last executing test programs: 3.487900567s ago: executing program 2 (id=8071): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0xd6}, 0x28) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0xfffffffffffffd58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) syz_init_net_socket$llc(0x1a, 0x801, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000300)=[{r1, 0x44}, {r0, 0x10}], 0x2, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x28) r6 = accept4(r0, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x1f}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt(r7, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f00000006c0)={r9, @in6={{0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x58}}}, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000100)={r9, @in6={{0xa, 0x4e23, 0x5, @empty, 0x9}}, 0x3, 0xb}, &(0x7f0000000000)=0x90) r10 = socket(0x1d, 0x2, 0x6) getpeername$packet(r10, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000240)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x8, 0x5, 0x4, 0x6, 0x7, 0x4, 0x3, 0x5}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 3.100952066s ago: executing program 0 (id=8076): r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) r4 = socket(0x840000000002, 0x3, 0x100) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) setsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000100)=0xd, 0x4) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x14, r3, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r6, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCGARP(r7, 0x8954, &(0x7f0000000040)={{0x2, 0x4e21, @empty}, {0x1, @random="8825f840d166"}, 0x4, {0x2, 0x4e21, @rand_addr=0x64010100}, 'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r6, @ANYBLOB="14000500fe80917a952a643f152befd0599ecd85f55afcd7d85070a802fc3c9b75011f7bb27cfa7e4e"], 0x3c}}, 0x0) 2.867951643s ago: executing program 0 (id=8078): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x2, 0x2, 0x467) sendmsg$NFT_BATCH(r0, 0x0, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xbc}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2, 0x0, 0x1ff}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x1) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) 2.631739463s ago: executing program 3 (id=8081): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001140)=ANY=[@ANYRES32=r1, @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x2004c001}, 0x20040004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r1, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket(0x2, 0x80805, 0x0) r4 = socket(0x15, 0x803, 0x6) sendmsg$nl_route(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r2, @ANYRES32=r4, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) (async) listen(r0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) r5 = socket$inet6(0xa, 0x6, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x2) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)=0x1000) (async) splice(r9, &(0x7f0000001080)=0x4, r6, &(0x7f0000001100)=0x440, 0x0, 0xd) listen(0xffffffffffffffff, 0x0) 2.63139021s ago: executing program 4 (id=8082): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='GPL\x00', 0x2, 0x7f, &(0x7f0000000680)=""/127}, 0x94) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000800001800000003000000000000000080ffff850000000a0000009500"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000000206010300000000000000000000000005000400000000000900020073797a31000000001400078008000840000000200500140005000000050005000200000005000100060000000c000300686173683a6970"], 0x58}}, 0x0) (async, rerun: 32) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000780)="e56f404005d4e85506ea8ae307c5a32747f6c6dc000d4398da75c0110b86896ec65674573bf154cf2dce607b1c809abe4f5429989b0655b0f5c429189481c673aa449ce3b884a0e6ba7190a530a2171b9b9778280149971cbc58e3d470", 0x5d}, {&(0x7f0000000980)="a86da3acc9e67918f9b3613b8cee84", 0xf}, {&(0x7f0000000a00)="ebe0e5f84f7e50ff6c3e3984e7", 0xd}], 0x3, 0x0, 0x0, 0x40000}], 0x1, 0x0) 2.599811917s ago: executing program 3 (id=8083): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0xffff, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="cb", 0x1}], 0x1, &(0x7f0000000b00)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x3, 0xffff, 0x1828573c}}], 0x20, 0x844}, 0x4040040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)={0x21c, r4, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x440, 0x0, 0x7, 0x0, {0xffffffffffffffc0, 0x0, 0x0, 0x319, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0x9, 0xd}}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_IE={0x19f, 0x2a, [@preq={0x82, 0xaf, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x3, 0xfff, @broadcast, 0x6, @value=@broadcast, 0x2, 0x3ff, 0xd, [{{0x0, 0x0, 0x1}, @broadcast, 0x4}, {{0x0, 0x0, 0x1}, @device_a, 0x12}, {{0x1, 0x0, 0x1}, @device_a, 0x8001}, {{0x1, 0x0, 0x1}, @device_a, 0x80000001}, {{0x1, 0x0, 0x1}, @device_b, 0x7}, {{}, @broadcast, 0x9}, {{}, @device_b, 0x80000000}, {{}, @broadcast, 0x8}, {{}, @broadcast, 0xb45a}, {{0x0, 0x0, 0x1}, @device_b, 0xf80c}, {{0x1}, @device_a, 0xfff}, {{0x0, 0x0, 0x1}, @device_b, 0x81}, {{0x1, 0x0, 0x1}, @broadcast, 0x2}]}}, @random={0x5, 0xb1, "784d0b6b69584ed29a98985b6795e57dfd6f80146628a3de523e92a6c2dc921f23d4e73cba1d5d8d581a6122725ab18041e4beaa24156755f480a0292e5db7c335a7d2e1aab3867c1b0c1c5257e4a7a07ddfcc32a718fb613f806e6f83584a0c8d905321c746a3d4108d971eda321ed1142253ed9df4e8b87013ba90e347aa31ceaae7e950aa464d280db38dcc74f9129ff69d25696e341dae70bdfd7d3336c4f057293b5b035bce5e5c75939ecbed219c"}, @mic={0x8c, 0x10, {0x1e4, "50bc53573e0d", @short="0dd57b5df8d8fd1e"}}, @rann={0x7e, 0x15, {{0x0, 0x2e}, 0x77, 0xf, @broadcast, 0x7, 0x99, 0x6}}, @mesh_id={0x72, 0x6}, @chsw_timing={0x68, 0x4, {0xd, 0x8}}]}, @NL80211_ATTR_IE={0x15, 0x2a, [@mesh_id={0x72, 0x6}, @challenge={0x10, 0x1, 0x70}, @erp={0x2a, 0x1, {0x1, 0x1}}, @challenge={0x10, 0x1, 0xeb}]}, @NL80211_ATTR_IE={0x22, 0x2a, [@peer_mgmt={0x75, 0x14, {0x0, 0x9, @void, @void, @val="e5a327a7754f50a79f537814f01de01d"}}, @mesh_chsw={0x76, 0x6, {0x4, 0x6, 0x1a, 0x9}}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004000) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x1, 0x4, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xf2}, @NFULA_CFG_MODE={0xa, 0x2, {0x6840, 0x1}}, @NFULA_CFG_MODE={0xa, 0x2, {0x8, 0x2}}, @NFULA_CFG_MODE={0xa, 0x2, {0xe26b}}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0xffffffff, 0x2}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4894}, 0x4000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000791000000000000095"], &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB], 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000a40)='./file0\x00', 0x0, 0x0, r7}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r8, &(0x7f0000000c00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x40, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xb, 0x7c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}]}, 0x40}}, 0x4004) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r10, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0xffff, 0x0, @mcast2}}, 0x1}, 0x90) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xc, 0x3, &(0x7f0000000280)=@raw=[@generic={0x0, 0x0, 0x0, 0x6, 0x2}, @jmp={0x5, 0x0, 0xa, 0x5, 0x1, 0x80, 0x1}, @ldst={0x1, 0x0, 0x0, 0x3, 0x8, 0x40, 0x1}], &(0x7f0000000300)='GPL\x00', 0xfff, 0x61, &(0x7f0000000400)=""/97, 0x40f00, 0x42, '\x00', r1, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r5, 0x4, &(0x7f0000000900), &(0x7f0000000940)=[{0x2, 0x5, 0x4}, {0x4, 0x3, 0x2, 0x1}, {0x1, 0x8, 0xe, 0x57b1864ff8de11c4}, {0x3, 0x2}], 0x10, 0x3}, 0x94) 2.431487017s ago: executing program 4 (id=8085): bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@ifindex=0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket(0x1, 0x1, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c400000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c400000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d5400000000000001c0007800c00018008000100", @ANYRES32=r1, @ANYBLOB="0c000180080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) pwritev(r4, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00!G', 0x3}], 0x14, 0x0, 0x0) unshare(0x6020400) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x3c1, 0x3, 0x548, 0x360, 0x8, 0x7f02ae, 0x0, 0x200, 0x478, 0x2e8, 0x2e8, 0x478, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x300, 0x360, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r6}}, @common=@mh={{0x28}, {'b\b', 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1, [0xffffffff, 0xff000000, 0xffffffff, 0xffffff00], 0x4e22, 0x4e24, 0x4e21, 0x0, 0xb98, 0x3c00, 0x100, 0x7, 0x1}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0x0, 0xffffffff], [], 'veth0_to_team\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_emit_ethernet(0x7c, &(0x7f00000002c0)={@random="ff82620eff00", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x46, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x7]}, {}, {}, {0x8, 0x22eb, 0xfffffffc, {{}, 0x2, {0x4, 0x1}}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x7c, &(0x7f00000002c0)={@random="ff82620eff00", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x46, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x7]}, {}, {}, {0x8, 0x22eb, 0xfffffffc, {{}, 0x2, {0x4, 0x1}}}}}}}}}, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) (async) r7 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000040)={'syztnl1\x00', r0, 0x2f, 0x2, 0x65, 0x1000, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x700, 0x8000, 0x10000, 0x1}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000040)={'syztnl1\x00', r0, 0x2f, 0x2, 0x65, 0x1000, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x700, 0x8000, 0x10000, 0x1}}) sendto$packet(r8, &(0x7f00000001c0)="1c275b56cf08bf0f2b42ff8aa2ece5e18d96d98f653ca7d4628bfa09296a173651be0542a20c93de9567f95bc2586624929b4559b2f2317692bfc67a7ab5b9ce80749ae52787285b3af7f91b8673309f77e8ed80da16810fcde6de56405aa8ce868188d006377943860e016f24b930d54e402d934f3dc3706a30de24435ae4d39f", 0x81, 0x24008000, &(0x7f0000000140)={0x11, 0x19, r9, 0x1, 0x0, 0x6, @random="6040a05ea571"}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000004000000000000000000850000008800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000004000000000000000000850000008800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100020000000000000000000ac141438000000000000000000000000fe8000000000000000000000000000aa00000000000200030000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/344], 0x1a0}, 0x1, 0x0, 0x0, 0xc5}, 0x8000) 2.236973666s ago: executing program 4 (id=8086): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b000100657874686472000014000280080006400000000105000200000000000900010073797a3000000000090002729c4e1513b1eb2c00140000001100010000000000000000000000000a"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$SIOCAX25OPTRT(r5, 0x89e7, &(0x7f00000000c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000006c0)=""/83, 0x53}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/190, 0xbe}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) socket$unix(0x1, 0x2, 0x0) (async) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bind$unix(r7, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r8, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket(0xa, 0x3, 0xff) (async) r9 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r9, 0x29, 0xb, &(0x7f0000000100)=0x4, 0x4) (async) setsockopt$inet6_int(r9, 0x29, 0xb, &(0x7f0000000100)=0x4, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd697a262d00383afefe8000000000000000000000000000aaff02000000000000000000000000000102009078000004fe620813313f6fff00fc020000000000000000000000000000ff0100000000000000000000000000012b00000000000000ebbec7895c8399d79844f68b980604ffcafd177dfb3329b2a7"], 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd697a262d00383afefe8000000000000000000000000000aaff02000000000000000000000000000102009078000004fe620813313f6fff00fc020000000000000000000000000000ff0100000000000000000000000000012b00000000000000ebbec7895c8399d79844f68b980604ffcafd177dfb3329b2a7"], 0x0) sendmmsg(r8, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000340)) 2.23306132s ago: executing program 2 (id=8087): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @null, @bpq0, 0x2, [@bcast, @bcast, @bcast, @null, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x4, {{0x29, 0x0, 0x8000000, @empty, 0x2}}}, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0xb3000000}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x4b}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe7d}, 0x70) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r7, &(0x7f0000000c40)=[{{&(0x7f0000000480)=@ax25={{}, [@remote, @default, @netrom, @netrom, @default, @rose, @netrom]}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000580)=""/157, 0x9d}, {&(0x7f0000000340)=""/57, 0x39}, {&(0x7f0000000640)=""/178, 0xb2}, {&(0x7f0000000700)=""/180, 0xb4}], 0x4, &(0x7f00000007c0)=""/170, 0xaa}, 0x38000}, {{&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000900)=""/216, 0xd8}, {&(0x7f0000000d40)=""/222, 0xde}, {0x0}], 0x3, &(0x7f0000000b40)=""/223, 0xdf}, 0x7}], 0x2, 0x4c42bb4f93, 0x0) shutdown(r7, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x2a, &(0x7f0000000000)=0x8, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.222963504s ago: executing program 1 (id=8088): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$tcp_mem(r1, &(0x7f0000000140)={0x5, 0x20, 0x6, 0x20, 0xe4bb}, 0x48) (async) write$tcp_mem(r1, &(0x7f0000000140)={0x5, 0x20, 0x6, 0x20, 0xe4bb}, 0x48) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[], 0x32600) unshare(0x6020480) (async) unshare(0x6020480) unshare(0x26020480) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000000500)=0x8) (async) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000000500)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r6) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r6) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x48, r9, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xa}]}]}, 0x48}}, 0x200440c4) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000a3a0988da05071a68c9c6338bf4d5a7c60da7656a0d04e5bd401c505173fd8f1b78d7546609e2b470ea9ec5d0b51d9c1e2d4361471ccac210faa0cdaa12aedf675379561ce7f1fbca052c8d0128680c6c41a", @ANYRES16=r5, @ANYBLOB="01082cbd7000000000000b00000008000300", @ANYRES32=r11, @ANYBLOB="2400508011000100cb90f9ea0c82a9c996935c85db000000040005000500020003000000"], 0x40}, 0x1, 0x0, 0x0, 0x40905}, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='-', @ANYRESHEX=r2, @ANYRES64=r4], 0x27) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$tcp_mem(r0, &(0x7f00000003c0)={0x0, 0x20, 0x80000001, 0x20, 0x8000000000006}, 0xfeb0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 2.091359883s ago: executing program 4 (id=8089): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c001480080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2.080866677s ago: executing program 1 (id=8090): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010300000068416a8fb4e89743090500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) close(r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000018000000b70500000800000085000000a500000095000000000000004a6b249c0dd9d7ef030dd58995c0f8a644cb59c200f91e5a2f6bdd436a731b81aa41e3080421db29e2c9f4e84f26c9088cf57d3e7bb3e5bbc96a46b91007c8af5a08652ef272d9a1ffa8303d99cd943e44833218884c8dad100c1cc5a89d4ad34fa20d30c306aed8365393ba98e8ea2841cc1ace2c256a7f904c3911e881bea44e4253955cebf2c7"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1}, 0x48) ioctl$sock_TIOCINQ(r4, 0x541b, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xdc0, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r5) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x70, 0x1, 0x2, 0x302, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x80}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x20004080) r8 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/pid\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r10, 0x1, 0x9, &(0x7f0000000480)=0xfffffffc, 0x4) bind$inet(r10, &(0x7f0000000040)={0x2, 0xfffd, @local}, 0x10) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r8, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x30}}, @GTPA_NET_NS_FD={0x8, 0x7, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x40) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6d5820fae9d6dcd3292ea5480c200", 0x11) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x6, 0x73, 0x10001, 0x4, 0x5, 0xf, 0xfffffff9}, 0x1c) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='vnet_rx_stopped_ack\x00', 0xffffffffffffffff, 0x0, 0x1000}, 0x18) 2.04141109s ago: executing program 3 (id=8091): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x30, 0x1, 0xfd, 0x5ae9}, {0x30, 0x7f, 0x4, 0xfefff00c}, {0x6, 0x40, 0x7, 0x2002}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1.960022369s ago: executing program 0 (id=8092): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls}, 0x94) 1.943435493s ago: executing program 2 (id=8093): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xa}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)="961933", 0x3}, {&(0x7f0000000340)="f2119d5ede", 0x5}], 0x2, 0x0, 0x0, 0x8010}], 0x1, 0x4) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c0002800600020020"], 0xe4}, 0x1, 0x0, 0x0, 0xc845}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c0002800600020020"], 0xe4}, 0x1, 0x0, 0x0, 0xc845}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.84596767s ago: executing program 0 (id=8094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2efdffff020801020300000000000000030000a1"], 0x14}}, 0x20000000) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x431a7230819436b, &(0x7f0000000200)={0xa, 0x4e21, 0xd99, @loopback, 0xcc}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000200)={0x6c, @local, 0x4e21, 0x2, 'sh\x00', 0x2, 0x2, 0x8}, 0x2c) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0009000000080026000816"], 0x40}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}]}, 0x50}, 0x1, 0x0, 0x0, 0x80d4}, 0x8001) 1.77178318s ago: executing program 2 (id=8095): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000300)={0x8, 0xf, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x9}, @generic={0xe4, 0x71, "661291a59e3b327bc8a95307924eeaaaa01ed036980899efc05efcd48633a2767bc9386c0c8448a0360a90edbab507a4cc57a0c369445f0a5bc770013f001a62a423fcdcfd9872f824ba6453d8ef444cca0af66e109f965e5b557306df6cdf4deca669e8e607b6708eb39cd8c0023d2272"}]}, 0x88) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="260000130000000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20) (async) close(0x3) (async) socket$netlink(0x10, 0x3, 0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x692440, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xca, 0x9}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x3}, {}, {0x4, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x24040084) (async) write$ppp(r4, &(0x7f0000000040)="d16153a40cf692ddf2c1ef6149b26fed430167fafd5af33c4d51555a902681852718e02d5d3537a752b2cd29c890993bab884c39d25ec6f6adcc53a917aa25a68d474104d2f6de94fca92ab4f1a42781a8e6d3f970e675fd244803be9041a844770609458c4aaffbd0a85bbc4189721fbb55b6f6d0a68767713792b205a919eb930ae5d70b1718040ba5c4677c9f3100cf377fa43b033384249154ec6e38e7387df25dda8d698c4bd626d5f94ed8fe894a14891f3987fa", 0xb7) (async) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000440)={{r0}, "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"}) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a340977726d"], 0xa) (async) getsockopt(r8, 0x200000000114, 0x8, &(0x7f0000019580)=""/102400, &(0x7f0000000400)=0x19000) 1.671204744s ago: executing program 3 (id=8096): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}], 0x1, 0x8000) recvmmsg$unix(r2, &(0x7f0000005b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x43, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x431a7230819436b, &(0x7f0000000200)={0xa, 0x4e24, 0xd99, @loopback, 0xcc}, 0x1c) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r4, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) 1.660858283s ago: executing program 2 (id=8097): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x84, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e21, 0x800000, @loopback, 0x7}, @in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x40}, 0x9}, @in6={0xa, 0x4e23, 0x2, @empty, 0x8}, @in={0x2, 0x4e22, @multicast2}]}, &(0x7f0000000100)=0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000140)={'raw\x00', 0x0, [0x6, 0x8, 0x0, 0xf37, 0xe]}, &(0x7f00000001c0)=0x54) (async) r3 = socket$packet(0x11, 0x3, 0x300) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbf, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xaa, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bind$packet(r3, &(0x7f0000000500)={0x11, 0x3, r4, 0x1, 0x6c, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x14) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@ipv4, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000640)=0xe8) close(r1) socket$inet6_icmp(0xa, 0x2, 0x3a) r6 = accept(r1, &(0x7f0000000680)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000700)=0x80) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r1) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f0000000ac0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f00000007c0)={0x294, r8, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x1ac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfff}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x922}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x8e)\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'raw\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xab\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xfc, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'raw\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'raw\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'raw\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '.-\v]:][\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'W:\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'raw\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}%\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '/.}\xb3.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x30000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_MODES_OURS={0x8c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}{}H\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x28, 0x2, '\xab*+)#$+*\x83(+:\x85.}^.\xe6)/-+@{!\xe8\\+{}-}[(.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x1}, 0x1) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000c80)={'ip6_vti0\x00', &(0x7f0000000c00)={'syztnl2\x00', r5, 0x29, 0x78, 0x5, 0x2, 0x6f, @private0, @remote, 0x80, 0x40, 0x80000000, 0x86}}) sendto$packet(r6, &(0x7f0000000b00)="3ce3ccf03330e4b4a39e2cde0aed8a65a5c234c2d726feb6b18e5372863884261fd3cacbcbe04903ffaa28f89999b30236767f05403e3ab084724e9763d13c037004b582f22005de1687da0d2cdcd4b23ed3bfb1025670d381b2fcd3dfdedf82e2556c4afebd67d98a5cf2edbfc8ba5ce7a7feb4790a250bcfa3989d2d8090bca89ca4c16968f3dbc2fd754603179aa9f051e3291e5def970dc4d4d83968b7f9ead65f75f35858389b39b3c0667c2538d611c60a3e980caf9b84d16b663bda71a3d74faa510fa0042b0d5153c7639b7fad6864320890a20e6c8e360e", 0xdc, 0x40010, &(0x7f0000000cc0)={0x11, 0xf8, r9, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)=@gettaction={0x48, 0x32, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xb}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfd8}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x8000) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000f40)={'ip_vti0\x00', &(0x7f0000000e40)={'ip_vti0\x00', r7, 0x8, 0x10, 0xe35d, 0x9, {{0x35, 0x4, 0x1, 0x5, 0xd4, 0x68, 0x0, 0x9c, 0x2f, 0x0, @multicast1, @private=0xa010100, {[@timestamp_prespec={0x44, 0x34, 0xf6, 0x3, 0x6, [{@private=0xa010101, 0x10000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x5}, {@rand_addr=0x64010100, 0xe00000}, {@remote, 0x2333}, {@dev={0xac, 0x14, 0x14, 0x21}}]}, @lsrr={0x83, 0xf, 0xcd, [@broadcast, @local, @broadcast]}, @end, @lsrr={0x83, 0x1f, 0xf9, [@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @empty, @multicast1, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1f}]}, @rr={0x7, 0x2b, 0x8, [@local, @empty, @multicast2, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102, @loopback, @private=0xa010100, @remote]}, @timestamp={0x44, 0x8, 0x9b, 0x0, 0x8, [0x8]}, @timestamp={0x44, 0x1c, 0x23, 0x0, 0x7, [0x9, 0x0, 0x0, 0x9, 0xb, 0x3]}, @timestamp_prespec={0x44, 0xc, 0xd4, 0x3, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}]}}}}}) setsockopt$inet_MCAST_LEAVE_GROUP(r6, 0x0, 0x2d, &(0x7f0000000f80)={0x7, {{0x2, 0x4e24, @multicast2}}}, 0x88) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r6, 0x8004f50e, &(0x7f0000001040)) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000001080), 0x9) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r10, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x3c, r11, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x11) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) ioctl$TUNDETACHFILTER(r12, 0x401054d6, 0x0) (async) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0x82000, 0x0) ioctl$TUNSETCARRIER(r13, 0x400454e2, &(0x7f0000001280)) recvmmsg(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000012c0)=""/61, 0x3d}], 0x1}, 0xffffff00}], 0x1, 0x2, &(0x7f0000001380)={0x77359400}) socket$tipc(0x1e, 0x5, 0x0) 1.491414777s ago: executing program 1 (id=8098): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687", @ANYRES32=r1, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000440)={'ip6_vti0\x00', r1, 0x0, 0x7, 0x6, 0xff, 0x34, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x7800, 0x10000, 0x7fff}}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800), 0x0, 0x880, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240"], 0xc4}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="90000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="010102000000000008000500", @ANYRES32=r5, @ANYBLOB="0a000200aaaaaaaaaa4100005c00128009000100766c616e000000004c00028006000100220000000600050088a800000c"], 0x90}, 0x1, 0xba01}, 0x810) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x1200}, {0xfffffffe, 0x80003}]}}) 1.490856796s ago: executing program 3 (id=8099): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x1c8, 0xc8, 0x8, 0x1c8, 0x5803, 0x2b8, 0x2e8, 0x2e8, 0x2b8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x6, 0x300, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x0, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xfe1b) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000140)={0xed, 0x48, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000280000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4308123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dc8aff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798ab20000000bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d2000000000000000819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba84279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5603a9d801300000000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d535556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02221e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba0790ee0d112f99e59ba82e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af268c900a756e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee52303da186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c44500f8ffff970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c1b04e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305977eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f87204311327c18380fedf3d3dad8549f99bf6c5cb060fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce1060f3e6806e774a5f079c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae794286b6c3e1f5a76b85ed6e1f0000c608b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32bf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1951393352bc756f3fcaad2c1c399a3e43eaaeca70db90f2fa395964434476719334482eb5424c81814079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fbdd351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b577243152374d7b367337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2dff78ce9308c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416f80ba17d21d53961471b2d2d459e4bb23230d676ca49633b25e26a322024beb7c3427da59f7daa70a5d44a0eb895f29245df6401295d3da939954e126a3be932f47fe61ef1bfe83086651af7e23c2a8fa702b9aaa65aa3edaaa6b3f5a0c7cdfd008c898d73bb97168ca390ef539800000000000077a5ad1e683aeff92bb0b66b33ed878df1e344b99450086c819bf174578705c049d2fb25a91ba04643cde1a3c391d8646e5249dbf28b13b1c4d5127f685ee0c0576bf74e17cd3b4df4eb7095e504e361689572b0f93ff1dc6f52e8728a03e5a4df80a32c6055df8f4f4152c0bf4d793b20ac2cfa907b5af80716118f82027d3e4cb096fe86de545008b85cb9b637bca30d765b0c3ad489db32955454dcfe000000002830e5e125322d2f5829040a91405bf2fe5bf14833fd7b1e72c775f267bc4511183096eff3188a288c408b10285e7ec75f826e9b08a82cde1f4470545eebc71440623752e87ecc689b7fec2f667e22705b4660b2ef936cce446244bb48f8c7d062ea4a955facf6c2957cfb3c3ee9229efab5b72a5c5266eb493c7c3b08a91971692d9673cb9df620a8240d4f94b9fafd8e2bf0f9cedd1e08f4f10fd8f25f3169ed878624adccb5572cb918e0e3ba7e4ac0967aa65241903509778e63bebf00107524f858d7d48ef9e2c112c75d732344dc0a9bc506172d5a45e3bcb203862307c24c20fe1ffe6b5a43dbc1b20156161b5f59ab9955f2a6fb2469d6cbf857a137b542045d203e43874fe17720a05d3bc42bde811dcf97732108f5cb5943e609856876c2108491e88875ead76331822c8f0151a1cf06e634ac0933487716484f30f17d8f29af19784814192b4677759b781fc1a6726b154bbf3f30c48f0b829397acb9b337a6929d1158492e49bfe9a1158a57b6a422c8d1a3c476487a736a74d01bf48e05ac030092c66a502a8a5c9ef0a29582b6fef6d0dcd6a3a277887134f98291d79a2ed48adb3086b7c1c7340e0998036686b1919d25c3aa9591f4135fdad46003d76b366b81e50fdefeecf3b5d17e946059e2883ca43d61e14e725f0acaff73e0922319b6ea7b09b7b9ea691f5598f014f362e033ba9bc2a64f1c2ed591ef9c6f1a7a08e8e2842c0a592dd82d72e141db440000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xe8, 0x0, &(0x7f0000000280)="dd"}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x62, 0x0, 0xb, 0x6, 0x0, @loopback, @rand_addr=0x64010102}, "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"}}, 0xfce) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r6, 0x29, 0x39, &(0x7f0000000280)=@fragment={0x3a, 0x0, 0x8, 0x0, 0x0, 0x12, 0x66}, 0x8) r7 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000200)=0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x4c, 0x30, 0xb, 0x5, 0x0, {}, [{0x38, 0x1, [@m_ct={0x34, 0x1, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x16}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf18312bee324decf810970090c77ec4ca173b12577aeb13c354245be77050365697b3b4707060c00045e46d612b09c487d7c9c94f778c0a015ecfa70d229085252956142772f9ff5a61a9b7fbc6712f8e64566b7ade87d293b81bd3cd1b2ad2852dc1dbb07d54f5544759f0eb23131b5780de6354f0714b2c5b86323969d0b4f5bd8c4489e0e7471c6a84feb9dead9d156d060a9373c7f80f4f1ec2a87efdeceec8d99c9664ee184f112929fe92da18f26929f98233f18dcbe0c638c040061800400058012fc33716331943112df1a6d89852782e376609e4a38717148d34e9d36191fe607748ad822c89800b204bd5831c55511fc4e85d09c44ef3be8ce710d034d394057d88e12db87eb032cd30fdcb489cd5ac92a44f96b6e463971c730796efaab04ce1b42faea757fc0a50c4feef468c80d7cac7db3bfd67140c04f88892b1d19a91ac5d2bef2af704fed3f92e84f78f98e97b8460000602ca31cc4edb57168863fe0e930a6030e47048c91da29a2c691894cd27b28480642302c6816b308d3eaceb9c1404c696e8a2deb97c278ca9d9b1ea4aa17255b400acdda233dde73b32098f837494e43a67bbb722f105f5ae23d8e4c9586ac0ff8c1c6c330601a9c007659ce63c0387d6692d791abdb14b8b66d6b30e5556865a6e97922f3fddcfd1a7e2cbf30b30479b4f7b824b49b1a8e5cd1ec171c8fd41bc3b14ced446eadedd90178f121d6e4d3ae3031231f39fcad0501455538f57fc305f449144d0e4f1f642ff19c53dea5322d30d680f6efdce4f7310225fa8e8a3035d925f51090e4fa74346825d16d400b9cea013e88ea47db2efbbbe73c3ae0059974efa840d4ee88ae1f85d6ba36caa8df64cbf4c1716de586b6fce1424c8bc3a0218953ea42dc7e83bda5a4319b59d7926fe04553fe79056a397ea85f6255d093a345aaf5f3d91cdce17cc9d38493e7eb952b132dc8f7953706ea7b7ff81e88a2a87f18730ca7f6f16f2c23b85f549a8b0cce6f8f0ec61fa8ba01aa114fbd63373ae3189338aa5f585a6d454733937712eb5a4cbd810c91bf5f19e0a508db8a57bdd8000000960203"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000240), 0x3) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r11, @ANYBLOB="500800000000000014001a80100004800c00088008"], 0x34}}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1.48361155s ago: executing program 0 (id=8100): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r2, 0x1, 0x70bd2a, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x80) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28, 0xd8, 0x76, 0xfffff020}, {0x6, 0x26, 0x5, 0x207}]}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x1, 0x0, &(0x7f0000000180)) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) pselect6(0xe, 0x0, 0x0, &(0x7f0000000100)={0x3ff, 0xee, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 1.21436448s ago: executing program 1 (id=8101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05400000060000000450000007000000010000006a832605e0ed0c52bd501e914cc665616aabb41a0f1d39bdc1520c94660fbea61f3e3db2069c5c7a1a146053c2496f75e02c04d241335483cdcc35cc7400f4b508753164f38f038961ee5f052e184ba213adc1e1d92eb94a2b4e77e7c55b198ceb0e633c52a71306426b9a204e644567fbca594731a908bf5c9373cfac07f1af11f0df7b5534ae6077f92dee61acf77858f50d054a3df760051b90d95785ccd48e77cb02f25bbfd97f1e490337bedbb205ce8335", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x22000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000400)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x48010) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x61d8, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x35}, 0xffffffff}}, 0x0, 0x0, 0x8000, 0x0, "e903a23bd69f499cabd0425e0f4611ac2abb40136491c9912e195cfcc62d803e36f26d0e8388f45c7a75cad25ba3b2927c9ab7deac2b42e0fcf6f174cf2ef0e52ac8bbd0c1e533cd7602d2384ded09b4"}, 0xd8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x40000000000020a, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05400000060000000450000007000000010000006a832605e0ed0c52bd501e914cc665616aabb41a0f1d39bdc1520c94660fbea61f3e3db2069c5c7a1a146053c2496f75e02c04d241335483cdcc35cc7400f4b508753164f38f038961ee5f052e184ba213adc1e1d92eb94a2b4e77e7c55b198ceb0e633c52a71306426b9a204e644567fbca594731a908bf5c9373cfac07f1af11f0df7b5534ae6077f92dee61acf77858f50d054a3df760051b90d95785ccd48e77cb02f25bbfd97f1e490337bedbb205ce8335", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x22000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000400)) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x48010) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x61d8, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x35}, 0xffffffff}}, 0x0, 0x0, 0x8000, 0x0, "e903a23bd69f499cabd0425e0f4611ac2abb40136491c9912e195cfcc62d803e36f26d0e8388f45c7a75cad25ba3b2927c9ab7deac2b42e0fcf6f174cf2ef0e52ac8bbd0c1e533cd7602d2384ded09b4"}, 0xd8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) recvmmsg(r4, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x40000000000020a, 0x0, 0x0) (async) 852.515799ms ago: executing program 1 (id=8102): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000800)={0x7, 0x8000, 0x3, 0x8, 0x8c, 0x6, 0x3}, 0xc) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 707.80405ms ago: executing program 2 (id=8103): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xac}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[], 0xb0}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x6, @private=0xa010100, 0x4e21, 0x2, 'sed\x00', 0x2, 0x0, 0x68}, 0x2c) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000f00766c616e00000000180002800c0002001f0000001f000000060001000000000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x2c}}, 0x0) r12 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r12, 0x6a, 0x3, 0x0, &(0x7f0000000000)=0xfffffffffffffd68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x4, 0x1, 0xff, 0x1, 0x0, 0xc}, &(0x7f0000000080)=0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xf, 0x3, 0xffffffffffffffff, 0x1, 0x7c2}, 0x40000002}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x240400c0) sendmsg$NFT_MSG_GETSET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, 0xa, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c891}, 0x4000814) 696.292808ms ago: executing program 1 (id=8104): syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004d968119f68f58d94773b9ab884100003c"], 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x89fe, &(0x7f0000000000)) r1 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1caa000000000000611010000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000160700000fff07003506000002000000170600000ee50000bf250000000000003d350000000000006507000002000000070700004c0001000f75000000000000bf54000000000000070400000400f9ff3d3501000000000095000000000000000500000000000000950007000000000001722fabb733a0c857c7c45402000000a2d23da04d1ffc187fa130c7267c2de00435fd233cc0f0d9b2c3127c46b0f408398d09ee4dc258d726eae098804de25df627a64ac7efde50fd7f1dd5b17ed764c33b06598bae66ea38541a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d8a4b6e6155cecc13a5ddfab726eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a459db8e7ada8ee987cc0000f6aae6a2213f4bb7b72ee19baaa6496c921b500fab987b62bbfd769664875469f58151b5ba0e4b84ea6500aeae078084123b254aeed0055787c01db742ed418ff76ee08d6fe0cc780a1005da7b778501e12cd7a0bb3780196d1fb84e6c12dddc60addc75a1f880bd58e7d1056a4d177e0067aa7c5ec09e1b762390a4f38d15794e698611b97a1bc9bc62513ad5ba767998919ccb61028200000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) r2 = socket(0x29, 0xa, 0x27bb) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e23, @empty}}, 0x5, 0x5, 0x10000, 0x1, 0xa, 0x7, 0x4}, 0x9c) 695.886261ms ago: executing program 3 (id=8105): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x67) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020400) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r5}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'pim6reg\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) (async, rerun: 32) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x78, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x4f}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1b2}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1000}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x5ab}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 168.340828ms ago: executing program 4 (id=8106): setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="000000007ef98e"], 0x8) (async) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="000000007ef98e"], 0x8) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) (async) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='7\x00'/12, @ANYRES32=r1, @ANYBLOB="5a29a67ea7f93b569652b7973607eba1135c2fab0b09db93358ecdef58ea3cf0aa76596f9435906fb9743628de0dc4c2e400ad0ab7262f4a0ab22ec02d2e96", @ANYRES64=0x0], 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='7\x00'/12, @ANYRES32=r1, @ANYBLOB="5a29a67ea7f93b569652b7973607eba1135c2fab0b09db93358ecdef58ea3cf0aa76596f9435906fb9743628de0dc4c2e400ad0ab7262f4a0ab22ec02d2e96", @ANYRES64=0x0], 0x20) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000000)=0xa4, 0x4) listen(r4, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001f40)={'ip_vti0\x00', &(0x7f0000001dc0)={'erspan0\x00', 0x0, 0x700, 0x40, 0x800, 0xa, {{0x24, 0x4, 0x2, 0x37, 0x90, 0x68, 0x0, 0xa, 0x17, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010100, {[@noop, @noop, @ra={0x94, 0x4}, @lsrr={0x83, 0x27, 0x9b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, @multicast2, @dev={0xac, 0x14, 0x14, 0x34}, @rand_addr=0x64010100, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x86, 0xe, "b66119e91e394e0b3b04d852"}, @generic={0xf, 0x7, "3237c10549"}, @timestamp={0x44, 0xc, 0x2b, 0x0, 0x3, [0x1134cc1c, 0x8]}, @end, @end, @ssrr={0x89, 0x2b, 0x94, [@loopback, @rand_addr=0x64010100, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100, @rand_addr=0x64010100, @loopback, @multicast1, @loopback]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002000)={0x6, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="90245000ffffffee184a000006000000000000000000000011440903240008f2ffffff"], &(0x7f0000000b40)='GPL\x00', 0x7, 0xe3, &(0x7f0000001cc0)=""/227, 0x41000, 0x9, '\x00', r5, 0x25, r2, 0x8, &(0x7f0000001e80)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[r2, r2, r2], 0x0, 0x10, 0x6}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)}], 0x1, &(0x7f0000001c00)=ANY=[@ANYBLOB="2000000000000000000000000700000044100cb000000002000000ff0000000835297d1ed627e8bca821926d582a982d2cda639a68a94bb005e9a7dc429d0fadf6f046a7efd146123e486b04f1a60e33b834fd41c9349708ac14ce1501fdd37cfccb956f673fdb3400b706a55b4d864cef63ffcac6424d178906de13e1018c3f51"], 0x20}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)}], 0x1, &(0x7f0000001c00)=ANY=[@ANYBLOB="2000000000000000000000000700000044100cb000000002000000ff0000000835297d1ed627e8bca821926d582a982d2cda639a68a94bb005e9a7dc429d0fadf6f046a7efd146123e486b04f1a60e33b834fd41c9349708ac14ce1501fdd37cfccb956f673fdb3400b706a55b4d864cef63ffcac6424d178906de13e1018c3f51"], 0x20}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYRES8=r0], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) (async) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYRES8=r0], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001ec0)="1400000017001963d2", 0x9}], 0x1}, 0x20000000) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001ec0)="1400000017001963d2", 0x9}], 0x1}, 0x20000000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='rxrpc_call\x00', r6}, 0x18) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000440)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r8, 0x0, 0x10, &(0x7f000001aa80)="17000000020001000003be8c5e687a8a39002b0002f6ffebff4c0000000300000a0041000098fc5a53d3f5b7c2a96c6b07169da9c0f8d9485bbb68880a00243c5197b29f9368bdd6c8010000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100004b47338dc8d477847ab52c0600d3d3ce0000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc54ddfc5146b2aba6ac6c8667a224080236e2b68c8eec25a02aff060115", 0xb8) recvmmsg(r4, &(0x7f00000005c0)=[{{&(0x7f00000003c0)=@ethernet={0x0, @multicast}, 0x0, &(0x7f0000000480)=[{&(0x7f0000000900)=""/228}, {&(0x7f0000000a00)=""/181}, {&(0x7f00000001c0)=""/17}], 0x0, &(0x7f0000000c00)=""/4096}, 0x5}], 0x3c, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="24010000190004002cbd7000fbdbdf25ffffffff000000000000000000000000ffffffff0000000000000000000000004e2100004e2007ff020000a021000000", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="03000000000000000800000000000000030b0000000000000000000000000500190000000000000001f0ffffffffffff04000000000000000000000000000000080000000000000000010000000000000700000000000000070000000000"], 0x124}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 151.425912ms ago: executing program 0 (id=8107): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800004075e015caa0129200000000dc4f8903d0c60f58010118150100", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000db5a00fea0000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000150000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800004075e015caa0129200000000dc4f8903d0c60f58010118150100", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000db5a00fea0000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000150000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)={0x2, 'batadv0\x00', {0x1}, 0x4}) 0s ago: executing program 4 (id=8108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x400001, 0x6361, 0x5, 0xd, 0x40000006}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x4243}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x5, 0xb}, {0xb, 0x10}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4010006) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): lan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.837725][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.847345][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.329749][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.038851][T30678] __nla_validate_parse: 2 callbacks suppressed [ 875.038869][T30678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6346'. [ 875.075547][T30683] netlink: 'syz.0.6343': attribute type 4 has an invalid length. [ 875.094779][T30678] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 875.104005][T30678] team0: Port device batadv1 added [ 875.116031][T30681] syzkaller0: entered promiscuous mode [ 875.126069][T30681] syzkaller0: entered allmulticast mode [ 875.169971][T30685] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input10 [ 875.200087][T30680] lo speed is unknown, defaulting to 1000 [ 875.249349][T30680] wg1 speed is unknown, defaulting to 1000 [ 875.321449][T30680] wg1 speed is unknown, defaulting to 1000 [ 875.447625][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.316914][T30736] 9: renamed from lo (while UP) [ 877.827405][T30744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6357'. [ 878.253274][T30763] bridge_slave_0: left allmulticast mode [ 878.261297][T30763] bridge_slave_0: left promiscuous mode [ 878.267386][T30763] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.306910][T30763] bridge_slave_1: left allmulticast mode [ 878.312687][T30763] bridge_slave_1: left promiscuous mode [ 878.375820][T30763] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.400547][T30763] bond0: (slave bond_slave_0): Releasing backup interface [ 878.527239][T30763] bond0: (slave bond_slave_1): Releasing backup interface [ 878.538013][T30763] team0: Port device team_slave_0 removed [ 878.545215][T30763] team0: Port device team_slave_1 removed [ 878.553001][T30763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.560880][T30763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.568805][T30763] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 878.872631][T24639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.880580][T30792] netlink: 'syz.1.6368': attribute type 1 has an invalid length. [ 878.880602][T30792] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6368'. [ 878.880618][T30792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6368'. [ 878.948104][T24639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.095864][T30801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6370'. [ 879.127377][T30801] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 879.165843][T30801] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6370'. [ 879.403729][T30815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6376'. [ 879.650024][T30822] lo speed is unknown, defaulting to 1000 [ 879.690547][T30822] wg1 speed is unknown, defaulting to 1000 [ 879.735922][T30822] wg1 speed is unknown, defaulting to 1000 [ 879.750091][T30824] lo speed is unknown, defaulting to 1000 [ 879.757998][T30824] wg1 speed is unknown, defaulting to 1000 [ 879.769476][T30824] wg1 speed is unknown, defaulting to 1000 [ 879.906376][T30828] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6378'. [ 879.930876][T30830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6380'. [ 880.546685][T30846] netlink: 'syz.3.6382': attribute type 1 has an invalid length. [ 880.587163][T30846] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6382'. [ 880.612843][T30850] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6384'. [ 881.053476][T30865] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6389'. [ 881.076867][T30865] openvswitch: netlink: Flow key attr not present in new flow. [ 881.183167][T30872] lo speed is unknown, defaulting to 1000 [ 881.223370][T30872] wg1 speed is unknown, defaulting to 1000 [ 881.285183][T30872] wg1 speed is unknown, defaulting to 1000 [ 881.380290][T30879] netlink: 'syz.3.6394': attribute type 61 has an invalid length. [ 881.573401][T30880] netlink: 'syz.3.6394': attribute type 61 has an invalid length. [ 881.741225][T30889] netlink: 124 bytes leftover after parsing attributes in process `syz.3.6398'. [ 881.852207][T30891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6398'. [ 881.858759][T30895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6399'. [ 881.892424][T30895] ip6gretap0: entered promiscuous mode [ 881.899111][T30895] macvtap0: entered promiscuous mode [ 881.904725][T30895] macvtap0: entered allmulticast mode [ 881.911426][T30895] ip6gretap0: entered allmulticast mode [ 882.037758][T30898] bond2: Unable to set down delay as MII monitoring is disabled [ 882.050983][T30898] bond2 (unregistering): Released all slaves [ 882.357986][T30907] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6402'. [ 882.409163][T30907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6402'. [ 882.555166][T30917] ieee802154 phy1 wpan1: encryption failed: -22 [ 882.585966][T30917] ieee802154 phy1 wpan1: encryption failed: -22 [ 882.648286][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 882.696144][T30921] netlink: 136 bytes leftover after parsing attributes in process `syz.1.6406'. [ 882.744632][T30921] syzkaller0: entered promiscuous mode [ 882.759244][T30921] syzkaller0: entered allmulticast mode [ 882.779403][T30921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6406'. [ 883.489350][T30937] netlink: 'syz.3.6410': attribute type 13 has an invalid length. [ 883.490122][T30942] bond1: option arp_validate: invalid value (18446744073491447809) [ 883.521710][T30942] bond1 (unregistering): Released all slaves [ 883.801117][ T51] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 883.840528][ T51] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 883.853052][T30961] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 883.875536][ T51] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 883.946867][ T51] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.140105][T30981] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 884.368743][T31003] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 884.826499][T31006] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.836471][T31009] nbd: must specify at least one socket [ 884.868815][T31009] block nbd3: NBD_DISCONNECT [ 884.873480][T31009] block nbd3: Send disconnect failed -32 [ 884.881136][T31009] block nbd3: shutting down sockets [ 884.961421][T31006] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.039909][T24643] tipc: Resetting bearer [ 885.123296][T31019] netlink: 'syz.2.6429': attribute type 39 has an invalid length. [ 885.174850][T31023] netlink: 'syz.2.6429': attribute type 5 has an invalid length. [ 885.570007][T24643] batman_adv: batadv0: Removing interface: gretap1 [ 885.613424][T24643] bond3 (unregistering): (slave gretap3): Releasing backup interface [ 885.643013][T24643] bond7 (unregistering): (slave gretap4): Releasing active interface [ 885.710673][T24643] dvmrp0 (unregistering): left allmulticast mode [ 885.741920][T24643] bond1 (unregistering): (slave geneve2): Releasing active interface [ 886.158091][T24643] tipc: Disabling bearer [ 886.304058][T24643] team0: Port device bond0 removed [ 886.323297][T24643] bond0 (unregistering): Released all slaves [ 886.461430][T24643] bond1 (unregistering): Released all slaves [ 886.598151][T24643] bond2 (unregistering): Released all slaves [ 886.732319][T24643] bond3 (unregistering): (slave bond4): Releasing backup interface [ 886.741047][T24643] bond3 (unregistering): Released all slaves [ 886.879183][T24643] bond4 (unregistering): Released all slaves [ 886.892235][T24643] bond5 (unregistering): Released all slaves [ 886.904435][T24643] bond6 (unregistering): Released all slaves [ 886.916738][T24643] bond7 (unregistering): Released all slaves [ 886.958042][T31023] vlan2: entered allmulticast mode [ 886.963209][T31023] bridge_slave_0: entered allmulticast mode [ 887.070131][T31006] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.128559][T24643] tipc: Left network mode [ 887.177686][T31006] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.229356][T31039] geneve2: entered promiscuous mode [ 887.270733][T31039] __nla_validate_parse: 13 callbacks suppressed [ 887.270751][T31039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6433'. [ 887.701477][ T61] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.765193][ T61] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.783694][T31054] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6438'. [ 887.894601][ T6216] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.910681][T31054] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6438'. [ 887.974174][ T61] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.391522][T31066] lo speed is unknown, defaulting to 1000 [ 888.471098][T31072] syzkaller0: entered promiscuous mode [ 888.492831][T31072] syzkaller0: entered allmulticast mode [ 888.507178][T31066] wg1 speed is unknown, defaulting to 1000 [ 888.527161][T31066] wg1 speed is unknown, defaulting to 1000 [ 888.583182][T31080] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 888.618078][T31080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6445'. [ 888.714888][T31086] gretap1: entered promiscuous mode [ 892.175816][ T6216] smc: removing ib device !yz! [ 892.181190][T31113] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 892.181194][T31114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6452'. [ 892.672536][T31130] netlink: 'syz.4.6457': attribute type 3 has an invalid length. [ 892.695089][T31133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6456'. [ 892.718966][T31130] netlink: 'syz.4.6457': attribute type 3 has an invalid length. [ 892.803115][T31130] pim6reg1: entered promiscuous mode [ 892.814861][T31141] netlink: 'syz.0.6460': attribute type 13 has an invalid length. [ 892.820168][T31130] pim6reg1: entered allmulticast mode [ 892.941960][T31146] netlink: 'syz.2.6462': attribute type 1 has an invalid length. [ 893.116641][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.142622][T31127] lo speed is unknown, defaulting to 1000 [ 893.231311][T31147] tipc: Started in network mode [ 893.237518][T31147] tipc: Node identity , cluster identity 4711 [ 893.244498][T31147] tipc: Failed to obtain node identity [ 893.267226][T31147] tipc: Enabling of bearer rejected, failed to enable media [ 893.371584][T31127] wg1 speed is unknown, defaulting to 1000 [ 893.392090][T31127] wg1 speed is unknown, defaulting to 1000 [ 893.527349][T31156] netlink: 'syz.2.6465': attribute type 3 has an invalid length. [ 893.546164][T31156] netlink: 666 bytes leftover after parsing attributes in process `syz.2.6465'. [ 893.595057][T31162] syz.3.6466: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 893.611513][T31162] CPU: 1 UID: 0 PID: 31162 Comm: syz.3.6466 Not tainted syzkaller #0 PREEMPT(full) [ 893.611539][T31162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 893.611552][T31162] Call Trace: [ 893.611560][T31162] [ 893.611571][T31162] dump_stack_lvl+0xe8/0x150 [ 893.611602][T31162] warn_alloc+0x214/0x310 [ 893.611624][T31162] ? stack_trace_save+0x9c/0xe0 [ 893.611654][T31162] ? __pfx_warn_alloc+0x10/0x10 [ 893.611682][T31162] ? kasan_save_track+0x4f/0x80 [ 893.611700][T31162] ? kasan_save_track+0x3e/0x80 [ 893.611718][T31162] ? __kasan_kmalloc+0x93/0xb0 [ 893.611736][T31162] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 893.611754][T31162] ? xskq_create+0x56/0x170 [ 893.611773][T31162] ? xsk_setsockopt+0x4dc/0x8d0 [ 893.611788][T31162] ? do_sock_setsockopt+0x17c/0x1b0 [ 893.611809][T31162] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 893.611837][T31162] ? do_syscall_64+0xec/0xf80 [ 893.611863][T31162] __vmalloc_node_range_noprof+0x134/0x16a0 [ 893.611917][T31162] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 893.611944][T31162] ? __kasan_kmalloc+0x93/0xb0 [ 893.611971][T31162] vmalloc_user_noprof+0xad/0xf0 [ 893.611990][T31162] ? xskq_create+0xbf/0x170 [ 893.612010][T31162] xskq_create+0xbf/0x170 [ 893.612033][T31162] xsk_init_queue+0xb0/0x110 [ 893.612053][T31162] xsk_setsockopt+0x4dc/0x8d0 [ 893.612072][T31162] ? __pfx_xsk_setsockopt+0x10/0x10 [ 893.612091][T31162] ? __pfx_aa_sk_perm+0x10/0x10 [ 893.612118][T31162] ? aa_sock_opt_perm+0xff/0x1a0 [ 893.612143][T31162] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 893.612162][T31162] ? __pfx_xsk_setsockopt+0x10/0x10 [ 893.612182][T31162] do_sock_setsockopt+0x17c/0x1b0 [ 893.612208][T31162] __x64_sys_setsockopt+0x13f/0x1b0 [ 893.612237][T31162] do_syscall_64+0xec/0xf80 [ 893.612257][T31162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.612275][T31162] ? trace_irq_disable+0x37/0x100 [ 893.612297][T31162] ? clear_bhb_loop+0x60/0xb0 [ 893.612319][T31162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.612339][T31162] RIP: 0033:0x7f45d6d8f749 [ 893.612359][T31162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 893.612376][T31162] RSP: 002b:00007f45d7cc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 893.612398][T31162] RAX: ffffffffffffffda RBX: 00007f45d6fe6090 RCX: 00007f45d6d8f749 [ 893.612413][T31162] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 893.612427][T31162] RBP: 00007f45d6e13f91 R08: 0000000000000004 R09: 0000000000000000 [ 893.612440][T31162] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 893.612454][T31162] R13: 00007f45d6fe6128 R14: 00007f45d6fe6090 R15: 00007ffdbeec9988 [ 893.612489][T31162] [ 893.612498][T31162] Mem-Info: [ 893.890251][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.905696][T31162] active_anon:11198 inactive_anon:1 isolated_anon:0 [ 893.905696][T31162] active_file:3205 inactive_file:40209 isolated_file:0 [ 893.905696][T31162] unevictable:768 dirty:249 writeback:0 [ 893.905696][T31162] slab_reclaimable:13033 slab_unreclaimable:145022 [ 893.905696][T31162] mapped:30228 shmem:1486 pagetables:1050 [ 893.905696][T31162] sec_pagetables:0 bounce:0 [ 893.905696][T31162] kernel_misc_reclaimable:0 [ 893.905696][T31162] free:1268161 free_pcp:10688 free_cma:0 [ 894.007662][T31162] Node 0 active_anon:44792kB inactive_anon:4kB active_file:12820kB inactive_file:160640kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120912kB dirty:996kB writeback:0kB shmem:4408kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14396kB pagetables:4164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 894.046991][T31162] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 894.079491][T31162] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 894.134625][T31162] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 894.143631][T31162] Node 0 DMA32 free:1152840kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44832kB inactive_anon:4kB active_file:12820kB inactive_file:160640kB unevictable:1576kB writepending:996kB zspages:0kB present:3129332kB managed:2559468kB mlocked:40kB bounce:0kB free_pcp:34372kB local_pcp:20172kB free_cma:0kB [ 894.179078][T31162] lowmem_reserve[]: 0 0 1 1 1 [ 894.184478][T31162] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 894.241459][T31162] lowmem_reserve[]: 0 0 0 0 0 [ 894.259781][T31162] Node 1 Normal free:3904636kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:8496kB local_pcp:3920kB free_cma:0kB [ 894.379488][T31162] lowmem_reserve[]: 0 0 0 0 0 [ 894.384263][T31162] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 894.431401][T31162] Node 0 DMA32: 5475*4kB (UE) 6114*8kB (UME) 3938*16kB (UME) 1209*32kB (UME) 637*64kB (UME) 423*128kB (UME) 313*256kB (UM) 283*512kB (UM) 228*1024kB (UME) 74*2048kB (UM) 66*4096kB (UM) = 1147804kB [ 894.506016][T31162] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 894.541753][T31162] Node 1 Normal: 181*4kB (UME) 51*8kB (UME) 39*16kB (UME) 255*32kB (UME) 107*64kB (UME) 16*128kB (UME) 7*256kB (UME) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3904636kB [ 894.597825][T31162] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 894.648487][T31162] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 894.697131][T31162] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 894.716548][T31162] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 894.812752][T31162] 46423 total pagecache pages [ 894.818244][T31162] 1 pages in swap cache [ 894.822599][T31162] Free swap = 124992kB [ 894.827587][T31162] Total swap = 124996kB [ 894.831844][T31162] 2097051 pages RAM [ 894.839006][T31162] 0 pages HighMem/MovableOnly [ 894.843776][T31162] 425094 pages reserved [ 894.848060][T31162] 0 pages cma reserved [ 894.941710][T31190] IPVS: length: 132 != 8 [ 894.998885][T31190] pimreg: entered allmulticast mode [ 895.577944][T24643] IPVS: stop unused estimator thread 0... [ 895.779261][T31189] pimreg: left allmulticast mode [ 895.829823][T31217] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6484'. [ 895.906690][T31219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6485'. [ 895.926736][T31219] 8021q: VLANs not supported on nlmon0 [ 895.963337][T31221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6486'. [ 896.031359][T31223] netlink: 'syz.4.6487': attribute type 1 has an invalid length. [ 896.075817][T31223] netlink: 172 bytes leftover after parsing attributes in process `syz.4.6487'. [ 896.084332][T31226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6488'. [ 896.134333][T31232] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 1280 [ 896.316435][T31240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6493'. [ 896.395038][T31243] tipc: Started in network mode [ 896.407628][T31243] tipc: Node identity 9ad45f5a8ec, cluster identity 4711 [ 896.437155][T31243] tipc: Enabled bearer , priority 10 [ 896.505909][T31243] netlink: 'syz.2.6492': attribute type 15 has an invalid length. [ 896.543436][T31245] syzkaller0: entered promiscuous mode [ 896.553868][T31245] syzkaller0: entered allmulticast mode [ 896.577612][T31245] IPVS: set_ctl: invalid protocol: 4 172.20.20.27:20004 [ 896.762530][T31266] netlink: 'syz.0.6500': attribute type 23 has an invalid length. [ 896.914755][T31271] syzkaller0: entered promiscuous mode [ 896.934571][T31271] syzkaller0: entered allmulticast mode [ 897.181808][T31295] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6504'. [ 897.182799][T31275] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.276407][T31281] geneve2: entered promiscuous mode [ 897.312937][T24644] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.326615][T24644] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.344656][T24644] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.445644][T24644] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.547757][T31275] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.630260][ T5974] tipc: Node number set to 336879450 [ 897.671350][T31301] erspan0: entered promiscuous mode [ 897.682989][T31301] erspan0: entered allmulticast mode [ 897.711376][T31301] syzkaller0: entered promiscuous mode [ 897.725838][T31301] syzkaller0: entered allmulticast mode [ 897.937979][T31275] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.006994][T31303] tipc: Enabled bearer , priority 0 [ 898.017229][ T5836] Bluetooth: hci1: command 0x040f tx timeout [ 898.145301][T31275] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.186641][T31301] tipc: Resetting bearer [ 898.216060][T31300] tipc: Resetting bearer [ 898.244349][T31300] tipc: Disabling bearer [ 898.405828][ T5842] Bluetooth: hci5: command 0x0405 tx timeout [ 898.557346][ T6147] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.660546][ T1145] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.685953][ T1145] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.723325][ T3504] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.288533][T31338] macvtap1: entered promiscuous mode [ 899.305694][T31338] bridge0: entered promiscuous mode [ 899.311239][T31338] macvtap1: entered allmulticast mode [ 899.322868][T31338] bridge0: entered allmulticast mode [ 899.347814][T31338] bridge0: port 1(macvtap1) entered blocking state [ 899.357800][T31348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6520'. [ 899.385885][T31338] bridge0: port 1(macvtap1) entered disabled state [ 899.400952][T31338] bridge0: left allmulticast mode [ 899.460386][T31338] bridge0: left promiscuous mode [ 899.696596][T31351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6523'. [ 900.258182][T31390] netlink: 'syz.3.6534': attribute type 10 has an invalid length. [ 900.286664][T31390] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6534'. [ 900.306602][T31390] bond0: entered promiscuous mode [ 900.323412][T31390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.340226][T31390] bridge0: port 1(bond0) entered blocking state [ 900.348430][T31390] bridge0: port 1(bond0) entered disabled state [ 900.355025][T31390] bond0: entered allmulticast mode [ 900.625902][T31407] netlink: 'syz.0.6540': attribute type 1 has an invalid length. [ 900.651804][T31407] netlink: 'syz.0.6540': attribute type 2 has an invalid length. [ 900.683247][T31412] lo speed is unknown, defaulting to 1000 [ 900.710187][T31412] wg1 speed is unknown, defaulting to 1000 [ 900.728651][T31412] wg1 speed is unknown, defaulting to 1000 [ 900.913194][T31420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6543'. [ 901.489514][T31423] IPv6: sit1: Disabled Multicast RS [ 901.849405][T31441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6548'. [ 901.886856][T31442] bond1: entered promiscuous mode [ 901.912910][T31441] vlan3: entered promiscuous mode [ 901.923436][T31441] bond0: entered promiscuous mode [ 901.941418][T31438] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.6548'. [ 901.951521][T31441] bond_slave_0: entered promiscuous mode [ 901.963771][T31441] bond_slave_1: entered promiscuous mode [ 902.231209][T31453] lo: Caught tx_queue_len zero misconfig [ 902.320223][T31456] netlink: 'syz.1.6552': attribute type 20 has an invalid length. [ 902.329135][T31456] IPv6: NLM_F_CREATE should be specified when creating new route [ 902.412329][T31460] ip6tnl0: Caught tx_queue_len zero misconfig [ 902.433895][T31466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6556'. [ 902.588843][T31466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6556'. [ 902.606869][T31466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6556'. [ 902.639749][T31477] tipc: Enabling of bearer rejected, failed to enable media [ 902.650596][T31466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6556'. [ 902.743380][T31485] atomic_op ffff888035b34998 conn xmit_atomic 0000000000000000 [ 902.895969][T31496] IPv6: sit2: Disabled Multicast RS [ 902.939688][T31494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 903.073180][T31505] x_tables: duplicate underflow at hook 3 [ 904.282711][T31550] vxcan3: entered promiscuous mode [ 904.375070][T31552] __nla_validate_parse: 36 callbacks suppressed [ 904.375088][T31552] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6581'. [ 904.998212][T31562] atomic_op ffff888054c27998 conn xmit_atomic 0000000000000000 [ 905.184765][T31568] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6586'. [ 905.252930][T31572] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6587'. [ 905.333525][T31576] lo speed is unknown, defaulting to 1000 [ 905.351944][T31576] wg1 speed is unknown, defaulting to 1000 [ 905.372312][T31576] wg1 speed is unknown, defaulting to 1000 [ 905.493466][T31590] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6593'. [ 905.509861][T31587] bond2: Removing last ns target with arp_interval on [ 905.565960][T24642] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 905.575151][T24643] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 905.603554][T24643] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 905.605481][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880595fc000: rx timeout, send abort [ 905.620635][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804c724c00: rx timeout, send abort [ 905.623069][T24643] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 905.629493][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880595fc000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 905.631303][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804c724c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 905.868997][T31599] bond2: option arp_validate: invalid value (18446744073491447809) [ 905.882792][T31599] bond2 (unregistering): Released all slaves [ 905.928870][T31608] netlink: 'syz.0.6596': attribute type 13 has an invalid length. [ 906.117057][T31608] bridge0: port 1(dummy0) entered disabled state [ 906.264876][T31620] netlink: 'syz.4.6601': attribute type 1 has an invalid length. [ 906.490162][T31608] ip6gretap0: left allmulticast mode [ 906.530569][T31626] ipip0: entered promiscuous mode [ 906.543927][T31626] ipip0: entered allmulticast mode [ 906.555005][T24642] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.648584][T24639] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.686006][T24639] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.765160][T24639] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.937810][T31652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6608'. [ 906.997296][T31638] syzkaller1: entered promiscuous mode [ 907.004267][T31638] syzkaller1: entered allmulticast mode [ 907.364488][T31681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6618'. [ 907.382045][T31679] IPv6: addrconf: prefix option has invalid lifetime [ 907.388830][T31679] IPv6: addrconf: prefix option has invalid lifetime [ 907.555692][T31691] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6622'. [ 907.648177][T31697] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6624'. [ 907.970639][T31718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6631'. [ 907.981082][T31718] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6631'. [ 907.996641][T31715] syzkaller0: entered promiscuous mode [ 908.065425][T31715] syzkaller0: entered allmulticast mode [ 908.263273][T31724] lo speed is unknown, defaulting to 1000 [ 908.301014][T31724] wg1 speed is unknown, defaulting to 1000 [ 908.319916][T31724] wg1 speed is unknown, defaulting to 1000 [ 908.546445][T31742] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 909.029292][T31766] syzkaller1: entered promiscuous mode [ 909.034811][T31766] syzkaller1: entered allmulticast mode [ 909.451058][T31784] lo speed is unknown, defaulting to 1000 [ 909.500312][T31784] wg1 speed is unknown, defaulting to 1000 [ 909.532608][T31805] __nla_validate_parse: 5 callbacks suppressed [ 909.532627][T31805] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6656'. [ 909.569736][T31784] wg1 speed is unknown, defaulting to 1000 [ 909.719136][T31813] lo speed is unknown, defaulting to 1000 [ 909.727288][T31813] wg1 speed is unknown, defaulting to 1000 [ 909.734725][T31813] wg1 speed is unknown, defaulting to 1000 [ 909.804792][T31809] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6657'. [ 910.098188][T31827] x_tables: duplicate underflow at hook 2 [ 910.224171][T31833] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6664'. [ 910.254139][T31836] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6665'. [ 910.345579][T31833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6664'. [ 910.354963][T31833] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6664'. [ 910.368747][T31833] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6664'. [ 910.468785][T31844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6666'. [ 910.661543][T31849] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6668'. [ 910.773754][T31853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6670'. [ 912.252512][T31916] lo speed is unknown, defaulting to 1000 [ 912.260684][T31916] wg1 speed is unknown, defaulting to 1000 [ 912.276940][T31916] wg1 speed is unknown, defaulting to 1000 [ 912.639337][T31939] netlink: 'syz.0.6689': attribute type 10 has an invalid length. [ 912.647929][T31939] dummy0: left allmulticast mode [ 912.653154][T31939] dummy0: left promiscuous mode [ 912.658854][T31939] bridge0: port 1(dummy0) entered disabled state [ 912.697357][T31942] netlink: 'syz.0.6689': attribute type 10 has an invalid length. [ 913.366684][T31939] team0: Port device dummy0 added [ 913.382096][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 913.430383][T31942] team0: Port device dummy0 removed [ 913.466015][T31942] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 913.601835][T31954] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 913.850285][T31965] lo speed is unknown, defaulting to 1000 [ 913.897898][T31965] wg1 speed is unknown, defaulting to 1000 [ 913.970892][T31965] wg1 speed is unknown, defaulting to 1000 [ 913.979049][T31978] lo speed is unknown, defaulting to 1000 [ 913.990913][T31978] wg1 speed is unknown, defaulting to 1000 [ 914.007772][T31978] wg1 speed is unknown, defaulting to 1000 [ 914.232151][T31987] lo speed is unknown, defaulting to 1000 [ 914.253014][T31987] wg1 speed is unknown, defaulting to 1000 [ 914.260960][T31987] wg1 speed is unknown, defaulting to 1000 [ 914.789621][T32018] netlink: 'syz.4.6709': attribute type 21 has an invalid length. [ 914.810404][T32018] __nla_validate_parse: 6 callbacks suppressed [ 914.810423][T32018] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6709'. [ 914.839684][T32018] netlink: 'syz.4.6709': attribute type 5 has an invalid length. [ 914.904913][T32018] netlink: 'syz.4.6709': attribute type 6 has an invalid length. [ 914.926577][T32018] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6709'. [ 915.037243][T32029] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 915.291207][T32049] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6718'. [ 915.657150][T32063] bond3: option arp_validate: invalid value (18446744073491447809) [ 915.668995][T32063] bond3 (unregistering): Released all slaves [ 915.804342][T32071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6722'. [ 915.930215][T32081] netlink: 'syz.3.6725': attribute type 21 has an invalid length. [ 915.958288][T32081] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6725'. [ 916.154792][T32092] IPVS: length: 35 != 1272 [ 916.465116][T32117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6736'. [ 916.505595][T32117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6736'. [ 916.559155][T32117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6736'. [ 916.594933][T32117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6736'. [ 916.635715][T32117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6736'. [ 916.897952][T32134] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 916.920697][T32134] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 917.406774][ T30] audit: type=1800 audit(1768832890.924:21): pid=32150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6744" name="memory.events" dev="tmpfs" ino=984 res=0 errno=0 [ 917.453451][ T30] audit: type=1804 audit(1768832890.924:22): pid=32150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.6744" name="/newroot/187/memory.events" dev="tmpfs" ino=984 res=1 errno=0 [ 918.130466][T32171] SET target dimension over the limit! [ 918.258460][T32183] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 918.273780][T32188] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 918.408109][T32197] sctp: [Deprecated]: syz.2.6757 (pid 32197) Use of struct sctp_assoc_value in delayed_ack socket option. [ 918.408109][T32197] Use struct sctp_sack_info instead [ 918.724396][T32211] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 918.799542][T32211] bond3 (unregistering): Released all slaves [ 919.231083][T32238] netlink: 'syz.3.6769': attribute type 13 has an invalid length. [ 919.809571][T32275] syzkaller0: entered promiscuous mode [ 919.824399][T32275] syzkaller0: entered allmulticast mode [ 919.844280][T32279] __nla_validate_parse: 86 callbacks suppressed [ 919.844298][T32279] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6781'. [ 919.895896][T32279] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6781'. [ 919.927942][T32289] netlink: 'syz.0.6780': attribute type 11 has an invalid length. [ 919.936037][T32289] netlink: 'syz.0.6780': attribute type 23 has an invalid length. [ 919.943907][T32289] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6780'. [ 920.151905][T32297] netlink: 'syz.0.6785': attribute type 1 has an invalid length. [ 920.160270][T32297] netlink: 'syz.0.6785': attribute type 2 has an invalid length. [ 920.168399][T32297] netlink: 'syz.0.6785': attribute type 1 has an invalid length. [ 920.185714][T32297] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6785'. [ 920.327027][T32305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6786'. [ 920.353896][T32305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6786'. [ 920.385462][T32305] netlink: 58 bytes leftover after parsing attributes in process `syz.3.6786'. [ 921.022081][T32334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6796'. [ 921.094779][T32341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6796'. [ 921.266179][T32345] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 921.533837][T32358] lo speed is unknown, defaulting to 1000 [ 921.635198][T32358] wg1 speed is unknown, defaulting to 1000 [ 921.694001][T32358] wg1 speed is unknown, defaulting to 1000 [ 921.985775][T32382] veth1_to_bond: entered allmulticast mode [ 922.278225][T32394] netlink: 320 bytes leftover after parsing attributes in process `syz.3.6807'. [ 922.452152][T32405] : renamed from veth0_vlan (while UP) [ 922.764637][T32425] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 923.166904][T32441] syzkaller0: entered promiscuous mode [ 923.172509][T32441] syzkaller0: entered allmulticast mode [ 923.298285][T32451] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 923.605820][T32464] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.704755][T32464] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.826150][T32464] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.926202][T32464] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.978648][T32486] dvmrp8: entered allmulticast mode [ 924.043924][T24645] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.071612][T24645] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.099596][T24645] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.135210][T24645] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.278812][T32502] sit0: entered promiscuous mode [ 924.284039][T32502] netlink: 'syz.2.6839': attribute type 1 has an invalid length. [ 924.728393][T32525] netlink: 'syz.4.6849': attribute type 1 has an invalid length. [ 924.863652][T32539] __nla_validate_parse: 8 callbacks suppressed [ 924.863669][T32539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6852'. [ 925.062972][T32546] dvmrp6: entered allmulticast mode [ 925.254374][T32556] No such timeout policy "syz0" [ 925.278801][T32548] netlink: 'syz.2.6855': attribute type 11 has an invalid length. [ 925.280948][T32560] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6859'. [ 925.308200][T32548] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6855'. [ 925.309214][T32559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6859'. [ 925.358225][T32562] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6859'. [ 925.453263][T32559] 8021q: adding VLAN 0 to HW filter on device bond1 [ 925.554265][T32567] bridge0: entered promiscuous mode [ 925.560649][T32567] vlan2: entered promiscuous mode [ 925.811943][T32582] lo speed is unknown, defaulting to 1000 [ 925.820595][T32582] wg1 speed is unknown, defaulting to 1000 [ 925.822996][T32585] netlink: 'syz.3.6866': attribute type 2 has an invalid length. [ 925.834536][T32582] wg1 speed is unknown, defaulting to 1000 [ 925.838981][T32585] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6866'. [ 925.956049][T32590] : option downdelay: invalid value (18446744073709547007) [ 925.963518][T32590] : option downdelay: allowed values 0 - 2147483647 [ 926.042890][T32590] (unregistering): Released all slaves [ 926.268967][T32600] lo speed is unknown, defaulting to 1000 [ 926.284835][T32606] netlink: 'syz.0.6869': attribute type 2 has an invalid length. [ 926.300275][T32600] wg1 speed is unknown, defaulting to 1000 [ 926.310623][T32606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6869'. [ 926.345205][T32600] wg1 speed is unknown, defaulting to 1000 [ 926.368358][T32580] delete_channel: no stack [ 926.593619][T32614] xt_TCPMSS: Only works on TCP SYN packets [ 926.806805][T32622] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6873'. [ 926.841080][T32617] smc: net device hsr0 applied user defined pnetid SYZ2 [ 926.925242][T32624] smc: net device hsr0 erased user defined pnetid SYZ2 [ 927.019893][T32627] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6874'. [ 927.041219][T32627] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6874'. [ 927.072894][T32629] netlink: 'syz.1.6875': attribute type 2 has an invalid length. [ 927.129825][T32629] : entered promiscuous mode [ 927.578347][T32658] sctp: [Deprecated]: syz.0.6884 (pid 32658) Use of struct sctp_assoc_value in delayed_ack socket option. [ 927.578347][T32658] Use struct sctp_sack_info instead [ 927.916537][T32667] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input11 [ 928.130215][T32664] team0 (unregistering): Port device team_slave_0 removed [ 928.142752][T32664] team0 (unregistering): Port device team_slave_1 removed [ 928.177695][T32671] netlink: 'syz.2.6889': attribute type 10 has an invalid length. [ 928.229722][T32666] lo speed is unknown, defaulting to 1000 [ 928.263004][T32687] syzkaller0: entered promiscuous mode [ 928.269713][T32687] syzkaller0: entered allmulticast mode [ 928.281846][T32666] wg1 speed is unknown, defaulting to 1000 [ 928.323133][T32691] Bluetooth: MGMT ver 1.23 [ 928.359876][T32666] wg1 speed is unknown, defaulting to 1000 [ 928.389237][T32693] pim6reg1: entered promiscuous mode [ 928.394784][T32693] pim6reg1: entered allmulticast mode [ 928.847030][T32707] C: renamed from team_slave_0 [ 928.917210][T32707] netlink: 'syz.0.6896': attribute type 2 has an invalid length. [ 928.956147][T32707] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 929.312430][T32713] veth3: entered promiscuous mode [ 929.736669][T32724] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 929.776796][T32724] bond2 (unregistering): Released all slaves [ 929.817550][T32745] team_slave_0: entered promiscuous mode [ 929.852940][T32739] netlink: 'syz.3.6907': attribute type 21 has an invalid length. [ 929.869082][T32739] __nla_validate_parse: 8 callbacks suppressed [ 929.869104][T32739] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6907'. [ 929.989514][T32752] tipc: Started in network mode [ 929.999612][T32752] tipc: Node identity ca4864037b8c, cluster identity 4711 [ 930.013032][T32752] tipc: Enabled bearer , priority 0 [ 930.021613][T32749] syzkaller0: entered promiscuous mode [ 930.035700][T32749] syzkaller0: entered allmulticast mode [ 930.061193][T32755] smc: net device ip6tnl0 applied user defined pnetid SYZ2 [ 930.103590][T32757] tipc: Resetting bearer [ 930.149753][T32757] tipc: Disabling bearer [ 930.313598][T32760] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.321730][T32760] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.444570][T32760] team_slave_0: left promiscuous mode [ 930.467803][T32760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 930.490854][T32760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 930.695172][T32760] ipip0: left promiscuous mode [ 930.701427][T32760] ipip0: left allmulticast mode [ 930.711636][T32760] veth3: left promiscuous mode [ 930.729270][T24642] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.748666][T24642] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.765678][T24642] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.774612][T24642] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.900544][ T310] batadv_slave_0: entered promiscuous mode [ 931.184325][ T330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6922'. [ 931.228328][ T330] A link change request failed with some changes committed already. Interface 9 may have been left with an inconsistent configuration, please check. [ 931.247232][ T333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6923'. [ 931.311719][ T345] netlink: 'syz.3.6923': attribute type 15 has an invalid length. [ 931.512253][ T360] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6930'. [ 931.530298][ T360] syzkaller0: entered promiscuous mode [ 931.537117][ T360] syzkaller0: entered allmulticast mode [ 931.762910][ T370] ipt_REJECT: ECHOREPLY no longer supported. [ 931.774180][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.802761][ T372] SET target dimension over the limit! [ 931.931785][ T387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6938'. [ 932.378086][ T417] bond3: option ad_select: invalid value (34) [ 932.393820][ T417] bond3 (unregistering): Released all slaves [ 932.582200][ T431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6949'. [ 932.712294][ T442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6951'. [ 933.268504][ T455] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6955'. [ 933.437560][ T455] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6955'. [ 933.753802][ T471] netlink: 'syz.4.6956': attribute type 10 has an invalid length. [ 933.766330][ T471] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6956'. [ 934.154647][ T492] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 934.220189][ T498] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 934.293135][ T499] bond2: option arp_validate: invalid value (18446744073491447809) [ 934.313656][ T499] bond2 (unregistering): Released all slaves [ 934.320172][ T504] netlink: 'syz.2.6962': attribute type 13 has an invalid length. [ 934.388640][ T498] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 934.646790][ T6213] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.679430][ T498] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 934.717031][ T6213] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.753663][ T6213] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.773249][ T498] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 934.803743][ T6213] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.901401][ T61] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 934.931441][ T520] batadv_slave_1: entered promiscuous mode [ 934.954825][T24643] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 934.971482][ T517] __nla_validate_parse: 1 callbacks suppressed [ 934.971502][ T517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6966'. [ 935.014413][ T517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 935.065027][T24643] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 935.089741][ T3504] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 935.105886][ T514] batadv_slave_1: left promiscuous mode [ 935.630524][ T545] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6973'. [ 936.042592][ T547] netlink: 200 bytes leftover after parsing attributes in process `syz.3.6974'. [ 936.071531][ T573] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 936.093680][ T573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6980'. [ 936.140702][ T578] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 936.167677][ T573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6980'. [ 936.430790][ T595] lo speed is unknown, defaulting to 1000 [ 936.438793][ T595] wg1 speed is unknown, defaulting to 1000 [ 936.446244][ T595] wg1 speed is unknown, defaulting to 1000 [ 936.681440][ T604] netlink: 'syz.2.6990': attribute type 15 has an invalid length. [ 936.719062][ T605] lo speed is unknown, defaulting to 1000 [ 936.748454][ T605] wg1 speed is unknown, defaulting to 1000 [ 936.776521][ T605] wg1 speed is unknown, defaulting to 1000 [ 937.050668][ T612] netlink: 'syz.0.6992': attribute type 13 has an invalid length. [ 937.139178][ T612] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6992'. [ 937.161696][ T612] syz_tun: refused to change device tx_queue_len [ 937.164077][ T614] netlink: 'syz.0.6992': attribute type 4 has an invalid length. [ 937.169068][ T612] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 937.959926][ T636] netlink: 'syz.1.6997': attribute type 4 has an invalid length. [ 937.975687][ T639] ip_vti0: mtu less than device minimum [ 938.053568][ T645] bond0: (slave bond_slave_0): Releasing backup interface [ 938.065955][ T645] bond_slave_0: left promiscuous mode [ 938.075031][ T645] bond0: (slave bond_slave_1): Releasing backup interface [ 938.094942][ T645] bond_slave_1: left promiscuous mode [ 938.113222][ T645] team0: Port device team_slave_0 removed [ 938.120673][ T645] team0: Port device team_slave_1 removed [ 938.127419][ T645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.136788][ T645] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 938.214730][ T648] lo speed is unknown, defaulting to 1000 [ 938.272427][ T648] wg1 speed is unknown, defaulting to 1000 [ 938.298911][ T648] wg1 speed is unknown, defaulting to 1000 [ 938.351747][ T663] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7002'. [ 938.404180][ T659] lo speed is unknown, defaulting to 1000 [ 938.416875][ T663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7002'. [ 938.434532][ T659] wg1 speed is unknown, defaulting to 1000 [ 938.513218][ T673] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input12 [ 938.554748][ T659] wg1 speed is unknown, defaulting to 1000 [ 938.754423][ T684] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 938.872907][ T698] netlink: 'syz.1.7009': attribute type 5 has an invalid length. [ 938.984872][ T703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7009'. [ 938.991409][ T698] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 939.088681][ T702] lo speed is unknown, defaulting to 1000 [ 939.101344][ T702] wg1 speed is unknown, defaulting to 1000 [ 939.109586][ T702] wg1 speed is unknown, defaulting to 1000 [ 939.275935][ T713] batadv_slave_0: entered promiscuous mode [ 939.319696][ T711] veth0_to_bridge: entered promiscuous mode [ 939.546007][ T719] 9: renamed from lo (while UP) [ 939.640548][ T722] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 939.653155][ T727] syzkaller1: entered promiscuous mode [ 939.666041][ T727] syzkaller1: entered allmulticast mode [ 939.687561][ T722] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 939.796953][ T722] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 939.845169][ T735] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7020'. [ 939.863066][ T701] veth0_to_bridge: left promiscuous mode [ 940.306486][ T763] netlink: 'syz.0.7028': attribute type 8 has an invalid length. [ 940.368802][ T770] netlink: 'syz.4.7030': attribute type 1 has an invalid length. [ 940.370178][ T772] netlink: 31 bytes leftover after parsing attributes in process `syz.4.7030'. [ 940.394785][ T764] m1Ie5n: entered promiscuous mode [ 940.419488][ T769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7030'. [ 940.622520][ T793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7036'. [ 940.708978][ T48] IPVS: starting estimator thread 0... [ 940.795583][ T799] IPVS: using max 35 ests per chain, 84000 per kthread [ 941.697673][ T840] xt_TCPMSS: Only works on TCP SYN packets [ 941.738322][ T840] IPVS: set_ctl: invalid protocol: 90 0.0.0.0:20000 [ 942.413898][ T853] lo speed is unknown, defaulting to 1000 [ 942.448970][ T861] sctp: [Deprecated]: syz.1.7054 (pid 861) Use of int in maxseg socket option. [ 942.448970][ T861] Use struct sctp_assoc_value instead [ 942.477640][ T853] wg1 speed is unknown, defaulting to 1000 [ 942.534888][ T853] wg1 speed is unknown, defaulting to 1000 [ 942.608339][ T865] geneve3: entered promiscuous mode [ 942.641075][T24642] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.665987][T24642] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.674602][T24642] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.784553][T24642] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.785798][ T877] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7056'. [ 942.897761][ T886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7058'. [ 943.263525][ T853] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7052'. [ 943.290473][ T892] ip6gretap0: left promiscuous mode [ 943.313013][ T892] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.329740][ T892] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 943.381601][ T889] lo speed is unknown, defaulting to 1000 [ 943.403603][ T889] wg1 speed is unknown, defaulting to 1000 [ 943.438138][ T889] wg1 speed is unknown, defaulting to 1000 [ 943.625044][ T920] netlink: 71 bytes leftover after parsing attributes in process `syz.0.7061'. [ 943.881754][ T926] lo speed is unknown, defaulting to 1000 [ 943.936001][ T926] wg1 speed is unknown, defaulting to 1000 [ 943.944534][ T926] wg1 speed is unknown, defaulting to 1000 [ 944.059003][ T938] netlink: 'syz.0.7065': attribute type 1 has an invalid length. [ 944.066896][ T938] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7065'. [ 944.150920][ T946] lo speed is unknown, defaulting to 1000 [ 944.158943][ T946] wg1 speed is unknown, defaulting to 1000 [ 944.166812][ T946] wg1 speed is unknown, defaulting to 1000 [ 944.584128][ T975] netlink: 'syz.1.7073': attribute type 3 has an invalid length. [ 944.818717][ T966] lo speed is unknown, defaulting to 1000 [ 944.826409][ T966] wg1 speed is unknown, defaulting to 1000 [ 944.836771][ T966] wg1 speed is unknown, defaulting to 1000 [ 944.951986][ T986] dvmrp9: entered allmulticast mode [ 945.096575][ T987] lo speed is unknown, defaulting to 1000 [ 945.104043][ T987] wg1 speed is unknown, defaulting to 1000 [ 945.111615][ T987] wg1 speed is unknown, defaulting to 1000 [ 945.402430][ T1001] vxcan1: entered promiscuous mode [ 945.414910][ T1001] team0: Port device vxcan1 added [ 945.454822][ T1009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7081'. [ 945.511611][ T1009] 8021q: adding VLAN 0 to HW filter on device bond2 [ 945.794607][ T1019] lo speed is unknown, defaulting to 1000 [ 945.807761][ T1019] wg1 speed is unknown, defaulting to 1000 [ 945.817334][ T1019] wg1 speed is unknown, defaulting to 1000 [ 945.883589][ T1034] netlink: 'syz.0.7085': attribute type 10 has an invalid length. [ 945.900769][ T1034] veth0_vlan: left promiscuous mode [ 945.910934][ T1034] veth0_vlan: entered promiscuous mode [ 945.918802][ T1034] team0: Device veth0_vlan failed to register rx_handler [ 946.219859][ T1054] sock: sock_set_timeout: `syz.0.7090' (pid 1054) tries to set negative timeout [ 946.254548][ T1065] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7092'. [ 946.271765][ T1062] tipc: Enabled bearer , priority 0 [ 946.281288][ T1062] syzkaller0: entered promiscuous mode [ 946.296043][ T1062] syzkaller0: entered allmulticast mode [ 946.352408][ T1062] tipc: Resetting bearer [ 946.380283][ T1055] tipc: Resetting bearer [ 946.430939][ T1055] tipc: Disabling bearer [ 946.448092][ T1075] netlink: 'syz.3.7095': attribute type 13 has an invalid length. [ 946.458300][ T1078] Cannot find add_set index 0 as target [ 946.588901][ T1078] netlink: 'syz.4.7096': attribute type 12 has an invalid length. [ 946.598182][ T1078] netlink: 'syz.4.7096': attribute type 29 has an invalid length. [ 946.606577][ T1078] netlink: 148 bytes leftover after parsing attributes in process `syz.4.7096'. [ 946.620731][ T1080] netlink: 'syz.4.7096': attribute type 12 has an invalid length. [ 946.623774][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e08c800: rx timeout, send abort [ 946.631007][ T1080] netlink: 'syz.4.7096': attribute type 29 has an invalid length. [ 946.650970][ T1080] netlink: 148 bytes leftover after parsing attributes in process `syz.4.7096'. [ 946.910325][ T1107] lo speed is unknown, defaulting to 1000 [ 946.918033][ T1107] wg1 speed is unknown, defaulting to 1000 [ 946.925796][ T1107] wg1 speed is unknown, defaulting to 1000 [ 946.961202][ T1112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7103'. [ 946.983567][ T1112] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7103'. [ 947.004040][ T1112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7103'. [ 947.123983][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e08f000: rx timeout, send abort [ 947.138293][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e08c800: abort rx timeout. Force session deactivation [ 947.168414][ T1121] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7106'. [ 947.235014][ T1130] 8021q: adding VLAN 0 to HW filter on device bond1 [ 947.294342][ T1137] x_tables: ip_tables: osf match: only valid for protocol 6 [ 947.405702][ T1137] x_tables: ip_tables: osf match: only valid for protocol 6 [ 947.413562][ T1137] x_tables: ip_tables: osf match: only valid for protocol 6 [ 947.434232][ T1144] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7110'. [ 947.460844][ T1138] mac80211_hwsim hwsim83 wlan0: entered promiscuous mode [ 947.481624][ T1144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7110'. [ 947.632276][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e08f000: abort rx timeout. Force session deactivation [ 947.785822][ T1172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 947.917465][ T1164] lo speed is unknown, defaulting to 1000 [ 947.962291][ T1164] wg1 speed is unknown, defaulting to 1000 [ 947.986150][ T1164] wg1 speed is unknown, defaulting to 1000 [ 948.138787][ T1180] IPVS: Scheduler module ip_vs_sip not found [ 948.206521][ T1197] netlink: 'syz.3.7121': attribute type 19 has an invalid length. [ 948.215178][ T1197] netlink: 'syz.3.7121': attribute type 20 has an invalid length. [ 948.613905][ T1209] syzkaller0: left promiscuous mode [ 948.622316][ T1209] syzkaller0: left allmulticast mode [ 948.688691][ T1207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 948.696115][ T1207] IPv6: NLM_F_CREATE should be set when creating new route [ 948.703355][ T1207] IPv6: NLM_F_CREATE should be set when creating new route [ 948.766580][ T1215] 8021q: adding VLAN 0 to HW filter on device bond3 [ 948.789025][ T1217] bond3: (slave ip6gretap1): making interface the new active one [ 948.807870][ T1217] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 949.244810][ T1250] tipc: Enabling of bearer rejected, failed to enable media [ 949.676971][ T1287] validate_nla: 1 callbacks suppressed [ 949.676992][ T1287] netlink: 'syz.2.7143': attribute type 3 has an invalid length. [ 949.697907][ T1281] bond2 (unregistering): Released all slaves [ 949.970285][ T1313] netlink: 'syz.4.7151': attribute type 6 has an invalid length. [ 950.019393][ T1315] lo speed is unknown, defaulting to 1000 [ 950.026979][ T1315] wg1 speed is unknown, defaulting to 1000 [ 950.034402][ T1315] wg1 speed is unknown, defaulting to 1000 [ 950.215845][ T1276] netlink: 'syz.3.7140': attribute type 1 has an invalid length. [ 950.312579][ T1330] syzkaller0: left promiscuous mode [ 950.346054][ T1330] syzkaller0: left allmulticast mode [ 950.478092][ T1334] pimreg: entered allmulticast mode [ 950.483511][ T1342] pimreg: left allmulticast mode [ 950.678640][ T1348] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 950.699365][ T1348] syzkaller1: linktype set to 778 [ 950.709463][ T1347] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 950.735674][ T1354] __nla_validate_parse: 10 callbacks suppressed [ 950.735693][ T1354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7162'. [ 950.755867][ T1347] syzkaller1: linktype set to 778 [ 950.777491][ T1348] netlink: 'syz.1.7161': attribute type 46 has an invalid length. [ 950.830362][ T1347] netlink: 'syz.1.7161': attribute type 46 has an invalid length. [ 950.880464][ T1358] lo speed is unknown, defaulting to 1000 [ 950.889358][ T1358] wg1 speed is unknown, defaulting to 1000 [ 950.917233][ T1358] wg1 speed is unknown, defaulting to 1000 [ 951.093494][ T1369] lo speed is unknown, defaulting to 1000 [ 951.100852][ T1375] syzkaller0: entered promiscuous mode [ 951.127068][ T1375] syzkaller0: entered allmulticast mode [ 951.142124][ T1369] wg1 speed is unknown, defaulting to 1000 [ 951.220775][ T1380] IPv6: Can't replace route, no match found [ 951.261631][ T1369] wg1 speed is unknown, defaulting to 1000 [ 951.510464][ T1396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7173'. [ 951.623871][ T1400] netlink: 'syz.0.7175': attribute type 11 has an invalid length. [ 951.678975][ T1400] netlink: 'syz.0.7175': attribute type 4 has an invalid length. [ 951.707606][ T1400] netlink: 'syz.0.7175': attribute type 5 has an invalid length. [ 951.716233][ T1400] netlink: 'syz.0.7175': attribute type 6 has an invalid length. [ 951.724101][ T1400] netlink: 199748 bytes leftover after parsing attributes in process `syz.0.7175'. [ 951.735951][ T1409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 951.755733][ T1410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 951.799480][ T30] audit: type=1800 audit(1768832925.334:23): pid=1416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7177" name="blkio.bfq.time_recursive" dev="tmpfs" ino=954 res=0 errno=0 [ 951.801402][ T1401] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 951.838642][ T1413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7177'. [ 951.853864][ T1413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7177'. [ 951.863423][ T1413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7177'. [ 951.872845][ T1413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7177'. [ 951.893009][ T1413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7177'. [ 951.904644][ T1413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7177'. [ 951.914843][ T1413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7177'. [ 951.936844][ T1406] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 951.958639][ T1410] ip6gretap1: entered promiscuous mode [ 951.964270][ T1410] ip6gretap1: entered allmulticast mode [ 952.223246][ T1431] geneve4: entered allmulticast mode [ 952.493260][ T1458] netlink: 'syz.3.7189': attribute type 9 has an invalid length. [ 952.543351][ T1458] netlink: 'syz.3.7189': attribute type 6 has an invalid length. [ 952.947743][ T1477] 8021q: VLANs not supported on caif0 [ 953.319333][ T1500] bond2: option xmit_hash_policy: invalid value (10) [ 953.351812][ T1500] bond2 (unregistering): Released all slaves [ 953.887788][ T1542] 8021q: adding VLAN 0 to HW filter on device bond4 [ 954.355012][ T1576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.412091][ T1576] x_tables: unsorted underflow at hook 4 [ 954.427381][ T1564] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 954.826630][ T1598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 954.855245][ T1549] delete_channel: no stack [ 955.264074][ T1623] vlan3: entered promiscuous mode [ 955.269357][ T1623] gretap0: entered promiscuous mode [ 955.546281][ T1641] validate_nla: 4 callbacks suppressed [ 955.546300][ T1641] netlink: 'syz.0.7239': attribute type 1 has an invalid length. [ 955.561516][ T1641] netlink: 'syz.0.7239': attribute type 3 has an invalid length. [ 955.572063][ T1643] netlink: 'syz.3.7240': attribute type 4 has an invalid length. [ 955.687730][ T1647] IPv6: sit1: Disabled Multicast RS [ 955.702151][ T1647] sit1: entered promiscuous mode [ 955.711772][ T1647] sit1: entered allmulticast mode [ 955.796037][ T1647] netlink: zone id is out of range [ 955.801218][ T1647] netlink: zone id is out of range [ 955.821138][ T1647] netlink: zone id is out of range [ 955.831289][ T1647] netlink: zone id is out of range [ 955.847771][ T1647] netlink: zone id is out of range [ 955.858254][ T1647] netlink: zone id is out of range [ 955.887273][ T1647] netlink: zone id is out of range [ 956.069154][ T1666] tipc: Enabled bearer , priority 0 [ 956.121979][ T1666] syzkaller0: entered promiscuous mode [ 956.133892][ T1666] syzkaller0: entered allmulticast mode [ 956.192929][ T1675] netlink: 'syz.0.7248': attribute type 9 has an invalid length. [ 956.201883][ T1675] netlink: 'syz.0.7248': attribute type 11 has an invalid length. [ 956.229702][ T1675] netlink: 'syz.0.7248': attribute type 12 has an invalid length. [ 956.246436][ T1675] __nla_validate_parse: 86 callbacks suppressed [ 956.246456][ T1675] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.7248'. [ 956.270071][ T1678] netlink: 364 bytes leftover after parsing attributes in process `syz.4.7249'. [ 956.271217][ T1675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7248'. [ 956.294291][ T1666] tipc: Resetting bearer [ 956.316830][ T1678] syzkaller0: entered promiscuous mode [ 956.322340][ T1678] syzkaller0: entered allmulticast mode [ 956.398593][ T1682] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7250'. [ 956.601001][ T1683] vlan0: entered allmulticast mode [ 956.606753][ T1683] bridge_slave_0: entered allmulticast mode [ 956.852676][ T1703] gre1: entered promiscuous mode [ 956.938101][ T1710] net_ratelimit: 49 callbacks suppressed [ 956.938122][ T1710] A link change request failed with some changes committed already. Interface 9 may have been left with an inconsistent configuration, please check. [ 956.939109][ T1708] sctp: [Deprecated]: syz.3.7257 (pid 1708) Use of struct sctp_assoc_value in delayed_ack socket option. [ 956.939109][ T1708] Use struct sctp_sack_info instead [ 957.147240][ T5974] tipc: Node number set to 2982437891 [ 957.170272][ T1720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7261'. [ 957.208031][ T1720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7261'. [ 957.292298][ T1725] can: request_module (can-proto-0) failed. [ 957.375537][ T1713] wireguard0: entered promiscuous mode [ 957.399526][ T1713] wireguard0: entered allmulticast mode [ 957.439033][ T1713] team0: Device wireguard0 is of different type [ 957.528444][ T1730] netlink: 'syz.1.7263': attribute type 1 has an invalid length. [ 957.538276][ T1730] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 958.006455][ T1757] lo speed is unknown, defaulting to 1000 [ 958.016368][ T1757] wg1 speed is unknown, defaulting to 1000 [ 958.024066][ T1757] wg1 speed is unknown, defaulting to 1000 [ 958.039886][ T1761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7274'. [ 958.286592][ T1776] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7276'. [ 958.298054][ T1775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7275'. [ 958.341581][ T1775] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7275'. [ 958.632693][ T1792] netlink: 'syz.4.7281': attribute type 11 has an invalid length. [ 958.647685][ T1786] netlink: 'syz.1.7279': attribute type 5 has an invalid length. [ 959.128742][ T1827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 959.328502][ T1831] ip6erspan0: entered allmulticast mode [ 959.690307][ T1850] team0: Port device veth5 added [ 959.930322][ T1868] pim6reg: entered allmulticast mode [ 959.949044][ T1869] lo speed is unknown, defaulting to 1000 [ 959.960017][ T1868] pim6reg: left allmulticast mode [ 960.013880][ T1869] wg1 speed is unknown, defaulting to 1000 [ 960.039565][ T1869] wg1 speed is unknown, defaulting to 1000 [ 960.101569][ T1886] netlink: 'syz.1.7305': attribute type 1 has an invalid length. [ 960.751004][ T1918] IPVS: Error connecting to the multicast addr [ 960.761752][ T1915] syzkaller0: entered promiscuous mode [ 960.774501][ T1915] syzkaller0: entered allmulticast mode [ 960.822359][ T1920] netlink: 'syz.0.7315': attribute type 10 has an invalid length. [ 961.273453][ T1953] netlink: 'syz.1.7323': attribute type 10 has an invalid length. [ 961.506505][ T1956] syzkaller0: entered promiscuous mode [ 961.533028][ T1956] syzkaller0: entered allmulticast mode [ 961.578235][ T1969] netlink: 'syz.1.7328': attribute type 1 has an invalid length. [ 961.659433][ T1969] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 961.671518][ T1969] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 961.756107][ T1980] bond4: (slave gretap1): making interface the new active one [ 961.788335][ T1987] netlink: 'syz.4.7334': attribute type 1 has an invalid length. [ 961.794744][ T1980] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 961.799594][ T1987] __nla_validate_parse: 10 callbacks suppressed [ 961.799612][ T1987] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7334'. [ 962.078555][ T2002] lo speed is unknown, defaulting to 1000 [ 962.111899][ T2002] wg1 speed is unknown, defaulting to 1000 [ 962.120775][ T2002] wg1 speed is unknown, defaulting to 1000 [ 962.341133][ T2017] openvswitch: netlink: Actions may not be safe on all matching packets [ 964.806774][ T2020] : renamed from bond_slave_0 (while UP) [ 964.820856][ T2030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 964.951562][ T2038] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7346'. [ 965.272105][ T2058] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7351'. [ 965.466732][ T2073] netlink: 71 bytes leftover after parsing attributes in process `syz.3.7354'. [ 965.527792][ T2078] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20003 [ 965.557177][ T2078] netlink: 'syz.0.7357': attribute type 9 has an invalid length. [ 965.585524][ T2078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7357'. [ 965.660608][ T2078] macvlan2: entered promiscuous mode [ 965.694132][ T2078] hsr0: entered promiscuous mode [ 965.717139][ T2078] macvlan2: entered allmulticast mode [ 965.731689][ T2078] hsr0: entered allmulticast mode [ 965.739789][ T2078] hsr_slave_0: entered allmulticast mode [ 965.747854][ T2078] hsr_slave_1: entered allmulticast mode [ 965.967218][ T2095] lo speed is unknown, defaulting to 1000 [ 965.974524][ T2095] wg1 speed is unknown, defaulting to 1000 [ 966.139482][ T2095] wg1 speed is unknown, defaulting to 1000 [ 966.239001][ T2118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7365'. [ 966.311549][ T2123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7365'. [ 966.543109][ T2125] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7368'. [ 966.819686][ T2137] syzkaller0: entered promiscuous mode [ 966.835473][ T2137] syzkaller0: entered allmulticast mode [ 967.695840][ T2177] netlink: 'syz.0.7377': attribute type 1 has an invalid length. [ 969.494826][ T2177] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 969.594373][ T2187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 969.655269][ T2195] netlink: 'syz.4.7382': attribute type 1 has an invalid length. [ 969.670798][ T2197] ip6tnl0: Caught tx_queue_len zero misconfig [ 969.714026][ T2195] 8021q: adding VLAN 0 to HW filter on device bond6 [ 969.719469][ T5842] block nbd3: Receive control failed (result -32) [ 969.938872][ T2209] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 969.968968][ T2209] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 970.004416][ T2209] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 970.091335][ T2220] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7388'. [ 970.528836][ T5842] block nbd4: Receive control failed (result -32) [ 970.914151][ T2272] team0: Caught tx_queue_len zero misconfig [ 971.021486][ T2283] sch_fq: defrate 9 ignored. [ 971.048712][ T2286] netlink: 'syz.1.7404': attribute type 3 has an invalid length. [ 971.069281][ T2286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7404'. [ 971.494108][ T2290] syzkaller0: entered promiscuous mode [ 971.502994][ T2290] syzkaller0: entered allmulticast mode [ 971.539291][ T2303] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7410'. [ 974.020331][ T2315] syzkaller0: entered promiscuous mode [ 974.026070][ T2315] syzkaller0: entered allmulticast mode [ 974.174800][ T2330] netlink: 'syz.1.7416': attribute type 13 has an invalid length. [ 974.182972][ T2332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7417'. [ 974.188084][ T2332] netlink: 'syz.2.7417': attribute type 11 has an invalid length. [ 974.238441][ T2329] netlink: 'syz.1.7416': attribute type 13 has an invalid length. [ 974.491347][ T2355] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7421'. [ 974.782353][ T2363] IPVS: set_ctl: invalid protocol: 59 172.20.20.60:20000 [ 974.805111][ T2329] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.812879][ T2329] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.264169][ T2329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 975.316160][ T2329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 975.853411][ T2329] tipc: Resetting bearer [ 975.905447][ T2375] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 975.923070][ T2375] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 975.945558][ T6213] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.986109][ T6213] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.994969][ T6213] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.051739][ T6213] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.064270][ T2385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7428'. [ 976.295570][ T2420] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7432'. [ 976.326324][ T2422] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7432'. [ 976.502717][ T2432] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7435'. [ 976.514092][ T2432] --map-set only usable from mangle table [ 976.779276][ T2454] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 976.885006][ T2457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7441'. [ 976.917207][ T2457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7441'. [ 977.280579][ T2482] lo speed is unknown, defaulting to 1000 [ 977.291426][ T2482] wg1 speed is unknown, defaulting to 1000 [ 977.299046][ T2482] wg1 speed is unknown, defaulting to 1000 [ 977.582399][ T2499] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7449'. [ 977.675547][ T2503] lo speed is unknown, defaulting to 1000 [ 977.682507][ T2503] wg1 speed is unknown, defaulting to 1000 [ 977.689950][ T2503] wg1 speed is unknown, defaulting to 1000 [ 977.728071][ T2504] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input13 [ 977.781261][ T2506] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7452'. [ 978.127602][ T2517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7455'. [ 978.160245][ T2534] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7460'. [ 978.439137][ T2553] netlink: 'syz.1.7464': attribute type 62 has an invalid length. [ 978.738838][ T2561] lo speed is unknown, defaulting to 1000 [ 978.784003][ T2566] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input14 [ 978.795062][ T2561] wg1 speed is unknown, defaulting to 1000 [ 978.827767][ T2561] wg1 speed is unknown, defaulting to 1000 [ 979.180005][ T2586] xt_hashlimit: size too large, truncated to 1048576 [ 980.659024][ T2661] lo speed is unknown, defaulting to 1000 [ 980.672901][ T2661] wg1 speed is unknown, defaulting to 1000 [ 980.698660][ T2661] wg1 speed is unknown, defaulting to 1000 [ 980.714853][ T2673] ipt_REJECT: TCP_RESET invalid for non-tcp [ 981.233833][ T2692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 981.688224][ T2711] __nla_validate_parse: 7 callbacks suppressed [ 981.688243][ T2711] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7501'. [ 981.776864][ T2714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7502'. [ 981.807426][ T2714] : entered promiscuous mode [ 981.816732][ T2714] netlink: 'syz.2.7502': attribute type 1 has an invalid length. [ 981.904068][ T2714] bond2: entered promiscuous mode [ 981.943291][ T2714] 8021q: adding VLAN 0 to HW filter on device bond2 [ 981.971360][ T2727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7502'. [ 981.990065][ T7784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.999227][ T2714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7502'. [ 982.012898][ T7784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.278044][ T2738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7505'. [ 982.373421][ T2738] lo speed is unknown, defaulting to 1000 [ 982.390507][ T2738] wg1 speed is unknown, defaulting to 1000 [ 982.466055][ T2738] wg1 speed is unknown, defaulting to 1000 [ 982.600810][ T2747] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.7508'. [ 982.791964][ T2762] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7512'. [ 982.802762][ T2762] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 983.078309][ T2775] lo speed is unknown, defaulting to 1000 [ 983.089451][ T2775] wg1 speed is unknown, defaulting to 1000 [ 983.100313][ T2775] wg1 speed is unknown, defaulting to 1000 [ 983.381839][ T2781] lo speed is unknown, defaulting to 1000 [ 983.419899][ T2787] gretap1: entered promiscuous mode [ 983.442568][ T2781] wg1 speed is unknown, defaulting to 1000 [ 983.493733][ T2781] wg1 speed is unknown, defaulting to 1000 [ 983.657769][ T2794] xt_hashlimit: size too large, truncated to 1048576 [ 983.760345][ T2798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7522'. [ 983.923533][ T2801] erspan1: entered allmulticast mode [ 984.206269][ T2832] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input15 [ 984.311081][ T2831] lo speed is unknown, defaulting to 1000 [ 984.375675][ T2831] wg1 speed is unknown, defaulting to 1000 [ 984.399422][ T2849] xt_TCPMSS: Only works on TCP SYN packets [ 984.408866][ T2831] wg1 speed is unknown, defaulting to 1000 [ 984.421566][ T2849] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 984.496738][ T2857] SET target dimension over the limit! [ 984.575588][ T2863] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 984.710590][ T2873] tipc: Trying to set illegal importance in message [ 984.817483][ T2881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7536'. [ 984.827970][ T2881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7536'. [ 986.972764][ T2882] lo speed is unknown, defaulting to 1000 [ 987.019645][ T2882] wg1 speed is unknown, defaulting to 1000 [ 987.082385][ T2882] wg1 speed is unknown, defaulting to 1000 [ 988.026079][ T2943] lo speed is unknown, defaulting to 1000 [ 988.097936][ T2943] wg1 speed is unknown, defaulting to 1000 [ 988.149525][ T2943] wg1 speed is unknown, defaulting to 1000 [ 988.167805][ T2951] __nla_validate_parse: 1 callbacks suppressed [ 988.167825][ T2951] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7555'. [ 988.200771][ T2951] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7555'. [ 988.248800][ T2952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7555'. [ 988.277206][ T2952] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7555'. [ 988.562579][ T2958] nbd: couldn't find device at index 2 [ 988.778589][ T2969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 988.907101][ T2974] lo speed is unknown, defaulting to 1000 [ 988.938277][ T2974] wg1 speed is unknown, defaulting to 1000 [ 988.952389][ T2974] wg1 speed is unknown, defaulting to 1000 [ 989.120660][ T2988] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7563'. [ 989.133613][ T2984] lo speed is unknown, defaulting to 1000 [ 989.144042][ T2984] wg1 speed is unknown, defaulting to 1000 [ 989.158427][ T2988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7563'. [ 989.168473][ T2984] wg1 speed is unknown, defaulting to 1000 [ 989.568145][ T3000] 8021q: adding VLAN 0 to HW filter on device bond5 [ 989.569215][ T3006] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7568'. [ 989.728506][ T3013] netlink: 'syz.2.7570': attribute type 2 has an invalid length. [ 989.789695][ T3010] tipc: Enabling of bearer rejected, failed to enable media [ 989.836492][ T3013] !9: entered promiscuous mode [ 989.841953][ T3015] tipc: Enabling of bearer rejected, failed to enable media [ 989.906023][ T3025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7575'. [ 989.961217][ T3029] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 990.037697][ T3025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7575'. [ 990.048168][ T3025] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7575'. [ 990.119207][ T3044] openvswitch: netlink: Message has 6 unknown bytes. [ 990.127164][ T3025] bond0: (slave dummy0): Releasing backup interface [ 990.409311][ T3057] batadv_slave_0: left promiscuous mode [ 990.426293][ T3057] mac80211_hwsim hwsim83 wlan0: left promiscuous mode [ 990.440423][ T3057] ip6gretap1: left promiscuous mode [ 990.454115][ T3057] ip6gretap1: left allmulticast mode [ 990.465281][ T3057] macvtap0: left promiscuous mode [ 990.473564][ T3057] macvtap0: left allmulticast mode [ 990.491567][ T3057] ip6erspan0: left allmulticast mode [ 990.506050][ T3057] hsr0: left allmulticast mode [ 990.511033][ T3057] hsr_slave_0: left allmulticast mode [ 990.517374][ T3057] hsr_slave_1: left allmulticast mode [ 990.522923][ T3057] hsr0: left promiscuous mode [ 990.533584][ T3057] macvlan2: left promiscuous mode [ 990.541622][ T3057] macvlan2: left allmulticast mode [ 990.552898][ T3057] gretap1: left promiscuous mode [ 990.733030][ T3089] tipc: Enabling of bearer rejected, already enabled [ 991.041029][ T3112] lo speed is unknown, defaulting to 1000 [ 991.062571][ T3112] wg1 speed is unknown, defaulting to 1000 [ 991.088067][ T3112] wg1 speed is unknown, defaulting to 1000 [ 991.646238][ T3146] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 991.680489][ T3144] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 991.699298][ T3144] syzkaller1: linktype set to 769 [ 991.710812][ T3144] netlink: 'syz.2.7605': attribute type 1 has an invalid length. [ 992.256507][ T3197] netlink: 'syz.2.7617': attribute type 10 has an invalid length. [ 992.466578][ T3206] vlan3: entered promiscuous mode [ 992.501402][ T3205] xt_hashlimit: size too large, truncated to 1048576 [ 992.542763][ T3213] lo speed is unknown, defaulting to 1000 [ 992.747202][ T3213] wg1 speed is unknown, defaulting to 1000 [ 992.780036][ T3213] wg1 speed is unknown, defaulting to 1000 [ 992.865118][ T3226] tipc: Resetting bearer [ 992.886238][ T3226] tipc: Resetting bearer [ 992.958243][ T3230] 8021q: VLANs not supported on vcan0 [ 993.212177][ T3240] pim6reg1: entered promiscuous mode [ 993.218591][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 993.230427][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.248424][ T3240] pim6reg1: entered allmulticast mode [ 993.424391][ T3258] __nla_validate_parse: 13 callbacks suppressed [ 993.424410][ T3258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7632'. [ 993.652373][ T3267] lo speed is unknown, defaulting to 1000 [ 993.665151][ T3267] wg1 speed is unknown, defaulting to 1000 [ 993.673471][ T3267] wg1 speed is unknown, defaulting to 1000 [ 993.732238][T24645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.741687][ T3273] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 993.748904][T24645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.817758][ T3279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7637'. [ 994.279880][ T3302] bond6: Removing last arp target with arp_interval on [ 994.307713][ T3305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7645'. [ 994.329938][ T3305] netlink: 'syz.4.7645': attribute type 30 has an invalid length. [ 994.348195][ T4476] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 994.357537][ T4476] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 994.376200][ T4476] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 994.392600][ T4476] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 994.586067][ T3332] tipc: Enabled bearer , priority 0 [ 994.655667][ T3345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7653'. [ 994.680521][ T3331] tipc: Disabling bearer [ 994.813998][ T3353] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7653'. [ 994.907809][T20905] IPVS: starting estimator thread 0... [ 994.953572][ T3364] netlink: 'syz.4.7657': attribute type 1 has an invalid length. [ 994.984554][ T3364] netlink: 'syz.4.7657': attribute type 7 has an invalid length. [ 994.992890][ T3364] netlink: 'syz.4.7657': attribute type 8 has an invalid length. [ 995.004933][ T3364] netlink: 208 bytes leftover after parsing attributes in process `syz.4.7657'. [ 995.015919][ T3358] IPVS: using max 30 ests per chain, 72000 per kthread [ 995.030632][ T3364] NCSI netlink: No device for ifindex 65584 [ 995.401686][ T3403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7669'. [ 995.420911][ T3403] [: entered promiscuous mode [ 995.453019][ T3402] lo speed is unknown, defaulting to 1000 [ 995.482605][ T3404] netlink: 165 bytes leftover after parsing attributes in process `syz.3.7668'. [ 995.487960][ T3402] wg1 speed is unknown, defaulting to 1000 [ 995.552046][ T3402] wg1 speed is unknown, defaulting to 1000 [ 995.588186][ T3414] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7672'. [ 995.777165][ T3384] dvmrp0: entered allmulticast mode [ 995.958136][ T3420] lo speed is unknown, defaulting to 1000 [ 995.977294][ T3420] wg1 speed is unknown, defaulting to 1000 [ 995.985288][ T3420] wg1 speed is unknown, defaulting to 1000 [ 996.197638][ T3432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7677'. [ 996.929493][ T3500] tc_dump_action: action bad kind [ 997.218133][ T3516] netlink: 'syz.1.7694': attribute type 9 has an invalid length. [ 997.295951][ T3516] macvlan3: entered promiscuous mode [ 997.317892][ T3516] hsr0: entered promiscuous mode [ 997.330889][ T3516] macvlan3: entered allmulticast mode [ 997.365155][ T3516] hsr0: entered allmulticast mode [ 997.395194][ T3521] netlink: 'syz.3.7695': attribute type 1 has an invalid length. [ 997.403967][ T3516] hsr_slave_0: entered allmulticast mode [ 997.425410][ T3516] hsr_slave_1: entered allmulticast mode [ 997.540186][ T3524] bond2: entered promiscuous mode [ 997.545260][ T3524] bond2: entered allmulticast mode [ 997.553506][ T3524] 8021q: adding VLAN 0 to HW filter on device bond2 [ 997.678489][ T3526] 8021q: adding VLAN 0 to HW filter on device bond3 [ 997.721190][ T3526] bond3: entered promiscuous mode [ 997.745654][ T3526] bond3: entered allmulticast mode [ 997.767104][ T3526] bond2: (slave bond3): Enslaving as a backup interface with a down link [ 998.262334][ T3564] netlink: 'syz.4.7706': attribute type 6 has an invalid length. [ 998.274251][ T3564] netlink: 'syz.4.7706': attribute type 5 has an invalid length. [ 998.284834][ T3564] netlink: 'syz.4.7706': attribute type 4 has an invalid length. [ 998.296948][ T3565] netlink: 'syz.4.7706': attribute type 4 has an invalid length. [ 998.305817][ T3564] netlink: 'syz.4.7706': attribute type 4 has an invalid length. [ 998.459735][ T3576] __nla_validate_parse: 5 callbacks suppressed [ 998.459754][ T3576] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7709'. [ 998.483670][ T3574] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.7709'. [ 998.604940][ T3583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.624772][ T3583] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.638306][ T3583] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 998.669766][ T3586] SET target dimension over the limit! [ 998.885248][ T3608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7719'. [ 999.210418][ T3621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7722'. [ 999.245315][ T3621] vlan3: entered allmulticast mode [ 999.264880][ T3621] bridge_slave_0: entered allmulticast mode [ 999.472028][ T3635] x_tables: duplicate underflow at hook 1 [ 999.543189][ T3644] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7727'. [ 999.846628][ T30] audit: type=1107 audit(1768832973.374:24): pid=3648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='OO|{t tb\;Dޙ/>]Dg' [ 999.963492][ T3653] lo speed is unknown, defaulting to 1000 [ 999.988199][ T3653] wg1 speed is unknown, defaulting to 1000 [ 1000.021485][ T3662] lo speed is unknown, defaulting to 1000 [ 1000.027831][ T3653] wg1 speed is unknown, defaulting to 1000 [ 1000.060783][ T3662] wg1 speed is unknown, defaulting to 1000 [ 1000.118992][ T3662] wg1 speed is unknown, defaulting to 1000 [ 1000.594842][ T3685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7735'. [ 1000.831027][ T3694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7738'. [ 1000.842331][ T3696] lo speed is unknown, defaulting to 1000 [ 1000.895573][ T3696] wg1 speed is unknown, defaulting to 1000 [ 1000.903235][ T3696] wg1 speed is unknown, defaulting to 1000 [ 1001.266343][ T3710] syzkaller1: entered promiscuous mode [ 1001.271863][ T3710] syzkaller1: entered allmulticast mode [ 1001.643352][ T3730] syzkaller1: entered promiscuous mode [ 1001.654315][ T3730] syzkaller1: entered allmulticast mode [ 1001.898800][ T3742] validate_nla: 2 callbacks suppressed [ 1001.898820][ T3742] netlink: 'syz.4.7751': attribute type 1 has an invalid length. [ 1001.929987][ T3742] netlink: 'syz.4.7751': attribute type 4 has an invalid length. [ 1001.941639][ T3744] netlink: 'syz.2.7752': attribute type 6 has an invalid length. [ 1001.953017][ T3745] netlink: 'syz.4.7751': attribute type 1 has an invalid length. [ 1001.961192][ T3742] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.7751'. [ 1001.968938][ T3745] netlink: 'syz.4.7751': attribute type 4 has an invalid length. [ 1001.999310][ T3745] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.7751'. [ 1002.090245][ T3748] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1002.194373][ T3761] lo speed is unknown, defaulting to 1000 [ 1002.249924][ T3764] tipc: Started in network mode [ 1002.257346][ T3764] tipc: Node identity ea0351bc8ed5, cluster identity 4711 [ 1002.264705][ T3764] tipc: Enabled bearer , priority 0 [ 1002.284917][ T3761] wg1 speed is unknown, defaulting to 1000 [ 1002.291676][ T3765] nbd: must specify at least one socket [ 1002.306684][ T3764] tipc: Enabling of bearer rejected, already enabled [ 1002.322312][ T3770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7758'. [ 1002.326086][ T3761] wg1 speed is unknown, defaulting to 1000 [ 1002.359235][ T3763] tipc: Disabling bearer [ 1002.374117][ T3770] netlink: 'syz.3.7758': attribute type 2 has an invalid length. [ 1002.571314][ T3783] tc_dump_action: action bad kind [ 1002.617023][ T3789] netlink: 'syz.4.7761': attribute type 6 has an invalid length. [ 1002.836068][ T3799] syz.1.7765: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1002.883115][ T3799] CPU: 1 UID: 0 PID: 3799 Comm: syz.1.7765 Not tainted syzkaller #0 PREEMPT(full) [ 1002.883144][ T3799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1002.883157][ T3799] Call Trace: [ 1002.883166][ T3799] [ 1002.883175][ T3799] dump_stack_lvl+0xe8/0x150 [ 1002.883205][ T3799] warn_alloc+0x214/0x310 [ 1002.883228][ T3799] ? stack_trace_save+0x9c/0xe0 [ 1002.883260][ T3799] ? __pfx_warn_alloc+0x10/0x10 [ 1002.883286][ T3799] ? kasan_save_track+0x4f/0x80 [ 1002.883305][ T3799] ? kasan_save_track+0x3e/0x80 [ 1002.883321][ T3799] ? __kasan_kmalloc+0x93/0xb0 [ 1002.883338][ T3799] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 1002.883355][ T3799] ? xskq_create+0x56/0x170 [ 1002.883373][ T3799] ? xsk_setsockopt+0x4dc/0x8d0 [ 1002.883388][ T3799] ? do_sock_setsockopt+0x17c/0x1b0 [ 1002.883407][ T3799] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 1002.883427][ T3799] ? do_syscall_64+0xec/0xf80 [ 1002.883452][ T3799] __vmalloc_node_range_noprof+0x134/0x16a0 [ 1002.883505][ T3799] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1002.883531][ T3799] ? __kasan_kmalloc+0x93/0xb0 [ 1002.883557][ T3799] vmalloc_user_noprof+0xad/0xf0 [ 1002.883575][ T3799] ? xskq_create+0xbf/0x170 [ 1002.883595][ T3799] xskq_create+0xbf/0x170 [ 1002.883617][ T3799] xsk_init_queue+0xb0/0x110 [ 1002.883639][ T3799] xsk_setsockopt+0x4dc/0x8d0 [ 1002.883660][ T3799] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1002.883678][ T3799] ? __pfx_aa_sk_perm+0x10/0x10 [ 1002.883703][ T3799] ? aa_sock_opt_perm+0xff/0x1a0 [ 1002.883731][ T3799] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1002.883750][ T3799] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1002.883769][ T3799] do_sock_setsockopt+0x17c/0x1b0 [ 1002.883797][ T3799] __x64_sys_setsockopt+0x13f/0x1b0 [ 1002.883824][ T3799] do_syscall_64+0xec/0xf80 [ 1002.883845][ T3799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.883862][ T3799] ? trace_irq_disable+0x37/0x100 [ 1002.883884][ T3799] ? clear_bhb_loop+0x60/0xb0 [ 1002.883906][ T3799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.883931][ T3799] RIP: 0033:0x7fdb3498f749 [ 1002.883949][ T3799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1002.883965][ T3799] RSP: 002b:00007fdb35881038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1002.883986][ T3799] RAX: ffffffffffffffda RBX: 00007fdb34be5fa0 RCX: 00007fdb3498f749 [ 1002.884001][ T3799] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 1002.884013][ T3799] RBP: 00007fdb34a13f91 R08: 0000000000000004 R09: 0000000000000000 [ 1002.884026][ T3799] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1002.884039][ T3799] R13: 00007fdb34be6038 R14: 00007fdb34be5fa0 R15: 00007ffcfeca0dc8 [ 1002.884073][ T3799] [ 1002.884081][ T3799] Mem-Info: [ 1003.052368][ T3806] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1003.065922][ T3799] active_anon:11149 inactive_anon:1 isolated_anon:0 [ 1003.065922][ T3799] active_file:3205 inactive_file:40252 isolated_file:0 [ 1003.065922][ T3799] unevictable:768 dirty:203 writeback:0 [ 1003.065922][ T3799] slab_reclaimable:13681 slab_unreclaimable:187578 [ 1003.065922][ T3799] mapped:30290 shmem:1433 pagetables:1044 [ 1003.065922][ T3799] sec_pagetables:0 bounce:0 [ 1003.065922][ T3799] kernel_misc_reclaimable:0 [ 1003.065922][ T3799] free:1225334 free_pcp:12311 free_cma:0 [ 1003.269970][ T3799] Node 0 active_anon:45012kB inactive_anon:4kB active_file:12820kB inactive_file:160812kB unevictable:3476kB isolated(anon):0kB isolated(file):0kB mapped:123404kB dirty:812kB writeback:0kB shmem:6508kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15068kB pagetables:4088kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1003.307786][ T3799] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1003.387104][ T3810] lo speed is unknown, defaulting to 1000 [ 1003.399956][ T3799] Node 0 DMA free:15332kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 1003.515966][ T3810] wg1 speed is unknown, defaulting to 1000 [ 1003.526283][ T3799] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 1003.533948][ T3799] Node 0 DMA32 free:980288kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49712kB inactive_anon:4kB active_file:12820kB inactive_file:160812kB unevictable:8976kB writepending:812kB zspages:0kB present:3129332kB managed:2559468kB mlocked:7440kB bounce:0kB free_pcp:30020kB local_pcp:13528kB free_cma:0kB [ 1003.576343][ T3799] lowmem_reserve[]: 0 0 1 1 1 [ 1003.585189][ T3810] wg1 speed is unknown, defaulting to 1000 [ 1003.595776][ T3799] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1003.641802][ T3806] lo speed is unknown, defaulting to 1000 [ 1003.665665][ T3799] lowmem_reserve[]: 0 0 0 0 0 [ 1003.670444][ T3799] Node 1 Normal free:3901328kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11808kB local_pcp:3136kB free_cma:0kB [ 1003.759766][ T3799] lowmem_reserve[]: 0 0 0 0 0 [ 1003.764554][ T3799] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (UM) = 15332kB [ 1003.800554][ T3806] wg1 speed is unknown, defaulting to 1000 [ 1003.825646][ T3799] Node 0 DMA32: 7662*4kB (UE) 6822*8kB (UME) 4617*16kB (UME) 723*32kB (UME) 745*64kB (UME) 482*128kB (UME) 342*256kB (UM) 295*512kB (UM) 243*1024kB (UME) 77*2048kB (UM) 8*4096kB (U) = 969496kB [ 1003.885566][ T3799] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1003.907587][ T3799] Node 1 Normal: 182*4kB (UME) 51*8kB (UME) 40*16kB (UME) 257*32kB (UME) 110*64kB (UME) 18*128kB (UME) 8*256kB (UME) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 946*4096kB (M) = 3901328kB [ 1003.927234][ T3806] wg1 speed is unknown, defaulting to 1000 [ 1003.967947][ T3799] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1003.995150][ T3799] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1004.026499][ T3799] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1004.045497][ T3799] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1004.089755][ T3799] 49787 total pagecache pages [ 1004.095007][ T3799] 1 pages in swap cache [ 1004.125491][ T3799] Free swap = 124992kB [ 1004.129691][ T3799] Total swap = 124996kB [ 1004.157129][ T3834] __nla_validate_parse: 70 callbacks suppressed [ 1004.157146][ T3834] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7773'. [ 1004.174790][ T3799] 2097051 pages RAM [ 1004.179390][ T3799] 0 pages HighMem/MovableOnly [ 1004.184214][ T3799] 425094 pages reserved [ 1004.218815][ T3834] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7773'. [ 1004.220139][ T3799] 0 pages cma reserved [ 1004.341655][ T3837] syzkaller0: entered promiscuous mode [ 1004.356858][ T3837] syzkaller0: entered allmulticast mode [ 1004.362240][ T3839] No such timeout policy "syz0" [ 1004.655171][ T5907] IPVS: starting estimator thread 0... [ 1004.736892][ T3857] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7779'. [ 1004.765885][ T3859] IPVS: using max 37 ests per chain, 88800 per kthread [ 1005.057818][ T3882] netlink: 'syz.3.7787': attribute type 4 has an invalid length. [ 1005.075023][ T3882] netlink: 'syz.3.7787': attribute type 4 has an invalid length. [ 1005.411296][ T3902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7794'. [ 1005.413179][ T3901] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.7793'. [ 1005.558575][ T3913] netlink: 'syz.1.7798': attribute type 2 has an invalid length. [ 1005.821414][ T3927] lo speed is unknown, defaulting to 1000 [ 1005.829726][ T3927] wg1 speed is unknown, defaulting to 1000 [ 1005.839717][ T3930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7804'. [ 1005.847869][ T3927] wg1 speed is unknown, defaulting to 1000 [ 1005.968479][ T3938] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7804'. [ 1006.016628][ T3938] nbd: device at index 64 is going down [ 1006.144431][ T3941] lo speed is unknown, defaulting to 1000 [ 1006.177611][ T3941] wg1 speed is unknown, defaulting to 1000 [ 1006.184495][ T3941] wg1 speed is unknown, defaulting to 1000 [ 1006.277265][ T3954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7808'. [ 1006.553084][ T3964] tipc: New replicast peer: 255.255.255.255 [ 1006.569685][ T3964] tipc: Enabled bearer , priority 6 [ 1006.594021][ T3964] netlink: 'syz.0.7811': attribute type 11 has an invalid length. [ 1006.611775][ T3964] netlink: 'syz.0.7811': attribute type 11 has an invalid length. [ 1006.636752][ T3964] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7811'. [ 1006.727445][ T3968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7812'. [ 1007.158610][ T3975] bond4: entered promiscuous mode [ 1007.169989][ T3975] bond4: entered allmulticast mode [ 1007.176066][ T3975] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1007.227294][ T3977] macvlan3: entered promiscuous mode [ 1007.242809][ T3977] macvlan3: entered allmulticast mode [ 1007.267093][ T3977] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1007.685591][T20905] tipc: Node number set to 174272096 [ 1007.860005][ T4024] validate_nla: 1 callbacks suppressed [ 1007.860024][ T4024] netlink: 'syz.1.7827': attribute type 12 has an invalid length. [ 1009.351041][ T4088] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1009.462419][ T4095] vlan3: entered promiscuous mode [ 1009.469105][ T4095] vlan3: entered allmulticast mode [ 1009.498781][ T4095] hsr_slave_1: entered allmulticast mode [ 1009.592420][ T4095] __nla_validate_parse: 3 callbacks suppressed [ 1009.592439][ T4095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7845'. [ 1009.641939][ T4105] netlink: 'syz.3.7847': attribute type 23 has an invalid length. [ 1009.918233][ T4104] lo speed is unknown, defaulting to 1000 [ 1009.937637][ T4104] wg1 speed is unknown, defaulting to 1000 [ 1009.939069][ T4088] lo speed is unknown, defaulting to 1000 [ 1009.948151][ T4104] wg1 speed is unknown, defaulting to 1000 [ 1009.958223][ T4107] netlink: 'syz.1.7848': attribute type 1 has an invalid length. [ 1010.031513][ T4107] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1010.050695][ T4088] wg1 speed is unknown, defaulting to 1000 [ 1010.069139][ T4088] wg1 speed is unknown, defaulting to 1000 [ 1010.176744][ T4087] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1010.457455][ T4123] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7851'. [ 1010.593150][ T4128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7854'. [ 1010.711197][ T4128] nbd: socks must be embedded in a SOCK_ITEM attr [ 1011.071524][ T4140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7854'. [ 1011.138631][ T4151] batadv0: mtu less than device minimum [ 1011.223625][ T4154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7861'. [ 1011.248989][ T4154] bridge_slave_1: left allmulticast mode [ 1011.254878][ T4154] bridge_slave_1: left promiscuous mode [ 1011.262138][ T4154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.269875][ T4157] netlink: 'syz.3.7862': attribute type 1 has an invalid length. [ 1011.269875][ T4153] netlink: 'syz.3.7862': attribute type 1 has an invalid length. [ 1011.269898][ T4153] netlink: 'syz.3.7862': attribute type 2 has an invalid length. [ 1011.278833][ T4157] netlink: 'syz.3.7862': attribute type 2 has an invalid length. [ 1011.303663][ T4154] bridge_slave_0: left allmulticast mode [ 1011.309646][ T4154] bridge_slave_0: left promiscuous mode [ 1011.315913][ T4154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.366719][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 1011.555972][ T4168] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7865'. [ 1011.830119][ T4173] lo speed is unknown, defaulting to 1000 [ 1011.862125][ T4173] wg1 speed is unknown, defaulting to 1000 [ 1011.881534][ T4173] wg1 speed is unknown, defaulting to 1000 [ 1012.352105][ T4203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7875'. [ 1012.372792][ T4203] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7875'. [ 1012.472287][ T4207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7879'. [ 1012.483706][ T4207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7879'. [ 1013.238655][ T4271] netlink: 'syz.2.7892': attribute type 4 has an invalid length. [ 1013.728607][ T4284] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)% ]3DL̥!!b.>nS#^' [ 1013.742589][ T4284] CPU: 0 UID: 0 PID: 4284 Comm: syz.4.7897 Not tainted syzkaller #0 PREEMPT(full) [ 1013.742615][ T4284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1013.742627][ T4284] Call Trace: [ 1013.742636][ T4284] [ 1013.742644][ T4284] dump_stack_lvl+0xe8/0x150 [ 1013.742675][ T4284] sysfs_warn_dup+0x8e/0xa0 [ 1013.742697][ T4284] sysfs_do_create_link_sd+0xc0/0x110 [ 1013.742719][ T4284] device_add_class_symlinks+0x1cf/0x240 [ 1013.742744][ T4284] device_add+0x475/0xb80 [ 1013.742768][ T4284] wiphy_register+0x1d2e/0x2d20 [ 1013.742806][ T4284] ? __pfx_wiphy_register+0x10/0x10 [ 1013.742825][ T4284] ? __pfx_netdev_run_todo+0x10/0x10 [ 1013.742850][ T4284] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1013.742883][ T4284] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1013.742910][ T4284] ieee80211_register_hw+0x34a7/0x4110 [ 1013.742950][ T4284] ? ieee80211_register_hw+0x13e1/0x4110 [ 1013.742984][ T4284] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1013.743035][ T4284] ? __hrtimer_setup+0x181/0x200 [ 1013.743057][ T4284] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1013.743085][ T4284] mac80211_hwsim_new_radio+0x2f6d/0x52f0 [ 1013.743139][ T4284] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1013.743158][ T4284] ? kstrndup+0xbf/0x160 [ 1013.743189][ T4284] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 1013.743215][ T4284] ? __pfx___nla_validate_parse+0x10/0x10 [ 1013.743252][ T4284] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1013.743279][ T4284] ? rcu_is_watching+0x15/0xb0 [ 1013.743306][ T4284] ? __nla_parse+0x40/0x60 [ 1013.743335][ T4284] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1013.743366][ T4284] genl_family_rcv_msg_doit+0x215/0x300 [ 1013.743394][ T4284] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1013.743431][ T4284] ? bpf_lsm_capable+0x9/0x20 [ 1013.743451][ T4284] ? security_capable+0x7e/0x2e0 [ 1013.743481][ T4284] genl_rcv_msg+0x60e/0x790 [ 1013.743508][ T4284] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1013.743527][ T4284] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1013.743564][ T4284] netlink_rcv_skb+0x208/0x470 [ 1013.743589][ T4284] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1013.743611][ T4284] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1013.743632][ T4284] ? genl_rcv+0x19/0x40 [ 1013.743671][ T4284] ? down_read+0x274/0x2e0 [ 1013.743692][ T4284] ? genl_rcv+0xd/0x40 [ 1013.743714][ T4284] genl_rcv+0x28/0x40 [ 1013.743731][ T4284] netlink_unicast+0x82f/0x9e0 [ 1013.743764][ T4284] ? __pfx_netlink_unicast+0x10/0x10 [ 1013.743789][ T4284] ? netlink_sendmsg+0x642/0xb30 [ 1013.743811][ T4284] ? skb_put+0x11b/0x210 [ 1013.743836][ T4284] netlink_sendmsg+0x805/0xb30 [ 1013.743871][ T4284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1013.743900][ T4284] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1013.743925][ T4284] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1013.743942][ T4284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1013.743967][ T4284] __sock_sendmsg+0x21c/0x270 [ 1013.744011][ T4284] ____sys_sendmsg+0x505/0x820 [ 1013.744041][ T4284] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1013.744076][ T4284] ? import_iovec+0x74/0xa0 [ 1013.744104][ T4284] ___sys_sendmsg+0x21f/0x2a0 [ 1013.744129][ T4284] ? __pfx____sys_sendmsg+0x10/0x10 [ 1013.744159][ T4284] ? futex_wait+0x285/0x360 [ 1013.744214][ T4284] ? __fget_files+0x2a/0x420 [ 1013.744235][ T4284] ? __fget_files+0x3a0/0x420 [ 1013.744269][ T4284] __x64_sys_sendmsg+0x19b/0x260 [ 1013.744295][ T4284] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1013.744328][ T4284] ? rcu_is_watching+0x15/0xb0 [ 1013.744361][ T4284] do_syscall_64+0xec/0xf80 [ 1013.744383][ T4284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.744400][ T4284] ? trace_irq_disable+0x37/0x100 [ 1013.744422][ T4284] ? clear_bhb_loop+0x60/0xb0 [ 1013.744445][ T4284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.744463][ T4284] RIP: 0033:0x7f7bd4f8f749 [ 1013.744481][ T4284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1013.744497][ T4284] RSP: 002b:00007f7bd31ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1013.744518][ T4284] RAX: ffffffffffffffda RBX: 00007f7bd51e5fa0 RCX: 00007f7bd4f8f749 [ 1013.744533][ T4284] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 1013.744546][ T4284] RBP: 00007f7bd5013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1013.744558][ T4284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1013.744570][ T4284] R13: 00007f7bd51e6038 R14: 00007f7bd51e5fa0 R15: 00007ffeab4ef9a8 [ 1013.744605][ T4284] [ 1014.286268][ T4286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1014.809018][ T4308] xt_hashlimit: max too large, truncated to 1048576 [ 1014.833323][ T4303] tipc: Resetting bearer [ 1014.989247][ T4326] __nla_validate_parse: 2 callbacks suppressed [ 1014.989265][ T4326] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7908'. [ 1014.991774][ T4324] tipc: Enabling of bearer rejected, failed to enable media [ 1015.167394][ T4339] netlink: 'syz.0.7911': attribute type 1 has an invalid length. [ 1015.193720][ T4343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7913'. [ 1015.197317][ T4342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7913'. [ 1015.426453][ T4355] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7914'. [ 1015.446606][ T4358] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7917'. [ 1015.661946][ T4372] netlink: 'syz.4.7921': attribute type 83 has an invalid length. [ 1015.732203][ T4379] vlan4: entered promiscuous mode [ 1015.766652][ T4379] vlan4: entered allmulticast mode [ 1015.775241][ T4379] bond0: entered allmulticast mode [ 1015.812105][ T4383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7924'. [ 1015.850784][ T4383] nbd: illegal input index -1113835520 [ 1016.101427][ T4405] syzkaller0: entered promiscuous mode [ 1016.125724][ T4405] syzkaller0: entered allmulticast mode [ 1016.153617][ T4418] netlink: 'syz.3.7930': attribute type 16 has an invalid length. [ 1016.162238][ T4418] netlink: 'syz.3.7930': attribute type 17 has an invalid length. [ 1016.162861][ T4407] lo speed is unknown, defaulting to 1000 [ 1016.267610][ T4423] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7934'. [ 1016.302403][ T4407] wg1 speed is unknown, defaulting to 1000 [ 1016.315547][ T6215] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.326525][ T6215] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.335240][ T6215] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.344000][ T6215] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.375983][ T4407] wg1 speed is unknown, defaulting to 1000 [ 1016.378323][ T6215] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.394724][ T6215] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.437278][ T6215] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.456264][ T6215] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.509453][ T4434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7937'. [ 1016.690033][ T4442] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 1016.708942][ T4437] lo speed is unknown, defaulting to 1000 [ 1016.729709][ T4437] wg1 speed is unknown, defaulting to 1000 [ 1016.772691][ T4445] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7941'. [ 1016.905624][ T4438] netlink: 'syz.4.7938': attribute type 2 has an invalid length. [ 1016.913932][ T4437] wg1 speed is unknown, defaulting to 1000 [ 1016.938897][ T4454] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7944'. [ 1017.136020][ T4465] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20001 [ 1017.703967][ T4493] openvswitch: netlink: Message has 592 unknown bytes. [ 1017.722973][ T4493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1018.084715][ T4515] lo speed is unknown, defaulting to 1000 [ 1018.097554][ T4515] wg1 speed is unknown, defaulting to 1000 [ 1018.116836][ T4515] wg1 speed is unknown, defaulting to 1000 [ 1018.234211][ T4531] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1018.616960][ T4552] netlink: 'syz.3.7972': attribute type 10 has an invalid length. [ 1018.652347][ T4552] team0: Port device geneve0 added [ 1018.675815][T24639] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.694383][ T4557] 9: renamed from lo [ 1018.706668][T24639] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.741864][ T4564] netlink: 'syz.1.7973': attribute type 1 has an invalid length. [ 1018.779133][T24639] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.794685][T24639] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.971973][ T4577] lo speed is unknown, defaulting to 1000 [ 1018.987199][ T4580] syzkaller0: entered promiscuous mode [ 1019.002114][ T4580] syzkaller0: entered allmulticast mode [ 1019.013719][ T4572] veth0: entered promiscuous mode [ 1019.019501][ T4577] wg1 speed is unknown, defaulting to 1000 [ 1019.027504][ T4577] wg1 speed is unknown, defaulting to 1000 [ 1019.060014][ T4585] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20000 [ 1019.211203][ T4571] veth0: left promiscuous mode [ 1019.748208][ T4621] netlink: 'syz.3.7987': attribute type 1 has an invalid length. [ 1020.310929][ T4640] __nla_validate_parse: 18 callbacks suppressed [ 1020.310950][ T4640] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7993'. [ 1020.568091][ T4657] netlink: 416 bytes leftover after parsing attributes in process `syz.4.7997'. [ 1020.610200][ T4658] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7997'. [ 1020.629354][ T4658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7997'. [ 1020.650315][ T4664] gretap2: entered promiscuous mode [ 1020.657984][ T4664] batman_adv: batadv0: Adding interface: gretap2 [ 1020.664530][ T4664] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 1020.691062][ T4664] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 1020.709062][ T4668] bridge: RTM_NEWNEIGH with invalid ether address [ 1020.739119][ T4654] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7998'. [ 1020.756122][ T4654] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7998'. [ 1020.788022][ T4670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8000'. [ 1020.812841][ T4665] lo speed is unknown, defaulting to 1000 [ 1020.825695][ T4665] wg1 speed is unknown, defaulting to 1000 [ 1020.834601][ T4665] wg1 speed is unknown, defaulting to 1000 [ 1020.916185][ T4675] bridge4: entered allmulticast mode [ 1021.019070][ T4678] lo speed is unknown, defaulting to 1000 [ 1021.057506][ T4678] wg1 speed is unknown, defaulting to 1000 [ 1021.221075][ T4678] wg1 speed is unknown, defaulting to 1000 [ 1021.351682][ T4704] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8008'. [ 1021.387382][ T4707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1021.404163][ T4704] netlink: 'syz.2.8008': attribute type 1 has an invalid length. [ 1021.441274][ T4704] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8008'. [ 1021.465218][ T4709] lo speed is unknown, defaulting to 1000 [ 1021.473860][ T4709] wg1 speed is unknown, defaulting to 1000 [ 1021.482022][ T4709] wg1 speed is unknown, defaulting to 1000 [ 1021.524679][ T4712] IPVS: set_ctl: invalid protocol: 22 172.20.20.35:20002 [ 1021.662216][ T4723] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8013'. [ 1021.680880][ T6215] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1021.689903][ T6215] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1021.699927][ T6215] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1021.709276][ T6215] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1021.760021][ T4726] netlink: 'syz.1.8015': attribute type 2 has an invalid length. [ 1021.769625][ T4726] netlink: 'syz.1.8015': attribute type 11 has an invalid length. [ 1022.081552][ T4748] veth1_virt_wifi: mtu less than device minimum [ 1022.089133][ T4738] netlink: 'syz.0.8019': attribute type 1 has an invalid length. [ 1022.105629][ T4738] NCSI netlink: No device for ifindex 0 [ 1022.329073][ T4750] netlink: 'syz.3.8020': attribute type 7 has an invalid length. [ 1023.180020][ T4783] netlink: 'syz.0.8026': attribute type 83 has an invalid length. [ 1023.802877][ T4806] syz_tun: entered allmulticast mode [ 1023.866274][ T4802] syz_tun (unregistering): left allmulticast mode [ 1024.171080][ T53] Bluetooth: hci5: command 0x0405 tx timeout [ 1024.291240][ T4827] lo speed is unknown, defaulting to 1000 [ 1024.299215][ T4827] wg1 speed is unknown, defaulting to 1000 [ 1024.309117][ T4827] wg1 speed is unknown, defaulting to 1000 [ 1024.470970][ T4836] lo speed is unknown, defaulting to 1000 [ 1024.482929][ T4836] wg1 speed is unknown, defaulting to 1000 [ 1024.490753][ T4836] wg1 speed is unknown, defaulting to 1000 [ 1024.680186][ T4852] netlink: 'syz.1.8048': attribute type 11 has an invalid length. [ 1024.692991][ T4852] netlink: 'syz.1.8048': attribute type 11 has an invalid length. [ 1024.979101][ T4871] sctp: [Deprecated]: syz.0.8056 (pid 4871) Use of int in maxseg socket option. [ 1024.979101][ T4871] Use struct sctp_assoc_value instead [ 1025.003145][ T4873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1025.010554][ T4873] IPv6: NLM_F_CREATE should be set when creating new route [ 1025.208290][ T4834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1025.632425][ T4894] geneve3: entered promiscuous mode [ 1025.677601][ T3463] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 1025.687823][ T3463] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1025.725677][ T3463] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1025.740569][ T3463] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1025.805295][ T4909] lo speed is unknown, defaulting to 1000 [ 1025.839236][ T4909] wg1 speed is unknown, defaulting to 1000 [ 1025.848919][ T4909] wg1 speed is unknown, defaulting to 1000 [ 1026.179430][ T4931] syzkaller1: entered promiscuous mode [ 1026.217203][ T4931] syzkaller1: entered allmulticast mode [ 1026.241523][ T4931] bridge0: entered promiscuous mode [ 1026.257251][ T4931] bridge0: entered allmulticast mode [ 1026.320615][ T4940] __nla_validate_parse: 22 callbacks suppressed [ 1026.320628][ T4940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8073'. [ 1026.540024][ T4951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8075'. [ 1026.616148][ T4952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8075'. [ 1026.678166][ T4954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8076'. [ 1026.690450][ T4952] macvlan4: entered promiscuous mode [ 1026.711811][ T4951] macvlan5: entered promiscuous mode [ 1026.874669][ T4963] lo speed is unknown, defaulting to 1000 [ 1026.913645][ T4963] wg1 speed is unknown, defaulting to 1000 [ 1026.921496][ T4963] wg1 speed is unknown, defaulting to 1000 [ 1027.273606][ T4988] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1027.337784][ T5000] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1027.684911][ T5014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1028.237986][ T5047] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8098'. [ 1028.274062][ T5047] vlan2: entered promiscuous mode [ 1028.296135][ T5047] bond0: entered promiscuous mode [ 1028.323562][ T5047] : entered promiscuous mode [ 1028.329419][ T5047] bond_slave_1: entered promiscuous mode [ 1028.392409][ T5050] lo speed is unknown, defaulting to 1000 [ 1028.394389][ T5051] netlink: 'syz.3.8099': attribute type 1 has an invalid length. [ 1028.400448][ T5050] wg1 speed is unknown, defaulting to 1000 [ 1028.433753][ T5051] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8099'. [ 1028.445718][ T5050] wg1 speed is unknown, defaulting to 1000 [ 1028.481800][ T5051] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8099'. [ 1028.549718][ T5051] netlink: 'syz.3.8099': attribute type 1 has an invalid length. [ 1028.565885][ T5051] netlink: 16090 bytes leftover after parsing attributes in process `syz.3.8099'. [ 1028.606462][ T5051] netlink: 'syz.3.8099': attribute type 1 has an invalid length. [ 1028.614234][ T5051] netlink: 16090 bytes leftover after parsing attributes in process `syz.3.8099'. [ 1029.061493][ T5067] xt_hashlimit: max too large, truncated to 1048576 [ 1029.079045][ T5070] netlink: 'syz.2.8103': attribute type 1 has an invalid length. [ 1029.118678][ T5067] xt_hashlimit: max too large, truncated to 1048576 [ 1029.206145][ T5067] xt_hashlimit: max too large, truncated to 1048576 [ 1029.246073][ T5067] xt_hashlimit: max too large, truncated to 1048576 [ 1029.253203][ T5067] xt_hashlimit: max too large, truncated to 1048576 [ 1029.371942][ T5067] xt_hashlimit: max too large, truncated to 1048576 [ 1029.439854][ T5067] xt_hashlimit: max too large, truncated to 1048576 [ 1029.496692][ T5067] xt_hashlimit: max too large, truncated to 1048576 [ 1029.534542][ T5067] xt_hashlimit: max too large, truncated to 1048576 [ 1029.568781][ T5067] xt_hashlimit: max too large, truncated to 1048576 [ 1134.015366][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1134.022003][ C1] rcu: 1-...!: (10501 ticks this GP) idle=7354/1/0x4000000000000000 softirq=217105/217105 fqs=0 [ 1134.033760][ C1] rcu: (t=10502 jiffies g=182769 q=2633 ncpus=2) [ 1134.040252][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10502 jiffies! g182769 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1134.052659][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=79520 [ 1134.060548][ C1] rcu: rcu_preempt kthread starved for 10505 jiffies! g182769 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1134.071994][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1134.081957][ C1] rcu: RCU grace-period kthread stack dump: [ 1134.087850][ C1] task:rcu_preempt state:I stack:27040 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1134.099744][ C1] Call Trace: [ 1134.103016][ C1] [ 1134.105947][ C1] __schedule+0x149b/0x4fd0 [ 1134.110441][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 1134.115387][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1134.120421][ C1] ? __pfx___schedule+0x10/0x10 [ 1134.125261][ C1] ? schedule+0x91/0x360 [ 1134.129490][ C1] schedule+0x165/0x360 [ 1134.133695][ C1] schedule_timeout+0x12b/0x270 [ 1134.138553][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1134.143913][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1134.149184][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1134.154992][ C1] ? prepare_to_swait_event+0x341/0x380 [ 1134.160623][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 1134.165476][ C1] ? rcu_gp_init+0x11dc/0x1650 [ 1134.170326][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1134.175682][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1134.180870][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1134.186662][ C1] rcu_gp_kthread+0x99/0x390 [ 1134.191239][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1134.196447][ C1] ? __kthread_parkme+0x7b/0x200 [ 1134.201395][ C1] ? __kthread_parkme+0x1a1/0x200 [ 1134.206405][ C1] kthread+0x711/0x8a0 [ 1134.210463][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1134.215645][ C1] ? __pfx_kthread+0x10/0x10 [ 1134.220227][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1134.225414][ C1] ? __pfx_kthread+0x10/0x10 [ 1134.230003][ C1] ret_from_fork+0x510/0xa50 [ 1134.234599][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1134.239697][ C1] ? __switch_to+0xc9e/0x1480 [ 1134.244361][ C1] ? __pfx_kthread+0x10/0x10 [ 1134.249027][ C1] ret_from_fork_asm+0x1a/0x30 [ 1134.253902][ C1] [ 1134.256926][ C1] CPU: 1 UID: 0 PID: 30416 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1134.256947][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1134.256957][ C1] RIP: 0010:taprio_dequeue_from_txq+0xdc/0x980 [ 1134.256981][ C1] Code: 74 08 4c 89 ff e8 e4 4e b6 f8 4c 89 74 24 08 49 8b 2f 4d 8d 7d 36 4c 89 f8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 ce 06 00 00 <48> 85 ed 0f 84 a9 06 00 00 49 89 ee 49 0f bf 2f 48 89 5c 24 28 4c [ 1134.256993][ C1] RSP: 0018:ffffc90000a08c70 EFLAGS: 00000246 [ 1134.257006][ C1] RAX: 0000000000000000 RBX: ffff88803b7f3000 RCX: dffffc0000000000 [ 1134.257016][ C1] RDX: 0000000000000100 RSI: 0000000000000008 RDI: ffff88803b7f3000 [ 1134.257025][ C1] RBP: ffff8880782ed000 R08: ffffffff89702086 R09: ffffffff8df41aa0 [ 1134.257035][ C1] R10: 0000000000000001 R11: ffffffff89634ae0 R12: dffffc0000000000 [ 1134.257045][ C1] R13: ffff888052a34000 R14: ffff888081a98800 R15: ffff888052a34036 [ 1134.257055][ C1] FS: 000055558e9a1500(0000) GS:ffff888125f1c000(0000) knlGS:0000000000000000 [ 1134.257068][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1134.257077][ C1] CR2: 00007f45d7cc7d58 CR3: 00000000428fe000 CR4: 00000000003526f0 [ 1134.257089][ C1] Call Trace: [ 1134.257096][ C1] [ 1134.257101][ C1] ? taprio_dequeue+0x26/0x550 [ 1134.257125][ C1] taprio_dequeue_tc_priority+0x1ac/0x750 [ 1134.257152][ C1] ? taprio_dequeue+0x26/0x550 [ 1134.257170][ C1] taprio_dequeue+0x186/0x550 [ 1134.257190][ C1] __qdisc_run+0x23f/0x1510 [ 1134.257222][ C1] qdisc_run+0xc7/0x300 [ 1134.257235][ C1] ? net_tx_action+0x58c/0x900 [ 1134.257250][ C1] net_tx_action+0x717/0x900 [ 1134.257267][ C1] handle_softirqs+0x22b/0x7c0 [ 1134.257284][ C1] ? __irq_exit_rcu+0x60/0x150 [ 1134.257304][ C1] __irq_exit_rcu+0x60/0x150 [ 1134.257316][ C1] irq_exit_rcu+0x9/0x30 [ 1134.257328][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1134.257344][ C1] [ 1134.257349][ C1] [ 1134.257355][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1134.257369][ C1] RIP: 0010:copy_pmd_range+0x2330/0x7e00 [ 1134.257389][ C1] Code: ff ff ff fb 48 c7 c0 df ff ff ff 4c 0f 44 f8 31 ff e8 64 39 b2 ff 48 8b 8c 24 80 00 00 00 48 89 c8 48 c1 e8 03 42 80 3c 20 00 <74> 15 48 8b bc 24 80 00 00 00 e8 51 57 18 00 48 8b 8c 24 80 00 00 [ 1134.257400][ C1] RSP: 0018:ffffc900041cf3e0 EFLAGS: 00000246 [ 1134.257411][ C1] RAX: 1ffff1100b418c04 RBX: ffff88804be27160 RCX: ffff88805a0c6020 [ 1134.257422][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1134.257430][ C1] RBP: ffffc900041cf670 R08: ffffea0001fecd47 R09: 1ffffd40003fd9a8 [ 1134.257440][ C1] R10: dffffc0000000000 R11: fffff940003fd9a9 R12: dffffc0000000000 [ 1134.257450][ C1] R13: ffff8880869fab70 R14: 840000007fb35805 R15: ffffffffffffffdf [ 1134.257487][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 1134.257508][ C1] ? kasan_save_track+0x4f/0x80 [ 1134.257525][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 1134.257548][ C1] ? copy_page_range+0x251/0x11d0 [ 1134.257563][ C1] ? copy_page_range+0x251/0x11d0 [ 1134.257587][ C1] copy_page_range+0xb88/0x11d0 [ 1134.257618][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 1134.257640][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 1134.257659][ C1] dup_mmap+0xf4a/0x1b80 [ 1134.257686][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1134.257700][ C1] ? copy_mm+0x131/0x4b0 [ 1134.257721][ C1] copy_mm+0x13c/0x4b0 [ 1134.257733][ C1] copy_process+0x165d/0x3950 [ 1134.257749][ C1] ? copy_process+0x915/0x3950 [ 1134.257763][ C1] ? __pfx_copy_process+0x10/0x10 [ 1134.257774][ C1] ? count_memcg_event_mm+0x21/0x260 [ 1134.257790][ C1] kernel_clone+0x21e/0x820 [ 1134.257804][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1134.257829][ C1] __x64_sys_clone+0x18b/0x1e0 [ 1134.257841][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 1134.257861][ C1] ? do_user_addr_fault+0xc85/0x1380 [ 1134.257876][ C1] do_syscall_64+0xec/0xf80 [ 1134.257887][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.257895][ C1] ? trace_irq_disable+0x37/0x100 [ 1134.257907][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1134.257918][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.257927][ C1] RIP: 0033:0x7fdb34985e93 [ 1134.257937][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 1134.257945][ C1] RSP: 002b:00007ffcfeca1048 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1134.257954][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdb34985e93 [ 1134.257961][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1134.257966][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 1134.257972][ C1] R10: 000055558e9a17d0 R11: 0000000000000246 R12: 0000000000000000 [ 1134.257978][ C1] R13: 00000000000927c0 R14: 00000000000fb2dd R15: 00007ffcfeca11e0 [ 1134.257993][ C1] [ 1135.728904][ C1] sched: DL replenish lagged too much