last executing test programs: 5.209368405s ago: executing program 2 (id=970): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 5.00671164s ago: executing program 2 (id=972): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d100000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', 0x0}) syz_open_procfs$namespace(0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x25, 0x0, 0x2}, {0x6, 0x2, 0x9, 0xfffffff7}, {0x4, 0x9, 0x1, 0x3}, {0x6, 0x2, 0x4, 0x5e}]}, 0x10) r3 = accept$alg(r1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x7fff}], 0x1, 0x2101, 0x0) unshare(0x6a040000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) 2.724012923s ago: executing program 3 (id=977): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_batadv\x00'}) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0xb4, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x110, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "67797606fc5b7849b94861b82da112393422112256ac505b054ea8a927d38e539fe959f9ff79b74048f6b253ccde4b2ae38a12744a435e4c919ea9461a498b44dfb2d93a22521b628962150357808871b546b398e66833c397e8fd7b2fd01d46e7d3d5664c14c766571142f0a0fef40ed233574d05bc3ecd59d9532708a78d2d022a66021d2622dcd7ebb453453b0539a3aa3e29a6f132cda1529d0dd0bc030aca421dcf0907ce2bddf06ac96ba62a4c386dc147cd14d920ab719aaf8f2a41a381429b368503b6ed5fda2395d35c004289aa3a5c8bc07c4c16ff870690020c08e5a579b7d2e2f405e1ea0227e92d18a13d9d4f7006d41f1e512d4f4a0e770e54"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x9}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x51}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async, rerun: 32) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r5, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000100039042bbd5a002500000000000000", @ANYRES16=r1, @ANYRESDEC=r4], 0x54}}, 0x0) (rerun: 32) 2.581227199s ago: executing program 4 (id=978): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1258}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x2}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x80000000}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffff8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x8044) 2.558412436s ago: executing program 3 (id=979): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r6) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000008c0)=0x400002) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x48, 0x7, 0x29, 0xa}, {0x6, 0x8}]}) write(r8, &(0x7f0000000280)="4791", 0x2) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000010000000000000420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f647200cd73000000000500870000000000"], 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bcfeffff", @ANYRES16=r7, @ANYBLOB="00012cbd7000fbdbdf01007063690011000200303030303a30303a31302e30000000000800030003000000080001007063690011000200303030303a30303a31302e300000000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000080001007063690011000200303030303a30303a31302e30000000000800030003000000"], 0xa8}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r9, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000480)="b8512f152dff204b0e85712f044bed2ee46c3f31ad47bf14daa2d92c5d0ab90860b56b6176985488418ac3ae85cadb0c48d0f9c1eb664589ddbda94f68ffb8cbb02b2f1e123406d6d65ff36116d90790bf86d888f034c9cb1eee0961ded8bfc7bfab6013ef9ff9e77cd489e2ee74cc0df726f921787a732685607015f5d94e42a2dcd92033ffb3abb517f1b429793280e169f46557579ab2c097ed3c37812e507d150f63c07549a0d9f129e05e9aae051ce3b79715bc2f190909e92cbefbc7f6355010fbf8343e76f394fedb49938219f686413e072e0be69a8e14866e20434f1ba443fa", 0xe4}, {&(0x7f0000000380)="37b6", 0x2}, {&(0x7f00000005c0)="c33342023e5a48df4571a17335614e392d8ecc205c03ec817d2dcc6c58c12cfdc7faea06f0e8ea44ff016612e12ea8d70c083bf26f3298590f7f8d0179cfb434c62941712126213662ea1b5265be7a1ef78ec049bdecac913e5f539a56cde08783fcab593d8645605619f2445af3aabc05cc2228f92ff13b27790e2ccf33389715644b278b5283cb793ef797f193966211abcdb64f318c8d29b706b240135cc3dd61f76d44565b3a4c04f9df9b803d460e9ea7a57dda4369e5974bd10901bc0fb7d4c08b1963795df56a7c01c995de0b8d1bc5cdd84127", 0xd7}, {&(0x7f00000006c0)="31cc9bff94566fde3a61c483760d19", 0x2c}, {&(0x7f0000000700)="ca12c8f2b993de028581f9ccb9e6ecea15721f2bb00493c5463c45853d3ed68e665cc060b0be74ef7acd25601e0e7da4c5a9d0e866eebc33cd2309e6f3ebb11d7105c68fc18bef725cb1f1cd2c313ff14e7f9b26c4c298e659f10a0454b5d4752b51c1b115afba80cdd30b8b", 0x6c}], 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="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"]}}], 0x2, 0xe2d70fdd83f5da5c) 2.35454562s ago: executing program 4 (id=980): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000018"], 0x30, 0x20008000}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r2, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendmmsg$inet6(r3, &(0x7f0000009c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40840) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000140)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x41448000) r5 = socket$inet(0xa, 0x801, 0xa4) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = socket(0xa, 0x3, 0x3d) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000780)={{0xa, 0x0, 0xaf, @loopback, 0x809}, {0xa, 0x8, 0x0, @empty, 0xfffffffe}, 0xffffffffffffffff, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) r7 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0xffff7fff}, &(0x7f0000000340)=0x8) mmap(&(0x7f0000214000/0x1000)=nil, 0x1000, 0x0, 0x3032, r4, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x23, &(0x7f0000000100)=0x7, 0x4) setsockopt$sock_attach_bpf(r8, 0x1, 0x10, &(0x7f00000003c0), 0x4) write$cgroup_devices(r9, &(0x7f0000000200)=ANY=[], 0x9) recvmsg$unix(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) 1.881213527s ago: executing program 2 (id=981): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) 1.87978886s ago: executing program 0 (id=982): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000e0000002000000000000000000000300000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd7000003500000a000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 1.854501099s ago: executing program 2 (id=983): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0xe, 0x0, 0x0, &(0x7f0000000100)={0x3ff, 0xee, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r5 = socket(0x2c, 0x2, 0xfffffffd) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0x1f}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e1e, 0x23, @loopback, 0x23}, 0x1c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r7 = socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x10, 0x3, 0x10) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x10000000368}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 1.790636562s ago: executing program 0 (id=984): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0x17, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110080314c91ecd1d1a9c124ed0cde2e5e53bd2fbfdbf7b8f4cd97bece1a23def0195b47072d394988356d78c6819088cc958da945cd5e43e3df94ec8c722817f8beb242d93dab99899ba30072baeda8db12a600128159bfb273dfd78f64da945c2b3e28b6bf4d4d96664e1919ae73a63ab73a5dfb0c9635383f25de4b4e3a1d2198daf4eb0d450116db4df5f547c240830000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9af8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005d93000000000000b50302000000000085000000b8000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}], 0x2, 0x0, 0x0, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000041000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r1, @ANYBLOB="080004"], 0x4c}}, 0x0) 1.716703125s ago: executing program 0 (id=986): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000240)="3f6dc38a8d4e715114c3888479ec", 0xe, 0x8040, &(0x7f0000000180)={0x11, 0x1a, r3, 0x1, 0xa2}, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x5, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008800}, 0x80) 1.653321061s ago: executing program 0 (id=987): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3, 0x0, 0x2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="260000001200010a"], 0x26}}, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000001900)={{}, "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"}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000800000000000000000000711033000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r4, 0x325, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x5f}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x1b8, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaac}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xffffff57, @private0, 0x10001}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3d1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @mcast2, 0xb}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}}}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x460f15c12647ed11}, 0x40) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3, 0x0, 0x2}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="260000001200010a"], 0x26}}, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') (async) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000001900)={{}, "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"}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000800000000000000000000711033000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r4, 0x325, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x5f}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x1b8, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaac}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xffffff57, @private0, 0x10001}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3d1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @mcast2, 0xb}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}}}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x460f15c12647ed11}, 0x40) (async) 1.556215263s ago: executing program 3 (id=988): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x341000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001aa00"/24], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="07011b00000074390000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000030200"/24], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vlan0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000202010400000000000000000a0000003c0002800c00028005000100000000002c00018014000300fe8000000000000000000000000000001400040000000000000000000000004000000001"], 0x50}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'syzkaller0\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000200)={'pim6reg0\x00', {0x2, 0x4e20, @broadcast}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="00040000000000000a004e220000000720010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000030000000a004e2000000008ff0200000000000000000000000000010500000000000000000000000000000000000000bbdd000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e240000000920010000000000000000000000000002abbc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e21000000052001000000000000000000000000000008000000000000000000000000000000000000000000000000000000dd00"/528], 0x210) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r5], 0x20}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 1.421347275s ago: executing program 0 (id=989): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x9}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x1, 0x8}, 0xc) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = socket(0x11, 0x3, 0x0) sendmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e388a8", 0xe}], 0x1}}], 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$inet(r3, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) getsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, &(0x7f0000000280), &(0x7f0000000340)=0x4) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000)=r6, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09047e3f9d5071f601d4020000070900020073797a32000000000900010073797a300000000028000480240001800b00010065787468647200f81300028008000640"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x14, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x0, 0x6, 0x0, 0x1, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0xcc0d, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='syzkaller\x00', 0x1, 0x0, 0x0, 0xd66d6fdbaa97f132, 0x2, '\x00', 0x0, 0x0, r6}, 0x94) 1.297702199s ago: executing program 3 (id=991): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000001080)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000180)=@pppol2tpv3={0x1e, 0x4, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x3, 0x0, 0x0, 0x2}}, 0x80, 0x0}}], 0x2, 0x24040010) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x84, 0x3, 0x7, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x32c077f7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x20004081) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.bfq.io_queued\x00', 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/121, 0x79}], 0x1, 0x0, 0x0) 1.229139068s ago: executing program 4 (id=992): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x2}, {0x2}]}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000240)=""/220, 0x40, 0xdc, 0xa}, 0x20) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000400006574683a73797a6b616c6c657230"], 0x38}}, 0x80) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x8a, &(0x7f0000000000)={@broadcast, @multicast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x2, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffff9, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xba, 0x4, 0x9, 0x8, 0x8, 0x8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x34, r9, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x8, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1b, 0x7ff, 0x6}}}}]}, 0x48}}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="00000100"}) 1.21733896s ago: executing program 1 (id=993): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @empty, @remote}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000a00)=@deltclass={0xd54, 0x29, 0x2, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x10, 0xa}, {0xc, 0x1}, {0xffff, 0x10}}, [@c_cbq={{0x8}, {0x83c, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x6, 0xffff}, 0x0, 0x7ff}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x0, 0x4, 0x80, 0x0, 0x7, 0x8}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0xa33, 0x8, 0x6, 0x3cc, 0xad, 0x1, 0x2, 0x9, 0x8, 0x4, 0x40, 0x82, 0x5, 0x9, 0x2b5, 0xfffffffb, 0x9, 0x6, 0x6, 0x4000, 0xffffffff, 0x4, 0x8, 0x2, 0x7, 0x0, 0x5, 0x974c, 0x6, 0x2, 0xe, 0x1, 0x9, 0x2, 0x401, 0xffff, 0x8001, 0x4b, 0x8, 0x26, 0x400, 0x7, 0x100, 0x4, 0x8, 0x0, 0x1, 0x1, 0x8, 0xa, 0x800, 0x1, 0x0, 0x80, 0x565, 0x3, 0xe, 0x3, 0x8, 0x9, 0x2, 0x4, 0x2, 0xd, 0x5, 0x0, 0x80000001, 0x4, 0x178, 0x379, 0x80000001, 0x1, 0x8, 0x2, 0xffffffff, 0x929b3c32, 0x9, 0x800, 0x80, 0x6, 0x7fffffff, 0x2, 0x9, 0x4, 0x6, 0x7, 0xffffff01, 0x2, 0xf, 0x4, 0x3, 0x10001, 0xc, 0xfa8d, 0x8, 0x7ff, 0x88, 0xfc58, 0x1, 0xfffffff4, 0x2, 0x1, 0x80, 0x5, 0x2, 0x1000, 0x3, 0xccb, 0x54c, 0x4, 0xf85, 0x4, 0x7e2, 0x1, 0x0, 0xe, 0x8000, 0x2, 0x4, 0x2, 0x10, 0x1000000, 0x3ff, 0xad2d, 0x4, 0x3, 0x10, 0x9, 0x8001, 0xffff, 0xfffffffb, 0x5, 0x9, 0x8cf, 0x6, 0x3, 0x5, 0x8, 0x7, 0x3, 0x7, 0x2, 0x8, 0x5, 0x1, 0x4, 0x3546, 0x85, 0x9, 0x4, 0x18, 0x9, 0x6953d2ea, 0x7fff, 0x1, 0x7, 0x1, 0x4, 0x9, 0x9, 0xa, 0x7, 0x0, 0x7, 0x5, 0x6, 0x7679, 0x3, 0xffffffff, 0x4, 0xffff0001, 0xaa4e, 0x9, 0x8, 0x0, 0x3, 0x1000, 0x79af5056, 0x4, 0x1000, 0x3156, 0x2, 0x6, 0x9f, 0x7, 0xb, 0x7, 0x2, 0x9, 0x5, 0x7, 0x400, 0x3, 0x6, 0x5, 0x78e, 0x4, 0xfffffff7, 0x4, 0x2, 0x40000000, 0xdd3, 0x9, 0x9, 0x84, 0xfffff001, 0x3688f372, 0x0, 0x3, 0x400, 0x54a9, 0x10, 0x1, 0x3b, 0x0, 0x3, 0x9, 0x7, 0x9, 0x6, 0xda, 0x0, 0x4, 0x0, 0x7fff, 0xd3, 0x7f, 0xcd29, 0x2, 0x101, 0x5, 0x8001, 0x59c, 0x7fff, 0xc17, 0x5, 0x1, 0x5, 0xfffffff7, 0x19, 0x1, 0x3, 0x2, 0x5, 0x7, 0x1, 0xbca, 0x4, 0x85, 0x419bfc72, 0x1, 0x8, 0x9, 0x6]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x5, 0x0, 0x2a, 0x6, 0x100, 0x9, 0x7, 0x101, 0xffffffc0, 0xffff, 0x0, 0x1, 0x9, 0x8, 0x6, 0x1, 0x5, 0x8000, 0xa, 0x6, 0xee, 0x6, 0x10, 0xfff, 0x8, 0x7, 0x7, 0x2, 0x5, 0x0, 0x9, 0x1, 0x4, 0x8, 0xce, 0x9, 0x4, 0xfffffe01, 0x7f7d, 0x6, 0x8, 0x9, 0x10, 0xb, 0x10001, 0x40, 0x9, 0x4, 0x9, 0x3, 0x3, 0x6, 0x2, 0x684, 0x10, 0x8, 0x2, 0x5, 0x5, 0x4, 0x2, 0x2, 0x7, 0x2, 0x7, 0x2c8, 0x9, 0x0, 0xfffff743, 0x0, 0xd, 0x100, 0xa6, 0x7, 0x8001, 0xd03, 0x5, 0x2, 0x4, 0x54c, 0x4, 0x94, 0x8, 0xff, 0x9, 0x30, 0x8, 0x101, 0x1ff, 0x0, 0x8, 0x9, 0x1ff, 0x7fffffff, 0x5, 0x6, 0xd, 0x95, 0xff, 0x3ff, 0x9, 0x2, 0xffffff3e, 0x1, 0xfffffff9, 0x9, 0x9, 0xd5a4, 0x3, 0x1, 0x33ede630, 0x3, 0x14, 0x66e5, 0x4, 0x200, 0x3, 0xfffffff9, 0x7, 0xffffffff, 0x80000001, 0x0, 0x1, 0xfa7f, 0x3, 0x323e8000, 0x6, 0x101, 0x8, 0x8, 0xcd, 0x53c0, 0x275, 0x80000000, 0x9, 0xffffffff, 0x2, 0x822, 0x1b8d11db, 0x3, 0xfffffff9, 0xe000000, 0x6, 0x5, 0x0, 0x8, 0x7ff, 0xf0, 0x9, 0xfffffffa, 0x7, 0x5, 0x6, 0xf, 0x4, 0xfffffe00, 0xf1, 0x11, 0xfffffffa, 0xd, 0xd, 0x4, 0x7800, 0x2f0, 0x9, 0x9, 0xffffffff, 0x10000, 0x27b4, 0x5, 0x2, 0x2, 0xfc, 0xe, 0x13f, 0x80000001, 0x9, 0x401, 0xd5, 0x7, 0x9, 0x3, 0x8, 0x9, 0x2, 0x1, 0x2, 0x9, 0x8, 0x5, 0x6, 0x5, 0x3, 0xb, 0x7fffffff, 0x0, 0x3, 0x2, 0x3b, 0xb, 0x37b, 0x3, 0x17, 0x7, 0x0, 0x6, 0x2, 0x34, 0x1000, 0x200000, 0x2, 0x4f5, 0x7, 0xfffffff4, 0xffffffef, 0x10000, 0x1, 0x1, 0x6, 0x1000, 0x7cb89be6, 0x5, 0x9, 0xfffff194, 0x9, 0x11, 0x6, 0xb85, 0x5, 0x6, 0x6, 0x5, 0x0, 0x3, 0x10001, 0x9, 0x3, 0xf, 0x96, 0x7099, 0x8000, 0x3, 0x46, 0x7, 0x7, 0x4, 0x6, 0x7, 0x8, 0x6, 0x1, 0xffffff73, 0x6b71, 0x100, 0x10]}, @TCA_CBQ_RATE={0x10, 0x5, {0x8, 0x2, 0x1, 0x6, 0x5, 0xc}}]}}, @c_cbq={{0x8}, {0x84, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0xc, 0xfff3}, 0x0, 0x5}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xe, 0x4, 0x0, 0x8, 0xf9, 0x6}}, @TCA_CBQ_RATE={0x10, 0x5, {0x3, 0x0, 0x6, 0x5, 0x8, 0x9c3}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x40, 0x2, 0x9, 0x7, 0x3, 0x4}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2c, 0x1, 0x12, 0xff, 0xfffffffd, 0xaeb, 0x4, 0x5}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3a, 0x3, 0x0, 0x6, 0x8, 0x6, 0x8, 0x400}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x7, 0x5}, 0x200, 0x3}}]}}, @c_cbq={{0x8}, {0x458, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x3, 0x1, 0x40, 0x0, 0x5, 0x3}}, @TCA_CBQ_RATE={0x10, 0x5, {0xfe, 0x0, 0x7, 0x1eab, 0x171, 0x6}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x1, 0x10}, 0xd05, 0x6}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x10, 0x2, 0xbe, 0x4, 0x1}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x8001, 0x9, 0xaa, 0x0, 0xc2ee, 0x7f, 0x1, 0x8, 0x5, 0x6, 0xed, 0x10000, 0x9, 0xfffffffc, 0x7, 0x2ac, 0x7fff, 0x9, 0xff, 0x2, 0x1, 0x0, 0x0, 0x6259bf32, 0x2, 0xf8, 0x10001, 0x400, 0x0, 0xf45, 0x8000, 0x7, 0x80000000, 0x8, 0x800, 0x7fffffff, 0x1, 0x2, 0x1, 0x997a, 0x2, 0x0, 0x6, 0xe99, 0x6b, 0xfffffffa, 0x9, 0x0, 0x1000, 0x6, 0x6, 0x6, 0x5, 0xf, 0x7ff, 0x9, 0xb, 0x4, 0x9, 0x1, 0x4, 0x51f6, 0x1, 0x7ff, 0x4d78, 0x2ba, 0x6, 0x1, 0xfff, 0xff, 0xf, 0x8, 0x1, 0x6, 0x6, 0x8, 0x2f0a, 0x7, 0x8001, 0x3, 0x9, 0xfffffffd, 0x9, 0x401, 0x1000, 0x3, 0xf3f, 0xff, 0x5, 0x7, 0x18, 0xff, 0x3, 0xc, 0x3, 0x2, 0xfb5, 0x7, 0x0, 0x1, 0x274b9568, 0x9, 0x3, 0xdc15, 0x3, 0x4, 0xd0, 0x6, 0x920, 0x0, 0x8, 0xfffffffb, 0xfffffff9, 0x7, 0xf4, 0x5, 0x10000, 0x10, 0x8, 0x8, 0x7ff, 0x4f9f, 0xc, 0x0, 0xc2, 0xbf9, 0xffffffff, 0x4, 0xf, 0x234e, 0x10, 0x3, 0x3, 0x1525, 0x1, 0xca4, 0x4, 0xfffff9cd, 0x6, 0x2, 0xfffffffe, 0x7, 0x80000000, 0x2, 0xf, 0x15, 0xc9, 0x7, 0xa2, 0x4, 0x7fffffff, 0x6, 0x9dd, 0xff, 0x5, 0x6, 0xad8, 0xc, 0x630272a2, 0x21, 0x2, 0xe, 0x9, 0x6, 0xd, 0xa3, 0x925655f, 0xd, 0x7fff, 0x10001, 0x6, 0xc2b, 0x6, 0xffffffbd, 0x1, 0x7f, 0x5, 0x0, 0x80000001, 0x8, 0xa5ba, 0x1, 0x80000001, 0x0, 0x80000001, 0x8, 0x100, 0x5, 0x2, 0x5, 0xf71, 0x80, 0x3, 0x9, 0x1, 0x0, 0x4, 0x3, 0x8, 0x7, 0x7, 0x45ba, 0xa, 0x0, 0x4, 0x1000, 0x6, 0x4, 0xb6b4, 0x6, 0x4, 0x9, 0xb, 0x3, 0x0, 0x80000000, 0xdd2, 0x5, 0x6, 0x1, 0x1e, 0x7, 0x7fffffff, 0x9, 0x5, 0x3, 0x4, 0x2, 0x6, 0xa5, 0x6, 0x9, 0x1ff, 0x9, 0x8f, 0x9c7a, 0x8, 0x4, 0x0, 0x4, 0x7fffffff, 0x6, 0x2, 0x2, 0x1, 0x3, 0x9, 0x5a, 0x8, 0xba, 0x4, 0xc, 0x101, 0x1cbe, 0x80, 0x1ff]}, @TCA_CBQ_RATE={0x10, 0x5, {0xb, 0x0, 0x3577, 0x0, 0x3664, 0x5}}]}}]}, 0xd54}, 0x1, 0x0, 0x0, 0x8000}, 0xc0008c1) 1.129757251s ago: executing program 4 (id=994): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="3301a506de899009115700000000"], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.085180927s ago: executing program 3 (id=995): r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x2, 0x6, 0x2}, {0x6, 0x81, 0x7, 0xd}]}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], 0x0, 0x5f, 0x0, 0x0, 0xffffffff}, 0x28) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000080)) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={r3}) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0xa0, 0x17, 0xa, 0x5, 0x0, 0x0, {0xb, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x4c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x368}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc000}, 0x26008005) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r3, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r6, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x1080}, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r7, 0x89ee, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r10, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r11 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r11, 0x0, 0x0) connect$inet6(r11, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r12 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r12, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000200), 0x0) 1.061467044s ago: executing program 1 (id=996): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff000000007110b00000000000850000007500000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x4e20, 0x7f, @loopback, 0x7}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd700205000000050000000600010005000000080000000008000c00ac0a00000800090002000000f3567f7cb35947c15e1a1956052cb57ff92b9a1bc3f2dd701b34b548cde8e124ae0ceadef9aaa4e82e72341deacaeb385705a709ef62c2eecda1d6b364db348617ddeaaffb86197b4002e76f6bafd360691fb8f95969ad65ce3ebc49b6ba2fcfdf64865f315345c968eead543cba19d74fff76d2"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a800000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000000c0)={'wg0\x00'}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) 975.339368ms ago: executing program 1 (id=997): socket(0x2a, 0x2, 0xfffffffc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000140)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, 0x0}, 0x200c00ca) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0xc03}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0xc081) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x4b}], 0x2) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r3) getsockopt$llc_int(r2, 0x10c, 0x6, &(0x7f0000000200), &(0x7f0000000340)=0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000040)=0x51, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) 888.019071ms ago: executing program 4 (id=998): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r1, @ANYRES16=r6, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060003000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0x25, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xc, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffdc6, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001a0020002abd7000fedbdf2500810000da6f5eead5f213688fed8f3c593027a4381a94e43b9c326cf60fc45116969e80f81d1c245e"], 0x14}, 0x1, 0x0, 0x0, 0x20008844}, 0x80) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r9, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r10, 0x0, &(0x7f0000000a80)) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES64, @ANYBLOB="0000000008004a0007000000000000003e1200000800"], 0x44}}, 0x11) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, 0x0, 0x0) 794.393267ms ago: executing program 1 (id=999): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, @bcast, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (fail_nth: 1) 470.868274ms ago: executing program 1 (id=1000): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000005) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001000)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r3 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, r2, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x89b1, &(0x7f0000000040)={'syz_tun\x00', 0xfffffffe}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001180)="009fc3e8a42c8d01fc4ebeb6c15e4b166c541d808cdd6524cc2319725dd45208cd8be28cb104e3d0f056240c324ba0143f77474668566bce917af3d89c8ef5e062a214b60f15", 0x46) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) unshare(0x20040600) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r7, 0x29, 0x37, 0x0, 0x8) sendto$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0xffff, 0x0, 'lblc\x00', 0x0, 0x9, 0x1}, 0x2c) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, @bcast, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 337.205762ms ago: executing program 0 (id=1001): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) poll(0x0, 0x0, 0x7) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0xf0, 0x1a, 0x413, 0x0, 0x25dfdbfb, {{@in=@loopback, @in=@loopback, 0x0, 0x4be6, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x11}, 0xf, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, {0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffffffffffc, 0xff}, {0xffffffffffffffff, 0x8, 0xcc}, {0xf5, 0x0, 0x1000}, 0x0, 0x4, 0xa, 0x1, 0x1}}, 0xf0}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000076"], 0x18}], 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r3, 0xda90) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000000000feff07000800000000000000", @ANYRES32], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r5, 0x0, &(0x7f00000000c0)=""/76}, 0x67) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/240, 0xf0}}], 0x1, 0x40002000, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000000), 0xc) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x4, 0x0, 0xfffffffe, @vifc_lcl_addr=@loopback, @private=0xffffffff}, 0x10) recvmmsg(r1, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x60, 0x0) 336.796097ms ago: executing program 2 (id=1002): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x6}}, @var={0x1, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x43, 0x0, 0x1, 0x4}, 0x20) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) close(r6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)={0x1d0, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_IE_PROBE_RESP={0x1b1, 0x7f, [@perr={0x84, 0x108, {0x0, 0x10, [{{0x0, 0x1}, @device_b, 0x7fffffff, @value=@device_b, 0x2d}, {{}, @device_a, 0xf34, @void, 0x5}, {{}, @device_a, 0x5, @void, 0x39}, {{0x0, 0x1}, @device_b, 0x3, @value=@broadcast, 0x1a}, {{}, @device_a, 0xac, @void, 0x3}, {{}, @device_a, 0x3, @void, 0x1e}, {{0x0, 0x1}, @broadcast, 0x37, @value, 0x6}, {{0x0, 0x1}, @device_b, 0xffff8e14, @value=@device_b, 0x1a}, {{}, @device_a, 0x10, @void, 0x16}, {{0x0, 0x1}, @device_b, 0x4, @value=@broadcast, 0x21}, {{0x0, 0x1}, @broadcast, 0xa, @value, 0x42}, {{0x0, 0x1}, @device_b, 0xffff}, {{0x0, 0x1}, @broadcast, 0x6, @value=@device_b, 0x19}, {{}, @device_b, 0x7, @void, 0x2a}, {{}, @broadcast, 0x42, @void, 0x1}, {{0x0, 0x1}, @device_b, 0x7, @value=@broadcast, 0x1a}]}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xe7, 0x7, @device_a, 0xd3, @value=@broadcast, 0x3, 0xfffffffb, @broadcast, 0x80000000}}, @tim={0x5, 0x59, {0x1, 0x1b, 0x8, "18923f9544919c908e6b55e88583c23ceafa152516191c885d5dce55465eb83af267c0caa8188168d2a114e4daf847b9d7e34619440ae9f3d3d1782fa08f2cbff5b8e629014e47a5bf09a7284ce632d0012dbfc08044"}}, @prep={0x83, 0x1f, {{}, 0x5, 0xa, @device_a, 0x3ff, @void, 0x0, 0x8, @broadcast, 0xb16}}]}]]}, 0x1d0}}, 0x20000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x44, r8, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x9, 0x75}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0xfff1, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 123.348569ms ago: executing program 3 (id=1003): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r3, 0x3}, 0x8) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@migrate={0x138, 0x21, 0x1, 0x70bd2d, 0x0, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}}, [@migrate={0xe8, 0x11, [{@in=@empty, @in=@broadcast, @in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@empty, @in6=@remote, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x1a}}, {@in=@empty, @in=@private, @in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}]}, 0x138}}, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010084ffffff000000000100000008000100030000002400048005000300010000000500030000000000050003008000000005000300050000000800020003000000"], 0x48}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r5) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r5, &(0x7f0000000180)=[{{&(0x7f0000000480)=@rc={0x1f, @any, 0x4}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000500)="038a4380e51a1afd714b1eb8a1d73deee9d16bb0de8069498fb16f2eb50aad17aa8208d12af62306fa9bd2833bab9f2e1b020996ca625a59ebcb7de93b3e7bbfa27f64601d062d4dafaae5f265532bfdd319d651459d223605681d5273c67f4c62af01d7b41e3c0cd7f2dc6d6b", 0x6d}, {&(0x7f0000000580)="d18a687cd1388e23e7d438445c4efdfccc5ea5ea9c75260668d11372002f22aba7dec9cd42c3132d646f63f201c6297f47a2c2a6919fb95226b02a2210f167c51caa19ce01bc49ad1e3a88562a3df80665dfaedd36d7d272573594dc7a388c281383035a8781f4cafbb835774874188fda1d9754a984a8e93d11f889750dc0dfad627341c74f827cef086ef3159f2dc5fc5f4465c6aa79e5", 0x98}, {&(0x7f0000000640)="06c0c8daf7c4aaa1756760405d65d4afaa4f63afe1fee453668e275c17c852c231d00e502b5eed86795ad1c4611ca288ef2b2c13e8619593f8b007ba6561e8c3a0efdb117cf4f89d31f6e1c01ed76af3e6df71a9f960f39d3293d8f403b34f215d89c0d2258bcddf7e04a29d715450fccc5f4b758415549ffeb07d3d0d7022b284c308b3d66a5c8a9721aed1054c5d85fcb2cc53e07471c50f4787fda99f0126bf3e24a5db47dd9cbff47cd7d36bd06716cb3d195e911c4097219b3247cc2333e596d6f1979fd26b82d953d5b7c695d58d8f76ea1ea5f9c5d327744fcf812c273e4f6f", 0xe3}, {&(0x7f0000000740)="bb8618dffc0222f3e3d64fdfbd0a7dd9c9e8e61a1bd66748d28144d5e7249c2714abac8b5c1a62e52e568756c62bb60627eb877fa26d454075eb7bf72741c4a15d020e4f61d45917d89d32b97b1096760cefc4b79bbb4d4603d13f353413f77dd9bd950a1acc897b43fcd248c84814073779834c11de316af52394be1d6092cacba37bb2fc2184b5227dd76737d87ca7939f0a7527a8970d26d33778fe7990871eeb6a610ad629d8ee0bedc23ec85555cebca79e4efb81af3250eb4fdeca26fa4ac30bac69bd0311bc549a86be71", 0xce}, {&(0x7f0000000840)="b450de3188afc5483dd33abbd6eae8fa9912d0b0be1a1c05688f3493d3bdf545bc08f8ff5a3e88d907d5bdb12192fd6fc708973aa2b33ee41f280578eed980906117b7994f29d31e05", 0x49}, {&(0x7f00000008c0)="832727f398e9a264c9f5a2d128ac81cded897bd5f1e1835ecf7198790ad1bfe3ee3f3909827208746d69fd76ed34f00fb61be138b1ab93f74b116a1062133f7a5bbef9ea4eb6", 0x46}, {&(0x7f0000000100)="ab56b4f6e6de62fa0f57c13f843f84ff9f545e4abd9b22", 0x17}], 0x7}}], 0x1, 0x8000) 103.540647ms ago: executing program 2 (id=1004): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @local}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}], 0x2c) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="c14d0000000000002000128008000100687372001400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="c14d0000000000002000128008000100687372001400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 11.178923ms ago: executing program 1 (id=1005): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x1e8, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x457cc201}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x857}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x94, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3da9a963}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7ad1}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x312082ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1571}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1111bd52}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11f848ae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f90cd2b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a7fe3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa2ec}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68377efe}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4512ccb5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a8a6517}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1db2bbe6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2b97}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb913}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x569de55c}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e0b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x30fa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1150a19}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52d4c83a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaece}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8365}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6728}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2412e125}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21567645}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6334c02e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e2f4b6e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xad}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ba0f49d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7234f495}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40880}, 0x48004) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in=@local, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0xa, @in=@broadcast, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 0s ago: executing program 4 (id=1006): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0xfe, 0xfffff00c}, {0x6, 0x0, 0x1}]}, 0x10) (async) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x29) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.3' (ED25519) to the list of known hosts. [ 66.473733][ T5850] cgroup: Unknown subsys name 'net' [ 66.645238][ T5850] cgroup: Unknown subsys name 'cpuset' [ 66.654017][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.088514][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.429064][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.479102][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.486975][ T5877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.495694][ T5877] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.504359][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.512281][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.521046][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.528760][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.536687][ T5877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.544977][ T5877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.564631][ T5877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.571686][ T5879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.580431][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.587131][ T5880] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.595323][ T5877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.599761][ T5880] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.603586][ T5877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.611298][ T5880] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.624117][ T5877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.624350][ T5880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.631992][ T5882] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.640808][ T5880] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.654981][ T5873] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.665076][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.674207][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.286817][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 71.314798][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 71.387361][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.397185][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.476869][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 71.489212][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 71.543006][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 71.655107][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.663027][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.670758][ T5860] bridge_slave_0: entered allmulticast mode [ 71.678714][ T5860] bridge_slave_0: entered promiscuous mode [ 71.719512][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.726846][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.734710][ T5860] bridge_slave_1: entered allmulticast mode [ 71.741829][ T5860] bridge_slave_1: entered promiscuous mode [ 71.777674][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.785039][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.793118][ T5866] bridge_slave_0: entered allmulticast mode [ 71.800245][ T5866] bridge_slave_0: entered promiscuous mode [ 71.832363][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.840091][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.847250][ T5870] bridge_slave_0: entered allmulticast mode [ 71.854406][ T5870] bridge_slave_0: entered promiscuous mode [ 71.879057][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.887396][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.894654][ T5866] bridge_slave_1: entered allmulticast mode [ 71.901821][ T5866] bridge_slave_1: entered promiscuous mode [ 71.918275][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.925776][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.933025][ T5870] bridge_slave_1: entered allmulticast mode [ 71.940941][ T5870] bridge_slave_1: entered promiscuous mode [ 71.948015][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.955227][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.962444][ T5868] bridge_slave_0: entered allmulticast mode [ 71.969334][ T5868] bridge_slave_0: entered promiscuous mode [ 71.996283][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.019418][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.026667][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.034509][ T5868] bridge_slave_1: entered allmulticast mode [ 72.041605][ T5868] bridge_slave_1: entered promiscuous mode [ 72.074256][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.085525][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.137116][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.162181][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.174756][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.195346][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.202601][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.209865][ T5862] bridge_slave_0: entered allmulticast mode [ 72.218126][ T5862] bridge_slave_0: entered promiscuous mode [ 72.268970][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.278595][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.286978][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.294546][ T5862] bridge_slave_1: entered allmulticast mode [ 72.302440][ T5862] bridge_slave_1: entered promiscuous mode [ 72.320806][ T5866] team0: Port device team_slave_0 added [ 72.328313][ T5860] team0: Port device team_slave_0 added [ 72.337757][ T5860] team0: Port device team_slave_1 added [ 72.359011][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.392715][ T5866] team0: Port device team_slave_1 added [ 72.410838][ T5870] team0: Port device team_slave_0 added [ 72.429172][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.465421][ T5870] team0: Port device team_slave_1 added [ 72.486675][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.513458][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.520882][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.547729][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.571712][ T5868] team0: Port device team_slave_0 added [ 72.581076][ T5873] Bluetooth: hci0: command tx timeout [ 72.612956][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.620710][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.647209][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.658950][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.666235][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.692218][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.705631][ T5868] team0: Port device team_slave_1 added [ 72.726106][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.735106][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.761667][ T5873] Bluetooth: hci4: command tx timeout [ 72.761817][ T5873] Bluetooth: hci1: command tx timeout [ 72.770252][ T5864] Bluetooth: hci2: command tx timeout [ 72.772797][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.778448][ T5864] Bluetooth: hci3: command tx timeout [ 72.804143][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.811591][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.837897][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.868711][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.875872][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.903024][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.915990][ T5862] team0: Port device team_slave_0 added [ 72.925286][ T5862] team0: Port device team_slave_1 added [ 72.940819][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.947793][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.974033][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.987038][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.994058][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.020437][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.102399][ T5860] hsr_slave_0: entered promiscuous mode [ 73.108815][ T5860] hsr_slave_1: entered promiscuous mode [ 73.145139][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.152234][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.178852][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.191521][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.198485][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.224948][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.318778][ T5868] hsr_slave_0: entered promiscuous mode [ 73.325442][ T5868] hsr_slave_1: entered promiscuous mode [ 73.331976][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 73.337802][ T5868] Cannot create hsr debugfs directory [ 73.362500][ T5866] hsr_slave_0: entered promiscuous mode [ 73.368982][ T5866] hsr_slave_1: entered promiscuous mode [ 73.376639][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 73.382673][ T5866] Cannot create hsr debugfs directory [ 73.401504][ T5870] hsr_slave_0: entered promiscuous mode [ 73.407815][ T5870] hsr_slave_1: entered promiscuous mode [ 73.414359][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 73.420581][ T5870] Cannot create hsr debugfs directory [ 73.598400][ T5862] hsr_slave_0: entered promiscuous mode [ 73.605088][ T5862] hsr_slave_1: entered promiscuous mode [ 73.612234][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 73.617967][ T5862] Cannot create hsr debugfs directory [ 73.992828][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.026179][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.051998][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.077140][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.138444][ T5866] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.148977][ T5866] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.178717][ T5866] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.193008][ T5866] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.263176][ T5868] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.275812][ T5868] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.307040][ T5868] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.318024][ T5868] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.392834][ T5870] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.428351][ T5870] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.454897][ T5870] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.465196][ T5870] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.554642][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.565005][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.577942][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.597294][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.618997][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.660241][ T5864] Bluetooth: hci0: command tx timeout [ 74.689255][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.735751][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.743560][ T3509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.756516][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.763637][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.794014][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.821369][ T5873] Bluetooth: hci2: command tx timeout [ 74.822408][ T5876] Bluetooth: hci1: command tx timeout [ 74.826800][ T5873] Bluetooth: hci4: command tx timeout [ 74.838433][ T5864] Bluetooth: hci3: command tx timeout [ 74.844926][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.884218][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.923467][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.930632][ T3509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.939619][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.946772][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.979139][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.012620][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.019791][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.058087][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.072149][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.079379][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.168191][ T5866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.193874][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.246332][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.268486][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.275714][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.315930][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.323163][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.365254][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.424863][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.486926][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.494131][ T3509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.529875][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.537097][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.668117][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.729490][ T5860] veth0_vlan: entered promiscuous mode [ 75.767970][ T5860] veth1_vlan: entered promiscuous mode [ 75.835388][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.918066][ T5866] veth0_vlan: entered promiscuous mode [ 75.953098][ T5860] veth0_macvtap: entered promiscuous mode [ 75.971744][ T5866] veth1_vlan: entered promiscuous mode [ 76.025750][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.039077][ T5860] veth1_macvtap: entered promiscuous mode [ 76.068323][ T5868] veth0_vlan: entered promiscuous mode [ 76.085996][ T5868] veth1_vlan: entered promiscuous mode [ 76.133311][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.153400][ T5866] veth0_macvtap: entered promiscuous mode [ 76.175356][ T5866] veth1_macvtap: entered promiscuous mode [ 76.188366][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.240622][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.264160][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.281328][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.295094][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.326665][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.348531][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.366049][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.377541][ T5868] veth0_macvtap: entered promiscuous mode [ 76.407994][ T5868] veth1_macvtap: entered promiscuous mode [ 76.430692][ T3509] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.442115][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.475791][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.496250][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.550498][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.551363][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.578374][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.589777][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.652732][ T1004] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.662298][ T1004] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.685427][ T1004] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.723354][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.732145][ T1004] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.740060][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.746289][ T5864] Bluetooth: hci0: command tx timeout [ 76.767682][ T5862] veth0_vlan: entered promiscuous mode [ 76.845297][ T5870] veth0_vlan: entered promiscuous mode [ 76.847425][ T5860] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.859776][ T5862] veth1_vlan: entered promiscuous mode [ 76.877771][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.888600][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.901052][ T5864] Bluetooth: hci3: command tx timeout [ 76.908312][ T5873] Bluetooth: hci4: command tx timeout [ 76.913723][ T51] Bluetooth: hci1: command tx timeout [ 76.917344][ T5864] Bluetooth: hci2: command tx timeout [ 76.955934][ T5870] veth1_vlan: entered promiscuous mode [ 77.054441][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.070930][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.099939][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.107953][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.167441][ T5862] veth0_macvtap: entered promiscuous mode [ 77.237791][ T5862] veth1_macvtap: entered promiscuous mode [ 77.259381][ T5870] veth0_macvtap: entered promiscuous mode [ 77.267687][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.278359][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.303014][ T5870] veth1_macvtap: entered promiscuous mode [ 77.423486][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.503496][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.517073][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.520375][ T5982] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.547692][ T2969] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.557732][ T2969] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.581833][ T5982] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.792573][ T2969] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.805660][ T2969] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.825793][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.905064][ T2969] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.918743][ T2969] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.147523][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 78.164369][ T2969] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.189890][ T2969] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.269200][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 78.455068][ T6002] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.632441][ T6002] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.716616][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.736732][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.752657][ T6002] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.783892][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 78.828340][ T5864] Bluetooth: hci0: command tx timeout [ 78.844226][ T6021] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 78.863307][ T6021] netdevsim netdevsim3 netdevsim0: refused to change device tx_queue_len [ 78.965666][ T6002] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.980359][ T5864] Bluetooth: hci1: command tx timeout [ 78.985796][ T5864] Bluetooth: hci2: command tx timeout [ 78.992080][ T5873] Bluetooth: hci3: command tx timeout [ 78.992100][ T5876] Bluetooth: hci4: command tx timeout [ 79.086731][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.102950][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.245238][ T3509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.257319][ T3509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.362386][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.422729][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.560767][ T6052] syz_tun: entered promiscuous mode [ 79.567312][ T6052] batadv_slave_0: entered promiscuous mode [ 79.661602][ T6052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.699262][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 80.092348][ T6072] netlink: 52 bytes leftover after parsing attributes in process `syz.3.14'. [ 80.167771][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'. [ 80.187254][ T6079] syz.1.15 uses obsolete (PF_INET,SOCK_PACKET) [ 80.328761][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 80.383411][ T6085] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 80.423882][ T6085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.675602][ T6083] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 80.689612][ T6083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 80.777089][ T6079] syzkaller1: entered promiscuous mode [ 80.810642][ T6079] syzkaller1: entered allmulticast mode [ 81.226303][ T6112] !: renamed from dummy0 (while UP) [ 81.340443][ T6117] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23'. [ 81.388350][ T6123] Bluetooth: MGMT ver 1.23 [ 81.394399][ T6120] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24'. [ 81.889244][ T6132] tipc: Enabling of bearer rejected, failed to enable media [ 82.141110][ T5872] udevd[5872]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 82.516521][ T2969] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.559478][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.777265][ T2969] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.399739][ T3509] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.856277][ T6191] netlink: 'syz.2.34': attribute type 4 has an invalid length. [ 83.928449][ T6191] netlink: 'syz.2.34': attribute type 4 has an invalid length. [ 84.254592][ T6201] netlink: 40 bytes leftover after parsing attributes in process `syz.4.36'. [ 84.284332][ T6201] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 84.291826][ T6201] IPv6: NLM_F_CREATE should be set when creating new route [ 84.299100][ T6201] IPv6: NLM_F_CREATE should be set when creating new route [ 84.372904][ T6203] bridge_slave_0: left allmulticast mode [ 84.378760][ T6203] bridge_slave_0: left promiscuous mode [ 84.387475][ T6203] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.408543][ T6203] bridge_slave_1: left allmulticast mode [ 84.430294][ T6203] bridge_slave_1: left promiscuous mode [ 84.442920][ T6203] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.490723][ T6203] bond0: (slave bond_slave_0): Releasing backup interface [ 84.518679][ T6203] bond0: (slave bond_slave_1): Releasing backup interface [ 84.539443][ T6203] team0: Port device team_slave_0 removed [ 84.557008][ T6203] team0: Port device team_slave_1 removed [ 84.564815][ T6203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.572830][ T6203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.584215][ T6203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.591905][ T6203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.592416][ T6212] netlink: 'syz.3.40': attribute type 7 has an invalid length. [ 84.607450][ T6212] netlink: 'syz.3.40': attribute type 8 has an invalid length. [ 84.616043][ T6212] netlink: 224 bytes leftover after parsing attributes in process `syz.3.40'. [ 84.700911][ T6206] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.734309][ T6206] bond0: (slave bond1): Enslaving as an active interface with an up link [ 85.152917][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.43'. [ 85.170307][ T6233] tap0: tun_chr_ioctl cmd 1074025680 [ 85.178867][ T6234] hsr_slave_0: left promiscuous mode [ 85.187086][ T6234] hsr_slave_1: left promiscuous mode [ 85.221812][ T6233] tipc: Started in network mode [ 85.227163][ T6233] tipc: Node identity 024dfffc9914, cluster identity 4711 [ 85.241459][ T6233] tipc: Enabled bearer , priority 0 [ 85.278149][ T6233] D: renamed from syzkaller0 [ 85.293330][ T6233] tipc: Disabling bearer [ 85.351817][ T6237] syz.2.46 (6237) used greatest stack depth: 18016 bytes left [ 85.744783][ T6258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.53'. [ 85.809399][ T6258] netlink: 92 bytes leftover after parsing attributes in process `syz.1.53'. [ 85.948698][ T6267] netlink: 32 bytes leftover after parsing attributes in process `syz.0.55'. [ 86.047794][ T6273] tipc: Started in network mode [ 86.059711][ T6273] tipc: Node identity 1ade3798dcde, cluster identity 4711 [ 86.087247][ T6273] tipc: Enabled bearer , priority 0 [ 86.122933][ T6276] netlink: 'syz.3.56': attribute type 1 has an invalid length. [ 86.142592][ T6279] syzkaller0: entered promiscuous mode [ 86.171262][ T6279] syzkaller0: entered allmulticast mode [ 86.217252][ T6273] tipc: Resetting bearer [ 86.265887][ T6288] netlink: 'syz.0.59': attribute type 13 has an invalid length. [ 86.281621][ T6269] tipc: Resetting bearer [ 86.295176][ T6288] netlink: 'syz.0.59': attribute type 17 has an invalid length. [ 86.347135][ T6269] tipc: Disabling bearer [ 86.518464][ T6297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.689642][ T6288] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.733478][ T6301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'. [ 86.746214][ T6302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'. [ 86.754883][ T1841] cfg80211: failed to load regulatory.db [ 87.087606][ T6325] Zero length message leads to an empty skb [ 87.161224][ T6317] syz.3.67 (6317) used greatest stack depth: 17864 bytes left [ 87.237490][ T6330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.307953][ T6330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.338425][ T6336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.426116][ T6330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.789168][ T6358] netlink: 332 bytes leftover after parsing attributes in process `syz.4.78'. [ 87.808635][ T6358] netlink: 104 bytes leftover after parsing attributes in process `syz.4.78'. [ 87.832172][ T6351] syz_tun: entered allmulticast mode [ 87.889549][ T6352] bridge0: entered promiscuous mode [ 87.901735][ T6352] vlan2: entered promiscuous mode [ 87.921309][ T6352] bridge0: port 3(vlan2) entered blocking state [ 87.935807][ T6352] bridge0: port 3(vlan2) entered disabled state [ 87.945258][ T6352] vlan2: entered allmulticast mode [ 87.951382][ T6352] bridge0: entered allmulticast mode [ 87.960788][ T6352] vlan2: left allmulticast mode [ 87.970425][ T6352] bridge0: left allmulticast mode [ 88.077607][ T6347] bridge_slave_0: left allmulticast mode [ 88.097555][ T6347] bridge_slave_0: left promiscuous mode [ 88.121616][ T6347] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.134713][ T6347] bridge_slave_1: left allmulticast mode [ 88.142312][ T6347] bridge_slave_1: left promiscuous mode [ 88.148101][ T6347] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.162935][ T6347] bond0: (slave bond_slave_0): Releasing backup interface [ 88.177068][ T6347] bond0: (slave bond_slave_1): Releasing backup interface [ 88.186175][ T6374] sctp: [Deprecated]: syz.3.84 (pid 6374) Use of int in max_burst socket option. [ 88.186175][ T6374] Use struct sctp_assoc_value instead [ 88.209204][ T6347] team0: Port device team_slave_0 removed [ 88.227355][ T6347] team0: Port device team_slave_1 removed [ 88.235507][ T6347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.253953][ T6347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.276945][ T6347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.285112][ T6347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.455426][ T6367] syzkaller1: entered promiscuous mode [ 88.471259][ T6367] syzkaller1: entered allmulticast mode [ 88.559143][ T6346] syz_tun: left allmulticast mode [ 88.633643][ T6388] netlink: 'syz.2.89': attribute type 1 has an invalid length. [ 88.938006][ T6399] IPVS: length: 53 != 8 [ 88.948637][ T6398] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 89.782417][ T6441] netlink: 'syz.2.103': attribute type 10 has an invalid length. [ 89.838234][ T6441] __nla_validate_parse: 3 callbacks suppressed [ 89.838250][ T6441] netlink: 40 bytes leftover after parsing attributes in process `syz.2.103'. [ 89.915881][ T6445] netlink: 32 bytes leftover after parsing attributes in process `syz.4.105'. [ 89.925971][ T6441] team0: Port device geneve0 added [ 90.301105][ T6463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.110'. [ 90.313664][ T6464] netlink: 136 bytes leftover after parsing attributes in process `syz.0.108'. [ 90.604369][ T6483] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.621721][ T6482] nbd: must specify a size in bytes for the device [ 91.365868][ T6507] tc_dump_action: action bad kind [ 91.742776][ T6524] netlink: 'syz.2.123': attribute type 9 has an invalid length. [ 91.933349][ T6534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.126'. [ 92.742046][ T6538] netlink: 28 bytes leftover after parsing attributes in process `syz.1.127'. [ 92.761350][ T6538] netlink: 28 bytes leftover after parsing attributes in process `syz.1.127'. [ 92.775469][ T2994] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.856525][ T6579] netlink: 24 bytes leftover after parsing attributes in process `syz.4.129'. [ 92.904219][ T2994] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.959761][ T2994] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.084315][ T2994] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.119257][ T6588] netlink: 16 bytes leftover after parsing attributes in process `syz.2.132'. [ 93.212684][ T6590] netlink: 20 bytes leftover after parsing attributes in process `syz.3.133'. [ 93.649697][ T5947] IPVS: starting estimator thread 0... [ 93.699581][ T6610] netlink: 'syz.4.136': attribute type 1 has an invalid length. [ 93.740804][ T6619] IPVS: using max 28 ests per chain, 67200 per kthread [ 93.895888][ T6566] IPVS: starting estimator thread 0... [ 94.010066][ T6628] IPVS: using max 33 ests per chain, 79200 per kthread [ 94.116191][ T6637] bridge0: entered allmulticast mode [ 94.155763][ T6637] bridge_slave_1: left allmulticast mode [ 94.171487][ T6637] bridge_slave_1: left promiscuous mode [ 94.177838][ T6637] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.216801][ T6637] bridge_slave_0: left allmulticast mode [ 94.231358][ T6637] bridge_slave_0: left promiscuous mode [ 94.237328][ T6637] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.268512][ T6637] bridge0 (unregistering): left allmulticast mode [ 94.363753][ T1101] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 94.729245][ T6665] netlink: 'syz.4.151': attribute type 3 has an invalid length. [ 95.094595][ T6679] __nla_validate_parse: 7 callbacks suppressed [ 95.094611][ T6679] netlink: 1 bytes leftover after parsing attributes in process `syz.1.155'. [ 95.532154][ T6682] syzkaller1: entered promiscuous mode [ 95.543076][ T6682] syzkaller1: entered allmulticast mode [ 95.717473][ T6696] netlink: 24 bytes leftover after parsing attributes in process `syz.2.162'. [ 95.973225][ T6711] netlink: 'syz.4.165': attribute type 10 has an invalid length. [ 95.991796][ T6714] netlink: 'syz.0.166': attribute type 7 has an invalid length. [ 96.020914][ T6711] team0: Device veth0_macvtap failed to register rx_handler [ 96.048479][ T6720] netlink: 44 bytes leftover after parsing attributes in process `syz.3.167'. [ 96.286929][ T6720] team0: Port device team_slave_0 removed [ 96.586516][ T6718] syz.3.167: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 96.605268][ T6718] CPU: 1 UID: 0 PID: 6718 Comm: syz.3.167 Not tainted syzkaller #0 PREEMPT(full) [ 96.605288][ T6718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 96.605304][ T6718] Call Trace: [ 96.605311][ T6718] [ 96.605318][ T6718] dump_stack_lvl+0x189/0x250 [ 96.605346][ T6718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.605371][ T6718] ? __pfx__printk+0x10/0x10 [ 96.605392][ T6718] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 96.605409][ T6718] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 96.605427][ T6718] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 96.605446][ T6718] warn_alloc+0x214/0x310 [ 96.605475][ T6718] ? __pfx_warn_alloc+0x10/0x10 [ 96.605508][ T6718] ? __get_vm_area_node+0x28f/0x300 [ 96.605531][ T6718] ? hash_netport4_resize+0x235/0x1b60 [ 96.605555][ T6718] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 96.605606][ T6718] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 96.605634][ T6718] ? rcu_is_watching+0x15/0xb0 [ 96.605652][ T6718] ? hash_netport4_resize+0x235/0x1b60 [ 96.605669][ T6718] ? hash_netport4_resize+0x235/0x1b60 [ 96.605685][ T6718] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 96.605707][ T6718] ? hash_netport4_resize+0x235/0x1b60 [ 96.605733][ T6718] hash_netport4_resize+0x235/0x1b60 [ 96.605752][ T6718] ? hash_netport4_uadt+0xc97/0xf30 [ 96.605777][ T6718] ? __pfx_hash_netport4_add+0x10/0x10 [ 96.605795][ T6718] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 96.605824][ T6718] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 96.605852][ T6718] call_ad+0x44b/0xb00 [ 96.605883][ T6718] ? __pfx_call_ad+0x10/0x10 [ 96.605919][ T6718] ? __nla_parse+0x40/0x60 [ 96.605948][ T6718] ip_set_ad+0x791/0x930 [ 96.605980][ T6718] ? __pfx_ip_set_ad+0x10/0x10 [ 96.606039][ T6718] nfnetlink_rcv_msg+0xb4a/0x1130 [ 96.606064][ T6718] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 96.606104][ T6718] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 96.606123][ T6718] ? kasan_save_free_info+0x46/0x50 [ 96.606189][ T6718] netlink_rcv_skb+0x208/0x470 [ 96.606208][ T6718] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 96.606232][ T6718] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 96.606260][ T6718] ? bpf_lsm_capable+0x9/0x20 [ 96.606280][ T6718] ? security_capable+0x7e/0x2e0 [ 96.606309][ T6718] nfnetlink_rcv+0x26a/0x2520 [ 96.606335][ T6718] ? __dev_queue_xmit+0x1d79/0x3b50 [ 96.606365][ T6718] ? __dev_queue_xmit+0x27b/0x3b50 [ 96.606397][ T6718] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 96.606419][ T6718] ? __pfx___dev_queue_xmit+0x10/0x10 [ 96.606452][ T6718] ? ref_tracker_free+0x63a/0x7d0 [ 96.606474][ T6718] ? __asan_memcpy+0x40/0x70 [ 96.606491][ T6718] ? __pfx_ref_tracker_free+0x10/0x10 [ 96.606510][ T6718] ? __skb_clone+0x63/0x7a0 [ 96.606534][ T6718] ? __skb_clone+0x483/0x7a0 [ 96.606559][ T6718] ? skb_clone+0x246/0x3a0 [ 96.606587][ T6718] ? __netlink_deliver_tap+0x807/0x850 [ 96.606603][ T6718] ? netlink_deliver_tap+0x2e/0x1b0 [ 96.606627][ T6718] ? netlink_deliver_tap+0x2e/0x1b0 [ 96.606652][ T6718] netlink_unicast+0x82f/0x9e0 [ 96.606684][ T6718] ? __pfx_netlink_unicast+0x10/0x10 [ 96.606708][ T6718] ? netlink_sendmsg+0x642/0xb30 [ 96.606722][ T6718] ? skb_put+0x11b/0x210 [ 96.606743][ T6718] netlink_sendmsg+0x805/0xb30 [ 96.606770][ T6718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.606791][ T6718] ? aa_sock_msg_perm+0xf1/0x1d0 [ 96.606809][ T6718] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 96.606826][ T6718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.606844][ T6718] __sock_sendmsg+0x21c/0x270 [ 96.606869][ T6718] ____sys_sendmsg+0x505/0x830 [ 96.606894][ T6718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.606923][ T6718] ? import_iovec+0x74/0xa0 [ 96.606952][ T6718] ___sys_sendmsg+0x21f/0x2a0 [ 96.606973][ T6718] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.607028][ T6718] ? __fget_files+0x2a/0x420 [ 96.607043][ T6718] ? __fget_files+0x3a0/0x420 [ 96.607070][ T6718] __x64_sys_sendmsg+0x19b/0x260 [ 96.607092][ T6718] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 96.607126][ T6718] ? rcu_is_watching+0x15/0xb0 [ 96.607143][ T6718] ? trace_sys_enter+0x25/0x100 [ 96.607172][ T6718] do_syscall_64+0xfa/0x3b0 [ 96.607189][ T6718] ? lockdep_hardirqs_on+0x9c/0x150 [ 96.607206][ T6718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.607221][ T6718] ? clear_bhb_loop+0x60/0xb0 [ 96.607241][ T6718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.607257][ T6718] RIP: 0033:0x7fd19eb8ebe9 [ 96.607279][ T6718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.607292][ T6718] RSP: 002b:00007fd19fad4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.607310][ T6718] RAX: ffffffffffffffda RBX: 00007fd19edc5fa0 RCX: 00007fd19eb8ebe9 [ 96.607322][ T6718] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000005 [ 96.607332][ T6718] RBP: 00007fd19ec11e19 R08: 0000000000000000 R09: 0000000000000000 [ 96.607342][ T6718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.607352][ T6718] R13: 00007fd19edc6038 R14: 00007fd19edc5fa0 R15: 00007fff40540088 [ 96.607380][ T6718] [ 96.607391][ T6718] Mem-Info: [ 97.107958][ T6718] active_anon:5375 inactive_anon:0 isolated_anon:0 [ 97.107958][ T6718] active_file:3145 inactive_file:39850 isolated_file:0 [ 97.107958][ T6718] unevictable:768 dirty:277 writeback:0 [ 97.107958][ T6718] slab_reclaimable:10656 slab_unreclaimable:110928 [ 97.107958][ T6718] mapped:29275 shmem:1356 pagetables:1011 [ 97.107958][ T6718] sec_pagetables:0 bounce:0 [ 97.107958][ T6718] kernel_misc_reclaimable:0 [ 97.107958][ T6718] free:1319003 free_pcp:13654 free_cma:0 [ 97.156822][ T6718] Node 0 active_anon:21500kB inactive_anon:0kB active_file:12580kB inactive_file:159200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117100kB dirty:1092kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12368kB pagetables:3888kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 97.189481][ T6718] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 97.221137][ T6718] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 97.250119][ T6718] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 97.257746][ T6718] Node 0 DMA32 free:1372024kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21452kB inactive_anon:0kB active_file:12580kB inactive_file:157624kB unevictable:1536kB writepending:1088kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:40052kB local_pcp:20840kB free_cma:0kB [ 97.291420][ T6718] lowmem_reserve[]: 0 0 1 1 1 [ 97.296156][ T6718] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 97.325212][ T6718] lowmem_reserve[]: 0 0 0 0 0 [ 97.329994][ T6718] Node 1 Normal free:3889376kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:16kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15880kB local_pcp:7592kB free_cma:0kB [ 97.362093][ T6718] lowmem_reserve[]: 0 0 0 0 0 [ 97.366870][ T6718] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 97.379664][ T6718] Node 0 DMA32: 642*4kB (UM) 528*8kB (UME) 181*16kB (UME) 203*32kB (UME) 51*64kB (UME) 21*128kB (UM) 17*256kB (UM) 8*512kB (UME) 6*1024kB (M) 8*2048kB (UM) 322*4096kB (M) = 1372024kB [ 97.397888][ T6718] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 97.410378][ T6718] Node 1 Normal: 168*4kB (UE) 48*8kB (UME) 40*16kB (UME) 76*32kB (UME) 25*64kB (UME) 9*128kB (UME) 4*256kB (UME) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3889376kB [ 97.428627][ T6718] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 97.438232][ T6718] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 97.447538][ T6718] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 97.458145][ T6718] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 97.467609][ T6718] 44347 total pagecache pages [ 97.472374][ T6718] 0 pages in swap cache [ 97.476520][ T6718] Free swap = 124996kB [ 97.480978][ T6718] Total swap = 124996kB [ 97.485189][ T6718] 2097051 pages RAM [ 97.488981][ T6718] 0 pages HighMem/MovableOnly [ 97.493772][ T6718] 425673 pages reserved [ 97.497916][ T6718] 0 pages cma reserved [ 120.669867][ T6764] openvswitch: netlink: IP tunnel dst address not specified [ 120.727299][ T6754] can: request_module (can-proto-0) failed. [ 120.744259][ T6754] openvswitch: netlink: IP tunnel dst address not specified [ 120.806725][ T6764] can: request_module (can-proto-0) failed. [ 120.828696][ T6764] openvswitch: netlink: IP tunnel dst address not specified [ 120.841017][ T6755] tipc: Enabled bearer , priority 0 [ 120.849191][ T6762] syzkaller0: entered promiscuous mode [ 120.876394][ T6762] syzkaller0: entered allmulticast mode [ 120.916660][ T6754] can: request_module (can-proto-0) failed. [ 121.009670][ T6762] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 121.085254][ T6755] tipc: Resetting bearer [ 121.095825][ T6775] netlink: 844 bytes leftover after parsing attributes in process `syz.0.176'. [ 121.104018][ T6773] netlink: 24 bytes leftover after parsing attributes in process `syz.4.175'. [ 121.159782][ T6752] tipc: Resetting bearer [ 121.266827][ T6752] tipc: Disabling bearer [ 121.560822][ T6795] netlink: 'syz.3.183': attribute type 2 has an invalid length. [ 121.585085][ T6795] netlink: 132 bytes leftover after parsing attributes in process `syz.3.183'. [ 122.040600][ T6804] tipc: Enabled bearer , priority 0 [ 122.144410][ T6805] syzkaller0: entered promiscuous mode [ 122.169748][ T6805] syzkaller0: entered allmulticast mode [ 122.191437][ T6791] tipc: Resetting bearer [ 122.273566][ T6790] tipc: Resetting bearer [ 122.537858][ T6830] netlink: 'syz.3.189': attribute type 1 has an invalid length. [ 122.547756][ T6830] netlink: 208 bytes leftover after parsing attributes in process `syz.3.189'. [ 123.131141][ T6551] tipc: Node number set to 3321903000 [ 123.533651][ T6790] tipc: Disabling bearer [ 123.753868][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 123.866108][ T6845] nbd: must specify a device to reconfigure [ 124.114338][ T6851] warning: `syz.1.196' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 124.793077][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.204'. [ 124.822897][ T6898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'. [ 124.915028][ T6900] netlink: 'syz.2.207': attribute type 1 has an invalid length. [ 124.923305][ T6900] netlink: 236 bytes leftover after parsing attributes in process `syz.2.207'. [ 125.007542][ T6901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.086902][ T6905] netlink: 'syz.2.209': attribute type 39 has an invalid length. [ 125.409298][ T6913] netlink: 'syz.3.211': attribute type 7 has an invalid length. [ 125.822973][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 125.903516][ T6933] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001 [ 126.410252][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.546511][ T6962] netlink: 24 bytes leftover after parsing attributes in process `syz.4.223'. [ 126.717195][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.737285][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.797736][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.829653][ T6935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.832740][ T6966] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 126.915398][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.933796][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.097461][ T6986] netlink: 72 bytes leftover after parsing attributes in process `syz.0.232'. [ 127.146313][ T6986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.232'. [ 127.230916][ T6989] netlink: set zone limit has 4 unknown bytes [ 127.488252][ T7000] netlink: 24 bytes leftover after parsing attributes in process `syz.2.236'. [ 128.236150][ T7022] batadv_slave_0: entered promiscuous mode [ 128.305459][ T7021] batadv_slave_0: left promiscuous mode [ 128.315999][ T7031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.323296][ T7031] IPv6: NLM_F_CREATE should be set when creating new route [ 128.484982][ T7039] IPVS: length: 30 != 24 [ 128.613623][ T7043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.247'. [ 128.656558][ T7049] netlink: 'syz.3.248': attribute type 13 has an invalid length. [ 128.719104][ T7050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.248'. [ 128.992727][ T7049] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.000720][ T7049] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.204138][ T7049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.223538][ T7049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.476661][ T2994] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.505691][ T2994] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.654830][ T2994] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.704585][ T2994] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.103246][ T7072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.145365][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'. [ 130.154459][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'. [ 130.164626][ T7104] netlink: 32 bytes leftover after parsing attributes in process `syz.1.259'. [ 130.174182][ T7105] netlink: 32 bytes leftover after parsing attributes in process `syz.1.259'. [ 130.286075][ T7113] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 4, id = 0 [ 131.361860][ T7144] netlink: 'syz.4.269': attribute type 16 has an invalid length. [ 131.453862][ T7146] vlan0: entered allmulticast mode [ 131.470306][ T7146] bridge0: entered allmulticast mode [ 131.480845][ T7146] bridge1: port 1(vlan0) entered blocking state [ 131.510454][ T7146] bridge1: port 1(vlan0) entered disabled state [ 131.538570][ T7146] vlan0: entered promiscuous mode [ 131.548563][ T7155] netlink: 'syz.4.273': attribute type 2 has an invalid length. [ 131.557050][ T7146] bridge0: entered promiscuous mode [ 131.778831][ T7164] __nla_validate_parse: 4 callbacks suppressed [ 131.778848][ T7164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.276'. [ 131.897039][ T7168] tipc: Started in network mode [ 131.918417][ T7168] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 131.930732][ T7168] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 131.943905][ T7168] tipc: Enabled bearer , priority 10 [ 131.970357][ T7168] wg2: entered promiscuous mode [ 131.977674][ T7168] wg2: entered allmulticast mode [ 131.990771][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'. [ 132.030767][ T7168] netlink: 36 bytes leftover after parsing attributes in process `syz.0.277'. [ 132.283886][ T7180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.319230][ T7182] netlink: 'syz.3.282': attribute type 13 has an invalid length. [ 132.822763][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.050736][ T5947] tipc: Node number set to 1 [ 133.319311][ T7213] netlink: 68 bytes leftover after parsing attributes in process `syz.2.290'. [ 133.953660][ T7245] ieee802154 phy0 wpan0: encryption failed: -90 [ 134.113184][ T7245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.301'. [ 134.137208][ T7251] netlink: 52 bytes leftover after parsing attributes in process `syz.3.303'. [ 134.216210][ T7245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.301'. [ 134.226867][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.242037][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.257980][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.303'. [ 134.276485][ T7256] netlink: 24 bytes leftover after parsing attributes in process `syz.4.304'. [ 134.337671][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.371547][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.621986][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'. [ 135.141763][ T2994] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22 [ 135.362395][ T7305] tipc: Enabled bearer , priority 0 [ 135.464446][ T7302] syzkaller0: entered promiscuous mode [ 135.470473][ T7302] syzkaller0: entered allmulticast mode [ 135.585443][ T7302] tipc: Resetting bearer [ 135.641870][ T7301] tipc: Resetting bearer [ 135.700812][ T7301] tipc: Disabling bearer [ 136.423980][ T7344] tipc: Enabled bearer , priority 0 [ 136.475423][ T7345] syzkaller0: entered promiscuous mode [ 136.507865][ T7345] syzkaller0: entered allmulticast mode [ 136.568519][ T7343] tipc: Enabling of bearer rejected, already enabled [ 136.702949][ T7345] tipc: Resetting bearer [ 136.791607][ T7345] tipc: Disabling bearer [ 137.013384][ T7364] __nla_validate_parse: 4 callbacks suppressed [ 137.013401][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'. [ 137.066083][ T7373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.334'. [ 137.101290][ T7368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.337'. [ 137.178751][ T7368] bridge2: port 1(veth3) entered blocking state [ 137.203763][ T7368] bridge2: port 1(veth3) entered disabled state [ 137.211117][ T7368] veth3: entered allmulticast mode [ 137.218368][ T7368] veth3: entered promiscuous mode [ 137.226623][ T7375] tipc: Started in network mode [ 137.232446][ T7375] tipc: Node identity 080211, cluster identity 4711 [ 137.239237][ T7375] tipc: Enabled bearer , priority 0 [ 137.256959][ T7379] bond0: (slave bond_slave_0): Releasing backup interface [ 137.258213][ T7368] netlink: 16 bytes leftover after parsing attributes in process `syz.3.337'. [ 137.283205][ T7379] bond0: (slave bond_slave_1): Releasing backup interface [ 137.316412][ T7388] netlink: 'syz.1.340': attribute type 10 has an invalid length. [ 137.332889][ T7379] team0: Port device team_slave_0 removed [ 137.343389][ T7388] netlink: 40 bytes leftover after parsing attributes in process `syz.1.340'. [ 137.370364][ T7379] team0: Port device team_slave_1 removed [ 137.384954][ T7379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.393908][ T7379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.411462][ T7379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.439615][ T7379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.499273][ T7377] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 137.525109][ T7377] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 137.543808][ T7381] bridge2: port 2(veth0_to_bond) entered blocking state [ 137.552783][ T7381] bridge2: port 2(veth0_to_bond) entered disabled state [ 137.562283][ T7381] veth0_to_bond: entered allmulticast mode [ 137.573201][ T7381] veth0_to_bond: entered promiscuous mode [ 137.635045][ T7380] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.739885][ T7388] batman_adv: batadv0: Adding interface: virt_wifi0 [ 137.756757][ T7388] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.799538][ T7388] batman_adv: batadv0: Interface activated: virt_wifi0 [ 137.812803][ T7396] tipc: Resetting bearer [ 137.821722][ T7380] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.891523][ T7407] netlink: 168 bytes leftover after parsing attributes in process `syz.3.342'. [ 137.918568][ T7380] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.017059][ T7380] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.046194][ T7410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.343'. [ 138.132229][ T7412] netlink: 28 bytes leftover after parsing attributes in process `syz.3.342'. [ 138.242163][ T6555] tipc: Node number set to 134353152 [ 138.289598][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.339053][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.376459][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.410457][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.442248][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.348'. [ 138.502582][ T7432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.532939][ T7432] netlink: 'syz.4.350': attribute type 3 has an invalid length. [ 138.657108][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.354'. [ 138.663682][ T7447] pim6reg: entered allmulticast mode [ 138.842323][ T7454] netlink: 'syz.1.359': attribute type 6 has an invalid length. [ 139.061321][ T7472] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 139.542221][ T7497] tipc: Enabled bearer , priority 0 [ 139.549465][ T7503] syzkaller0: entered promiscuous mode [ 139.564225][ T7503] syzkaller0: entered allmulticast mode [ 139.575193][ T7505] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) ! [ 139.656572][ T7508] netlink: 'syz.3.373': attribute type 1 has an invalid length. [ 139.744323][ T7508] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 139.995185][ T7492] tipc: Resetting bearer [ 140.106267][ T7492] tipc: Disabling bearer [ 140.185299][ T7523] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.387953][ T7523] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 140.398642][ T7545] netlink: 'syz.2.383': attribute type 11 has an invalid length. [ 140.407439][ T7545] netlink: 'syz.2.383': attribute type 11 has an invalid length. [ 140.419342][ T7523] bond2: (slave macvlan0): Enslaving as a backup interface with an up link [ 140.479142][ T7528] bridge_slave_0: left allmulticast mode [ 140.501015][ T7528] bridge_slave_0: left promiscuous mode [ 140.508018][ T7528] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.520551][ T59] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 140.537987][ T7528] bridge_slave_1: left allmulticast mode [ 140.557552][ T7528] bridge_slave_1: left promiscuous mode [ 140.566659][ T7528] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.578614][ T7528] veth0_to_bond: left allmulticast mode [ 140.587807][ T7528] veth0_to_bond: left promiscuous mode [ 140.598458][ T7528] bridge2: port 2(veth0_to_bond) entered disabled state [ 140.615383][ T7528] bond0: (slave bond_slave_0): Releasing backup interface [ 140.629714][ T7528] bond0: (slave bond_slave_1): Releasing backup interface [ 140.632828][ T7556] netlink: 'syz.1.386': attribute type 1 has an invalid length. [ 140.650434][ T7528] team0: Port device team_slave_1 removed [ 140.656634][ T7528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.660796][ T59] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 140.678664][ T7528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.689720][ T7528] vlan0: left promiscuous mode [ 140.698693][ T7528] bridge0: left promiscuous mode [ 140.704827][ T7528] bridge1: port 1(vlan0) entered disabled state [ 140.728723][ T7528] veth3: left allmulticast mode [ 140.736991][ T7528] veth3: left promiscuous mode [ 140.743634][ T7528] bridge2: port 1(veth3) entered disabled state [ 140.755592][ T7528] bond2: (slave macvlan0): Removing an active aggregator [ 140.763591][ T7528] bond2: (slave macvlan0): Releasing backup interface [ 140.931522][ T7554] team0 (unregistering): Port device geneve0 removed [ 140.978593][ T7568] geneve2: entered promiscuous mode [ 140.999645][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.045611][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.073437][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.109636][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.269633][ T7579] netlink: 'syz.1.393': attribute type 1 has an invalid length. [ 141.341359][ T7587] ÿ: renamed from bond_slave_0 [ 141.355143][ T7590] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 141.965128][ T7618] tipc: Started in network mode [ 141.972927][ T7618] tipc: Node identity da332867c90b, cluster identity 4711 [ 141.981985][ T7618] tipc: Enabled bearer , priority 0 [ 141.998324][ T7618] syzkaller0: entered promiscuous mode [ 142.008057][ T7618] syzkaller0: entered allmulticast mode [ 142.090672][ T7618] tipc: Resetting bearer [ 142.114058][ T7618] netlink: 'syz.3.402': attribute type 3 has an invalid length. [ 142.154713][ T7617] tipc: Resetting bearer [ 142.197238][ T7617] tipc: Disabling bearer [ 142.360246][ T7631] netlink: 'syz.3.407': attribute type 17 has an invalid length. [ 142.562152][ T7631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.703742][ T7650] __nla_validate_parse: 12 callbacks suppressed [ 142.703761][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.412'. [ 142.903582][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.416'. [ 142.912393][ T7656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.415'. [ 142.946939][ T7657] vti0: entered promiscuous mode [ 142.991019][ T7656] bond0: entered promiscuous mode [ 143.015160][ T7656] bond0: left promiscuous mode [ 143.048412][ T7666] bridge0: port 1(syz_tun) entered blocking state [ 143.055366][ T7666] bridge0: port 1(syz_tun) entered disabled state [ 143.101238][ T7666] syz_tun: entered allmulticast mode [ 143.137703][ T7666] syz_tun: entered promiscuous mode [ 143.226248][ T7673] netlink: 20 bytes leftover after parsing attributes in process `syz.0.422'. [ 143.250690][ T7673] netlink: 16 bytes leftover after parsing attributes in process `syz.0.422'. [ 143.272337][ T7674] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 143.587383][ T7692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.429'. [ 143.734208][ T7698] netlink: 20 bytes leftover after parsing attributes in process `syz.2.429'. [ 143.752193][ T7700] netlink: 'syz.4.431': attribute type 10 has an invalid length. [ 143.809794][ T7700] macvlan0: entered allmulticast mode [ 143.856873][ T7700] veth1_vlan: entered allmulticast mode [ 143.884858][ T7700] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 143.900956][ T7706] netlink: 'syz.0.432': attribute type 1 has an invalid length. [ 143.908847][ T7706] netlink: 224 bytes leftover after parsing attributes in process `syz.0.432'. [ 144.093528][ T7710] tipc: Enabled bearer , priority 0 [ 144.107991][ T7710] syzkaller0: entered promiscuous mode [ 144.149023][ T7710] syzkaller0: entered allmulticast mode [ 144.182395][ T7710] tipc: Resetting bearer [ 144.248673][ T7710] tipc: Resetting bearer [ 144.274128][ T7710] tipc: Disabling bearer [ 144.417132][ T7722] netlink: 40 bytes leftover after parsing attributes in process `syz.2.438'. [ 144.472901][ T7719] vlan2: entered promiscuous mode [ 144.478181][ T7719] vlan2: entered allmulticast mode [ 144.483431][ T7719] hsr_slave_1: entered allmulticast mode [ 144.524351][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.436'. [ 144.525899][ T7735] pim6reg99999999: entered allmulticast mode [ 144.742466][ T7754] IPVS: stopping backup sync thread 7674 ... [ 145.072005][ T7783] netlink: 'syz.3.448': attribute type 1 has an invalid length. [ 145.089627][ T7776] tipc: Enabling of bearer rejected, failed to enable media [ 145.102455][ T7782] netlink: 'syz.4.451': attribute type 4 has an invalid length. [ 145.574941][ T7813] netlink: 'syz.1.464': attribute type 1 has an invalid length. [ 145.914759][ T7836] netlink: 'syz.4.469': attribute type 1 has an invalid length. [ 145.960618][ T7836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.041012][ T7842] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.048050][ T7842] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 146.062210][ T7842] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 146.141529][ T7836] veth5: entered promiscuous mode [ 146.165065][ T7836] bond1: (slave veth5): Enslaving as an active interface with a down link [ 146.203471][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.226282][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.269152][ T7854] netlink: 'syz.3.475': attribute type 2 has an invalid length. [ 146.405437][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 146.538539][ T7874] bridge_slave_1: entered promiscuous mode [ 146.544936][ T7874] bridge_slave_1: entered allmulticast mode [ 147.174031][ T7861] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 147.706742][ T7924] tipc: Enabled bearer , priority 10 [ 148.096437][ T7948] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 148.821162][ T6551] tipc: Node number set to 2606366716 [ 148.900628][ T7961] __nla_validate_parse: 10 callbacks suppressed [ 148.900646][ T7961] netlink: 256 bytes leftover after parsing attributes in process `syz.2.503'. [ 148.946708][ T7961] netlink: 48 bytes leftover after parsing attributes in process `syz.2.503'. [ 149.054061][ T7977] netlink: 24 bytes leftover after parsing attributes in process `syz.2.508'. [ 149.091140][ T7977] bond2: entered promiscuous mode [ 149.096822][ T7977] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.293845][ T7977] bond2 (unregistering): Released all slaves [ 149.327877][ T7975] netlink: 96 bytes leftover after parsing attributes in process `syz.4.507'. [ 149.683735][ T8008] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 149.738217][ T8013] netlink: 24 bytes leftover after parsing attributes in process `syz.2.515'. [ 149.955000][ T8021] Bluetooth: MGMT ver 1.23 [ 150.078969][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'. [ 150.391898][ T8041] nbd2: detected capacity change from 0 to 63 [ 150.413011][ T8043] block nbd2: NBD_DISCONNECT [ 150.439440][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'. [ 150.482784][ T8043] block nbd2: Disconnected due to user request. [ 150.520782][ T8043] block nbd2: shutting down sockets [ 150.599109][ T8047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.525'. [ 150.741061][ T8049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.526'. [ 150.772493][ T8049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.526'. [ 150.798999][ T8050] tipc: Can't bind to reserved service type 2 [ 150.910668][ T8048] delete_channel: no stack [ 151.602242][ T8081] tipc: Enabled bearer , priority 0 [ 151.620542][ T8081] syzkaller0: entered promiscuous mode [ 151.649788][ T8081] syzkaller0: entered allmulticast mode [ 151.669878][ T8081] tipc: Resetting bearer [ 151.690653][ T8080] tipc: Resetting bearer [ 151.729385][ T8080] tipc: Disabling bearer [ 152.237209][ T8097] vxcan2: entered allmulticast mode [ 154.329674][ T8163] __nla_validate_parse: 4 callbacks suppressed [ 154.329691][ T8163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.554'. [ 154.384082][ T8162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.555'. [ 154.445706][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.557'. [ 155.144743][ T8198] netlink: 'syz.4.565': attribute type 1 has an invalid length. [ 155.159169][ T8198] netlink: 'syz.4.565': attribute type 1 has an invalid length. [ 155.250871][ T8198] macsec1: entered promiscuous mode [ 155.276369][ T8198] dummy0: entered promiscuous mode [ 155.288070][ T8198] dummy0: left promiscuous mode [ 155.335512][ T8213] netlink: 'syz.0.570': attribute type 1 has an invalid length. [ 155.391262][ T8213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.570'. [ 155.592109][ T59] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 155.622011][ T8220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.572'. [ 155.643461][ T6567] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 155.643461][ T59] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 155.695843][ T8231] netlink: 'syz.4.574': attribute type 21 has an invalid length. [ 155.709676][ T8231] netlink: 128 bytes leftover after parsing attributes in process `syz.4.574'. [ 155.769080][ T8231] netlink: 'syz.4.574': attribute type 4 has an invalid length. [ 155.793444][ T8231] netlink: 'syz.4.574': attribute type 5 has an invalid length. [ 155.820141][ T8231] netlink: 3 bytes leftover after parsing attributes in process `syz.4.574'. [ 156.020343][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 156.060246][ T6566] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 156.074951][ T8252] delete_channel: no stack [ 156.262220][ T5947] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 156.348232][ T8267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.368999][ T8268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.515899][ T8274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.585'. [ 156.517419][ T8276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.703008][ T8282] syz_tun: entered promiscuous mode [ 156.861823][ T8293] netlink: 36 bytes leftover after parsing attributes in process `syz.1.591'. [ 157.002106][ T8303] sctp: [Deprecated]: syz.0.592 (pid 8303) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.002106][ T8303] Use struct sctp_sack_info instead [ 157.053002][ T8304] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 157.067810][ T8304] openvswitch: netlink: Message has 252 unknown bytes. [ 157.103773][ T8309] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 157.120987][ T8309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.384977][ T8317] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.478029][ T8317] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.568188][ T8330] netlink: 'syz.4.600': attribute type 9 has an invalid length. [ 157.617029][ T8317] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.762504][ T8317] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.966677][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.103647][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.124293][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.214228][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.387243][ T8371] netlink: 'syz.1.612': attribute type 4 has an invalid length. [ 158.707567][ T8387] netlink: 'syz.2.614': attribute type 5 has an invalid length. [ 158.784588][ T8387] geneve2: entered promiscuous mode [ 158.790786][ T8387] geneve2: entered allmulticast mode [ 158.806796][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 158.822006][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 158.834717][ T8388] netlink: 'syz.1.618': attribute type 4 has an invalid length. [ 158.845589][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 158.912386][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 159.276516][ T8414] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 159.310247][ T8412] wg1 speed is unknown, defaulting to 1000 [ 159.316384][ T8412] wg1 speed is unknown, defaulting to 1000 [ 159.357256][ T8412] wg1 speed is unknown, defaulting to 1000 [ 159.378854][ T8422] __nla_validate_parse: 13 callbacks suppressed [ 159.378872][ T8422] netlink: 16 bytes leftover after parsing attributes in process `syz.1.621'. [ 159.397935][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 159.412453][ T8412] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 159.432902][ T8412] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 159.540612][ T8412] wg1 speed is unknown, defaulting to 1000 [ 159.548864][ T8412] wg1 speed is unknown, defaulting to 1000 [ 159.604944][ T8412] wg1 speed is unknown, defaulting to 1000 [ 159.663325][ T8412] wg1 speed is unknown, defaulting to 1000 [ 159.709491][ T8444] sctp: [Deprecated]: syz.0.634 (pid 8444) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.709491][ T8444] Use struct sctp_sack_info instead [ 159.738557][ T8412] wg1 speed is unknown, defaulting to 1000 [ 159.940205][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 160.060349][ T8453] wg1 speed is unknown, defaulting to 1000 [ 160.193729][ T8465] netlink: zone id is out of range [ 160.201324][ T8465] netlink: zone id is out of range [ 160.206488][ T8465] netlink: zone id is out of range [ 160.301652][ T8467] netlink: 48 bytes leftover after parsing attributes in process `syz.2.639'. [ 160.479293][ T8467] wg1 speed is unknown, defaulting to 1000 [ 160.780741][ T8488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.645'. [ 160.937832][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.648'. [ 160.947812][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.648'. [ 161.181546][ T8516] netlink: 40 bytes leftover after parsing attributes in process `syz.1.651'. [ 161.208016][ T8506] netlink: 96 bytes leftover after parsing attributes in process `syz.1.651'. [ 161.283092][ T8511] netlink: 80 bytes leftover after parsing attributes in process `syz.3.650'. [ 161.299078][ T8503] wg1 speed is unknown, defaulting to 1000 [ 161.389756][ T8524] netlink: 3 bytes leftover after parsing attributes in process `syz.2.655'. [ 161.408986][ T8527] netlink: 732 bytes leftover after parsing attributes in process `syz.4.656'. [ 161.523505][ T8524] batadv1: entered promiscuous mode [ 161.556430][ T8524] batadv1: entered allmulticast mode [ 161.868578][ T8547] validate_nla: 5 callbacks suppressed [ 161.868596][ T8547] netlink: 'syz.2.660': attribute type 4 has an invalid length. [ 162.329685][ T8569] net_ratelimit: 18 callbacks suppressed [ 162.329701][ T8569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.469116][ T8575] netlink: 'syz.1.669': attribute type 10 has an invalid length. [ 162.495613][ T8575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.779824][ T8579] wg1 speed is unknown, defaulting to 1000 [ 163.115545][ T8594] netlink: 'syz.3.675': attribute type 29 has an invalid length. [ 163.705530][ T8612] can: request_module (can-proto-0) failed. [ 163.831769][ T8612] netlink: 'syz.2.683': attribute type 16 has an invalid length. [ 163.840624][ T8615] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.852242][ T8612] netlink: 'syz.2.683': attribute type 17 has an invalid length. [ 163.921359][ T8612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.941112][ T8612] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.975237][ T8621] netlink: 'syz.3.685': attribute type 1 has an invalid length. [ 164.004285][ T8615] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.098274][ T8621] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.118294][ T8629] bond3: entered promiscuous mode [ 164.192811][ T8615] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.418118][ T8615] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.529508][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.551164][ T8636] __nla_validate_parse: 11 callbacks suppressed [ 164.551182][ T8636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.689'. [ 164.588131][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.626542][ T59] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.722288][ T59] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.837826][ T8650] netlink: 24 bytes leftover after parsing attributes in process `syz.3.692'. [ 164.873572][ T8646] IPVS: Scheduler module ip_vs_ not found [ 165.063786][ T8660] netlink: 40 bytes leftover after parsing attributes in process `syz.1.694'. [ 165.100057][ T8660] netlink: 24 bytes leftover after parsing attributes in process `syz.1.694'. [ 165.171019][ T8660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.694'. [ 165.297423][ T8664] netlink: 'syz.2.696': attribute type 10 has an invalid length. [ 165.318152][ T8664] netlink: 'syz.2.696': attribute type 10 has an invalid length. [ 165.424656][ T8666] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.539408][ T8664] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.574139][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.697'. [ 165.685453][ T8668] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 165.726577][ T8668] bond2: (slave macvlan2): Enslaving as a backup interface with a down link [ 165.917017][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'. [ 165.972253][ T8640] warn_alloc: 1 callbacks suppressed [ 165.972283][ T8640] syz.4.690: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 166.073388][ T8640] CPU: 1 UID: 0 PID: 8640 Comm: syz.4.690 Not tainted syzkaller #0 PREEMPT(full) [ 166.073415][ T8640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 166.073425][ T8640] Call Trace: [ 166.073433][ T8640] [ 166.073442][ T8640] dump_stack_lvl+0x189/0x250 [ 166.073472][ T8640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.073493][ T8640] ? __pfx__printk+0x10/0x10 [ 166.073516][ T8640] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 166.073536][ T8640] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 166.073558][ T8640] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 166.073581][ T8640] warn_alloc+0x214/0x310 [ 166.073612][ T8640] ? __pfx_warn_alloc+0x10/0x10 [ 166.073646][ T8640] ? __get_vm_area_node+0x28f/0x300 [ 166.073669][ T8640] ? hash_netport4_resize+0x235/0x1b60 [ 166.073695][ T8640] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 166.073749][ T8640] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 166.073777][ T8640] ? rcu_is_watching+0x15/0xb0 [ 166.073795][ T8640] ? hash_netport4_resize+0x235/0x1b60 [ 166.073812][ T8640] ? hash_netport4_resize+0x235/0x1b60 [ 166.073830][ T8640] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 166.073854][ T8640] ? hash_netport4_resize+0x235/0x1b60 [ 166.073879][ T8640] hash_netport4_resize+0x235/0x1b60 [ 166.073896][ T8640] ? hash_netport4_uadt+0xc97/0xf30 [ 166.073918][ T8640] ? __pfx_hash_netport4_add+0x10/0x10 [ 166.073935][ T8640] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 166.073962][ T8640] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 166.073988][ T8640] call_ad+0x44b/0xb00 [ 166.074021][ T8640] ? __pfx_call_ad+0x10/0x10 [ 166.074058][ T8640] ? __nla_parse+0x40/0x60 [ 166.074079][ T8640] ip_set_ad+0x791/0x930 [ 166.074113][ T8640] ? __pfx_ip_set_ad+0x10/0x10 [ 166.074174][ T8640] nfnetlink_rcv_msg+0xb4a/0x1130 [ 166.074201][ T8640] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 166.074242][ T8640] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 166.074303][ T8640] ? __lock_acquire+0xab9/0xd20 [ 166.074342][ T8640] netlink_rcv_skb+0x208/0x470 [ 166.074362][ T8640] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 166.074387][ T8640] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 166.074417][ T8640] ? bpf_lsm_capable+0x9/0x20 [ 166.074438][ T8640] ? security_capable+0x7e/0x2e0 [ 166.074466][ T8640] nfnetlink_rcv+0x26a/0x2520 [ 166.074489][ T8640] ? is_bpf_text_address+0x26/0x2b0 [ 166.074515][ T8640] ? kernel_text_address+0xa5/0xe0 [ 166.074539][ T8640] ? __kernel_text_address+0xd/0x40 [ 166.074561][ T8640] ? unwind_get_return_address+0x4d/0x90 [ 166.074580][ T8640] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 166.074600][ T8640] ? arch_stack_walk+0xfc/0x150 [ 166.074634][ T8640] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 166.074660][ T8640] ? stack_depot_save_flags+0x40/0x860 [ 166.074688][ T8640] ? __lock_acquire+0xab9/0xd20 [ 166.074735][ T8640] ? __lock_acquire+0xab9/0xd20 [ 166.074769][ T8640] ? netlink_deliver_tap+0x2e/0x1b0 [ 166.074793][ T8640] ? netlink_deliver_tap+0x2e/0x1b0 [ 166.074818][ T8640] netlink_unicast+0x82f/0x9e0 [ 166.074849][ T8640] ? __pfx_netlink_unicast+0x10/0x10 [ 166.074874][ T8640] ? netlink_sendmsg+0x642/0xb30 [ 166.074890][ T8640] ? skb_put+0x11b/0x210 [ 166.074911][ T8640] netlink_sendmsg+0x805/0xb30 [ 166.074936][ T8640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.074956][ T8640] ? aa_sock_msg_perm+0xf1/0x1d0 [ 166.074974][ T8640] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 166.074992][ T8640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.075008][ T8640] __sock_sendmsg+0x21c/0x270 [ 166.075033][ T8640] ____sys_sendmsg+0x505/0x830 [ 166.075056][ T8640] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.075082][ T8640] ? import_iovec+0x74/0xa0 [ 166.075104][ T8640] ___sys_sendmsg+0x21f/0x2a0 [ 166.075126][ T8640] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.075183][ T8640] ? __fget_files+0x2a/0x420 [ 166.075199][ T8640] ? __fget_files+0x3a0/0x420 [ 166.075226][ T8640] __x64_sys_sendmsg+0x19b/0x260 [ 166.075262][ T8640] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 166.075291][ T8640] ? rcu_is_watching+0x15/0xb0 [ 166.075313][ T8640] ? do_syscall_64+0xbe/0x3b0 [ 166.075334][ T8640] do_syscall_64+0xfa/0x3b0 [ 166.075349][ T8640] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.075365][ T8640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.075381][ T8640] ? clear_bhb_loop+0x60/0xb0 [ 166.075403][ T8640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.075420][ T8640] RIP: 0033:0x7f7e2e98ebe9 [ 166.075438][ T8640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.075453][ T8640] RSP: 002b:00007f7e2f79c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.075472][ T8640] RAX: ffffffffffffffda RBX: 00007f7e2ebc5fa0 RCX: 00007f7e2e98ebe9 [ 166.075485][ T8640] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000007 [ 166.075497][ T8640] RBP: 00007f7e2ea11e19 R08: 0000000000000000 R09: 0000000000000000 [ 166.075507][ T8640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.075517][ T8640] R13: 00007f7e2ebc6038 R14: 00007f7e2ebc5fa0 R15: 00007ffe19be3c08 [ 166.075548][ T8640] [ 166.075556][ T8640] Mem-Info: [ 166.442604][ T8666] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.454501][ T8640] active_anon:11119 inactive_anon:0 isolated_anon:0 [ 166.454501][ T8640] active_file:3145 inactive_file:39880 isolated_file:0 [ 166.454501][ T8640] unevictable:768 dirty:297 writeback:0 [ 166.454501][ T8640] slab_reclaimable:12052 slab_unreclaimable:130956 [ 166.454501][ T8640] mapped:34089 shmem:4413 pagetables:1164 [ 166.454501][ T8640] sec_pagetables:0 bounce:0 [ 166.454501][ T8640] kernel_misc_reclaimable:0 [ 166.454501][ T8640] free:1282051 free_pcp:15417 free_cma:0 [ 166.640512][ T8640] Node 0 active_anon:48376kB inactive_anon:0kB active_file:12580kB inactive_file:159320kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144556kB dirty:1188kB writeback:0kB shmem:19416kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12876kB pagetables:4500kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 166.733615][ T8640] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 166.817679][ T8666] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.900575][ T8640] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 166.980778][ T8640] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 166.995813][ T8640] Node 0 DMA32 free:1231124kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:61224kB inactive_anon:0kB active_file:12580kB inactive_file:157744kB unevictable:1536kB writepending:1220kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:59212kB local_pcp:32140kB free_cma:0kB [ 167.081403][ T8640] lowmem_reserve[]: 0 0 1 1 1 [ 167.086191][ T8640] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 167.125873][ T8666] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.150261][ T8640] lowmem_reserve[]: 0 0 0 0 0 [ 167.160055][ T8640] Node 1 Normal free:3890176kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15400kB local_pcp:7552kB free_cma:0kB [ 167.244401][ T8640] lowmem_reserve[]: 0 0 0 0 0 [ 167.276374][ T8640] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 167.348729][ T8640] Node 0 DMA32: 40*4kB (UME) 103*8kB (UM) 38*16kB (UME) 445*32kB (UME) 71*64kB (UME) 7*128kB (UE) 25*256kB (U) 16*512kB (UME) 9*1024kB (UME) 1*2048kB (E) 293*4096kB (UM) = 1247256kB [ 167.368563][ T8640] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 167.382643][ T8640] Node 1 Normal: 166*4kB (UE) 49*8kB (UME) 40*16kB (UME) 85*32kB (UME) 33*64kB (UME) 9*128kB (UME) 4*256kB (UME) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3890176kB [ 167.404483][ T8640] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.405005][ T59] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.461042][ T8640] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 167.503710][ T8640] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.512169][ T59] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.533417][ T59] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.533509][ T8640] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 167.561850][ T8702] netlink: 'syz.2.704': attribute type 4 has an invalid length. [ 167.570787][ T8702] netlink: 'syz.2.704': attribute type 64 has an invalid length. [ 167.573744][ T8640] 48610 total pagecache pages [ 167.595919][ T8640] 0 pages in swap cache [ 167.603691][ T8640] Free swap = 124996kB [ 167.613824][ T59] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.622445][ T8640] Total swap = 124996kB [ 167.633477][ T8640] 2097051 pages RAM [ 167.640753][ T8640] 0 pages HighMem/MovableOnly [ 167.645459][ T8640] 425673 pages reserved [ 167.657154][ T8640] 0 pages cma reserved [ 167.706336][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.705'. [ 167.752078][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.705'. [ 167.766427][ T8711] netlink: 24 bytes leftover after parsing attributes in process `syz.4.707'. [ 168.074954][ T8722] vlan2: entered promiscuous mode [ 168.155316][ T8718] vlan2: entered promiscuous mode [ 168.219737][ T8729] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 168.236318][ T8729] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 168.248333][ T8729] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 168.326122][ T8718] vlan2: entered promiscuous mode [ 168.449909][ T8718] vlan2: entered promiscuous mode [ 168.606435][ T8747] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.615096][ T8747] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.660422][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 168.694824][ T8747] wg2: left promiscuous mode [ 168.699575][ T8747] wg2: left allmulticast mode [ 168.751354][ T8747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.771354][ T8747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.868727][ T8747] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 168.878094][ T8747] vti0: left promiscuous mode [ 168.892961][ T8718] vlan2: entered promiscuous mode [ 168.930403][ T49] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.948119][ T49] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.986244][ T49] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.010785][ T49] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.183508][ T8775] wg1 speed is unknown, defaulting to 1000 [ 169.288922][ T8779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 169.554585][ T8775] netlink: 'syz.0.726': attribute type 2 has an invalid length. [ 169.721823][ T8811] syzkaller1: entered promiscuous mode [ 169.736227][ T8811] syzkaller1: entered allmulticast mode [ 170.008194][ T8779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 170.064687][ T8817] __nla_validate_parse: 138 callbacks suppressed [ 170.064707][ T8817] netlink: 44 bytes leftover after parsing attributes in process `syz.0.737'. [ 170.199459][ T8816] netlink: 'syz.2.736': attribute type 1 has an invalid length. [ 170.211773][ T8816] netlink: 'syz.2.736': attribute type 4 has an invalid length. [ 170.219776][ T8816] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.736'. [ 170.409132][ T8836] netlink: 'syz.2.740': attribute type 13 has an invalid length. [ 170.447742][ T8836] netlink: 'syz.2.740': attribute type 17 has an invalid length. [ 170.518798][ T8845] FAULT_INJECTION: forcing a failure. [ 170.518798][ T8845] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 170.588965][ T8836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.608975][ T8845] CPU: 0 UID: 0 PID: 8845 Comm: syz.0.745 Not tainted syzkaller #0 PREEMPT(full) [ 170.609009][ T8845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 170.609019][ T8845] Call Trace: [ 170.609027][ T8845] [ 170.609035][ T8845] dump_stack_lvl+0x189/0x250 [ 170.609059][ T8845] ? __pfx____ratelimit+0x10/0x10 [ 170.609077][ T8845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.609095][ T8845] ? __pfx__printk+0x10/0x10 [ 170.609117][ T8845] ? __might_fault+0xb0/0x130 [ 170.609149][ T8845] should_fail_ex+0x414/0x560 [ 170.609175][ T8845] _copy_from_iter+0x1de/0x1790 [ 170.609202][ T8845] ? rcu_is_watching+0x15/0xb0 [ 170.609221][ T8845] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 170.609244][ T8845] ? __pfx__copy_from_iter+0x10/0x10 [ 170.609263][ T8845] ? __build_skb_around+0x257/0x3e0 [ 170.609284][ T8845] ? netlink_sendmsg+0x642/0xb30 [ 170.609299][ T8845] ? skb_put+0x11b/0x210 [ 170.609321][ T8845] netlink_sendmsg+0x6b2/0xb30 [ 170.609348][ T8845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.609369][ T8845] ? aa_sock_msg_perm+0xf1/0x1d0 [ 170.609388][ T8845] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 170.609406][ T8845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.609424][ T8845] __sock_sendmsg+0x21c/0x270 [ 170.609449][ T8845] ____sys_sendmsg+0x505/0x830 [ 170.609474][ T8845] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.609503][ T8845] ? import_iovec+0x74/0xa0 [ 170.609525][ T8845] ___sys_sendmsg+0x21f/0x2a0 [ 170.609547][ T8845] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.609602][ T8845] ? __fget_files+0x2a/0x420 [ 170.609616][ T8845] ? __fget_files+0x3a0/0x420 [ 170.609642][ T8845] __x64_sys_sendmsg+0x19b/0x260 [ 170.609664][ T8845] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 170.609691][ T8845] ? __pfx_ksys_write+0x10/0x10 [ 170.609709][ T8845] ? rcu_is_watching+0x15/0xb0 [ 170.609731][ T8845] ? do_syscall_64+0xbe/0x3b0 [ 170.609753][ T8845] do_syscall_64+0xfa/0x3b0 [ 170.609770][ T8845] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.609787][ T8845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.609804][ T8845] ? clear_bhb_loop+0x60/0xb0 [ 170.609824][ T8845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.609839][ T8845] RIP: 0033:0x7f6a1e78ebe9 [ 170.609855][ T8845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.609867][ T8845] RSP: 002b:00007f6a1c9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.609884][ T8845] RAX: ffffffffffffffda RBX: 00007f6a1e9c5fa0 RCX: 00007f6a1e78ebe9 [ 170.609894][ T8845] RDX: 0000000000000010 RSI: 00002000000006c0 RDI: 0000000000000003 [ 170.609905][ T8845] RBP: 00007f6a1c9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 170.609926][ T8845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.609935][ T8845] R13: 00007f6a1e9c6038 R14: 00007f6a1e9c5fa0 R15: 00007ffdf6a09e18 [ 170.609960][ T8845] [ 171.334483][ T8860] netlink: 'syz.2.750': attribute type 2 has an invalid length. [ 171.393148][ T8860] ave_0: entered promiscuous mode [ 171.753155][ T8888] wg1 speed is unknown, defaulting to 1000 [ 171.789012][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'. [ 171.804764][ T8890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.755'. [ 171.861761][ T8894] netlink: 'syz.4.756': attribute type 6 has an invalid length. [ 171.893297][ T8894] netlink: 'syz.4.756': attribute type 1 has an invalid length. [ 171.956578][ T8892] syzkaller1: entered promiscuous mode [ 171.972388][ T8898] netlink: 28 bytes leftover after parsing attributes in process `syz.4.756'. [ 171.982180][ T8892] syzkaller1: entered allmulticast mode [ 171.991561][ T8892] syzkaller1: left promiscuous mode [ 171.997096][ T8892] syzkaller1: left allmulticast mode [ 172.139610][ T8903] netlink: 20 bytes leftover after parsing attributes in process `syz.4.758'. [ 172.209886][ T8909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.759'. [ 172.239617][ T8912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.759'. [ 172.278122][ T8914] sctp: [Deprecated]: syz.2.761 (pid 8914) Use of int in max_burst socket option deprecated. [ 172.278122][ T8914] Use struct sctp_assoc_value instead [ 172.300430][ T8905] can: request_module (can-proto-3) failed. [ 172.567388][ T8921] netlink: 68 bytes leftover after parsing attributes in process `syz.3.762'. [ 172.655658][ T8935] wg1 speed is unknown, defaulting to 1000 [ 172.708366][ T5876] Bluetooth: hci4: link tx timeout [ 172.714553][ T5876] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.724976][ T5876] Bluetooth: hci4: link tx timeout [ 172.730257][ T5876] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.738105][ T5876] Bluetooth: hci4: link tx timeout [ 172.743501][ T5876] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.751409][ T5876] Bluetooth: hci4: link tx timeout [ 172.756662][ T5876] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.765793][ T5876] Bluetooth: hci4: link tx timeout [ 172.771055][ T5876] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.780649][ T5876] Bluetooth: hci4: link tx timeout [ 172.786057][ T5876] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.833336][ T8946] tipc: Enabling of bearer rejected, already enabled [ 173.224577][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.775'. [ 173.530923][ T30] audit: type=1800 audit(1757392199.863:2): pid=8958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.774" name="memory.events" dev="tmpfs" ino=679 res=0 errno=0 [ 173.942599][ T8994] netlink: 'syz.4.785': attribute type 1 has an invalid length. [ 174.164221][ T9000] bridge_slave_1: left promiscuous mode [ 174.172224][ T9000] bridge_slave_1: left allmulticast mode [ 174.212890][ T9000] geneve2: left promiscuous mode [ 174.218026][ T9000] geneve2: left allmulticast mode [ 174.280887][ T59] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.320661][ T59] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 174.351984][ T59] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.366611][ T59] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 174.381787][ T9009] veth1_macvtap: left promiscuous mode [ 174.418741][ T59] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.428019][ T59] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 174.437445][ T59] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.447347][ T59] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 174.621972][ T9028] netlink: 'syz.1.792': attribute type 1 has an invalid length. [ 174.746030][ T5876] Bluetooth: hci4: command 0x0405 tx timeout [ 175.304287][ T9071] veth3: entered promiscuous mode [ 175.516054][ T9082] netlink: 'syz.2.807': attribute type 21 has an invalid length. [ 175.529400][ T9082] netlink: 'syz.2.807': attribute type 22 has an invalid length. [ 175.548024][ T9082] netlink: 'syz.2.807': attribute type 23 has an invalid length. [ 175.598674][ T9082] netlink: 'syz.2.807': attribute type 25 has an invalid length. [ 175.618896][ T9082] __nla_validate_parse: 9 callbacks suppressed [ 175.618915][ T9082] netlink: 96 bytes leftover after parsing attributes in process `syz.2.807'. [ 175.762391][ T9091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.809'. [ 175.868433][ T9100] netlink: 'syz.3.811': attribute type 3 has an invalid length. [ 175.889601][ T9101] netlink: 16 bytes leftover after parsing attributes in process `syz.3.811'. [ 176.124434][ T9091] netlink: 36 bytes leftover after parsing attributes in process `syz.0.809'. [ 176.426468][ T9126] FAULT_INJECTION: forcing a failure. [ 176.426468][ T9126] name failslab, interval 1, probability 0, space 0, times 1 [ 176.452361][ T9126] CPU: 1 UID: 0 PID: 9126 Comm: syz.0.818 Not tainted syzkaller #0 PREEMPT(full) [ 176.452385][ T9126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.452395][ T9126] Call Trace: [ 176.452402][ T9126] [ 176.452411][ T9126] dump_stack_lvl+0x189/0x250 [ 176.452435][ T9126] ? __pfx____ratelimit+0x10/0x10 [ 176.452453][ T9126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.452472][ T9126] ? __pfx__printk+0x10/0x10 [ 176.452499][ T9126] ? __pfx___might_resched+0x10/0x10 [ 176.452520][ T9126] should_fail_ex+0x414/0x560 [ 176.452546][ T9126] should_failslab+0xa8/0x100 [ 176.452570][ T9126] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 176.452592][ T9126] ? __alloc_skb+0x112/0x2d0 [ 176.452614][ T9126] __alloc_skb+0x112/0x2d0 [ 176.452634][ T9126] netlink_sendmsg+0x5c6/0xb30 [ 176.452666][ T9126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.452685][ T9126] ? aa_sock_msg_perm+0xf1/0x1d0 [ 176.452704][ T9126] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 176.452722][ T9126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.452739][ T9126] __sock_sendmsg+0x21c/0x270 [ 176.452764][ T9126] ____sys_sendmsg+0x505/0x830 [ 176.452788][ T9126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.452812][ T9126] ? import_iovec+0x74/0xa0 [ 176.452834][ T9126] ___sys_sendmsg+0x21f/0x2a0 [ 176.452856][ T9126] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.452910][ T9126] ? __fget_files+0x2a/0x420 [ 176.452924][ T9126] ? __fget_files+0x3a0/0x420 [ 176.452950][ T9126] __x64_sys_sendmsg+0x19b/0x260 [ 176.452978][ T9126] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 176.453006][ T9126] ? __pfx_ksys_write+0x10/0x10 [ 176.453030][ T9126] ? rcu_is_watching+0x15/0xb0 [ 176.453052][ T9126] ? do_syscall_64+0xbe/0x3b0 [ 176.453073][ T9126] do_syscall_64+0xfa/0x3b0 [ 176.453096][ T9126] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.453113][ T9126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.453129][ T9126] ? clear_bhb_loop+0x60/0xb0 [ 176.453149][ T9126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.453164][ T9126] RIP: 0033:0x7f6a1e78ebe9 [ 176.453180][ T9126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.453192][ T9126] RSP: 002b:00007f6a1c9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.453211][ T9126] RAX: ffffffffffffffda RBX: 00007f6a1e9c5fa0 RCX: 00007f6a1e78ebe9 [ 176.453223][ T9126] RDX: 0000000004040140 RSI: 00002000000000c0 RDI: 0000000000000003 [ 176.453234][ T9126] RBP: 00007f6a1c9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 176.453244][ T9126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.453253][ T9126] R13: 00007f6a1e9c6038 R14: 00007f6a1e9c5fa0 R15: 00007ffdf6a09e18 [ 176.453281][ T9126] [ 176.912748][ T9147] netlink: 'syz.0.824': attribute type 1 has an invalid length. [ 176.991996][ T9147] bond3: (slave geneve2): making interface the new active one [ 177.014143][ T9147] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 177.038875][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 177.058240][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 177.063847][ T9147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.824'. [ 177.069421][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 177.090833][ T9147] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.098110][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 177.117321][ T9147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.824'. [ 177.196046][ T9162] netlink: 20 bytes leftover after parsing attributes in process `syz.3.826'. [ 177.219020][ T9162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 177.468015][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.830'. [ 177.845316][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.834'. [ 177.990304][ T9199] netlink: 'syz.1.838': attribute type 4 has an invalid length. [ 178.044727][ T9202] netlink: 'syz.1.838': attribute type 4 has an invalid length. [ 178.265601][ T9199] tipc: Enabled bearer , priority 0 [ 178.284400][ T9212] wg1 speed is unknown, defaulting to 1000 [ 178.333310][ T9199] tipc: Resetting bearer [ 178.377547][ T9198] tipc: Disabling bearer [ 180.004974][ T9303] Illegal XDP return value 4294967294 on prog (id 396) dev N/A, expect packet loss! [ 180.118367][ T9309] dvmrp8: entered allmulticast mode [ 180.248579][ T9307] validate_nla: 3 callbacks suppressed [ 180.248598][ T9307] netlink: 'syz.0.866': attribute type 21 has an invalid length. [ 180.277426][ T9307] ipvlan2: entered promiscuous mode [ 180.288185][ T9307] bridge0: port 3(ipvlan2) entered blocking state [ 180.294978][ T9307] bridge0: port 3(ipvlan2) entered disabled state [ 180.307953][ T9307] ipvlan2: entered allmulticast mode [ 180.327580][ T9307] gretap0: entered allmulticast mode [ 180.336989][ T9307] ipvlan2: left allmulticast mode [ 180.345120][ T9307] gretap0: left allmulticast mode [ 180.541924][ T9334] tipc: Enabled bearer , priority 0 [ 180.550632][ T9334] syzkaller0: entered promiscuous mode [ 180.556122][ T9334] syzkaller0: entered allmulticast mode [ 180.594166][ T9338] trusted_key: syz.1.878 sent an empty control message without MSG_MORE. [ 180.728604][ T9344] __nla_validate_parse: 9 callbacks suppressed [ 180.728621][ T9344] netlink: 324 bytes leftover after parsing attributes in process `syz.0.881'. [ 180.914002][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.884'. [ 181.101937][ T30] audit: type=1804 audit(1757392207.403:3): pid=9361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.886" name="/newroot/162/cgroup.controllers" dev="tmpfs" ino=846 res=1 errno=0 [ 181.163457][ T30] audit: type=1800 audit(1757392207.403:4): pid=9361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.886" name="cgroup.controllers" dev="tmpfs" ino=846 res=0 errno=0 [ 181.213107][ T30] audit: type=1800 audit(1757392207.403:5): pid=9361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.886" name="cgroup.controllers" dev="tmpfs" ino=846 res=0 errno=0 [ 181.294368][ T9333] tipc: Resetting bearer [ 181.316765][ T9333] tipc: Disabling bearer [ 181.568603][ T9382] wg1 speed is unknown, defaulting to 1000 [ 181.587406][ T9385] netlink: 24 bytes leftover after parsing attributes in process `syz.4.893'. [ 181.931063][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.896'. [ 182.044431][ T9396] vlan2: entered allmulticast mode [ 182.050437][ T9396] bridge0: entered allmulticast mode [ 182.090453][ T9396] bridge2: port 1(vlan2) entered blocking state [ 182.097012][ T9396] bridge2: port 1(vlan2) entered disabled state [ 182.112313][ T9396] vlan2: entered promiscuous mode [ 182.133921][ T9396] vlan1: entered promiscuous mode [ 182.326176][ T9411] wg1 speed is unknown, defaulting to 1000 [ 182.651269][ T9430] veth4: entered allmulticast mode [ 183.596340][ T9475] netlink: 60 bytes leftover after parsing attributes in process `syz.1.917'. [ 183.802041][ T9492] netlink: 176 bytes leftover after parsing attributes in process `syz.3.920'. [ 183.820835][ T9492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.920'. [ 184.221135][ T9517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.929'. [ 184.507349][ T9524] netlink: 19 bytes leftover after parsing attributes in process `syz.3.932'. [ 184.512347][ T9528] tipc: Enabled bearer , priority 0 [ 184.524224][ T9525] wg1 speed is unknown, defaulting to 1000 [ 184.530663][ T9529] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 184.590316][ T9528] syzkaller0: entered promiscuous mode [ 184.595842][ T9528] syzkaller0: entered allmulticast mode [ 184.634391][ T9530] bridge0: port 1(syz_tun) entered blocking state [ 184.641042][ T9530] bridge0: port 1(syz_tun) entered listening state [ 184.651609][ T9530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.659837][ T9530] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.674031][ T9530] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.767307][ T9537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.936'. [ 184.793883][ T9528] tipc: Resetting bearer [ 184.813540][ T9527] tipc: Resetting bearer [ 184.906795][ T9527] tipc: Disabling bearer [ 185.303565][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 185.345490][ T9569] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20003 [ 185.353217][ T9569] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20004 [ 185.500150][ T9564] wg1 speed is unknown, defaulting to 1000 [ 185.884502][ T9585] wg1 speed is unknown, defaulting to 1000 [ 186.308137][ T9600] __nla_validate_parse: 2 callbacks suppressed [ 186.308157][ T9600] netlink: 32 bytes leftover after parsing attributes in process `syz.4.950'. [ 186.436882][ T9585] netlink: 'syz.3.947': attribute type 2 has an invalid length. [ 186.757457][ T9615] netlink: 44 bytes leftover after parsing attributes in process `syz.3.956'. [ 186.812828][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.955'. [ 186.822401][ T9617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.955'. [ 186.831293][ T9617] netlink: 'syz.4.955': attribute type 1 has an invalid length. [ 186.861796][ T9617] netlink: 10 bytes leftover after parsing attributes in process `syz.4.955'. [ 186.930850][ T9617] nbd: socks must be embedded in a SOCK_ITEM attr [ 186.937667][ T9617] block nbd0: shutting down sockets [ 186.946391][ T9619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.957'. [ 187.123089][ T9623] wg1 speed is unknown, defaulting to 1000 [ 187.162656][ T9625] netlink: 27 bytes leftover after parsing attributes in process `syz.4.959'. [ 187.211793][ T9625] netlink: 40 bytes leftover after parsing attributes in process `syz.4.959'. [ 187.270964][ T9628] tipc: Enabled bearer , priority 0 [ 187.282913][ T9628] syzkaller0: entered promiscuous mode [ 187.297643][ T9628] syzkaller0: entered allmulticast mode [ 187.390615][ T9628] tipc: Resetting bearer [ 187.439278][ T9626] tipc: Resetting bearer [ 187.670080][ T9626] tipc: Disabling bearer [ 188.126841][ T9647] syzkaller0: entered promiscuous mode [ 188.133356][ T9647] syzkaller0: entered allmulticast mode [ 188.283945][ T9659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.970'. [ 188.999606][ T9672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.790761][ T9543] Set syz1 is full, maxelem 65536 reached [ 190.694818][ T9668] wg1 speed is unknown, defaulting to 1000 [ 190.820888][ T9669] wg1 speed is unknown, defaulting to 1000 [ 190.866282][ T9679] wg1 speed is unknown, defaulting to 1000 [ 190.866698][ T9689] netlink: 132 bytes leftover after parsing attributes in process `syz.3.977'. [ 190.998244][ T9694] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 191.007183][ T9694] bridge2: entered allmulticast mode [ 191.625786][ T9714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.982'. [ 191.893289][ T9726] netlink: 6 bytes leftover after parsing attributes in process `syz.0.987'. [ 192.107932][ T9734] netlink: 24 bytes leftover after parsing attributes in process `syz.3.988'. [ 192.240171][ T9743] netlink: 7 bytes leftover after parsing attributes in process `syz.0.989'. [ 192.287119][ T9745] tipc: Enabling of bearer rejected, already enabled [ 192.330101][ T9747] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 192.463956][ T9753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.996'. [ 192.714163][ T9764] FAULT_INJECTION: forcing a failure. [ 192.714163][ T9764] name failslab, interval 1, probability 0, space 0, times 0 [ 192.728467][ T9764] CPU: 0 UID: 0 PID: 9764 Comm: syz.1.999 Not tainted syzkaller #0 PREEMPT(full) [ 192.728492][ T9764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.728501][ T9764] Call Trace: [ 192.728508][ T9764] [ 192.728514][ T9764] dump_stack_lvl+0x189/0x250 [ 192.728546][ T9764] ? __pfx____ratelimit+0x10/0x10 [ 192.728565][ T9764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.728583][ T9764] ? __pfx__printk+0x10/0x10 [ 192.728609][ T9764] ? __pfx___might_resched+0x10/0x10 [ 192.728625][ T9764] ? fs_reclaim_acquire+0x7d/0x100 [ 192.728645][ T9764] should_fail_ex+0x414/0x560 [ 192.728672][ T9764] should_failslab+0xa8/0x100 [ 192.728695][ T9764] __kmalloc_noprof+0xcb/0x4f0 [ 192.728714][ T9764] ? kfree+0x4d/0x440 [ 192.728729][ T9764] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 192.728752][ T9764] tomoyo_realpath_from_path+0xe3/0x5d0 [ 192.728771][ T9764] ? tomoyo_domain+0xd9/0x130 [ 192.728790][ T9764] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 192.728811][ T9764] tomoyo_path_number_perm+0x1e8/0x5a0 [ 192.728835][ T9764] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 192.728874][ T9764] ? __lock_acquire+0xab9/0xd20 [ 192.728913][ T9764] ? __fget_files+0x2a/0x420 [ 192.728930][ T9764] ? __fget_files+0x2a/0x420 [ 192.728944][ T9764] ? __fget_files+0x3a0/0x420 [ 192.728957][ T9764] ? __fget_files+0x2a/0x420 [ 192.728976][ T9764] security_file_ioctl+0xcb/0x2d0 [ 192.728999][ T9764] __se_sys_ioctl+0x47/0x170 [ 192.729021][ T9764] do_syscall_64+0xfa/0x3b0 [ 192.729038][ T9764] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.729055][ T9764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.729069][ T9764] ? clear_bhb_loop+0x60/0xb0 [ 192.729088][ T9764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.729103][ T9764] RIP: 0033:0x7f67fc38ebe9 [ 192.729127][ T9764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.729139][ T9764] RSP: 002b:00007f67fd11f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.729160][ T9764] RAX: ffffffffffffffda RBX: 00007f67fc5c5fa0 RCX: 00007f67fc38ebe9 [ 192.729172][ T9764] RDX: 0000200000000380 RSI: 000000000000890b RDI: 0000000000000004 [ 192.729181][ T9764] RBP: 00007f67fd11f090 R08: 0000000000000000 R09: 0000000000000000 [ 192.729190][ T9764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.729199][ T9764] R13: 00007f67fc5c6038 R14: 00007f67fc5c5fa0 R15: 00007ffe0a4cdf18 [ 192.729233][ T9764] [ 192.729301][ T9764] ERROR: Out of memory at tomoyo_realpath_from_path. [ 193.003991][ T2994] tipc: Resetting bearer [ 193.283021][ T9774] pimreg: entered allmulticast mode [ 193.376064][ T5933] IPVS: starting estimator thread 0... [ 193.471063][ T9777] IPVS: using max 27 ests per chain, 64800 per kthread [ 193.493389][ T9784] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1003'. [ 193.528726][ T9785] ================================================================== [ 193.536840][ T9785] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 193.544753][ T9785] Read of size 1 at addr ffff88805ab08330 by task syz.1.1005/9785 [ 193.552563][ T9785] [ 193.554898][ T9785] CPU: 1 UID: 0 PID: 9785 Comm: syz.1.1005 Not tainted syzkaller #0 PREEMPT(full) [ 193.554923][ T9785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 193.554935][ T9785] Call Trace: [ 193.554942][ T9785] [ 193.554950][ T9785] dump_stack_lvl+0x189/0x250 [ 193.554975][ T9785] ? __kasan_check_byte+0x12/0x40 [ 193.555001][ T9785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.555021][ T9785] ? lock_release+0x4b/0x3e0 [ 193.555044][ T9785] ? __virt_addr_valid+0x4a5/0x5c0 [ 193.555065][ T9785] print_report+0xca/0x240 [ 193.555082][ T9785] ? xfrm_state_find+0x2cf2/0x5400 [ 193.555100][ T9785] kasan_report+0x118/0x150 [ 193.555122][ T9785] ? xfrm_state_find+0x2cf2/0x5400 [ 193.555152][ T9785] xfrm_state_find+0x2cf2/0x5400 [ 193.555177][ T9785] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 193.555207][ T9785] ? xfrm_state_find+0x1da/0x5400 [ 193.555229][ T9785] ? __pfx_xfrm_state_find+0x10/0x10 [ 193.555248][ T9785] ? kasan_save_stack+0x4d/0x60 [ 193.555266][ T9785] ? kasan_save_stack+0x3e/0x60 [ 193.555283][ T9785] ? kasan_record_aux_stack+0xbd/0xd0 [ 193.555301][ T9785] ? ip_route_output_key_hash_rcu+0x196a/0x23e0 [ 193.555322][ T9785] ? ip_route_output_key_hash+0x174/0x280 [ 193.555340][ T9785] ? __ip4_datagram_connect+0x8f4/0x1270 [ 193.555357][ T9785] ? __ip6_datagram_connect+0x9f0/0x1150 [ 193.555370][ T9785] ? ip6_datagram_connect_v6_only+0x63/0xa0 [ 193.555385][ T9785] ? __x64_sys_connect+0x7a/0x90 [ 193.555401][ T9785] ? do_syscall_64+0xfa/0x3b0 [ 193.555416][ T9785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.555436][ T9785] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 193.555472][ T9785] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 193.555494][ T9785] ? __lock_acquire+0xab9/0xd20 [ 193.555525][ T9785] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 193.555552][ T9785] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 193.555573][ T9785] ? xfrm_expand_policies+0x41f/0x6a0 [ 193.555597][ T9785] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 193.555622][ T9785] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 193.555644][ T9785] ? rcuref_put+0x1b7/0x210 [ 193.555664][ T9785] ? __pfx_rcuref_put+0x10/0x10 [ 193.555682][ T9785] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 193.555709][ T9785] xfrm_lookup_route+0x3c/0x1c0 [ 193.555732][ T9785] __ip4_datagram_connect+0x9a5/0x1270 [ 193.555762][ T9785] __ip6_datagram_connect+0x9f0/0x1150 [ 193.555783][ T9785] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 193.555799][ T9785] ? __local_bh_enable_ip+0x12d/0x1c0 [ 193.555815][ T9785] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 193.555835][ T9785] ip6_datagram_connect_v6_only+0x63/0xa0 [ 193.555852][ T9785] __sys_connect+0x316/0x440 [ 193.555870][ T9785] ? __pfx___sys_connect+0x10/0x10 [ 193.555892][ T9785] ? rcu_is_watching+0x15/0xb0 [ 193.555911][ T9785] __x64_sys_connect+0x7a/0x90 [ 193.555927][ T9785] do_syscall_64+0xfa/0x3b0 [ 193.555943][ T9785] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.555959][ T9785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.555975][ T9785] ? clear_bhb_loop+0x60/0xb0 [ 193.555994][ T9785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.556010][ T9785] RIP: 0033:0x7f67fc38ebe9 [ 193.556024][ T9785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.556038][ T9785] RSP: 002b:00007f67fd11f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 193.556058][ T9785] RAX: ffffffffffffffda RBX: 00007f67fc5c5fa0 RCX: 00007f67fc38ebe9 [ 193.556071][ T9785] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000006 [ 193.556082][ T9785] RBP: 00007f67fc411e19 R08: 0000000000000000 R09: 0000000000000000 [ 193.556093][ T9785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.556104][ T9785] R13: 00007f67fc5c6038 R14: 00007f67fc5c5fa0 R15: 00007ffe0a4cdf18 [ 193.556124][ T9785] [ 193.556130][ T9785] [ 193.624598][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1007'. [ 193.625506][ T9785] Allocated by task 6851: [ 193.625518][ T9785] kasan_save_track+0x3e/0x80 [ 193.625543][ T9785] __kasan_slab_alloc+0x6c/0x80 [ 193.625562][ T9785] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 193.955345][ T9785] xfrm_state_alloc+0x24/0x2f0 [ 193.960110][ T9785] __find_acq_core+0x8a7/0x1c00 [ 193.964943][ T9785] xfrm_find_acq+0x78/0xa0 [ 193.969340][ T9785] xfrm_alloc_userspi+0x6b3/0xc90 [ 193.974349][ T9785] xfrm_user_rcv_msg+0x7a0/0xab0 [ 193.979274][ T9785] netlink_rcv_skb+0x208/0x470 [ 193.984019][ T9785] xfrm_netlink_rcv+0x79/0x90 [ 193.988681][ T9785] netlink_unicast+0x82f/0x9e0 [ 193.993432][ T9785] netlink_sendmsg+0x805/0xb30 [ 193.998177][ T9785] __sock_sendmsg+0x21c/0x270 [ 194.002841][ T9785] ____sys_sendmsg+0x505/0x830 [ 194.007586][ T9785] ___sys_sendmsg+0x21f/0x2a0 [ 194.012256][ T9785] __x64_sys_sendmsg+0x19b/0x260 [ 194.017436][ T9785] do_syscall_64+0xfa/0x3b0 [ 194.021921][ T9785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.027797][ T9785] [ 194.030114][ T9785] Freed by task 6567: [ 194.034076][ T9785] kasan_save_track+0x3e/0x80 [ 194.038747][ T9785] kasan_save_free_info+0x46/0x50 [ 194.043749][ T9785] __kasan_slab_free+0x5b/0x80 [ 194.048495][ T9785] kmem_cache_free+0x18f/0x400 [ 194.053242][ T9785] xfrm_state_gc_task+0x52d/0x6b0 [ 194.058254][ T9785] process_scheduled_works+0xae1/0x17b0 [ 194.063778][ T9785] worker_thread+0x8a0/0xda0 [ 194.068375][ T9785] kthread+0x70e/0x8a0 [ 194.072435][ T9785] ret_from_fork+0x3fc/0x770 [ 194.077008][ T9785] ret_from_fork_asm+0x1a/0x30 [ 194.081759][ T9785] [ 194.084065][ T9785] The buggy address belongs to the object at ffff88805ab08000 [ 194.084065][ T9785] which belongs to the cache xfrm_state of size 928 [ 194.098047][ T9785] The buggy address is located 816 bytes inside of [ 194.098047][ T9785] freed 928-byte region [ffff88805ab08000, ffff88805ab083a0) [ 194.111834][ T9785] [ 194.114144][ T9785] The buggy address belongs to the physical page: [ 194.120532][ T9785] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805ab08880 pfn:0x5ab08 [ 194.130607][ T9785] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 194.139090][ T9785] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 194.146618][ T9785] page_type: f5(slab) [ 194.150586][ T9785] raw: 00fff00000000040 ffff888143efbc80 dead000000000122 0000000000000000 [ 194.159153][ T9785] raw: ffff88805ab08880 00000000800f000b 00000000f5000000 0000000000000000 [ 194.167720][ T9785] head: 00fff00000000040 ffff888143efbc80 dead000000000122 0000000000000000 [ 194.176375][ T9785] head: ffff88805ab08880 00000000800f000b 00000000f5000000 0000000000000000 [ 194.185029][ T9785] head: 00fff00000000002 ffffea00016ac201 00000000ffffffff 00000000ffffffff [ 194.193857][ T9785] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 194.202510][ T9785] page dumped because: kasan: bad access detected [ 194.208930][ T9785] page_owner tracks the page as allocated [ 194.214900][ T9785] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6851, tgid 6850 (syz.1.196), ts 124020123720, free_ts 124001540345 [ 194.234082][ T9785] post_alloc_hook+0x240/0x2a0 [ 194.238879][ T9785] get_page_from_freelist+0x21e4/0x22c0 [ 194.244500][ T9785] __alloc_frozen_pages_noprof+0x181/0x370 [ 194.250296][ T9785] alloc_pages_mpol+0x232/0x4a0 [ 194.255134][ T9785] allocate_slab+0x8a/0x370 [ 194.259620][ T9785] ___slab_alloc+0xbeb/0x1420 [ 194.264291][ T9785] kmem_cache_alloc_noprof+0x283/0x3c0 [ 194.269761][ T9785] xfrm_state_alloc+0x24/0x2f0 [ 194.274605][ T9785] __find_acq_core+0x8a7/0x1c00 [ 194.279441][ T9785] xfrm_find_acq+0x78/0xa0 [ 194.283901][ T9785] xfrm_alloc_userspi+0x6b3/0xc90 [ 194.288945][ T9785] xfrm_user_rcv_msg+0x7a0/0xab0 [ 194.293886][ T9785] netlink_rcv_skb+0x208/0x470 [ 194.298641][ T9785] xfrm_netlink_rcv+0x79/0x90 [ 194.303318][ T9785] netlink_unicast+0x82f/0x9e0 [ 194.308175][ T9785] netlink_sendmsg+0x805/0xb30 [ 194.312931][ T9785] page last free pid 6789 tgid 6789 stack trace: [ 194.319302][ T9785] __free_frozen_pages+0xbc4/0xd30 [ 194.324404][ T9785] __put_partials+0x156/0x1a0 [ 194.329064][ T9785] put_cpu_partial+0x17c/0x250 [ 194.333813][ T9785] __slab_free+0x2d5/0x3c0 [ 194.338212][ T9785] qlist_free_all+0x97/0x140 [ 194.342792][ T9785] kasan_quarantine_reduce+0x148/0x160 [ 194.348253][ T9785] __kasan_slab_alloc+0x22/0x80 [ 194.353245][ T9785] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 194.358710][ T9785] getname_flags+0xb8/0x540 [ 194.363201][ T9785] __x64_sys_rename+0x5d/0x90 [ 194.367872][ T9785] do_syscall_64+0xfa/0x3b0 [ 194.372364][ T9785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.378242][ T9785] [ 194.380555][ T9785] Memory state around the buggy address: [ 194.386189][ T9785] ffff88805ab08200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 194.394244][ T9785] ffff88805ab08280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 194.402296][ T9785] >ffff88805ab08300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 194.410341][ T9785] ^ [ 194.415954][ T9785] ffff88805ab08380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 194.423997][ T9785] ffff88805ab08400: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 194.432044][ T9785] ================================================================== [ 194.446397][ T51] Bluetooth: hci0: command tx timeout [ 194.459652][ T9785] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 194.466926][ T9785] CPU: 0 UID: 0 PID: 9785 Comm: syz.1.1005 Not tainted syzkaller #0 PREEMPT(full) [ 194.476206][ T9785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.486254][ T9785] Call Trace: [ 194.489528][ T9785] [ 194.492447][ T9785] dump_stack_lvl+0x99/0x250 [ 194.497162][ T9785] ? __asan_memcpy+0x40/0x70 [ 194.501751][ T9785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.506939][ T9785] ? __pfx__printk+0x10/0x10 [ 194.511522][ T9785] vpanic+0x281/0x750 [ 194.515488][ T9785] ? preempt_schedule+0xae/0xc0 [ 194.520759][ T9785] ? __pfx_vpanic+0x10/0x10 [ 194.525249][ T9785] ? preempt_schedule_common+0x83/0xd0 [ 194.530697][ T9785] ? preempt_schedule+0xae/0xc0 [ 194.535533][ T9785] ? __pfx_preempt_schedule+0x10/0x10 [ 194.540916][ T9785] panic+0xb9/0xc0 [ 194.544630][ T9785] ? __pfx_panic+0x10/0x10 [ 194.549032][ T9785] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 194.554919][ T9785] ? xfrm_state_find+0x2cf2/0x5400 [ 194.560021][ T9785] check_panic_on_warn+0x89/0xb0 [ 194.564954][ T9785] ? xfrm_state_find+0x2cf2/0x5400 [ 194.570051][ T9785] end_report+0x78/0x160 [ 194.574297][ T9785] kasan_report+0x129/0x150 [ 194.578790][ T9785] ? xfrm_state_find+0x2cf2/0x5400 [ 194.584095][ T9785] xfrm_state_find+0x2cf2/0x5400 [ 194.589025][ T9785] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 194.595435][ T9785] ? xfrm_state_find+0x1da/0x5400 [ 194.600458][ T9785] ? __pfx_xfrm_state_find+0x10/0x10 [ 194.605814][ T9785] ? kasan_save_stack+0x4d/0x60 [ 194.610783][ T9785] ? kasan_save_stack+0x3e/0x60 [ 194.615628][ T9785] ? kasan_record_aux_stack+0xbd/0xd0 [ 194.620984][ T9785] ? ip_route_output_key_hash_rcu+0x196a/0x23e0 [ 194.627215][ T9785] ? ip_route_output_key_hash+0x174/0x280 [ 194.632926][ T9785] ? __ip4_datagram_connect+0x8f4/0x1270 [ 194.638548][ T9785] ? __ip6_datagram_connect+0x9f0/0x1150 [ 194.644185][ T9785] ? ip6_datagram_connect_v6_only+0x63/0xa0 [ 194.650076][ T9785] ? __x64_sys_connect+0x7a/0x90 [ 194.655089][ T9785] ? do_syscall_64+0xfa/0x3b0 [ 194.659780][ T9785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.665836][ T9785] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 194.672004][ T9785] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 194.678670][ T9785] ? __lock_acquire+0xab9/0xd20 [ 194.683606][ T9785] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 194.688970][ T9785] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 194.694334][ T9785] ? xfrm_expand_policies+0x41f/0x6a0 [ 194.699802][ T9785] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 194.705175][ T9785] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 194.710975][ T9785] ? rcuref_put+0x1b7/0x210 [ 194.715467][ T9785] ? __pfx_rcuref_put+0x10/0x10 [ 194.720304][ T9785] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 194.725674][ T9785] xfrm_lookup_route+0x3c/0x1c0 [ 194.730517][ T9785] __ip4_datagram_connect+0x9a5/0x1270 [ 194.735972][ T9785] __ip6_datagram_connect+0x9f0/0x1150 [ 194.741419][ T9785] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 194.747295][ T9785] ? __local_bh_enable_ip+0x12d/0x1c0 [ 194.752651][ T9785] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 194.758360][ T9785] ip6_datagram_connect_v6_only+0x63/0xa0 [ 194.764071][ T9785] __sys_connect+0x316/0x440 [ 194.769101][ T9785] ? __pfx___sys_connect+0x10/0x10 [ 194.774202][ T9785] ? rcu_is_watching+0x15/0xb0 [ 194.778958][ T9785] __x64_sys_connect+0x7a/0x90 [ 194.783712][ T9785] do_syscall_64+0xfa/0x3b0 [ 194.788210][ T9785] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.793404][ T9785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.799545][ T9785] ? clear_bhb_loop+0x60/0xb0 [ 194.804232][ T9785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.810120][ T9785] RIP: 0033:0x7f67fc38ebe9 [ 194.814610][ T9785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.834565][ T9785] RSP: 002b:00007f67fd11f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 194.842979][ T9785] RAX: ffffffffffffffda RBX: 00007f67fc5c5fa0 RCX: 00007f67fc38ebe9 [ 194.851633][ T9785] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000006 [ 194.859592][ T9785] RBP: 00007f67fc411e19 R08: 0000000000000000 R09: 0000000000000000 [ 194.867585][ T9785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.875719][ T9785] R13: 00007f67fc5c6038 R14: 00007f67fc5c5fa0 R15: 00007ffe0a4cdf18 [ 194.883686][ T9785] [ 194.886963][ T9785] Kernel Offset: disabled [ 194.891571][ T9785] Rebooting in 86400 seconds..