mode [ 244.327302][T12328] x_tables: ip_tables: osf match: only valid for protocol 6 [ 244.359599][T12335] vlan1: entered allmulticast mode [ 244.371410][T12335] bridge0: entered allmulticast mode [ 245.000850][T12372] sctp: [Deprecated]: syz.4.1633 (pid 12372) Use of struct sctp_assoc_value in delayed_ack socket option. [ 245.000850][T12372] Use struct sctp_sack_info instead [ 245.327323][T12386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.372530][T12384] __nla_validate_parse: 6 callbacks suppressed [ 245.372547][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1636'. [ 245.418137][T12386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.457810][T12386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.497677][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.556485][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.590062][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.646011][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.689897][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.729677][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.756682][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.871486][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.897113][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.925293][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1640'. [ 245.950467][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.973189][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.082585][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.101675][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.152371][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.177929][T12409] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1643'. [ 246.220496][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.232081][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.243555][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.255097][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.287442][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.312000][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.336951][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.367123][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.393912][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.419722][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.451444][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.479052][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.504871][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.547439][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.667848][T12425] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1645'. [ 246.692385][ T8632] IPVS: starting estimator thread 0... [ 246.740041][T12419] netlink: 'syz.3.1645': attribute type 7 has an invalid length. [ 246.796544][T12419] netlink: 'syz.3.1645': attribute type 8 has an invalid length. [ 246.892902][T12426] IPVS: using max 25 ests per chain, 60000 per kthread [ 247.057723][T12419] Cannot find add_set index 0 as target [ 247.215725][T12434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1649'. [ 247.278372][T12434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1649'. [ 247.490724][T12441] netlink: 'syz.1.1652': attribute type 1 has an invalid length. [ 247.562560][T12446] netlink: 'syz.3.1654': attribute type 1 has an invalid length. [ 247.752358][T12458] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1658'. [ 247.778142][T12457] dvmrp31: entered allmulticast mode [ 247.939511][T12465] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 247.970768][T12465] bond6 (unregistering): Released all slaves [ 248.073984][T12471] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1660'. [ 248.116642][T12471] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.417479][T12498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1665'. [ 248.786689][T12515] Bluetooth: hci0: unsupported parameter 44250 [ 248.793064][T12515] Bluetooth: hci0: unsupported parameter 44250 [ 249.459426][T12526] netlink: 17736 bytes leftover after parsing attributes in process `syz.1.1675'. [ 249.512447][T12532] syz.1.1675: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 249.529013][T12532] CPU: 1 UID: 0 PID: 12532 Comm: syz.1.1675 Not tainted syzkaller #0 PREEMPT(full) [ 249.529038][T12532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 249.529050][T12532] Call Trace: [ 249.529057][T12532] [ 249.529067][T12532] dump_stack_lvl+0x189/0x250 [ 249.529095][T12532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.529115][T12532] ? __pfx__printk+0x10/0x10 [ 249.529133][T12532] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 249.529159][T12532] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 249.529185][T12532] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 249.529211][T12532] warn_alloc+0x214/0x310 [ 249.529236][T12532] ? stack_depot_save_flags+0x40/0x860 [ 249.529258][T12532] ? __cgroup_account_cputime+0xe5/0x120 [ 249.529283][T12532] ? __pfx_warn_alloc+0x10/0x10 [ 249.529308][T12532] ? kasan_save_track+0x3e/0x80 [ 249.529334][T12532] ? __kasan_kmalloc+0x93/0xb0 [ 249.529362][T12532] ? xsk_setsockopt+0x4dc/0x8d0 [ 249.529382][T12532] ? do_sock_setsockopt+0x179/0x1b0 [ 249.529404][T12532] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 249.529423][T12532] ? do_syscall_64+0xfa/0xfa0 [ 249.529447][T12532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.529476][T12532] __vmalloc_node_range_noprof+0x125/0x12d0 [ 249.529538][T12532] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 249.529566][T12532] ? __kasan_kmalloc+0x93/0xb0 [ 249.529594][T12532] vmalloc_user_noprof+0xad/0xf0 [ 249.529618][T12532] ? xskq_create+0xbf/0x170 [ 249.529638][T12532] xskq_create+0xbf/0x170 [ 249.529660][T12532] xsk_init_queue+0xb0/0x110 [ 249.529692][T12532] xsk_setsockopt+0x4dc/0x8d0 [ 249.529713][T12532] ? __pfx_xsk_setsockopt+0x10/0x10 [ 249.529733][T12532] ? __pfx_aa_sk_perm+0x10/0x10 [ 249.529757][T12532] ? aa_sock_opt_perm+0xff/0x1b0 [ 249.529784][T12532] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 249.529800][T12532] ? __pfx_xsk_setsockopt+0x10/0x10 [ 249.529819][T12532] do_sock_setsockopt+0x179/0x1b0 [ 249.529842][T12532] __x64_sys_setsockopt+0x13f/0x1b0 [ 249.529866][T12532] do_syscall_64+0xfa/0xfa0 [ 249.529886][T12532] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.529907][T12532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.529924][T12532] ? clear_bhb_loop+0x60/0xb0 [ 249.529946][T12532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.529963][T12532] RIP: 0033:0x7f9b7278eec9 [ 249.529981][T12532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.529999][T12532] RSP: 002b:00007f9b735fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 249.530021][T12532] RAX: ffffffffffffffda RBX: 00007f9b729e6090 RCX: 00007f9b7278eec9 [ 249.530036][T12532] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 249.530049][T12532] RBP: 00007f9b72811f91 R08: 0000000000000004 R09: 0000000000000000 [ 249.530062][T12532] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.530076][T12532] R13: 00007f9b729e6128 R14: 00007f9b729e6090 R15: 00007ffe09525758 [ 249.530112][T12532] [ 249.530126][T12532] Mem-Info: [ 249.835725][T12532] active_anon:4603 inactive_anon:0 isolated_anon:0 [ 249.835725][T12532] active_file:3270 inactive_file:39947 isolated_file:0 [ 249.835725][T12532] unevictable:768 dirty:190 writeback:0 [ 249.835725][T12532] slab_reclaimable:11607 slab_unreclaimable:123940 [ 249.835725][T12532] mapped:30109 shmem:2057 pagetables:880 [ 249.835725][T12532] sec_pagetables:0 bounce:0 [ 249.835725][T12532] kernel_misc_reclaimable:0 [ 249.835725][T12532] free:1274601 free_pcp:14930 free_cma:0 [ 249.885569][T12532] Node 0 active_anon:18412kB inactive_anon:0kB active_file:13080kB inactive_file:159584kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120436kB dirty:760kB writeback:0kB shmem:6692kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12644kB pagetables:3376kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 250.003699][T12532] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 250.035638][T12532] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 250.119715][T12532] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 250.130865][T12532] Node 0 DMA32 free:1188268kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23412kB inactive_anon:0kB active_file:13080kB inactive_file:159584kB unevictable:1536kB writepending:760kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:66940kB local_pcp:16516kB free_cma:0kB [ 250.180877][T12532] lowmem_reserve[]: 0 0 1 1 1 [ 250.197771][T12532] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 250.235409][T12532] lowmem_reserve[]: 0 0 0 0 0 [ 250.245445][T12532] Node 1 Normal free:3886976kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21588kB local_pcp:8464kB free_cma:0kB [ 250.310796][T12532] lowmem_reserve[]: 0 0 0 0 0 [ 250.315734][T12532] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 250.329299][T12532] Node 0 DMA32: 888*4kB (UE) 312*8kB (UE) 311*16kB (UME) 1417*32kB (UME) 1155*64kB (UM) 374*128kB (UME) 141*256kB (UM) 57*512kB (UME) 30*1024kB (UM) 11*2048kB (UM) 225*4096kB (UM) = 1218288kB [ 250.367797][T12532] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 250.379813][T12532] Node 1 Normal: 208*4kB (UE) 48*8kB (UME) 48*16kB (UME) 82*32kB (UME) 22*64kB (UME) 6*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3886976kB [ 250.400855][T12532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.412537][T12532] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 250.421986][T12532] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.432205][T12532] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 250.441602][T12532] 46566 total pagecache pages [ 250.448850][T12532] 0 pages in swap cache [ 250.453005][T12532] Free swap = 124996kB [ 250.457211][T12532] Total swap = 124996kB [ 250.461488][T12532] 2097051 pages RAM [ 250.465288][T12532] 0 pages HighMem/MovableOnly [ 250.470450][T12532] 424543 pages reserved [ 250.474935][T12532] 0 pages cma reserved [ 250.601856][T12549] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 250.642326][T12549] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 250.725396][T12549] netlink: 'syz.2.1680': attribute type 10 has an invalid length. [ 250.735252][T12549] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 250.743860][T12549] bond0: (slave wlan1): Opening slave failed [ 251.384112][T12569] __nla_validate_parse: 1 callbacks suppressed [ 251.384130][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1687'. [ 251.440421][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1687'. [ 251.658830][T12582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1688'. [ 251.689801][T12582] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1688'. [ 251.937177][T12601] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1690'. [ 252.035598][T12601] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1690'. [ 252.412476][T12614] netlink: 'syz.3.1694': attribute type 1 has an invalid length. [ 252.440097][T12614] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1694'. [ 252.619499][T12623] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1697'. [ 252.632990][T12623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1697'. [ 252.835126][T12631] xt_TCPMSS: Only works on TCP SYN packets [ 252.898628][T12636] netlink: 'syz.1.1699': attribute type 1 has an invalid length. [ 252.906878][T12636] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1699'. [ 253.032693][T12638] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 253.171194][T12638] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 253.192714][T12643] netlink: 'syz.2.1703': attribute type 1 has an invalid length. [ 253.272666][T12638] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 253.354061][T12638] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 253.359244][T12662] sctp: [Deprecated]: syz.1.1710 (pid 12662) Use of int in max_burst socket option. [ 253.359244][T12662] Use struct sctp_assoc_value instead [ 253.500773][ T7592] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 253.543971][ T7592] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 253.576558][T12665] netlink: 'syz.3.1711': attribute type 5 has an invalid length. [ 253.590160][T12665] geneve3: entered promiscuous mode [ 253.595636][T12665] geneve3: entered allmulticast mode [ 253.602409][ T7592] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 253.729783][ T7592] netdevsim netdevsim3 netdevsim0: set [1, 3] type 2 family 0 port 256 - 0 [ 253.763331][T12671] netlink: 'syz.3.1713': attribute type 29 has an invalid length. [ 253.807939][ T7592] netdevsim netdevsim3 netdevsim1: set [1, 3] type 2 family 0 port 256 - 0 [ 253.881021][ T7592] netdevsim netdevsim3 netdevsim2: set [1, 3] type 2 family 0 port 256 - 0 [ 253.911220][T12667] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 253.923404][ T7592] netdevsim netdevsim3 netdevsim3: set [1, 3] type 2 family 0 port 256 - 0 [ 254.231754][ T7592] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 254.981388][T12714] wg1: entered promiscuous mode [ 254.988378][T12714] wg1: entered allmulticast mode [ 255.196405][T12740] tipc: Enabled bearer , priority 25 [ 255.341649][T12748] netlink: 'syz.3.1731': attribute type 3 has an invalid length. [ 255.862819][T12797] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 256.044579][T12807] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 256.214746][T12809] bond9: Invalid ad_actor_system MAC address. [ 256.221133][T12809] bond9: option ad_actor_system: invalid value (7) [ 256.229813][T12809] bond9 (unregistering): Released all slaves [ 256.305535][ T8631] tipc: Node number set to 3463549965 [ 256.506398][T12824] __nla_validate_parse: 11 callbacks suppressed [ 256.506417][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1753'. [ 256.529490][T12828] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1754'. [ 256.535817][T12824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1753'. [ 256.540635][T12826] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1754'. [ 256.569220][ T50] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.578030][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1753'. [ 256.587210][ T50] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.597480][T12824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1753'. [ 256.607316][ T50] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.616631][ T50] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.643847][T12831] netlink: 'syz.3.1755': attribute type 1 has an invalid length. [ 256.652174][T12831] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1755'. [ 256.661394][T12831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1755'. [ 256.688496][T12831] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 256.707615][T12831] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1755'. [ 257.431052][T12884] netlink: 'syz.2.1768': attribute type 32 has an invalid length. [ 257.442419][T12884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1768'. [ 257.469588][T12884] bond9: option coupled_control: invalid value (12) [ 257.478284][T12884] bond9 (unregistering): Released all slaves [ 259.396735][T12954] vlan3: entered promiscuous mode [ 259.500350][T12957] tipc: Resetting bearer [ 259.530109][T12957] hsr0: entered allmulticast mode [ 259.535155][T12957] hsr_slave_0: entered allmulticast mode [ 259.548155][T12957] hsr_slave_1: entered allmulticast mode [ 259.869314][T12969] netlink: 'syz.0.1792': attribute type 16 has an invalid length. [ 259.878803][T12969] netlink: 'syz.0.1792': attribute type 17 has an invalid length. [ 259.895531][T12969] netlink: 'syz.0.1792': attribute type 27 has an invalid length. [ 260.121298][T12975] xt_CONNSECMARK: invalid mode: 66 [ 260.136210][T12976] trusted_key: syz.3.1793 sent an empty control message without MSG_MORE. [ 261.715114][T13011] __nla_validate_parse: 8 callbacks suppressed [ 261.715131][T13011] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1803'. [ 261.880296][T13025] netdevsim netdevsim3: Direct firmware load for ./bus failed with error -2 [ 261.885417][T13027] netlink: 'syz.3.1806': attribute type 16 has an invalid length. [ 261.902643][T13024] tipc: Enabling of bearer rejected, already enabled [ 261.944033][T13025] netdevsim netdevsim3: Falling back to sysfs fallback for: ./bus [ 261.960476][T13027] netlink: 'syz.3.1806': attribute type 17 has an invalid length. [ 262.037476][T13027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.053392][T13037] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1809'. [ 262.194295][T13044] tipc: Enabling of bearer rejected, already enabled [ 263.006791][T13069] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 263.201787][T13082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'. [ 263.223052][T13089] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1823'. [ 263.272753][T13084] netlink: 'syz.0.1821': attribute type 12 has an invalid length. [ 263.400027][T13101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1825'. [ 263.531153][T13111] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 263.656910][T13106] pim6reg1: entered promiscuous mode [ 263.662917][T13106] pim6reg1: entered allmulticast mode [ 263.685969][T13124] netlink: 'syz.4.1832': attribute type 58 has an invalid length. [ 263.693879][T13122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1831'. [ 263.694047][T13124] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1832'. [ 263.735691][T13122] 8021q: adding VLAN 0 to HW filter on device bond9 [ 264.394533][T13158] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1840'. [ 264.470862][T13162] No such timeout policy "syz1" [ 264.738760][T13175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1844'. [ 264.753146][T13173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1845'. [ 264.928096][ T30] audit: type=1804 audit(1760580704.402:8): pid=13185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1848" name="/newroot/355/cgroup.controllers" dev="tmpfs" ino=1829 res=1 errno=0 [ 264.957895][T13186] syzkaller0: entered promiscuous mode [ 264.963403][T13186] syzkaller0: entered allmulticast mode [ 264.965622][ T30] audit: type=1800 audit(1760580704.432:9): pid=13185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1848" name="cgroup.controllers" dev="tmpfs" ino=1829 res=0 errno=0 [ 265.199639][T13190] netlink: 'syz.0.1850': attribute type 10 has an invalid length. [ 265.208188][T13190] team0: Cannot enslave team device to itself [ 265.248034][T13199] netlink: 'syz.4.1851': attribute type 1 has an invalid length. [ 265.277303][T13201] netlink: 'syz.3.1853': attribute type 10 has an invalid length. [ 265.295556][T13201] dummy0: entered promiscuous mode [ 265.301545][T13201] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 265.437127][T13204] bond6: (slave geneve3): making interface the new active one [ 265.459099][T13204] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 265.468424][ T50] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 265.477473][ T50] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 265.499064][ T50] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 265.565952][ T50] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 265.610086][T13216] xt_HMARK: spi-set and port-set can't be combined [ 265.756140][T13226] netlink: 'syz.4.1860': attribute type 4 has an invalid length. [ 265.770944][T13226] netlink: 'syz.4.1860': attribute type 4 has an invalid length. [ 265.861590][ T30] audit: type=1800 audit(1760580705.332:10): pid=13233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1861" name="memory.events" dev="tmpfs" ino=1899 res=0 errno=0 [ 266.389127][T13261] tipc: Enabling of bearer rejected, failed to enable media [ 266.658326][T13276] dvmrp1: entered allmulticast mode [ 266.689934][T13276] dvmrp1: left allmulticast mode [ 266.753101][T13278] netlink: 'syz.1.1875': attribute type 1 has an invalid length. [ 266.785236][T13278] netlink: 'syz.1.1875': attribute type 2 has an invalid length. [ 266.872115][T13278] __nla_validate_parse: 9 callbacks suppressed [ 266.872132][T13278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1875'. [ 266.908932][T13288] netlink: 'syz.4.1877': attribute type 12 has an invalid length. [ 266.942216][T13290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.093755][T13301] batadv_slave_1: entered promiscuous mode [ 267.137829][T13297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1880'. [ 267.156235][T13304] netlink: 'syz.2.1882': attribute type 11 has an invalid length. [ 267.174660][T13297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.277337][T13297] batadv_slave_1 (unregistering): left promiscuous mode [ 267.284407][T13297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.360560][T13311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1884'. [ 267.448227][T13318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1885'. [ 267.510333][T13319] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1886'. [ 267.526445][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1886'. [ 267.611564][T13324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1888'. [ 267.694748][T13329] veth1_vlan: default FDB implementation only supports local addresses [ 267.764274][T13332] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1888'. [ 267.978484][T13349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1893'. [ 268.174144][T13352] netlink: 20824 bytes leftover after parsing attributes in process `syz.1.1894'. [ 268.316323][T13358] validate_nla: 2 callbacks suppressed [ 268.316341][T13358] netlink: 'syz.3.1895': attribute type 3 has an invalid length. [ 268.556108][T13367] macvlan0: entered promiscuous mode [ 268.587371][T13367] macvlan0: left promiscuous mode [ 268.612625][T13374] netlink: 'syz.0.1899': attribute type 1 has an invalid length. [ 268.672060][T13373] syzkaller0: entered promiscuous mode [ 268.695632][T13373] syzkaller0: entered allmulticast mode [ 268.799596][T13381] tipc: Enabling of bearer rejected, already enabled [ 269.547381][T13426] xt_HMARK: proto mask must be zero with L3 mode [ 269.634232][T13440] SET target dimension over the limit! [ 269.695134][T13441] netlink: 'syz.3.1918': attribute type 3 has an invalid length. [ 270.317252][T13483] netlink: 'syz.4.1928': attribute type 1 has an invalid length. [ 270.325030][T13483] NCSI netlink: No device for ifindex 0 [ 270.510425][T13486] bond3: Unable to set down delay as MII monitoring is disabled [ 270.540992][T13486] bond3 (unregistering): Released all slaves [ 270.673072][T13497] tipc: Enabling of bearer rejected, already enabled [ 271.556324][T13555] netlink: 'syz.4.1945': attribute type 1 has an invalid length. [ 271.586816][T13555] netlink: 'syz.4.1945': attribute type 3 has an invalid length. [ 271.687208][T13570] netlink: 'syz.1.1948': attribute type 12 has an invalid length. [ 272.000885][T13584] __nla_validate_parse: 18 callbacks suppressed [ 272.000904][T13584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1952'. [ 272.067747][T13590] netlink: 'syz.0.1952': attribute type 39 has an invalid length. [ 272.126629][T13584] netlink: 'syz.0.1952': attribute type 1 has an invalid length. [ 272.130711][T13599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1956'. [ 272.134379][T13584] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1952'. [ 272.174897][T13591] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 272.202921][T13591] bond3 (unregistering): Released all slaves [ 272.384330][T13609] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1958'. [ 272.706879][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1962'. [ 272.732809][T13617] netlink: 'syz.0.1962': attribute type 5 has an invalid length. [ 272.749965][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1962'. [ 272.795169][T13617] geneve3: entered promiscuous mode [ 272.802700][T13617] geneve3: entered allmulticast mode [ 272.810694][ T69] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 272.832227][ T69] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 272.861045][ T69] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 272.905678][ T69] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 273.726616][T13689] validate_nla: 1 callbacks suppressed [ 273.726635][T13689] netlink: 'syz.4.1981': attribute type 24 has an invalid length. [ 273.793198][T13689] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1981'. [ 273.809647][T13695] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1983'. [ 273.898894][T13695] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20004 [ 273.915613][ T8631] IPVS: starting estimator thread 0... [ 273.967993][T13689] bond7: option ad_actor_sys_prio: invalid value (0) [ 273.993951][T13706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1984'. [ 274.005574][T13689] bond7: option ad_actor_sys_prio: allowed values 1 - 65535 [ 274.015425][T13703] IPVS: using max 30 ests per chain, 72000 per kthread [ 274.024166][T13689] bond7 (unregistering): Released all slaves [ 274.079755][T13685] lec:lec_atm_close: lec0: Shut down! [ 274.092658][T13706] vlan2: entered promiscuous mode [ 274.099967][T13706] geneve1: entered promiscuous mode [ 274.105871][T13706] vlan2: entered allmulticast mode [ 274.121245][T13706] geneve1: entered allmulticast mode [ 274.234334][T13709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1985'. [ 274.579434][T13737] netlink: 'syz.4.1990': attribute type 12 has an invalid length. [ 274.645729][T13738] netlink: 'syz.4.1990': attribute type 12 has an invalid length. [ 275.287158][T13774] netlink: 'syz.0.1997': attribute type 49 has an invalid length. [ 275.296036][T13774] tipc: Enabling of bearer rejected, already enabled [ 275.318553][ T7592] tipc: Resetting bearer [ 276.278824][T13812] nbd: couldn't find device at index 0 [ 276.657000][T13833] netlink: 'syz.4.2011': attribute type 4 has an invalid length. [ 277.058769][T13855] 8021q: adding VLAN 0 to HW filter on device bond10 [ 277.112193][T13858] macsec1: entered promiscuous mode [ 277.128425][T13858] macsec1: entered allmulticast mode [ 277.541827][T13900] __nla_validate_parse: 21 callbacks suppressed [ 277.541844][T13900] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2028'. [ 277.924888][T13911] siw: device registration error -23 [ 278.110136][T13919] tipc: Enabling of bearer rejected, already enabled [ 278.618898][T13941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2040'. [ 279.244581][T13951] erspan0: entered promiscuous mode [ 279.544954][T13956] syzkaller1: entered promiscuous mode [ 279.570919][T13956] syzkaller1: entered allmulticast mode [ 279.879913][T13974] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2049'. [ 280.190379][ T69] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.350332][ T69] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.366117][ T69] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.420105][T13982] syzkaller0: entered promiscuous mode [ 280.433168][T13982] syzkaller0: entered allmulticast mode [ 280.449871][ T69] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.856387][T13995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2054'. [ 280.877382][T13995] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2054'. [ 280.899966][T14001] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2056'. [ 280.910764][T14001] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2056'. [ 280.923350][T13991] SET target dimension over the limit! [ 281.247456][T14020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2061'. [ 281.621339][T14029] tipc: Enabling of bearer rejected, already enabled [ 281.841607][T14048] netlink: 'syz.0.2069': attribute type 21 has an invalid length. [ 281.849933][T14048] IPv6: NLM_F_CREATE should be specified when creating new route [ 281.859134][T14048] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 281.866392][T14048] IPv6: NLM_F_CREATE should be set when creating new route [ 281.873638][T14048] IPv6: NLM_F_CREATE should be set when creating new route [ 281.880874][T14048] IPv6: NLM_F_CREATE should be set when creating new route [ 281.934910][T14053] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 282.270428][T14076] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2075'. [ 282.289179][T14076] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2075'. [ 282.503890][T14094] netlink: 'syz.2.2080': attribute type 15 has an invalid length. [ 282.602006][T14097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2079'. [ 282.677346][ T6003] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 282.686889][ T6003] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 282.694999][T14099] @ÿ: renamed from veth0_vlan [ 282.705911][ T8632] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 282.746349][ T8632] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 282.937910][ T8632] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 283.119745][T14113] !: renamed from dummy0 (while UP) [ 283.300482][T14116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 283.397933][T14112] netlink: 'syz.2.2085': attribute type 33 has an invalid length. [ 283.448074][T14112] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2085'. [ 283.504946][T14116] tap0: tun_chr_ioctl cmd 1074025694 [ 283.534967][T14112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 283.644148][T14120] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2089'. [ 283.941249][T14136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2091'. [ 283.956833][T14132] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2092'. [ 283.966181][ T5147] Bluetooth: hci4: command tx timeout [ 284.587835][T14148] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2096'. [ 284.874181][T14156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2099'. [ 284.894437][T14156] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2099'. [ 285.103673][T14167] netlink: 'syz.3.2101': attribute type 1 has an invalid length. [ 285.115642][T14168] netlink: 'syz.3.2101': attribute type 1 has an invalid length. [ 285.124233][T14167] netlink: 'syz.3.2101': attribute type 2 has an invalid length. [ 285.134376][T14168] netlink: 'syz.3.2101': attribute type 2 has an invalid length. [ 285.554532][T14194] IPv6: sit2: Disabled Multicast RS [ 286.995735][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 287.078247][T14249] ip6tnl3: entered promiscuous mode [ 287.083546][T14249] ip6tnl3: entered allmulticast mode [ 287.170855][T14252] netlink: 'syz.3.2120': attribute type 64 has an invalid length. [ 288.075379][T14301] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 288.111010][T14305] netlink: 'syz.1.2133': attribute type 10 has an invalid length. [ 288.154862][T14305] team0: Port device dummy0 added [ 288.235044][T14310] tipc: Enabling of bearer rejected, already enabled [ 288.506248][T14326] __nla_validate_parse: 7 callbacks suppressed [ 288.506267][T14326] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2138'. [ 288.681438][T14336] netlink: 'syz.0.2141': attribute type 12 has an invalid length. [ 288.798159][T14340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2143'. [ 289.070315][T14351] netlink: 'syz.4.2145': attribute type 15 has an invalid length. [ 289.121142][T14351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2145'. [ 289.149241][T14361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2148'. [ 289.579484][T14382] netlink: 'syz.0.2152': attribute type 11 has an invalid length. [ 289.713458][T14382] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2152'. [ 289.816799][T14376] xt_bpf: check failed: parse error [ 289.821266][T14391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2155'. [ 290.100126][T14394] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2156'. [ 290.116719][ T5147] Bluetooth: hci4: command tx timeout [ 290.214286][T14409] netlink: 'syz.3.2159': attribute type 5 has an invalid length. [ 290.289357][T14409] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2159'. [ 290.371381][T14416] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2161'. [ 290.381675][T14416] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2161'. [ 290.594207][T14422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.604085][T14422] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.614025][T14422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.643494][T14427] : entered promiscuous mode [ 290.768161][T14438] netlink: 'syz.0.2168': attribute type 10 has an invalid length. [ 290.799398][T14440] bond8: option resend_igmp: invalid value (2878) [ 290.806390][T14440] bond8: option resend_igmp: allowed values 0 - 255 [ 290.814865][T14440] bond8 (unregistering): Released all slaves [ 291.021537][T14457] macsec1: entered promiscuous mode [ 291.027420][T14457] macsec1: entered allmulticast mode [ 291.101168][T14459] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 291.147543][T14461] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 291.251795][T14466] netlink: 'syz.4.2175': attribute type 10 has an invalid length. [ 291.328278][T14466] bond0: (slave 0!): Enslaving as an active interface with an up link [ 291.764515][T14490] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe [ 291.874209][T14496] netlink: 'syz.2.2187': attribute type 6 has an invalid length. [ 292.407008][T14526] netlink: 'syz.3.2195': attribute type 1 has an invalid length. [ 292.493221][T14527] gretap1: entered promiscuous mode [ 292.552044][T14531] netlink: 'syz.2.2196': attribute type 4 has an invalid length. [ 292.928782][T14542] netlink: 'syz.2.2200': attribute type 5 has an invalid length. [ 293.655171][T14579] __nla_validate_parse: 7 callbacks suppressed [ 293.655188][T14579] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2211'. [ 293.860126][T14582] tipc: Enabled bearer , priority 0 [ 293.894183][T14591] syzkaller0: entered promiscuous mode [ 293.901343][T14591] syzkaller0: entered allmulticast mode [ 293.927083][T14595] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2214'. [ 294.034367][T14582] tipc: Resetting bearer [ 294.043177][T14599] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2215'. [ 294.078437][T14578] tipc: Resetting bearer [ 294.114001][T14578] tipc: Disabling bearer [ 294.239185][T14613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2217'. [ 294.289786][T14616] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 294.396146][T14626] netlink: 'syz.0.2222': attribute type 9 has an invalid length. [ 294.407825][T14622] IPv6: sit3: Disabled Multicast RS [ 294.416572][T14624] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 294.435690][T14624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 294.446267][T14624] hsr0: entered promiscuous mode [ 294.451606][T14624] hsr0: entered allmulticast mode [ 294.458282][T14624] hsr_slave_0: entered allmulticast mode [ 294.466483][T14629] netlink: 'syz.4.2221': attribute type 11 has an invalid length. [ 294.474466][T14624] hsr_slave_1: entered allmulticast mode [ 295.175285][T14651] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 295.189600][T14651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2228'. [ 295.200541][T14651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2228'. [ 295.247517][T14653] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2229'. [ 295.424413][T14659] openvswitch: netlink: Flow key attr not present in new flow. [ 295.491552][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2232'. [ 295.727513][T14668] bond6: ARP target 9.0.0.0 is already present [ 295.733724][T14668] bond6: option arp_ip_target: invalid value (9) [ 295.783431][T14668] bond6 (unregistering): Released all slaves [ 295.795583][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 295.881882][T14675] bridge_slave_0: entered promiscuous mode [ 295.888211][T14675] vlan3: entered promiscuous mode [ 296.232911][T14698] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2240'. [ 296.580809][T14723] dvmrp8: entered allmulticast mode [ 297.205079][T14766] C: renamed from lo (while UP) [ 297.228606][T14766] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 297.258238][T14770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2260'. [ 297.286471][T14770] netlink: 'syz.2.2260': attribute type 14 has an invalid length. [ 297.301991][T14770] netlink: 'syz.2.2260': attribute type 14 has an invalid length. [ 297.423391][T14784] syzkaller1: entered promiscuous mode [ 297.429405][T14784] syzkaller1: entered allmulticast mode [ 297.737428][T14800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.809863][T14803] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 297.972774][T14810] syzkaller1: entered promiscuous mode [ 297.986025][T14810] syzkaller1: entered allmulticast mode [ 298.196002][ T8631] page_pool_release_retry() stalled pool shutdown: id 50, 1 inflight 60 sec [ 298.539281][ T30] audit: type=1800 audit(1760580737.972:11): pid=14832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2279" name="memory.events" dev="tmpfs" ino=2297 res=0 errno=0 [ 298.666495][T14847] __nla_validate_parse: 5 callbacks suppressed [ 298.666512][T14847] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2282'. [ 299.121115][T14841] veth3: entered promiscuous mode [ 299.683500][T14868] 8021q: adding VLAN 0 to HW filter on device bond8 [ 300.033928][T14885] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2294'. [ 300.119378][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.127361][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.205600][T14899] netlink: 'syz.0.2296': attribute type 13 has an invalid length. [ 300.448723][T14906] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2298'. [ 301.017541][T14913] dvmrp0: entered allmulticast mode [ 301.222082][T14946] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2303'. [ 301.232123][T14946] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2303'. [ 301.885792][T14964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2309'. [ 301.894871][T14964] netlink: 'syz.4.2309': attribute type 5 has an invalid length. [ 301.902792][T14964] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2309'. [ 302.008524][T14981] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2312'. [ 302.292749][T14991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2314'. [ 302.301896][T14991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2314'. [ 302.329499][T14996] netlink: 'syz.2.2315': attribute type 31 has an invalid length. [ 302.382786][T14999] syzkaller0: entered promiscuous mode [ 302.389644][T14999] syzkaller0: entered allmulticast mode [ 302.876785][T15014] xt_hashlimit: size too large, truncated to 1048576 [ 302.940017][T15014] xt_hashlimit: overflow, try lower: 3/0 [ 303.116969][T15004] netlink: 'syz.2.2317': attribute type 1 has an invalid length. [ 303.290690][T15030] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 303.357748][T15030] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 303.375198][T15034] netlink: 'syz.1.2321': attribute type 4 has an invalid length. [ 303.441567][T15030] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 303.579588][T15030] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 303.694723][ T6003] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 303.719051][ T6003] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 303.737642][ T6003] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 303.765676][ T6003] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 303.958594][T15056] tipc: Enabling of bearer rejected, already enabled [ 303.969209][T15056] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 304.052959][T15060] pim6reg: left allmulticast mode [ 304.059209][T15060] dummy0: left allmulticast mode [ 304.679782][T15080] netlink: 'syz.4.2336': attribute type 1 has an invalid length. [ 304.735559][T15080] __nla_validate_parse: 4 callbacks suppressed [ 304.735576][T15080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2336'. [ 304.984470][T15096] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2340'. [ 305.288626][T15117] netdevsim0: left promiscuous mode [ 305.293872][T15117] netdevsim0: entered allmulticast mode [ 305.356936][T15117] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 305.418000][T15126] lo speed is unknown, defaulting to 1000 [ 305.442408][T15117] syzkaller1: entered promiscuous mode [ 305.451902][T15117] syzkaller1: entered allmulticast mode [ 305.460942][T15126] lo speed is unknown, defaulting to 1000 [ 305.477012][T15126] lo speed is unknown, defaulting to 1000 [ 305.531563][T15131] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2349'. [ 305.540658][T15131] vlan0: entered promiscuous mode [ 305.545758][T15131] team0: entered promiscuous mode [ 305.641906][T15137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.684728][T15144] netlink: 'syz.1.2351': attribute type 4 has an invalid length. [ 305.777499][T15150] netlink: 'syz.0.2354': attribute type 1 has an invalid length. [ 305.812614][T15144] netlink: 'syz.1.2351': attribute type 83 has an invalid length. [ 305.861454][T15150] 8021q: adding VLAN 0 to HW filter on device bond6 [ 305.931219][T15126] infiniband syz0: set active [ 305.936349][T15126] infiniband syz0: added lo [ 305.973516][ T8081] lo speed is unknown, defaulting to 1000 [ 305.979949][ T8081] syz0: Port: 1 Link ACTIVE [ 306.001122][T15126] RDS/IB: syz0: added [ 306.006057][T15126] smc: adding ib device syz0 with port count 1 [ 306.012661][T15126] smc: ib device syz0 port 1 has pnetid SYZ0 (user defined) [ 306.026280][ T8632] lo speed is unknown, defaulting to 1000 [ 306.034305][T15126] lo speed is unknown, defaulting to 1000 [ 306.497839][T15161] lo speed is unknown, defaulting to 1000 [ 306.739222][T15184] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2361'. [ 306.766070][T15184] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2361'. [ 306.791410][T15184] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2361'. [ 306.879874][T15126] lo speed is unknown, defaulting to 1000 [ 306.895296][T15193] netlink: 134820 bytes leftover after parsing attributes in process `syz.1.2362'. [ 307.097834][T15202] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2364'. [ 307.243441][T15202] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2364'. [ 307.333238][T15126] lo speed is unknown, defaulting to 1000 [ 307.417518][T15215] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2367'. [ 313.080781][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 322.319874][T15126] lo speed is unknown, defaulting to 1000 [ 335.974535][T15126] lo speed is unknown, defaulting to 1000 [ 337.404395][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.482751][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.575304][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.903233][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.022892][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.532386][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.673157][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.893282][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.244491][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 339.342344][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.384299][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.542346][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 339.714461][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 340.394051][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 340.522623][ T52] Bluetooth: hci3: command tx timeout [ 340.613141][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 342.362778][ T52] Bluetooth: hci5: command tx timeout [ 342.543501][ T9] page_pool_release_retry() stalled pool shutdown: id 64, 1 inflight 61 sec [ 342.609615][ T52] Bluetooth: hci3: command tx timeout [ 343.723191][ T52] Bluetooth: hci6: command tx timeout [ 344.453734][ T52] Bluetooth: hci5: command tx timeout [ 344.683790][ T52] Bluetooth: hci3: command tx timeout [ 345.803065][ T52] Bluetooth: hci6: command tx timeout [ 346.359442][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 346.522801][ T52] Bluetooth: hci5: command tx timeout [ 346.772797][ T52] Bluetooth: hci3: command tx timeout [ 347.914773][ T52] Bluetooth: hci6: command tx timeout [ 348.621898][ T52] Bluetooth: hci5: command tx timeout [ 349.724797][T15126] lo speed is unknown, defaulting to 1000 [ 349.973299][ T52] Bluetooth: hci6: command tx timeout [ 358.864135][T15286] netlink: 'syz.4.2385': attribute type 1 has an invalid length. [ 361.674723][T15285] bond9 (unregistering): Released all slaves [ 363.682888][T15126] lo speed is unknown, defaulting to 1000 [ 375.964696][T15126] lo speed is unknown, defaulting to 1000 [ 386.834346][T15126] lo speed is unknown, defaulting to 1000 [ 397.073174][ T5846] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 397.224900][ T5846] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 397.322214][ T5846] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 397.623391][ T5834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 397.703454][T15311] __nla_validate_parse: 1 callbacks suppressed [ 397.703474][T15311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2392'. [ 397.974704][ T5834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 398.562871][ T5834] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 398.643797][ T5846] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 398.812940][ T5846] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 399.442354][ T5846] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 399.964972][ T5846] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 400.703666][ T5846] Bluetooth: hci7: command tx timeout [ 402.523308][T15126] lo speed is unknown, defaulting to 1000 [ 402.772554][ T52] Bluetooth: hci7: command tx timeout [ 403.003623][ T52] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 403.012708][ T5834] Bluetooth: hci8: command tx timeout [ 403.092066][ T52] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 403.264395][ T52] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 403.653613][ T52] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 403.801697][ T52] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 404.862973][ T52] Bluetooth: hci7: command tx timeout [ 405.082980][ T52] Bluetooth: hci8: command tx timeout [ 406.602606][ T52] Bluetooth: hci9: command tx timeout [ 406.925103][ T52] Bluetooth: hci7: command tx timeout [ 407.174526][ T52] Bluetooth: hci8: command tx timeout [ 407.740303][ T5846] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 407.922448][ T5846] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 408.043347][ T5846] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 408.283152][ T5846] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 408.401918][ T5846] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 408.701824][ T5846] Bluetooth: hci9: command tx timeout [ 409.252956][ T5846] Bluetooth: hci8: command tx timeout [ 410.773553][ T5834] Bluetooth: hci9: command tx timeout [ 411.083864][ T5834] Bluetooth: hci10: command tx timeout [ 412.842468][ T5834] Bluetooth: hci9: command tx timeout [ 413.162996][ T5834] Bluetooth: hci10: command tx timeout [ 413.433332][T15126] lo speed is unknown, defaulting to 1000 [ 414.847874][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 415.243964][ T5834] Bluetooth: hci10: command tx timeout [ 416.472487][T15328] netlink: 'syz.1.2394': attribute type 10 has an invalid length. [ 416.592779][T15328] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2394'. [ 416.813197][T15328] batadv0: entered promiscuous mode [ 417.332091][ T5834] Bluetooth: hci10: command tx timeout [ 417.792936][T15328] batadv0: entered allmulticast mode [ 418.294671][T15328] bridge0: port 3(batadv0) entered blocking state [ 418.631816][T15328] bridge0: port 3(batadv0) entered disabled state [ 419.072249][T15328] bridge0: port 3(batadv0) entered blocking state [ 419.082065][T15328] bridge0: port 3(batadv0) entered forwarding state [ 419.132540][ T7592] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 419.152289][ T7592] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 424.865283][T15126] lo speed is unknown, defaulting to 1000 [ 435.184683][T15126] lo speed is unknown, defaulting to 1000 [ 440.093543][ T5846] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 440.194683][ T5846] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 440.512863][ T5846] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 440.732738][ T5846] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 441.072266][ T5846] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 443.402347][ T5846] Bluetooth: hci11: command tx timeout [ 444.454127][T15126] lo speed is unknown, defaulting to 1000 [ 445.492963][ T5846] Bluetooth: hci11: command tx timeout [ 447.573313][ T5846] Bluetooth: hci11: command tx timeout [ 449.654784][ T5846] Bluetooth: hci11: command tx timeout [ 450.072968][ T31] INFO: task kworker/u8:4:69 blocked for more than 143 seconds. [ 450.141776][ T5834] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 450.284485][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 450.374547][ T5834] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 450.443129][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 450.468950][ T31] task:kworker/u8:4 state:D stack:22184 pid:69 tgid:69 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 450.484413][ T31] Workqueue: netns cleanup_net [ 450.492711][ T31] Call Trace: [ 450.498603][ T31] [ 450.501542][ T31] __schedule+0x1798/0x4cc0 [ 450.513336][ T5834] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 450.540712][ T31] ? __lock_acquire+0xab9/0xd20 [ 450.549016][ T31] ? __lock_acquire+0xab9/0xd20 [ 450.570924][ T31] ? __pfx___schedule+0x10/0x10 [ 450.590433][ T31] ? schedule+0x91/0x360 [ 450.594697][ T31] schedule+0x165/0x360 [ 450.601141][ T31] schedule_preempt_disabled+0x13/0x30 [ 450.609979][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 450.639859][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 450.648790][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 450.654963][ T31] ? __lock_acquire+0xab9/0xd20 [ 450.663968][ T31] ? rdma_dev_exit_net+0x8c/0x340 [ 450.671258][ T31] down_write+0x1ab/0x1f0 [ 450.774457][ T31] ? __pfx_down_write+0x10/0x10 [ 450.804518][ T5834] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 450.952883][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 451.012621][ T5834] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 451.143213][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 451.254820][ T31] ? rdma_net_to_dev_net+0x1ed/0x240 [ 451.363181][ T31] rdma_dev_exit_net+0x8c/0x340 [ 451.472528][ T31] ? __pfx___might_resched+0x10/0x10 [ 451.631768][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 451.783539][ T31] ? net_generic+0x1e/0x240 [ 451.904773][ T31] ? mutex_is_locked+0x17/0x50 [ 451.922275][T15336] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 452.104186][ T31] ? rtnl_is_locked+0x15/0x20 [ 452.211803][ T31] ops_undo_list+0x49a/0x990 [ 452.213118][T15336] CPU: 0 UID: 0 PID: 15336 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 452.213142][T15336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 452.213153][T15336] Call Trace: [ 452.213161][T15336] [ 452.213169][T15336] dump_stack_lvl+0x189/0x250 [ 452.213194][T15336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.213214][T15336] ? __pfx__printk+0x10/0x10 [ 452.213233][T15336] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 452.213260][T15336] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 452.213288][T15336] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 452.213316][T15336] warn_alloc+0x214/0x310 [ 452.213349][T15336] ? __pfx_warn_alloc+0x10/0x10 [ 452.213386][T15336] ? __get_vm_area_node+0x28f/0x300 [ 452.213411][T15336] ? kcov_ioctl+0x55/0x640 [ 452.213432][T15336] __vmalloc_node_range_noprof+0x690/0x12d0 [ 452.213488][T15336] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 452.213523][T15336] ? __pfx_kcov_ioctl+0x10/0x10 [ 452.213540][T15336] vmalloc_user_noprof+0xad/0xf0 [ 452.213566][T15336] ? kcov_ioctl+0x55/0x640 [ 452.213584][T15336] kcov_ioctl+0x55/0x640 [ 452.213603][T15336] ? bpf_lsm_file_ioctl+0x9/0x20 [ 452.213623][T15336] ? __pfx_kcov_ioctl+0x10/0x10 [ 452.213650][T15336] __se_sys_ioctl+0xfc/0x170 [ 452.213676][T15336] do_syscall_64+0xfa/0xfa0 [ 452.213698][T15336] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.213720][T15336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.213738][T15336] ? clear_bhb_loop+0x60/0xb0 [ 452.213761][T15336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.213783][T15336] RIP: 0033:0x7fbe09f8eacb [ 452.213800][T15336] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 452.213816][T15336] RSP: 002b:00007ffca7359df0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 452.213836][T15336] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007fbe09f8eacb [ 452.213850][T15336] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000df [ 452.213863][T15336] RBP: 00007fbe0a1e66c8 R08: 00000000000000da R09: 0000000000000000 [ 452.213875][T15336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.213886][T15336] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 452.213915][T15336] [ 452.213925][T15336] Mem-Info: [ 452.412467][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 452.780813][T15336] active_anon:6212 inactive_anon:0 isolated_anon:0 [ 452.780813][T15336] active_file:3270 inactive_file:40031 isolated_file:0 [ 452.780813][T15336] unevictable:768 dirty:12 writeback:0 [ 452.780813][T15336] slab_reclaimable:12540 slab_unreclaimable:143766 [ 452.780813][T15336] mapped:76253 shmem:1357 pagetables:1186 [ 452.780813][T15336] sec_pagetables:0 bounce:0 [ 452.780813][T15336] kernel_misc_reclaimable:0 [ 452.780813][T15336] free:1163598 free_pcp:14986 free_cma:0 [ 452.830087][T15336] Node 0 active_anon:24848kB inactive_anon:0kB active_file:13080kB inactive_file:159920kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:305012kB dirty:48kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12752kB pagetables:4600kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 452.924374][T15336] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 453.143988][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 453.272295][ T31] cleanup_net+0x4d8/0x820 [ 453.373109][T15336] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 453.395265][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 453.673826][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 453.722634][ T5846] Bluetooth: hci12: command tx timeout [ 453.764525][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 453.792659][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 453.813243][T15336] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 453.822089][ T31] process_scheduled_works+0xae1/0x17b0 [ 453.862813][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 453.902388][ T31] worker_thread+0x8a0/0xda0 [ 453.983776][T15336] Node 0 DMA32 free:755392kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23460kB inactive_anon:0kB active_file:13080kB inactive_file:159920kB unevictable:1536kB writepending:48kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:42736kB local_pcp:21000kB free_cma:0kB [ 453.991619][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 454.332287][ T31] ? __kthread_parkme+0x7b/0x200 [ 454.413029][T15336] lowmem_reserve[]: 0 0 1 1 1 [ 454.422652][ T31] kthread+0x711/0x8a0 [ 454.572891][ T31] ? __pfx_worker_thread+0x10/0x10 [ 454.601753][T15336] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 454.663963][ T31] ? __pfx_kthread+0x10/0x10 [ 454.703325][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 454.732255][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.831501][ T31] ? __pfx_kthread+0x10/0x10 [ 454.892948][ T31] ret_from_fork+0x4bc/0x870 [ 454.954042][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 455.022156][T15336] lowmem_reserve[]: 0 0 0 0 0 [ 455.063101][ T31] ? __switch_to_asm+0x39/0x70 [ 455.072788][T15336] Node 1 Normal free:3887812kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20840kB local_pcp:8260kB free_cma:0kB [ 455.152213][ T31] ? __switch_to_asm+0x33/0x70 [ 455.232861][ T31] ? __pfx_kthread+0x10/0x10 [ 455.281428][ T31] ret_from_fork_asm+0x1a/0x30 [ 455.362544][ T31] [ 455.493839][ T31] [ 455.493839][ T31] Showing all locks held in the system: [ 455.533683][T15336] lowmem_reserve[]: 0 0 0 0 0 [ 455.688992][ T31] 3 locks held by kworker/0:0/9: [ 455.693960][ T31] #0: ffff8880b863a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 455.813660][ T5846] Bluetooth: hci12: command tx timeout [ 455.879815][T15336] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 456.074663][ T31] #1: ffff8880b8624048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 456.195242][T15126] lo speed is unknown, defaulting to 1000 [ 456.252667][T15336] Node 0 DMA32: 927*4kB (UM) 549*8kB (UM) 258*16kB (UM) 54*32kB (UME) 24*64kB (UME) 92*128kB (UME) 45*256kB (UME) 19*512kB (UM) 15*1024kB (ME) 4*2048kB (ME) 168*4096kB (M) = 760196kB [ 456.283601][ T31] #2: ffffffff99c87190 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 456.452375][ T31] 1 lock held by khungtaskd/31: [ 456.454020][T15336] Node 0 [ 456.512122][ T31] #0: ffffffff8e13d320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 456.521497][T15336] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 456.672462][T15336] Node 1 Normal: 205*4kB (UE) 48*8kB (UME) 49*16kB (UME) 96*32kB (UME) 28*64kB (UME) 6*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3887812kB [ 456.763710][ T31] 3 locks held by kworker/u8:3/50: [ 456.863081][ T31] #0: ffff888144e88948 ((wq_completion)gid-cache-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 456.923136][T15336] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 457.012033][ T31] #1: ffffc90000bb7ba0 ((work_completion)(&ndev_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 457.024982][T15336] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 457.025006][T15336] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 457.025023][T15336] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 457.025040][T15336] 44657 total pagecache pages [ 457.025060][T15336] 0 pages in swap cache [ 457.025068][T15336] Free swap = 124996kB [ 457.025077][T15336] Total swap = 124996kB [ 457.025087][T15336] 2097051 pages RAM [ 457.025095][T15336] 0 pages HighMem/MovableOnly [ 457.025103][T15336] 424543 pages reserved [ 457.025111][T15336] 0 pages cma reserved [ 457.623242][ T31] #2: ffffffff8f24c250 (devices_rwsem){++++}-{4:4}, at: ib_enum_all_roce_netdevs+0x8c/0x160 [ 457.762626][ T31] 4 locks held by kworker/u8:4/69: [ 457.883070][ T5846] Bluetooth: hci12: command tx timeout [ 457.923033][ T31] #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 458.122266][ T31] #1: ffffc9000215fba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 458.273481][ T31] #2: ffffffff8f4d29f0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 458.464032][ T31] #3: ffffffff8f24c410 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x8c/0x340 [ 458.644831][ T31] 2 locks held by getty/5586: [ 458.711954][ T31] #0: ffff88803018a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 458.853253][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 458.992904][ T31] 2 locks held by kworker/u8:9/7591: [ 459.102730][ T31] 3 locks held by kworker/1:11/8632: [ 459.203992][ T31] 1 lock held by ipvs-e:5:0/10743: [ 459.293297][ T31] #0: ffff8880b863a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 459.502279][ T31] 1 lock held by ipvs-e:2:0/12426: [ 459.594383][ T31] 6 locks held by syz.2.2347/15126: [ 459.663175][ T31] 3 locks held by syz.0.2369/15220: [ 459.754244][ T31] #0: ffffffff8f4d29f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 459.974208][ T5846] Bluetooth: hci12: command tx timeout [ 460.044095][ T31] #1: ffffffff8f24c250 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270