last executing test programs: 3m4.138756866s ago: executing program 0 (id=1190): r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f00000000c0)=0x4a1, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x36}}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000200)=r3, 0x4) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000240)={r3, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000300)=@int=0x1, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000340)={r2, 0x8000, 0x1ff, 0x4000000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000380)={0x4000001c}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000003c0)={0x0, @local, @empty}, &(0x7f0000000400)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r4, r5, 0x25, 0x1, @void}, 0x10) ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000000480)={@broadcast, @rand_addr=0x64010101}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r6, r4, 0x3, 0x5, 0x1}, 0x50) syz_emit_ethernet(0xa1, &(0x7f0000000580)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @multicast, @val={@val={0x88a8, 0x3, 0x0, 0x4}, {0x8100, 0x3, 0x1}}, {@ipv4={0x800, @igmp={{0x17, 0x4, 0x1, 0x8, 0x8b, 0x64, 0x0, 0x2, 0x2, 0x0, @multicast1, @remote, {[@ssrr={0x89, 0x17, 0x53, [@local, @loopback, @multicast2, @broadcast, @remote]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0x5b, 0x3, 0x1, [{@rand_addr=0x64010101, 0x8}, {@empty, 0x9}, {@private=0xa010102, 0x8}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x23}}]}]}}, {0x1e, 0x5, 0x0, @rand_addr=0x64010102, "b704def056ae76066fec50200fc0d6f62db0e0ef1743e7d4ce052c6cdeb5276fd5f414a4eae9d9"}}}}}, &(0x7f0000000640)={0x0, 0x1, [0x676, 0x5be, 0x88a, 0x8d6]}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r4) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x94, r7, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4048080}, 0x880) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000840)={r3, 0x8}, &(0x7f0000000880)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000008c0)={r8, @in6={{0xa, 0x4e24, 0x5, @private1, 0x7}}}, &(0x7f0000000980)=0x84) setsockopt$inet_int(r2, 0x0, 0x21, &(0x7f00000009c0)=0x8, 0x4) poll(&(0x7f0000000a00)=[{r4, 0x6280}, {r2, 0x80}, {r4, 0x80a7}], 0x3, 0x8) setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0xd3, &(0x7f0000000a40)={@multicast1, @rand_addr=0x64010101, 0x0, "ee5111e02573bdc7c3d785e755496aa8dd28493160d8e832bfc6434be55361ce", 0x52f, 0x30c9, 0x7f, 0x7}, 0x3c) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000a80)=@assoc_id=r9, 0x4) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000b00)={'veth1_macvtap\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000bc0)={r4, 0x58, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000c00)={0x0, 0x0}, &(0x7f0000000c40)=0xc) sendmsg$nl_xfrm(r10, &(0x7f0000000f80)={&(0x7f0000000ac0), 0xc, &(0x7f0000000f40)={&(0x7f0000000c80)=@acquire={0x2ac, 0x17, 0x200, 0x70bd29, 0x25dfdbfd, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x2b}, @in=@multicast1, {@in=@multicast2, @in6=@remote, 0x4e21, 0x0, 0x4e20, 0x101, 0x2, 0xa0, 0xa0, 0x0, r11, 0xee01}, {{@in=@broadcast, @in6=@mcast2, 0x4e20, 0xfdce, 0x4e24, 0x4, 0x2, 0xc0, 0x80, 0x3c, r12, r13}, {0x1e48, 0x0, 0x9, 0x1ff, 0x0, 0x5, 0x43b, 0x5}, {0x7, 0x19, 0x9}, 0x250, 0x6e6bb0, 0x0, 0x0, 0x1, 0x3}, 0x2, 0x80, 0xc5c9, 0x70bd26}, [@policy={0xac, 0x7, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, @in6=@mcast2, 0x4e21, 0x0, 0x4e22, 0x2, 0x2, 0x80, 0x20, 0x3a, r5, 0xffffffffffffffff}, {0x9, 0xffffffffffffffcf, 0xae, 0xcc, 0x9, 0x4, 0xffc, 0x211}, {0x4, 0x8, 0xffffffffffff0001, 0x8}, 0x7ca, 0x6e6bbd, 0x1}}, @mark={0xc, 0x15, {0x35075b, 0x9}}, @sec_ctx={0x27, 0x8, {0x23, 0x8, 0x1, 0x4, 0x1b, "a1af36fd7fc90fd3bf2de536ee04fcff90e5ebbba73921bf550a43"}}, @etimer_thresh={0x8}, @migrate={0x9c, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0xda, 0x0, 0x0, 0x3505, 0xa, 0x2}, {@in=@empty, @in=@local, @in=@local, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x32, 0x2, 0x0, 0x0, 0x2, 0x2}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x40000}, 0x8060040) 3m3.321098437s ago: executing program 0 (id=1192): pipe(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xe, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2, 0x18001, 0x83}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}}}, 0x24}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) preadv(r5, &(0x7f00000004c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113300000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="557b000000000000280012800b00010067656e65766500001800028008000b40000000000600"], 0x48}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="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", 0xfa, 0x80, &(0x7f0000000240)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80000000}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x1e, 0x1, 0x0) shutdown(r8, 0x2) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xdf}, @IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000) 3m3.244974779s ago: executing program 0 (id=1195): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0xf, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x2, 0x4) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080), 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0xe, &(0x7f0000000200)="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", 0x1000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000001680)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001640)={&(0x7f00000012c0)={0x344, r5, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_IE_PROBE_RESP={0xfe, 0x7f, [@sec_chan_ofs={0x3e, 0x1, 0xb}, @fast_bss_trans={0x37, 0xe5, {0x9, 0x8, "f98bae05808b8e6a7727fa604a276c5f", "c864991d5cee7443c985ea7fd9b1581399ee0d3408fbd7e0967b1533f5781361", "1804c999337377cac2fd55aeca75039572cc9d99c982610f0063c727798960c1", [{0x3, 0x8, "ddccb828cf2b6556"}, {0x1, 0x6, "7aa9752620b3"}, {0x3, 0x4, "c11268b8"}, {0x3, 0xf, "0505d2932af8507a2fbacb306f6d59"}, {0x4, 0x25, "6abda043e802d3e2063f435948ba1c752acd9d345e1c0e8cd082928eb68a8b33aeffbab229"}, {0x1, 0x13, "df3c6896707f1097727a9f0b46f9a1b43c7a5f"}, {0x4, 0x14, "9e7a33927cf457b813a7eb1d7ef618864e177833"}, {0x4, 0x16, "e1047861ea5703bf736d0d311f29b967a21d358e7b7b"}]}}, @cf={0x4, 0x6, {0x8, 0x7, 0x2, 0x2}}, @mesh_chsw={0x76, 0x6, {0x2, 0xf4, 0x23}}]}, @NL80211_ATTR_FTM_RESPONDER={0x14, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x1e4, 0x91, "5c30775a4e897ef489d3f99ea25dacc939db857ac50a89d0c73adc20698726686ada6169b029bfe1592894b5147811e77eb98600241f02ef627baa8b0b7cbd3a63d1c799503719945aeb7240f1552361f2e98e529b36398a19771ce5f8e2f9f2de941ffc73305754aea682b01ce4884fdb878c5445392a55834c8dd31c7d50554f9099bd5da965f5a4e046aeb4b9a5cef2d24cc70c455a121b1fa8db2902141e11f9463af1ca0d101db3ceafa319c8023dec25c1d0aa81084171b88c210159093f9158f7af633d6ad7f25521721e1720b278f5dbe7e9a038742bd50a9f218f2a5650b7c2a9cc2a18afdab3c73ee7be6e86ef69314164e246e839e1bea23a1d35379e2aace0ce25ef20f5da97327ce66846d745ab4fc69ce068e3a212a36bf6e03db1a648771ab85446cad04fed0621f0ebcbe962cd7851386bb9e9629f52bf0e36f3ecce032c659adf3f4763b3dba823917880c47054f4461e4a661cb61876d75dabc902997839de3cda89849ddbe889c625aed7137c365d2642d17a009613421b0bf7faaef63717cac4af7b94eba3cdc00c30dca55f7d48fbe324a0f76ed61af8bf6f80262854e6e29db13792b38d48cd11b4f96383bc6256105b66718bf8056ad35ca5d1671cfca74cb7b22dd63dd36841684269195a8eff95d2ddbfec52aa"}, @NL80211_ATTR_IE_ASSOC_RESP={0x1a, 0x80, [@cf={0x4, 0x6, {0x0, 0x6, 0x9, 0xbfa0}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xfb, 0x6}}, @mesh_chsw={0x76, 0x6, {0x81, 0x0, 0x12, 0xec}}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xc}]}, 0x344}, 0x1, 0x0, 0x0, 0x2000041}, 0x8084) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x20, r3, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3d}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000800) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000017c0)={r1, 0x2d0, 0x4, 0x5}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001800)={0x0, 0x1}, &(0x7f0000001840)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000001880)={r8, 0x9, 0x0, 0x4, 0x1, 0x1}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000018c0)={'wlan1\x00'}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000001900)={r8, 0xee, "6fe0e349db9b784511fa73ee2f46dc27a4cfb4b69be1f08fa4c3815f62cba26f29c8f7777a10dad9c0cfd36143da9b4659a4d1dc99b32296e9ceb161bd2a8c7370431f61592b9ea9c5768fcbe968e9f92cb4301f4e8a5cd6520bc8486e1d9739b220b485e8710f487f4bc6d9dad70496a175b780204c16d5080613219a8bda2e6bf12d74cd88ab83f13eee48e7821f8502146b918ac420a45f19ffaddb52c10d5f3cf7e084f1d79816148764f8b1b4bfd34cec9994dea42568170ae294e63bf56d7fb304ec6a9505482f848d8e96d920ebb4a2be708ca99c7f3ad2c4efe9b10f3ef595500af88d943ee1111dc417"}, &(0x7f0000001a00)=0xf6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000001a40), r9) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000001b00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001ac0)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x4000000}, 0x48d4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000001b40)={r8, 0xba}, &(0x7f0000001b80)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ec0)={r7, 0x0, 0xcd, 0x6a, &(0x7f0000001bc0)="794bda6f788cd549a32929f98b6f1880f20ceffcebb30843a34a3f21a5c8bf52f099051f86212b0aa2053d111ba4119a5c95cdccf2570743d98ee4ca55789320e9c5f302ee9ebaa5c145d38bf0399aeca00b887fb0a6fcb4b3aa06e5dbeb744015f2641a3f4b7806aadb55c536833916f722f5b8b58d820f38af64c656918fcc97b56574ea44ab856635abeb12828c79acd78a52de2a473d9947c47ae2de91359d72cb1af51717065446e70584f0a0ac6820805c5be3bca06581b3de36edbf3288953c608f85314451a15e30e2", &(0x7f0000001cc0)=""/106, 0x4, 0x0, 0xd6, 0x70, &(0x7f0000001d40)="252e92bfe71b75fa25ae5004125ac51c38aafd55adc156ab874bdda437fd258a8465787a22e3b24392a918247ae1c822544650f41adaaa82c2be08ef9df1d7eea0ec1353f2f003e9285acbccbfd04cf6e2dee9a3e3f2826173758683d4d1e8de5596167580307cfe3c38065b445cbd41702dd3bb98fa74c71d7dbf18fecb370dd83cfaf7f33f76210bfce98ad3458a81d3b8494c7c9c5b0cc057ebfa6a2d61e504e1d94747f3aa51c2c17b1333a7fd75052fbdb17932e81c53ed3b157e74981ffd467494e7e2f2077d5045ed9ed94222f9f2581a1066", &(0x7f0000001e40)="dac2dbe224d8abfe4249b367b888dd0b426d68afe0e8715279856d6781f45e4bdb2415773254741bf560df54c6321e49f8d5720bce0b13ed6b7ce83977524c8222ba46ace41d94cabbf53cc964ffe1d8be0648aa94561caecb6d02ac4fd12216f88df41529e5967dc24cb65a1889bd94", 0xd, 0x0, 0xfffffff9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001fc0)={{r7}, &(0x7f0000001f40), &(0x7f0000001f80)=r7}, 0x20) sendmsg$AUDIT_USER_AVC(r7, &(0x7f00000020c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x30, 0x453, 0x200, 0x70bd27, 0x25dfdbfc, "f86af1445caefc5a5c0b818b586c87091eea62ec0444ad588f48058baf", ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4042094}, 0x4000) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x60, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_EXPECT_MASTER={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x20060094) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4048000) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x40, 0x2, 0x3, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x27}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xa1e}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x2a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m2.980318484s ago: executing program 0 (id=1200): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b564", 0x2}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="18"], 0x18}, 0x8080) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000040)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000001d71186e000000000095", @ANYRESHEX=r0, @ANYBLOB="aacf0fb64273b838937b2ef6530356ccc0366d5fbada6431bde0d559211c82fd3f43d260472d59758707795620cbcbc2268ffb657b62400e69da91c381ba67f8bf3b8d", @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESDEC=r0, @ANYRESDEC=r0], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) 3m2.973801109s ago: executing program 0 (id=1201): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000003c0)=0x401, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) close(0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000001000)=""/16, 0x1030000, 0x1000, 0x5}, 0x20) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x10000080) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000000)=0x1, 0x4) close(0x3) 3m2.666965009s ago: executing program 0 (id=1209): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000280)=[{0x1, 0x2, {0x1}, {0x1, 0xff, 0x2}, 0xfe}, {0x3, 0x0, {0x1, 0xf0, 0x2}, {0x3ca1d9a9d3f903f4, 0xff, 0x2}, 0xff, 0xff}, {0x0, 0xfffffffffffffffb, {0x0, 0xf0, 0x2}, {0x1}, 0x0, 0xff}], 0x60) r3 = epoll_create1(0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r6}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000400)={0x200b}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newtfilter={0x2c, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff7}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4) 3m2.55473092s ago: executing program 32 (id=1209): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000280)=[{0x1, 0x2, {0x1}, {0x1, 0xff, 0x2}, 0xfe}, {0x3, 0x0, {0x1, 0xf0, 0x2}, {0x3ca1d9a9d3f903f4, 0xff, 0x2}, 0xff, 0xff}, {0x0, 0xfffffffffffffffb, {0x0, 0xf0, 0x2}, {0x1}, 0x0, 0xff}], 0x60) r3 = epoll_create1(0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r6}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000400)={0x200b}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newtfilter={0x2c, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff7}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4) 2.338787873s ago: executing program 4 (id=3840): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x3}, &(0x7f0000000140)=0x4, 0x0, 0x2, 0x3ff, 0x7, 0x8000000000000000, 0x8, 0x2}}, @mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x4}, &(0x7f0000000240)=0x4, &(0x7f0000000300)=0x3, 0x7ff, 0xc, 0x80000000, 0x2, 0x11, 0xa}}], 0xb0}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000fffe00080009000000000008000a000000000008000a00000002"], 0x184}}, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x40050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0xb0, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0xb0}}, 0x20000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203b}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x30b, 0x5, 0x8, 0x7, 0x2e, @broadcast}, 0x10) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="2f0000000820000004000000", @ANYRES32, @ANYBLOB="ae556f0f6428154a12197317f04771dd97daa83dc9a952943cef7c741828f84666fe983640d15a7b5e3ed566bf5628f0", @ANYRES64=0x0], 0x20) 2.117427208s ago: executing program 4 (id=3842): r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r4, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c0003800800010002000000340003800800010000000000280003"], 0x6c}, 0x1, 0x0, 0x0, 0x20040814}, 0x4880) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r5, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r5) shutdown(r1, 0x0) close(r0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r7) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x94) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, 0x0, &(0x7f0000000080)) getsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, &(0x7f0000000040)=0x9, &(0x7f00000001c0)=0x2) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r6}, 0x50) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@getstats={0x1c, 0x5e, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}}, 0x4004) r10 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r10, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0xeca874b}], 0x1, 0x60012060, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd35}}, @jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1.946912853s ago: executing program 2 (id=3843): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "facaf7719c"}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd8}}, 0x0) close(r2) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) socket$inet_udp(0x2, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0400000000000000080200000e00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x0, 0x0, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) r11 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r11, 0x0, 0x0, 0x20000000, &(0x7f0000000180)={0xa, 0x0, 0x1, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r12}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0x1}}}, 0x24}}, 0x10) 1.720096896s ago: executing program 2 (id=3847): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x2, {0x2}, [@RTA_UID={0x8, 0x19, 0xffffffffffffffff}]}, 0x24}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x2, {0x2}, [@RTA_UID={0x8, 0x19, 0xffffffffffffffff}]}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="08008863040002"], 0xfce) (async) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="08008863040002"], 0xfce) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="08ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1.409023819s ago: executing program 4 (id=3852): socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r1, 0x89a3, &(0x7f0000000200)='bridge0\x00') ioctl$sock_proto_private(0xffffffffffffffff, 0xaf5, &(0x7f0000000080)="5ba7d530b0865cd776312d018e4192229922") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffffffffffffffe7) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r3, &(0x7f0000000000)=[{&(0x7f00000006c0)="5ba58a09", 0x4}, {0x0}], 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000b, 0x12, 0xffffffffffffffff, 0xfffff000) 1.407280293s ago: executing program 1 (id=3854): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0xf, 0x12) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r2, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) (async, rerun: 32) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) (async, rerun: 32) r4 = gettid() (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001980)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x9, 0xb, 0x14, 0x5}}, @TCA_RED_MAX_P={0x8, 0x3, 0x3}]}}]}, 0x150}}, 0x4000010) (async) sendmsg$netlink(r0, &(0x7f0000000340)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfe, 0x40000}, 0xc, &(0x7f0000001a80)=[{&(0x7f0000000040)={0x28, 0x1f, 0x300, 0x70bd26, 0x25dfdbfc, "", [@generic="ae1f80ec85c29bc1ca53db5ee66dc7f23c73df58ae53b2da"]}, 0x28}, {&(0x7f00000004c0)={0x1124, 0x39, 0x200, 0x70bd25, 0x25dfdbfd, "", [@nested={0xd9, 0x13c, 0x0, 0x1, [@generic="ce0d4628809086ea5bbabc85cbfa6a457504a041cc2698fcb77e7d174465382b8a2b57c746961282eb534a4a1c583059e0884e0c115501d7cdc1639da05adcecca1cd439e7ee75fb4242c837d289d2b78aa285d8b6f26cad2bf71fc4b213e5b3613a0046760e6ab82529bb20c707d04df84b8e05d5d0a22ca81cb9c8a1d47ffbd99f05d715492aa0dafc0cf1a848eda7123f50b774523f234694b86c401a394c5f3cc02d167df4aff371ce2ae317660904", @typed={0x8, 0x6b, 0x0, 0x0, @uid=r3}, @typed={0x8, 0x97, 0x0, 0x0, @u32=0x2}, @typed={0x14, 0x42, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}]}, @generic="8a2e3985fe05e59e23a4725bfbfd1def7da0ed6fc1cf93c54e884d4d99fcd4f490c067816e78e1f647333e09fa546255779530d34e8b7f", @generic="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"]}, 0x1124}, {&(0x7f0000001600)={0x288, 0x24, 0x2, 0x70bd29, 0x25dfdbfb, "", [@typed={0x8, 0xe3, 0x0, 0x0, @pid=r4}, @generic="e4ea7c15028f5f870490f4ca87772aeb2c830a923904effb8ea2c0b5516764ea6af104cd15cadf3af53bfa8dee45576aa00cffcf720b288e1486b02a863addd4c1d1cc9e2f419a37b0790c21d5ccac34f569a407a050ea0278df24614cdf9f6620f7eca00cb3437799adac6975e25b860d7cc3ff2fa309cab4d14b104f196c5f9ccdb32e571efcfef8d36a98a22cdfb762258896bfd2066d1aaedbe5349a56ca679055fdd77f9d9cf00ccbff142123fdb902ff8ca46c6ec20771b9d9874cf2f129fae413f16d853c29d4ccea581c84ed9f726408f2a8efe9500e799de8119d", @typed={0x33, 0xb3, 0x0, 0x0, @binary="424d739715d4edb27f91dffa54f369920e7fd08a1e2d615072f97be1086519d6348b3f6b0b7b0c066f778540cd2e99"}, @nested={0x18, 0xd0, 0x0, 0x1, [@typed={0x6, 0x6e, 0x0, 0x0, @str=')\x00'}, @nested={0x4, 0xc6}, @nested={0x4, 0x7}, @nested={0x4, 0x116}]}, @typed={0xc, 0x116, 0x0, 0x0, @u64}, @generic="4d91e6b181ba19e1344e5c481c551e621988e964ae9d0ac1e763c35e46e6ccfefdf14c13d1a729365f40d5a3c5b158c49698fe25f19c2eeac31ca3cc9b241f1ecf3f498f85fc05336934c926e7fde15959c1d25004244c5885e1c13f57feeda966d9bbe182800792b6f6cd4e2f7354b493a8263ae1c4fd2febf48cbc045b95d9452a01d9365a30ab39aa7e6187a9a95b39d79f5746e01133432c97494c6860231f661d", @generic="b3b62004add4d4ae7087ab12e70a56db93b4136c87e6f3c2abfbeb98b36edb05d56adf72929a1a8eff9a2bad3d7c668187f648693cc42e5a5c3aec2eca28960b46183e32f20916a02ee7c6f8161fd3da9a6f3c40cd11587934116491ddb04507b31db14d60dfc97163b10ab27b51a386882eab1388528416e20ca771f38a70ae6d7dcc10f1d8e5f7105239", @typed={0x8, 0x58, 0x0, 0x0, @fd=r0}]}, 0x288}, {&(0x7f00000018c0)={0xa4, 0x39, 0x1, 0x70bd27, 0x25dfdbfb, "", [@generic="67563cb448dfccc7237bfc8eac7610a20f3dc2d33957ae36ae5fb0b2f4c5219a0cf6e07360895f695abc01f162a66adf40ca739bf469698b58082bd6476e6d53a9bd7d5cd4595a456db59fb1ef9fba0641e76f115846ed319fa424a540d6a8a199c9a32fff867cbbe3865c0356d7f56c60940d88507b0f2db8ec1d1af1ed324ad14c0ec3c31169180018d542bd2f2ec169db0a77"]}, 0xa4}, {&(0x7f0000002e00)={0x1300, 0x21, 0x1, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0x37, 0x0, 0x0, @fd=r0}, @generic="a94ba10455fbf3ae396530c0f27b8bc7867d69a694d4ee18e1e98a75c42393524a269f83c1fcf0a7be39201404c814734302338bd4d0ca0c63d3fce41f2723a053d16043f6c8b9f2f780df2519f77dd7880bdfc0edf35ddda10d2f0fe60affd76d0ea08655ba767a5ea28ede9852258e541dd9a5befdcb8afd0f09bc2b7a656fbfc23cf5", @nested={0x192, 0xa4, 0x0, 0x1, [@nested={0x4, 0xe2}, @generic="2af2dac6f5c3559af1f4704afc552d71ca6ae04b7aeace7ae9bf5b328b45a5be0f6287d640d8f2979b7b7997dca50a23ad1a09f27b4b44456d8b0a978fe48841286a99833c9d9e4442f41007937480cb0e3c5a6dc08e5d7e7c6301be56ca06a7bc301090ce5fa66833fec1f6751e5fc1325a4e1bc57bf1b4ddc9835650e82594fae98887d1e0c5b05cb0aa741c00a7e1a19497fe2dc187676d941a7524b823cafdc54ad0c790f450946a9d422ebd6e857835c3adabcfffe4e9967adf9cfe9ef2d3", @generic="eb54551cd098d3ea6e30dbe8f51dcca84530e407170c728b49a8efe55ad228e8c95d8fcaf8c26bbe51f5fa7daf26b2ec0281a66fe858d1c3d3a5e9b7c72f79a0a1229a8144d801e9aee6717afb82a111755474088eb6150a56f236a0d253c949a536ebc0dc902a3a7355b941b378cc122e4803c8de0ae9cc40992367f806754f6031ebf5340d4610d976549a996e57cb22e1c14484199cb1a15c17b0ca95b9155146eb60d5", @typed={0x4, 0xdc}, @typed={0x4, 0x143}, @typed={0x14, 0x27, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @typed={0x8, 0x3f, 0x0, 0x0, @uid=r5}]}, @typed={0x8, 0xc9, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="5fe44f3b512c68befcb0a487ebcc58ba51ac18b01ef26cd068c914fc194a83c904ea23e69b2ccc901b9fc88c772124", @generic="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", @typed={0x4, 0x149}, @generic="02bd5d4985c1c8dc2b5fd28acc44cd8b4c9ad4054a4d6ed12df8b7876400e3f7a037afcc02dcc666099aae8a9894fe17bc93f98315c36a7a63459746c763e6b56ee3b276e4695ad35cf43249051b084d2c8e8bcc9d11b2355caadfb6c36eedd09575bf50957b38bd70585e056fe3b56b80d2e1231f1f89c1b7224db19f999387bbb6e9184f9c9c2e63795c8c17f30e9d01da9b2e3d"]}, 0x1300}], 0x5, 0x0, 0x0, 0x4}, 0x40000040) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffff7}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x40f00, 0xd}, 0x94) 1.291274218s ago: executing program 2 (id=3856): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x8901, &(0x7f0000000100)) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000f00)="92", 0x1}], 0x1}, 0x4815) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000b030000000000000000000002"], 0x0, 0x3e}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @broadcast}}) setsockopt(r2, 0x9, 0x3, &(0x7f0000000140)="71f190067cf78a5fc6defa5d6fe60ea03c1553c0bde34f0892b2cab63ef4ed5a219f8b6679f2b38b9115e64bc4a689ad3daf7cc8f2349331ee30a069df722e86570417b2dd1ac124bbbceb045837f95565731efe1e4a9b346704ebbb65db0236ca2ce63196aabf8e2ac42cc3cf7678520dde4cb075751e085fa4f2216aafee65110f8e0f4e5634b95e2f39f9a5331681d4e77883ec26dd57334c9ea8ac54413618bba6f1611ad1115acaf102f19a8659b781b6fafdeca74c08fc41ad924bf2d53b64f1cfdf9982fd492d0998bc082b0f3948756df2012cec2682b6febb5fff4d69c903d26b56ccb31988e1810f53532f3822", 0xf2) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)={0x3c, 0x48, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x100, 0x0, 0x0, @u32}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="0d2a79075827af5aa534d6815c2e93f1"]}, @nested={0xa, 0x2, 0x0, 0x1, [@generic="b4e27551be74"]}]}, 0x3c}}, 0x20048800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x8901, &(0x7f0000000100)) (async) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000f00)="92", 0x1}], 0x1}, 0x4815) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000b030000000000000000000002"], 0x0, 0x3e}, 0x20) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x11, 0x3, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @broadcast}}) (async) setsockopt(r2, 0x9, 0x3, &(0x7f0000000140)="71f190067cf78a5fc6defa5d6fe60ea03c1553c0bde34f0892b2cab63ef4ed5a219f8b6679f2b38b9115e64bc4a689ad3daf7cc8f2349331ee30a069df722e86570417b2dd1ac124bbbceb045837f95565731efe1e4a9b346704ebbb65db0236ca2ce63196aabf8e2ac42cc3cf7678520dde4cb075751e085fa4f2216aafee65110f8e0f4e5634b95e2f39f9a5331681d4e77883ec26dd57334c9ea8ac54413618bba6f1611ad1115acaf102f19a8659b781b6fafdeca74c08fc41ad924bf2d53b64f1cfdf9982fd492d0998bc082b0f3948756df2012cec2682b6febb5fff4d69c903d26b56ccb31988e1810f53532f3822", 0xf2) (async) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)={0x3c, 0x48, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x100, 0x0, 0x0, @u32}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="0d2a79075827af5aa534d6815c2e93f1"]}, @nested={0xa, 0x2, 0x0, 0x1, [@generic="b4e27551be74"]}]}, 0x3c}}, 0x20048800) (async) 1.242823651s ago: executing program 1 (id=3857): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x9, @remote, 0x5}], 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf251800000008000300", @ANYRES32=r4, @ANYBLOB="400030803c0001"], 0x5c}}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00'}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x34, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0x9, 0x0, 0x0, 0x0, 0x0, 0x80, 0xfe, 0x0, 0x87, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x80000045, [0x2, 0x7]}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x1, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x9, 0x4) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r7, &(0x7f0000000100)={0x2, 0x0, @broadcast, 0x2}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r9, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010100}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x10810}, 0x30000000) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r0, &(0x7f0000000300)={0x0, 0x97, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) 1.242319092s ago: executing program 3 (id=3858): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x3, 0x7, 0x40000000000009}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x2f}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8800) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(r3, 0x1, &(0x7f00000001c0)="0feb79dba4d547dbfc1dd208eaa30956048fec8af59ac89db5fa9990264676e2986faafd3ea5dae7bc92a1bc24e351e85f1d5bd5ddeaca8f55b490bd77a9bdc487a1216409507ef4a44e") socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x80000001, 0x7ff, 0x24e, 0x80000000, 0x5}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x9, @random="b33ccef3b175"}}]}]}]}, 0x6c}}, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={&(0x7f0000000680)="91575735f89f8a8a56acebdbdb1dc5bfc949d314c5761e311d7aed98e588112b7d444b3e711b3fc9da7a5705a74ee1ddf81f32ddbdc439c20d2378daf09979410e64d95e21d0eb619407272b4ffd25e13605d066bbb2b9c43122824093dbcb05f84b293d6f74e8f7d6626e9cbbc7bb0cea56b184c6d17803814132c0f48987371a4fbfadff4ed61262e77d5501b6ea14b05a152ee4c83fe47d14d2bbc530cfde24c0ec96500ee6b92820386c1af5f4a1852215910be45c48d54d4f08394c704053f5", &(0x7f0000000340)=""/176, &(0x7f0000000900)="a5713388350afb0d0177fb9a7ea20ecee9d786c80fac0a13635dc8d39f9a44d1643f642e275ea6d505e9047e6a0acc75755eeba21a5f26f660bdb9b8ebf04053d8ed5452ca60caf83e8ec6a2bb3c89cfec2cb250e467773c37485891dd6e072ce4b8f17f1e409c42f0ffe59a5b19c278a6bd76aa7ed1bed1ac", &(0x7f0000000980)="14b9ad004f7edf33fe41951c5413163ff73e5ed525a7882dd9648346bc7b0ebecf00dd2ab19cbfebc9829c8c661b765b0bda3952138d47af0ee94a61be8259ddfd2aba3de50d2ce591ae791b627e7ed8e36f58cc33696863533e2893873582234ecf783d990ffc9ec90f323ef51e6f8d28187fb773f816d28580a07dd3c3cf57c318f163ad20ff89fcab5c54080eabf9658a680797ae394274797c6c3cfe8a4ebb81aad00ca63550be6f0a2cedbb362fc7f40cffade01d3eafd0235f48b14d4384aed584", 0xfffffff7, 0xffffffffffffffff, 0x4}, 0x38) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000000c0)=0xff, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r6, &(0x7f0000000a80)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x6, 0x3, 0x80, 0x5}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @remote, @remote, @local, @rand_addr=0x64010100}}, 0x2a) unshare(0x74030500) socket(0xa, 0x3, 0x87) 1.21513622s ago: executing program 2 (id=3859): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25040100800c000300000000000000000014"], 0x114}], 0x1}, 0x80) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) sendmmsg(r2, &(0x7f000000a200)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000400)="73fd5418cdbe", 0x6}], 0x2}}], 0x1, 0x60000800) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4) sendmmsg$alg(r4, &(0x7f0000009000)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="9c2e044eb4", 0x5}], 0x1, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8010}], 0x1, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000010}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x48, r5, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x18}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x50}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x80) 1.090950518s ago: executing program 4 (id=3860): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000b00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYRESDEC=r1, @ANYRES32=r3, @ANYRESDEC, @ANYBLOB="d8e86d701e6a57491c2ce9e6db38968748e3d335953b7b278bc9ce5db921524fe631eb2197354a8fa9181047f403e174c5f30e1caa0747faa89f29fecee4ebb448c9ab59b48b77755c8664f86a07e9b57921fcb2efa224999ad545914bb8111b5ef3dfdd31637e355123ac47"], 0x47) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x15) writev(r8, &(0x7f0000000600)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r8, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) splice(r3, 0x0, r7, 0x0, 0x47, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56dfde3f312acd0f02de28a23fe42fe8a7cac5", 0x1) r9 = accept4(r2, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_SET_MPATH(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="0a000600ffffffffffff0000", @ANYRES16=0x0, @ANYRESDEC=r5, @ANYBLOB="be39b1df5038f796dd0b6dc1393d6d85bfedbbd68bfc1a6eb84d30943652da5bb6", @ANYBLOB="100026bd7000fddbdf251600000008000300"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000210a01040000000000000000000000001ff74eb35073"], 0x14}}, 0x0) recvmmsg$unix(r9, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001040)=""/6, 0x6}, {&(0x7f0000001080)=""/27, 0x1b}], 0x2}}], 0x1, 0x40000000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYRES16=r4], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r10, 0x0) 1.027030481s ago: executing program 5 (id=3861): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x8}, {0xfff2, 0xffff}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}}, 0x20044000) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000096000a000200aaaaaaaaaa0c"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 1.026327177s ago: executing program 3 (id=3862): bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20000400) socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91) (async) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x4}}]}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x4}}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000f5ce004982555a0f000000000000a67ff492d2834199b592b3dc8a7cf4b70845696d0cc1af79c35ad4b3f5edb4e445c351eef69633d35e22adf8bec325a416c77814b11f5b203cb840dbd27c6af9ca242d4451c048d9f59e3a5c4688869beed7533e2be3b0f88f6c92bf0019f521ca3feb438c891e50b0955ba00b32565d8e1f38a5ba19628f42069954e301d765a3c71512923a96ec730cecf520c36828e09ecdec3c066fa78c9e59c58fa7604804d38d6387e83463823c59ee2bf95140964adca9b81110c0a050fc75fb213cada944bcd9469b", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000700060000000500010005000000"], 0x44}, 0x1, 0x0, 0x0, 0x8015}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000f5ce004982555a0f000000000000a67ff492d2834199b592b3dc8a7cf4b70845696d0cc1af79c35ad4b3f5edb4e445c351eef69633d35e22adf8bec325a416c77814b11f5b203cb840dbd27c6af9ca242d4451c048d9f59e3a5c4688869beed7533e2be3b0f88f6c92bf0019f521ca3feb438c891e50b0955ba00b32565d8e1f38a5ba19628f42069954e301d765a3c71512923a96ec730cecf520c36828e09ecdec3c066fa78c9e59c58fa7604804d38d6387e83463823c59ee2bf95140964adca9b81110c0a050fc75fb213cada944bcd9469b", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000700060000000500010005000000"], 0x44}, 0x1, 0x0, 0x0, 0x8015}, 0x0) 1.006784337s ago: executing program 5 (id=3863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) r1 = epoll_create(0x101) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x94, 0x2d, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0x800}, @nested={0x7f, 0x11, 0x0, 0x1, [@generic="e500ad5d08b48b17303d01dacd1e1b7083e917fb4c7f29219cf1b761eab88b0262ac00738c6b98d12231e603693cd0a65e572adc2c25d3649b1583589f7acb7e39e0e0acdc6ebfcf8d1aa73b86804a9640efe7388c1584a28409d5e99068ab4e0799f2341abe442f372b675706fc37dd57b0043c6b5d4b0f7f48d6"]}]}, 0x94}], 0x1}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000080)=0x14, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xd0002000}) 944.012245ms ago: executing program 3 (id=3864): sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfe}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x44) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c00"], 0xd0}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c00"], 0xd0}}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) (async) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/216, 0xd8}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000006c0)=""/21, 0x15}], 0x5}, 0x4}], 0x2, 0x60, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) unshare(0x20000400) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000580)={0x0, 0x7000, 0x800, 0x0, 0x2}, 0x18) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in6=@local}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {}, {0x0, 0x0, 0x0, 0x3ff}, {0x0, 0x0, 0x4}, 0x0, 0x4, 0xa}, [@algo_auth_trunc={0x5d, 0x14, {{'cmac(aes)\x00'}, 0x88, 0x0, "35f6fd8fd57fd44aa5074c50bcc4059acb"}}]}, 0x150}}, 0x44000) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in6=@local}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {}, {0x0, 0x0, 0x0, 0x3ff}, {0x0, 0x0, 0x4}, 0x0, 0x4, 0xa}, [@algo_auth_trunc={0x5d, 0x14, {{'cmac(aes)\x00'}, 0x88, 0x0, "35f6fd8fd57fd44aa5074c50bcc4059acb"}}]}, 0x150}}, 0x44000) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="004003008b46eae6dfbdeabd86c92a1c23d0faf29c4bf42c78a6b36953aac9aed4c7421f7857274a0bf32db8a6dab7cb6f8d1d6df36e5b654113c78d0a1b39cf44194aaa0bce2b77242292a71c3474384926459f0a1599e66f0bca07affdea186b469528612aa6a01330cd9cd71dba1015ddf896646dab935b2557381228c495012f7570445438ddc222a920a2d98fa1289f2a54ad1d4f", @ANYRES16=r1, @ANYBLOB="20002cbd7000ffdbdf25010000004c000480050003000200000005000300020000000500030005000000050003000000000005000300050000000500030001000000050003000200000005000300070000000500030007000000"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4880) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="004003008b46eae6dfbdeabd86c92a1c23d0faf29c4bf42c78a6b36953aac9aed4c7421f7857274a0bf32db8a6dab7cb6f8d1d6df36e5b654113c78d0a1b39cf44194aaa0bce2b77242292a71c3474384926459f0a1599e66f0bca07affdea186b469528612aa6a01330cd9cd71dba1015ddf896646dab935b2557381228c495012f7570445438ddc222a920a2d98fa1289f2a54ad1d4f", @ANYRES16=r1, @ANYBLOB="20002cbd7000ffdbdf25010000004c000480050003000200000005000300020000000500030005000000050003000000000005000300050000000500030001000000050003000200000005000300070000000500030007000000"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4880) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x12}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x10, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f00000008c0)={0xcc, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x200}, @CTA_LABELS_MASK={0x14, 0x17, [0xfb, 0x1, 0x5, 0xffff]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @empty}}}]}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x355b]}]}, 0xcc}}, 0x40) 838.81933ms ago: executing program 5 (id=3865): unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000000947c355e80"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xca, &(0x7f0000000a40)=""/202, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x34}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}, {0x0}], 0x2}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)={0x44, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c00018006000600060600000800028004007280080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0xeb, &(0x7f0000000840)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xb5, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x4, 0x8001, "9dc4f2a1d2943a3b535a051da9d0272beccdfa375248adeb79547085d94f519c731b1abfeb5bbf7016f061e63665063af0d174578b70fd1be6d49bf7059c70be12610f28e8c22c274fe9541ad7b7d2b161be49db019d2ec30ab4198c865b36d5104625a261aeed07804331ac86710a7ee8069d82bd96b9b25982b7f7ebba5c7406420318486a58865c8a047ea9797c2a97a0ee8c9e17c6fb043386d1a02f3dd5723a9c66f07b9638063a4ee30a"}}}}}}, 0x0) 838.572871ms ago: executing program 3 (id=3866): pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) syz_emit_ethernet(0x192, &(0x7f00000008c0)={@link_local={0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x184, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x6, 0x3f18, {0x58, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x89, 0x0, @loopback, @multicast2, {[@cipso={0x86, 0x6, 0x3}, @cipso={0x86, 0x62, 0xffffffffffffffff, [{0x1, 0x12, "05ba83a0750704dd2328d4aec373ee67"}, {0x6, 0x7, "b9ab30e8c7"}, {0x1, 0x5, "0f1518"}, {0x5, 0x7, "72c4373623"}, {0x1, 0x8, "2a8f3108d3eb"}, {0xb, 0xd, "79fbcbaabeb9f9f75e0e18"}, {0x2, 0x11, "b816645cd1d1f6e5cc043fd259ef57"}, {0x5, 0x3, "94"}, {0x5, 0xe, "baea84c6205111c24095240a"}]}, @end, @cipso={0x86, 0x58, 0xffffffffffffffff, [{0x1, 0x6, "234f40c6"}, {0x2, 0x8, "4ed127a52218"}, {0x2, 0xf, "28d68f2b52bee3c729d181dc5f"}, {0x6, 0xf, "1b262228d2b46fe2ff6c111546"}, {0x0, 0xb, "9724e537eabd63867b"}, {0x1, 0x4, "abde"}, {0x7, 0x8, "7595cdfddccc"}, {0x8, 0xb, "32885fe39741410094"}, {0x0, 0x4, "d5c9"}]}, @timestamp={0x44, 0x10, 0x17, 0x0, 0x9, [0x1, 0xffffffff, 0x7]}, @ssrr={0x89, 0x27, 0xab, [@rand_addr=0x64010100, @multicast1, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x22}, @remote, @rand_addr=0x64010100, @rand_addr=0x64010102, @loopback]}, @cipso={0x86, 0x8, 0x0, [{0x1, 0x2}]}, @timestamp_prespec={0x44, 0x44, 0xe9, 0x3, 0x4, [{@loopback, 0x8001}, {@private=0xa010101, 0x4}, {@private=0xa010100, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@rand_addr=0x64010100, 0x7}, {@remote, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0xffff8000}, {@dev={0xac, 0x14, 0x14, 0x10}}]}, @rr={0x7, 0x7, 0x7f, [@rand_addr=0x64010101]}]}}, "00186371ae9b1c03"}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) 649.211075ms ago: executing program 5 (id=3867): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0xfffffce3, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) close(r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 634.375683ms ago: executing program 3 (id=3868): syz_emit_ethernet(0x177, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "32ef81", 0x139, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@srh={0x89, 0xe, 0x4, 0x2, 0xf, 0x30, 0x200, [@private1, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x3b, 0xa, '\x00', [@ra={0x5, 0x2, 0x2}, @ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x38, {0x2, 0xc, 0xac, 0xd71, [0xffffffffc4b90a8c, 0x5, 0x80000000, 0x7, 0x7, 0x7ff]}}, @pad1]}, @routing={0x0, 0x6, 0x0, 0x1, 0x0, [@private0, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}]}], @payload_named={{{{{0x29, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, 0x2, 0x4, 0x0, 0x3, 0x0, 0x5, 0x2, 0xa, 0xff, 0x1, 0x4e22, 0x4e23}, 0x0, 0x2}, 0x4}}, [0x0]}}}}}}, 0x0) 539.102748ms ago: executing program 3 (id=3869): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x11000) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000440)="ac", 0x1}], 0x1) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0xc5, 0x5e42, 0x30, @loopback, @local, 0x8000, 0x27, 0x401, 0x1}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 451.913202ms ago: executing program 5 (id=3870): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x2, 0x6, 0x1c}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x5, [@restrict={0xd, 0x0, 0x0, 0xb, 0x1}, @const={0x5, 0x0, 0x0, 0xa, 0x2}, @fwd={0x9}, @fwd={0x10}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x5}, {0xc, 0x5}]}]}, {0x0, [0x61, 0x5f, 0x61]}}, &(0x7f0000000500)=""/237, 0x69, 0xed, 0x0, 0x40, 0x10000, @value=r2}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x6, 0x1, 0x4, 0x20000008, 0x0, r2, 0x0, '\x00', r1, 0xffffffffffffffff, 0x10000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r4, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, 0x9, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) 417.222071ms ago: executing program 5 (id=3871): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000010d000)={{0x0, 0x51, 0x4, 0x81, 0x8, 0x2, 0x5, 0x9, 0x5, 0x7c7, 0x3, 0x4, 0x4, 0x9, 0x6}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) shutdown(r0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) socket(0x1e, 0x4, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r5, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/124, 0x7c}, {&(0x7f0000001280)=""/60, 0x3c}], 0x5}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f0000001b00)=""/118, 0x76}, {&(0x7f0000001540)=""/188, 0xbc}, {&(0x7f0000000000)=""/57, 0x39}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f00000014c0)=""/101, 0x65}, {&(0x7f0000001780)=""/171, 0xab}], 0x7, &(0x7f00000018c0)=""/176, 0xb0}}], 0x3, 0x0, 0x0) 366.971887ms ago: executing program 1 (id=3872): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2540, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r0, 0x2, &(0x7f0000000040)=0x5) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) 357.238836ms ago: executing program 1 (id=3873): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000480)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r1 = epoll_create1(0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x276040, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYRESDEC=r1], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, 0x0, 0x5c) close(r6) r8 = socket$unix(0x1, 0x5, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000002, 0x30, r6, 0x7695d000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='ext4_mb_discard_preallocations\x00', r10, 0x0, 0x10001}, 0x18) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x2000000000000136, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f34e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a88a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newchain={0x2a2c, 0x64, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x5, 0xffff}, {0xd, 0xb}, {0x1, 0x8}}, [@TCA_RATE={0x6, 0x5, {0xd, 0x7f}}, @TCA_CHAIN={0x8, 0xb, 0x40}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}, @filter_kind_options=@f_basic={{0xa}, {0x29dc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0xc}}, @TCA_BASIC_POLICE={0x48, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x7ff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x8, 0x9, 0x0, 0x8, {0x3, 0x0, 0x7fff, 0x6, 0x5, 0x3}, {0xa, 0x2, 0x3, 0x800, 0xc, 0xe}, 0x1, 0x0, 0xfffffff8}}]}, @TCA_BASIC_EMATCHES={0x2478, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7f, 0x7, 0x6}, {{0x0, 0x1, 0x1, 0x1}, {0x2, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9}, {0xc20b, 0x9, 0x9, 0x2, 0x9, 0x1}}}, @TCF_EM_META={0xc, 0x3, 0x0, 0x0, {{0x2, 0x4, 0x50}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd36e}}, @TCA_EMATCH_TREE_LIST={0x1138, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1, 0x8, 0x9}, {0x1, 0x2, 0x4}}}, @TCF_EM_CONTAINER={0x68, 0x1, 0x0, 0x0, {{0x0, 0x0, 0x2b}, "76e6fa82b5997f6f3f72885285a270238695c34a902b8d690933b22e74bf482e13b349e9a57ea30d9909a08389f3dfe8266289d699bfbf01c8b4cd4c52b4923352a443a768bc3bb4e1cd44bdc4de584ed412d49391c586ec28aa46"}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0xfffe, 0x2, 0x7}, {0x1, 0x1, 0x2, 'W'}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x1, 0x3, 0x4}, {0x40, 0x3ea0e95b, 0x8, 0x4}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2}, {0x4, 0x0, 0x6}}}, @TCF_EM_IPT={0x103c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0xa6f0}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "40a862796449db8130562a4677211d22bf7974dffca764fb049c2ebe6a605e20ac67820e7db7e48b02bba406e5d7ba3254e29c02adbe693c9a802548071a24be053d2bc0534fb7273cc2cdc9c26f0f5b7396e4ab5ae177292215f655414f0585a42d520bb1cdb87bb2f47a4ae0146b4ed350e07052ad6b5aa3f17fff09b29e36f394e31d562116cb0dd530ca15bc6008f7f706bcfe3e9a6ee6226193d5897347f04a9829af8fc74f454a0ea7d07c958192ba3b3393f24ce24d8e15932cb714acf8b4915aa98a3c791fea384abfe8b87f3ad9be8ab48fe98a02aad24eeba1bc2d3c6910e5697c5e78fc2f7d80c27e02103ce9f75448b599370f12ee4698f56880eef4783e4bfea5daac5be41e09aae75a3726bdc8091ccceae036f91177e63f847c1ae9e7a96a6e91c3db4f08bce95b3a1caeb1515f752452433625e1068e6a7b3063f9dc93ece4ae3c7260d07a77fcce3e1bae381cca35b2aaf15c4c3802e298aef83855cfe0763b74b24083be4a82b7b318ed9a3ac580026458721d57791d0cd15d43c059790ff4303db03e01d2676b8345487550a9c55a7276916b7ff789a5c6bcd65e0bd2516f0178e7e780fd34b960cf67b2c8844bde8762414c7372079b1069a73c99e2a3477ff6e746901b0e87207e703e88a1201bb1333f9da1fc80bc1e420adea1de3f23428ed7d2601558aeb6eebd672a358afaa170163034b8f0f8062adeadb5ba616d01239cb18ec8907f9a7f57cc32398286f57239e46ed5bcd5df57bb34d35804b57f089ac8a6d25f4f3b7e9d3732e434bc39cf8d3041f2ed5804a0ffd2e4b0d3dfd3f5d78e51ae4846401d0e65917c19457fab86e97791ef3c76a0951381f74b6608d538d36e5625a11122d835fc33dc7bd7a371abe41d6b2e1f35266a521e5083bd095f57f512ab72ee6e5ff17fc2b6aa755585b85926916ca9ae069cc507d1011c3f3f54db8f53fd3baa67304083fc7384f7cd29378583d9e7b3db197f81fffdd202ac2260dec0dbecf1d9fae9043c4739fef5f1f92f52011b049cc75f9f6c2ef1e1fd5559020577b425fe081c3c4c2645a422ac5cd35d48f84e186cf6f185cf45b017e6adca3983b2425d72a0019caefc17b6c968a37488332bd901576eb2a2702dbdf8cc2655f6ae9ee170c3bce306605257856a63009cb94c6307b3915c30ecb6504faf43032a41fbf448877ee7e2f1c23c6f83ba2f363ab85c5a633657c6a064c98f935eeb266233689f2f4de22b9d01e7afbaaddaa1bcfa0982a06ac49f5627ab2d943f5788dcd08785df777193b9e2ea65e5608ddcd6e74bf2dd6371f21dd626002f55f4cf8857e72267fbb97bf3788c7857bd2701f574003711b7be7025c57b8c74ba3d36f1d44d16de008364564420039b7eeb92382fb13273f9f96d85e93df7c3609ad5476479ec7024f9dfa4834c7c4de3a7cc338a840ada6dab4e9f2d8ca2aa908cbe186001e0f041cf0c3287fc8a59b46649ec5a7ef65443491ca4e35d47e4762b9407a36961a2778963d5b0cb5ff54ce37438b87c824e03df26953824b89bc211b68b76b38d3c3d8cfea102e68507a03c0a5420a9aa02e8ebe9068e73cb381439c9b592858e94e6bd4c39d94838654f33cb7d1e683bf83303613437ca8d8119fc161f59323c66d427fd6fe457ec2082975b28dca26c35b356448990703c132da6cdfae54ddc6ff6a8f19da3bf9d911f916b701e6b681ab361c1512b4cfacf7c5f3823ceaafc6aed32951397705fa9dfe85c6c183fa0352e83416db59b161647f1d901982030f529a46ec20aa2961d55cc43844d013ef44126161ee4d7270ba0e0e3769bbbc48dd6e02f466c56c3282d697471f3798161ef3fa20fdea95d691a8f523ac65468fb918b821a9ad4577636784799a36ac9000fa67a45d3062461fbc4989a37c199be9b2a25cab7e4808bf80b0a05a3e2aa7fc10dd1aeb9e994504023ee4cb19349ab9f97e800bc57db6fac9d6cf58e93dcfc46882d7af7d1145ebb46e16a5f8e2cf8db3a64b38cbd34f081b5b6628261e5cdc20513b4bf33063024acd9561d242aea1d964707c600f4f64263e0865640b013c6bd4855673353fc7d46f49fd9bd9bb6fcdefec338db06a8a91d1b332d504a672f8d89bdbec5059f0167c52cf39d1f17a6c23c23581a8076a323c8c14c8bfe94671cc245e90bd1ec1225559b6b70683aadbd198eab5d2fe533a1d65877d2cd7b4b4706f5c1f9ca7d65645b49bf095781e55495e630e245dc55adc882ecf9c762f4fe106c589298b7110cbfab1290daedfaee4bfd9250530809c7f7221f429b076ae9c952575a8f1118b6236a0784d2eb4fce4058aa444248b68a0f49caa8e78df5bb3ccb5e033c519a41a4105ff0355486aa5dde4556c66142307f9ae7e1dd30d701cf9cd84459f70238412c16109d2359c0a6169b453aa66c2e01faffc72713d6069cd57a913908300c19720be4d497d113f6229d9f99a32f48c3130815b5ceba5e13368dc65c20a5bf3d746569b61e8e2dfc6d14abe588375d90a2cf60d3d26eeb4ccd94952eae1d701dad0e29fbf53d58b96504869df17e7d957307d48b1b9b6f0f45dba62cab446bc4a402733dbbaee15a9d6521a3aa66c2d073885f3e860526c14a8146f88ccd2eae61a21ceef10763c11b0eeeafed8454900dad51841c13100d2fd5b95cf3e8ec3e93dee3cf72e79a2f36a81a82bc7b8c2816e388e5c22bf1de1f0208ae5cd809c5d59d33a3791877d6d6a0b57a73cae1da487a28f044fa00f031e46ab7c125dacbb65b80a0785afccc878159d052020d3ee40ec0905f312a6f60ff2f957bca5b7bb28d4973c6aabe06592d5501e6a59c02a706e8e01b1ffe8eedf3b2fe54e911b323a1350d91091f12a0f4c1b7ded65b22c0d64b377924a2e1bba01adc0a3410b4adc6f94bf068b5f213ce898b7012fef674edbf3dc2b286ad219858831a37721d6e31a28b88fa9a334720e14ed5c85f9ef2f44cdb6d48379e19636ac0a4112cefc411a777e549414a1a6502bd9cb096f0fbeda1b0550dc9a9aa26e0dac212d9f0fc7e158b32da2d9eb88c049f8f94be44b566ab5f1bb9ee8ff12f7298e820d7d5e7203b09ca16c0d70e0247e40309a18bb1ce6595987728e32e69386c8b7f898dedd85516ea3345fe82813772c0881dfdeaf9f7870b62234e23e2106ae80925784568e1acdf2d72831aa442774b05d9a4465a75d66882e68a645d6aa79b284aac62973c3c67c67dddd343ba14408568ab9a047e65e592d8bceae54db9b917178739d0736e903acab97c00dbc14939350bb475ed0d21f7058b6ca50791bc7d2b710258c2560ed5a8a84bc031fbb263fb862583e77146e60ed1c00d7c01f49506d4045cab6b6a9a44a4b3c549f3f702a2cebe24e57ae5d1950fdfaf93b0db0cce43ff24e896eeaec72eae31c3d15840a84df8d1093127a1e972795eb8b0e3fa59624729a3670dfd138cf412d21dffaaf14b5e465fc10ef0d80b5955fad4b232b8032ecdbd569cfc3943f21d1826f1e010973a3f5c712afa4075d43cdd2b5aadc7b1dbcec8696fa59259f73e64cde674313c5cce4ea3d7d10c918522529e5054caaf4179feeeeee059bd2a1ad7dd717d0392278b88813768b6aec13efb7c391b501f071ba5f7c0e15f603d43b59fbbc755fb96f960d3a0bba92ab8ab95568ba4b4e898fde8b4b7e0fd5eb9c2a6ed37597fd377ea39dd760d63969cfebe86e5c4161e275a91787a65f8aec582c45bd84fb7c6aa4f93248f0d7c0045cea1532708b64f95b86fd6e39bc3a8de683b04c3d9034231bf62aa48745ce8c706b4de09cb5d167f9a5d912bc2d431925bad8e7942994b57940410af459c2def5fd2772e2c99b55c06be440a503af2715c1397844822b3f0cf7e136466a5e369d2f8db38cbd00d164fcb8e4c5899f901d9db6dbf19f27c17872de4225e3483896ad74dedbe4a185d97d718ba98a91b93cd0755a8f2e07b7ea60f966616c488266287625dfb0af06b7ca173b47d66382ff9b0bc0457183b18fea2b059e33082424eae9da8e13f9b6477a64000123fc3cffb23e15c6549fa420dd351379e6a62bb236942158106e26ab426a0a3f3ea37da5612ff0c4e6fb123a6c0760b5321e393123b7e72efd7f1971ebe235f5ac6f801218fea8d5d136ac483c591cde827304de5faf782ee4b059bf3167080f11ca8a8f90167420451839a660ba3783993953e0f5da1237f179da803ff6eabf4ea4ff23852ca79d1fa58da4280a416a0601aa1040ceea3538c22d8d9656cc12b9453152da4501be118c9df1f81f33035ca1358ba89be68197c39a5bbee3be136ea29965c87d6f7de09a85ebc59e60992a403708ea1ba8760f50e493bfdab929f5ab6a53f8878426e924430c7eecc6ef5f23b740d240b6acc08f409e1671256ec3d28c0a71b9412d91d9c69b21b7e120da3c5e62199743626148b7441fcc231915c947c9300dbbf18132d6df3355d0859a1ab75d5d24c1a5d6d77ccc99d80586ab35f2648b2f645c7eb6deaf7f15edf09857fa497781b8f4146ab67ad387d71ca47e0f3f4d3315002c1c3efd4d08c7ee487b8a66780e72b592379dd2bdf860871e85917036a35f1db45c2ed3b288f7b27f42f1d948c7ad2302090114a186340d9493e82dc09cfc8a696bde23a83aee11d135c59ca0cad1c79f798633cb1adb505665d6e054802010165d3ceaacc9e817d63da8968d3b602919465ae1d0164374484155f84252603aa14e6ddc84f61113883c4899d1ac143137ba994fc563a2407eef414507ae3245c48207b37c58a718a6fc79297f409525cf17b3341cbd517bc283792ee77426616a2933283d762d9f61982f703f65ed6ca097eaa0f66e9db6f92d1a42692d7a3329886756f7af76489ecf6add4e65ad8856350e59138f2711ecd547ac878d480d83c89b93bff6f1bdc2d02035c36e9b256e42c771674747f681b610eb9668c359b0a461f9da2ebd92a547b6b5381dd25c8ccdce0ab5f87e94220f651ad7e19d8e59ae513d7dbe54c670a97247cd38bbe14ac32b1f8ab039ffdc5bc555b314eb26efc92ff6fdf29e6499ba56dcca76b81199f0dd7cd1977926bcd5612dc334d87fde96fa72ec11704985e261a6c73c87990cdecbf4335108da68b99f22dee36a25cdc5ac816ef8770ee1b46ae9e0fe2fda096eedb6a73a7c15cb40523196eece85c0450388d28d568bbbf99c533a9ffa25c24eccf302f6a0233adbec2807c39cc690f3a4698dbd4decdaa07dec931fca3ac26a267dd82d0e4a2b1ad9ec869f834f621cc02010f4bff15e4b376143caefb9564b0cab5fd31007770a9960437f602c684511fac747dce21149137e10681eaa212d60fbd1efa568d897ac41e4ac7a51136b7d4d10a3e906fc1c58dc9c80e5b1e9102934b544db09348fd8bf8ad248d7fd79b06828429e827b66c23d6425da8d5e7d9bedef6e89acfa2b3a9d8019847c7db8c48ff5d959f879beaea9f57057da78dfab9c09201f14dd7e002243b3b6f104eaf2642f2162ea103e563feda0aaf9af5409679c3a58dd74c8a4bf7a010e462746498a708f42525363d6ef7cf707d7cc1b36e39f16019edd11e1dea59aca9b74202b41e9141a286f7365cdd42bf4c4812a4369dd2ffdccdc2bf5759ac5559ebcca2d92d68f35b5369434493d1bc552671550dced72607274c76a2ed56a3c59e289634a218d6271afa68ad8c620ec00c452e6086964fec60f2b9b7c9b8aab48229884689b582834384374faa79224d08611c480dc47b5d5dc33c8d069d49e797a84b"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}, @TCF_EM_META={0x28, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="12ee4b0e062ab52761"]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="188da1d2", @TCF_META_TYPE_VAR]}]}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x88, 0x2, 0x9}, {0x8001, 0x6, 0x0, "f363222a846f"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x12f0, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x40, 0x1, 0x9}, {0x3, 0x7, 0x9, 0x2, 0x0, 0x2, 0x2}}}, @TCF_EM_IPT={0x3c, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}, @TCF_EM_CONTAINER={0xec, 0x1, 0x0, 0x0, {{0x2, 0x0, 0xfff}, "4b4872003bc3bce89a872c4f92b8e426ffc3ccfb25f8c425a795c0a62c0c4d1a0b892bc5955b205d9c690f2c50f25a3897cb788d42e717b699840bb56077134e7c1b20ec27e25571b1f970f30bfa3d7a27b749812cfb2fb9ca60812e84f2f5626185ebd2a65e3d7990db2591588baae90511b84a8f47be22fadd65e871a7c3fefc62a52a74314343cf591610c6cc23e38b26ca4438ff5dc0eb1482e83e55c37f116a39547dccb21a3a825f68fd77210c6a54734f1440fa4e854dc8842c24fd36da0de5e3d495bd2cb4e5defc02f896b041ec3e1558a4afa1010a359a2ae9"}}, @TCF_EM_META={0x88, 0x1, 0x0, 0x0, {{0x852, 0x4, 0x8}, [@TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="f06b2d24"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xd9}, {0x1, 0x3, 0x1}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR='h', @TCF_META_TYPE_VAR="712cc49e", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="cb", @TCF_META_TYPE_VAR="1ab0f827bada97", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="9fec"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x1, 0x1}, {0xc00, 0x2, 0x2}}}]}}, @TCF_EM_META={0x40, 0x1, 0x0, 0x0, {{0x5000, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="a4f6", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="2272e7"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_VAR="fd6796e9"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x391, 0xfe, 0x2}, {0x337c, 0x2, 0x1}}}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x9}, {0x6, 0x326, 0xffff3fae, 0x5}}}, @TCF_EM_CONTAINER={0x100c, 0x1, 0x0, 0x0, {{0xcf, 0x0, 0x1}, "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"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0x5}, {0x41, 0xd01, 0x3c9, 0x1}}}, @TCF_EM_CONTAINER={0x8c, 0x3, 0x0, 0x0, {{0x2, 0x0, 0xe}, "8055a8b07c9b46efec91fc2ea0e9b8a3061a963daa4cab82ccf2558dbacb90c33c40d7325af32f4b3472bd4c1a3c93b3b8fd79ed3af4e4b485b884be8bc210f0d29c19da3ca5fae46066e50b98baaedab122620bd98326ef5e73ef54a04c723d2a723ca690bf9ca8bc94bbabcf12f38a943fe1deb75f20383271789f6e6c"}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0xfff, 0x2, 0x3}, {0x3, 0x1, 0x1, "eb"}}}]}]}, @TCA_BASIC_POLICE={0x470, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x7, 0xabb, 0x5, 0x2, {0x6, 0x2, 0x79, 0x100, 0x0, 0x1}, {0x2, 0x2, 0x1ff, 0x0, 0x226, 0x7}, 0x5, 0x8}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6437, 0x9, 0x401, 0x2000008, 0x7, 0xc, 0x2, 0x83, 0xa, 0x3, 0x6, 0x400, 0x7, 0x0, 0x40, 0xfaec, 0x3, 0x7, 0xdf, 0x1, 0x6, 0x0, 0xaa8c, 0xffff, 0x0, 0x26a2, 0x6, 0x2, 0xffff2512, 0x4fa, 0x7, 0x5, 0x4, 0x8, 0x8, 0x9, 0x2, 0x3850, 0xfe08, 0x2, 0xfff, 0x7, 0x80000001, 0x0, 0xbf02, 0x3, 0x0, 0xfffffff3, 0x1ff, 0x20d5, 0x4, 0x9, 0x8, 0x10001, 0x8, 0x4, 0x54, 0x6e2f8517, 0x6, 0x480000, 0xc, 0x4, 0x7, 0x1, 0x7, 0x0, 0x100, 0x2, 0x5, 0x80000000, 0x3, 0x10, 0x5, 0x8, 0x3, 0xc1eb, 0x1, 0xfffffc00, 0x0, 0x3ff, 0x80, 0x4, 0x8, 0x0, 0x7fff, 0x7, 0x384, 0x6, 0xfffffff9, 0x7f, 0x0, 0x0, 0xffffff2a, 0x1, 0xff, 0x2, 0x6, 0x2, 0x12000, 0x6, 0x4, 0x2, 0x6fac, 0x8, 0x2, 0x0, 0x1ff, 0x8, 0x8, 0x8, 0x0, 0x6, 0x2, 0xffff, 0x2, 0x6, 0x4, 0xb1, 0x80, 0x40, 0x8, 0x2, 0x7fffffff, 0x1dd9, 0x3, 0x8, 0x0, 0x6, 0xfffffffc, 0x6, 0x33, 0x7, 0x8, 0x0, 0xfffffc01, 0x0, 0x8, 0x6, 0xffffffff, 0xa, 0x2, 0x4, 0x74ce9771, 0x5, 0x8, 0x5, 0x8000, 0x7, 0x6, 0xa, 0x3, 0x7ff, 0xe8a, 0x8001, 0x8, 0x10, 0x5, 0x5, 0x5d, 0x80, 0x9, 0xf, 0x7, 0x3, 0x0, 0x27a, 0x4, 0x7, 0x9, 0x2, 0x2, 0x326, 0x133, 0x9, 0x10, 0x9, 0x2, 0x9a6, 0x7, 0x80ea, 0x0, 0x3, 0x2, 0xfffffffb, 0xb149, 0xa25, 0x7, 0x9, 0x7fffffff, 0x8, 0x3, 0x2, 0x8000, 0x3, 0xe, 0xbd, 0xfffffffb, 0x6, 0x80, 0x7fff, 0xfffffffb, 0x7, 0x200, 0x80000001, 0x7f, 0x2, 0x4, 0x80000000, 0xba, 0x4, 0x636, 0x1, 0x2800, 0x4, 0x800, 0x40, 0xb9bc, 0x4, 0x0, 0x4, 0x1, 0xbfa, 0x8, 0x7, 0x9, 0x6, 0x101, 0x8, 0x0, 0x8001, 0xff, 0x8001, 0x200, 0x1, 0x0, 0x923, 0x46, 0x1000, 0x843, 0x7, 0x0, 0x401, 0xc8f, 0x5, 0x8000, 0x5, 0x9, 0xffff, 0xff, 0x8, 0xdc19, 0xc, 0x3, 0x3e6, 0x6f]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc579}]}, @TCA_BASIC_EMATCHES={0xa0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x20, 0x2, 0x75b}, {0xf, 0x6, 0x0, "eaa8bf67a8fa"}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xb999}, {0x7, 0xa, 0x1, "6beaeb0dd38b754e42a7"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x48, 0x1, 0x0, 0x0, {{0xf031, 0x0, 0xfffe}, "c154a878aa53354c9718e74fe35184b3d80c1fc13ec299d2acc3d9e14d55f81b645c99f015f71aa4c2fbcb155081cab1fef1c02d23b7c67b06341644"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}]}]}}, @TCA_RATE={0x6, 0x5, {0x30, 0xf}}]}, 0x2a2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_route_sched(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x48, 0x30, 0x1, 0xfffffffd, 0x0, {0x7a}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x48}}, 0x80) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010004b04bd7000fcdbdf257a000d0000", @ANYRES32=0x0, @ANYBLOB="0010000020900000400012800b0001006272696467650000300002800c0023000100000000000080050016000000000008001b004b0f00000500250001000000050024"], 0x60}}, 0x0) 316.478563ms ago: executing program 2 (id=3874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x3, 0x80000, 0x2) r2 = socket$unix(0x1, 0x5, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x80000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0xa}, {0xfffa, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000002c0)={0x3c, 0x14, '\x00', [@ra={0x5, 0x2, 0x3}, @generic={0x3, 0x86, "50aa7d363fad0b67a4b3cd3b4d65ad1eca029b01834445dfcdf70d11508976535379efa3cd317c46898ef682ac0e959776805fc06678af4b500b47eed540727156a6464dccae279b31cc3d7d6ff6857b5b6c2523caf253e82e4ae60606fa4716f1c68e0462758b5deea91566f325a47c0fb2ba19d31fc8cdb654bb40876c77f8e39ce977ad15"}, @jumbo={0xc2, 0x4, 0x3}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xffffffff}, @enc_lim={0x4, 0x1, 0x8}]}, 0xb0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a3100000000090001"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 194.864734ms ago: executing program 1 (id=3875): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000096000a000200aaaaaaaaaa0c"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (fail_nth: 10) 184.22269ms ago: executing program 1 (id=3876): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x50da90) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) r3 = socket(0x10, 0x80003, 0x0) (async, rerun: 64) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="3a03000000000100c204000000e9010100"/40], 0x28) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008810) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async) ioctl$SIOCPNADDRESOURCE(r3, 0x89e0, &(0x7f00000001c0)=0x4) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000400)={0x7, 0x2, 0xffffffff, 0x4}, &(0x7f0000000540)=0x10) (rerun: 64) 151.23685ms ago: executing program 2 (id=3877): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000e80)={@in={{0x2, 0x0, @private=0xa010100}}, 0x0, 0x0, 0x22, 0x0, "70a59b8ef73b52114bf0854b6d184de8fb2add2d2bb9149a8c9b8ad1ff7568565a98f80146847b0c6c4698efb8d42bed462e33eef5219090f01c40a3103cf5a30f2c0cdc339b7665ca4fe3c1d75e3fda"}, 0xd8) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) splice(r4, 0x0, r5, 0x0, 0x1, 0x0) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, 0x0) write(r3, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000011c0)={0x0, 0x1c, &(0x7f0000001180)=[@in6={0xa, 0x4e23, 0x7, @mcast2, 0x3}]}, &(0x7f0000000180)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="19000000040000000400", @ANYRES8, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r8, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) syz_open_procfs$namespace(0x0, &(0x7f0000001040)='ns/time\x00') r9 = socket(0x10, 0x2, 0x0) write(r9, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r9, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r11, 0xffffffffffffffff, 0x6, 0x0, @void}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 90.890071ms ago: executing program 4 (id=3878): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2721, 0x0, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c810}, 0x4040000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a0000000000000000070000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000b95000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x40) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) unshare(0x400) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32, @ANYBLOB="100001", @ANYRESOCT], 0x28}}, 0x0) write$tun(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="016f0800010027000000270000004600802900000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000009078002809c400050200000000000007000002d5f5a04f18e94fa121747f1f26568269e11b1f6db2f711765fc4151b145741a11d1af0bc92051d503d1cc3491c14b400efc15b2efac59e5c307f9d930de6e3ed8f23730e71c009fd5c8f10c8e486a9"], 0xfd6c) sendmsg$nl_route(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x70bd2a, 0x25dfdbfb, {0xa, 0x0, 0x18, 0x0, 0x0, 0xd06d}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}}, 0x4810) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) unshare(0x24000000) r8 = accept4(r4, 0x0, 0x0, 0x0) sendto$packet(r8, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee03a879c0779591813076fe8893e54bae6115825fd42b9c850ae09a0c9138676ef04e8706ec6057fc878302be3a1b9f7bf9805a3eac79cf2fcc0637e8b799b59439dae06bbca57a1254d8f17267776053f23801b92d20f12402acde62c60df22c4cf3bc5d7318e17650b88abedef3dcea88d3", 0x2a, 0x0, 0x0, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_buf(r9, 0x1, 0x47, 0x0, &(0x7f0000000000)=0xe) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000000)=@req3={0xd, 0x1, 0x32b, 0xc735, 0x7, 0xfffffff8, 0x9f7}, 0x1c) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000240)=@req3={0x5, 0x3, 0x0, 0x2, 0x6, 0x8, 0x10000}, 0x1c) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00v\x00\r\v'], 0x20}, 0x1, 0x0, 0x0, 0x30008000}, 0x0) 0s ago: executing program 4 (id=3879): sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="00012abd7000fddbdf250c00000005002f000100000005003000", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x7ffffffe}]}, 0x20}}, 0x0) r3 = epoll_create(0x6) epoll_pwait(r3, &(0x7f00000001c0)=[{}, {}, {}], 0x3, 0x210, &(0x7f0000000100)={[0x2]}, 0x8) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454ca, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x3}, @random="ff1e9af46090", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x45, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @loopback, @loopback}}}}}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000180)={0x40000000}) write$tun(r5, &(0x7f00000002c0)={@val={0x0, 0x88b5}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x2f, 0x0, @private=0x1fe1, @local}, {0xa000, 0x86dd, 0x8}}}}}}, 0x2e) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r9, 0x6, 0x3, &(0x7f0000000880)=0x3f, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0xc, 0xffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x200, r10}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000000000018110020", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x21, @none}, 0xe) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x777}]}}}]}, 0x40}}, 0x240080c0) kernel console output (not intermixed with test programs): ed promiscuous mode [ 364.230777][T15632] veth1_vlan: entered promiscuous mode [ 364.290212][T15632] veth0_macvtap: entered promiscuous mode [ 364.303422][T15632] veth1_macvtap: entered promiscuous mode [ 364.332294][T15775] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (144) [ 364.433473][T15769] 8021q: adding VLAN 0 to HW filter on device bond4 [ 364.441482][T15769] bond0: (slave bond4): Enslaving as an active interface with an up link [ 364.459295][T15632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.559110][T15632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.573370][ T9881] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.582466][ T9881] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.595320][ T9881] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.605577][ T9881] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.664201][ T9879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.678179][ T9879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.700065][ T9881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.714163][ T9881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.953251][T15794] erspan0: entered promiscuous mode [ 364.964088][T15794] erspan0: left promiscuous mode [ 364.994066][T15796] netlink: 'syz.1.2642': attribute type 42 has an invalid length. [ 365.198935][T15803] wg1 speed is unknown, defaulting to 1000 [ 365.209484][T15803] lo speed is unknown, defaulting to 1000 [ 365.277293][T15818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.317759][T15818] __nla_validate_parse: 17 callbacks suppressed [ 365.317781][T15818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2647'. [ 365.440922][T15826] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 365.562354][T15832] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 365.829629][T15843] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2655'. [ 365.841175][ T9883] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 365.850408][T15841] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2655'. [ 366.181604][T15866] netlink: 'syz.5.2659': attribute type 11 has an invalid length. [ 366.244564][T15868] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2660'. [ 366.272123][T15866] lo: entered allmulticast mode [ 366.278452][T15866] lo: left allmulticast mode [ 366.284791][T15866] netlink: 'syz.5.2659': attribute type 11 has an invalid length. [ 366.337109][ T5997] IPVS: starting estimator thread 0... [ 366.396495][T15878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2660'. [ 366.455974][T15879] IPVS: using max 37 ests per chain, 88800 per kthread [ 366.484631][T15888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2666'. [ 366.496574][T15888] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2666'. [ 366.511357][T15888] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 366.522439][T15888] gretap1: entered promiscuous mode [ 366.571324][T15892] netlink: 212316 bytes leftover after parsing attributes in process `syz.3.2667'. [ 366.718907][T15899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2669'. [ 366.779715][ T30] audit: type=1800 audit(1756461433.643:4): pid=15898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2668" name="memory.events" dev="tmpfs" ino=1554 res=0 errno=0 [ 366.882828][T15903] syzkaller0: entered promiscuous mode [ 366.888629][T15903] syzkaller0: entered allmulticast mode [ 366.928219][T15903] netlink: 'syz.3.2670': attribute type 10 has an invalid length. [ 367.201675][T15912] pim6reg1: entered promiscuous mode [ 367.212224][T15912] pim6reg1: entered allmulticast mode [ 367.282147][T15918] lo: entered allmulticast mode [ 367.291423][T15918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2676'. [ 367.307984][T15918] dvmrp1: entered allmulticast mode [ 367.314969][T15916] lo: left allmulticast mode [ 367.329832][T15912] syzkaller0: left promiscuous mode [ 367.335282][T15912] syzkaller0: left allmulticast mode [ 367.360442][T15912] bond9 (unregistering): Released all slaves [ 367.405522][T15923] 8021q: adding VLAN 0 to HW filter on device bond13 [ 367.535332][T15931] tipc: Enabled bearer , priority 0 [ 367.542938][T15931] syzkaller0: entered promiscuous mode [ 367.548792][T15931] syzkaller0: entered allmulticast mode [ 367.563432][T15931] tipc: Resetting bearer [ 367.591625][T15930] tipc: Resetting bearer [ 367.613210][T15930] tipc: Disabling bearer [ 367.866000][T15961] syzkaller1: entered promiscuous mode [ 367.874594][T15961] syzkaller1: entered allmulticast mode [ 367.947973][T15964] wg1 speed is unknown, defaulting to 1000 [ 367.952951][T15969] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20004 [ 367.959717][T15964] lo speed is unknown, defaulting to 1000 [ 367.962470][T15969] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20004 [ 368.026976][T15973] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:20003 [ 368.208585][T15980] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 368.434447][T16004] netlink: 'syz.2.2700': attribute type 1 has an invalid length. [ 368.434968][T16005] netlink: 'syz.2.2700': attribute type 1 has an invalid length. [ 368.474596][T16003] bond14: (slave geneve5): making interface the new active one [ 368.486093][T16003] bond14: (slave geneve5): Enslaving as an active interface with an up link [ 368.494929][ T9884] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 368.506392][T16004] IPv6: Can't replace route, no match found [ 368.512534][T16003] IPv6: Can't replace route, no match found [ 368.519230][ T9884] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 368.529802][ T9884] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 368.539472][ T9884] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 368.599029][T16012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.710321][T16021] wg1 speed is unknown, defaulting to 1000 [ 368.733190][T16021] lo speed is unknown, defaulting to 1000 [ 368.940760][T16035] tipc: Started in network mode [ 368.946010][T16035] tipc: Node identity 7, cluster identity 4711 [ 368.969685][T16035] tipc: Node number set to 7 [ 369.182946][T16053] openvswitch: netlink: IPv4 tunnel dst address is zero [ 369.362809][T16070] netlink: 'syz.2.2713': attribute type 1 has an invalid length. [ 369.370897][T16070] netlink: 'syz.2.2713': attribute type 2 has an invalid length. [ 369.458597][T16081] netlink: 'syz.1.2716': attribute type 1 has an invalid length. [ 369.472042][T16081] netlink: 'syz.1.2716': attribute type 1 has an invalid length. [ 369.657775][T16090] Bluetooth: MGMT ver 1.23 [ 369.715911][T16088] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 369.881999][T16098] netlink: 'syz.4.2724': attribute type 4 has an invalid length. [ 369.890772][T16098] netlink: 'syz.4.2724': attribute type 4 has an invalid length. [ 369.959264][T16101] 0ªX¹¦À: renamed from caif0 [ 369.974498][T16101] 0ªX¹¦À: entered allmulticast mode [ 369.983501][T16101] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 370.014034][T16095] wg1 speed is unknown, defaulting to 1000 [ 370.023785][T16095] lo speed is unknown, defaulting to 1000 [ 370.226384][ T5868] Bluetooth: hci0: command tx timeout [ 370.379800][T16130] __nla_validate_parse: 11 callbacks suppressed [ 370.379821][T16130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2734'. [ 370.385972][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 370.395840][T16130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2734'. [ 370.428149][T16130] netlink: 'syz.4.2734': attribute type 1 has an invalid length. [ 370.437957][T16130] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2734'. [ 370.519364][ T5868] block nbd1: Receive control failed (result -107) [ 370.540072][T16141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2736'. [ 370.541724][T16125] wg1 speed is unknown, defaulting to 1000 [ 370.587506][T16125] lo speed is unknown, defaulting to 1000 [ 370.619310][T16144] netlink: 'syz.4.2738': attribute type 7 has an invalid length. [ 370.640561][T16145] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2737'. [ 370.846939][T16164] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2743'. [ 370.865163][T16163] wg1 speed is unknown, defaulting to 1000 [ 370.993456][T16163] lo speed is unknown, defaulting to 1000 [ 371.424139][T16192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2751'. [ 371.493611][ T5867] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 371.502203][ T5867] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 371.512112][ T5867] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 371.522512][ T5867] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 371.531985][ T5867] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 371.603493][T16193] wg1 speed is unknown, defaulting to 1000 [ 371.610358][T16193] lo speed is unknown, defaulting to 1000 [ 371.666087][ T95] block nbd0: Possible stuck request ffff8880256b5080: control (read@0,1024B). Runtime 120 seconds [ 371.677104][ T95] block nbd0: Possible stuck request ffff8880256b5240: control (read@1024,1024B). Runtime 120 seconds [ 371.688328][ T95] block nbd0: Possible stuck request ffff8880256b5400: control (read@2048,1024B). Runtime 120 seconds [ 371.699457][ T95] block nbd0: Possible stuck request ffff8880256b55c0: control (read@3072,1024B). Runtime 120 seconds [ 372.090575][T16193] chnl_net:caif_netlink_parms(): no params data found [ 372.310356][T16193] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.323321][T16193] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.337967][T16193] bridge_slave_0: entered allmulticast mode [ 372.352108][T16193] bridge_slave_0: entered promiscuous mode [ 372.360477][T16193] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.367836][T16193] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.375113][T16193] bridge_slave_1: entered allmulticast mode [ 372.382586][T16193] bridge_slave_1: entered promiscuous mode [ 372.399025][T16218] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2759'. [ 372.442913][T16220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2755'. [ 372.475125][T16193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.508473][T16193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.530869][T16216] wg1 speed is unknown, defaulting to 1000 [ 372.531023][T16228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2755'. [ 372.594125][T16193] team0: Port device team_slave_0 added [ 372.600122][T16216] lo speed is unknown, defaulting to 1000 [ 372.606675][ T9884] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.615453][ T9884] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.631618][T16193] team0: Port device team_slave_1 added [ 372.653404][ T9884] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.825955][ T9884] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.835422][T16193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.842465][T16193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.870215][T16193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.886705][T16193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.894057][T16193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.920975][T16193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.108511][T16193] hsr_slave_0: entered promiscuous mode [ 373.117229][T16193] hsr_slave_1: entered promiscuous mode [ 373.123638][T16193] debugfs: 'hsr0' already exists in 'hsr' [ 373.137963][T16193] Cannot create hsr debugfs directory [ 373.236165][T16267] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.243677][T16267] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.339776][T16267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.354385][T16267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.464190][T16267] gretap1: left promiscuous mode [ 373.477876][T16271] validate_nla: 1 callbacks suppressed [ 373.477894][T16271] netlink: 'syz.5.2774': attribute type 13 has an invalid length. [ 373.530560][ T9876] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.567027][ T9876] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.586898][ T5867] Bluetooth: hci5: command tx timeout [ 373.669462][ T9876] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.693542][ T9876] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.716597][ T9876] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.725547][ T9876] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.761111][T16294] nbd: must specify at least one socket [ 373.820024][ T9876] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.833896][ T30] audit: type=1800 audit(1756461440.693:5): pid=16294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2780" name="memory.events" dev="tmpfs" ino=2702 res=0 errno=0 [ 373.837919][ T9876] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.963142][T16193] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.050322][T16193] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.089573][T16310] veth0: entered promiscuous mode [ 374.106775][T16309] veth0: left promiscuous mode [ 374.133913][T16193] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.210285][T16314] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 374.278369][T16193] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.373165][T16328] 8021q: adding VLAN 0 to HW filter on device bond15 [ 374.424470][T16332] wg1 speed is unknown, defaulting to 1000 [ 374.431710][T16332] lo speed is unknown, defaulting to 1000 [ 374.529837][T16193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 374.559009][T16193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 374.573187][T16193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 374.586340][T16335] netlink: 'syz.2.2794': attribute type 13 has an invalid length. [ 374.624990][T16335] wg1 speed is unknown, defaulting to 1000 [ 374.633475][T16193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 374.647338][T16335] lo speed is unknown, defaulting to 1000 [ 375.089092][T16193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.145420][T16341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.223264][T16193] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.251871][ T9881] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.259089][ T9881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.292508][ T9879] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.299716][ T9879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.610489][T16373] netlink: 'syz.4.2801': attribute type 5 has an invalid length. [ 375.659306][T16373] __nla_validate_parse: 10 callbacks suppressed [ 375.659326][T16373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2801'. [ 375.674578][ T5867] Bluetooth: hci5: command tx timeout [ 375.741463][T16193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.797269][T16383] vxcan1: MTU too low for tipc bearer [ 375.810025][T16383] tipc: Enabling of bearer rejected, failed to enable media [ 375.834338][T16193] veth0_vlan: entered promiscuous mode [ 375.874898][T16385] tipc: Enabled bearer , priority 0 [ 375.907844][T16385] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 375.915290][T16385] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 375.959487][T16193] veth1_vlan: entered promiscuous mode [ 376.039646][T16193] veth0_macvtap: entered promiscuous mode [ 376.063669][T16193] veth1_macvtap: entered promiscuous mode [ 376.150286][T16193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.180480][T16416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2812'. [ 376.198402][T16193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.217807][T16419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2812'. [ 376.233620][ T9880] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.266836][ T9880] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.310523][T16422] tipc: Enabling of bearer rejected, failed to enable media [ 376.347967][ T9880] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.368370][ T9880] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.383473][T16432] netlink: 'syz.3.2814': attribute type 3 has an invalid length. [ 376.398781][T16428] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 376.416163][T16428] syzkaller1: linktype set to 778 [ 376.453520][T16435] netlink: 'syz.2.2815': attribute type 1 has an invalid length. [ 376.498679][T16435] 8021q: adding VLAN 0 to HW filter on device bond16 [ 376.526202][ T9880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.548501][ T9880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.562134][T16435] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 376.588091][ T9880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.619138][ T9880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.675673][T16448] wg1 speed is unknown, defaulting to 1000 [ 376.807865][T16446] wg1 speed is unknown, defaulting to 1000 [ 376.813939][T16448] lo speed is unknown, defaulting to 1000 [ 376.927855][T16446] lo speed is unknown, defaulting to 1000 [ 377.175424][T16469] wg1 speed is unknown, defaulting to 1000 [ 377.182668][T16469] lo speed is unknown, defaulting to 1000 [ 377.392930][T16476] wg1 speed is unknown, defaulting to 1000 [ 377.421797][T16476] lo speed is unknown, defaulting to 1000 [ 377.453790][T16484] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2828'. [ 377.582706][T16488] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 377.748653][ T5867] Bluetooth: hci5: command tx timeout [ 377.759763][T16496] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 377.832268][T16500] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2831'. [ 377.868448][T16506] delete_channel: no stack [ 377.933196][T16504] wg1 speed is unknown, defaulting to 1000 [ 377.940358][T16504] lo speed is unknown, defaulting to 1000 [ 378.074137][T16519] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 378.119730][T16519] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 378.170730][T16519] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 378.209761][T16519] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 378.266816][T16524] veth2: entered allmulticast mode [ 378.288482][ T9879] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 378.302710][ T9883] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 378.322105][ T9879] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 378.340674][ T9880] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 378.550610][T16539] wg1 speed is unknown, defaulting to 1000 [ 378.566942][T16539] lo speed is unknown, defaulting to 1000 [ 378.666104][T16546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2847'. [ 378.723631][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.807840][T16549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2850'. [ 378.828393][T16549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2850'. [ 378.873486][T16552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2849'. [ 378.944486][T16552] bridge_slave_1: left allmulticast mode [ 378.972109][T16552] bridge_slave_1: left promiscuous mode [ 378.996656][T16552] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.053739][T16552] bridge_slave_0: left allmulticast mode [ 379.070834][T16552] bridge_slave_0: left promiscuous mode [ 379.083080][T16552] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.379881][T16581] FAULT_INJECTION: forcing a failure. [ 379.379881][T16581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.446082][T16581] CPU: 0 UID: 0 PID: 16581 Comm: syz.5.2859 Not tainted syzkaller #0 PREEMPT(full) [ 379.446113][T16581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 379.446130][T16581] Call Trace: [ 379.446139][T16581] [ 379.446148][T16581] dump_stack_lvl+0x189/0x250 [ 379.446178][T16581] ? __pfx____ratelimit+0x10/0x10 [ 379.446208][T16581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.446231][T16581] ? __pfx__printk+0x10/0x10 [ 379.446263][T16581] ? rcu_is_watching+0x15/0xb0 [ 379.446284][T16581] should_fail_ex+0x414/0x560 [ 379.446313][T16581] _copy_to_user+0x31/0xb0 [ 379.446338][T16581] simple_read_from_buffer+0xe1/0x170 [ 379.446370][T16581] proc_fail_nth_read+0x1b3/0x220 [ 379.446395][T16581] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 379.446419][T16581] ? rw_verify_area+0x2a6/0x4d0 [ 379.446444][T16581] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 379.446467][T16581] vfs_read+0x1fd/0xa30 [ 379.446492][T16581] ? fdget_pos+0x247/0x320 [ 379.446511][T16581] ? __pfx___mutex_lock+0x10/0x10 [ 379.446530][T16581] ? __pfx_vfs_read+0x10/0x10 [ 379.446561][T16581] ? __fget_files+0x3a0/0x420 [ 379.446577][T16581] ? __fget_files+0x2a/0x420 [ 379.446599][T16581] ksys_read+0x145/0x250 [ 379.446626][T16581] ? __pfx_ksys_read+0x10/0x10 [ 379.446655][T16581] ? rcu_is_watching+0x15/0xb0 [ 379.446676][T16581] do_syscall_64+0xfa/0x3b0 [ 379.446695][T16581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.446714][T16581] ? clear_bhb_loop+0x60/0xb0 [ 379.446738][T16581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.446762][T16581] RIP: 0033:0x7f6ba578d5fc [ 379.446780][T16581] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 379.446798][T16581] RSP: 002b:00007f6ba65c2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 379.446819][T16581] RAX: ffffffffffffffda RBX: 00007f6ba59b5fa0 RCX: 00007f6ba578d5fc [ 379.446835][T16581] RDX: 000000000000000f RSI: 00007f6ba65c20a0 RDI: 0000000000000005 [ 379.446847][T16581] RBP: 00007f6ba65c2090 R08: 0000000000000000 R09: 0000000000000000 [ 379.446860][T16581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.446872][T16581] R13: 00007f6ba59b6038 R14: 00007f6ba59b5fa0 R15: 00007ffd065820d8 [ 379.446896][T16581] [ 379.773961][T16576] macvlan2: entered allmulticast mode [ 379.780690][T16576] veth1_vlan: entered allmulticast mode [ 379.797918][T16576] veth1_vlan: left allmulticast mode [ 379.824007][T16585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2862'. [ 379.841829][ T5867] Bluetooth: hci5: command tx timeout [ 379.883408][T16593] openvswitch: netlink: Multiple metadata blocks provided [ 379.984074][T16591] wg1 speed is unknown, defaulting to 1000 [ 380.017177][T16591] lo speed is unknown, defaulting to 1000 [ 380.939191][T16638] wg1 speed is unknown, defaulting to 1000 [ 381.015000][T16638] lo speed is unknown, defaulting to 1000 [ 381.056616][T16643] tipc: Enabled bearer , priority 0 [ 381.080725][T16643] syzkaller0: entered promiscuous mode [ 381.087541][T16643] syzkaller0: entered allmulticast mode [ 381.110177][T16643] tipc: Resetting bearer [ 381.124427][T16642] tipc: Resetting bearer [ 381.133795][T16642] tipc: Disabling bearer [ 381.184095][T16655] sock: sock_timestamping_bind_phc: sock not bind to device [ 381.352448][T16664] __nla_validate_parse: 1 callbacks suppressed [ 381.352470][T16664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2884'. [ 381.368204][T16664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2884'. [ 381.377530][T16664] netlink: 'syz.2.2884': attribute type 18 has an invalid length. [ 381.451478][T16668] tipc: Enabled bearer , priority 0 [ 381.461455][T16668] syzkaller0: entered promiscuous mode [ 381.470399][T16668] syzkaller0: entered allmulticast mode [ 381.488220][T16668] tipc: Resetting bearer [ 381.513292][T16665] tipc: Resetting bearer [ 381.566591][T16665] tipc: Disabling bearer [ 381.914700][T16698] tipc: Started in network mode [ 381.924758][T16698] tipc: Node identity 4e2cc9c1fecd, cluster identity 4711 [ 381.939065][T16698] tipc: Enabled bearer , priority 0 [ 381.962921][T16698] syzkaller0: entered promiscuous mode [ 381.968659][T16698] syzkaller0: entered allmulticast mode [ 381.992904][T16698] tipc: Resetting bearer [ 381.999565][T16708] bond0: default FDB implementation only supports local addresses [ 382.123527][T16720] vlan2: entered allmulticast mode [ 382.135343][T16720] veth1: entered allmulticast mode [ 382.142205][T16720] batman_adv: batadv0: Adding interface: vlan2 [ 382.154171][T16720] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.183585][T16720] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 382.352110][T16732] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 382.432850][T16736] macvtap1: entered promiscuous mode [ 382.438518][T16736] mac80211_hwsim hwsim29 wlan1: entered promiscuous mode [ 382.449234][T16736] mac80211_hwsim hwsim29 wlan1: left promiscuous mode [ 382.579334][T16742] wg1 speed is unknown, defaulting to 1000 [ 382.588235][T16742] lo speed is unknown, defaulting to 1000 [ 382.976067][ T9603] tipc: Node number set to 2967587265 [ 382.999504][T16759] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2914'. [ 383.231981][T16771] netlink: 'syz.4.2918': attribute type 83 has an invalid length. [ 383.358293][ T5868] Bluetooth: hci5: command 0x0405 tx timeout [ 383.495398][T16785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 383.505075][T16777] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 383.709758][T16803] netlink: 'syz.2.2925': attribute type 39 has an invalid length. [ 383.815383][T16820] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2927'. [ 383.833814][T16821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2929'. [ 383.859927][T16821] veth0_to_team: entered promiscuous mode [ 383.871571][T16821] veth0_to_team: entered allmulticast mode [ 383.923397][T16824] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2931'. [ 383.935118][T16824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2931'. [ 383.952151][T16824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.153084][T16840] netlink: 'syz.1.2935': attribute type 12 has an invalid length. [ 384.216912][T16844] netlink: 'syz.2.2936': attribute type 1 has an invalid length. [ 384.276826][T16846] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2937'. [ 384.332914][T16849] wg1 speed is unknown, defaulting to 1000 [ 384.344206][T16849] lo speed is unknown, defaulting to 1000 [ 384.348885][T16852] tipc: Enabling of bearer rejected, already enabled [ 384.442373][T16856] tipc: Enabling of bearer rejected, already enabled [ 384.467606][T16856] xt_policy: too many policy elements [ 384.561167][T16863] syz.5.2943: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 384.599442][T16863] CPU: 0 UID: 0 PID: 16863 Comm: syz.5.2943 Not tainted syzkaller #0 PREEMPT(full) [ 384.599473][T16863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 384.599485][T16863] Call Trace: [ 384.599493][T16863] [ 384.599501][T16863] dump_stack_lvl+0x189/0x250 [ 384.599542][T16863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.599568][T16863] ? __pfx__printk+0x10/0x10 [ 384.599594][T16863] ? lock_release+0x4b/0x3e0 [ 384.599626][T16863] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 384.599651][T16863] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 384.599677][T16863] warn_alloc+0x214/0x310 [ 384.599710][T16863] ? stack_depot_save_flags+0x40/0x860 [ 384.599740][T16863] ? __pfx_warn_alloc+0x10/0x10 [ 384.599772][T16863] ? kasan_save_track+0x4f/0x80 [ 384.599798][T16863] ? xskq_create+0x56/0x170 [ 384.599826][T16863] ? xsk_init_queue+0xb0/0x110 [ 384.599855][T16863] ? xsk_setsockopt+0x4dc/0x8d0 [ 384.599880][T16863] ? do_sock_setsockopt+0x179/0x1b0 [ 384.599900][T16863] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 384.599921][T16863] ? do_syscall_64+0xfa/0x3b0 [ 384.599940][T16863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.599967][T16863] __vmalloc_node_range_noprof+0x125/0x12f0 [ 384.600017][T16863] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 384.600049][T16863] ? xskq_create+0x56/0x170 [ 384.600081][T16863] ? __kasan_kmalloc+0x93/0xb0 [ 384.600130][T16863] vmalloc_user_noprof+0xad/0xf0 [ 384.600161][T16863] ? xskq_create+0xbf/0x170 [ 384.600191][T16863] xskq_create+0xbf/0x170 [ 384.600224][T16863] xsk_init_queue+0xb0/0x110 [ 384.600255][T16863] xsk_setsockopt+0x4dc/0x8d0 [ 384.600285][T16863] ? __pfx_xsk_setsockopt+0x10/0x10 [ 384.600313][T16863] ? __pfx_aa_sk_perm+0x10/0x10 [ 384.600344][T16863] ? lock_release+0x4b/0x3e0 [ 384.600373][T16863] ? lock_acquire+0x5f/0x360 [ 384.600404][T16863] ? aa_sock_opt_perm+0xff/0x1b0 [ 384.600425][T16863] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 384.600448][T16863] ? __pfx_xsk_setsockopt+0x10/0x10 [ 384.600478][T16863] do_sock_setsockopt+0x179/0x1b0 [ 384.600501][T16863] __x64_sys_setsockopt+0x13f/0x1b0 [ 384.600527][T16863] do_syscall_64+0xfa/0x3b0 [ 384.600555][T16863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.600576][T16863] ? clear_bhb_loop+0x60/0xb0 [ 384.600601][T16863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.600622][T16863] RIP: 0033:0x7f6ba578ebe9 [ 384.600641][T16863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.600662][T16863] RSP: 002b:00007f6ba65c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 384.600686][T16863] RAX: ffffffffffffffda RBX: 00007f6ba59b5fa0 RCX: 00007f6ba578ebe9 [ 384.600702][T16863] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 384.600715][T16863] RBP: 00007f6ba5811e19 R08: 0000000000000004 R09: 0000000000000000 [ 384.600729][T16863] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.600742][T16863] R13: 00007f6ba59b6038 R14: 00007f6ba59b5fa0 R15: 00007ffd065820d8 [ 384.600767][T16863] [ 384.600786][T16863] Mem-Info: [ 384.832662][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2945'. [ 384.835145][T16863] active_anon:10836 inactive_anon:0 isolated_anon:0 [ 384.835145][T16863] active_file:3543 inactive_file:39980 isolated_file:0 [ 384.835145][T16863] unevictable:768 dirty:230 writeback:0 [ 384.835145][T16863] slab_reclaimable:12754 slab_unreclaimable:176614 [ 384.835145][T16863] mapped:32349 shmem:4218 pagetables:1143 [ 384.835145][T16863] sec_pagetables:0 bounce:0 [ 384.835145][T16863] kernel_misc_reclaimable:0 [ 384.835145][T16863] free:1235331 free_pcp:18238 free_cma:0 [ 384.970344][T16870] netlink: 452 bytes leftover after parsing attributes in process `syz.3.2945'. [ 385.033191][T16863] Node 0 active_anon:43336kB inactive_anon:0kB active_file:14172kB inactive_file:159724kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117800kB dirty:1020kB writeback:0kB shmem:15436kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14480kB pagetables:4168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 385.183764][T16863] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 385.365164][T16863] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 385.471464][T16885] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 385.513881][T16863] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 385.557345][T16863] Node 0 DMA32 free:1039284kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31588kB inactive_anon:0kB active_file:14172kB inactive_file:158156kB unevictable:1536kB writepending:1020kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:60596kB local_pcp:22936kB free_cma:0kB [ 385.623280][T16863] lowmem_reserve[]: 0 0 1 1 1 [ 385.629000][T16863] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 385.662225][T16894] tipc: Enabling of bearer rejected, already enabled [ 385.662663][T16863] lowmem_reserve[]: 0 0 0 0 0 [ 385.684019][T16863] Node 1 Normal free:3891876kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17696kB local_pcp:11392kB free_cma:0kB [ 385.720297][T16863] lowmem_reserve[]: 0 0 0 0 0 [ 385.754403][T16863] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 385.769177][T16863] Node 0 DMA32: 771*4kB (UM) 234*8kB (ME) 120*16kB (ME) 154*32kB (ME) 93*64kB (UM) 78*128kB (UME) 67*256kB (UME) 22*512kB (UME) 54*1024kB (UM) 9*2048kB (UME) 222*4096kB (M) = 1039196kB [ 385.790186][T16863] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 385.802776][T16863] Node 1 Normal: 201*4kB (UME) 58*8kB (UME) 47*16kB (UME) 142*32kB (UME) 40*64kB (UME) 10*128kB (UME) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 946*4096kB (ME) = 3891876kB [ 385.822993][T16863] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 385.833472][T16863] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 385.842931][T16863] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 385.852962][T16863] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 385.862441][T16863] 44913 total pagecache pages [ 385.867619][T16863] 0 pages in swap cache [ 385.871804][T16863] Free swap = 124996kB [ 385.876462][T16863] Total swap = 124996kB [ 385.880750][T16863] 2097051 pages RAM [ 385.884577][T16863] 0 pages HighMem/MovableOnly [ 385.889401][T16863] 425667 pages reserved [ 385.893672][T16863] 0 pages cma reserved [ 385.915963][T16906] !: renamed from dummy0 [ 385.994336][T16912] openvswitch: netlink: Flow actions attr not present in new flow. [ 386.028705][T16915] batadv0: entered promiscuous mode [ 386.060100][T16915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.664395][T16934] syzkaller1: entered promiscuous mode [ 386.674149][T16934] syzkaller1: entered allmulticast mode [ 386.685663][T16938] __nla_validate_parse: 7 callbacks suppressed [ 386.685683][T16938] netlink: 248 bytes leftover after parsing attributes in process `syz.5.2965'. [ 386.754995][T16934] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2963'. [ 386.764858][T16937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2964'. [ 386.838129][T16942] syzkaller1: left promiscuous mode [ 386.843390][T16942] syzkaller1: left allmulticast mode [ 386.986441][T16947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2966'. [ 387.212063][T16954] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2968'. [ 387.494461][T16973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.519620][T16973] ipvlan2: entered promiscuous mode [ 387.798216][T16984] wg1 speed is unknown, defaulting to 1000 [ 387.805007][T16984] lo speed is unknown, defaulting to 1000 [ 388.184439][T17004] tipc: Enabling of bearer rejected, already enabled [ 388.304908][T17004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2983'. [ 388.324702][T17004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2983'. [ 388.357341][T17011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2985'. [ 388.464357][T17016] wg1 speed is unknown, defaulting to 1000 [ 388.472333][T17016] lo speed is unknown, defaulting to 1000 [ 388.797710][T17030] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2988'. [ 389.244338][T17042] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 389.643465][T17064] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2996'. [ 390.164921][T17088] sock: sock_timestamping_bind_phc: sock not bind to device [ 390.404444][T17099] netlink: 'syz.3.3008': attribute type 4 has an invalid length. [ 390.563243][T17111] pim6reg: entered allmulticast mode [ 390.591432][T17102] wg1 speed is unknown, defaulting to 1000 [ 390.690708][T17102] lo speed is unknown, defaulting to 1000 [ 390.694062][T17111] pim6reg: left allmulticast mode [ 390.894195][T17120] syzkaller1: entered allmulticast mode [ 390.921929][T17125] wg1 speed is unknown, defaulting to 1000 [ 390.932803][T17125] lo speed is unknown, defaulting to 1000 [ 391.287837][T17136] netlink: 'syz.3.3017': attribute type 2 has an invalid length. [ 391.701499][T17149] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input9 [ 391.709979][T17150] __nla_validate_parse: 8 callbacks suppressed [ 391.710001][T17150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3021'. [ 391.740272][T17150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3021'. [ 392.226071][T17175] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3031'. [ 392.286245][T17175] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3031'. [ 392.411075][T17184] wg1 speed is unknown, defaulting to 1000 [ 392.431700][T17184] lo speed is unknown, defaulting to 1000 [ 392.503035][T17193] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3034'. [ 393.034395][T17207] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3039'. [ 393.196868][T17211] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 393.358859][T17217] tap0: tun_chr_ioctl cmd 1074812118 [ 393.504732][T17219] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 393.546804][T17219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3042'. [ 393.870541][T17233] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3045'. [ 393.971350][T17235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3046'. [ 394.230328][T17246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3049'. [ 394.413615][T17251] netlink: 'syz.5.3051': attribute type 83 has an invalid length. [ 394.852743][T17263] netlink: 'syz.5.3056': attribute type 10 has an invalid length. [ 394.877227][T17263] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 395.191380][T17281] netlink: 'syz.3.3061': attribute type 29 has an invalid length. [ 395.196561][T17277] wg1 speed is unknown, defaulting to 1000 [ 395.209156][T17277] lo speed is unknown, defaulting to 1000 [ 395.330049][T17288] rdma_rxe: rxe_newlink: failed to add lo [ 395.347049][T17289] rdma_rxe: rxe_newlink: failed to add lo [ 395.651310][T17304] dvmrp8: entered allmulticast mode [ 395.728695][T17304] wg1 speed is unknown, defaulting to 1000 [ 395.735459][T17304] lo speed is unknown, defaulting to 1000 [ 395.774573][T17305] wg1 speed is unknown, defaulting to 1000 [ 395.970044][T17318] bond0: (slave bond4): Error -95 calling ndo_bpf [ 395.978007][T17305] lo speed is unknown, defaulting to 1000 [ 396.024342][T17320] netlink: zone id is out of range [ 396.049728][T17320] netlink: zone id is out of range [ 396.072561][T17322] netlink: 'syz.1.3072': attribute type 5 has an invalid length. [ 396.075628][T17320] netlink: get zone limit has 8 unknown bytes [ 396.443834][T17305] dvmrp8: left allmulticast mode [ 396.658243][T17344] netlink: 'syz.5.3080': attribute type 13 has an invalid length. [ 396.667156][T17344] netlink: 'syz.5.3080': attribute type 17 has an invalid length. [ 396.689109][T17346] netlink: 'syz.3.3081': attribute type 39 has an invalid length. [ 396.713210][T17347] netlink: 'syz.3.3081': attribute type 39 has an invalid length. [ 396.890077][T17344] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.904429][T17344] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 396.965335][T17349] wg1 speed is unknown, defaulting to 1000 [ 397.009623][T17349] lo speed is unknown, defaulting to 1000 [ 397.203767][T17378] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 397.264583][T17366] wg1 speed is unknown, defaulting to 1000 [ 397.272069][T17366] lo speed is unknown, defaulting to 1000 [ 397.306885][T17378] __nla_validate_parse: 12 callbacks suppressed [ 397.306906][T17378] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3090'. [ 397.502548][T17396] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3095'. [ 397.695120][T17413] netlink: 'syz.4.3099': attribute type 2 has an invalid length. [ 397.721730][T17388] wg1 speed is unknown, defaulting to 1000 [ 397.732701][T17388] lo speed is unknown, defaulting to 1000 [ 398.544336][T17448] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20002 [ 398.625909][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 398.635920][ T5868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 398.643875][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 398.653443][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 398.662102][ T5868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 398.691108][T17449] wg1 speed is unknown, defaulting to 1000 [ 398.698428][T17449] lo speed is unknown, defaulting to 1000 [ 398.883049][T17449] chnl_net:caif_netlink_parms(): no params data found [ 398.938116][T17470] netlink: 212280 bytes leftover after parsing attributes in process `syz.5.3117'. [ 398.984097][T17470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3117'. [ 399.122629][T17472] wg1 speed is unknown, defaulting to 1000 [ 399.123276][T17449] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.146395][T17449] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.164142][T17449] bridge_slave_0: entered allmulticast mode [ 399.171488][T17449] bridge_slave_0: entered promiscuous mode [ 399.189256][T17449] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.206494][T17449] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.214467][T17449] bridge_slave_1: entered allmulticast mode [ 399.222583][T17449] bridge_slave_1: entered promiscuous mode [ 399.231691][T17472] lo speed is unknown, defaulting to 1000 [ 399.360433][T17449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.402511][T17449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.514053][T17496] pim6reg1: entered promiscuous mode [ 399.526200][T17496] pim6reg1: entered allmulticast mode [ 399.534723][T17449] team0: Port device team_slave_0 added [ 399.542242][T17500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3123'. [ 399.553099][T17500] tipc: Enabling of bearer rejected, failed to enable media [ 399.580343][T17449] team0: Port device team_slave_1 added [ 399.587032][T17501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3123'. [ 399.597302][T17501] tipc: Enabling of bearer rejected, failed to enable media [ 399.641908][T17503] netlink: 'syz.1.3124': attribute type 10 has an invalid length. [ 399.665037][T17503] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.682175][T17503] bond0: (slave team0): Enslaving as an active interface with an up link [ 399.698466][T17449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.722760][T17449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.738664][T17507] netlink: 'syz.3.3126': attribute type 1 has an invalid length. [ 399.765168][T17449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.779494][T17449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.789223][T17449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.819648][T17449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.830527][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 399.906211][T17507] bond3: entered promiscuous mode [ 399.911514][T17507] bond3: entered allmulticast mode [ 399.921664][T17507] 8021q: adding VLAN 0 to HW filter on device bond3 [ 399.939694][T17522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3130'. [ 399.954773][T17449] hsr_slave_0: entered promiscuous mode [ 399.962269][T17449] hsr_slave_1: entered promiscuous mode [ 399.968405][T17449] debugfs: 'hsr0' already exists in 'hsr' [ 399.974138][T17449] Cannot create hsr debugfs directory [ 399.992254][T17507] 8021q: adding VLAN 0 to HW filter on device bond4 [ 400.001220][T17507] bond4: entered promiscuous mode [ 400.007318][T17507] bond4: entered allmulticast mode [ 400.013036][T17507] bond3: (slave bond4): Enslaving as a backup interface with a down link [ 400.022137][T17522] veth0_to_team: entered allmulticast mode [ 400.137322][T17529] geneve2: entered promiscuous mode [ 400.143115][T17529] geneve2: entered allmulticast mode [ 400.180246][T17537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3134'. [ 400.193390][ T9875] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 46672 - 0 [ 400.205983][ T9875] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 52922 - 0 [ 400.232092][ T9875] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 46672 - 0 [ 400.240837][ T9875] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 52922 - 0 [ 400.258963][ T9875] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 46672 - 0 [ 400.267833][ T9875] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 52922 - 0 [ 400.276510][ T9875] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 46672 - 0 [ 400.284900][ T9875] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 52922 - 0 [ 400.294624][T17537] netlink: 'syz.1.3134': attribute type 2 has an invalid length. [ 400.328451][T17449] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 400.370392][T17449] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 400.420669][T17449] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 400.479212][T17449] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 400.706339][ T5868] Bluetooth: hci1: command tx timeout [ 400.739687][T17449] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 400.776674][T17449] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 400.808951][T17449] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 400.844139][T17559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3140'. [ 400.853650][T17449] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 400.902662][T17563] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3141'. [ 400.906155][T17558] netlink: 'syz.3.3139': attribute type 23 has an invalid length. [ 400.971066][T17565] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.007669][T17563] macvlan5: entered allmulticast mode [ 401.019567][T17563] veth1_vlan: entered allmulticast mode [ 401.030259][T17563] veth1_vlan: left allmulticast mode [ 401.150189][T17449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.183105][T17449] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.203186][T17580] vlan0: entered promiscuous mode [ 401.257472][ T9892] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.264827][ T9892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.302294][ T9892] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.309828][ T9892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.714652][T17606] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20001 [ 401.748748][ T95] block nbd0: Possible stuck request ffff8880256b5080: control (read@0,1024B). Runtime 150 seconds [ 401.751848][T17606] netlink: 'syz.5.3150': attribute type 3 has an invalid length. [ 401.759602][ T95] block nbd0: Possible stuck request ffff8880256b5240: control (read@1024,1024B). Runtime 150 seconds [ 401.759636][ T95] block nbd0: Possible stuck request ffff8880256b5400: control (read@2048,1024B). Runtime 150 seconds [ 401.759664][ T95] block nbd0: Possible stuck request ffff8880256b55c0: control (read@3072,1024B). Runtime 150 seconds [ 401.825110][T17449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.904754][T17608] wg1 speed is unknown, defaulting to 1000 [ 401.930935][T17608] lo speed is unknown, defaulting to 1000 [ 401.936217][T17449] veth0_vlan: entered promiscuous mode [ 402.042924][T17449] veth1_vlan: entered promiscuous mode [ 402.075093][T17626] netlink: 'syz.1.3155': attribute type 1 has an invalid length. [ 402.147433][T17449] veth0_macvtap: entered promiscuous mode [ 402.156476][T17449] veth1_macvtap: entered promiscuous mode [ 402.197323][T17449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.219950][T17449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.235389][ T2922] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.253144][ T2922] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.278789][ T2922] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.289396][ T2922] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.384276][T17632] netlink: 'syz.5.3158': attribute type 29 has an invalid length. [ 402.403818][T17637] netlink: 'syz.4.3159': attribute type 1 has an invalid length. [ 402.412368][ T9875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.426491][T17637] __nla_validate_parse: 6 callbacks suppressed [ 402.426513][T17637] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3159'. [ 402.432742][ T9875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.466987][T17636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3159'. [ 402.531888][ T9875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.553144][ T9875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.752438][T17653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3162'. [ 402.787911][ T5868] Bluetooth: hci1: command tx timeout [ 403.031755][T17672] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3168'. [ 403.044332][T17672] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 403.082496][T17676] wg1 speed is unknown, defaulting to 1000 [ 403.090163][T17676] lo speed is unknown, defaulting to 1000 [ 403.562743][ T30] audit: type=1800 audit(1756461470.413:6): pid=17708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3179" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=49 res=0 errno=0 [ 403.680365][T17715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3183'. [ 403.755002][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3183'. [ 404.391624][T17769] netlink: 'syz.4.3193': attribute type 11 has an invalid length. [ 404.697836][T17790] syzkaller1: entered promiscuous mode [ 404.711279][T17790] syzkaller1: entered allmulticast mode [ 404.743911][T17790] netlink: 'syz.2.3200': attribute type 10 has an invalid length. [ 404.762725][T17790] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3200'. [ 404.837031][T17790] team0: Port device geneve0 added [ 404.873092][T17778] netlink: 'syz.5.3194': attribute type 1 has an invalid length. [ 404.886276][ T5868] Bluetooth: hci1: command tx timeout [ 404.895532][T17778] netlink: 'syz.5.3194': attribute type 4 has an invalid length. [ 404.903623][T17778] netlink: 204 bytes leftover after parsing attributes in process `syz.5.3194'. [ 404.931902][T17794] IPVS: Scheduler module ip_vs_sip not found [ 404.960174][T17800] bridge0: port 1(ipvlan2) entered blocking state [ 404.967438][T17800] bridge0: port 1(ipvlan2) entered disabled state [ 404.974786][T17800] ipvlan2: entered allmulticast mode [ 404.981165][T17800] bridge0: entered allmulticast mode [ 404.988036][T17800] ipvlan2: left allmulticast mode [ 404.993192][T17800] bridge0: left allmulticast mode [ 405.021207][T17803] wg1 speed is unknown, defaulting to 1000 [ 405.032220][T17803] lo speed is unknown, defaulting to 1000 [ 405.427683][T17827] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3207'. [ 405.442526][T17828] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3209'. [ 405.505368][T17823] wg1 speed is unknown, defaulting to 1000 [ 405.518959][T17823] lo speed is unknown, defaulting to 1000 [ 405.749505][T17829] wg1 speed is unknown, defaulting to 1000 [ 405.786143][T17854] netlink: 'syz.2.3211': attribute type 15 has an invalid length. [ 405.810808][T17829] lo speed is unknown, defaulting to 1000 [ 405.965541][T17874] netlink: 'syz.4.3215': attribute type 1 has an invalid length. [ 406.311723][T17892] tipc: Enabled bearer , priority 0 [ 406.328006][T17876] wg1 speed is unknown, defaulting to 1000 [ 406.334515][T17892] syzkaller0: entered promiscuous mode [ 406.351887][T17892] syzkaller0: entered allmulticast mode [ 406.371944][T17876] lo speed is unknown, defaulting to 1000 [ 406.416394][T17891] tipc: Resetting bearer [ 406.422345][T17891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.453391][T17889] tipc: Resetting bearer [ 406.584039][T17889] tipc: Disabling bearer [ 406.626026][ T5868] Bluetooth: hci2: command 0x0406 tx timeout [ 406.945971][ T5868] Bluetooth: hci1: command tx timeout [ 406.951683][ T982] IPVS: starting estimator thread 0... [ 406.980694][T17935] netlink: 'syz.1.3234': attribute type 21 has an invalid length. [ 407.006799][T17935] netlink: 'syz.1.3234': attribute type 21 has an invalid length. [ 407.027816][ T9892] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.039662][ T9871] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.054493][ T9871] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.063929][T17930] IPVS: using max 35 ests per chain, 84000 per kthread [ 407.071303][ T9871] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.163972][T17944] bond0: entered promiscuous mode [ 407.169387][T17944] bond_slave_0: entered promiscuous mode [ 407.175377][T17944] bond_slave_1: entered promiscuous mode [ 407.323762][T17955] tipc: Enabled bearer , priority 0 [ 407.337109][T17955] syzkaller0: entered promiscuous mode [ 407.342670][T17955] syzkaller0: entered allmulticast mode [ 407.350169][T17954] tipc: Enabling of bearer rejected, already enabled [ 407.359722][T17953] wg1 speed is unknown, defaulting to 1000 [ 407.372511][T17952] tipc: Resetting bearer [ 407.397293][T17952] tipc: Disabling bearer [ 407.418195][T17953] lo speed is unknown, defaulting to 1000 [ 407.588516][T17970] netlink: 'syz.5.3244': attribute type 9 has an invalid length. [ 407.612914][T17970] __nla_validate_parse: 11 callbacks suppressed [ 407.612937][T17970] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3244'. [ 407.622694][T17974] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3246'. [ 407.760133][T17978] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 4, id = 0 [ 407.841799][T17983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3250'. [ 407.851979][T17983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3250'. [ 407.866288][T17985] netlink: 'syz.5.3249': attribute type 83 has an invalid length. [ 407.895317][T17983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3250'. [ 408.093507][T18006] netlink: 'syz.4.3255': attribute type 8 has an invalid length. [ 408.341796][T18023] wg1 speed is unknown, defaulting to 1000 [ 408.370980][T18023] lo speed is unknown, defaulting to 1000 [ 408.668216][T18042] wg1 speed is unknown, defaulting to 1000 [ 408.696102][T18042] lo speed is unknown, defaulting to 1000 [ 408.731293][T18053] wg1 speed is unknown, defaulting to 1000 [ 408.812635][T18053] lo speed is unknown, defaulting to 1000 [ 408.858195][T18055] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 46672 - 0 [ 408.870186][T18055] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 52922 - 0 [ 409.001301][T18055] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 46672 - 0 [ 409.012341][T18055] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 52922 - 0 [ 409.030033][ T5868] Bluetooth: hci1: command tx timeout [ 409.103561][T18055] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 46672 - 0 [ 409.115236][T18055] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 52922 - 0 [ 409.172633][T18067] wg1 speed is unknown, defaulting to 1000 [ 409.184795][T18055] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 46672 - 0 [ 409.207076][T18055] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 52922 - 0 [ 409.224828][T18063] wg1 speed is unknown, defaulting to 1000 [ 409.233571][T18067] lo speed is unknown, defaulting to 1000 [ 409.244766][T18063] lo speed is unknown, defaulting to 1000 [ 409.362273][ T2922] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 52922 - 0 [ 409.382432][ T2922] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 46672 - 0 [ 409.457338][ T2922] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 52922 - 0 [ 409.473895][ T2922] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 46672 - 0 [ 409.522011][ T9892] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 52922 - 0 [ 409.533561][ T9892] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 46672 - 0 [ 409.561457][T18082] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3274'. [ 409.575052][ T9875] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 52922 - 0 [ 409.588037][ T9875] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 46672 - 0 [ 409.672680][T18090] wg1 speed is unknown, defaulting to 1000 [ 409.679921][T18090] lo speed is unknown, defaulting to 1000 [ 409.906197][T18105] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3279'. [ 409.979679][T18111] tipc: Enabling of bearer rejected, failed to enable media [ 410.108229][T18118] netlink: 'syz.4.3282': attribute type 8 has an invalid length. [ 410.211710][T18122] wg1 speed is unknown, defaulting to 1000 [ 410.226833][T18122] lo speed is unknown, defaulting to 1000 [ 410.355400][T18134] netlink: 'syz.4.3286': attribute type 3 has an invalid length. [ 410.427305][T18131] wg1 speed is unknown, defaulting to 1000 [ 410.434153][T18131] lo speed is unknown, defaulting to 1000 [ 410.651155][T18142] siw: device registration error -23 [ 411.139080][T18142] 0ªX¹¦À: left allmulticast mode [ 411.208257][T18167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3291'. [ 411.262425][T18142] veth0_to_team: left allmulticast mode [ 411.283171][T18142] batadv_slave_0: left promiscuous mode [ 411.292083][T18142] batadv_slave_0: left allmulticast mode [ 411.302292][T18142] xfrm0: left promiscuous mode [ 411.310631][T18142] xfrm0: left allmulticast mode [ 411.387750][T18142] veth1_vlan: left allmulticast mode [ 411.398091][T18142] macvlan1: left allmulticast mode [ 411.435469][T18142] veth3: left promiscuous mode [ 411.452678][T18142] bond0: left promiscuous mode [ 411.458804][T18142] erspan1: left promiscuous mode [ 411.473516][T18142] veth0_to_bridge: left allmulticast mode [ 411.480482][T18142] macvtap1: left promiscuous mode [ 411.490025][T18142] macvtap1: left allmulticast mode [ 411.503116][T18142] bridge4: left allmulticast mode [ 411.534938][T18142] veth11: left promiscuous mode [ 411.543738][T18142] team0: left promiscuous mode [ 411.548778][T18142] bridge4: left promiscuous mode [ 411.554059][T18142] macsec2: left promiscuous mode [ 411.621569][ T9870] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.630570][ T9870] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.675184][ T9870] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.684449][ T9870] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.697110][ T9870] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.706743][ T9870] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.720869][ T9870] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.730365][ T9870] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.828442][T18177] netlink: 'syz.1.3294': attribute type 28 has an invalid length. [ 411.994790][T18182] 8021q: adding VLAN 0 to HW filter on device bond5 [ 412.028830][T18191] syzkaller1: entered promiscuous mode [ 412.064877][T18191] syzkaller1: entered allmulticast mode [ 412.507032][T18214] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 412.569558][T18214] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3303'. [ 412.609527][T18214] netlink: 'syz.3.3303': attribute type 1 has an invalid length. [ 412.675045][T18214] netlink: 'syz.3.3303': attribute type 11 has an invalid length. [ 412.701359][T18214] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3303'. [ 412.930739][T18240] netlink: 'syz.3.3312': attribute type 1 has an invalid length. [ 412.946545][T18240] netlink: 15 bytes leftover after parsing attributes in process `syz.3.3312'. [ 412.990545][T18247] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3311'. [ 413.095003][T18247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3311'. [ 413.234414][T18260] netlink: 'syz.2.3317': attribute type 1 has an invalid length. [ 413.275605][T18260] bond1: entered promiscuous mode [ 413.281545][T18260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 413.305629][T18262] 8021q: adding VLAN 0 to HW filter on device bond1 [ 413.319666][T18262] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 413.332843][T18262] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 413.356971][T18262] bond1: (slave wireguard0): making interface the new active one [ 413.365289][T18262] wireguard0: entered promiscuous mode [ 413.373723][T18262] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 413.751772][T18272] wg1 speed is unknown, defaulting to 1000 [ 413.764578][T18272] lo speed is unknown, defaulting to 1000 [ 413.918849][T18290] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3325'. [ 414.009653][T18297] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3328'. [ 414.077255][T18305] netlink: 'syz.1.3329': attribute type 58 has an invalid length. [ 414.085331][T18305] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3329'. [ 414.102445][T18307] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3330'. [ 414.179057][T18307] netlink: 'syz.5.3330': attribute type 10 has an invalid length. [ 414.304904][T18317] wg1 speed is unknown, defaulting to 1000 [ 414.312316][T18317] lo speed is unknown, defaulting to 1000 [ 414.321899][T18316] wg1 speed is unknown, defaulting to 1000 [ 414.345889][T18316] lo speed is unknown, defaulting to 1000 [ 414.640303][T18333] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3338'. [ 414.829833][T18344] netlink: 'syz.2.3342': attribute type 29 has an invalid length. [ 414.943881][T18350] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3343'. [ 414.974123][T18352] netlink: 'syz.5.3343': attribute type 4 has an invalid length. [ 415.222914][T18355] wg1 speed is unknown, defaulting to 1000 [ 415.344732][T18355] lo speed is unknown, defaulting to 1000 [ 415.350544][T18359] wg1 speed is unknown, defaulting to 1000 [ 415.735665][T18359] lo speed is unknown, defaulting to 1000 [ 416.244724][T18365] netlink: 'syz.5.3346': attribute type 1 has an invalid length. [ 416.313803][T18365] netlink: 'syz.5.3346': attribute type 2 has an invalid length. [ 417.544433][T18393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.755278][T18409] tipc: Enabled bearer , priority 0 [ 417.766884][T18414] syzkaller0: entered promiscuous mode [ 417.784049][T18414] syzkaller0: entered allmulticast mode [ 417.790955][T18416] veth0_to_bridge: entered promiscuous mode [ 417.809543][T18409] tipc: Resetting bearer [ 417.819689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.827855][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.843418][T18406] tipc: Resetting bearer [ 417.855587][T18406] tipc: Disabling bearer [ 417.912507][T18416] veth0_to_bridge: left promiscuous mode [ 418.011628][T18437] validate_nla: 1 callbacks suppressed [ 418.011648][T18437] netlink: 'syz.1.3367': attribute type 12 has an invalid length. [ 418.035416][T18440] netlink: 'syz.1.3367': attribute type 12 has an invalid length. [ 418.050191][T18443] netlink: 'syz.4.3366': attribute type 1 has an invalid length. [ 418.144267][T18449] veth0_to_bond: entered allmulticast mode [ 418.164185][T18449] netlink: 'syz.1.3370': attribute type 21 has an invalid length. [ 418.172802][T18449] __nla_validate_parse: 6 callbacks suppressed [ 418.172821][T18449] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3370'. [ 418.214474][T18445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3369'. [ 418.420832][T18459] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3372'. [ 418.454554][T18463] netlink: 'syz.5.3375': attribute type 2 has an invalid length. [ 418.481211][T18463] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3375'. [ 418.599918][T18471] wg1 speed is unknown, defaulting to 1000 [ 418.618554][T18471] lo speed is unknown, defaulting to 1000 [ 418.700338][T18477] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3380'. [ 418.718144][T18477] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3380'. [ 418.944243][T18494] netlink: 'syz.4.3386': attribute type 39 has an invalid length. [ 419.309300][T18518] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3394'. [ 419.318481][T18518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3394'. [ 419.376993][T18521] netlink: 'syz.5.3395': attribute type 1 has an invalid length. [ 419.433349][T18521] 8021q: adding VLAN 0 to HW filter on device bond6 [ 419.460015][T18528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3397'. [ 419.484395][T18529] bond6: (slave ip6gretap1): making interface the new active one [ 419.497934][T18529] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 419.534455][T18521] veth11: entered promiscuous mode [ 419.598157][T18529] erspan0: entered allmulticast mode [ 419.610435][T18531] wg1 speed is unknown, defaulting to 1000 [ 419.650025][T18531] lo speed is unknown, defaulting to 1000 [ 419.701140][T18540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3400'. [ 419.872980][T18551] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 419.994121][T18532] netlink: 'syz.3.3398': attribute type 13 has an invalid length. [ 420.008450][T18532] netlink: 'syz.3.3398': attribute type 17 has an invalid length. [ 420.119081][T18532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.128034][T18532] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.155143][T18532] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 420.221252][T18570] 1ªX¹¦À: renamed from 60ªX¹¦À [ 420.265901][T18570] 1ªX¹¦À: entered allmulticast mode [ 420.291483][T18570] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 420.467561][T18579] syzkaller1: entered promiscuous mode [ 420.473242][T18579] syzkaller1: entered allmulticast mode [ 420.997941][T18643] netlink: 'syz.5.3429': attribute type 146 has an invalid length. [ 421.105479][T18646] tipc: Started in network mode [ 421.141954][T18646] tipc: Node identity fe2ba3726d43, cluster identity 4711 [ 421.191122][T18646] tipc: Enabled bearer , priority 0 [ 421.262228][T18657] syzkaller0: entered promiscuous mode [ 421.279152][T18657] syzkaller0: entered allmulticast mode [ 421.296648][T18657] 8021q: VLANs not supported on ip6gre0 [ 421.302468][T18646] 8021q: VLANs not supported on ip6gre0 [ 421.328977][T18657] tipc: Resetting bearer [ 421.339847][T18645] tipc: Resetting bearer [ 421.359612][T18645] tipc: Disabling bearer [ 421.633773][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 421.641280][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 421.648625][ T5867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 421.656558][ T5867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 421.664018][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 421.695798][T18674] wg1 speed is unknown, defaulting to 1000 [ 421.702514][T18674] lo speed is unknown, defaulting to 1000 [ 421.735191][T18678] vlan3: entered promiscuous mode [ 421.741988][T18678] bridge0: entered promiscuous mode [ 422.095477][T18674] chnl_net:caif_netlink_parms(): no params data found [ 422.291861][T18674] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.304474][T18674] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.312786][T18674] bridge_slave_0: entered allmulticast mode [ 422.325049][T18674] bridge_slave_0: entered promiscuous mode [ 422.336837][T18674] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.355395][T18674] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.363047][T18674] bridge_slave_1: entered allmulticast mode [ 422.370845][T18674] bridge_slave_1: entered promiscuous mode [ 422.420176][T18674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.441085][T18729] IPVS: set_ctl: invalid protocol: 161 224.0.0.1:20001 [ 422.453425][T18674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.522848][T18674] team0: Port device team_slave_0 added [ 422.532451][T18674] team0: Port device team_slave_1 added [ 422.582284][T18674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.592309][T18674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.619786][T18674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.632885][T18674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.640071][T18674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.666393][T18674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.756809][T18674] hsr_slave_0: entered promiscuous mode [ 422.776833][T18674] hsr_slave_1: entered promiscuous mode [ 422.783115][T18674] debugfs: 'hsr0' already exists in 'hsr' [ 422.794672][T18674] Cannot create hsr debugfs directory [ 422.916539][T18763] dvmrp1: entered allmulticast mode [ 422.942483][T18763] dvmrp1: left allmulticast mode [ 423.192923][T18782] wg1 speed is unknown, defaulting to 1000 [ 423.193869][T18780] netlink: zone id is out of range [ 423.203130][T18782] lo speed is unknown, defaulting to 1000 [ 423.204366][T18780] netlink: zone id is out of range [ 423.226806][T18780] netlink: zone id is out of range [ 423.231985][T18780] netlink: zone id is out of range [ 423.255013][T18780] netlink: zone id is out of range [ 423.267988][T18780] netlink: zone id is out of range [ 423.273217][T18780] netlink: zone id is out of range [ 423.279014][T18780] netlink: zone id is out of range [ 423.284379][T18780] netlink: zone id is out of range [ 423.290324][T18780] netlink: zone id is out of range [ 423.329828][T18783] syzkaller0: entered promiscuous mode [ 423.335491][T18783] syzkaller0: entered allmulticast mode [ 423.392996][T18800] smc: net device bond0 erased user defined pnetid SYZ [ 423.404013][T18800] __nla_validate_parse: 16 callbacks suppressed [ 423.404032][T18800] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3473'. [ 423.419813][T18800] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3473'. [ 423.494832][T18797] veth0_to_bond: left allmulticast mode [ 423.529660][T18797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.542249][T18797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.577420][T18797] vlan0: left promiscuous mode [ 423.612943][T18797] tipc: Resetting bearer [ 423.620043][T18797] syzkaller0: left promiscuous mode [ 423.625264][T18797] syzkaller0: left allmulticast mode [ 423.631512][T18797] vlan2: left allmulticast mode [ 423.637705][T18797] veth1: left allmulticast mode [ 423.701241][ T9868] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.715311][ T9868] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.746046][ T5867] Bluetooth: hci2: command tx timeout [ 423.755972][ T9868] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.769187][ T9868] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.785851][ T9868] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.796948][ T9868] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.809798][T18804] tipc: Enabled bearer , priority 0 [ 423.817796][T18804] syzkaller0: entered promiscuous mode [ 423.824095][T18804] syzkaller0: entered allmulticast mode [ 423.843420][ T9868] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.857720][ T9868] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.878289][T18804] tipc: Resetting bearer [ 423.892985][T18804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3474'. [ 423.919329][T18674] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 423.959995][T18674] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 424.024420][T18674] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 424.043292][T18803] tipc: Resetting bearer [ 424.070564][T18803] tipc: Disabling bearer [ 424.095602][T18674] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 424.138995][T18806] wg1 speed is unknown, defaulting to 1000 [ 424.161129][T18816] wg1 speed is unknown, defaulting to 1000 [ 424.179498][T18806] lo speed is unknown, defaulting to 1000 [ 424.215172][T18816] lo speed is unknown, defaulting to 1000 [ 424.263281][T18831] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3479'. [ 424.497676][T18674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.549424][T18674] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.603612][T16755] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.610803][T16755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.656744][T16755] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.664019][T16755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.708766][T18857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3484'. [ 424.762019][T18843] wg1 speed is unknown, defaulting to 1000 [ 424.819225][T18843] lo speed is unknown, defaulting to 1000 [ 424.843356][T18863] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3486'. [ 424.925248][T18865] wg1 speed is unknown, defaulting to 1000 [ 424.937644][T18865] lo speed is unknown, defaulting to 1000 [ 425.019696][T18862] wg1 speed is unknown, defaulting to 1000 [ 425.037451][T18862] lo speed is unknown, defaulting to 1000 [ 425.043348][T18874] validate_nla: 1 callbacks suppressed [ 425.043369][T18874] netlink: 'syz.2.3488': attribute type 10 has an invalid length. [ 425.222574][T18874] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.233818][T18874] team0: entered promiscuous mode [ 425.239081][T18874] team_slave_0: entered promiscuous mode [ 425.244982][T18874] team_slave_1: entered promiscuous mode [ 425.250950][T18874] geneve0: entered promiscuous mode [ 425.259768][T18874] bond0: (slave team0): Enslaving as an active interface with an up link [ 425.281685][T18884] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3490'. [ 425.334890][T18674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.777145][T18889] wg1 speed is unknown, defaulting to 1000 [ 425.783174][T18898] syzkaller1: entered allmulticast mode [ 425.811881][T18889] lo speed is unknown, defaulting to 1000 [ 425.829001][ T5867] Bluetooth: hci2: command tx timeout [ 425.873024][T18912] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3491'. [ 425.917564][T18674] veth0_vlan: entered promiscuous mode [ 425.932397][T18674] veth1_vlan: entered promiscuous mode [ 426.093230][T18674] veth0_macvtap: entered promiscuous mode [ 426.255509][T18674] veth1_macvtap: entered promiscuous mode [ 426.474172][T18674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.512078][T18674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.561824][ T2922] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.578386][ T2922] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.614519][ T2922] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.736224][ T2922] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.896184][ T9868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.904052][ T9868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.945100][T18922] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3499'. [ 427.003644][ T9875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.017888][ T9875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.070993][T18937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3502'. [ 427.321585][T18959] netlink: 'syz.5.3509': attribute type 10 has an invalid length. [ 427.354245][T18959] team0: Device ipvlan1 failed to register rx_handler [ 427.653746][T18968] wg1 speed is unknown, defaulting to 1000 [ 427.837106][T18971] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 52922 - 0 [ 427.861417][T18971] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 46672 - 0 [ 427.909761][ T5867] Bluetooth: hci2: command tx timeout [ 428.409995][T18968] lo speed is unknown, defaulting to 1000 [ 428.422918][T18978] wg1 speed is unknown, defaulting to 1000 [ 428.462319][T18971] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 52922 - 0 [ 428.480217][T18971] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 46672 - 0 [ 428.515552][T18978] lo speed is unknown, defaulting to 1000 [ 428.577507][T18971] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 52922 - 0 [ 428.610286][T18971] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 46672 - 0 [ 428.696205][T18971] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 52922 - 0 [ 428.712509][T18971] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 46672 - 0 [ 428.769454][T18988] __nla_validate_parse: 3 callbacks suppressed [ 428.769474][T18988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3517'. [ 428.821556][T19002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3517'. [ 428.840375][T18988] 8021q: adding VLAN 0 to HW filter on device bond2 [ 428.848177][T18993] wg1 speed is unknown, defaulting to 1000 [ 428.854973][T18993] lo speed is unknown, defaulting to 1000 [ 428.963589][ T2922] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 52922 - 0 [ 428.987007][T19006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3522'. [ 428.993281][ T2922] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 46672 - 0 [ 429.033653][ T2922] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 52922 - 0 [ 429.045340][ T2922] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 46672 - 0 [ 429.068025][ T2922] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 52922 - 0 [ 429.076683][ T2922] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 46672 - 0 [ 429.115007][T19008] wg1 speed is unknown, defaulting to 1000 [ 429.121917][ T2922] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 52922 - 0 [ 429.138519][ T2922] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 46672 - 0 [ 429.152365][T19008] lo speed is unknown, defaulting to 1000 [ 429.317275][T19015] syzkaller1: entered promiscuous mode [ 429.331808][T19015] syzkaller1: entered allmulticast mode [ 429.351635][T19023] wg1 speed is unknown, defaulting to 1000 [ 429.358956][T19023] lo speed is unknown, defaulting to 1000 [ 429.402649][T19025] netlink: 360 bytes leftover after parsing attributes in process `syz.5.3527'. [ 429.404921][T19027] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3528'. [ 429.437828][T19024] wg1: entered promiscuous mode [ 429.442727][T19024] wg1: entered allmulticast mode [ 429.473642][T19025] wg1 speed is unknown, defaulting to 1000 [ 429.504448][T19025] lo speed is unknown, defaulting to 1000 [ 429.995975][ T5867] Bluetooth: hci2: command tx timeout [ 430.584101][T19039] ip6gretap1: entered allmulticast mode [ 430.615825][ T30] audit: type=1800 audit(1756461497.473:7): pid=19039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3532" name="@" dev="tmpfs" ino=417 res=0 errno=0 [ 430.661730][T19050] netlink: 404 bytes leftover after parsing attributes in process `syz.5.3533'. [ 430.671318][T19050] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3533'. [ 430.691835][T19050] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3533'. [ 430.716669][T19050] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3533'. [ 430.771760][T19060] syzkaller0: entered promiscuous mode [ 430.790662][T19060] syzkaller0: entered allmulticast mode [ 430.816713][T19053] tipc: Started in network mode [ 430.821632][T19053] tipc: Node identity 3664afab09c5, cluster identity 4711 [ 430.838549][T19053] tipc: Enabled bearer , priority 0 [ 430.884957][T19053] tipc: Resetting bearer [ 430.913931][T19053] tipc: Disabling bearer [ 431.085423][T19093] netlink: 5872 bytes leftover after parsing attributes in process `syz.2.3545'. [ 431.222785][ T2922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.249536][T19102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.260949][T19102] bond0: (slave rose0): Enslaving as an active interface with an up link [ 431.269980][ T2922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.352763][T19110] vti0: entered promiscuous mode [ 431.375609][T19110] vti0: entered allmulticast mode [ 431.576977][ T5867] block nbd2: Receive control failed (result -32) [ 431.785853][T19145] vlan2: entered promiscuous mode [ 431.791147][T19145] vlan2: entered allmulticast mode [ 431.796958][T19145] hsr_slave_1: entered allmulticast mode [ 431.826845][ T95] block nbd0: Possible stuck request ffff8880256b5080: control (read@0,1024B). Runtime 180 seconds [ 431.838392][ T95] block nbd0: Possible stuck request ffff8880256b5240: control (read@1024,1024B). Runtime 180 seconds [ 431.849979][ T95] block nbd0: Possible stuck request ffff8880256b5400: control (read@2048,1024B). Runtime 180 seconds [ 431.861441][ T95] block nbd0: Possible stuck request ffff8880256b55c0: control (read@3072,1024B). Runtime 180 seconds [ 432.733565][T19184] lo: entered allmulticast mode [ 433.000014][T19184] dvmrp8: entered allmulticast mode [ 433.044601][T19184] lo: left allmulticast mode [ 433.052955][T19184] dvmrp8: left allmulticast mode [ 433.112243][T19192] netlink: 'syz.3.3578': attribute type 11 has an invalid length. [ 433.113133][T19190] netlink: 'syz.1.3576': attribute type 23 has an invalid length. [ 433.167247][T19199] sctp: [Deprecated]: syz.4.3580 (pid 19199) Use of int in max_burst socket option deprecated. [ 433.167247][T19199] Use struct sctp_assoc_value instead [ 433.539927][T19211] wg1 speed is unknown, defaulting to 1000 [ 433.609108][T19214] wg1 speed is unknown, defaulting to 1000 [ 433.626291][T19211] lo speed is unknown, defaulting to 1000 [ 433.715864][T19214] lo speed is unknown, defaulting to 1000 [ 433.881151][T19235] netlink: 'syz.5.3589': attribute type 9 has an invalid length. [ 433.947372][T19244] __nla_validate_parse: 11 callbacks suppressed [ 433.947395][T19244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3591'. [ 434.046125][T19249] net_ratelimit: 37 callbacks suppressed [ 434.046146][T19249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.068662][T19247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3592'. [ 434.179614][T19247] bridge_slave_1: left allmulticast mode [ 434.185544][T19247] bridge_slave_1: left promiscuous mode [ 434.198488][T19247] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.208803][T19247] bridge_slave_0: left allmulticast mode [ 434.214526][T19247] bridge_slave_0: left promiscuous mode [ 434.223470][T19247] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.343496][ T5867] block nbd5: Receive control failed (result -32) [ 434.387897][T19267] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 434.434887][T19274] bond0: (slave bond_slave_0): Releasing backup interface [ 434.449943][T19274] bond0: (slave bond_slave_1): Releasing backup interface [ 434.464948][T19277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.464949][T19274] team0: Port device team_slave_0 removed [ 434.481441][T19274] team0: Port device team_slave_1 removed [ 434.488545][T19274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.497984][T19274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.507746][T19274] bond3: (slave bond4): Releasing backup interface [ 434.515304][T19274] bond4: left promiscuous mode [ 434.522928][T19274] bond4: left allmulticast mode [ 434.656780][T19283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3600'. [ 434.670338][T19283] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3600'. [ 434.923909][T19301] batman_adv: batadv0: Adding interface: ip6gretap1 [ 434.938972][T19301] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.008037][T19301] batman_adv: batadv0: Interface activated: ip6gretap1 [ 435.085195][T19312] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.128178][T19309] wg1 speed is unknown, defaulting to 1000 [ 435.132681][T19317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 435.153074][T19309] lo speed is unknown, defaulting to 1000 [ 435.214469][T19312] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.256481][T19317] wg1 speed is unknown, defaulting to 1000 [ 435.265286][T19317] lo speed is unknown, defaulting to 1000 [ 435.343849][T19312] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.469722][T19312] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.630003][T19335] netlink: 'syz.5.3611': attribute type 9 has an invalid length. [ 435.640773][T19335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3611'. [ 435.721740][T16755] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.741763][T16755] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.768761][T16755] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.840266][T16755] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.984052][T19347] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3614'. [ 436.001572][T19345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.277270][T19361] wg1 speed is unknown, defaulting to 1000 [ 436.283827][T19361] lo speed is unknown, defaulting to 1000 [ 436.572213][T19370] netlink: 'syz.5.3621': attribute type 1 has an invalid length. [ 436.621132][T19370] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3621'. [ 436.645658][T19370] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3621'. [ 436.706450][T16755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.714498][T16755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.750005][T19381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.775405][T19383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3625'. [ 436.832899][T19385] tipc: Enabled bearer , priority 0 [ 436.843662][T19385] syzkaller0: entered promiscuous mode [ 436.851902][T19385] syzkaller0: entered allmulticast mode [ 436.870258][T19387] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3627'. [ 436.917736][T19385] tipc: Resetting bearer [ 436.931014][T19384] tipc: Resetting bearer [ 437.004946][T19384] tipc: Disabling bearer [ 437.293266][T19417] netlink: 'syz.4.3638': attribute type 2 has an invalid length. [ 437.306805][T19417] k›*·]‘: entered promiscuous mode [ 437.317894][T19417] veth0_to_team: entered promiscuous mode [ 437.324253][T19417] veth0_to_team: entered allmulticast mode [ 437.467383][T19429] batadv1: entered promiscuous mode [ 437.491860][T19435] netlink: 'syz.1.3641': attribute type 1 has an invalid length. [ 437.506196][T19429] batadv1: entered allmulticast mode [ 437.567620][T19438] netlink: 'syz.4.3642': attribute type 29 has an invalid length. [ 437.602738][T19439] netlink: 'syz.4.3642': attribute type 29 has an invalid length. [ 437.643267][T19429] unsupported nla_type 58 [ 437.644650][T19441] sctp: [Deprecated]: syz.3.3644 (pid 19441) Use of int in max_burst socket option. [ 437.644650][T19441] Use struct sctp_assoc_value instead [ 437.859427][T19450] netlink: 'syz.3.3647': attribute type 1 has an invalid length. [ 437.937412][T19450] bond5: entered promiscuous mode [ 437.956310][T19450] 8021q: adding VLAN 0 to HW filter on device bond5 [ 437.985197][T19450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 437.992524][T19450] IPv6: NLM_F_CREATE should be set when creating new route [ 437.999822][T19450] IPv6: NLM_F_CREATE should be set when creating new route [ 438.009261][T19450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 438.018853][T19454] 8021q: adding VLAN 0 to HW filter on device bond5 [ 438.027033][T19454] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 438.039060][T19454] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 438.060246][T19454] bond5: (slave wireguard0): making interface the new active one [ 438.068747][T19454] wireguard0: entered promiscuous mode [ 438.076389][T19454] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 438.446133][T19487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.487017][T19497] Dead loop on virtual device ip6_vti0, fix it urgently! [ 438.675262][T19511] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 438.726815][T19515] veth1_to_bond: entered allmulticast mode [ 438.750968][T19515] veth1_to_bond: left allmulticast mode [ 438.812460][T19522] tipc: Enabling of bearer rejected, already enabled [ 438.827013][T19522] syzkaller0: entered promiscuous mode [ 438.835064][T19522] syzkaller0: entered allmulticast mode [ 438.856938][T19522] vlan0: entered promiscuous mode [ 438.862269][T19522] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 438.901685][T19530] netlink: 'syz.5.3671': attribute type 10 has an invalid length. [ 439.046269][ T30] audit: type=1800 audit(1756461505.913:8): pid=19540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3676" name="memory.events" dev="tmpfs" ino=239 res=0 errno=0 [ 439.047721][T19540] netlink: 'syz.4.3676': attribute type 1 has an invalid length. [ 439.288164][T19559] __nla_validate_parse: 13 callbacks suppressed [ 439.288185][T19559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3679'. [ 439.424412][T19557] wg1 speed is unknown, defaulting to 1000 [ 439.446736][T19563] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3682'. [ 439.462113][T19557] lo speed is unknown, defaulting to 1000 [ 439.480120][T19563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3682'. [ 439.490482][T19563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3682'. [ 439.727255][T19581] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 439.922799][T19596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3690'. [ 439.951063][T19592] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.022225][T19592] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.082446][T19592] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.136101][T19592] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.223951][ T9875] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.253808][ T9875] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.281951][ T9875] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.316251][ T9875] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.342611][T19612] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3695'. [ 440.373008][T19610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.438135][T19618] netlink: 'syz.5.3698': attribute type 4 has an invalid length. [ 440.453339][T19618] netlink: 'syz.5.3698': attribute type 4 has an invalid length. [ 440.535447][T19626] netlink: 'syz.5.3701': attribute type 1 has an invalid length. [ 440.683270][T19639] openvswitch: netlink: Tunnel attr 6 has unexpected len 9 expected 0 [ 440.720596][T19644] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3703'. [ 440.757304][T19646] dvmrp8: entered allmulticast mode [ 440.818382][T19646] dvmrp8: left allmulticast mode [ 440.929898][T19646] netlink: 'syz.3.3705': attribute type 23 has an invalid length. [ 441.052663][T19667] wg1 speed is unknown, defaulting to 1000 [ 441.065232][T19667] lo speed is unknown, defaulting to 1000 [ 441.125978][T19673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3714'. [ 441.299419][T19693] bond0: (slave team0): Releasing backup interface [ 441.319839][T19693] team0: left promiscuous mode [ 441.340444][T19693] team_slave_0: left promiscuous mode [ 441.346704][T19693] team_slave_1: left promiscuous mode [ 441.352339][T19693] geneve0: left promiscuous mode [ 441.381171][T19693] bridge_slave_0: left allmulticast mode [ 441.393701][T19693] bridge_slave_0: left promiscuous mode [ 441.399888][T19693] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.402937][T19694] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3721'. [ 441.423209][T19693] bridge_slave_1: left allmulticast mode [ 441.434006][T19693] bridge_slave_1: left promiscuous mode [ 441.441346][T19693] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.452352][T19693] bond0: (slave bond_slave_0): Releasing backup interface [ 441.461927][T19693] bond_slave_0: left promiscuous mode [ 441.472485][T19693] bond0: (slave bond_slave_1): Releasing backup interface [ 441.481694][T19693] bond_slave_1: left promiscuous mode [ 441.506955][T19693] team0: Port device team_slave_0 removed [ 441.532022][T19716] netlink: 604 bytes leftover after parsing attributes in process `syz.5.3722'. [ 441.572230][T19693] team0: Port device team_slave_1 removed [ 441.590946][T19693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.598689][T19693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.610442][T19693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.618127][T19693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.647371][T19693] team0: Port device geneve0 removed [ 441.660411][T19693] bond1: (slave wireguard0): Releasing backup interface [ 441.670960][T19693] wireguard0: left promiscuous mode [ 441.734658][T19711] netlink: 'syz.5.3722': attribute type 29 has an invalid length. [ 441.760401][T19713] netlink: 'syz.5.3722': attribute type 29 has an invalid length. [ 441.830132][T19708] wg1 speed is unknown, defaulting to 1000 [ 441.851565][T19708] lo speed is unknown, defaulting to 1000 [ 441.924605][T19727] netlink: 'syz.5.3726': attribute type 21 has an invalid length. [ 442.069651][T19734] FAULT_INJECTION: forcing a failure. [ 442.069651][T19734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.071697][T19736] netlink: 'syz.5.3729': attribute type 2 has an invalid length. [ 442.112237][T19734] CPU: 1 UID: 0 PID: 19734 Comm: syz.2.3731 Not tainted syzkaller #0 PREEMPT(full) [ 442.112269][T19734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 442.112284][T19734] Call Trace: [ 442.112292][T19734] [ 442.112302][T19734] dump_stack_lvl+0x189/0x250 [ 442.112334][T19734] ? __pfx____ratelimit+0x10/0x10 [ 442.112367][T19734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.112392][T19734] ? __pfx__printk+0x10/0x10 [ 442.112419][T19734] ? __might_fault+0xb0/0x130 [ 442.112453][T19734] ? rcu_is_watching+0x15/0xb0 [ 442.112477][T19734] should_fail_ex+0x414/0x560 [ 442.112508][T19734] _copy_from_user+0x2d/0xb0 [ 442.112532][T19734] ___sys_sendmsg+0x158/0x2a0 [ 442.112557][T19734] ? __pfx____sys_sendmsg+0x10/0x10 [ 442.112601][T19734] ? __fget_files+0x2a/0x420 [ 442.112619][T19734] ? __fget_files+0x3a0/0x420 [ 442.112642][T19734] __x64_sys_sendmsg+0x19b/0x260 [ 442.112666][T19734] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 442.112694][T19734] ? __pfx_ksys_write+0x10/0x10 [ 442.112719][T19734] ? rcu_is_watching+0x15/0xb0 [ 442.112743][T19734] ? rcu_is_watching+0x15/0xb0 [ 442.112764][T19734] do_syscall_64+0xfa/0x3b0 [ 442.112784][T19734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.112805][T19734] ? clear_bhb_loop+0x60/0xb0 [ 442.112828][T19734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.112848][T19734] RIP: 0033:0x7f511778ebe9 [ 442.112867][T19734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.112886][T19734] RSP: 002b:00007f51159f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.112909][T19734] RAX: ffffffffffffffda RBX: 00007f51179b5fa0 RCX: 00007f511778ebe9 [ 442.112924][T19734] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 442.112938][T19734] RBP: 00007f51159f6090 R08: 0000000000000000 R09: 0000000000000000 [ 442.112951][T19734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.112963][T19734] R13: 00007f51179b6038 R14: 00007f51179b5fa0 R15: 00007ffc4073b5d8 [ 442.112988][T19734] [ 443.436694][T19801] pim6reg: entered allmulticast mode [ 443.448630][T19801] pim6reg: left allmulticast mode [ 443.689665][T19813] 8021q: adding VLAN 0 to HW filter on device bond3 [ 443.721304][T19813] 8021q: adding VLAN 0 to HW filter on device bond3 [ 443.729430][T19813] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 443.742864][T19813] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 443.868185][T19822] wg1 speed is unknown, defaulting to 1000 [ 443.893416][T19827] netem: incorrect gi model size [ 443.908301][T19827] netem: change failed [ 443.975512][T19822] lo speed is unknown, defaulting to 1000 [ 444.052378][T19830] batadv_slave_1: entered promiscuous mode [ 444.126737][T19829] batadv_slave_1: left promiscuous mode [ 444.306381][T19852] 8021q: adding VLAN 0 to HW filter on device bond7 [ 444.600352][T19868] __nla_validate_parse: 11 callbacks suppressed [ 444.600375][T19868] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3765'. [ 444.995248][T19884] validate_nla: 2 callbacks suppressed [ 444.995268][T19884] netlink: 'syz.3.3768': attribute type 2 has an invalid length. [ 445.030288][T19884] netlink: 'syz.3.3768': attribute type 1 has an invalid length. [ 445.043194][T19884] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3768'. [ 445.073099][T19888] netlink: 'syz.1.3770': attribute type 3 has an invalid length. [ 445.092609][T19888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3770'. [ 445.171533][T19894] netlink: 'syz.2.3772': attribute type 3 has an invalid length. [ 445.200907][T19894] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3772'. [ 445.239585][T19900] FAULT_INJECTION: forcing a failure. [ 445.239585][T19900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.263090][T19899] wg1 speed is unknown, defaulting to 1000 [ 445.269126][T19900] CPU: 0 UID: 0 PID: 19900 Comm: syz.4.3774 Not tainted syzkaller #0 PREEMPT(full) [ 445.269156][T19900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 445.269169][T19900] Call Trace: [ 445.269177][T19900] [ 445.269185][T19900] dump_stack_lvl+0x189/0x250 [ 445.269215][T19900] ? __pfx____ratelimit+0x10/0x10 [ 445.269248][T19900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.269276][T19900] ? __pfx__printk+0x10/0x10 [ 445.269307][T19900] ? __might_fault+0xb0/0x130 [ 445.269346][T19900] ? rcu_is_watching+0x15/0xb0 [ 445.269372][T19900] should_fail_ex+0x414/0x560 [ 445.269407][T19900] _copy_from_iter+0x1db/0x16f0 [ 445.269432][T19900] ? rcu_is_watching+0x15/0xb0 [ 445.269456][T19900] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 445.269490][T19900] ? __pfx__copy_from_iter+0x10/0x10 [ 445.269513][T19900] ? __build_skb_around+0x257/0x3e0 [ 445.269537][T19900] ? netlink_sendmsg+0x642/0xb30 [ 445.269557][T19900] ? skb_put+0x11b/0x210 [ 445.269581][T19900] netlink_sendmsg+0x6b2/0xb30 [ 445.269608][T19900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.269632][T19900] ? aa_sock_msg_perm+0xf1/0x1d0 [ 445.269656][T19900] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 445.269680][T19900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.269702][T19900] __sock_sendmsg+0x21c/0x270 [ 445.269734][T19900] ____sys_sendmsg+0x505/0x830 [ 445.269762][T19900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 445.269792][T19900] ? import_iovec+0x74/0xa0 [ 445.269818][T19900] ___sys_sendmsg+0x21f/0x2a0 [ 445.269844][T19900] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.269891][T19900] ? __fget_files+0x2a/0x420 [ 445.269910][T19900] ? __fget_files+0x3a0/0x420 [ 445.269937][T19900] __x64_sys_sendmsg+0x19b/0x260 [ 445.269963][T19900] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 445.269995][T19900] ? __pfx_ksys_write+0x10/0x10 [ 445.270023][T19900] ? rcu_is_watching+0x15/0xb0 [ 445.270052][T19900] ? rcu_is_watching+0x15/0xb0 [ 445.270085][T19900] do_syscall_64+0xfa/0x3b0 [ 445.270108][T19900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.270129][T19900] ? clear_bhb_loop+0x60/0xb0 [ 445.270156][T19900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.270179][T19900] RIP: 0033:0x7f3a5758ebe9 [ 445.270199][T19900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.270218][T19900] RSP: 002b:00007f3a58347038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.270243][T19900] RAX: ffffffffffffffda RBX: 00007f3a577b5fa0 RCX: 00007f3a5758ebe9 [ 445.270261][T19900] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 445.270276][T19900] RBP: 00007f3a58347090 R08: 0000000000000000 R09: 0000000000000000 [ 445.270290][T19900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.270305][T19900] R13: 00007f3a577b6038 R14: 00007f3a577b5fa0 R15: 00007ffe08309388 [ 445.270333][T19900] [ 445.572099][T19912] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3777'. [ 445.572261][T19911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3776'. [ 445.621226][T19899] lo speed is unknown, defaulting to 1000 [ 445.668398][ T5867] Bluetooth: hci2: command tx timeout [ 446.070102][T19942] bond6: entered promiscuous mode [ 446.091539][T19942] 8021q: adding VLAN 0 to HW filter on device bond6 [ 446.161314][T19952] FAULT_INJECTION: forcing a failure. [ 446.161314][T19952] name failslab, interval 1, probability 0, space 0, times 0 [ 446.228436][T19952] CPU: 1 UID: 0 PID: 19952 Comm: syz.2.3786 Not tainted syzkaller #0 PREEMPT(full) [ 446.228467][T19952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 446.228481][T19952] Call Trace: [ 446.228489][T19952] [ 446.228498][T19952] dump_stack_lvl+0x189/0x250 [ 446.228529][T19952] ? __pfx____ratelimit+0x10/0x10 [ 446.228561][T19952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 446.228585][T19952] ? __pfx__printk+0x10/0x10 [ 446.228622][T19952] should_fail_ex+0x414/0x560 [ 446.228652][T19952] should_failslab+0xa8/0x100 [ 446.228684][T19952] kmem_cache_alloc_noprof+0x73/0x3c0 [ 446.228721][T19952] ? skb_clone+0x212/0x3a0 [ 446.228747][T19952] skb_clone+0x212/0x3a0 [ 446.228772][T19952] __netlink_deliver_tap+0x404/0x850 [ 446.228813][T19952] ? netlink_deliver_tap+0x2e/0x1b0 [ 446.228846][T19952] netlink_deliver_tap+0x19c/0x1b0 [ 446.228878][T19952] netlink_unicast+0x7fa/0x9e0 [ 446.228912][T19952] ? __pfx_netlink_unicast+0x10/0x10 [ 446.228942][T19952] ? netlink_sendmsg+0x642/0xb30 [ 446.228959][T19952] ? skb_put+0x11b/0x210 [ 446.228981][T19952] netlink_sendmsg+0x805/0xb30 [ 446.229006][T19952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.229027][T19952] ? aa_sock_msg_perm+0xf1/0x1d0 [ 446.229048][T19952] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 446.229071][T19952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.229090][T19952] __sock_sendmsg+0x21c/0x270 [ 446.229119][T19952] ____sys_sendmsg+0x505/0x830 [ 446.229145][T19952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.229173][T19952] ? import_iovec+0x74/0xa0 [ 446.229198][T19952] ___sys_sendmsg+0x21f/0x2a0 [ 446.229222][T19952] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.229265][T19952] ? __fget_files+0x2a/0x420 [ 446.229283][T19952] ? __fget_files+0x3a0/0x420 [ 446.229306][T19952] __x64_sys_sendmsg+0x19b/0x260 [ 446.229330][T19952] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 446.229358][T19952] ? __pfx_ksys_write+0x10/0x10 [ 446.229383][T19952] ? rcu_is_watching+0x15/0xb0 [ 446.229407][T19952] ? rcu_is_watching+0x15/0xb0 [ 446.229434][T19952] do_syscall_64+0xfa/0x3b0 [ 446.229455][T19952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.229476][T19952] ? clear_bhb_loop+0x60/0xb0 [ 446.229500][T19952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.229520][T19952] RIP: 0033:0x7f511778ebe9 [ 446.229538][T19952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.229557][T19952] RSP: 002b:00007f51159f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.229579][T19952] RAX: ffffffffffffffda RBX: 00007f51179b5fa0 RCX: 00007f511778ebe9 [ 446.229595][T19952] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 446.229608][T19952] RBP: 00007f51159f6090 R08: 0000000000000000 R09: 0000000000000000 [ 446.229621][T19952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.229633][T19952] R13: 00007f51179b6038 R14: 00007f51179b5fa0 R15: 00007ffc4073b5d8 [ 446.229659][T19952] [ 446.234197][T19952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3786'. [ 446.685186][T19977] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3791'. [ 446.824409][T19985] netlink: 174572 bytes leftover after parsing attributes in process `syz.3.3793'. [ 447.130112][T20007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3799'. [ 447.565113][T20019] sctp: [Deprecated]: syz.4.3804 (pid 20019) Use of struct sctp_assoc_value in delayed_ack socket option. [ 447.565113][T20019] Use struct sctp_sack_info instead [ 447.629842][T20022] sctp: [Deprecated]: syz.4.3804 (pid 20022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 447.629842][T20022] Use struct sctp_sack_info instead [ 447.695199][T20026] FAULT_INJECTION: forcing a failure. [ 447.695199][T20026] name failslab, interval 1, probability 0, space 0, times 0 [ 447.731162][T20026] CPU: 1 UID: 0 PID: 20026 Comm: syz.3.3806 Not tainted syzkaller #0 PREEMPT(full) [ 447.731192][T20026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 447.731205][T20026] Call Trace: [ 447.731212][T20026] [ 447.731220][T20026] dump_stack_lvl+0x189/0x250 [ 447.731249][T20026] ? __pfx____ratelimit+0x10/0x10 [ 447.731279][T20026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.731303][T20026] ? __pfx__printk+0x10/0x10 [ 447.731334][T20026] ? __pfx___might_resched+0x10/0x10 [ 447.731353][T20026] ? lock_acquire+0x5f/0x360 [ 447.731382][T20026] should_fail_ex+0x414/0x560 [ 447.731410][T20026] should_failslab+0xa8/0x100 [ 447.731441][T20026] __kmalloc_cache_noprof+0x70/0x3d0 [ 447.731469][T20026] ? ipv6_flowlabel_opt+0xe73/0x23a0 [ 447.731503][T20026] ipv6_flowlabel_opt+0xe73/0x23a0 [ 447.731533][T20026] ? mntput_no_expire+0xb9/0x9d0 [ 447.731559][T20026] ? rcu_is_watching+0x15/0xb0 [ 447.731590][T20026] ? unwind_next_frame+0xa5/0x2390 [ 447.731615][T20026] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 447.731645][T20026] ? is_bpf_text_address+0x26/0x2b0 [ 447.731674][T20026] ? rcu_is_watching+0x15/0xb0 [ 447.731695][T20026] ? rcu_is_watching+0x15/0xb0 [ 447.731715][T20026] ? lock_release+0x4b/0x3e0 [ 447.731750][T20026] ? rcu_is_watching+0x15/0xb0 [ 447.731769][T20026] ? do_ipv6_setsockopt+0x8cf/0x2eb0 [ 447.731799][T20026] ? __local_bh_enable_ip+0x12d/0x1c0 [ 447.731824][T20026] do_ipv6_setsockopt+0xdb0/0x2eb0 [ 447.731858][T20026] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 447.731886][T20026] ? kstrtouint+0x6e/0xe0 [ 447.731915][T20026] ? get_pid_task+0x20/0x1f0 [ 447.731938][T20026] ? rcu_is_watching+0x15/0xb0 [ 447.731956][T20026] ? aa_label_sk_perm+0x4cd/0x630 [ 447.731984][T20026] ? get_pid_task+0x20/0x1f0 [ 447.732009][T20026] ? lock_release+0x4b/0x3e0 [ 447.732038][T20026] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 447.732067][T20026] ? get_pid_task+0x20/0x1f0 [ 447.732088][T20026] ? get_pid_task+0x20/0x1f0 [ 447.732113][T20026] ? rcu_is_watching+0x15/0xb0 [ 447.732132][T20026] ? lock_release+0x4b/0x3e0 [ 447.732159][T20026] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 447.732181][T20026] ? security_file_permission+0x75/0x290 [ 447.732210][T20026] ? __pfx___might_resched+0x10/0x10 [ 447.732230][T20026] ? lock_release+0x4b/0x3e0 [ 447.732257][T20026] ? vfs_write+0x956/0xb30 [ 447.732286][T20026] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 447.732310][T20026] ipv6_setsockopt+0x59/0x170 [ 447.732342][T20026] rawv6_setsockopt+0x23b/0x5b0 [ 447.732374][T20026] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 447.732404][T20026] ? aa_sock_opt_perm+0xff/0x1b0 [ 447.732423][T20026] ? sock_common_setsockopt+0x36/0xc0 [ 447.732452][T20026] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 447.732482][T20026] do_sock_setsockopt+0x179/0x1b0 [ 447.732505][T20026] __x64_sys_setsockopt+0x13f/0x1b0 [ 447.732528][T20026] do_syscall_64+0xfa/0x3b0 [ 447.732547][T20026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.732567][T20026] ? clear_bhb_loop+0x60/0xb0 [ 447.732597][T20026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.732617][T20026] RIP: 0033:0x7f55c6b8ebe9 [ 447.732636][T20026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.732654][T20026] RSP: 002b:00007f55c7950038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 447.732676][T20026] RAX: ffffffffffffffda RBX: 00007f55c6db5fa0 RCX: 00007f55c6b8ebe9 [ 447.732691][T20026] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 447.732703][T20026] RBP: 00007f55c7950090 R08: 0000000000000020 R09: 0000000000000000 [ 447.732716][T20026] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 447.732728][T20026] R13: 00007f55c6db6038 R14: 00007f55c6db5fa0 R15: 00007ffe3c9af928 [ 447.732753][T20026] [ 448.145815][ T5868] Bluetooth: hci2: command 0x0405 tx timeout [ 448.257964][T20031] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.562058][T20031] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.782258][T20031] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.901035][T20064] wg1 speed is unknown, defaulting to 1000 [ 448.924510][T20031] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.994333][T20064] lo speed is unknown, defaulting to 1000 [ 449.524376][ T9871] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.557804][ T9871] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.578106][ T9870] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.600883][ T9870] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.633490][T20086] wg1 speed is unknown, defaulting to 1000 [ 449.675200][T20086] lo speed is unknown, defaulting to 1000 [ 449.720278][T19979] Set syz1 is full, maxelem 65536 reached [ 449.741898][T20090] netlink: 'syz.4.3824': attribute type 4 has an invalid length. [ 449.766069][T20090] __nla_validate_parse: 7 callbacks suppressed [ 449.766089][T20090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3824'. [ 449.906238][T20093] wg1 speed is unknown, defaulting to 1000 [ 449.934812][T20093] lo speed is unknown, defaulting to 1000 [ 449.949577][T20101] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3826'. [ 449.969814][T20101] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3826'. [ 450.064812][T20111] netlink: 'syz.1.3830': attribute type 6 has an invalid length. [ 450.122640][T20111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3830'. [ 450.135176][T20111] netlink: 'syz.1.3830': attribute type 12 has an invalid length. [ 450.146294][T20111] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.3830'. [ 450.269457][T20121] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3832'. [ 450.276909][T20116] nbd3: detected capacity change from 0 to 127 [ 450.369333][ T5867] block nbd3: Receive control failed (result -32) [ 450.430422][T20125] wg1 speed is unknown, defaulting to 1000 [ 450.458717][T20125] lo speed is unknown, defaulting to 1000 [ 450.727554][T20146] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3840'. [ 450.746067][T20146] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3840'. [ 450.768641][T20146] rdma_rxe: rxe_newlink: failed to add lo [ 450.785639][T20146] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 450.866153][T20159] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3839'. [ 451.169001][T20170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3843'. [ 451.310649][T20177] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 451.330592][T20177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 451.350107][T20177] netlink: 'syz.1.3846': attribute type 29 has an invalid length. [ 451.358694][T20180] syzkaller1: entered promiscuous mode [ 451.364362][T20180] syzkaller1: entered allmulticast mode [ 451.602448][T20194] netlink: 'syz.3.3853': attribute type 8 has an invalid length. [ 451.643715][T20197] bridge0: port 3(erspan0) entered blocking state [ 451.653261][T20197] bridge0: port 3(erspan0) entered disabled state [ 451.661481][T20197] erspan0: entered allmulticast mode [ 451.669951][T20197] erspan0: entered promiscuous mode [ 451.675620][T20197] bridge0: port 3(erspan0) entered blocking state [ 451.682202][T20197] bridge0: port 3(erspan0) entered forwarding state [ 451.773169][T20197] erspan0: left allmulticast mode [ 451.789452][T20197] erspan0: left promiscuous mode [ 451.799414][T20197] bridge0: port 3(erspan0) entered disabled state [ 451.845278][T20213] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 451.856710][T20220] netlink: 'syz.2.3859': attribute type 1 has an invalid length. [ 451.864943][T20213] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 451.882361][T20220] netlink: 'syz.2.3859': attribute type 1 has an invalid length. [ 452.102229][T20235] netlink: 'syz.3.3864': attribute type 5 has an invalid length. [ 452.118487][T20236] netlink: 'syz.3.3864': attribute type 5 has an invalid length. [ 452.243609][T20243] netlink: 'syz.5.3865': attribute type 1 has an invalid length. [ 452.274382][T20242] veth0: entered promiscuous mode [ 452.283380][T20242] veth0: left promiscuous mode [ 452.512097][ T30] audit: type=1800 audit(1756461519.373:9): pid=20248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3867" name="memory.events" dev="tmpfs" ino=2851 res=0 errno=0 [ 452.748964][T20260] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 453.196819][T20288] tipc: Enabled bearer , priority 0 [ 453.204474][T20288] syzkaller0: entered promiscuous mode [ 453.211669][T20288] syzkaller0: entered allmulticast mode [ 453.231435][T20288] tipc: Resetting bearer [ 453.238887][T20287] tipc: Resetting bearer [ 453.255214][T20287] tipc: Disabling bearer [ 453.502261][T20299] tipc: Enabled bearer , priority 0 [ 453.520423][T20299] syzkaller0: entered promiscuous mode [ 453.527685][T20299] syzkaller0: entered allmulticast mode [ 453.557090][T20299] tipc: Resetting bearer [ 453.565550][T20298] tipc: Resetting bearer [ 453.584849][T20298] tipc: Disabling bearer [ 460.626331][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 460.774343][T16755] dvmrp1 (unregistering): left allmulticast mode [ 460.783085][T16755] bond14 (unregistering): (slave geneve5): Releasing active interface [ 461.251774][T16755] bond0 (unregistering): Released all slaves [ 461.269015][T16755] bond1 (unregistering): Released all slaves [ 461.281182][T16755] bond2 (unregistering): Released all slaves [ 461.293536][T16755] bond3 (unregistering): Released all slaves [ 461.308681][T16755] bond4 (unregistering): Released all slaves [ 461.321970][T16755] bond5 (unregistering): Released all slaves [ 461.332927][T16755] bond6 (unregistering): Released all slaves [ 461.343728][T16755] bond7 (unregistering): Released all slaves [ 461.354421][T16755] bond8 (unregistering): Released all slaves [ 461.365119][T16755] bond9 (unregistering): Released all slaves [ 461.387135][T16755] bond10 (unregistering): Released all slaves [ 461.400021][T16755] bond11 (unregistering): Released all slaves [ 461.412645][T16755] bond12 (unregistering): Released all slaves [ 461.423752][T16755] bond13 (unregistering): Released all slaves [ 461.435465][T16755] bond14 (unregistering): Released all slaves [ 461.448472][T16755] bond15 (unregistering): Released all slaves [ 461.462175][T16755] bond16 (unregistering): Released all slaves [ 461.522863][T16755] : left promiscuous mode [ 461.567107][T16755] tipc: Disabling bearer [ 461.572547][T16755] tipc: Disabling bearer [ 461.578218][T16755] tipc: Disabling bearer [ 461.584147][T16755] tipc: Left network mode [ 461.744227][T16755] pim6reg9 (unregistering): left allmulticast mode [ 461.909134][ T95] block nbd0: Possible stuck request ffff8880256b5080: control (read@0,1024B). Runtime 210 seconds [ 461.920036][ T95] block nbd0: Possible stuck request ffff8880256b5240: control (read@1024,1024B). Runtime 210 seconds [ 461.932100][ T95] block nbd0: Possible stuck request ffff8880256b5400: control (read@2048,1024B). Runtime 210 seconds [ 461.943235][ T95] block nbd0: Possible stuck request ffff8880256b55c0: control (read@3072,1024B). Runtime 210 seconds [ 462.124254][T16755] IPVS: stop unused estimator thread 0... [ 475.985780][ C1] ================================================================== [ 475.993924][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 476.001836][ C1] Read of size 2 at addr ffff88805959f02a by task swapper/1/0 [ 476.009321][ C1] [ 476.011654][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 476.011673][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 476.011684][ C1] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 476.011692][ C1] [ 476.011701][ C1] dump_stack_lvl+0x189/0x250 [ 476.011723][ C1] ? rcu_is_watching+0x15/0xb0 [ 476.011740][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.011757][ C1] ? rcu_is_watching+0x15/0xb0 [ 476.011771][ C1] ? lock_release+0x4b/0x3e0 [ 476.011796][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 476.011816][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 476.011836][ C1] print_report+0xca/0x240 [ 476.011851][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 476.011873][ C1] kasan_report+0x118/0x150 [ 476.011896][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 476.011921][ C1] rose_timer_expiry+0x471/0x4b0 [ 476.011951][ C1] call_timer_fn+0x17e/0x5f0 [ 476.011974][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 476.011994][ C1] ? call_timer_fn+0xbe/0x5f0 [ 476.012016][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 476.012042][ C1] ? rcu_is_watching+0x15/0xb0 [ 476.012056][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 476.012091][ C1] __run_timer_base+0x61a/0x860 [ 476.012111][ C1] ? ktime_get+0x3e/0x1f0 [ 476.012131][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 476.012150][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 476.012174][ C1] run_timer_softirq+0xb7/0x180 [ 476.012194][ C1] handle_softirqs+0x283/0x870 [ 476.012210][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 476.012227][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 476.012243][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 476.012263][ C1] __irq_exit_rcu+0xca/0x1f0 [ 476.012277][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 476.012294][ C1] irq_exit_rcu+0x9/0x30 [ 476.012307][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 476.012330][ C1] [ 476.012335][ C1] [ 476.012341][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 476.012357][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 476.012380][ C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 36 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 476.012393][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 476.012407][ C1] RAX: 57d4d7d9a1777a00 RBX: ffffffff819683b8 RCX: 57d4d7d9a1777a00 [ 476.012419][ C1] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8 [ 476.012430][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 476.012441][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa38530 [ 476.012452][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40 [ 476.012464][ C1] ? do_idle+0x1e8/0x510 [ 476.012479][ C1] ? do_idle+0x1e8/0x510 [ 476.012493][ C1] default_idle+0x13/0x20 [ 476.012507][ C1] default_idle_call+0x74/0xb0 [ 476.012522][ C1] do_idle+0x1e8/0x510 [ 476.012538][ C1] ? __pfx_do_idle+0x10/0x10 [ 476.012562][ C1] cpu_startup_entry+0x44/0x60 [ 476.012576][ C1] start_secondary+0x101/0x110 [ 476.012599][ C1] common_startup_64+0x13e/0x147 [ 476.012626][ C1] [ 476.012631][ C1] [ 476.321330][ C1] Allocated by task 19913: [ 476.325842][ C1] kasan_save_track+0x3e/0x80 [ 476.330542][ C1] __kasan_kmalloc+0x93/0xb0 [ 476.335142][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 476.340523][ C1] tomoyo_find_next_domain+0xdc/0x1aa0 [ 476.345998][ C1] tomoyo_bprm_check_security+0x11c/0x180 [ 476.351725][ C1] security_bprm_check+0x89/0x270 [ 476.356773][ C1] bprm_execve+0x8ee/0x1450 [ 476.361281][ C1] kernel_execve+0x8f0/0x9f0 [ 476.365873][ C1] call_usermodehelper_exec_async+0x210/0x360 [ 476.371955][ C1] ret_from_fork+0x3f9/0x770 [ 476.376584][ C1] ret_from_fork_asm+0x1a/0x30 [ 476.381363][ C1] [ 476.383687][ C1] Freed by task 19913: [ 476.387759][ C1] kasan_save_track+0x3e/0x80 [ 476.392443][ C1] kasan_save_free_info+0x46/0x50 [ 476.397475][ C1] __kasan_slab_free+0x5b/0x80 [ 476.402346][ C1] kfree+0x18e/0x440 [ 476.406258][ C1] tomoyo_find_next_domain+0x173e/0x1aa0 [ 476.411900][ C1] tomoyo_bprm_check_security+0x11c/0x180 [ 476.417622][ C1] security_bprm_check+0x89/0x270 [ 476.422656][ C1] bprm_execve+0x8ee/0x1450 [ 476.427163][ C1] kernel_execve+0x8f0/0x9f0 [ 476.431765][ C1] call_usermodehelper_exec_async+0x210/0x360 [ 476.437846][ C1] ret_from_fork+0x3f9/0x770 [ 476.442435][ C1] ret_from_fork_asm+0x1a/0x30 [ 476.447207][ C1] [ 476.449551][ C1] The buggy address belongs to the object at ffff88805959f000 [ 476.449551][ C1] which belongs to the cache kmalloc-512 of size 512 [ 476.463608][ C1] The buggy address is located 42 bytes inside of [ 476.463608][ C1] freed 512-byte region [ffff88805959f000, ffff88805959f200) [ 476.477330][ C1] [ 476.479695][ C1] The buggy address belongs to the physical page: [ 476.486115][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5959c [ 476.494888][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 476.503386][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 476.510938][ C1] page_type: f5(slab) [ 476.515011][ C1] raw: 00fff00000000040 ffff88801a441c80 ffffea0001692a00 dead000000000002 [ 476.523593][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 476.532188][ C1] head: 00fff00000000040 ffff88801a441c80 ffffea0001692a00 dead000000000002 [ 476.540860][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 476.549534][ C1] head: 00fff00000000002 ffffea0001656701 00000000ffffffff 00000000ffffffff [ 476.558223][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 476.566902][ C1] page dumped because: kasan: bad access detected [ 476.573331][ C1] page_owner tracks the page as allocated [ 476.579048][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5865, tgid 5865 (syz-executor), ts 74718445769, free_ts 26300352530 [ 476.600425][ C1] post_alloc_hook+0x240/0x2a0 [ 476.605210][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 476.610760][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 476.616572][ C1] alloc_pages_mpol+0x232/0x4a0 [ 476.621435][ C1] allocate_slab+0x8a/0x370 [ 476.625941][ C1] ___slab_alloc+0xbeb/0x1410 [ 476.630627][ C1] __kmalloc_cache_noprof+0x296/0x3d0 [ 476.636010][ C1] device_add+0xbe/0xb50 [ 476.640250][ C1] device_create+0x25b/0x2f0 [ 476.644841][ C1] mac80211_hwsim_new_radio+0x418/0x5340 [ 476.650483][ C1] hwsim_new_radio_nl+0xea4/0x1b10 [ 476.655617][ C1] genl_family_rcv_msg_doit+0x212/0x300 [ 476.661174][ C1] genl_rcv_msg+0x60e/0x790 [ 476.665692][ C1] netlink_rcv_skb+0x205/0x470 [ 476.670483][ C1] genl_rcv+0x28/0x40 [ 476.674475][ C1] netlink_unicast+0x82f/0x9e0 [ 476.679273][ C1] page last free pid 1 tgid 1 stack trace: [ 476.685160][ C1] __free_frozen_pages+0xbc4/0xd30 [ 476.690287][ C1] free_contig_range+0x1bd/0x4a0 [ 476.695232][ C1] destroy_args+0x64/0x4a0 [ 476.699654][ C1] debug_vm_pgtable+0x39f/0x3b0 [ 476.704508][ C1] do_one_initcall+0x233/0x820 [ 476.709283][ C1] do_initcall_level+0x104/0x190 [ 476.714230][ C1] do_initcalls+0x59/0xa0 [ 476.718565][ C1] kernel_init_freeable+0x334/0x4b0 [ 476.723768][ C1] kernel_init+0x1d/0x1d0 [ 476.728104][ C1] ret_from_fork+0x3f9/0x770 [ 476.732696][ C1] ret_from_fork_asm+0x1a/0x30 [ 476.737475][ C1] [ 476.739798][ C1] Memory state around the buggy address: [ 476.745432][ C1] ffff88805959ef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 476.753495][ C1] ffff88805959ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 476.761571][ C1] >ffff88805959f000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 476.769631][ C1] ^ [ 476.774998][ C1] ffff88805959f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 476.783061][ C1] ffff88805959f100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 476.791117][ C1] ================================================================== [ 476.799269][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 476.806483][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 476.815433][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 476.825494][ C1] Call Trace: [ 476.828783][ C1] [ 476.831632][ C1] dump_stack_lvl+0x99/0x250 [ 476.836238][ C1] ? __asan_memcpy+0x40/0x70 [ 476.840834][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.846044][ C1] ? __pfx__printk+0x10/0x10 [ 476.850655][ C1] vpanic+0x281/0x750 [ 476.854644][ C1] ? __pfx_vpanic+0x10/0x10 [ 476.859157][ C1] ? ct_nmi_exit+0x14b/0x1d0 [ 476.863756][ C1] panic+0xb9/0xc0 [ 476.867487][ C1] ? __pfx_panic+0x10/0x10 [ 476.871923][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 476.877829][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 476.883737][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 476.888872][ C1] check_panic_on_warn+0x89/0xb0 [ 476.893831][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 476.898952][ C1] end_report+0x78/0x160 [ 476.903208][ C1] kasan_report+0x129/0x150 [ 476.907729][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 476.912856][ C1] rose_timer_expiry+0x471/0x4b0 [ 476.917808][ C1] call_timer_fn+0x17e/0x5f0 [ 476.922410][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 476.927881][ C1] ? call_timer_fn+0xbe/0x5f0 [ 476.932577][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 476.937723][ C1] ? rcu_is_watching+0x15/0xb0 [ 476.942497][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 476.947973][ C1] __run_timer_base+0x61a/0x860 [ 476.952832][ C1] ? ktime_get+0x3e/0x1f0 [ 476.957179][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 476.962559][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 476.968816][ C1] run_timer_softirq+0xb7/0x180 [ 476.973679][ C1] handle_softirqs+0x283/0x870 [ 476.978454][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 476.983232][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 476.988528][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 476.993743][ C1] __irq_exit_rcu+0xca/0x1f0 [ 476.998341][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 477.003550][ C1] irq_exit_rcu+0x9/0x30 [ 477.007794][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 477.013446][ C1] [ 477.016385][ C1] [ 477.019319][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 477.025309][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 477.031042][ C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 36 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 477.050648][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 477.056723][ C1] RAX: 57d4d7d9a1777a00 RBX: ffffffff819683b8 RCX: 57d4d7d9a1777a00 [ 477.064706][ C1] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8 [ 477.072684][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 477.080659][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa38530 [ 477.088637][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40 [ 477.096628][ C1] ? do_idle+0x1e8/0x510 [ 477.100906][ C1] ? do_idle+0x1e8/0x510 [ 477.105182][ C1] default_idle+0x13/0x20 [ 477.109537][ C1] default_idle_call+0x74/0xb0 [ 477.114318][ C1] do_idle+0x1e8/0x510 [ 477.118407][ C1] ? __pfx_do_idle+0x10/0x10 [ 477.123031][ C1] cpu_startup_entry+0x44/0x60 [ 477.127818][ C1] start_secondary+0x101/0x110 [ 477.132605][ C1] common_startup_64+0x13e/0x147 [ 477.137571][ C1] [ 477.140938][ C1] Kernel Offset: disabled [ 477.145270][ C1] Rebooting in 86400 seconds..