last executing test programs: 33.279426631s ago: executing program 1 (id=2350): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001f40)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2d, 'rdma'}, {0x2d, 'net_cls'}, {0x2d, 'hugetlb'}, {0x2d, 'memory'}]}, 0x20) r3 = openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) close(r3) 33.138530015s ago: executing program 1 (id=2353): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) pipe(0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) r4 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x0, &(0x7f0000000080)=""/4067, &(0x7f0000000040)=0xfe3) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES16=r3, @ANYBLOB="01030000000000000b3e1f"], 0x30}, 0x1, 0x0, 0x0, 0x44005}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x40040) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x40, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x10, 0x55, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2b}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2) 32.915097226s ago: executing program 1 (id=2357): r0 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) (async) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30, 0xfffffffe}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xba}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f0000000840)=""/195, 0x0, 0xb0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30, 0xfffffffe}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xba}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f0000000840)=""/195, 0x0, 0xb0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000740)=""/165, &(0x7f0000000800)=0xa5) (async) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000740)=""/165, &(0x7f0000000800)=0xa5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="72a9b5594f44dc33561194332fba6e00e1320ca29b0e6785652557fdb086e997f1ef4c", @ANYRES16=r1, @ANYBLOB="5ca8393796d1711fd4f58eae2647274d5532b7829c05add9c4c6c326919ca3b1c62e16eb975f53a57b575806d7b8a81fddfbe28966ad8e09ff3c6413fb5e18de9202c787b69e2a4b06e40f77120edff08a74e77a88a73938ba691cb602518f0c570f446048df96573e900195978ab5d24cb527bdae5075eedeff4e09b6fd984abc195bdac8ddcf7e87148cb492d5024440ff0dc108a99dedb78ef397d7563f1b63411b0f7678dbe35d53a12464d62e0990d03a0a3175aa10146ee5e7df36848a9679a893193194c7f0c192dc2d66630e7f91d702a6e2cff1740d38471d5b939e31c84c51bd93", @ANYRESDEC=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c001000", @ANYRES16=r6, @ANYBLOB="000225bd7000fddbdf257200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4000) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) (async) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r8, 0x4) sendto$inet6(r2, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @mcast1, 0x3}}}, 0x32) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000200)={'ip6erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}) (async) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000200)={'ip6erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}) connect$inet6(r2, &(0x7f0000000500)={0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8ce3}, 0x1c) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f000001e600)=""/2, &(0x7f00000003c0)=0x2) (async) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f000001e600)=""/2, &(0x7f00000003c0)=0x2) socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB="2000000072000103010000040400000007000000", @ANYRES32=0x0, @ANYBLOB='\b'], 0x20}, 0x1, 0xf00, 0x0, 0x40091}, 0x0) 32.215415891s ago: executing program 4 (id=2366): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="faffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000be000000000000000000000000000000000000000000a3af1ec1c23e727064d3d1eb1a022ad5190b5bef6ebeac5f6c0c809e80eb34bdcce83f0240f917d5812690adc98e6d245baeac416cc0516f90821e4a4447696d5ceaee06adda662f40c8e23f129a15b323fcbd54360700000000000000fe4fb1e9a83ad5ac9599cb355fb6ac4b035cbedc4ec2dcf62f1dfd95f9545e549d70729a7a133537c0e36aed32faa0099e77ea"], 0x50) 31.61850912s ago: executing program 4 (id=2370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)={0x50, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x82}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x44012) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)={0x50, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x82}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x44012) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, r1, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x4}, @NL80211_KEY_IDX={0x5}]}]}, 0x2c}}, 0xc000040) pselect6(0x40, &(0x7f0000000040)={0x0, 0x3a1e, 0x8, 0x5, 0x2, 0x4, 0x80000001, 0xffffffffffffffff}, &(0x7f0000000080)={0x3, 0x6, 0x4, 0x1, 0xfffffffeffffffff, 0x6, 0xd, 0xffffffff}, &(0x7f0000000300)={0xcee8, 0x9, 0x81, 0xa, 0x3, 0x6, 0x8000, 0x7fffffffffffffff}, &(0x7f0000000340), &(0x7f00000003c0)={&(0x7f0000000380)={[0x1]}, 0x8}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r2}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}]}}}]}], {0x14, 0x10}}, 0xa0}}, 0x44854) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x4, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="660a000000000000611187000000000095", @ANYRESOCT=r2], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x40}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x4, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="660a000000000000611187000000000095", @ANYRESOCT=r2], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x40}, 0x94) 31.516816284s ago: executing program 2 (id=2371): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010800}, 0x8054) 31.024308234s ago: executing program 4 (id=2374): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x3b6, &(0x7f0000000440)={@random="61fe71b72b5f", @random="12d65acc8373", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, [{0x0, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000811779e919e5460400"}, {0x4, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x3, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f018"}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da0b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed0000000000"}]}}}}}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000000203010200000000000000000700000009000200000000097d"], 0x28}, 0x1, 0x0, 0x0, 0x24000810}, 0x20004090) ioctl$sock_proto_private(r2, 0x89ec, &(0x7f0000000280)="b5c211c4c669579f849f80f3fa8e30196847f39538164ed89f9ab5fde0ee58a1d06dc1122166f29d9bec8af409efc2d4f5b7d96b38eea516a0e48d74ab0cc151ca305ce8897de62ff8118565990aa24d316d7ec463ffac98a36b2cb59d6fc36a6f9934ae41e8081f8c45fd43d0f807fa29f2f55181a0cb7619c242c5a8329941e93421a117cbcc1548e2e39e89a052a457945befeb301beae454dd98cb7e856e9bee2c97299acc4a5d0d0c604db28c9221ed80afbae7ed46163d0e3920114e094e0bccde1ecb1eab546cb26d2b7030885a9fdd52") r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r5) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 30.923591762s ago: executing program 2 (id=2375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e00000003030000bb060000a99700d7", @ANYBLOB="02000000", @ANYBLOB="0300000005"], 0x50) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg\x00', 0x100}) syz_emit_ethernet(0x2a, &(0x7f0000000800)=ANY=[@ANYBLOB="016980c200000eaaaaaa40c4aa08004500001c20000000001190780800001cac141cbb000017c1000890170cfa5001329d3bdecc8d014700000000bef1cd217897d8a972a752acdb30e9c5972952a08ce0da8e08ae47181033ddaaa0311612d52200d77d7d27dff6341517bc47d33e849df703854cac7031b0b1a86869028365f1565ef6187a69404cd7282836d6be7d83366c0d4b2c1e833d782d6cbdf109a9ca2451b2bd755196ce332e77cba3dea7cf66a502132ffae7da8adb31caed6ca0055935b9676475bf24757e1183c7df"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x42040122, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, 0x0, 0x0, 0x40800) (async) recvmsg(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRESOCT=r2, @ANYBLOB="d5063300800000f6ffffffffffff080211000001"], 0x6f4}}, 0x8004) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x1d0842, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xffffffff}, 0x1c) (async) getsockopt$sock_buf(r1, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58ff0000060a000900010073797a3000000000d61c6d3373797a32000000002c0004802800018008000100666962001c000280080001400000000c08000240000000010800034000000032140000000200000000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) 30.519743463s ago: executing program 0 (id=2377): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000340)={0x2d, 0x1, 0x8000}, 0xc) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006580)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0x6}, {0xffff, 0xfffd}, {0x1, 0xe}}, [@TCA_STAB={0x124, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x2, 0x1, 0x1, 0x1, 0x3, 0x5, 0x5}}, {0xe, 0x2, [0x2, 0x0, 0x3, 0x9ae9, 0x4]}}, {{0x1c, 0x1, {0x1, 0x1, 0x1, 0x8, 0x1, 0xeb1, 0x1f, 0x8}}, {0x14, 0x2, [0x8, 0x200, 0x101, 0xfff7, 0x3ff, 0x8001, 0x1000, 0xb]}}, {{0x1c, 0x1, {0x2, 0x6, 0x4, 0x0, 0x1, 0x3, 0xa810, 0x3}}, {0xa, 0x2, [0x11, 0x1, 0x7]}}, {{0x1c, 0x1, {0x2, 0x9, 0x5, 0x1, 0x2, 0x18000, 0xa0, 0x5}}, {0xe, 0x2, [0x80, 0xfe, 0x0, 0x3ff, 0x0]}}, {{0x1c, 0x1, {0x2a, 0x8, 0x1, 0x80000000, 0x2, 0xb0, 0xa, 0x2}}, {0x8, 0x2, [0x9, 0x0]}}, {{0x1c, 0x1, {0x9, 0x1, 0x8, 0x4, 0x0, 0x6, 0x1, 0x3}}, {0xa, 0x2, [0x59bf, 0x7, 0x6]}}, {{0x1c, 0x1, {0x4e, 0x1, 0xa, 0x0, 0x2, 0x10001, 0x6b, 0x1}}, {0x6, 0x2, [0x9]}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f0000006280)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/242, 0xf2}, {&(0x7f0000000280)}, {&(0x7f00000006c0)=""/189, 0xbd}, {&(0x7f0000000780)=""/185, 0xb9}, {&(0x7f00000002c0)=""/105, 0x69}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000380)=""/36, 0x24}, {&(0x7f00000004c0)=""/60, 0x3c}], 0x8, &(0x7f0000006480)=""/204, 0xcc}, 0x8}, {{&(0x7f00000009c0)=@generic, 0x80, &(0x7f0000000a40)}, 0x800}, {{&(0x7f0000000a80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b00)=""/8, 0x8}, {&(0x7f0000000b40)=""/220, 0xdc}], 0x2, &(0x7f0000000c80)=""/134, 0x86}, 0x2}, {{&(0x7f0000000d40)=@isdn, 0xfffffffffffffe50, &(0x7f00000010c0)=[{&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/21, 0x15}, {&(0x7f0000000e00)=""/137, 0x89}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000000ec0)=""/79, 0x4f}, {&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f0000000f40)=""/114, 0x72}, {&(0x7f0000000fc0)=""/249, 0xf9}], 0x8}, 0x4000}, {{&(0x7f0000001140)=@nfc_llcp, 0x80, &(0x7f0000005580)=[{&(0x7f00000011c0)=""/231, 0xe7}, {&(0x7f0000005300)=""/173, 0xad}, {&(0x7f00000053c0)=""/111, 0x6f}, {&(0x7f0000005440)=""/143, 0x8f}, {&(0x7f0000005500)=""/52, 0x34}, {&(0x7f0000006840)=""/4096, 0x1000}, {&(0x7f0000005540)=""/60, 0x3c}], 0x7, &(0x7f0000005600)=""/164, 0xa4}, 0xda}, {{&(0x7f00000056c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000005840)=[{&(0x7f0000005740)=""/143, 0x8f}, {&(0x7f0000005800)=""/63, 0x3f}], 0x2, &(0x7f0000005880)=""/212, 0xd4}, 0x4f7e}, {{&(0x7f0000005980)=@hci, 0x80, &(0x7f0000005c80)=[{&(0x7f0000007840)=""/4096, 0x1000}, {&(0x7f0000005a00)=""/102, 0x66}, {&(0x7f0000005a80)=""/149, 0x95}, {&(0x7f0000005b40)=""/185, 0xb9}, {&(0x7f0000005c00)=""/102, 0x66}], 0x5, &(0x7f00000008c0)=""/199, 0xc6}, 0x4}, {{&(0x7f0000005e00)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000006100)=[{&(0x7f0000005e80)=""/142, 0x8e}, {&(0x7f0000005f40)=""/100, 0x64}, {&(0x7f0000005fc0)=""/253, 0xfd}, {&(0x7f00000060c0)=""/58, 0x3a}], 0x4, &(0x7f0000006140)=""/180, 0xb4}, 0x8}], 0x8, 0xf0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000500)="3aab39f4a67f8595d38cb18b21aab0c3ef43fccd3c005845deee3a7a7916c7b4887d182330018c563fcfd42fc492a2c78a38cfbb198a0054b765674c483f22c2a2d7066e1ce428841a3f2aeb7c5231121edaba30308c7696f1829ee53fbb4b", &(0x7f0000000180)=""/9, 0x2}, 0x20) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000075090601020000000000000000000000000900020073797a31000000000500010007000000100007800c01028008000140e0004001"], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c008002030605000000000000000000050000f44b2f330000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) sendmsg(r6, &(0x7f0000006800)={0x0, 0x0, 0x0}, 0x810) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, &(0x7f0000006240)) sendmsg$nl_route(r0, 0x0, 0x8000) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x10, 0x400000002, 0x0) 30.519273301s ago: executing program 2 (id=2378): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) pwrite64(r0, &(0x7f0000000340)="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", 0x1000, 0x80000000) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000300)={0x40, 0x0, 0x0, 0x0, 0x65}) 30.44682822s ago: executing program 4 (id=2380): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="12d09440f80d3ed643c8b88f89f2b19476b1cbf02e700b0a73fcc00b570fbbb9401bf4cf2b551afeda903b6ebc65d6068552f96dbef7ca77fa89b2abdf75b80dc22d46bb419df7aee2eed79cccdf4f90096c41d2ba1ca6b707fac78ca068d1f51c899b5b6c8220d13b7d2cf7fc4065f18ec50259ae0c1702560ab4f77f2c22b33b845cd08b2930d2b09d9b53df993fba6e86496ca578aff9bcb27a6ae287e41f7b12", @ANYRES16=r1, @ANYBLOB="010000000000000000000400000014000600766972745f7769666930000000000000"], 0x28}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2, 0x4}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000004700000000f11338831b9f703047c1beef5b5f78cf56aae98af3d4dc3ee56064d24f172efb20d4598ca850fc7739111f3ff36e1e294527e511671c531bc0aac8491b8bd1dbd0aa90e7c6c9b6579a7037ca027fea59d13f4d59c9173b888959fe1b5b550ff14983bdc4a01eb19695ac2401775693016f00000100b2b6dfc47f7c2252048e1659c3d68f56e90926fdcbb9bd1d0e48b140f26c9cded9bdf2773409608245fa38485393b5b8c83a3f40fb7c58d3f21c897ac55f82939247690115", @ANYRES32=0x0, @ANYRES32=r3, @ANYRES8=r0], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c00068005000100000000004700028005000100010000000600034000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x8d38}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000340)={0x2, 0x1, 0x8008, 0x5, 0x1ff, 0x9995, 0x4, 0x9, r6}, 0x20) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f00000005c0)={r6, 0x100}, 0x8) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x3c, r10, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004001}, 0x4040081) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000007c0), r12) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r12, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r13, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x54}, 0x2, 0x34005}, 0x0) 30.385287823s ago: executing program 2 (id=2381): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x40}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8854}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x58, r5}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2491, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$pppoe(0x18, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f00000001c0), &(0x7f0000000000)=""/7, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3, @ANYRES8=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x17, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000001000000000000000d000000184a0000070000000000000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200000000150c593800000000000000"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x27, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf539, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x6c94}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @exit, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 30.379238178s ago: executing program 1 (id=2382): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 30.261136964s ago: executing program 0 (id=2385): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c0000001000010028bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="0500000061510400140003006e657464657673696d30000000000000300016802c000180280001"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r4}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x1, 0x6, 0x8003, {0x0, 0xea60}, {r5, r6/1000+10000}, {0x4, 0x0, 0x1, 0x1}, 0x1, @can={{0x1}, 0x0, 0x1, 0x0, 0x0, "230528d167046bd7"}}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r4, 0x8000000000000003}, 0x18) close(0x3) recvmmsg(r3, &(0x7f00000016c0)=[{{&(0x7f00000002c0)=@x25, 0x80, &(0x7f0000001480)=[{&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000340)=""/230, 0xe6}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}, 0x80}, {{&(0x7f00000014c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001640)=[{&(0x7f0000001540)=""/134, 0x86}, {&(0x7f0000001600)=""/2, 0x2}], 0x2, &(0x7f0000001680)=""/23, 0x17}, 0xfe}], 0x2, 0x42, 0x0) r7 = accept$netrom(r1, &(0x7f0000001740)={{0x3, @netrom}, [@netrom, @remote, @bcast, @rose, @rose, @default]}, &(0x7f00000017c0)=0x48) getpeername$netrom(r7, &(0x7f0000001800)={{0x3, @rose}, [@bcast, @null, @rose, @default, @default, @remote, @rose, @bcast]}, &(0x7f0000001880)=0x48) 30.107028813s ago: executing program 2 (id=2386): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="120000008100000004746bc18e6ed1a21647630000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r2}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000740)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff80000000}, {0xfffffffffffffffc, 0x80000000, 0x0, 0x800}, 0xfffffffc, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@remote, 0x0, 0x33}, 0x2, @in=@local, 0x0, 0x7, 0x0, 0xb7, 0xffffffff, 0x0, 0x9}}, 0xe8) bind$netlink(r4, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) connect$bt_rfcomm(r7, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x70e, 0x8, 0x4, 0x4, {{0x20, 0x4, 0x3, 0x13, 0x80, 0x64, 0x0, 0x2, 0x2, 0x0, @multicast2, @rand_addr=0x64010101, {[@generic={0x86, 0x2}, @lsrr={0x83, 0x17, 0xfd, [@broadcast, @empty, @local, @broadcast, @private=0xa010100]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x89, 0x9, "29996d338b2206"}, @timestamp_addr={0x44, 0x2c, 0x1c, 0x1, 0x8, [{@rand_addr=0x64010101, 0x9}, {@empty, 0x7}, {@loopback, 0x7}, {@empty, 0x10000}, {@remote, 0x8001}]}, @generic={0x83, 0x7, "a64a64645e"}, @generic={0x86, 0x12, "da58a565d4371d16ee9475c36d48a2e5"}]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r11, @ANYBLOB="0300ca9181994d1c5fc5744b33ef28031a0d000000000000000000000000ffffc1ff00", @ANYRES32=r13, @ANYRES32=r11, @ANYBLOB="01000000040000000300"/28], 0x50) splice(r10, 0x0, r12, 0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r12, 0x541b, 0x0) write(r9, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r3, 0x1}, 0x20) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00W/', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e000000340002800800080006000000060002004e200000080007000800000005000d000100000008000600090000000800080009000100"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) socket$inet_sctp(0x2, 0x5, 0x84) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r14, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x9}, &(0x7f0000000400)=0x8) 30.0247044s ago: executing program 4 (id=2388): socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f0000000100000000000095"], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'vlan1\x00'}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0xfffffe3e, 0x10, 0x503, 0x70bd29, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x52777, 0x28000}}, 0x54}}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0xf8, r6, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xb8, 0xa8, @random="c924cc018bd1f5329ed436b6d7efa5435333638b1851a7b064522e26a2b23a3cfe73567c038e0dc4509917727257b19187884f8f330f713fa2249c0ab087a00fffb4635522c7d6425442f225f70323220fd8280c248776a3005f7efc9bb052a74adddbb3a4a232a060ea392648051a349a9d107d7e1efd26a0ff4baf3d3cd541ab10a6a597b5b02c70ab933d457c6baabb9338bba98e09ef25003914462c5dd25f0ffc23dc7505741583d2f27a847a8ca7a47bd5"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x24000845) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r10 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r10, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r10, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000b40)="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", 0x33a}, {&(0x7f0000002b40)="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", 0x2af}], 0x2}, 0x8400) sendmsg$inet(r10, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x80, @local}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000640)="455b1c1ed5900423c15445e625bc121395a1ca64b3dd6f8aeb723872f617d717a26bf00271b580f6822a2c6896c756f9884b052d314f2a0e782a11c793063457ccd878782b6599e2c51e40ed5142e32cf8b07a76201b7644ac62f011223e925d8565cde47b522a9b86be7847318bfeaf58de2c6a1aebf00c39a22ec6de373ec332917b7586bf8298180eb89831e03feae224ca839e8ca7041056cb9ed42abcd994", 0xa1}, {&(0x7f0000000800)="7e24225d7d1bf3f2c2e3350446b32bcc9a579c864b87c0b26e9513f1a964562cd0fb40e07a028a9e4a8509c6183dc2c51a7f307806ce093fad8f167b3f1656081a0f4b15e021952a5e40d65779b924ed3fd175df8673c7544e9e3b11bc621acae054258215e76d7f16569f3436c00fcc7c6c154f87afc22e0ad2a3737a8f6e1cdf815f357d0b10e57e633006dd00e8cc5c66ddb415a93124d45ef1e687b1e29d9fb742d4f8b91f69854f7ba2eaec1b2782a4807fba2fc86bb82f320faa5da21794d4e6b2795f823dd429c33bb5a117ec441e28", 0xd3}, {&(0x7f0000003ac0)="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", 0x43c}], 0x3}, 0x0) recvmsg(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) 29.707069857s ago: executing program 0 (id=2390): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xe, 0x0, &(0x7f0000000440)="f8ad56cc02cb29dcc8007f5b0800", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1401000010000304f9fffffffedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="049c01000750050008001300", @ANYRES32=r2, @ANYBLOB="1400030076657468305f766972745f77696669000b000100aaaaaaaa389b00000500270002000000c4001680780001800c00030000000000b10000000c00090000100000090000000c00050000000000790400000c0009000400000007000000280001"], 0x114}, 0x1, 0x0, 0x0, 0x4802}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x21800}, [@IFLA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) 29.679213363s ago: executing program 0 (id=2391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r3, 0x0, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x6aa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r10, 0x701, 0x0, 0x0, {0x45}}, 0x14}}, 0x0) 29.598373454s ago: executing program 3 (id=2392): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable', 0x8) 29.479376843s ago: executing program 3 (id=2393): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x1c}, 0x18) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) (async) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x8000) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) epoll_create1(0x0) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) (async, rerun: 32) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async, rerun: 32) close(0x4) (rerun: 32) 29.443462164s ago: executing program 4 (id=2394): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000001801000020756c25c8000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000950000000000fa00"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000000)=0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 29.305868898s ago: executing program 3 (id=2395): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257313b453b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x9, 0x7, 0x8, 0x1, 0xa}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000380)={r2, 0xfffb, 0xb4, "d1c5d7223967a4ae38c8c049148747a763f345a9910043f4e1ba6be500bcac7583f019e83d548d2216bc091d2da33f5208d4388bfafe943fffef7d9550a0dcb79219cf28c15a5906aa6614b827f96d3fa866c3d0d21fb96928d5a13b182836973fef30a9837b0188ddd292cabb82a80dff3ed7c454b2dc3c725c2ac6f1c6ae2b36fdddce2917e4ebbfd15f8f4c8ee794c4816147bd0a4f3775d166e17bced8ba1d8856fcdb840eaa817aeec635e13b7d49090ac2"}, 0xbc) 29.243319319s ago: executing program 0 (id=2396): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (rerun: 32) close(0x4) (async, rerun: 64) r0 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000414010028bd7000fedbdf25080001000100000008000180"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (rerun: 64) unshare(0x6a040000) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r1 = socket(0x8, 0x0, 0x8000) (async, rerun: 64) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async, rerun: 64) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0xb, 0x3, 0x0, 0x0, {}, [@NFTA_COMPAT_NAME={0x8, 0x1, 'nbd\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x8, 0x1, 'nbd\x00'}, @NFTA_COMPAT_NAME={0x8, 0x1, 'nbd\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x8, 0x1, 'nbd\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0x8, 0x1, 'nbd\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x803}, 0x20000040) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)={0x3c, r4, 0x1, 0x80000000, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4081}, 0x40050) 29.176151265s ago: executing program 1 (id=2397): socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000a4b000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0xffffc000) (async) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async) vmsplice(r2, &(0x7f0000000380), 0x0, 0xe) (async) close(r1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) (async) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x0, @empty}}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000040)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) (async) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) (async) sendto$inet(r3, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) (async) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 29.115478237s ago: executing program 2 (id=2398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) syz_emit_ethernet(0x12e, &(0x7f0000000680)={@local, @random="b523270c6454", @val={@void, {0x8100, 0x7}}, {@ipv4={0x800, @igmp={{0x10, 0x4, 0x0, 0x4, 0x11c, 0x64, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @dev={0xac, 0x14, 0x14, 0xb}, {[@noop, @rr={0x7, 0x7, 0x4d, [@local]}, @generic={0x86, 0x5, "731936"}, @timestamp_addr={0x44, 0x4, 0x3e, 0x1, 0x8}, @lsrr={0x83, 0x1b, 0x39, [@loopback, @private=0xa010100, @local, @private=0xa010102, @empty, @private=0xa010100]}]}}, {0x16, 0xa, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, "d6fe3f8b21d0100074d0792cd7b13e4d9ad256632a4f917c36ae8495bbb9a64ca8698c36a53835f028bb4c105ee6b9ef7bc137d722108c4c672a1c079898da86f17598cc73216cc0db455bbd6dfd8e434b16ad01408480b61698096a230dd4bf43400561606eb134863a65aaf85305116330cd9abdddec549ab88573118c7514f4e8a912e638712e904c5e7381275858db2e20111acd29451c44e5f61b1e33b6054a57a6d8dc7fd3cc66651a3d68eb18f2fd21f62dbe1975817212249088e9f0449ccab698a1814544c0a764c8c29673f344c074"}}}}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x3, "fae047"}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = socket(0x11, 0x3, 0x9) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, &(0x7f0000000340)) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="14005a801000018004000500"], 0x30}}, 0x20004044) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r7}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) unshare(0x2c020400) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) close(r9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) accept$phonet_pipe(r9, 0x0, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xa9b, 0x50}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c810) r10 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x180000) getsockopt$TIPC_SRC_DROPPABLE(r10, 0x10f, 0x80, &(0x7f0000000180), &(0x7f0000000340)=0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 29.104324729s ago: executing program 3 (id=2399): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000000002010400000000000000000a00000004000380300002802c0001801400030052fc00000000000000000000000000002014000400fc010000000000000000000000000000bd075e1488c51f15f78903134e16bc8823f3a6d267625e3cf0bfd33d084fb10fccd601929ba032f2f4d91fd91e1f2073dbbf67d0d4d6b9ae6ad99a4a87"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1400}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000200000000001200000085000000230000003f0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xb, &(0x7f00000004c0)=0x5, 0x4) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x2000e844) sendmsg$can_j1939(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x1d, r6, 0x2, {0x2, 0xff, 0x1}, 0xfe}, 0x18, &(0x7f0000000440)={&(0x7f0000000400)="006c9eae28e0dded548aeacfb55ebb8c6e6359b2ce6347ef451f390f14dbc6", 0x1f}, 0x1, 0x0, 0x0, 0x40}, 0x2000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='btrfs_qgroup_account_extent\x00', r4}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000800004"], 0x48) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) 28.919011322s ago: executing program 0 (id=2400): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000006540)) (async) clock_gettime(0x0, &(0x7f0000006540)={0x0, 0x0}) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x1103, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) recvmmsg(r0, &(0x7f0000006300)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/96, 0x60}, {&(0x7f0000000100)=""/187, 0xbb}, {&(0x7f00000001c0)=""/1, 0x1}, {&(0x7f0000000200)=""/248, 0xf8}, {&(0x7f0000000300)=""/115, 0x73}], 0x5, &(0x7f0000000400)=""/131, 0x83}, 0x3}, {{&(0x7f00000004c0)=@ax25={{0x3, @rose}, [@default, @bcast, @null, @remote, @netrom, @remote, @netrom]}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000540)=""/4, 0x4}, {&(0x7f0000001240)=""/4096, 0x1000}], 0x2}, 0x2}, {{&(0x7f00000005c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000700)=""/247, 0xf7}, {&(0x7f0000000800)=""/223, 0xdf}, {&(0x7f0000000900)=""/137, 0x89}, {&(0x7f0000000640)=""/56, 0x38}, {&(0x7f00000009c0)=""/173, 0xad}], 0x5, &(0x7f0000000680)=""/51, 0x33}, 0xcb}, {{&(0x7f0000000b00)=@can, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000b80)=""/202, 0xca}, {&(0x7f0000000c80)=""/211, 0xd3}, {&(0x7f0000000d80)=""/143, 0x8f}], 0x3, &(0x7f0000000e80)=""/66, 0x42}, 0xef9}, {{&(0x7f0000000f00)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/46, 0x2e}, {&(0x7f0000000fc0)=""/99, 0x63}, {&(0x7f0000001040)=""/8, 0x8}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, &(0x7f0000002240)=""/4096, 0x1000}, 0xfffffff0}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f00000011c0)=""/30, 0x1e}, {&(0x7f0000003240)=""/198, 0xc6}, {&(0x7f0000003340)=""/73, 0x49}, {&(0x7f00000033c0)=""/164, 0xa4}, {&(0x7f0000003480)=""/184, 0xb8}], 0x5, &(0x7f00000035c0)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000004b40)=[{&(0x7f00000045c0)=""/224, 0xe0}, {&(0x7f00000046c0)=""/8, 0x8}, {&(0x7f0000004700)=""/153, 0x99}, {&(0x7f00000047c0)=""/117, 0x75}, {&(0x7f0000004840)=""/220, 0xdc}, {&(0x7f0000004940)=""/240, 0xf0}, {&(0x7f0000004a40)=""/170, 0xaa}, {&(0x7f0000004b00)=""/9, 0x9}], 0x8, &(0x7f0000004bc0)=""/122, 0x7a}, 0xfffffffa}, {{&(0x7f0000004c40)=@nfc, 0x80, &(0x7f00000060c0)=[{&(0x7f0000004cc0)=""/4096, 0x1000}, {&(0x7f0000005cc0)=""/71, 0x47}, {&(0x7f0000005d40)=""/216, 0xd8}, {&(0x7f0000005e40)=""/161, 0xa1}, {&(0x7f0000005f00)=""/205, 0xcd}, {&(0x7f0000006000)=""/56, 0x38}, {&(0x7f0000006040)=""/81, 0x51}], 0x7}}, {{&(0x7f0000006140)=@nl, 0x80, &(0x7f00000062c0)=[{&(0x7f00000061c0)=""/121, 0x79}, {&(0x7f0000006240)=""/22, 0x16}, {&(0x7f0000006280)=""/47, 0x2f}], 0x3}, 0x2}], 0x9, 0x0, &(0x7f0000006580)={r1, r2+10000000}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001f40)=ANY=[@ANYBLOB="10110000", @ANYRES16=r11, @ANYBLOB="13072bbd7000ffdbdf25670000000800c400070000000800c400810000000800c400bf0000000800c4000a0000000800c3"], 0x1110}, 0x1, 0x0, 0x0, 0x884}, 0x40020) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) getpeername(r0, &(0x7f00000065c0)=@can, &(0x7f0000006640)=0x80) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r15 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x24dfdbfd, {0x0, 0x0, 0x0, r16, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) 28.759596269s ago: executing program 3 (id=2401): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x48040) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xb}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x17}]}, 0x34}, 0x1, 0x0, 0x0, 0x8880}, 0x41000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1cc, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef69}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38b7f178}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc61}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x94, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b6121cc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x560568d5}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x199ff426}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x454faf47}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c335bb8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62c32000}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ae3c347}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69480929}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xb8, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc210}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55bc5a6d}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x403b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70b2b024}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdcb8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x58a}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaccd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe8b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7067a510}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde9b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd998}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc4d2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x527e8ff1}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaf13}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b2ca4cf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa5703f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1f29}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa202}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf16d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58b7042a}]}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000095) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r7, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xd}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000780)={0x0, 0x5, 0x0, 0x3, 0x8}, &(0x7f00000007c0)=0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000800)={0x4f1, 0x200, 0x4, 0x3, r10}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x9, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x200}, [@jmp={0x5, 0x0, 0x2, 0x1b5581bcb4a8ab8, 0x3, 0x1, 0x10}, @alu={0x7, 0x0, 0x2, 0xf, 0x8, 0xfffffffffffffff0, 0x1}, @map_fd={0x18, 0x3d4a23b711fb4058, 0x1, 0x0, r9}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xed29}]}, &(0x7f0000000900)='GPL\x00', 0xb, 0x65, &(0x7f0000000940)=""/101, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000a00)={0x2, 0x10, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a40)=[r9, r9, r9], &(0x7f0000000a80)=[{0x4, 0x1, 0x5, 0x4}, {0x3, 0x2, 0xb, 0x4}], 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b80)={&(0x7f0000000840)='afs_cb_miss\x00', r11, 0x0, 0xfffffffffffffff9}, 0x18) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r12, 0x8, 0x7, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r13, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x70, r14, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x20, r7, 0x600, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) sendto$l2tp6(r8, &(0x7f0000000f80)="3d763a91c7a722ac79df26985dfcc93efde8da8f4d78ff2389c8d89e08e613e74ecc7fd6182f45d6d3252573b103cb0674ef91bc0d6b8369619a4e36904562cedef57bb53afcb1d4f3b85b18d57b31ffd2e227830dbc2f4460b12501195d619a0ce2873b", 0x64, 0x45, &(0x7f0000001000)={0xa, 0x0, 0x2de, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x4}, 0x20) write(r8, &(0x7f0000001040)="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", 0x1000) socket$l2tp6(0xa, 0x2, 0x73) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$l2tp6(r9, &(0x7f0000002040)={0xa, 0x0, 0xb5e, @mcast1, 0x8000}, 0x20) ioctl$FS_IOC_ENABLE_VERITY(r11, 0x40806685, &(0x7f00000021c0)={0x1, 0x2, 0x1000, 0x90, &(0x7f0000002080)="4c94b8e18d0b46622814956c68eba96cd3069a2ed48a3c445a25368eebcee4ca5a3b171512cfff65e2a31b2413b8f1db5688cbe0feff62f2f313fc2c5171df191969af54f2afc5578caf707fea98f778d96e8b75cf43eb166833b60bad4880ba1bf40f3423cdbf13121d413e4ae8a2703b79afe70ba470ca1331f656760151476e76c4debe559bbec5f58805e9830967", 0x72, 0x0, &(0x7f0000002140)="530c1004c2475fb4f5019a71fea9a075a38722b7f59e1f070b50627aabdac94844ea81b3fdd2d843ab97452894d12feaf009e099fd72de6fcd07722cbe1581334a3124cc204ca442871ec15ba15c97243a579a69479789e5f772aabdfda339fe2831441f0cf704f9eb3f8b4a5ce09d857309"}) sendmsg$IPVS_CMD_SET_DEST(r8, &(0x7f0000002480)={&(0x7f0000002240), 0xc, &(0x7f0000002440)={&(0x7f00000022c0)={0x174, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb4f}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7a1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xf}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xa1ff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) 28.679204559s ago: executing program 3 (id=2402): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x22020600) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (rerun: 32) sendfile(r4, r3, 0x0, 0x10000) (async, rerun: 32) r5 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) (rerun: 32) write$cgroup_type(r5, &(0x7f0000000280), 0x9) (async) r6 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) (async, rerun: 32) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) 19.054680573s ago: executing program 1 (id=2403): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x2000000, 0x0, 0x1}}) r2 = socket(0x1d, 0x2, 0x6) bind$inet(r2, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x4, @empty, 0x7}, 0x6) listen(r5, 0xfffffffc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x1e, &(0x7f00000001c0)={@local, @broadcast, @void, {@can={0xc, {{0x4, 0x1, 0x1, 0x1}, 0x0, 0x1, 0x0, 0x0, "7d92e3f34046c55b"}}}}, &(0x7f0000000200)={0x1, 0x2, [0x6e0, 0x6c9, 0x4f5, 0xf94]}) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000600)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0) recvmmsg$unix(r4, &(0x7f0000001d40)=[{{0x0, 0x5a, 0x0}}], 0x40001ec, 0x102, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000300)='X\x00\x00\x00', 0x4}], 0x1) 11.469192079s ago: executing program 32 (id=2400): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000006540)) (async) clock_gettime(0x0, &(0x7f0000006540)={0x0, 0x0}) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x1103, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) recvmmsg(r0, &(0x7f0000006300)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/96, 0x60}, {&(0x7f0000000100)=""/187, 0xbb}, {&(0x7f00000001c0)=""/1, 0x1}, {&(0x7f0000000200)=""/248, 0xf8}, {&(0x7f0000000300)=""/115, 0x73}], 0x5, &(0x7f0000000400)=""/131, 0x83}, 0x3}, {{&(0x7f00000004c0)=@ax25={{0x3, @rose}, [@default, @bcast, @null, @remote, @netrom, @remote, @netrom]}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000540)=""/4, 0x4}, {&(0x7f0000001240)=""/4096, 0x1000}], 0x2}, 0x2}, {{&(0x7f00000005c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000700)=""/247, 0xf7}, {&(0x7f0000000800)=""/223, 0xdf}, {&(0x7f0000000900)=""/137, 0x89}, {&(0x7f0000000640)=""/56, 0x38}, {&(0x7f00000009c0)=""/173, 0xad}], 0x5, &(0x7f0000000680)=""/51, 0x33}, 0xcb}, {{&(0x7f0000000b00)=@can, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000b80)=""/202, 0xca}, {&(0x7f0000000c80)=""/211, 0xd3}, {&(0x7f0000000d80)=""/143, 0x8f}], 0x3, &(0x7f0000000e80)=""/66, 0x42}, 0xef9}, {{&(0x7f0000000f00)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f80)=""/46, 0x2e}, {&(0x7f0000000fc0)=""/99, 0x63}, {&(0x7f0000001040)=""/8, 0x8}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, &(0x7f0000002240)=""/4096, 0x1000}, 0xfffffff0}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f00000011c0)=""/30, 0x1e}, {&(0x7f0000003240)=""/198, 0xc6}, {&(0x7f0000003340)=""/73, 0x49}, {&(0x7f00000033c0)=""/164, 0xa4}, {&(0x7f0000003480)=""/184, 0xb8}], 0x5, &(0x7f00000035c0)=""/4096, 0x1000}, 0x7fff}, {{0x0, 0x0, &(0x7f0000004b40)=[{&(0x7f00000045c0)=""/224, 0xe0}, {&(0x7f00000046c0)=""/8, 0x8}, {&(0x7f0000004700)=""/153, 0x99}, {&(0x7f00000047c0)=""/117, 0x75}, {&(0x7f0000004840)=""/220, 0xdc}, {&(0x7f0000004940)=""/240, 0xf0}, {&(0x7f0000004a40)=""/170, 0xaa}, {&(0x7f0000004b00)=""/9, 0x9}], 0x8, &(0x7f0000004bc0)=""/122, 0x7a}, 0xfffffffa}, {{&(0x7f0000004c40)=@nfc, 0x80, &(0x7f00000060c0)=[{&(0x7f0000004cc0)=""/4096, 0x1000}, {&(0x7f0000005cc0)=""/71, 0x47}, {&(0x7f0000005d40)=""/216, 0xd8}, {&(0x7f0000005e40)=""/161, 0xa1}, {&(0x7f0000005f00)=""/205, 0xcd}, {&(0x7f0000006000)=""/56, 0x38}, {&(0x7f0000006040)=""/81, 0x51}], 0x7}}, {{&(0x7f0000006140)=@nl, 0x80, &(0x7f00000062c0)=[{&(0x7f00000061c0)=""/121, 0x79}, {&(0x7f0000006240)=""/22, 0x16}, {&(0x7f0000006280)=""/47, 0x2f}], 0x3}, 0x2}], 0x9, 0x0, &(0x7f0000006580)={r1, r2+10000000}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001f40)=ANY=[@ANYBLOB="10110000", @ANYRES16=r11, @ANYBLOB="13072bbd7000ffdbdf25670000000800c400070000000800c400810000000800c400bf0000000800c4000a0000000800c3"], 0x1110}, 0x1, 0x0, 0x0, 0x884}, 0x40020) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) getpeername(r0, &(0x7f00000065c0)=@can, &(0x7f0000006640)=0x80) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r15 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x24dfdbfd, {0x0, 0x0, 0x0, r16, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) 8.459431226s ago: executing program 33 (id=2398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) syz_emit_ethernet(0x12e, &(0x7f0000000680)={@local, @random="b523270c6454", @val={@void, {0x8100, 0x7}}, {@ipv4={0x800, @igmp={{0x10, 0x4, 0x0, 0x4, 0x11c, 0x64, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @dev={0xac, 0x14, 0x14, 0xb}, {[@noop, @rr={0x7, 0x7, 0x4d, [@local]}, @generic={0x86, 0x5, "731936"}, @timestamp_addr={0x44, 0x4, 0x3e, 0x1, 0x8}, @lsrr={0x83, 0x1b, 0x39, [@loopback, @private=0xa010100, @local, @private=0xa010102, @empty, @private=0xa010100]}]}}, {0x16, 0xa, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, "d6fe3f8b21d0100074d0792cd7b13e4d9ad256632a4f917c36ae8495bbb9a64ca8698c36a53835f028bb4c105ee6b9ef7bc137d722108c4c672a1c079898da86f17598cc73216cc0db455bbd6dfd8e434b16ad01408480b61698096a230dd4bf43400561606eb134863a65aaf85305116330cd9abdddec549ab88573118c7514f4e8a912e638712e904c5e7381275858db2e20111acd29451c44e5f61b1e33b6054a57a6d8dc7fd3cc66651a3d68eb18f2fd21f62dbe1975817212249088e9f0449ccab698a1814544c0a764c8c29673f344c074"}}}}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x3, "fae047"}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = socket(0x11, 0x3, 0x9) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, &(0x7f0000000340)) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="14005a801000018004000500"], 0x30}}, 0x20004044) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r7}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) unshare(0x2c020400) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) close(r9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) accept$phonet_pipe(r9, 0x0, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xa9b, 0x50}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c810) r10 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x180000) getsockopt$TIPC_SRC_DROPPABLE(r10, 0x10f, 0x80, &(0x7f0000000180), &(0x7f0000000340)=0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 5.12111053s ago: executing program 34 (id=2402): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x22020600) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (rerun: 32) sendfile(r4, r3, 0x0, 0x10000) (async, rerun: 32) r5 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) (rerun: 32) write$cgroup_type(r5, &(0x7f0000000280), 0x9) (async) r6 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) (async, rerun: 32) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) 3.019345501s ago: executing program 35 (id=2394): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000001801000020756c25c8000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000950000000000fa00"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000000)=0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 0s ago: executing program 36 (id=2403): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x2000000, 0x0, 0x1}}) r2 = socket(0x1d, 0x2, 0x6) bind$inet(r2, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x4, @empty, 0x7}, 0x6) listen(r5, 0xfffffffc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x1e, &(0x7f00000001c0)={@local, @broadcast, @void, {@can={0xc, {{0x4, 0x1, 0x1, 0x1}, 0x0, 0x1, 0x0, 0x0, "7d92e3f34046c55b"}}}}, &(0x7f0000000200)={0x1, 0x2, [0x6e0, 0x6c9, 0x4f5, 0xf94]}) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000600)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0) recvmmsg$unix(r4, &(0x7f0000001d40)=[{{0x0, 0x5a, 0x0}}], 0x40001ec, 0x102, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000300)='X\x00\x00\x00', 0x4}], 0x1) kernel console output (not intermixed with test programs): red promiscuous mode [ 234.882441][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 235.217335][T10365] C speed is unknown, defaulting to 1000 [ 235.461395][T10382] netlink: 'syz.2.1092': attribute type 12 has an invalid length. [ 235.471463][T10382] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1092'. [ 235.711988][T10379] veth1: entered promiscuous mode [ 236.019562][T10375] C speed is unknown, defaulting to 1000 [ 236.063169][T10365] lo speed is unknown, defaulting to 1000 [ 236.663696][T10395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1096'. [ 236.747566][T10395] veth0_macvtap: left promiscuous mode [ 236.999681][T10375] lo speed is unknown, defaulting to 1000 [ 237.996728][T10393] C speed is unknown, defaulting to 1000 [ 238.274264][T10393] lo speed is unknown, defaulting to 1000 [ 238.773495][T10397] C speed is unknown, defaulting to 1000 [ 239.374245][T10397] lo speed is unknown, defaulting to 1000 [ 240.857017][T10417] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1101'. [ 241.032711][T10426] netlink: 'syz.4.1102': attribute type 13 has an invalid length. [ 241.346902][T10426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.362585][T10426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.499069][T10358] Set syz1 is full, maxelem 65536 reached [ 241.712364][ T1154] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.838704][ T1154] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.882445][ T1154] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.892044][ T1154] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.086389][T10445] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 242.117775][T10445] tipc: Enabled bearer , priority 10 [ 242.222851][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 242.325488][T10451] sctp: [Deprecated]: syz.0.1109 (pid 10451) Use of int in max_burst socket option. [ 242.325488][T10451] Use struct sctp_assoc_value instead [ 242.407270][T10451] pim6reg: entered allmulticast mode [ 242.416121][T10454] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1110'. [ 242.435221][T10451] pim6reg: left allmulticast mode [ 242.462833][T10454] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1110'. [ 242.492431][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 242.497863][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1109'. [ 242.512672][T10454] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1110'. [ 242.536087][T10454] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1110'. [ 242.590923][T10454] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1110'. [ 242.651980][T10454] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1110'. [ 242.686695][T10454] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1110'. [ 242.734154][T10454] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1110'. [ 242.820302][T10427] C speed is unknown, defaulting to 1000 [ 243.022843][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 243.532835][T10427] lo speed is unknown, defaulting to 1000 [ 243.924359][T10481] tipc: Enabled bearer , priority 0 [ 243.989132][T10467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.999653][T10489] netlink: 'syz.2.1120': attribute type 4 has an invalid length. [ 244.081874][T10484] syzkaller0: entered promiscuous mode [ 244.087750][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 244.107266][T10484] syzkaller0: entered allmulticast mode [ 244.115966][T10484] tipc: Resetting bearer [ 244.127508][T10465] C speed is unknown, defaulting to 1000 [ 244.134935][T10479] tipc: Resetting bearer [ 244.277506][T10500] netlink: 'syz.2.1123': attribute type 1 has an invalid length. [ 244.973201][ T10] tipc: Node number set to 3593008231 [ 245.125341][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 246.115137][T10479] tipc: Disabling bearer [ 246.125028][T10500] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 246.126687][T10465] lo speed is unknown, defaulting to 1000 [ 246.162401][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 246.253788][T10516] __nla_validate_parse: 31 callbacks suppressed [ 246.253806][T10516] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1127'. [ 246.440694][T10529] xt_bpf: check failed: parse error [ 246.505925][T10529] dvmrp0: entered allmulticast mode [ 246.941988][T10531] C speed is unknown, defaulting to 1000 [ 247.170684][T10531] lo speed is unknown, defaulting to 1000 [ 247.202463][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 247.542618][T10549] bond0: (slave team0): Releasing backup interface [ 247.550401][T10549] team0: left promiscuous mode [ 247.566461][T10549] team_slave_0: left promiscuous mode [ 247.586648][T10549] team_slave_1: left promiscuous mode [ 247.594745][T10549] dummy0: left allmulticast mode [ 247.599852][T10549] dummy0: left promiscuous mode [ 247.616138][T10549] bridge0: port 3(dummy0) entered disabled state [ 247.675268][T10549] veth0_to_bridge: left allmulticast mode [ 247.686888][T10549] veth0_to_bridge: left promiscuous mode [ 247.702601][T10549] bridge0: port 4(veth0_to_bridge) entered disabled state [ 247.731720][T10549] bridge_slave_0: left allmulticast mode [ 247.744510][T10549] bridge_slave_0: left promiscuous mode [ 247.750389][T10549] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.770418][T10549] bridge_slave_1: left allmulticast mode [ 247.788352][T10549] bridge_slave_1: left promiscuous mode [ 247.806678][T10549] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.827525][T10549] bond0: (slave bond_slave_0): Releasing backup interface [ 247.837065][T10549] bond_slave_0: left promiscuous mode [ 247.850249][T10549] bond0: (slave bond_slave_1): Releasing backup interface [ 247.859982][T10549] bond_slave_1: left promiscuous mode [ 247.869910][T10549] team0: Port device team_slave_0 removed [ 247.879583][T10549] team0: Port device team_slave_1 removed [ 247.886262][T10549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.896036][T10549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.905182][T10549] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 247.954054][T10556] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 247.969851][T10557] tipc: Enabling of bearer rejected, already enabled [ 248.157937][T10570] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1139'. [ 248.242328][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 248.643879][T10591] netlink: 'syz.1.1146': attribute type 1 has an invalid length. [ 248.716599][T10594] netlink: 676 bytes leftover after parsing attributes in process `syz.4.1147'. [ 248.726130][T10594] netlink: 676 bytes leftover after parsing attributes in process `syz.4.1147'. [ 248.816958][T10598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1148'. [ 248.828370][T10591] bond4: entered promiscuous mode [ 248.853626][T10591] 8021q: adding VLAN 0 to HW filter on device bond4 [ 248.906520][T10595] bond4: (slave bridge3): making interface the new active one [ 248.914812][T10595] bridge3: entered promiscuous mode [ 248.924263][T10595] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 248.981830][T10575] C speed is unknown, defaulting to 1000 [ 249.070797][T10605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1149'. [ 249.098054][T10604] tipc: Enabled bearer , priority 0 [ 249.175697][T10609] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1152'. [ 249.190773][T10604] syzkaller0: entered promiscuous mode [ 249.199449][T10604] syzkaller0: entered allmulticast mode [ 249.213440][T10604] tipc: Resetting bearer [ 249.269948][T10603] tipc: Resetting bearer [ 249.282463][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 249.375292][T10615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1152'. [ 249.436889][T10616] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1152'. [ 250.323134][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 250.578295][T10603] tipc: Disabling bearer [ 250.691514][T10575] lo speed is unknown, defaulting to 1000 [ 250.811909][T10624] rdma_rxe: rxe_newlink: failed to add bond0 [ 250.821677][T10624] netlink: 'syz.0.1156': attribute type 13 has an invalid length. [ 250.969290][T10624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.025707][T10624] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.040758][T10620] syz.1.1155: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 251.062088][T10620] CPU: 1 UID: 0 PID: 10620 Comm: syz.1.1155 Not tainted syzkaller #0 PREEMPT(full) [ 251.062114][T10620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 251.062136][T10620] Call Trace: [ 251.062145][T10620] [ 251.062155][T10620] dump_stack_lvl+0x189/0x250 [ 251.062189][T10620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.062218][T10620] ? __pfx__printk+0x10/0x10 [ 251.062245][T10620] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 251.062269][T10620] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 251.062294][T10620] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 251.062322][T10620] warn_alloc+0x214/0x310 [ 251.062361][T10620] ? __pfx_warn_alloc+0x10/0x10 [ 251.062403][T10620] ? __get_vm_area_node+0x28f/0x300 [ 251.062433][T10620] ? nf_tables_newset+0x132b/0x2530 [ 251.062468][T10620] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 251.062526][T10620] ? alloc_pages_mpol+0x3cd/0x4a0 [ 251.062556][T10620] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 251.062591][T10620] ? rcu_is_watching+0x15/0xb0 [ 251.062613][T10620] ? nf_tables_newset+0x132b/0x2530 [ 251.062669][T10620] ? nf_tables_newset+0x132b/0x2530 [ 251.062696][T10620] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 251.062726][T10620] ? nf_tables_newset+0x132b/0x2530 [ 251.062756][T10620] ? nft_table_lookup+0x211/0x230 [ 251.062783][T10620] ? nft_set_lookup+0x128/0x150 [ 251.062814][T10620] ? nft_hash_privsize+0xf/0xf0 [ 251.062844][T10620] nf_tables_newset+0x132b/0x2530 [ 251.062893][T10620] ? __pfx_nf_tables_newset+0x10/0x10 [ 251.062950][T10620] ? __nla_parse+0x40/0x60 [ 251.062978][T10620] nfnetlink_rcv+0x11d6/0x2590 [ 251.063049][T10620] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 251.063093][T10620] ? ref_tracker_free+0x63a/0x7d0 [ 251.063165][T10620] ? __netlink_deliver_tap+0x807/0x850 [ 251.063191][T10620] ? netlink_deliver_tap+0x2e/0x1b0 [ 251.063240][T10620] netlink_unicast+0x82c/0x9e0 [ 251.063273][T10620] ? __pfx_netlink_unicast+0x10/0x10 [ 251.063297][T10620] ? netlink_sendmsg+0x642/0xb30 [ 251.063319][T10620] ? skb_put+0x11b/0x210 [ 251.063349][T10620] netlink_sendmsg+0x805/0xb30 [ 251.063385][T10620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.063414][T10620] ? aa_sock_msg_perm+0xf1/0x1d0 [ 251.063448][T10620] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 251.063471][T10620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.063498][T10620] __sock_sendmsg+0x21c/0x270 [ 251.063537][T10620] ____sys_sendmsg+0x505/0x830 [ 251.063572][T10620] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.063613][T10620] ? import_iovec+0x74/0xa0 [ 251.063645][T10620] ___sys_sendmsg+0x21f/0x2a0 [ 251.063780][T10620] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.063871][T10620] ? __fget_files+0x2a/0x420 [ 251.063902][T10620] ? __fget_files+0x3a0/0x420 [ 251.063947][T10620] __x64_sys_sendmsg+0x19b/0x260 [ 251.063980][T10620] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 251.064024][T10620] ? rcu_is_watching+0x15/0xb0 [ 251.064051][T10620] ? do_syscall_64+0xbe/0x3b0 [ 251.064083][T10620] do_syscall_64+0xfa/0x3b0 [ 251.064106][T10620] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.064129][T10620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.064151][T10620] ? clear_bhb_loop+0x60/0xb0 [ 251.064178][T10620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.064199][T10620] RIP: 0033:0x7f9ccf78eec9 [ 251.064219][T10620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.064238][T10620] RSP: 002b:00007f9cd0581038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.064260][T10620] RAX: ffffffffffffffda RBX: 00007f9ccf9e5fa0 RCX: 00007f9ccf78eec9 [ 251.064290][T10620] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000045 [ 251.064304][T10620] RBP: 00007f9ccf811f91 R08: 0000000000000000 R09: 0000000000000000 [ 251.064317][T10620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.064330][T10620] R13: 00007f9ccf9e6038 R14: 00007f9ccf9e5fa0 R15: 00007ffc8fc28d88 [ 251.064369][T10620] [ 251.362861][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 251.406100][T10620] Mem-Info: [ 251.458721][T10620] active_anon:6831 inactive_anon:0 isolated_anon:0 [ 251.458721][T10620] active_file:3350 inactive_file:39966 isolated_file:0 [ 251.458721][T10620] unevictable:768 dirty:119 writeback:50 [ 251.458721][T10620] slab_reclaimable:12098 slab_unreclaimable:150002 [ 251.458721][T10620] mapped:32079 shmem:4222 pagetables:967 [ 251.458721][T10620] sec_pagetables:0 bounce:0 [ 251.458721][T10620] kernel_misc_reclaimable:0 [ 251.458721][T10620] free:1273815 free_pcp:13885 free_cma:0 [ 251.508048][T10620] Node 0 active_anon:27324kB inactive_anon:0kB active_file:13400kB inactive_file:159664kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128316kB dirty:476kB writeback:200kB shmem:15352kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12624kB pagetables:3676kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 251.541454][T10624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.571218][T10620] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 251.603295][T10620] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 251.634287][T10620] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 251.640119][T10620] Node 0 DMA32 free:1191204kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27272kB inactive_anon:0kB active_file:13400kB inactive_file:157852kB unevictable:1536kB writepending:376kB present:3129332kB managed:2559852kB mlocked:0kB bounce:0kB free_pcp:39012kB local_pcp:23276kB free_cma:0kB [ 251.674100][T10620] lowmem_reserve[]: 0 0 1 1 1 [ 251.678900][T10620] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1812kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 251.709426][T10620] lowmem_reserve[]: 0 0 0 0 0 [ 251.715624][T10620] Node 1 Normal free:3888668kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16520kB local_pcp:4384kB free_cma:0kB [ 251.747503][T10620] lowmem_reserve[]: 0 0 0 0 0 [ 251.752506][T10620] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 251.766305][T10620] Node 0 DMA32: 0*4kB 3*8kB (ME) 274*16kB (UM) 82*32kB (ME) 53*64kB (M) 18*128kB (ME) 21*256kB (UME) 7*512kB (UME) 2*1024kB (ME) 6*2048kB (ME) 282*4096kB (M) = 1191096kB [ 251.810000][T10620] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 251.852689][T10620] Node 1 Normal: 191*4kB (UME) 52*8kB (UME) 40*16kB (UME) 128*32kB (UME) 42*64kB (UME) 5*128kB (UME) 2*256kB (M) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3888668kB [ 251.938070][T10620] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 251.987856][T10620] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 252.012363][T10620] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 252.024716][T10620] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 252.048378][T10620] 45282 total pagecache pages [ 252.062326][T10620] 0 pages in swap cache [ 252.073081][T10620] Free swap = 124996kB [ 252.086159][T10620] Total swap = 124996kB [ 252.100934][T10620] 2097051 pages RAM [ 252.107619][T10620] 0 pages HighMem/MovableOnly [ 252.118605][T10620] 424998 pages reserved [ 252.136500][T10620] 0 pages cma reserved [ 252.210103][T10642] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1161'. [ 252.232720][T10643] netlink: 'syz.4.1160': attribute type 10 has an invalid length. [ 252.240592][T10643] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1160'. [ 252.402675][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 252.967943][T10643] team0: Port device geneve0 added [ 252.984816][ T6810] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.002655][ T6810] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.032661][ T6810] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.040993][ T6810] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.398532][T10662] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1168'. [ 253.403548][T10640] C speed is unknown, defaulting to 1000 [ 253.442302][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 253.683725][T10670] netlink: 5636 bytes leftover after parsing attributes in process `syz.2.1170'. [ 253.755190][T10673] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20004 [ 253.867815][T10653] C speed is unknown, defaulting to 1000 [ 253.891785][T10640] lo speed is unknown, defaulting to 1000 [ 254.072680][T10687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1177'. [ 254.431165][T10653] lo speed is unknown, defaulting to 1000 [ 254.482676][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 254.812544][T10711] bond0: Error: Cannot enslave bond to itself. [ 255.067711][T10719] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1182'. [ 255.252645][T10746] netlink: 'syz.3.1183': attribute type 2 has an invalid length. [ 255.260449][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1183'. [ 255.307071][T10746] netlink: 'syz.3.1183': attribute type 2 has an invalid length. [ 255.315841][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1183'. [ 255.522315][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 255.633356][T10753] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1184'. [ 255.652692][T10753] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1184'. [ 256.562306][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 256.635172][T10788] tipc: Enabled bearer , priority 0 [ 256.753769][T10788] syzkaller0: entered promiscuous mode [ 256.759486][T10788] syzkaller0: entered allmulticast mode [ 256.767190][T10788] tipc: Resetting bearer [ 256.822373][T10765] C speed is unknown, defaulting to 1000 [ 256.828321][T10787] tipc: Resetting bearer [ 257.602699][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 258.216272][T10787] tipc: Disabling bearer [ 258.231820][T10765] lo speed is unknown, defaulting to 1000 [ 258.340584][T10808] __nla_validate_parse: 5 callbacks suppressed [ 258.340606][T10808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1199'. [ 258.426696][T10816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.652660][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 259.692659][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 259.734703][T10845] C speed is unknown, defaulting to 1000 [ 259.826040][T10854] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1211'. [ 260.119521][T10870] netlink: 'syz.3.1213': attribute type 13 has an invalid length. [ 260.282042][T10845] lo speed is unknown, defaulting to 1000 [ 260.339162][T10882] netlink: 'syz.1.1217': attribute type 1 has an invalid length. [ 260.722311][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 260.823722][ T3529] nci: nci_rx_work: unknown MT 0x1 [ 260.975430][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.246626][T10902] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1221'. [ 261.283821][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1223'. [ 261.379695][T10909] unsupported nla_type 52263 [ 261.762302][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 261.776954][T10925] tipc: Enabled bearer , priority 0 [ 261.787948][T10927] syzkaller0: entered promiscuous mode [ 261.793966][T10927] syzkaller0: entered allmulticast mode [ 261.844390][T10925] tipc: Resetting bearer [ 261.868363][T10932] vlan0: entered promiscuous mode [ 261.906820][T10924] tipc: Resetting bearer [ 261.958148][T10924] tipc: Disabling bearer [ 262.575636][T10952] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1233'. [ 262.611475][T10952] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 262.707719][T10930] C speed is unknown, defaulting to 1000 [ 262.719093][T10933] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1228'. [ 262.802300][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 263.168832][T10930] lo speed is unknown, defaulting to 1000 [ 263.417878][T10967] netlink: 'syz.0.1238': attribute type 1 has an invalid length. [ 263.509504][T10967] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.566754][T10979] netlink: 428 bytes leftover after parsing attributes in process `syz.2.1242'. [ 263.580551][T10974] bond4: (slave geneve2): making interface the new active one [ 263.630919][T10974] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 263.658055][ T3529] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.677315][ T3529] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.708602][T10979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1242'. [ 263.740799][T10984] netlink: 'syz.4.1243': attribute type 1 has an invalid length. [ 263.778349][ T3529] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.794881][ T3529] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.842659][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 264.000538][T10987] bond5: (slave bridge4): making interface the new active one [ 264.010065][T10987] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 264.201274][T11004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1247'. [ 264.234258][T11004] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1247'. [ 264.395452][T11015] netlink: 464 bytes leftover after parsing attributes in process `syz.3.1250'. [ 264.522111][T11018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1251'. [ 264.533869][T11014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1250'. [ 264.543919][T11018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1251'. [ 264.852785][T11036] tipc: New replicast peer: 255.255.255.255 [ 264.876468][T11036] tipc: Enabled bearer , priority 10 [ 264.883225][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 265.163843][T11021] C speed is unknown, defaulting to 1000 [ 265.337038][T11061] dvmrp0: left allmulticast mode [ 265.582560][T11065] ip6gre2: entered allmulticast mode [ 265.652073][T11021] lo speed is unknown, defaulting to 1000 [ 265.716621][T11073] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1267'. [ 265.922644][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 265.993583][T11062] C speed is unknown, defaulting to 1000 [ 266.073574][T11085] netlink: 'syz.3.1270': attribute type 1 has an invalid length. [ 266.090939][T11085] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1270'. [ 266.281893][T11088] netlink: 'syz.0.1271': attribute type 1 has an invalid length. [ 266.291294][T11088] netlink: 'syz.0.1271': attribute type 1 has an invalid length. [ 266.312942][T11062] lo speed is unknown, defaulting to 1000 [ 266.611714][T11101] netlink: 'syz.0.1275': attribute type 1 has an invalid length. [ 266.790980][T11102] bond5: (slave bridge1): making interface the new active one [ 266.799917][T11102] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 266.972705][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 266.987891][T11110] raw_sendmsg: syz.0.1277 forgot to set AF_INET. Fix it! [ 267.144287][T11117] netlink: 'syz.0.1279': attribute type 23 has an invalid length. [ 267.913569][T11157] netlink: 'syz.0.1289': attribute type 3 has an invalid length. [ 267.984285][T11157] dvmrp0: left allmulticast mode [ 268.002775][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 268.088839][T11159] siw: device registration error -23 [ 268.168193][T11159] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 268.346798][T11174] team0: Device gtp0 is of different type [ 268.498254][T11181] netlink: 'syz.0.1295': attribute type 1 has an invalid length. [ 269.042660][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 269.057341][T11203] __nla_validate_parse: 6 callbacks suppressed [ 269.057363][T11203] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1304'. [ 269.086076][T11201] bond0: (slave bond_slave_0): Releasing backup interface [ 269.096437][T11201] bond0: (slave bond_slave_1): Releasing backup interface [ 269.109343][T11201] team0: Port device team_slave_0 removed [ 269.118601][T11201] team0: Port device team_slave_1 removed [ 269.127854][T11201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.141444][T11201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.151620][T11201] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 269.179995][T11203] netlink: 'syz.2.1304': attribute type 4 has an invalid length. [ 269.188598][T11203] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1304'. [ 269.201725][T11205] netlink: 'syz.4.1303': attribute type 10 has an invalid length. [ 269.280185][T11205] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 269.289358][T11208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1305'. [ 269.321064][T11208] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1305'. [ 269.330864][T11208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1305'. [ 269.340841][T11208] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1305'. [ 269.351288][T11208] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1305'. [ 269.491223][T11217] warn_alloc: 1 callbacks suppressed [ 269.491245][T11217] syz.3.1308: vmalloc error: size 6000640, failed to allocated page array size 11720, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 269.578920][T11217] CPU: 0 UID: 0 PID: 11217 Comm: syz.3.1308 Not tainted syzkaller #0 PREEMPT(full) [ 269.578952][T11217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 269.578965][T11217] Call Trace: [ 269.578986][T11217] [ 269.578996][T11217] dump_stack_lvl+0x189/0x250 [ 269.579041][T11217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.579064][T11217] ? __pfx__printk+0x10/0x10 [ 269.579092][T11217] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 269.579115][T11217] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 269.579141][T11217] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 269.579167][T11217] warn_alloc+0x214/0x310 [ 269.579205][T11217] ? __pfx_warn_alloc+0x10/0x10 [ 269.579246][T11217] ? __get_vm_area_node+0x28f/0x300 [ 269.579273][T11217] ? fq_pie_init+0x430/0x840 [ 269.579297][T11217] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 269.579358][T11217] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 269.579395][T11217] ? rcu_is_watching+0x15/0xb0 [ 269.579417][T11217] ? fq_pie_init+0x430/0x840 [ 269.579434][T11217] ? fq_pie_init+0x430/0x840 [ 269.579450][T11217] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 269.579479][T11217] ? fq_pie_init+0x430/0x840 [ 269.579497][T11217] ? tcf_block_get+0x67/0xa0 [ 269.579519][T11217] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 269.579547][T11217] fq_pie_init+0x430/0x840 [ 269.579570][T11217] ? __pfx_fq_pie_init+0x10/0x10 [ 269.579603][T11217] qdisc_create+0x7ac/0xea0 [ 269.579644][T11217] tc_modify_qdisc+0x1538/0x20e0 [ 269.579696][T11217] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 269.579762][T11217] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 269.579793][T11217] rtnetlink_rcv_msg+0x77c/0xb70 [ 269.579821][T11217] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 269.579844][T11217] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 269.579865][T11217] ? ref_tracker_free+0x63a/0x7d0 [ 269.579899][T11217] ? __asan_memcpy+0x40/0x70 [ 269.579921][T11217] ? __pfx_ref_tracker_free+0x10/0x10 [ 269.579965][T11217] netlink_rcv_skb+0x208/0x470 [ 269.579991][T11217] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 269.580024][T11217] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 269.580060][T11217] ? netlink_deliver_tap+0x2e/0x1b0 [ 269.580094][T11217] netlink_unicast+0x82c/0x9e0 [ 269.580127][T11217] ? __pfx_netlink_unicast+0x10/0x10 [ 269.580151][T11217] ? netlink_sendmsg+0x642/0xb30 [ 269.580173][T11217] ? skb_put+0x11b/0x210 [ 269.580204][T11217] netlink_sendmsg+0x805/0xb30 [ 269.580240][T11217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.580269][T11217] ? aa_sock_msg_perm+0xf1/0x1d0 [ 269.580305][T11217] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 269.580327][T11217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.580353][T11217] __sock_sendmsg+0x21c/0x270 [ 269.580391][T11217] ____sys_sendmsg+0x505/0x830 [ 269.580426][T11217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.580465][T11217] ? import_iovec+0x74/0xa0 [ 269.580497][T11217] ___sys_sendmsg+0x21f/0x2a0 [ 269.580528][T11217] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.580599][T11217] ? __fget_files+0x2a/0x420 [ 269.580629][T11217] ? __fget_files+0x3a0/0x420 [ 269.580671][T11217] __x64_sys_sendmsg+0x19b/0x260 [ 269.580703][T11217] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 269.580744][T11217] ? rcu_is_watching+0x15/0xb0 [ 269.580770][T11217] ? do_syscall_64+0xbe/0x3b0 [ 269.580799][T11217] do_syscall_64+0xfa/0x3b0 [ 269.580821][T11217] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.580843][T11217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.580865][T11217] ? clear_bhb_loop+0x60/0xb0 [ 269.580891][T11217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.580928][T11217] RIP: 0033:0x7f7915b8eec9 [ 269.580948][T11217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.580967][T11217] RSP: 002b:00007f7916a47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.580989][T11217] RAX: ffffffffffffffda RBX: 00007f7915de6090 RCX: 00007f7915b8eec9 [ 269.581013][T11217] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000007 [ 269.581027][T11217] RBP: 00007f7915c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 269.581041][T11217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.581053][T11217] R13: 00007f7915de6128 R14: 00007f7915de6090 R15: 00007ffc14632a98 [ 269.581090][T11217] [ 269.581098][T11217] Mem-Info: [ 270.042622][T11217] active_anon:4287 inactive_anon:0 isolated_anon:0 [ 270.042622][T11217] active_file:3350 inactive_file:39974 isolated_file:0 [ 270.042622][T11217] unevictable:768 dirty:138 writeback:0 [ 270.042622][T11217] slab_reclaimable:12197 slab_unreclaimable:147005 [ 270.042622][T11217] mapped:35563 shmem:1641 pagetables:1037 [ 270.042622][T11217] sec_pagetables:0 bounce:0 [ 270.042622][T11217] kernel_misc_reclaimable:0 [ 270.042622][T11217] free:1277879 free_pcp:17610 free_cma:0 [ 270.088517][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 270.149269][T11217] Node 0 active_anon:21348kB inactive_anon:0kB active_file:13400kB inactive_file:159696kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:146452kB dirty:548kB writeback:0kB shmem:9128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13016kB pagetables:3956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 270.185919][T11217] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 270.217706][T11217] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 270.253208][T11217] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 270.259057][T11217] Node 0 DMA32 free:1199404kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23296kB inactive_anon:0kB active_file:13400kB inactive_file:157884kB unevictable:1536kB writepending:548kB present:3129332kB managed:2559852kB mlocked:0kB bounce:0kB free_pcp:55272kB local_pcp:27416kB free_cma:0kB [ 270.292137][T11217] lowmem_reserve[]: 0 0 1 1 1 [ 270.297027][T11217] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1812kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 270.326851][T11217] lowmem_reserve[]: 0 0 0 0 0 [ 270.331627][T11217] Node 1 Normal free:3888924kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16260kB local_pcp:12132kB free_cma:0kB [ 270.364626][T11217] lowmem_reserve[]: 0 0 0 0 0 [ 270.369407][T11217] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 270.382832][T11217] Node 0 DMA32: 992*4kB (U) 221*8kB (UME) 18*16kB (UM) 116*32kB (UE) 13*64kB (U) 38*128kB (UME) 18*256kB (UM) 10*512kB (UME) 3*1024kB (UME) 6*2048kB (ME) 282*4096kB (M) = 1195592kB [ 270.401379][T11217] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 270.414640][T11217] Node 1 Normal: 191*4kB (UME) 52*8kB (UME) 40*16kB (UME) 136*32kB (UME) 42*64kB (UME) 5*128kB (UME) 2*256kB (M) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3888924kB [ 270.451345][T11217] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.475339][T11217] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 270.492594][T11217] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.502699][T11217] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 270.517115][T11217] 45162 total pagecache pages [ 270.521839][T11217] 0 pages in swap cache [ 270.526507][T11217] Free swap = 124996kB [ 270.530920][T11217] Total swap = 124996kB [ 270.537656][T11217] 2097051 pages RAM [ 270.541615][T11217] 0 pages HighMem/MovableOnly [ 270.547050][T11217] 424998 pages reserved [ 270.552806][T11217] 0 pages cma reserved [ 270.649063][T11230] veth1_to_team: entered promiscuous mode [ 270.661942][T11230] veth1_to_team: left promiscuous mode [ 270.977115][ T30] audit: type=1800 audit(1759282300.751:6): pid=11266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1318" name="memory.events" dev="tmpfs" ino=1235 res=0 errno=0 [ 271.087292][ T30] audit: type=1804 audit(1759282300.791:7): pid=11266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1318" name="/newroot/238/memory.events" dev="tmpfs" ino=1235 res=1 errno=0 [ 271.122451][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 271.370198][T11242] C speed is unknown, defaulting to 1000 [ 272.010519][T11242] lo speed is unknown, defaulting to 1000 [ 272.162529][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 272.217917][T11258] C speed is unknown, defaulting to 1000 [ 272.457236][T11290] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.478548][T11294] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1327'. [ 272.566616][T11290] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.648441][T11290] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.719285][T11290] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.814850][ T6798] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.835024][ T1154] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.870505][ T1154] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.879537][ T1154] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.997301][T11293] C speed is unknown, defaulting to 1000 [ 273.155598][T11287] C speed is unknown, defaulting to 1000 [ 273.156567][T11293] lo speed is unknown, defaulting to 1000 [ 273.201875][T11258] lo speed is unknown, defaulting to 1000 [ 273.202568][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 273.629824][T11310] syzkaller1: entered promiscuous mode [ 273.635650][T11310] syzkaller1: entered allmulticast mode [ 273.882435][T11287] lo speed is unknown, defaulting to 1000 [ 274.242295][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 275.281699][T11325] veth1_virt_wifi: entered promiscuous mode [ 275.282616][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 275.299725][T11325] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1333'. [ 275.334457][T11325] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 275.642662][T11331] veth0_to_bond: entered allmulticast mode [ 275.858658][T11335] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1336'. [ 275.916248][T11338] IPVS: Error connecting to the multicast addr [ 275.983818][T11335] batman_adv: batadv0: Adding interface: dummy0 [ 276.004106][T11335] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.039854][T11335] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 276.083349][T11324] C speed is unknown, defaulting to 1000 [ 276.322518][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 276.349837][T11354] syz_tun: entered allmulticast mode [ 276.493799][T11324] lo speed is unknown, defaulting to 1000 [ 276.544161][T11357] netlink: 'syz.1.1343': attribute type 1 has an invalid length. [ 276.577731][T11363] siw: device registration error -23 [ 276.595130][T11363] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 276.853374][T11373] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 276.870255][T11373] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 276.890739][T11376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1350'. [ 277.204325][T11382] netlink: 'syz.3.1353': attribute type 1 has an invalid length. [ 277.293593][T11390] netlink: 'syz.0.1352': attribute type 1 has an invalid length. [ 277.362458][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 277.818478][T11413] netlink: 'syz.0.1360': attribute type 1 has an invalid length. [ 277.931602][T11419] tipc: Enabled bearer , priority 0 [ 277.941756][T11419] syzkaller0: MTU too low for tipc bearer [ 277.947807][T11419] tipc: Disabling bearer [ 278.104544][T11430] netlink: 'syz.4.1364': attribute type 2 has an invalid length. [ 278.129795][T11430] netlink: 'syz.4.1364': attribute type 1 has an invalid length. [ 278.147651][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1364'. [ 278.231199][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1365'. [ 278.240411][T11435] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 278.303058][T11418] C speed is unknown, defaulting to 1000 [ 278.402438][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 278.588967][T11418] lo speed is unknown, defaulting to 1000 [ 279.369518][T11468] Àÿ: renamed from team_slave_1 [ 279.392546][T11470] tipc: Enabling of bearer rejected, already enabled [ 279.430907][T11465] syzkaller0: entered promiscuous mode [ 279.442430][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 279.460405][T11465] syzkaller0: entered allmulticast mode [ 279.794193][T11488] syzkaller1: entered promiscuous mode [ 279.802086][T11488] syzkaller1: entered allmulticast mode [ 280.296998][T11497] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1387'. [ 280.445128][T11478] C speed is unknown, defaulting to 1000 [ 280.482952][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 280.980547][T11478] lo speed is unknown, defaulting to 1000 [ 280.981131][T11484] C speed is unknown, defaulting to 1000 [ 281.309109][T11526] tipc: Can't bind to reserved service type 1 [ 281.486660][T11505] C speed is unknown, defaulting to 1000 [ 281.522627][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 281.648163][T11505] lo speed is unknown, defaulting to 1000 [ 281.673874][T11484] lo speed is unknown, defaulting to 1000 [ 282.038554][T11533] netlink: 'syz.1.1395': attribute type 4 has an invalid length. [ 282.047111][T11533] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1395'. [ 282.325939][T11539] netlink: 'syz.2.1397': attribute type 1 has an invalid length. [ 282.521741][T11539] bond3: entered promiscuous mode [ 282.527644][T11539] 8021q: adding VLAN 0 to HW filter on device bond3 [ 282.562411][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 282.578365][T11551] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1399'. [ 282.670910][T11544] bond3: (slave bridge3): making interface the new active one [ 282.678605][T11544] bridge3: entered promiscuous mode [ 282.686854][T11544] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 282.829983][T11556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1400'. [ 282.890820][T11557] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1400'. [ 282.917297][T11557] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1400'. [ 283.602411][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 283.689717][T11585] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1403'. [ 283.776908][T11588] netlink: 'syz.2.1404': attribute type 4 has an invalid length. [ 284.157576][T11595] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 284.182123][T11542] C speed is unknown, defaulting to 1000 [ 284.313581][T11611] netlink: 'syz.2.1408': attribute type 21 has an invalid length. [ 284.466842][T11620] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1413'. [ 284.503606][T11623] netlink: 'syz.3.1412': attribute type 2 has an invalid length. [ 284.642290][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 284.759842][T11631] tipc: Enabled bearer , priority 10 [ 284.821386][T11634] wg2: entered promiscuous mode [ 284.829709][T11634] wg2: entered allmulticast mode [ 285.020129][T11542] lo speed is unknown, defaulting to 1000 [ 285.067520][T11627] C speed is unknown, defaulting to 1000 [ 285.230914][T11643] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1418'. [ 285.619979][T11654] IPv6: sit2: Disabled Multicast RS [ 285.682286][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 285.707666][T11627] lo speed is unknown, defaulting to 1000 [ 285.912679][T11662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1421'. [ 286.408873][T11676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1423'. [ 286.418054][T11676] netlink: 'syz.3.1423': attribute type 5 has an invalid length. [ 286.426574][T11676] netlink: 'syz.3.1423': attribute type 8 has an invalid length. [ 286.474772][T11676] geneve2: entered promiscuous mode [ 286.519694][T11676] geneve2: entered allmulticast mode [ 286.558833][ T6802] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 286.573188][ T6802] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 286.581340][ T6802] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 286.594294][ T6802] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 286.722359][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 287.395367][T11703] __nla_validate_parse: 1 callbacks suppressed [ 287.395389][T11703] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1429'. [ 287.462039][T11703] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1429'. [ 287.483511][T11703] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1429'. [ 287.520514][T11705] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1430'. [ 287.713157][T11707] tipc: Enabled bearer , priority 0 [ 287.762294][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 287.814626][T11707] syzkaller0: entered promiscuous mode [ 287.820254][T11707] syzkaller0: entered allmulticast mode [ 287.826609][T11707] tipc: Resetting bearer [ 287.834064][T11710] ip6tnl0: Caught tx_queue_len zero misconfig [ 287.854433][T11675] C speed is unknown, defaulting to 1000 [ 287.863620][T11706] tipc: Resetting bearer [ 288.226230][T11728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.677301][T11732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1437'. [ 288.687553][T11732] netlink: 'syz.0.1437': attribute type 1 has an invalid length. [ 288.807406][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 289.467489][T11706] tipc: Disabling bearer [ 289.495510][T11751] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1439'. [ 289.509264][T11675] lo speed is unknown, defaulting to 1000 [ 289.842408][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 289.919357][T11771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1446'. [ 289.940925][T11771] bond0: left allmulticast mode [ 289.955213][T11771] bond_slave_0: left allmulticast mode [ 289.961256][T11771] bond_slave_1: left allmulticast mode [ 289.967487][T11771] bond0: left promiscuous mode [ 289.972748][T11771] bond_slave_0: left promiscuous mode [ 289.978752][T11771] bond_slave_1: left promiscuous mode [ 289.986160][T11771] bridge0: port 1(bond0) entered disabled state [ 290.054719][T11777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1448'. [ 290.064040][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1448'. [ 290.073499][T11777] netlink: 'syz.4.1448': attribute type 11 has an invalid length. [ 290.376666][T11783] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1450'. [ 290.502067][T11787] netlink: zone id is out of range [ 290.508073][T11787] netlink: zone id is out of range [ 290.514918][T11787] netlink: get zone limit has 8 unknown bytes [ 290.587433][T11784] veth1_to_team: entered promiscuous mode [ 290.614483][T11784] veth1_to_team: left promiscuous mode [ 290.737907][T11789] tipc: Enabled bearer , priority 0 [ 290.749192][T11791] netlink: 'syz.4.1453': attribute type 6 has an invalid length. [ 290.760321][T11791] netlink: 'syz.4.1453': attribute type 4 has an invalid length. [ 290.775907][T11791] netlink: 'syz.4.1453': attribute type 6 has an invalid length. [ 290.784540][T11791] netlink: 'syz.4.1453': attribute type 4 has an invalid length. [ 290.806268][T11789] syzkaller0: entered promiscuous mode [ 290.812009][T11789] syzkaller0: entered allmulticast mode [ 290.819621][T11789] tipc: Resetting bearer [ 290.842392][T11788] tipc: Resetting bearer [ 290.882552][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 291.925006][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 292.355315][T11788] tipc: Disabling bearer [ 292.374819][ T68] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.427516][ T68] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.453683][ T68] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.477407][ T68] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.535790][T11825] tipc: Failed to remove unknown binding: 66,1,1/775797438:70989253/70989255 [ 292.583288][T11825] tipc: Failed to remove unknown binding: 66,1,1/775797438:70989253/70989255 [ 292.717331][T11836] __nla_validate_parse: 7 callbacks suppressed [ 292.717353][T11836] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1465'. [ 292.735189][T11836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.800118][T11843] syzkaller1: entered promiscuous mode [ 292.816223][T11843] syzkaller1: entered allmulticast mode [ 292.884662][T11846] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 292.902703][T11846] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 292.943104][T11845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1466'. [ 292.953326][T11847] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 292.964234][T11847] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 292.972402][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 292.986846][T11821] C speed is unknown, defaulting to 1000 [ 293.673277][T11821] lo speed is unknown, defaulting to 1000 [ 293.985287][T11870] tipc: Enabled bearer , priority 0 [ 294.006131][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 294.127075][T11870] syzkaller0: entered promiscuous mode [ 294.133236][T11870] syzkaller0: entered allmulticast mode [ 294.139556][T11870] tipc: Resetting bearer [ 294.191606][T11869] tipc: Resetting bearer [ 295.052321][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 295.833827][T11869] tipc: Disabling bearer [ 296.043384][T11906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1483'. [ 296.072834][T11906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1483'. [ 296.082286][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 296.092927][T11906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1483'. [ 296.351732][T11916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1486'. [ 296.657492][T11929] netlink: 844 bytes leftover after parsing attributes in process `syz.0.1489'. [ 296.787428][T11938] netlink: 'syz.2.1491': attribute type 21 has an invalid length. [ 296.874362][T11944] netlink: 'syz.2.1491': attribute type 11 has an invalid length. [ 297.132759][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 297.667114][T11958] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1495'. [ 297.719297][T11952] C speed is unknown, defaulting to 1000 [ 297.734505][T11962] sctp: [Deprecated]: syz.0.1496 (pid 11962) Use of int in max_burst socket option deprecated. [ 297.734505][T11962] Use struct sctp_assoc_value instead [ 297.804302][T11966] kthread_run failed with err -4 [ 297.874808][T11972] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1500'. [ 297.914116][T11974] netlink: 'syz.2.1499': attribute type 1 has an invalid length. [ 297.929170][T11974] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1499'. [ 298.162389][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 298.205906][T11986] tipc: Enabling of bearer rejected, already enabled [ 298.216335][T11952] lo speed is unknown, defaulting to 1000 [ 298.361280][T11978] C speed is unknown, defaulting to 1000 [ 298.518314][T11998] netlink: 'syz.2.1509': attribute type 1 has an invalid length. [ 298.527023][T11998] netlink: 600 bytes leftover after parsing attributes in process `syz.2.1509'. [ 298.610489][ T30] audit: type=1800 audit(1759282328.391:8): pid=12002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1508" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1739 res=0 errno=0 [ 298.689544][T11978] lo speed is unknown, defaulting to 1000 [ 298.779446][T12009] netlink: 'syz.2.1511': attribute type 4 has an invalid length. [ 298.790299][T12013] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 298.822624][ T5914] C speed is unknown, defaulting to 1000 [ 298.828346][ T5914] syz0: Port: 1 Link ACTIVE [ 298.833631][T12009] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1511'. [ 298.996027][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1513'. [ 299.215641][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 299.429816][T12030] tipc: Enabled bearer , priority 0 [ 299.527984][T12030] syzkaller0: entered promiscuous mode [ 299.537915][T12030] syzkaller0: entered allmulticast mode [ 299.554795][T12030] tipc: Resetting bearer [ 299.652837][T12027] tipc: Resetting bearer [ 300.252450][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 301.172941][T12027] tipc: Disabling bearer [ 301.214361][T12024] C speed is unknown, defaulting to 1000 [ 301.292381][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 301.507561][T12071] netlink: 'syz.3.1527': attribute type 1 has an invalid length. [ 301.603811][T12071] bond4: entered promiscuous mode [ 301.647501][T12071] 8021q: adding VLAN 0 to HW filter on device bond4 [ 301.722465][T12080] 8021q: adding VLAN 0 to HW filter on device bond4 [ 301.738896][T12080] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 301.749747][T12080] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 301.774138][T12080] bond4: (slave wireguard0): making interface the new active one [ 301.782498][T12080] wireguard0: entered promiscuous mode [ 301.800388][T12080] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 302.037179][T12092] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1531'. [ 302.322523][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 302.363808][T12024] lo speed is unknown, defaulting to 1000 [ 302.370281][T12025] C speed is unknown, defaulting to 1000 [ 302.570889][T12096] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 302.578643][T12096] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 302.586051][T12096] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 302.593443][T12096] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 302.600697][T12096] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 302.608079][T12096] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 303.146579][T12046] C speed is unknown, defaulting to 1000 [ 303.164586][T12025] lo speed is unknown, defaulting to 1000 [ 303.407621][T12110] tipc: Enabling of bearer rejected, already enabled [ 303.731345][T12069] C speed is unknown, defaulting to 1000 [ 303.731535][T12046] lo speed is unknown, defaulting to 1000 [ 304.069106][T12098] C speed is unknown, defaulting to 1000 [ 304.402350][ C0] net_ratelimit: 3260 callbacks suppressed [ 304.402373][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 304.474094][T12103] C speed is unknown, defaulting to 1000 [ 304.642075][T12103] lo speed is unknown, defaulting to 1000 [ 304.674484][T12098] lo speed is unknown, defaulting to 1000 [ 304.732746][T12069] lo speed is unknown, defaulting to 1000 [ 305.442321][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 305.952881][T12136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1539'. [ 306.492286][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 306.710886][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1544'. [ 306.834042][T12152] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 306.958413][T12155] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1545'. [ 307.025549][T12158] netlink: 'syz.4.1545': attribute type 1 has an invalid length. [ 307.044899][T12158] netlink: 'syz.4.1545': attribute type 11 has an invalid length. [ 307.053623][T12158] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1545'. [ 307.180299][T12155] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 307.196983][T12155] bond0 (unregistering): Released all slaves [ 307.436269][T12175] netlink: 'syz.1.1550': attribute type 3 has an invalid length. [ 307.446645][T12179] Set syz1 is full, maxelem 65536 reached [ 307.452323][T12175] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1550'. [ 307.468815][T12179] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 307.474715][T12175] IPv6: Can't replace route, no match found [ 307.527916][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1550'. [ 307.537072][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 307.617247][T12177] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1549'. [ 307.629448][T12177] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1549'. [ 307.956066][T12207] netlink: 'syz.0.1559': attribute type 4 has an invalid length. [ 307.965006][T12205] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 307.973168][T12207] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1559'. [ 307.994034][T12204] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1558'. [ 308.014386][T12208] netlink: 'syz.4.1560': attribute type 1 has an invalid length. [ 308.017151][T12207] .`: renamed from bond0 (while UP) [ 308.562451][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 308.598688][T12240] tipc: Enabling of bearer rejected, already enabled [ 309.603344][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 310.692301][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 311.400491][T12228] C speed is unknown, defaulting to 1000 [ 311.651634][T12245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.762410][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 311.768614][T12228] lo speed is unknown, defaulting to 1000 [ 311.805665][T12257] __nla_validate_parse: 2 callbacks suppressed [ 311.805686][T12257] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1573'. [ 311.856771][T12260] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20003 [ 311.861541][T12258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1573'. [ 312.069451][T12273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1576'. [ 312.217505][T12282] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1579'. [ 312.254677][T12282] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1579'. [ 312.435265][T12287] netlink: 'syz.1.1581': attribute type 39 has an invalid length. [ 312.464140][T12287] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1581'. [ 312.489511][T12287] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1581'. [ 312.510378][T12287] netlink: 'syz.1.1581': attribute type 5 has an invalid length. [ 312.529705][T12287] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1581'. [ 312.802541][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 313.361012][T12311] tipc: Enabled bearer , priority 0 [ 313.396565][T12311] syzkaller0: entered promiscuous mode [ 313.409895][T12311] syzkaller0: entered allmulticast mode [ 313.426694][T12318] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1589'. [ 313.478574][T12325] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1590'. [ 313.481638][T12311] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 313.572998][T12330] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 313.615211][T12311] sch_tbf: peakrate 2115346767951839192 is lower than or equals to rate 12949862053990110717 ! [ 313.708222][T12309] tipc: Resetting bearer [ 313.783980][T12343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.824555][T12309] tipc: Disabling bearer [ 313.842632][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 314.077479][T12365] .`: (slave bond_slave_0): Releasing backup interface [ 314.114305][T12365] .`: (slave bond_slave_1): Releasing backup interface [ 314.136727][T12365] team0: Port device team_slave_0 removed [ 314.158866][T12365] team0: Port device team_slave_1 removed [ 314.173434][T12365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.211655][T12365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.233821][T12365] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 314.882453][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 315.649386][T12420] netlink: 'syz.3.1613': attribute type 2 has an invalid length. [ 315.657300][T12408] bridge4: entered promiscuous mode [ 315.657328][T12408] bridge4: entered allmulticast mode [ 315.781866][T12425] netlink: 'syz.4.1615': attribute type 1 has an invalid length. [ 315.922530][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 316.051524][T12422] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 316.059365][T12422] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 316.384414][T12450] tipc: Enabled bearer , priority 0 [ 316.411920][T12450] tipc: Resetting bearer [ 316.469469][T12449] tipc: Disabling bearer [ 316.832180][T12480] __nla_validate_parse: 14 callbacks suppressed [ 316.856579][T12480] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1630'. [ 316.891031][T12480] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1630'. [ 316.988483][T12490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1634'. [ 316.998718][T12490] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1634'. [ 317.012324][T12490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1634'. [ 317.049721][T12490] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1634'. [ 317.091203][T12490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1634'. [ 317.295516][T12506] bridge0: entered promiscuous mode [ 317.509104][T12525] ipvlan0: entered promiscuous mode [ 317.841643][T12547] bridge0: port 1(macvlan2) entered blocking state [ 317.849762][T12547] bridge0: port 1(macvlan2) entered disabled state [ 317.857809][T12547] macvlan2: entered allmulticast mode [ 317.864412][T12547] bridge0: entered allmulticast mode [ 317.873829][T12547] macvlan2: left allmulticast mode [ 317.886609][T12547] bridge0: left allmulticast mode [ 318.151941][T12566] 8021q: adding VLAN 0 to HW filter on device bond5 [ 318.168360][T12571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1653'. [ 318.175084][T12566] macvlan2: entered promiscuous mode [ 318.183640][T12566] macvlan2: entered allmulticast mode [ 318.190519][T12566] veth0: entered promiscuous mode [ 318.196360][T12566] veth0: entered allmulticast mode [ 318.204729][T12566] bond5: (slave macvlan2): making interface the new active one [ 318.213892][T12566] bond5: (slave macvlan2): Enslaving as an active interface with an up link [ 318.526961][T12587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1659'. [ 318.560437][T12580] wg1: left promiscuous mode [ 318.566500][T12580] wg1: left allmulticast mode [ 318.697288][T12580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.724460][T12596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1660'. [ 318.738253][T12580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.875886][T12580] vlan0: left promiscuous mode [ 318.970457][T12580] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 318.979539][T12580] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 318.995358][T12580] macsec0: left promiscuous mode [ 319.000871][T12580] macsec0: left allmulticast mode [ 319.024198][T12580] veth3: left promiscuous mode [ 319.036077][T12580] ip6gre1: left allmulticast mode [ 319.045605][T12580] ip6gre2: left allmulticast mode [ 319.057218][T12580] geneve2: left promiscuous mode [ 319.063404][T12580] geneve2: left allmulticast mode [ 319.071983][T12580] bond4: left promiscuous mode [ 319.077518][T12580] wireguard0: left promiscuous mode [ 319.107951][T12580] veth0: left allmulticast mode [ 319.121269][T12580] macvlan2: left promiscuous mode [ 319.127050][T12580] macvlan2: left allmulticast mode [ 319.208997][ T6798] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.217840][ T6798] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 319.227253][ T6798] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.244225][ T6798] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 319.257935][ T6798] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.279100][ T6798] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 319.333149][ T6798] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.356409][ T6798] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 319.517579][T12610] syzkaller0: entered promiscuous mode [ 319.543831][T12610] syzkaller0: entered allmulticast mode [ 319.869925][T12590] C speed is unknown, defaulting to 1000 [ 319.950982][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 319.958949][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 320.003125][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 320.150383][T12642] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode [ 320.167774][T12642] batman_adv: batadv0: Removing interface: dummy0 [ 320.183896][T12642] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 320.216732][T12642] netlink: 'syz.4.1672': attribute type 10 has an invalid length. [ 320.225608][T12642] mac80211_hwsim hwsim12 wlan1: left allmulticast mode [ 320.278485][T12590] lo speed is unknown, defaulting to 1000 [ 320.285733][T12630] siw: device registration error -23 [ 320.466845][T12648] netlink: 'syz.2.1675': attribute type 1 has an invalid length. [ 320.536977][T12654] netlink: 'syz.4.1674': attribute type 21 has an invalid length. [ 320.951157][T12661] vlan2: entered allmulticast mode [ 320.967452][T12661] bridge_slave_0: entered allmulticast mode [ 321.655230][T12659] C speed is unknown, defaulting to 1000 [ 322.042371][ T5914] IPVS: starting estimator thread 0... [ 322.166603][T12689] __nla_validate_parse: 5 callbacks suppressed [ 322.166626][T12689] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1685'. [ 322.191529][T12689] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1685'. [ 322.210248][T12689] netlink: 'syz.1.1685': attribute type 5 has an invalid length. [ 322.218646][T12689] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1685'. [ 322.267641][T12693] IPVS: using max 23 ests per chain, 55200 per kthread [ 322.282696][T12659] lo speed is unknown, defaulting to 1000 [ 322.350411][T12695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1687'. [ 322.488217][T12680] C speed is unknown, defaulting to 1000 [ 322.503828][T12699] tipc: Enabling of bearer rejected, already enabled [ 322.790294][T12717] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1693'. [ 322.844124][T12719] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 322.919221][T12721] netlink: 'syz.0.1695': attribute type 32 has an invalid length. [ 322.931183][T12721] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1695'. [ 322.992630][T12728] netlink: 'syz.0.1695': attribute type 15 has an invalid length. [ 323.015760][T12719] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 323.040631][T12728] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1695'. [ 323.123021][T12680] lo speed is unknown, defaulting to 1000 [ 323.356321][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1697'. [ 323.365727][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1697'. [ 323.969146][T12762] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 323.995668][T12762] netlink: 'syz.0.1702': attribute type 10 has an invalid length. [ 324.008213][T12762] wlan1: mtu less than device minimum [ 324.015207][T12762] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 324.028573][T12740] C speed is unknown, defaulting to 1000 [ 324.149448][T12764] tipc: Enabled bearer , priority 0 [ 324.215184][T12764] syzkaller0: entered promiscuous mode [ 324.221019][T12764] syzkaller0: entered allmulticast mode [ 324.228228][T12764] tipc: Resetting bearer [ 324.257028][T12763] tipc: Resetting bearer [ 326.101569][T12763] tipc: Disabling bearer [ 326.110772][T12740] lo speed is unknown, defaulting to 1000 [ 326.130829][T12772] tipc: Enabled bearer , priority 25 [ 326.877911][T12779] C speed is unknown, defaulting to 1000 [ 326.975797][T12803] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1711'. [ 327.251418][T12815] __nla_validate_parse: 32 callbacks suppressed [ 327.251441][T12815] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1714'. [ 327.275420][T12815] tipc: Enabling of bearer rejected, failed to enable media [ 327.582810][T12779] lo speed is unknown, defaulting to 1000 [ 327.734907][T12797] lec:lec_atm_close: lec0: Shut down! [ 327.895457][T12802] C speed is unknown, defaulting to 1000 [ 328.227080][T12847] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1723'. [ 328.395335][T12854] Àÿ: renamed from team_slave_1 [ 328.505785][T12859] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1728'. [ 328.517325][T12859] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1728'. [ 328.519350][T12856] netlink: 'syz.4.1727': attribute type 21 has an invalid length. [ 328.536001][T12856] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1727'. [ 328.552663][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1727'. [ 328.582121][T12802] lo speed is unknown, defaulting to 1000 [ 329.340062][T12868] batman_adv: batadv0: Interface deactivated: dummy0 [ 329.586773][T12868] tipc: Resetting bearer [ 329.600943][T12868] syzkaller0: left promiscuous mode [ 329.608488][T12868] syzkaller0: left allmulticast mode [ 329.626823][T12868] bridge2: left allmulticast mode [ 329.644291][T12868] vxcan3: left promiscuous mode [ 329.664854][T12868] gretap1: left promiscuous mode [ 329.673036][T12868] bond3: left promiscuous mode [ 329.687184][T12868] bond4: left promiscuous mode [ 329.692441][T12868] bridge3: left promiscuous mode [ 329.713828][T12868] bridge0: left promiscuous mode [ 329.722839][T10431] lo speed is unknown, defaulting to 1000 [ 329.737751][T12856] C speed is unknown, defaulting to 1000 [ 329.737778][ T68] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.752785][T10431] syz1: Port: 1 Link DOWN [ 329.765468][ T68] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.774109][ T68] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.793764][ T68] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.812604][ T68] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.831211][ T68] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.861001][ T68] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.889401][ T68] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.234776][T12856] lo speed is unknown, defaulting to 1000 [ 330.275191][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1735'. [ 331.211296][T12893] C speed is unknown, defaulting to 1000 [ 331.461342][T12893] lo speed is unknown, defaulting to 1000 [ 331.490184][T12904] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 331.576614][T12904] netlink: 'syz.3.1739': attribute type 11 has an invalid length. [ 332.032952][T12913] Bluetooth: MGMT ver 1.23 [ 332.045086][T12913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1741'. [ 332.170529][T12913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1741'. [ 332.356941][T12917] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 332.874126][T12939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1748'. [ 332.932711][T12933] bond4: entered promiscuous mode [ 332.938273][T12933] 8021q: adding VLAN 0 to HW filter on device bond4 [ 333.316722][T12928] netlink: 'syz.1.1744': attribute type 2 has an invalid length. [ 333.913195][T12946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1750'. [ 333.948778][T12963] wg2: left promiscuous mode [ 333.956853][T12963] wg2: left allmulticast mode [ 333.966217][T12963] veth0_to_bridge: left promiscuous mode [ 334.017399][T12963] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 334.577014][T12993] dvmrp0: entered allmulticast mode [ 335.123481][T12976] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 335.141583][T13019] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1771'. [ 335.381624][T13031] netlink: 'syz.4.1776': attribute type 1 has an invalid length. [ 335.636385][T13045] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1779'. [ 335.702787][T13049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1780'. [ 335.722422][T13049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1780'. [ 335.773240][T13049] bond5: entered promiscuous mode [ 335.778500][T13049] bond5: entered allmulticast mode [ 335.784961][T13049] 8021q: adding VLAN 0 to HW filter on device bond5 [ 336.326281][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 336.364510][T13049] C speed is unknown, defaulting to 1000 [ 336.945293][T13049] lo speed is unknown, defaulting to 1000 [ 337.775581][T13086] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1790'. [ 337.810730][T13086] xt_limit: Overflow, try lower: 604147548/4200216962 [ 338.155479][T13092] netlink: 'syz.3.1794': attribute type 4 has an invalid length. [ 338.165822][T13096] batman_adv: batadv0: Removing interface: dummy0 [ 338.182657][T13092] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1794'. [ 338.311655][T13096] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 338.348858][T13101] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 338.563042][T13113] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1798'. [ 338.604567][T13113] netlink: 'syz.2.1798': attribute type 1 has an invalid length. [ 338.785237][T13127] xfrm1: entered allmulticast mode [ 339.203814][T13135] syzkaller1: entered promiscuous mode [ 339.209454][T13135] syzkaller1: entered allmulticast mode [ 339.462016][T13132] C speed is unknown, defaulting to 1000 [ 339.522087][T13150] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1808'. [ 339.549970][T13150] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1808'. [ 339.781552][T13155] syzkaller1: entered promiscuous mode [ 339.792075][T13155] syzkaller1: entered allmulticast mode [ 339.806172][T13132] lo speed is unknown, defaulting to 1000 [ 339.906072][T13157] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 339.948190][T13159] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1812'. [ 339.957557][T13159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1812'. [ 339.993798][T13159] bond6: entered promiscuous mode [ 339.999116][T13159] bond6: entered allmulticast mode [ 340.005688][T13159] 8021q: adding VLAN 0 to HW filter on device bond6 [ 340.121117][T13164] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1813'. [ 340.193479][T13165] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1813'. [ 341.008816][T13159] C speed is unknown, defaulting to 1000 [ 341.558419][T13191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1822'. [ 341.601254][T13159] lo speed is unknown, defaulting to 1000 [ 341.660063][T13191] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1822'. [ 341.982907][T13180] C speed is unknown, defaulting to 1000 [ 342.015190][T13199] netlink: 'syz.4.1825': attribute type 11 has an invalid length. [ 342.477922][T13180] lo speed is unknown, defaulting to 1000 [ 342.596460][ T51] Bluetooth: hci4: link tx timeout [ 342.601766][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 342.610674][ T5182] Bluetooth: hci4: link tx timeout [ 342.617957][ T5182] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 343.181846][T13236] netlink: 'syz.0.1835': attribute type 1 has an invalid length. [ 343.200862][T13236] __nla_validate_parse: 4 callbacks suppressed [ 343.200884][T13236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1835'. [ 343.378328][T13240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1837'. [ 343.396541][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1837'. [ 343.410572][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1838'. [ 343.419841][T13245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1838'. [ 343.441138][T13240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1837'. [ 343.450751][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1837'. [ 343.464751][T13246] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1838'. [ 343.515463][T13243] veth0_virt_wifi: renamed from veth1_vlan [ 343.526205][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.535577][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.548057][T13227] C speed is unknown, defaulting to 1000 [ 343.549717][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.576278][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.778002][T13257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1843'. [ 343.799560][T13258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1842'. [ 343.834362][T13257] 8021q: adding VLAN 0 to HW filter on device bond7 [ 343.940805][T13265] ip6_vti0: entered allmulticast mode [ 343.982890][T13265] dvmrp8: entered allmulticast mode [ 344.017014][T13227] lo speed is unknown, defaulting to 1000 [ 344.652395][ T5182] Bluetooth: hci4: command 0x0406 tx timeout [ 344.751705][T13253] ip6_vti0: left allmulticast mode [ 344.757862][T13253] dvmrp8: left allmulticast mode [ 345.333667][T13257] C speed is unknown, defaulting to 1000 [ 345.811543][T13278] 8021q: adding VLAN 0 to HW filter on device bond5 [ 345.885150][T13257] lo speed is unknown, defaulting to 1000 [ 346.704282][T13296] netlink: 'syz.1.1852': attribute type 30 has an invalid length. [ 346.926010][T13314] netlink: 'syz.2.1856': attribute type 12 has an invalid length. [ 346.934477][T13314] netlink: 'syz.2.1856': attribute type 14 has an invalid length. [ 347.179916][T13322] netlink: 'syz.2.1859': attribute type 1 has an invalid length. [ 348.389941][T13368] nbd: nbd0 already in use [ 348.405974][T13368] block nbd0: NBD_DISCONNECT [ 348.416126][T13368] block nbd0: Send disconnect failed -32 [ 348.422125][T13368] block nbd0: shutting down sockets [ 348.525016][T13351] C speed is unknown, defaulting to 1000 [ 348.663259][T13372] __nla_validate_parse: 13 callbacks suppressed [ 348.663282][T13372] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1872'. [ 348.984762][T13351] lo speed is unknown, defaulting to 1000 [ 349.144169][T13356] C speed is unknown, defaulting to 1000 [ 349.395182][T13391] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1877'. [ 349.406461][T13391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1877'. [ 349.449155][T13392] IPVS: set_ctl: invalid protocol: 43 172.20.20.11:21 [ 349.531792][T13380] C speed is unknown, defaulting to 1000 [ 349.760978][T13405] netlink: 'syz.0.1882': attribute type 2 has an invalid length. [ 349.789867][T13380] lo speed is unknown, defaulting to 1000 [ 349.826044][T13356] lo speed is unknown, defaulting to 1000 [ 350.935349][T13422] netlink: 'syz.0.1886': attribute type 4 has an invalid length. [ 350.984525][T13424] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1884'. [ 351.059215][T13427] netlink: 'syz.0.1886': attribute type 4 has an invalid length. [ 351.076372][T13424] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1884'. [ 351.412161][T13434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1888'. [ 351.446601][T13434] netlink: 'syz.0.1888': attribute type 5 has an invalid length. [ 351.520688][T13434] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1888'. [ 351.552816][T13434] geneve3: entered promiscuous mode [ 351.558246][T13434] geneve3: entered allmulticast mode [ 351.565682][ T6817] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 351.575847][ T6817] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 351.603268][ T6817] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 351.644327][ T6817] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 351.757061][T13450] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 351.766117][T13453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1893'. [ 352.019905][T13467] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1898'. [ 352.035064][T13467] netlink: 'syz.1.1898': attribute type 1 has an invalid length. [ 352.175590][T13472] netlink: 'syz.0.1899': attribute type 1 has an invalid length. [ 352.257530][T13472] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 352.291561][ T6812] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 352.293167][T13472] 8021q: adding VLAN 0 to HW filter on device bond7 [ 352.412815][ T68] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 352.556598][T13489] macsec0: entered promiscuous mode [ 352.561920][T13489] macvlan0: entered promiscuous mode [ 352.635382][T13489] macvlan0: left promiscuous mode [ 352.759888][T13498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1906'. [ 353.087682][T13517] vlan0: entered promiscuous mode [ 354.443351][T13563] __nla_validate_parse: 8 callbacks suppressed [ 354.443373][T13563] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1918'. [ 354.658831][T13580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1924'. [ 354.833510][T13585] vxcan4: entered promiscuous mode [ 355.314343][T13606] netlink: 'syz.0.1933': attribute type 3 has an invalid length. [ 355.322712][T13606] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1933'. [ 355.495598][T13614] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1933'. [ 355.844713][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1939'. [ 355.863456][T13635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1939'. [ 355.890077][T13636] netlink: 'syz.4.1941': attribute type 5 has an invalid length. [ 355.929833][T13594] C speed is unknown, defaulting to 1000 [ 356.199883][T13647] pim6reg: entered allmulticast mode [ 356.208373][T13647] pim6reg: left allmulticast mode [ 356.288263][T13653] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 356.570861][T13674] netlink: 'syz.1.1949': attribute type 2 has an invalid length. [ 356.583050][T13594] lo speed is unknown, defaulting to 1000 [ 356.614657][T13666] syzkaller1: entered promiscuous mode [ 356.620199][T13666] syzkaller1: entered allmulticast mode [ 356.694667][T13677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1951'. [ 357.621304][T13696] syzkaller1: entered promiscuous mode [ 357.627419][T13696] syzkaller1: entered allmulticast mode [ 357.680682][T13706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1959'. [ 357.742235][T13708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1959'. [ 358.111841][T13719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1962'. [ 358.423828][T13705] C speed is unknown, defaulting to 1000 [ 358.583611][T13740] can: request_module (can-proto-0) failed. [ 358.938999][T13705] lo speed is unknown, defaulting to 1000 [ 359.123599][T13767] netlink: 'syz.2.1976': attribute type 2 has an invalid length. [ 359.136933][T13767] netlink: 'syz.2.1976': attribute type 1 has an invalid length. [ 359.161166][T13768] netlink: 'syz.2.1976': attribute type 2 has an invalid length. [ 359.192298][T13768] netlink: 'syz.2.1976': attribute type 1 has an invalid length. [ 359.206315][ T5870] Bluetooth: hci4: command 0x0406 tx timeout [ 359.490939][T13777] __nla_validate_parse: 6 callbacks suppressed [ 359.490959][T13777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1980'. [ 359.658229][T13755] C speed is unknown, defaulting to 1000 [ 359.674405][T13788] netlink: 4168 bytes leftover after parsing attributes in process `syz.2.1979'. [ 359.688886][T13787] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1981'. [ 359.975939][T13755] lo speed is unknown, defaulting to 1000 [ 360.017667][T13758] C speed is unknown, defaulting to 1000 [ 360.879333][T13758] lo speed is unknown, defaulting to 1000 [ 361.260085][T13826] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1992'. [ 361.426258][T13831] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1994'. [ 361.485431][T13835] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1993'. [ 361.495411][T13829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1993'. [ 362.170418][T13843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1997'. [ 362.270764][T13846] tipc: Enabling of bearer rejected, failed to enable media [ 362.305340][T13838] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1995'. [ 362.347591][T13838] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1995'. [ 362.615092][T13837] C speed is unknown, defaulting to 1000 [ 363.402314][T13879] wg1: left allmulticast mode [ 363.408118][T13879] veth0_to_bond: left allmulticast mode [ 363.420580][T13879] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 363.430545][T13879] macvtap1: left allmulticast mode [ 363.438454][T13879] ip6gre1: left allmulticast mode [ 363.456573][T13879] macsec1: left allmulticast mode [ 363.536930][T13879] geneve3: left promiscuous mode [ 363.542014][T13879] geneve3: left allmulticast mode [ 363.560020][T13837] lo speed is unknown, defaulting to 1000 [ 363.588987][ T6802] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.616526][ T6802] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.655251][ T6802] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 363.729649][ T6802] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.741629][ T6802] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.751480][ T6802] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 363.779121][ T6802] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.802113][ T6802] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.826317][ T6802] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 363.903128][ T6802] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.929966][ T6802] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.970915][ T6802] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 364.294074][T13901] IPVS: length: 85 != 24 [ 364.734265][T13918] __nla_validate_parse: 5 callbacks suppressed [ 364.734288][T13918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2014'. [ 364.991777][T13924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2015'. [ 365.123292][T13915] syzkaller0: left promiscuous mode [ 365.128894][T13915] syzkaller0: left allmulticast mode [ 365.140631][T13914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2015'. [ 365.588049][T13937] tun0: tun_chr_ioctl cmd 1074025675 [ 365.593898][T13937] tun0: persist enabled [ 365.598607][T13937] tun0: tun_chr_ioctl cmd 1074025675 [ 365.604996][T13937] tun0: persist disabled [ 365.636232][T13941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2020'. [ 365.831644][T13922] C speed is unknown, defaulting to 1000 [ 366.143845][T13955] dvmrp8: entered allmulticast mode [ 366.213566][T13956] netlink: 'syz.1.2027': attribute type 23 has an invalid length. [ 366.294746][T13958] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2028'. [ 366.305333][T13958] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2028'. [ 366.378792][T13922] lo speed is unknown, defaulting to 1000 [ 366.578814][T13951] C speed is unknown, defaulting to 1000 [ 366.969010][T13978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2031'. [ 367.061784][T13979] veth9: entered promiscuous mode [ 367.073279][T13954] dvmrp8: left allmulticast mode [ 367.129377][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.138327][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.196065][T13955] C speed is unknown, defaulting to 1000 [ 367.280440][T13985] syzkaller1: entered promiscuous mode [ 367.287004][T13985] syzkaller1: entered allmulticast mode [ 367.430014][T13951] lo speed is unknown, defaulting to 1000 [ 367.510006][T13955] lo speed is unknown, defaulting to 1000 [ 367.831052][T13995] netlink: 'syz.2.2036': attribute type 1 has an invalid length. [ 367.844607][T13995] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.2036'. [ 368.077534][T14009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2039'. [ 368.318037][T14015] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2040'. [ 368.469728][T10434] IPVS: starting estimator thread 0... [ 368.481094][T14016] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 368.588109][T14018] IPVS: using max 25 ests per chain, 60000 per kthread [ 369.059610][T14035] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 369.219502][T14045] netlink: 'syz.0.2047': attribute type 5 has an invalid length. [ 369.228136][T14045] netlink: 'syz.0.2047': attribute type 8 has an invalid length. [ 369.453271][T14043] C speed is unknown, defaulting to 1000 [ 369.736599][T14043] lo speed is unknown, defaulting to 1000 [ 370.226378][T14073] __nla_validate_parse: 6 callbacks suppressed [ 370.226400][T14073] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2055'. [ 370.577418][T14091] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2058'. [ 370.737345][T14094] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2061'. [ 370.979151][T14101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2062'. [ 371.020749][T14102] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 371.494268][T14128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2068'. [ 371.618770][T14131] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2069'. [ 371.980816][T14143] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2072'. [ 372.007209][T14143] ..0·: renamed from hsr0 [ 372.104882][T14143] tipc: Disabling bearer [ 372.116291][T14143] ..0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 372.127444][T14143] ..0·: entered allmulticast mode [ 372.155672][T14143] hsr_slave_0: entered allmulticast mode [ 372.166011][T14143] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 372.396999][T14148] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2073'. [ 372.428072][T14148] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2073'. [ 373.098086][T14118] lo speed is unknown, defaulting to 1000 [ 373.245497][T14178] syzkaller1: entered promiscuous mode [ 373.252972][T14178] syzkaller1: entered allmulticast mode [ 373.575909][T14178] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2078'. [ 373.663491][T14189] netlink: 'syz.0.2080': attribute type 5 has an invalid length. [ 374.213381][T14191] lo speed is unknown, defaulting to 1000 [ 374.338389][T14203] warn_alloc: 1 callbacks suppressed [ 374.338408][T14203] syz.2.2084: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 374.407059][T14203] CPU: 0 UID: 0 PID: 14203 Comm: syz.2.2084 Not tainted syzkaller #0 PREEMPT(full) [ 374.407091][T14203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 374.407110][T14203] Call Trace: [ 374.407121][T14203] [ 374.407130][T14203] dump_stack_lvl+0x189/0x250 [ 374.407159][T14203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.407179][T14203] ? __pfx__printk+0x10/0x10 [ 374.407203][T14203] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 374.407222][T14203] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 374.407243][T14203] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 374.407264][T14203] warn_alloc+0x214/0x310 [ 374.407295][T14203] ? __pfx_warn_alloc+0x10/0x10 [ 374.407328][T14203] ? __get_vm_area_node+0x28f/0x300 [ 374.407352][T14203] ? xskq_create+0xbf/0x170 [ 374.407372][T14203] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 374.407424][T14203] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 374.407454][T14203] ? __kasan_kmalloc+0x93/0xb0 [ 374.407479][T14203] vmalloc_user_noprof+0xad/0xf0 [ 374.407503][T14203] ? xskq_create+0xbf/0x170 [ 374.407521][T14203] xskq_create+0xbf/0x170 [ 374.407542][T14203] xsk_init_queue+0xb0/0x110 [ 374.407566][T14203] xsk_setsockopt+0x57b/0x8d0 [ 374.407596][T14203] ? __pfx_xsk_setsockopt+0x10/0x10 [ 374.407622][T14203] ? __pfx_aa_sk_perm+0x10/0x10 [ 374.407651][T14203] ? __fget_files+0x2a/0x420 [ 374.407674][T14203] ? aa_sock_opt_perm+0xff/0x1b0 [ 374.407693][T14203] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 374.407710][T14203] ? __pfx_xsk_setsockopt+0x10/0x10 [ 374.407738][T14203] do_sock_setsockopt+0x179/0x1b0 [ 374.407765][T14203] __x64_sys_setsockopt+0x13f/0x1b0 [ 374.407793][T14203] do_syscall_64+0xfa/0x3b0 [ 374.407813][T14203] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.407833][T14203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.407850][T14203] ? clear_bhb_loop+0x60/0xb0 [ 374.407871][T14203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.407887][T14203] RIP: 0033:0x7f655c58eec9 [ 374.407903][T14203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.407918][T14203] RSP: 002b:00007f655d495038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 374.407937][T14203] RAX: ffffffffffffffda RBX: 00007f655c7e6090 RCX: 00007f655c58eec9 [ 374.407950][T14203] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000006 [ 374.407961][T14203] RBP: 00007f655c611f91 R08: 0000000000000004 R09: 0000000000000000 [ 374.407971][T14203] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 374.407982][T14203] R13: 00007f655c7e6128 R14: 00007f655c7e6090 R15: 00007ffcbb87fd98 [ 374.408010][T14203] [ 374.408025][T14203] Mem-Info: [ 374.726216][T14203] active_anon:5744 inactive_anon:0 isolated_anon:0 [ 374.726216][T14203] active_file:3350 inactive_file:40016 isolated_file:0 [ 374.726216][T14203] unevictable:768 dirty:155 writeback:0 [ 374.726216][T14203] slab_reclaimable:12543 slab_unreclaimable:143991 [ 374.726216][T14203] mapped:30200 shmem:1405 pagetables:1000 [ 374.726216][T14203] sec_pagetables:0 bounce:0 [ 374.726216][T14203] kernel_misc_reclaimable:0 [ 374.726216][T14203] free:1276146 free_pcp:16922 free_cma:0 [ 374.833001][T14203] Node 0 active_anon:22976kB inactive_anon:0kB active_file:13400kB inactive_file:159864kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125000kB dirty:620kB writeback:0kB shmem:4084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13260kB pagetables:3808kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 374.857036][T14214] bond0: entered promiscuous mode [ 374.894821][T14214] bond0: entered allmulticast mode [ 374.900462][T14214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.913481][T14203] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 374.960040][T14203] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 375.031761][T14203] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 375.048276][T14203] Node 0 DMA32 free:1203092kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23020kB inactive_anon:0kB active_file:13400kB inactive_file:158052kB unevictable:1536kB writepending:620kB present:3129332kB managed:2559852kB mlocked:0kB bounce:0kB free_pcp:49288kB local_pcp:30768kB free_cma:0kB [ 375.090509][T14203] lowmem_reserve[]: 0 0 1 1 1 [ 375.098850][T14203] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1812kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 375.129886][T14203] lowmem_reserve[]: 0 0 0 0 0 [ 375.150779][T14203] Node 1 Normal free:3890204kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15080kB local_pcp:2852kB free_cma:0kB [ 375.159442][T14231] netlink: 'syz.3.2089': attribute type 1 has an invalid length. [ 375.226639][T14203] lowmem_reserve[]: 0 0 0 0 0 [ 375.231458][T14203] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 375.245461][T14203] Node 0 DMA32: 3043*4kB (UME) 1433*8kB (UM) 263*16kB (UME) 1013*32kB (UME) 411*64kB (UME) 95*128kB (UME) 36*256kB (UME) 7*512kB (UM) 4*1024kB (UE) 3*2048kB (U) 264*4096kB (UM) = 1203108kB [ 375.265158][T14203] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 375.287988][T14203] Node 1 Normal: 191*4kB (UME) 52*8kB (UME) 40*16kB (UME) 154*32kB (UME) 49*64kB (UME) 7*128kB (UME) 2*256kB (M) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3890204kB [ 375.316198][T14203] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 375.326673][T14203] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 375.336597][T14203] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 375.354014][T14203] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 375.364633][T14203] 44724 total pagecache pages [ 375.369468][T14203] 0 pages in swap cache [ 375.374219][T14203] Free swap = 124996kB [ 375.378657][T14203] Total swap = 124996kB [ 375.383539][T14203] 2097051 pages RAM [ 375.387455][T14203] 0 pages HighMem/MovableOnly [ 375.415296][T14203] 424998 pages reserved [ 375.425134][T14231] 8021q: adding VLAN 0 to HW filter on device bond7 [ 375.435168][T14203] 0 pages cma reserved [ 375.835997][T14252] __nla_validate_parse: 5 callbacks suppressed [ 375.836019][T14252] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2096'. [ 376.429928][T14282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2103'. [ 376.449444][T14283] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2103'. [ 376.551048][T14285] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2104'. [ 376.773265][T14295] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2106'. [ 376.806281][T14295] 0ªX¹¦À: renamed from caif0 [ 376.880598][T14295] 0ªX¹¦À: entered allmulticast mode [ 376.896742][T14295] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 377.552923][T14336] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2118'. [ 377.720025][T14344] sctp: [Deprecated]: syz.3.2120 (pid 14344) Use of int in max_burst socket option. [ 377.720025][T14344] Use struct sctp_assoc_value instead [ 377.950863][T14357] openvswitch: netlink: Missing valid actions attribute. [ 377.999723][T14357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.044455][T14362] pim6reg99999999: entered allmulticast mode [ 378.057853][T14353] syzkaller1: entered promiscuous mode [ 378.075379][T14353] syzkaller1: entered allmulticast mode [ 378.176474][T14368] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 378.355241][T14368] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 378.425088][T14379] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2130'. [ 379.872070][T14368] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 379.882312][T14368] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 379.897502][T14390] lo: entered promiscuous mode [ 379.923158][T14390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.043507][T14398] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2134'. [ 380.063623][T14398] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2134'. [ 380.074689][T14398] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2134'. [ 380.603978][T14382] lo speed is unknown, defaulting to 1000 [ 381.163051][T14457] __nla_validate_parse: 2 callbacks suppressed [ 381.163074][T14457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2150'. [ 381.210159][T14457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2150'. [ 381.454993][T14387] lo speed is unknown, defaulting to 1000 [ 381.567400][T14471] sctp: [Deprecated]: syz.3.2154 (pid 14471) Use of int in maxseg socket option. [ 381.567400][T14471] Use struct sctp_assoc_value instead [ 381.763339][T14482] netlink: 'syz.3.2157': attribute type 1 has an invalid length. [ 381.791175][T14482] netlink: 'syz.3.2157': attribute type 1 has an invalid length. [ 381.811549][T14482] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2157'. [ 382.404467][T14474] lo speed is unknown, defaulting to 1000 [ 382.772905][T14533] tipc: Enabling of bearer rejected, already enabled [ 383.396036][T14560] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2174'. [ 383.523723][T14555] bridge2: entered allmulticast mode [ 384.089303][T14584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2178'. [ 384.171386][T14584] bond8 (unregistering): Released all slaves [ 384.265649][T14591] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2183'. [ 384.370843][T14597] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2181'. [ 384.698521][T14595] lo speed is unknown, defaulting to 1000 [ 384.774275][T14614] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2186'. [ 384.801432][T14614] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2186'. [ 385.324619][T14623] ip6gretap2: entered promiscuous mode [ 385.330279][T14623] ip6gretap2: entered allmulticast mode [ 385.703158][T14642] dvmrp0: entered allmulticast mode [ 386.157539][T14654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2195'. [ 386.330456][T14657] netlink: 'syz.1.2196': attribute type 6 has an invalid length. [ 386.389033][T14660] team0 (unregistering): Port device team_slave_0 removed [ 386.408945][T14660] team0 (unregistering): Port device team_slave_1 removed [ 386.794103][T14682] netlink: 'syz.3.2202': attribute type 12 has an invalid length. [ 386.869097][T14684] netlink: 'syz.2.2203': attribute type 18 has an invalid length. [ 386.892933][T14679] __nla_validate_parse: 1 callbacks suppressed [ 386.892957][T14679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2202'. [ 386.910871][T14684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2203'. [ 386.936456][T14684] netlink: 'syz.2.2203': attribute type 18 has an invalid length. [ 386.947616][T14679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2202'. [ 386.964830][T14684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2203'. [ 387.021931][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.049514][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.102752][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.158487][ T6800] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.287487][T14690] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2205'. [ 387.553942][T14701] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.2209'. [ 387.573891][T14680] lo speed is unknown, defaulting to 1000 [ 387.594255][T14702] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.2209'. [ 387.751866][T14704] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2210'. [ 387.775730][T14704] netlink: 276 bytes leftover after parsing attributes in process `syz.2.2210'. [ 388.123119][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2215'. [ 388.165080][T14729] netlink: 'syz.3.2214': attribute type 1 has an invalid length. [ 388.761087][T14743] netlink: 'syz.2.2220': attribute type 1 has an invalid length. [ 389.669402][T14793] netlink: 'syz.0.2234': attribute type 1 has an invalid length. [ 390.254726][T14785] lo speed is unknown, defaulting to 1000 [ 390.361806][T14827] xt_l2tp: missing protocol rule (udp|l2tpip) [ 390.365646][T14825] IPv6: NLM_F_CREATE should be specified when creating new route [ 390.769302][T14842] tipc: Enabled bearer , priority 0 [ 390.777283][T14842] syzkaller0: entered promiscuous mode [ 390.783691][T14842] syzkaller0: entered allmulticast mode [ 390.849462][T14847] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 391.016617][T14841] tipc: Resetting bearer [ 391.094425][T14841] tipc: Disabling bearer [ 391.131083][T14840] netlink: 'syz.1.2248': attribute type 1 has an invalid length. [ 391.139523][T14840] netlink: 'syz.1.2248': attribute type 4 has an invalid length. [ 391.149274][T14840] netlink: 'syz.1.2248': attribute type 1 has an invalid length. [ 391.157375][T14840] netlink: 'syz.1.2248': attribute type 4 has an invalid length. [ 391.247934][T14807] lo speed is unknown, defaulting to 1000 [ 392.178232][T14881] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 392.210607][T14881] __nla_validate_parse: 13 callbacks suppressed [ 392.210629][T14881] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2260'. [ 392.273294][T14885] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2261'. [ 392.838163][T14907] ip6tnl2: entered promiscuous mode [ 392.846530][T14907] ip6tnl2: entered allmulticast mode [ 393.140368][T14921] pim6reg: entered allmulticast mode [ 393.167283][T14922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2269'. [ 393.217865][T14924] pim6reg: left allmulticast mode [ 393.543602][T14933] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2270'. [ 393.554097][T14933] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2270'. [ 393.563523][T14933] validate_nla: 1 callbacks suppressed [ 393.563542][T14933] netlink: 'syz.0.2270': attribute type 5 has an invalid length. [ 393.665334][T14933] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2270'. [ 394.031183][T14951] netlink: 'syz.4.2277': attribute type 1 has an invalid length. [ 394.056694][T14951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2277'. [ 394.088267][ T5876] IPVS: starting estimator thread 0... [ 394.182939][T14952] IPVS: using max 26 ests per chain, 62400 per kthread [ 394.407124][T14947] lo speed is unknown, defaulting to 1000 [ 395.076792][T14977] syzkaller1: entered promiscuous mode [ 395.127477][T14977] syzkaller1: entered allmulticast mode [ 395.587470][T14994] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2292'. [ 395.665673][T14974] lo speed is unknown, defaulting to 1000 [ 396.727972][T15005] lo speed is unknown, defaulting to 1000 [ 396.790584][T15022] syzkaller0: entered promiscuous mode [ 396.806481][T15022] syzkaller0: entered allmulticast mode [ 396.874972][T15025] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2302'. [ 397.390657][T15035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2305'. [ 397.400260][T15035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2305'. [ 397.422102][T15022] lo speed is unknown, defaulting to 1000 [ 398.113865][T15029] lo speed is unknown, defaulting to 1000 [ 398.209546][T15057] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2311'. [ 398.237909][T15057] netlink: 'syz.3.2311': attribute type 1 has an invalid length. [ 399.146079][T15075] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2318'. [ 399.169598][T15077] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2319'. [ 399.178888][T15075] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2318'. [ 399.190983][T15075] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2318'. [ 399.194460][T15077] netlink: 'syz.1.2319': attribute type 3 has an invalid length. [ 399.234964][T15078] netlink: 'syz.1.2319': attribute type 3 has an invalid length. [ 399.752896][T15095] netlink: 'syz.1.2323': attribute type 1 has an invalid length. [ 399.874640][T15107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2327'. [ 399.904852][T15107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2327'. [ 399.931513][T15107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2327'. [ 399.971227][T15107] tipc: Resetting bearer [ 400.274149][T15118] Bluetooth: MGMT ver 1.23 [ 400.299996][T15118] geneve4: entered promiscuous mode [ 400.321944][ T6798] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.353071][ T6798] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.381967][ T6798] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.412947][ T6798] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.075795][T15125] lo speed is unknown, defaulting to 1000 [ 402.175946][T15167] netlink: 'syz.4.2343': attribute type 9 has an invalid length. [ 402.385943][T15174] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 402.406731][T10434] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 402.862816][T10434] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 402.993455][T15204] sctp: [Deprecated]: syz.3.2352 (pid 15204) Use of struct sctp_assoc_value in delayed_ack socket option. [ 402.993455][T15204] Use struct sctp_sack_info instead [ 403.008190][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 403.033143][T15208] __nla_validate_parse: 4 callbacks suppressed [ 403.033164][T15208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2354'. [ 403.331337][T15229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2360'. [ 403.576422][T15236] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2362'. [ 403.616393][T15238] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2362'. [ 403.636949][T15236] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2362'. [ 403.668467][T15238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2362'. [ 403.694535][T15187] lo speed is unknown, defaulting to 1000 [ 403.899362][T15245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2347'. [ 404.159094][ T6800] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 404.177243][ T6800] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 404.325125][T15259] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2368'. [ 404.563206][T15221] lo speed is unknown, defaulting to 1000 [ 404.609831][ T5986] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 405.125990][T15283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2374'. [ 405.143028][T15283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2374'. [ 405.678554][T15303] netlink: 'syz.4.2380': attribute type 39 has an invalid length. [ 405.742908][T15309] netlink: 'syz.4.2380': attribute type 5 has an invalid length. [ 405.791065][T15309] vlan2: entered allmulticast mode [ 406.098809][T15333] tipc: New replicast peer: 255.255.255.255 [ 406.113415][T15333] tipc: Enabled bearer , priority 10 [ 406.317607][T15342] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 406.490701][T15350] tipc: Enabled bearer , priority 0 [ 406.511168][T15346] syzkaller0: entered promiscuous mode [ 406.520474][T15346] syzkaller0: entered allmulticast mode [ 406.531058][T15332] Set syz1 is full, maxelem 6117 reached [ 406.594336][T15346] tipc: Resetting bearer [ 406.619720][T15345] tipc: Resetting bearer [ 406.655547][T15345] tipc: Disabling bearer [ 406.807797][T15357] syzkaller0: entered promiscuous mode [ 406.825466][T15357] syzkaller0: entered allmulticast mode [ 407.200666][T15382] netlink: 'syz.0.2400': attribute type 1 has an invalid length. [ 407.209842][T15380] netlink: 'syz.0.2400': attribute type 1 has an invalid length. [ 408.008696][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 415.847093][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 431.209021][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 452.910687][ T5182] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 452.961560][ T5182] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 453.131391][ T5182] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 453.450095][ T5182] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 453.841378][ T5182] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 456.329845][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 456.621606][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 457.079574][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 457.141162][ T51] Bluetooth: hci5: command tx timeout [ 457.561460][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 457.841778][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 459.246899][ T5182] Bluetooth: hci5: command tx timeout [ 460.741701][ T51] Bluetooth: hci6: command tx timeout [ 460.991974][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 461.112000][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 461.251532][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 461.301686][ T51] Bluetooth: hci5: command tx timeout [ 461.649715][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 461.926378][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 462.130733][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 462.830047][ T5182] Bluetooth: hci6: command tx timeout [ 463.379788][ T51] Bluetooth: hci5: command tx timeout [ 464.891728][ T51] Bluetooth: hci6: command tx timeout [ 464.969866][ T51] Bluetooth: hci7: command tx timeout [ 466.981331][ T51] Bluetooth: hci6: command tx timeout [ 467.071133][ T51] Bluetooth: hci7: command tx timeout [ 469.140408][ T51] Bluetooth: hci7: command tx timeout [ 470.481818][ T5182] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 470.581736][ T5182] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 470.871643][ T5182] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 471.230039][ T5182] Bluetooth: hci7: command tx timeout [ 471.431380][ T5182] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 471.911764][ T5182] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 473.091389][ T5182] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 473.260391][ T5182] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 473.371487][ T5182] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 474.451692][ T5182] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 474.901324][ T5182] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 475.131530][ T5182] Bluetooth: hci0: command tx timeout [ 477.211742][ T51] Bluetooth: hci0: command tx timeout [ 478.260776][ T51] Bluetooth: hci8: command tx timeout [ 479.326702][ T51] Bluetooth: hci0: command tx timeout [ 480.341516][ T51] Bluetooth: hci8: command tx timeout [ 481.371270][ T51] Bluetooth: hci0: command tx timeout [ 482.417573][ T51] Bluetooth: hci8: command tx timeout [ 484.500616][ T51] Bluetooth: hci8: command tx timeout [ 517.661726][ T5182] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 518.029982][ T5182] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 518.699607][ T5182] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 519.431149][ T5182] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 519.755508][ T5182] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 521.322098][ T51] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 521.541670][ T51] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 521.861837][ T51] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 522.089870][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 522.270858][ T51] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 522.991018][ T51] Bluetooth: hci9: command tx timeout [ 523.011905][ T5868] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 525.060791][ T5868] Bluetooth: hci9: command tx timeout [ 525.330640][ T5182] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 525.400865][ T5182] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 525.590555][ T5182] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 526.071699][ T5182] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 526.090375][ T5182] Bluetooth: hci10: command tx timeout [ 526.480234][ T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 527.131870][ T5868] Bluetooth: hci9: command tx timeout [ 528.171547][ T51] Bluetooth: hci10: command tx timeout [ 529.259950][ T51] Bluetooth: hci9: command tx timeout [ 529.460685][ T51] Bluetooth: hci11: command tx timeout [ 530.252071][ T5868] Bluetooth: hci10: command tx timeout [ 530.580177][ T5868] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 530.899695][ T5868] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 531.240145][ T5868] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 531.541638][ T5868] Bluetooth: hci11: command tx timeout [ 532.251519][ T5868] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 532.345273][ T5868] Bluetooth: hci10: command tx timeout [ 533.149891][ T5868] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 533.621483][ T51] Bluetooth: hci11: command tx timeout [ 534.928558][ T51] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 535.091272][ T51] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 535.201725][ T51] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 535.701365][ T51] Bluetooth: hci11: command tx timeout [ 535.846491][ T51] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 536.191004][ T51] Bluetooth: hci12: command tx timeout [ 536.511401][ T51] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 538.250288][ T5868] Bluetooth: hci12: command tx timeout [ 539.296347][ T5868] Bluetooth: hci13: command tx timeout [ 540.340765][ T5868] Bluetooth: hci12: command tx timeout [ 541.380918][ T5868] Bluetooth: hci13: command tx timeout [ 542.430452][ T5868] Bluetooth: hci12: command tx timeout [ 543.470142][ T5868] Bluetooth: hci13: command tx timeout [ 545.540386][ T5868] Bluetooth: hci13: command tx timeout [ 553.511242][ T31] INFO: task kworker/u8:2:36 blocked for more than 143 seconds. [ 553.659952][ T31] Not tainted syzkaller #0 [ 553.759385][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 554.019159][ T31] task:kworker/u8:2 state:D stack:22152 pid:36 tgid:36 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 554.289937][ T31] Workqueue: events_unbound linkwatch_event [ 554.500798][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 554.739468][ T31] [ 554.810073][ T31] __schedule+0x1798/0x4cc0 [ 554.910235][ T31] ? __lock_acquire+0xab9/0xd20 [ 555.029384][ T31] ? __lock_acquire+0xab9/0xd20 [ 555.121854][ T31] ? __pfx___schedule+0x10/0x10 [ 555.351460][ T31] ? schedule+0x91/0x360 [ 555.559248][ T31] schedule+0x165/0x360 [ 555.699926][ T31] schedule_preempt_disabled+0x13/0x30 [ 555.831074][ T31] __mutex_lock+0x7e6/0x1350 [ 556.040534][ T31] ? look_up_lock_class+0x74/0x170 [ 556.119415][ T31] ? __mutex_lock+0x5bb/0x1350 [ 556.199455][ T31] ? linkwatch_event+0xe/0x60 [ 556.391017][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 556.550008][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 556.680472][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 556.899969][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 557.070754][ T31] linkwatch_event+0xe/0x60 [ 557.180135][ T31] process_scheduled_works+0xae1/0x17b0 [ 557.300793][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 557.420529][ T31] worker_thread+0x8a0/0xda0 [ 557.651313][ T31] kthread+0x70e/0x8a0 [ 557.861457][ T31] ? __pfx_worker_thread+0x10/0x10 [ 557.979295][ T31] ? __pfx_kthread+0x10/0x10 [ 558.191403][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 558.410378][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 558.551915][ T31] ? __pfx_kthread+0x10/0x10 [ 558.711230][ T31] ret_from_fork+0x439/0x7d0 [ 558.891431][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 558.989496][ T31] ? __switch_to_asm+0x39/0x70 [ 559.120202][ T31] ? __switch_to_asm+0x33/0x70 [ 559.319538][ T31] ? __pfx_kthread+0x10/0x10 [ 559.530538][ T31] ret_from_fork_asm+0x1a/0x30 [ 559.651627][ T31] [ 559.721288][ T31] INFO: task syz.2.2398:15377 blocked for more than 149 seconds. [ 559.900657][ T31] Not tainted syzkaller #0 [ 560.159942][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 560.561254][ T31] task:syz.2.2398 state:D stack:27496 pid:15377 tgid:15374 ppid:5863 task_flags:0x400140 flags:0x00004004 [ 560.871514][ T31] Call Trace: [ 561.029459][ T31] [ 561.228978][ T31] __schedule+0x1798/0x4cc0 [ 561.390489][ T31] ? __lock_acquire+0xab9/0xd20 [ 561.479786][ T31] ? __lock_acquire+0xab9/0xd20 [ 561.581755][ T31] ? __pfx___schedule+0x10/0x10 [ 561.710542][ T31] ? schedule+0x91/0x360 [ 561.940819][ T31] schedule+0x165/0x360 [ 562.131116][ T31] schedule_preempt_disabled+0x13/0x30 [ 562.249821][ T31] __mutex_lock+0x7e6/0x1350 [ 562.331973][ T31] ? __mutex_lock+0x5bb/0x1350 [ 562.420399][ T31] ? nl80211_pre_doit+0x5f/0x930 [ 562.540126][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 562.702012][ T31] ? __nla_parse+0x40/0x60 [ 563.060438][ T31] nl80211_pre_doit+0x5f/0x930 [ 563.291374][ T31] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 563.500839][ T31] genl_family_rcv_msg_doit+0x1be/0x300