last executing test programs: 5.962202892s ago: executing program 4 (id=1632): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xbe, 0x0, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x1c, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xffff2c09}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYRES16=r4], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r9, 0x1000) ioctl$SIOCAX25NOUID(r9, 0x89e3, &(0x7f0000000440)=0x1) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r11, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r12 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r12, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 4.77329518s ago: executing program 3 (id=1643): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00') unshare(0x6a040000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket(0x8, 0x3, 0x0) (async) r0 = socket(0x8, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x1ff}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x1ff}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYBLOB="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"], 0xf9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0xff06, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0xff06, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) socket(0x2b, 0x80801, 0x1) (async) socket(0x2b, 0x80801, 0x1) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x2, 0x0, 0x7, 0x0, 0x8}, 0x0, 0x0) 3.668346163s ago: executing program 2 (id=1646): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)}], 0x2}], 0x1, 0x40800) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029000000", @ANYRES16=r4], 0x18}, 0x40c0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@getchain={0x2c, 0x66, 0x110, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x6, 0xd}, {0xa, 0xfff4}}, [{0x8, 0xb, 0x4}]}, 0x2c}}, 0x20040000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7], 0x90}}, 0x0) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000300)=0xffffffff, 0x4) 3.482051976s ago: executing program 2 (id=1647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0xb}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r6, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r10 = socket(0x1e, 0x4, 0x0) r11 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r11, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r10, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 3.481292996s ago: executing program 4 (id=1648): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r2}, 0x20) sendmmsg$inet6(r2, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) writev(r2, &(0x7f0000000880)=[{&(0x7f00000003c0)="f51af5231a", 0x5}], 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000080073014b000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fc}, 0x94) sendmsg$inet6(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0xa, 0x4e21, 0xfffffffb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5ad}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000400)='_j', 0x2}], 0x1}, 0x1) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa4aca1a6557cef6d}, 0xc, &(0x7f00000002c0)={&(0x7f00000008c0)={0xb4, 0x9, 0x6, 0x401, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x14, 0x1a, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2f}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44040}, 0x20000080) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000080)={r7, 0x2, 0x1, "fa"}, 0x9) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000004ae1e60000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000010400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a3100000000140000001100010000000000000000000100000a"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="180000008f00000000000000da41000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf090000c305a13f394ace37e59bc9812700000000550901008004000095000000000000004500ffff0000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000bf91000000000000b70200000200000085000000ae000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xb, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffeffff}, 0x94) 3.003941875s ago: executing program 3 (id=1652): unshare(0x2a020400) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff}, 0xe) (async) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0xf, 0x12) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000400)) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r4, r8, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) (async) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f00000003c0)=0x1, 0x4) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x1, &(0x7f0000000340)='\x00', 0x9, 0x1, 0x16c0, 0x9, 0x9, 0x1, 0x1, 'syz1\x00'}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00'}) (async) syz_emit_ethernet(0x7a, &(0x7f00000009c0)={@random="856b1200ff00", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x400}, {}, {}, {}, {0x8, 0x22eb, 0xfffffffc, {{}, 0x2, {0x4}}}}}}}}}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) pread64(r9, &(0x7f0000002200)=""/89, 0x59, 0x10000) 2.798130396s ago: executing program 3 (id=1654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x20008000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xa4, '\x00', 0x567c4e8f, 0x1ff, 0x7, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4000000) 2.676288394s ago: executing program 0 (id=1655): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000000ffffffef000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000c80)={'sit0\x00', 0x0, 0x0, 0x97, 0x8000, 0x7, {{0x35, 0x4, 0x0, 0x3d, 0xd4, 0x67, 0x0, 0x8, 0x4, 0x0, @multicast1, @private=0xa010100, {[@ssrr={0x89, 0x13, 0xaa, [@private=0xa010102, @broadcast, @broadcast, @empty]}, @lsrr={0x83, 0x1f, 0xee, [@remote, @remote, @multicast1, @multicast1, @multicast1, @remote, @remote]}, @ra={0x94, 0x4, 0x1}, @generic={0x83, 0xa, "57973bf108fa94e3"}, @generic={0x94, 0x10, "f5328a015f0256a018000de80e03"}, @timestamp_addr={0x44, 0x24, 0x56, 0x1, 0xb, [{@remote, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@local, 0xa}]}, @timestamp_prespec={0x44, 0xc, 0xda, 0x3, 0x4, [{@local, 0x19}]}, @rr={0x7, 0x17, 0x92, [@empty, @multicast2, @rand_addr=0x64010101, @private=0xa010100, @remote]}, @rr={0x7, 0x1b, 0x2c, [@private=0xa010101, @local, @multicast2, @broadcast, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1}]}, @generic={0x88, 0xd, "6e54376a29783ec7aaebbf"}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x10}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfe, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}]}]}, 0x4c}}, 0x4000010) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7}, 0x90) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000161000010027bd855403069bf8c4919000", @ANYRES32=r7, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r8, @ANYBLOB="0800030008000000"], 0x34}}, 0x4008000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0}, &(0x7f0000000780)=0x14) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r11], 0x20}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000b00)={'sit0\x00', 0x0, 0x20, 0x20, 0x8, 0x1, {{0x26, 0x4, 0x2, 0x20, 0x98, 0x66, 0x0, 0x1, 0x2f, 0x0, @multicast2, @private=0xa010101, {[@rr={0x7, 0x23, 0x77, [@private=0xa010101, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @broadcast, @broadcast]}, @noop, @cipso={0x86, 0x49, 0xffffffffffffffff, [{0x5, 0xa, "8ed5653f4f80625e"}, {0x7, 0x8, "00964e00965c"}, {0x5, 0x12, "e54c2205000000000000008000000000"}, {0x0, 0x2}, {0x7, 0x2}, {0x7, 0xe, "543272ee64bf3295a795e959"}, {0x5, 0x6, "49f8a3c9"}, {0x6, 0x7, "95e9f5bd83"}]}, @end, @rr={0x7, 0x13, 0x39, [@dev={0xac, 0x14, 0x14, 0x2a}, @multicast1, @private=0xa010101, @empty]}, @end, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a00)={'ip_vti0\x00', &(0x7f0000000680)={'tunl0\x00', 0x0, 0x7, 0x80, 0xb, 0x0, {{0x21, 0x4, 0x1, 0x6, 0x84, 0x64, 0x0, 0x2, 0x29, 0x0, @multicast1, @loopback, {[@rr={0x7, 0xb, 0x81, [@multicast2, @local]}, @generic={0x83, 0x9, "1d393c906f9c52"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x44, 0xbf, 0x3, 0x2, [{@remote, 0xf}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@private=0xa010101, 0x3}, {@rand_addr=0x64010102, 0x4}, {@multicast2, 0xffff}, {@loopback}, {@private=0xa010101, 0x8}, {@empty, 0xfffffffa}]}, @rr={0x7, 0xf, 0xc7, [@broadcast, @local, @rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000c00)={@private1, 0x0}, &(0x7f0000000c40)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000200), 0xc, &(0x7f0000000e00)={&(0x7f0000001000)=ANY=[@ANYBLOB="60010000", @ANYRES16=0x0, @ANYBLOB="000128bd7000fcdbdf25190000003000018008000300010000000800030002000000140002006970366772657461703000000000000008000100", @ANYRES32=0x0, @ANYBLOB="6800018008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000140002006d616376746170300000000000000000140002006e696376663000000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="60000180140002006d6163766c616e31000000000000000014000200776731000000000000000000000000001400020076657468315f6d61637674617000000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="00d370bd3badc05e4300000095ee39467a38bfb0de78f4bd43a0f1723e0bae429bcb56234b6f15f225c869f29804270c82681c8ce7f12ca6f50e6441b82eda6342844346eb3a3f7f6729a98a644edfa350eaafa95a5fc33c76e9e6f7875e16e2d2a301bac8983cffa4ad17ba19f5a66eca081d0cdb080cb6d6a1185a6b7794811bcc06da125f", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="4800018008000300050000001400020073797a5f74756e000000000000000000080003000100000008000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="080003000300000008000100", @ANYRES32=r17, @ANYBLOB="0c0001800800030003000000"], 0x160}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x58}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x94) r18 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) r19 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000001240)=ANY=[@ANYRESHEX=r18, @ANYBLOB="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", @ANYRESHEX=r2, @ANYRESHEX=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r19}, 0x10) r20 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r20, &(0x7f00000000c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.649012816s ago: executing program 3 (id=1656): accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10, 0x80000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1341, 0x0) socket(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x9}, 0x18) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x400000000010, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) epoll_create1(0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0x8, 0x1}, {0x5}, {0xfff1, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x58011}]}}]}, 0x3c}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000280)="1a", 0x1}, {&(0x7f00000002c0)="3195", 0x2}], 0x2, 0x0, 0x0, 0x1}], 0x1, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_ZERO(r8, 0x0, 0x48f, &(0x7f00000000c0)={0xed, @broadcast, 0x4e25, 0x4, 'lblc\x00', 0x21, 0x10003, 0x10}, 0x2c) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x1a, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000f7ffffff00000000b658000018110000", @ANYRES32=r9, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.340093499s ago: executing program 4 (id=1658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20008040) (async) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20008040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8000}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) (async) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) writev(r0, &(0x7f0000000180), 0x100000000000003c) 2.267524792s ago: executing program 0 (id=1659): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) close(r3) write(r1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x12, r5, 0xb6cc0000) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x58a6}]}, 0x38}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x18) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESHEX=r9], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r11, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r12 = socket$key(0xf, 0x3, 0x2) recvmmsg(r12, &(0x7f0000000300)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000001bc0)=""/4106, 0x100a}, 0x390b}], 0x1, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r12, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r12, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.154970874s ago: executing program 4 (id=1660): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000010000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000004f40)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x1, 0x20, 0x0, 0x4, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x67, 0x0, 0xdb, 0x4, 0x0, @empty, @empty}}}}) syz_genetlink_get_family_id$l2tp(0x0, r7) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200)=0x10001, 0x12) sendfile(r10, r9, 0x0, 0xf03a0005) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r11, 0x6, 0x3, &(0x7f0000000000)=0x2c, 0x4) bind$bt_l2cap(r11, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r11, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 2.014010211s ago: executing program 2 (id=1661): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x12000, 0x0) (async) unshare(0x4a040000) 1.862572067s ago: executing program 1 (id=1663): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x1d, 0x0, 0x0) r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x80000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r2, 0x11e, 0x1, &(0x7f0000000080)=0x4, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000010701020000000000000000070000031400078008000240d2000002060001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x48080) 1.777952161s ago: executing program 1 (id=1664): r0 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80400) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESHEX=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="5000000010001fff00000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="004000230000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r4, @ANYBLOB="10000200000001000500270000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x1, 0xa, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB="002a32d5f5dc0bdc0500000000000eb982be11d15f3d0076657468000000000400028008000a00", @ANYRES32=r7, @ANYRESHEX=r3], 0x3c}, 0x1, 0x0, 0x0, 0x20000015}, 0x8000) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1}], 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket(0x11, 0x800000003, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r10 = bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000b40)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000000000000000000000000000000000000e5ffff512e7b00fa69f7932259b3a6c79c98d896e72685602cf1b0f32d90aebf879c4784b392f37e20b5f28536c5c37fe7660f8f5778c1d6152fc19b126a072d092794f1cbd4b66e2b0e0e51f4a9c5d2f60b66f3f27a42154824d4a63e3665193759c68f23a66fce73bda4d3c540c2359bf08229dbed7ab169cf816c4660167ffa6d63d30a2e339d4bc03abf0e1b0c695707c20a639692f9eb983a06eb46d1712685903a100da24fbebea05c9c5b361570f1ebef0287260092215793559ecb757f2604b8a704a8037ba613e025b4c4"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="b71201000012a37b7a0d", @ANYRES64=r4, @ANYRESHEX=r10, @ANYBLOB="093c0e20a8608ec41537459720020afcb1b820511b930f1661cad1543875a3ddd62dbc3ca5f7b22160d9661d80b29b8269a42588b2899986a9a5be82a75237882dd529b6427db7aa2faa366b26acacdadf226aa3fde4c64d33978aeb0d5556c2fd747a52bee54c65000db43e03ab788f1a37888eec65780b20ce6ed18769a32fff56092bb600bcd78e7fe6d84db9468e971bc76cb8e94bdc7721adde609f3d2b6a6e3bfb753636546ed4492ca0315537ad"], 0x0, 0x1a, 0x0, 0x0, 0xfc5b, 0x10000}, 0x28) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000a43af1a04c911119ebc64500020000006d0500000500000002000000", @ANYRES32=r10, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r11}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r11}, 0x38) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040101, 0xfffffffd, 0x0, 0x0, 0x0, 0x5}}) 1.698249119s ago: executing program 3 (id=1665): bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a1100000500420002"], 0x18}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x24}, 0x3c, 0x4, 0x0, 0x0, 0xa, 0x2}, {@in=@private=0xa010101, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3c, 0x4, 0x0, 0xffffffff, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x4020800) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELOBJ={0x68, 0x14, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_USERDATA={0x33, 0x8, "0ad2b447ee723554429bf6a795748465122b31d0748af63e5f34ae5eb197256a8a75f1aa69a696d8b397706b951426"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x90}, 0x1, 0x0, 0x0, 0x101}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELOBJ={0x68, 0x14, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_USERDATA={0x33, 0x8, "0ad2b447ee723554429bf6a795748465122b31d0748af63e5f34ae5eb197256a8a75f1aa69a696d8b397706b951426"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x90}, 0x1, 0x0, 0x0, 0x101}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000680)="e0e5934d5208f07cb835b97e7ec1", 0x0, 0xcfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket(0x40000000015, 0x5, 0x0) (async) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r5, 0x200000000114, 0x8, &(0x7f0000019580)=""/102400, &(0x7f0000000400)=0x19000) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0xc004) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100002}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0x180, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}]}, @TIPC_NLA_LINK={0xfc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x176c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7e0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4040010}, 0x40004) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r7, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff5000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x96, &(0x7f00000015c0)=""/150, 0x0, 0x41}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 1.510759321s ago: executing program 1 (id=1666): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000791240000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x83e00, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.509905013s ago: executing program 3 (id=1667): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) accept$nfc_llcp(r1, &(0x7f0000000340), &(0x7f0000000140)=0x60) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) unshare(0x62040200) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000180)={r4, r4, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x6, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x5e, @private=0xa010102, 0x3, 0x0, 'fo\x00', 0x20, 0x0, 0x61}, 0x2c) (async) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x5e, @private=0xa010102, 0x3, 0x0, 'fo\x00', 0x20, 0x0, 0x61}, 0x2c) epoll_pwait(r1, 0x0, 0x0, 0x10001, &(0x7f0000000180)={[0xffffffffe277652b]}, 0x8) 1.409033606s ago: executing program 1 (id=1668): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='veth1_to_bond\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='xfrm0\x00') r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @loopback, @remote}, &(0x7f00000000c0)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x41, r2}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000180)=0x2, 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x4000010, r1, 0xcd08d000) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f00000001c0)={0x23, 0x3, 0x6, 0xee}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@rand_addr, @empty, 0x0}, &(0x7f0000000240)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000280)={'tunl0\x00', r6, 0x10, 0x289515d5961641e4, 0x100, 0x8, {{0x29, 0x4, 0x0, 0x2f, 0xa4, 0x67, 0x0, 0xa, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0x69, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x800}, {@remote, 0xaa78}]}, @rr={0x7, 0x1f, 0x5f, [@private=0xa010101, @rand_addr=0x64010100, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x21}, @loopback, @multicast2, @private=0xa010101]}, @timestamp_addr={0x44, 0x24, 0x31, 0x1, 0x1, [{@multicast2, 0x5}, {@rand_addr=0x64010100}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@empty, 0x1000}]}, @timestamp_prespec={0x44, 0xc, 0x17, 0x3, 0x1, [{@broadcast, 0x7f}]}, @ssrr={0x89, 0x23, 0x8b, [@dev={0xac, 0x14, 0x14, 0xd}, @multicast1, @broadcast, @loopback, @local, @private=0xa010100, @rand_addr=0x64010100, @loopback]}]}}}}}) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x33, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x7, 0x1, 0x0, 0x1}, @ringbuf_query, @alu={0x4, 0x0, 0x7, 0x5, 0x4, 0xfffffffffffffff4, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5c28}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x8}]}, &(0x7f0000000680)='GPL\x00', 0x6, 0x8f, &(0x7f00000006c0)=""/143, 0x40f00, 0x20, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x7, 0x9, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r7, r5, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0xfff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r8}, &(0x7f0000000480), &(0x7f0000000900)=r9}, 0x20) syz_genetlink_get_family_id$wireguard(&(0x7f0000000980), 0xffffffffffffffff) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) close(r10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r11, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r12, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) pipe(&(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c00)={'ip6_vti0\x00', &(0x7f0000000b80)={'ip6tnl0\x00', r6, 0x4, 0x7f, 0x9, 0xf, 0x50, @remote, @remote, 0x10, 0x8, 0xdff, 0x4}}) sendmsg$nl_route_sched(r14, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)=@deltclass={0x50, 0x29, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0x2, 0x10}, {0xffe0, 0x9}, {0xffe0, 0x8}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x3ff}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_RATE={0x6, 0x5, {0x1, 0xa}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) recvmsg$unix(r13, &(0x7f0000000fc0)={&(0x7f0000000d40)=@abs, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000dc0)=""/172, 0xac}, {&(0x7f0000000e80)=""/39, 0x27}, {&(0x7f0000000ec0)=""/77, 0x4d}], 0x3, &(0x7f0000000f80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}, 0x12201) pselect6(0x40, &(0x7f0000001000)={0x8001, 0x400, 0x54, 0x2, 0x9, 0x8, 0x18d, 0x6}, &(0x7f0000001040)={0x9, 0x5, 0x5, 0x9, 0x1ff, 0x7299, 0xd7, 0x9}, &(0x7f0000001080)={0x6, 0x4, 0xa8, 0x5, 0x3, 0x5, 0xfff, 0x80}, &(0x7f0000001100), &(0x7f0000001180)={&(0x7f0000001140)={[0x7ff]}, 0x8}) 1.382517894s ago: executing program 2 (id=1669): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)={0x14, 0x17, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x0}]}, 0x14}], 0x1, 0x0, 0x0, 0x20000041}, 0x4000090) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x4, 0x13, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f00000000c0)=0x4, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@allocspi={0x108, 0x16, 0x1, 0x70bd2d, 0x25dfdbff, {{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x8}, {@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x6c}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x88c}, {0x0, 0x0, 0x0, 0x1}, {0x2}}, 0x0, 0x7fff}, [@proto={0x5, 0x1b}, @extra_flags={0x8, 0x18, 0x189c868b}]}, 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000b00)="68ddaa732d69a6f7eb258957fccb89134faf578e9ff0cc38595e4c9c1f2a32ceb6799c682d87e991cd718f04a1487a5d99bef5a95019bdd837d20274d2e98cfbde31b70e45fcc74efe1c42ba121fe280bf8af2c22489537e57dee1cc54c41bd8f9086f9498bc3bcc4f0501f1defec42e4faac1dd0b0b67b797182b6c4ce3ff3da7d4d4a1069cada5b152bbd64335f0254ecbfe43c5d7cd5b8403e53ae4f712b05945b98eb3420bb04c7ecf528693bb9693ada19e3a8f9522ab692a2d78aefa8af8f0e6b3b3af268e535bc4a610f7341e7da01249d929b75acf7c99bd21b2b5e3f210e2798f5636bed013dae7ff0d009ca52fffbd88a3964a60786f8f025e4b8fac68f910cdd4a991a6020fcd5a92bc7747acef6f62d087646d32fc37f6d1cabd609e6f392350ebcc02c341a3ce598522d3963374f5eb522919d029136288fd1c08cadfd7f43a3a6618d6dd5ae6baf5b2f321588e9dfc879e213badc550eb9982777b09d808ca8e5540695200193c820ad6ce1e924cdf342a1ff9feeab68af907798fbc0fa570ef885369090c35b0959baf6e29b86833a14cf3532cd537891f27caa37b10cda2cf6e75ddc11cb13c558cc210be334af3813630bb2c16145cf91ce50099452e0b10e4ce9beb32ab1a8692d2b3cff0e370f87e2219172b7bbcce5d8daca20ce4e047510920000e3a56747839920f72318843b6161fd643c2c56ca396b4c2283f9afef62412c04c934bc1ad4e54eac1acd4447ae3e2f9abf6cb9a5dcbba25aaf4254dc8a081b4eb4b98a11e71ea52be944225f68146444c7780798266feb5927fb3ebd9f7501b07316484f0100b83b7f87a550adddff1c808da6d5d909d9585f844f473c4ab93aa90dafee831ce0aa9c9d402e7b48c06712b4c0a398472364c1a3570029caefd9f3230e792c66e380c296249265a56dedbf5c2ac74cd667c6eb430819f69360d3ff5190adfb2bc669f9a2020264c57aa15e1cc144e9431a457ef86c0d03b32ac0a14d88a48c6a7dda45195c3a7fdfa083715ab572d66a654d68d9116aad0def05a606be11d288cef68e4b13bcc55ef5ae5054c06cebdf221c2b43d388f34e6725cd67e5cff513852fdb8d5bdaa5f4f4038fb8ed5ba9d34079d70d36398d6a88909a32be918fedd03ffd3ac801d45393ed59e007c932f5363e114cb01f50a5b2d445a781d1eb265bc3d3615fd4b5166e01e657cf331580a1b508ba10cfb0dedad4b5ac451b40a7f0df7567fa862a5c1e38a7c5a985e87a1082dfab4a105abf52fd4cab16fded0b7e72b376c5f8ad3c5c15f28304cef5ca6452c4663c961fc38b0c495eb749f9625f51a6b3ccea3db17fb5e2a8e9c815abc956e6a287660909f58c45163d7ea1cb2c3f13724", 0x3d6}], 0x1}}], 0x1, 0x4) shutdown(r3, 0x1) write$cgroup_int(r2, &(0x7f0000000080)=0x30000000, 0x12) 1.290545433s ago: executing program 0 (id=1670): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x810, 0xffffffffffffffff, 0x2a1d2000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3aff8ff1001000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x9e, &(0x7f0000000180)=""/158, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='mm_page_free_batched\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) unshare(0x400) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRES64=0x0], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x970b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) unshare(0x2c020400) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000000c0)={r4}, 0x8) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r10}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_VERSION={0x5, 0x6, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) close(r7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) read(r7, 0x0, 0x0) (async) ppoll(&(0x7f0000001080)=[{}], 0x13, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 1.250074206s ago: executing program 4 (id=1671): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3b, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000190081044e81f782db4cb90402200800fd007c05e8fe55a108001e000140cd00160012000a0002000d48035c3b61c1d67f01282e8d614230a68000a007a290457f01a705000000000000009100005ee4e11b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e603a6a8a9826835d3a71d95667e006dcdf63951f2155e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9e182a92954b43370e971ad9d3ac052f6dfe4f36bcf903ece981e8df37df7f8af2f28f", 0xfcc0}], 0x1}, 0x800) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r1 = socket$packet(0x11, 0x2, 0x300) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f0000000080)="835b68ad35238dd2478d5200d8b06a709cb39b8d9edb1ec9ee28f1f18a867a02283b832d3795c25a42f21c0f778271a05fe0f514ed7711689dae13343719ac42ff47ce2f63ceb0c4e85a7d49a3d2ff80c6e90db25007a97b128b7e1e9bdd46190d4bf0c3fc458d958cb514fbc1746572eaef407526816c627f80ecacbd6fa95de07a7561f276a130df1c8be6e6bd95bbe3862d9fa68dc9198276b47177e8a3d76a098f5e66b4cd6f5c810972c5661d0106ab03e2877cac01", 0xb8}, {&(0x7f0000000300)="43b051e15bfd3143df5a7130ce371be9b8a8a0f117f2d105c40c2e1e8d21370be911a12bd05e1aa9877dcc07e738b5435a09582ea33b6be59322a54149a57736cac472f3d7d3d085dc75ea2bc3f96c399f843b5f77e31b9b30ad89f04899e6c482e488a34291e6e194185612b33ede219a586425f297853d98d9deb7f47d67f0", 0x80}, {&(0x7f0000000380)="9f265842263c2ccd469b7517f3459f23f343a6a0aecc9c548bbd8998091c797c8499630f40b8e20e32e2ac0ab57e27bc4025a0824ecda645f145e05cfc1a02de2ba49a477709be812162637eb55d9a1b5e04b38a8ad4a0c9cb8ef365f62383462ad097bec00419962e2442c910a14b55d6021fb3bc08c78536f3a8592e00404f0e289c23fa6e7b79fadf3995e30fd6bcde764ed7c96972af0a52676894a32370f8cbf289d8f8f80165eb8ebed639092a38b49372136f86ec3b68635daa3f88f77da2e96cae9c9d549013cd0dc919a4fff344271c0f194f9b719e581bb177f7e394fb5b14c976fb9779b584594518f66e979480cd8f", 0xf5}, {&(0x7f00000001c0)="e4fc43", 0x3}, {&(0x7f0000000480)="99cec89995adf8899226348c7ec8abb674c233b15f42d313df72dc97a5621e08770edc769e0e4de4ef2926d24bdb98e2cce3ed214cff9cdf9400d8200a9dfc3f04a1be686124b08663699f3438fc6c739d747e8b858f5b6480cfe9bf1076b3ed76465e", 0x63}], 0x5, 0xd) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3, 0x3000, 0x7fff7fff, 0x3fe, 0x2, 0x9}, 0xfffffffffffffeb3) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={r4}, &(0x7f0000000180)=0x8) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r6 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000000000000020001280080001006774700014000280050005000100000008000300ffff000008000a00", @ANYRES32=r8, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.181641835s ago: executing program 0 (id=1672): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x400}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xecbd5a155ab96c04}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xecbd5a155ab96c04}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000006000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000057892cfbb3afbc80abea9423734299cb6e90aaf548bd6cf62e4254861ed2e2c64c5605883beca25372182d8462ddcf347c96bf68fd3b9e5a44ff1cb0ee0ed3d307adb8bd0d196fe5727459c86e35f5e20f4cc2e3dfd95b5997015e9cbefae4d1c3000000000ead0f7b67545c007602e03c8ca3be65bb9dfe4e262ccaacd1256f54418f7746f1af060000004a1c14dc045f93ecc9fe56c1ffaab6f0e8bec0ad639717ae511ffd46786e6de22a94998399b82e010bf2359909dfab55aef048a31fd62444e200e4ece4d7448d2469f333b5d201b655"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0xc, 0xfff1}, {0x3, 0xffff}, {0xd, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x3ff}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x40010) close(r4) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r8) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$kcm(0x2, 0xa, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) (async) r14 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r14, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) sendmsg$unix(r4, &(0x7f0000000980)={&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000440)="9fa068a33b1840d825e9f96d5108848a8728e4b84f65fe23438336607372a5b8c51db42900f99cda163319156d0d15b65f537d112b450135e03d702fe19d4bf1d7320791b49ef7304030e0e403955eef498b192c55b79b0edcf504db8e1610ba84787741ff2b675a15b92555d0b61dd0d0", 0x71}, {&(0x7f00000004c0)="e8e7382dbf340b2b6ca922eaf7395efd0255f806b585567c3585d94c976d1bcaed240b3ae31ffa23e10ee88146d670091971c045d62bc2cad4", 0x39}, {&(0x7f00000006c0)="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", 0xfe}], 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000280000000000000001000000010000001abe3b5e3a53ba4f1547de59e086abc8cf7f96ff53cf5af01677fabc304df7efbad279e1360ed0e246fa01aa595fabb601847d38421c793c635f3f8a4a3c4ad79fd954906e7103", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r13, @ANYRES32=r11, @ANYRES32=r7, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32=r10, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r12, @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x20004810}, 0x4) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x9b30, 0x5, 0xffffffed, 0x100006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.126973793s ago: executing program 2 (id=1673): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000640)='sched_switch\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES16=r2], 0x54}, 0x1, 0x0, 0x0, 0x200004c1}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e02", 0x14}], 0x1) r4 = socket(0x10, 0x2, 0x0) sendto$inet6(r4, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d270005000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r9}]}, 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r9}]}}}]}, 0x6c}}, 0x0) 1.126696452s ago: executing program 1 (id=1674): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r1, 0xffffffffffffffff, 0x2b, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0xc}}, 0x30) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x8, 0x4) 785.352595ms ago: executing program 4 (id=1675): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10) accept(r1, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') r2 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000500400008100000090000f1ee4f4400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r2}, 0x20) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r7) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000001"], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)}], 0x1}, 0x2404c140) r10 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r9, &(0x7f0000000080), &(0x7f0000000040)=@udp=r10, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@getstats={0x1c, 0x5e, 0x800, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040014}, 0x8044) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 679.94844ms ago: executing program 2 (id=1676): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@local, 0x0}, &(0x7f0000000240)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000000c0)=@raw=[@btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x7, 0x1, 0x0, r0}], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', r1, 0x0, r0, 0x8, &(0x7f00000002c0)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000003c0)=[r0, r0], &(0x7f0000000400)=[{0x4, 0x4, 0x6, 0x4}, {0x4, 0x5, 0x3, 0x7}, {0x5, 0x2, 0x3, 0x7}, {0x4, 0x3, 0x0, 0x3}, {0x2, 0x1, 0x7, 0xa}, {0x4, 0x2, 0x2, 0x6}, {0x5, 0x3, 0x9, 0x4}, {0x4, 0x4, 0x10, 0x7}, {0x4, 0x4, 0x10, 0x8}], 0x10, 0x2}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) sendmsg$NL80211_CMD_CONNECT(r3, 0x0, 0x2404c880) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd09000085000000410000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) read$alg(r3, 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r6 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}}}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) r8 = getgid() setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x5, 0x730, [0x0, 0x2000000010c0, 0x200000001476, 0x20000000158c], 0x0, 0x0, &(0x7f00000010c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x31, 0x201, 'team_slave_1\x00', 'vlan0\x00', 'ip_vti0\x00', 'ipvlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, [0xff, 0xff, 0xff, 0x0, 0xff], @empty, [0xff, 0xff, 0x0, 0xff, 0xff], 0x2de, 0x356, 0x386, [@bpf0={{'bpf\x00', 0x0, 0x210}, {{0x23, [{0x9c, 0xc, 0x8}, {0x7, 0x7, 0x1, 0x3}, {0xef, 0x68, 0xf9, 0x5}, {0xffff, 0x81, 0x1, 0x8}, {0x1, 0x2, 0xa7, 0x10001}, {0x101, 0x2, 0x7, 0x1}, {0x415a, 0x3, 0x1, 0x7}, {0xed2f, 0x32, 0x5, 0x2}, {0x7, 0x3, 0x6, 0x2}, {0xfffb, 0x1, 0x5, 0x7}, {0x409, 0x0, 0x5c, 0x2}, {0x8, 0x5, 0xf, 0x401}, {0x2, 0x3, 0x5e, 0x5079}, {0x8000, 0x6, 0x6, 0x2de9}, {0x200, 0x4, 0x1, 0x6000000}, {0x3, 0x4, 0x9, 0x200}, {0x5, 0x40, 0x9, 0x5}, {0x785, 0xf5, 0x6, 0xffffffff}, {0x800, 0x80, 0x6, 0xf}, {0x6, 0x80, 0xfc, 0x9}, {0x66, 0x40, 0x7, 0x2}, {0x3, 0x20, 0x7, 0x400}, {0x1, 0x70, 0x1, 0x2}, {0x1, 0xa, 0xff, 0x6}, {0x6, 0x8, 0x0, 0x8}, {0x7, 0x10, 0xe2, 0x2}, {0x1, 0xa0, 0xd4, 0x8}, {0x400, 0x6, 0x6, 0xf3a5e59}, {0x100, 0x0, 0x4, 0x3}, {0x2, 0x3, 0x7, 0x5}, {0xe, 0x3, 0x4, 0x3}, {0x8001, 0x4a, 0xc, 0x8001}, {0x9, 0x6, 0x81, 0xfffffe00}, {0x1, 0x1, 0x3, 0x1}, {0x6, 0x8, 0x7f, 0x6}, {0x7, 0x5, 0x4, 0xa88}, {0x6, 0x6, 0x8a, 0x7055}, {0x8000, 0x0, 0x8, 0x2a54}, {0x6, 0x0, 0xd0, 0x4}, {0x7ff, 0x8, 0x2, 0x6}, {0xc2, 0xa, 0x8, 0x6}, {0x8000, 0xfd, 0xff, 0x9}, {0x5, 0xba, 0xb, 0x80000001}, {0x3, 0xca, 0x5, 0x54eb}, {0x3227, 0x41, 0x1, 0x8}, {0x2, 0x32, 0x2, 0x3}, {0x7fff, 0xd4, 0x9, 0x7}, {0x746, 0x74, 0x8, 0x5}, {0x2e, 0x3, 0x81, 0x81}, {0x1, 0xf, 0x80, 0x7}, {0xff, 0x8, 0x5, 0x8c}, {0x6, 0x1, 0x8, 0x807}, {0x3, 0x7, 0xc8, 0x1}, {0x4, 0x9, 0xc}, {0x4, 0x1, 0xfe, 0x51a}, {0x4, 0x3, 0x11, 0xf}, {0x5, 0xff, 0x5, 0x4}, {0x1000, 0x2, 0x9, 0x3d505fa3}, {0x5, 0x5, 0x3, 0xe}, {0x6, 0xfb, 0xd, 0x7}, {0x7, 0x8, 0x80, 0x4}, {0x4, 0x5, 0x0, 0xffffffb5}, {0x8000, 0x5, 0x7, 0x2}, {0x0, 0xfd, 0x9, 0xffff0001}], {0x800}}}}, @cluster={{'cluster\x00', 0x0, 0x10}, {{0xfffffffe, 0xd8f4, 0x3, 0x1}}}], [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0xf1, 0x7c9c, 0x0, 0x0, "0f843f64e62d68c4c5aa0492a79dbda934e9926080097e707396b265ffaa47ccc9a15175646b0033095347ad725b8263ff1a1ad9dee565f6e60d05fe16cf57a0"}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x5, 0x2, 0x8809, 'syzkaller0\x00', 'caif0\x00', 'gretap0\x00', 'veth0_macvtap\x00', @remote, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], @empty, [0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x100, 0x8, 0x7f, 0x0, 0x0, "ce32fd0a31ee263719e2dfc5f2c8ce0ff7bff3879b393e2c4e753ea95e2d45ca6c308d7f44e23f7a5c0fe02b43e09fdd37ad2a4abd89e4f1ba7dbf63d6b6be5e"}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x3, 0x40, 0xf588986dd9ee77d3, 'xfrm0\x00', 'netdevsim0\x00', 'wlan0\x00', 'wg0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}, {0x11, 0x40, 0x6001, 'veth1_vlan\x00', 'xfrm0\x00', 'team_slave_0\x00', 'netdevsim0\x00', @random="4287f5a6b603", [0xff, 0x0, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0xde, 0x12e, 0x166, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x4}}}, @owner={{'owner\x00', 0x0, 0x18}, {{0xffffffffffffffff, 0x0, r7, r8, 0x7, 0x1}}}], [@common=@log={'log\x00', 0x28, {{0x5, "16f220db5f8ce02e175e441d054ff29aa7fb6868776bf653d233bf11171c", 0x2}}}], @common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xfffffffffffffffe}}}}]}]}, 0x7a8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) gettid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x840) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000002ec0)={0x0}, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000002f40)=0x0) r12 = getgid() sendmmsg$unix(r0, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001dc0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001e00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002080)=[{&(0x7f0000001e80)="11a5e84cd6cc1bea6a6484a0891f750ff89f7fb4f0bee5d32613b38b196bc2a9046ec7009c1d57400a68acfbfaf7b816f00938580a26d0e3b4aba3518acc620706baace4e0af87d3c9ea698dd025fcf20de697", 0x53}, {&(0x7f0000001f40)="a8342790", 0x4}, {&(0x7f0000001f80)="a79f6680ecf017513b1d927d587916c4ebe3ac2227da62504461f3914cde8899bfa2fd03f3046b69760db566a1653771ce69550ce1f559981e36ff4a0fb377a45951926fc59ab9900a311f03105181159d2a60e8f150e90f54c74c93d8ca59dc0424c90eb824b0408924a30aad19d935c18c08af5c4292dfb2d1ae6684467a394f51a9103253ea2c990fa7199e06ca7b6bce944bf427c77f55", 0x99}, {0x0}], 0x4, 0x0, 0x0, 0x4044018}}, {{&(0x7f0000002b40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002bc0)="1f6b00e421d903c21006747364f3bff8d2db4194eb6727539f6ab10c6ddb81e193e7bc899c28014969e12a2b1d037dd20284fa54aa4fa1e5236cdaff1a91186769c0b185dd11fdeec7b2840ec93e0890477566cdf9639e9b6e529c7c1874fc744c3b17d2297d2506503b2eee329dba81756604980773fd2a42b58712169e012c5faa9a24af11a6fd67da3003b2b95fe2475922cd64123196c0855893313b371001d7dd75c7eba7b4753a3fd03065c977987221", 0xb3}], 0x1, 0x0, 0x0, 0x4044884}}, {{&(0x7f0000002cc0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002d40), 0x0, &(0x7f0000002f80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @rights={{0x10}}], 0xd0, 0x404c040}}], 0x4, 0x800) ioctl$SIOCAX25DELUID(r5, 0x89e2, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 605.206335ms ago: executing program 0 (id=1677): syz_emit_ethernet(0x7a, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000442f"], 0x0) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea2010000900e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a000000000000fe8000000000000000000000000000aa000004d533"], 0x23c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000340)='cpuset.memory_pressure\x00', 0x0, 0x0) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r5, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x200008c0}, 0x800) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 545.397616ms ago: executing program 1 (id=1678): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x4000800) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000270600000ee60000bf2500000000000073350000000000006507000002001000070700004c0000001f75000000000000bf54000000000000070400004400f9f0ad32010000000000950000000000000005000000000000009500000000000000debfa255e44e4cc39f211fb04d7f202e6a53bd86bde99b679b4e6d24b8125690361eec3b181dcfd7c2fb2d1f8975b579a085bee32d414c1f3ab987a9de6385ae8021f4ca33b9b35fe817e98beb9cefe7f40fd6f0ea3affbdaaa897c70fb01d270a7b00d36fb5ab8fa92ac014a106e3e4decc68652503ca54fcef437d96c8a05d59ddcc8abf09cd77e93e940207b03189c5d4661e43df6f1f036c8d85a2ad7615a021f8cbe507ef94fb9f33315366e9ae080000001b532226b63b460d68808a67529637bf7f6731ad0cf1718bae3c8b9d2f89050cb496fe791381af6fab290900000000000000d640a5fde1f7d5eaa97cd25523fbd77300000000000000d67559b0c848aa3e7091f33e2dfc351e903ce85488fb25691249545bcf877011847df184bae6d3f5d0c016ec7d581d5b2fcb494d8c2df1929398ec5c3675ed16c27fff46a695eed7f50c531a612d5677b5e949ee4f16d10e41074702c4e89ee401ec2ec65f38f64189f1fa2cc0a42add3119025764759de2f093c26fe51d2f7635bb06bdf0b97d4a96cb0813e084232421c6026629fbf4c81954d11e154659b54fcf3468577295"], 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r5}, 0x38) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x0, 0x0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, &(0x7f0000000200)={'wlan1\x00'}) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10) close(0x4) 0s ago: executing program 0 (id=1679): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xac}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000002000000b7040000000000008500000033000000850000005000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)=r4}, 0x20) kernel console output (not intermixed with test programs): 567][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.539510][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.547374][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.555287][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.563166][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.571102][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.578988][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.587030][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.595470][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.603435][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.611320][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.619279][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.627123][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.635044][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.642916][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.650862][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.658726][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.666681][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.674507][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.682549][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.690400][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.698352][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.706194][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.714200][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.722067][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.730009][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.737884][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.745837][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.753650][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.761577][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.769437][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.777422][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.785306][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.793279][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.801130][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.809098][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.816939][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.824812][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.832645][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.840550][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.848377][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.856288][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.864116][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.872048][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.879871][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.887792][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.895598][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.903548][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.911378][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.919328][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.927179][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.935086][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.942934][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.950832][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.958664][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.966566][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.974354][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.982274][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 103.990120][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 103.998301][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 104.006127][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 104.014000][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 104.021826][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 104.029731][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 104.037557][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 104.045426][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 104.053272][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 104.061199][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 104.069043][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 104.076970][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 104.084786][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 104.092726][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 104.100549][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 104.108472][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 104.116302][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 104.124207][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 104.132028][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 104.139916][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 104.147739][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 104.155608][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 104.163454][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 104.171338][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 104.179159][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 104.187117][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 104.194928][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 104.202882][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 104.210713][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 104.310040][ T6780] dummy0: entered promiscuous mode [ 104.324540][ T6780] vlan3: entered promiscuous mode [ 104.393553][ T6800] netlink: 28 bytes leftover after parsing attributes in process `syz.4.203'. [ 104.405461][ T6800] netlink: 28 bytes leftover after parsing attributes in process `syz.4.203'. [ 104.513457][ T6800] erspan0: entered promiscuous mode [ 104.537601][ T6800] erspan0: left promiscuous mode [ 104.635344][ T6810] sch_tbf: peakrate 65535 is lower than or equals to rate 15348107221646557341 ! [ 104.671979][ T6810] sit0: entered promiscuous mode [ 104.683914][ T6810] __nla_validate_parse: 1 callbacks suppressed [ 104.683932][ T6810] netlink: 1 bytes leftover after parsing attributes in process `syz.1.207'. [ 104.763552][ T6814] netlink: 'syz.0.208': attribute type 2 has an invalid length. [ 104.802815][ T6814] netlink: 'syz.0.208': attribute type 5 has an invalid length. [ 104.900773][ T6825] netlink: 20 bytes leftover after parsing attributes in process `syz.1.211'. [ 104.925309][ T6828] netlink: 'syz.3.210': attribute type 4 has an invalid length. [ 104.996902][ T6828] netlink: 'syz.3.210': attribute type 4 has an invalid length. [ 105.134325][ T6839] netlink: 'syz.1.213': attribute type 6 has an invalid length. [ 105.330221][ T6847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.215'. [ 105.408458][ T6852] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 105.459244][ T6852] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 105.812008][ T6861] netlink: 6 bytes leftover after parsing attributes in process `syz.0.219'. [ 105.849430][ T6861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.190941][ T6466] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.267142][ T6466] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.308204][ T6466] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.333772][ T6466] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.569316][ T6872] bond_slave_1: mtu less than device minimum [ 107.051671][ T6881] sch_fq: defrate 4294967293 ignored. [ 107.086221][ T6890] syz_tun: entered allmulticast mode [ 107.142440][ T6890] netlink: 132 bytes leftover after parsing attributes in process `syz.2.226'. [ 107.190774][ T6889] syz_tun: left allmulticast mode [ 107.451309][ T6898] Cannot find add_set index 0 as target [ 107.590644][ T6903] netlink: 'syz.4.230': attribute type 33 has an invalid length. [ 107.610367][ T6903] netlink: 152 bytes leftover after parsing attributes in process `syz.4.230'. [ 108.305319][ T6918] sctp: [Deprecated]: syz.1.236 (pid 6918) Use of int in max_burst socket option deprecated. [ 108.305319][ T6918] Use struct sctp_assoc_value instead [ 108.385130][ T6918] syz.1.236 (6918) used greatest stack depth: 17664 bytes left [ 108.524757][ T6925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.239'. [ 108.550543][ T6926] sit0: left promiscuous mode [ 108.654245][ T6926] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 108.723698][ T6932] netlink: 'syz.0.239': attribute type 1 has an invalid length. [ 108.744670][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'. [ 108.746120][ T6925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.239'. [ 108.755436][ T6934] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 108.775883][ T6925] netlink: 24 bytes leftover after parsing attributes in process `syz.0.239'. [ 109.402325][ T6962] block nbd0: not configured, cannot reconfigure [ 109.586861][ T6964] geneve2: entered promiscuous mode [ 109.649991][ T6964] tipc: Cannot configure node identity twice [ 109.717335][ T6969] tap0: tun_chr_ioctl cmd 1074025676 [ 109.734087][ T6969] tap0: owner set to 0 [ 109.936610][ T6964] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.967967][ T6964] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.125196][ T6964] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.138050][ T6964] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.270807][ T6964] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.308541][ T6964] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.401397][ T6964] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.416218][ T6964] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.495550][ T7001] __nla_validate_parse: 2 callbacks suppressed [ 110.495567][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'. [ 110.622593][ T7001] netlink: 28 bytes leftover after parsing attributes in process `syz.0.258'. [ 110.690192][ T6466] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.728195][ T6466] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.752738][ T6466] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.761706][ T6466] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.764973][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.261'. [ 110.780160][ T7006] syz_tun: entered allmulticast mode [ 110.788142][ T7008] netlink: 'syz.2.261': attribute type 5 has an invalid length. [ 110.802279][ T6466] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.803256][ T7008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.261'. [ 110.821358][ T6466] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.830192][ T7005] syz_tun: left allmulticast mode [ 110.869702][ T7008] geneve2: entered promiscuous mode [ 110.874926][ T7008] geneve2: entered allmulticast mode [ 110.914598][ T6466] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.926111][ T6466] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.974276][ T6466] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 110.983768][ T6466] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 110.994330][ T6466] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 111.102338][ T6466] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 111.342527][ T7020] xt_TCPMSS: Only works on TCP SYN packets [ 111.471423][ T7027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.630313][ T7038] netlink: 616 bytes leftover after parsing attributes in process `syz.0.271'. [ 111.665977][ T7042] netlink: 'syz.2.270': attribute type 1 has an invalid length. [ 111.696036][ T7042] netlink: 224 bytes leftover after parsing attributes in process `syz.2.270'. [ 112.070213][ T7059] syzkaller0: entered promiscuous mode [ 112.088971][ T916] IPVS: starting estimator thread 0... [ 112.095429][ T7055] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 112.105567][ T7059] syzkaller0: entered allmulticast mode [ 112.162327][ T7069] netlink: 'syz.1.280': attribute type 16 has an invalid length. [ 112.225948][ T7065] IPVS: using max 38 ests per chain, 91200 per kthread [ 112.630065][ T7073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.718333][ T7073] bond0: (slave rose0): Enslaving as an active interface with an up link [ 112.779902][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'. [ 114.387832][ T7137] netlink: 20 bytes leftover after parsing attributes in process `syz.3.289'. [ 114.477983][ T7140] netlink: 24 bytes leftover after parsing attributes in process `syz.2.292'. [ 114.560058][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.291'. [ 114.799252][ T7150] bridge_slave_1: left allmulticast mode [ 114.817903][ T7150] bridge_slave_1: left promiscuous mode [ 114.827277][ T7150] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.869884][ T7150] bridge_slave_0: left promiscuous mode [ 114.896860][ T7150] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.542308][ T7188] openvswitch: netlink: Key type 186 is out of range max 32 [ 115.750346][ T7201] openvswitch: netlink: Duplicate key (type 21). [ 115.838982][ T7201] openvswitch: netlink: Duplicate key (type 21). [ 115.876943][ T7202] netlink: 'syz.0.302': attribute type 10 has an invalid length. [ 116.000602][ T7202] batman_adv: batadv0: Adding interface: netdevsim0 [ 116.007702][ T7202] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.073696][ T7202] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 116.260604][ T7224] netlink: 'syz.0.307': attribute type 1 has an invalid length. [ 116.369075][ T7224] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.461442][ T7228] bond2: (slave gretap1): making interface the new active one [ 116.476475][ T7228] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 116.752412][ T7250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.310'. [ 117.071943][ T7264] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.083739][ T7272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 117.099904][ T7272] hsr_slave_0: left promiscuous mode [ 117.106597][ T7272] hsr_slave_1: left promiscuous mode [ 117.228396][ T7264] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.314920][ T7283] netlink: 40 bytes leftover after parsing attributes in process `syz.1.317'. [ 117.333192][ T7283] netlink: 40 bytes leftover after parsing attributes in process `syz.1.317'. [ 117.337985][ T7264] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.354987][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 117.440959][ T7264] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.653259][ T6475] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.679042][ T6475] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.724381][ T6475] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.762967][ T6475] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.803386][ T7266] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.865295][ T7301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.323'. [ 118.146369][ T7266] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.218047][ T7266] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.271616][ T7266] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.330646][ T30] audit: type=1800 audit(1766087415.844:4): pid=7339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.330" name="cgroup.controllers" dev="tmpfs" ino=422 res=0 errno=0 [ 119.539525][ T6465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.551819][ T6465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.843140][ T7366] netlink: 228 bytes leftover after parsing attributes in process `syz.1.339'. [ 119.852893][ T7366] openvswitch: netlink: Flow actions attr not present in new flow. [ 119.862438][ T7366] netlink: 'syz.1.339': attribute type 1 has an invalid length. [ 119.871436][ T7366] netlink: 224 bytes leftover after parsing attributes in process `syz.1.339'. [ 120.169092][ T7373] netlink: 'syz.1.342': attribute type 2 has an invalid length. [ 120.195135][ T7373] pim6reg: entered allmulticast mode [ 120.202031][ T7373] pim6reg: left allmulticast mode [ 120.314715][ T7361] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 120.332479][ T7376] netlink: zone id is out of range [ 120.376250][ T7376] netlink: zone id is out of range [ 120.381407][ T7376] netlink: zone id is out of range [ 120.431074][ T7376] netlink: zone id is out of range [ 120.449648][ T7376] netlink: zone id is out of range [ 120.454794][ T7376] netlink: zone id is out of range [ 120.554798][ T7388] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 120.565053][ T7386] IPVS: stopping master sync thread 7388 ... [ 121.180759][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.353'. [ 121.363117][ T7421] netlink: 'syz.0.355': attribute type 146 has an invalid length. [ 121.403619][ T7421] netlink: 'syz.0.355': attribute type 11 has an invalid length. [ 121.432617][ T7421] netlink: 748 bytes leftover after parsing attributes in process `syz.0.355'. [ 121.570317][ T7423] syzkaller0: entered promiscuous mode [ 121.576585][ T7423] syzkaller0: entered allmulticast mode [ 121.613348][ T7423] tipc: Started in network mode [ 121.618500][ T7423] tipc: Node identity a2dca7c11f03, cluster identity 4711 [ 121.625894][ T7423] tipc: Enabled bearer , priority 0 [ 121.635847][ T5850] Bluetooth: hci0: command 0x080f tx timeout [ 121.651922][ T6473] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.666255][ T7425] tipc: Enabled bearer , priority 0 [ 121.676497][ T7422] tipc: Resetting bearer [ 121.733011][ T7422] tipc: Disabling bearer [ 121.808880][ T7425] syzkaller0: entered promiscuous mode [ 121.814390][ T7425] syzkaller0: entered allmulticast mode [ 121.833061][ T6465] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.841610][ T6465] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.944265][ T6465] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.968829][ T7440] __nla_validate_parse: 1 callbacks suppressed [ 121.968844][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.362'. [ 121.984383][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.362'. [ 122.022316][ T7425] tipc: Resetting bearer [ 122.053795][ T7438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.360'. [ 122.070810][ T7424] tipc: Resetting bearer [ 122.136494][ T7424] tipc: Disabling bearer [ 122.197626][ T7450] IPVS: persistence engine module ip_vs_pe_ not found [ 122.440795][ T7468] netlink: 56 bytes leftover after parsing attributes in process `syz.0.368'. [ 122.496733][ T7466] netlink: 56 bytes leftover after parsing attributes in process `syz.0.368'. [ 122.770619][ T7487] netlink: 'syz.0.371': attribute type 10 has an invalid length. [ 122.794092][ T7487] netlink: 2 bytes leftover after parsing attributes in process `syz.0.371'. [ 123.005879][ T7487] bond0: entered promiscuous mode [ 123.011002][ T7487] bond_slave_0: entered promiscuous mode [ 123.036042][ T7487] bond_slave_1: entered promiscuous mode [ 123.046357][ T7487] bridge0: port 3(bond0) entered blocking state [ 123.075514][ T7487] bridge0: port 3(bond0) entered disabled state [ 123.116178][ T7487] bond0: entered allmulticast mode [ 123.122414][ T7487] bond_slave_0: entered allmulticast mode [ 123.128423][ T7487] bond_slave_1: entered allmulticast mode [ 123.137580][ T7487] bridge0: port 3(bond0) entered blocking state [ 123.144153][ T7487] bridge0: port 3(bond0) entered forwarding state [ 123.368609][ T7494] syzkaller0: entered promiscuous mode [ 123.374112][ T7494] syzkaller0: entered allmulticast mode [ 123.589945][ T7506] x_tables: duplicate entry at hook 1 [ 123.914149][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.377'. [ 123.999681][ T7523] netlink: 3 bytes leftover after parsing attributes in process `syz.3.378'. [ 124.467450][ T7538] netlink: 20 bytes leftover after parsing attributes in process `syz.1.383'. [ 124.599234][ T7558] netlink: 'syz.2.386': attribute type 10 has an invalid length. [ 124.624910][ T7558] netlink: 40 bytes leftover after parsing attributes in process `syz.2.386'. [ 124.697138][ T7558] dummy0: entered promiscuous mode [ 124.707175][ T7558] bridge0: port 3(dummy0) entered blocking state [ 124.715972][ T7558] bridge0: port 3(dummy0) entered disabled state [ 124.722818][ T7558] dummy0: entered allmulticast mode [ 124.732721][ T7558] bridge0: port 3(dummy0) entered blocking state [ 124.739240][ T7558] bridge0: port 3(dummy0) entered forwarding state [ 125.527182][ T7596] net_ratelimit: 38 callbacks suppressed [ 125.527193][ T7596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.820019][ T7598] sctp: [Deprecated]: syz.2.398 (pid 7598) Use of int in max_burst socket option. [ 125.820019][ T7598] Use struct sctp_assoc_value instead [ 125.870462][ T7604] netlink: zone id is out of range [ 125.875604][ T7604] netlink: zone id is out of range [ 125.881228][ T7604] netlink: get zone limit has 4 unknown bytes [ 126.120937][ T7618] openvswitch: netlink: Flow key attribute not present in set flow. [ 126.266260][ T7621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.339026][ T7645] x_tables: unsorted underflow at hook 3 [ 127.722019][ T7657] netlink: 'syz.2.413': attribute type 29 has an invalid length. [ 127.746364][ T7657] __nla_validate_parse: 19 callbacks suppressed [ 127.746384][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'. [ 127.791741][ T7672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.416'. [ 127.865193][ T7667] bond0: entered promiscuous mode [ 127.917065][ T7667] bond_slave_0: entered promiscuous mode [ 127.923222][ T7667] bond_slave_1: entered promiscuous mode [ 127.942756][ T7667] batadv0: entered promiscuous mode [ 127.963991][ T7667] debugfs: 'hsr0' already exists in 'hsr' [ 127.970654][ T7667] Cannot create hsr debugfs directory [ 127.977137][ T7667] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 127.997647][ T7665] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 128.045538][ T7677] tipc: Started in network mode [ 128.055666][ T7677] tipc: Node identity 469fdecd001c, cluster identity 4711 [ 128.087250][ T7677] tipc: Enabled bearer , priority 0 [ 128.118280][ T7677] syzkaller0: entered promiscuous mode [ 128.143743][ T7677] syzkaller0: entered allmulticast mode [ 128.169532][ T7682] syzkaller1: entered promiscuous mode [ 128.175083][ T7682] syzkaller1: entered allmulticast mode [ 128.279703][ T7677] tipc: Resetting bearer [ 128.321340][ T7675] tipc: Resetting bearer [ 128.347383][ T7675] tipc: Disabling bearer [ 128.386672][ T7692] netlink: 'syz.3.421': attribute type 5 has an invalid length. [ 128.437903][ T7687] netlink: 24 bytes leftover after parsing attributes in process `syz.1.420'. [ 128.520340][ T7698] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.422'. [ 128.648821][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 128.734046][ T7706] geneve3: entered promiscuous mode [ 128.770536][ T7716] veth0: entered promiscuous mode [ 128.776784][ T7719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.424'. [ 128.923129][ T7716] veth0: left promiscuous mode [ 129.204963][ T7743] x_tables: unsorted entry at hook 3 [ 129.291769][ T7742] ip6gre1: entered promiscuous mode [ 129.318294][ T7742] ip6gre1: entered allmulticast mode [ 129.605076][ T7761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.437'. [ 129.626797][ T7763] syz_tun: entered allmulticast mode [ 129.693579][ T7763] syz_tun: left allmulticast mode [ 130.027979][ T7789] netlink: 24 bytes leftover after parsing attributes in process `syz.2.444'. [ 130.324014][ T7806] netlink: 84 bytes leftover after parsing attributes in process `syz.0.448'. [ 130.351712][ T7806] netlink: 175 bytes leftover after parsing attributes in process `syz.0.448'. [ 131.339462][ T7849] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 131.353777][ T7849] 0ªî{X¹¦: entered allmulticast mode [ 131.360110][ T7849] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 131.360660][ T7854] netlink: 'syz.1.460': attribute type 39 has an invalid length. [ 131.607249][ T7865] netlink: 'syz.4.465': attribute type 28 has an invalid length. [ 132.114549][ T7886] netlink: 'syz.1.470': attribute type 30 has an invalid length. [ 132.316487][ T24] IPVS: starting estimator thread 0... [ 132.429958][ T7905] IPVS: using max 29 ests per chain, 69600 per kthread [ 132.459900][ T7894] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.495992][ T7894] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 132.781726][ T7918] RDS: rds_bind could not find a transport for 4004:0:20:0:c002:0:20:0, load rds_tcp or rds_rdma? [ 132.831748][ T7894] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.862665][ T7894] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 132.981966][ T7916] 8021q: adding VLAN 0 to HW filter on device bond4 [ 133.012233][ T7922] : renamed from veth0_to_bond (while UP) [ 133.124151][ T7894] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.142970][ T7894] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 133.269037][ T7894] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.279720][ T7894] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 133.324720][ T7927] __nla_validate_parse: 12 callbacks suppressed [ 133.324737][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'. [ 133.407487][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.469872][ T7927] bond0: left allmulticast mode [ 133.474775][ T7927] bond_slave_0: left allmulticast mode [ 133.498302][ T7927] bond_slave_1: left allmulticast mode [ 133.514271][ T7927] bridge0: port 3(bond0) entered disabled state [ 133.536774][ T7927] bridge_slave_1: left allmulticast mode [ 133.542549][ T7927] bridge_slave_1: left promiscuous mode [ 133.552582][ T7927] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.568427][ T7927] bridge_slave_0: left allmulticast mode [ 133.575472][ T7927] bridge_slave_0: left promiscuous mode [ 133.597406][ T7927] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.761893][ T7934] batadv0: entered promiscuous mode [ 133.770721][ T7934] macvtap1: entered promiscuous mode [ 133.777834][ T7934] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 133.787434][ T7934] batadv0: left promiscuous mode [ 133.855623][ T6457] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 133.884738][ T6457] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 134.005697][ T6460] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 134.032979][ T6460] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 134.080005][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.486'. [ 134.097978][ T6460] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 134.106655][ T6460] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 134.124130][ T7946] 8021q: VLANs not supported on ip6tnl0 [ 134.148044][ T7944] 8021q: VLANs not supported on ip6tnl0 [ 134.186517][ T6457] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 134.194633][ T6457] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 134.446877][ T7957] netlink: 'syz.0.491': attribute type 4 has an invalid length. [ 134.472037][ T7959] Cannot find add_set index 2 as target [ 134.486331][ T7957] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.491'. [ 134.771887][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.494'. [ 134.788061][ T7973] : entered promiscuous mode [ 134.807818][ T7973] netlink: 'syz.1.494': attribute type 1 has an invalid length. [ 134.914440][ T7973] bond1: entered promiscuous mode [ 134.927167][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'. [ 134.938415][ T7973] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.987890][ T7973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.494'. [ 135.034332][ T7977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.059719][ T7977] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 135.077486][ T7977] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 135.088230][ T7977] bond1: (slave gre1): Opening slave failed [ 135.370861][ T7994] netlink: 'syz.2.500': attribute type 10 has an invalid length. [ 135.817225][ T8005] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 135.819033][ T852] IPVS: starting estimator thread 0... [ 135.935938][ T8009] IPVS: using max 35 ests per chain, 84000 per kthread [ 136.147594][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'. [ 136.186491][ T8019] netlink: 'syz.1.503': attribute type 2 has an invalid length. [ 136.240443][ T8020] netlink: 92 bytes leftover after parsing attributes in process `syz.1.503'. [ 136.598309][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 136.866772][ T8045] syzkaller0: entered promiscuous mode [ 136.883044][ T8045] syzkaller0: entered allmulticast mode [ 137.080290][ T8052] syzkaller1: entered promiscuous mode [ 137.092700][ T8052] syzkaller1: entered allmulticast mode [ 137.254384][ T8065] netlink: 'syz.4.515': attribute type 1 has an invalid length. [ 137.262877][ T8065] netlink: 240 bytes leftover after parsing attributes in process `syz.4.515'. [ 137.553702][ T8083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.520'. [ 137.930714][ T8103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.978786][ T8101] ip6tnl1: entered promiscuous mode [ 137.996271][ T8101] ip6tnl1: entered allmulticast mode [ 138.136603][ T8107] erspan0: entered promiscuous mode [ 138.163846][ T8107] gretap0: entered promiscuous mode [ 138.171125][ T8107] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 138.181626][ T8107] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 138.199136][ T8117] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 138.462202][ T8128] netlink: 'syz.0.534': attribute type 142 has an invalid length. [ 138.538812][ T8126] bond1: option ad_user_port_key: invalid value (65535) [ 138.546350][ T8126] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 138.552759][ T8133] __nla_validate_parse: 5 callbacks suppressed [ 138.552774][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.533'. [ 138.603748][ T8126] bond1 (unregistering): Released all slaves [ 138.863841][ T8154] netlink: 68 bytes leftover after parsing attributes in process `syz.1.539'. [ 138.864964][ T8156] netlink: 68 bytes leftover after parsing attributes in process `syz.1.539'. [ 138.957572][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.538'. [ 139.073424][ T8157] netlink: 96 bytes leftover after parsing attributes in process `syz.3.537'. [ 139.201257][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.540'. [ 139.250468][ T6453] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.282918][ T6453] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.302248][ T8166] sctp: [Deprecated]: syz.2.542 (pid 8166) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.302248][ T8166] Use struct sctp_sack_info instead [ 139.319195][ T6453] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.350766][ T6453] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.392094][ T8170] netlink: 20 bytes leftover after parsing attributes in process `syz.4.543'. [ 139.518904][ T8180] netlink: 87 bytes leftover after parsing attributes in process `syz.1.541'. [ 139.529227][ T8173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.541'. [ 139.718668][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.548'. [ 139.798960][ T8188] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 139.813281][ T8188] bond1 (unregistering): Released all slaves [ 140.500974][ T8222] netlink: 'syz.0.557': attribute type 9 has an invalid length. [ 141.794121][ T8276] netlink: 'syz.2.575': attribute type 6 has an invalid length. [ 142.283459][ T8299] netlink: 'syz.3.580': attribute type 64 has an invalid length. [ 143.104189][ T8328] xt_TCPMSS: Only works on TCP SYN packets [ 143.148510][ T8328] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 143.394471][ T8338] netlink: 'syz.3.592': attribute type 12 has an invalid length. [ 143.403449][ T8338] netlink: 'syz.3.592': attribute type 29 has an invalid length. [ 143.534044][ T8349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.219944][ T8385] __nla_validate_parse: 14 callbacks suppressed [ 144.219964][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 144.258541][ T8385] netlink: 'syz.0.604': attribute type 30 has an invalid length. [ 144.326905][ T8389] netlink: 36 bytes leftover after parsing attributes in process `syz.3.607'. [ 144.459382][ T8395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.609'. [ 144.511187][ T3551] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.530684][ T3551] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.561813][ T3551] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.646472][ T3551] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.946158][ T8430] netlink: 44 bytes leftover after parsing attributes in process `syz.0.618'. [ 145.066183][ T8438] netlink: 36 bytes leftover after parsing attributes in process `syz.1.620'. [ 145.224134][ T8443] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 145.254071][ T8446] netlink: 28 bytes leftover after parsing attributes in process `syz.2.623'. [ 145.276792][ T8450] netlink: 'syz.3.626': attribute type 1 has an invalid length. [ 145.290973][ T8450] lo speed is unknown, defaulting to 1000 [ 145.298763][ T8450] lo speed is unknown, defaulting to 1000 [ 145.308489][ T8450] lo speed is unknown, defaulting to 1000 [ 145.326060][ T8446] netlink: 28 bytes leftover after parsing attributes in process `syz.2.623'. [ 145.338310][ T8450] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 145.346878][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'. [ 145.368374][ T8450] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 145.395487][ T8459] netlink: 56 bytes leftover after parsing attributes in process `syz.0.628'. [ 145.420925][ T8450] lo speed is unknown, defaulting to 1000 [ 145.438803][ T8450] lo speed is unknown, defaulting to 1000 [ 145.456856][ T8450] lo speed is unknown, defaulting to 1000 [ 145.498282][ T8450] lo speed is unknown, defaulting to 1000 [ 145.516669][ T8450] lo speed is unknown, defaulting to 1000 [ 145.538402][ T8472] netlink: 28 bytes leftover after parsing attributes in process `syz.2.630'. [ 145.605431][ T8471] netlink: 'syz.1.631': attribute type 3 has an invalid length. [ 145.636825][ T8471] syz_tun: entered allmulticast mode [ 145.648561][ T8471] siw: device registration error -23 [ 145.670960][ T8471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.701816][ T8474] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 145.737797][ T8470] syz_tun: left allmulticast mode [ 146.024803][ T8511] netlink: 'syz.0.639': attribute type 21 has an invalid length. [ 146.311764][ T8469] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 146.583132][ T8538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.648502][ T5913] lo speed is unknown, defaulting to 1000 [ 146.669560][ T8539] syzkaller0: entered promiscuous mode [ 146.688824][ T8539] syzkaller0: entered allmulticast mode [ 147.036446][ T8564] 8021q: VLANs not supported on sit0 [ 147.460321][ T8603] lo speed is unknown, defaulting to 1000 [ 147.556829][ T5836] Bluetooth: hci0: command 0x080f tx timeout [ 147.584650][ T8615] netlink: 'syz.4.663': attribute type 1 has an invalid length. [ 147.610836][ T8611] 8021q: adding VLAN 0 to HW filter on device bond5 [ 147.692495][ T8618] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 147.726467][ T8618] bond5: (slave macvlan2): Enslaving as an active interface with an up link [ 148.092136][ T8613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.179304][ T8613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.696766][ T8613] vlan2: left allmulticast mode [ 148.701741][ T8613] erspan0: left allmulticast mode [ 148.720652][ T8613] geneve2: left promiscuous mode [ 148.783726][ T6430] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.794221][ T6430] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.811303][ T6430] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.825237][ T6430] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.840621][ T8659] syzkaller0: entered promiscuous mode [ 148.840847][ T8657] netlink: 'syz.3.673': attribute type 39 has an invalid length. [ 148.854326][ T8659] syzkaller0: entered allmulticast mode [ 148.893412][ T6430] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.904988][ T6430] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.920879][ T6430] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.940079][ T6430] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.136835][ T8668] sctp: [Deprecated]: syz.2.676 (pid 8668) Use of int in maxseg socket option. [ 149.136835][ T8668] Use struct sctp_assoc_value instead [ 149.484713][ T8688] __nla_validate_parse: 7 callbacks suppressed [ 149.484730][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 149.585014][ T8693] netlink: 'syz.1.682': attribute type 10 has an invalid length. [ 149.732326][ T8695] netlink: 'syz.1.683': attribute type 23 has an invalid length. [ 149.755937][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.683'. [ 150.215469][ T8700] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 150.250648][ T8702] lo speed is unknown, defaulting to 1000 [ 150.651403][ T8723] netlink: 'syz.4.691': attribute type 3 has an invalid length. [ 150.694879][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.692'. [ 151.140806][ T8750] netlink: 32 bytes leftover after parsing attributes in process `syz.3.700'. [ 151.219773][ T8759] netlink: 'syz.2.697': attribute type 10 has an invalid length. [ 151.257892][ T8762] netlink: 32 bytes leftover after parsing attributes in process `syz.3.700'. [ 151.445462][ T8756] netlink: 'syz.1.696': attribute type 3 has an invalid length. [ 151.544062][ T8759] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 151.561773][ T8759] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 151.835047][ T8776] lo speed is unknown, defaulting to 1000 [ 151.839394][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'. [ 152.106260][ T5913] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 152.138583][ T8804] netlink: 'syz.0.709': attribute type 1 has an invalid length. [ 152.256198][ T8804] 8021q: adding VLAN 0 to HW filter on device bond6 [ 152.530225][ T8809] veth9: entered promiscuous mode [ 152.552983][ T8809] bond6: (slave veth9): Enslaving as an active interface with a down link [ 152.590128][ T6476] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 152.642149][ T8826] tipc: Enabled bearer , priority 0 [ 152.646431][ T6430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.655326][ T8826] syzkaller0: entered promiscuous mode [ 152.667767][ T8826] syzkaller0: entered allmulticast mode [ 152.705870][ T6430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.721211][ T8826] tipc: Resetting bearer [ 152.795522][ T8824] tipc: Resetting bearer [ 152.830443][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.717'. [ 152.847225][ T8824] tipc: Disabling bearer [ 152.973814][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'. [ 153.000441][ T8834] lo speed is unknown, defaulting to 1000 [ 153.156311][ T46] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 153.412425][ T8875] netlink: 'syz.2.725': attribute type 1 has an invalid length. [ 153.640599][ T6475] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 153.666435][ T6475] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 153.754588][ T6476] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x22 [ 153.766667][ T8894] lo speed is unknown, defaulting to 1000 [ 153.810307][ T8852] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 153.897373][ T8904] syzkaller0: entered promiscuous mode [ 153.935644][ T8904] syzkaller0: entered allmulticast mode [ 154.050673][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'. [ 154.237163][ T8912] bond5: option mode: unable to set because the bond device has slaves [ 154.249913][ T8915] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 154.296347][ T8915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.563904][ T8924] : renamed from veth0_to_bond (while UP) [ 154.756054][ T5996] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 154.904070][ T8941] netlink: 'syz.0.746': attribute type 1 has an invalid length. [ 154.975503][ T8947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.748'. [ 155.070260][ T8941] 8021q: adding VLAN 0 to HW filter on device bond7 [ 155.096450][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.750'. [ 155.142304][ T8945] bond7: (slave dummy0): making interface the new active one [ 155.171254][ T8945] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 155.254974][ T8947] lo speed is unknown, defaulting to 1000 [ 155.293583][ T3490] bond7: (slave dummy0): link status definitely down, disabling slave [ 155.321204][ T3490] bond7: now running without any active interface! [ 157.716410][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 166.035902][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 182.035979][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 194.839570][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.039407][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 202.039754][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 202.045493][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 213.396045][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 219.577433][ T8970] syzkaller0: entered promiscuous mode [ 219.597844][ T8970] syzkaller0: entered allmulticast mode [ 219.605652][ T8977] syzkaller0: entered promiscuous mode [ 219.613856][ T8977] syzkaller0: entered allmulticast mode [ 219.729541][ T8970] tipc: Enabled bearer , priority 0 [ 219.738661][ T8980] lo speed is unknown, defaulting to 1000 [ 219.741207][ T8986] netlink: 'syz.0.757': attribute type 4 has an invalid length. [ 219.792749][ T8986] netlink: 'syz.0.757': attribute type 4 has an invalid length. [ 220.193022][ T9005] netlink: 24 bytes leftover after parsing attributes in process `syz.3.763'. [ 220.223010][ T9009] netlink: 'syz.2.764': attribute type 2 has an invalid length. [ 220.317024][ T9010] lo speed is unknown, defaulting to 1000 [ 220.326680][ T9009] lo speed is unknown, defaulting to 1000 [ 220.332667][ T8969] tipc: Resetting bearer [ 220.352580][ T8969] tipc: Disabling bearer [ 220.568367][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.769'. [ 220.578114][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.769'. [ 220.616156][ T9032] netlink: 56 bytes leftover after parsing attributes in process `syz.1.770'. [ 220.778799][ T9040] sctp: [Deprecated]: syz.1.771 (pid 9040) Use of int in max_burst socket option. [ 220.778799][ T9040] Use struct sctp_assoc_value instead [ 221.005536][ T9057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.776'. [ 221.099690][ T9062] netlink: 32 bytes leftover after parsing attributes in process `syz.0.779'. [ 221.132359][ T9070] netlink: 512 bytes leftover after parsing attributes in process `syz.3.780'. [ 221.212221][ T9073] syzkaller0: entered promiscuous mode [ 221.218500][ T9073] syzkaller0: entered allmulticast mode [ 221.470834][ T9089] dvmrp1: tun_chr_ioctl cmd 35111 [ 221.635814][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 222.023102][ T9120] lo speed is unknown, defaulting to 1000 [ 222.055653][ T9113] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 222.077870][ T9127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.796'. [ 222.100642][ T9117] netlink: 144 bytes leftover after parsing attributes in process `syz.3.794'. [ 222.431082][ T9145] syzkaller0: entered promiscuous mode [ 222.453791][ T9150] netlink: 'syz.4.800': attribute type 3 has an invalid length. [ 222.455946][ T9145] syzkaller0: entered allmulticast mode [ 222.790095][ T9169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.803'. [ 223.214629][ T9187] syz.0.807 (9187) used greatest stack depth: 17656 bytes left [ 223.334940][ T9213] netlink: zone id is out of range [ 223.355960][ T9213] netlink: zone id is out of range [ 223.361122][ T9213] netlink: zone id is out of range [ 223.376517][ T9213] netlink: zone id is out of range [ 223.391949][ T9213] netlink: zone id is out of range [ 223.397549][ T9213] netlink: zone id is out of range [ 223.402862][ T9213] netlink: zone id is out of range [ 223.409649][ T9213] netlink: zone id is out of range [ 223.414905][ T9213] netlink: zone id is out of range [ 223.427479][ T9213] netlink: zone id is out of range [ 224.260979][ T9273] ªªªªª: renamed from caif0 [ 224.373103][ T9280] syzkaller0: entered promiscuous mode [ 224.381532][ T9280] syzkaller0: entered allmulticast mode [ 225.262592][ T9334] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.308244][ T9334] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.383765][ T9340] __nla_validate_parse: 6 callbacks suppressed [ 225.383782][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'. [ 225.389153][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'. [ 225.409335][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.851'. [ 225.435258][ T9347] netlink: 68 bytes leftover after parsing attributes in process `syz.0.853'. [ 225.454468][ T9340] netlink: 'syz.4.850': attribute type 5 has an invalid length. [ 225.486900][ T9344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.851'. [ 225.500438][ T9340] netlink: 48 bytes leftover after parsing attributes in process `syz.4.850'. [ 225.511859][ T9334] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.545825][ T9334] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.590149][ T9340] geneve2: entered promiscuous mode [ 225.595531][ T9340] geneve2: entered allmulticast mode [ 225.625378][ T12] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 225.649959][ T12] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 225.672748][ T9334] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.728665][ T9334] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.788238][ T9334] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 225.908306][ T9358] netlink: 68 bytes leftover after parsing attributes in process `syz.0.856'. [ 226.096666][ T9381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.861'. [ 226.123350][ T9334] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.155896][ T9334] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.167105][ T9334] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 226.264597][ T9387] netlink: 'syz.1.862': attribute type 8 has an invalid length. [ 226.652073][ T9386] lo speed is unknown, defaulting to 1000 [ 226.793865][ T9387] lo speed is unknown, defaulting to 1000 [ 226.795990][ T9393] netlink: 'syz.3.863': attribute type 3 has an invalid length. [ 226.860316][ T9393] bond1: option arp_all_targets: invalid value (18446744073709551615) [ 226.870431][ T9393] bond1 (unregistering): Released all slaves [ 226.906486][ T9399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.865'. [ 226.919402][ T9399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.865'. [ 226.954898][ T3582] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.972950][ T3582] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 226.992726][ T3582] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 227.327813][ T9334] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.346031][ T9334] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 227.358523][ T9334] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 227.434720][ T9414] lo speed is unknown, defaulting to 1000 [ 228.367091][ T9455] xt_hashlimit: size too large, truncated to 1048576 [ 228.767197][ T9466] ieee802154 phy1 wpan1: encryption failed: -22 [ 228.958542][ T9464] syzkaller1: entered promiscuous mode [ 228.970272][ T9464] syzkaller1: entered allmulticast mode [ 229.010797][ T9474] netlink: 'syz.3.882': attribute type 4 has an invalid length. [ 229.028669][ T9464] netlink: 'syz.1.881': attribute type 12 has an invalid length. [ 229.077668][ T9477] netlink: 'syz.0.885': attribute type 1 has an invalid length. [ 229.098592][ T9477] netlink: 'syz.0.885': attribute type 2 has an invalid length. [ 229.134886][ T9477] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 229.149935][ T9477] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 229.279174][ T9480] net_ratelimit: 392 callbacks suppressed [ 229.279190][ T9480] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 229.548945][ T9486] tipc: Started in network mode [ 229.553993][ T9486] tipc: Node identity 9e3d904261dc, cluster identity 4711 [ 229.565416][ T9486] tipc: Enabled bearer , priority 0 [ 229.576494][ T9486] syzkaller0: entered promiscuous mode [ 229.582054][ T9486] syzkaller0: entered allmulticast mode [ 229.604001][ T9486] nft_compat: unsupported protocol 5 [ 229.631123][ T9486] tipc: Resetting bearer [ 229.644564][ T9485] tipc: Resetting bearer [ 229.659160][ T9485] tipc: Disabling bearer [ 230.057245][ T9508] tipc: Enabled bearer , priority 0 [ 230.088293][ T9508] syzkaller0: entered promiscuous mode [ 230.099738][ T9508] syzkaller0: entered allmulticast mode [ 230.166960][ T9508] tipc: Resetting bearer [ 230.189191][ T9514] netlink: 'syz.3.896': attribute type 21 has an invalid length. [ 230.218158][ T9508] tipc: Resetting bearer [ 230.238338][ T9508] tipc: Disabling bearer [ 230.299448][ T9514] netlink: 'syz.3.896': attribute type 4 has an invalid length. [ 230.315790][ T9514] netlink: 'syz.3.896': attribute type 5 has an invalid length. [ 230.485665][ T9530] netlink: 'syz.3.900': attribute type 10 has an invalid length. [ 230.567193][ T9530] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 230.590512][ T9531] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20000 [ 230.717019][ T9535] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 231.034662][ T9545] __nla_validate_parse: 6 callbacks suppressed [ 231.034689][ T9545] netlink: 40 bytes leftover after parsing attributes in process `syz.4.904'. [ 231.059278][ T9545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.904'. [ 231.157555][ T9550] netlink: 'syz.4.904': attribute type 1 has an invalid length. [ 231.167491][ T9548] netlink: 16 bytes leftover after parsing attributes in process `syz.0.905'. [ 231.224432][ T9545] : entered promiscuous mode [ 231.270100][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.904'. [ 231.285450][ T9545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.904'. [ 231.358897][ T9557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.908'. [ 231.438556][ T9562] netlink: 'syz.0.908': attribute type 3 has an invalid length. [ 231.621912][ T9562] lo speed is unknown, defaulting to 1000 [ 231.678244][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.913'. [ 231.708874][ T9575] syzkaller1: entered promiscuous mode [ 231.724522][ T9575] syzkaller1: entered allmulticast mode [ 231.891529][ T9584] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:0 [ 231.905858][ T9581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.916'. [ 232.155352][ T9599] netlink: 68 bytes leftover after parsing attributes in process `syz.0.918'. [ 232.673239][ T9617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.923'. [ 232.756516][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 232.791365][ T9618] syzkaller0: entered promiscuous mode [ 232.796940][ T9618] syzkaller0: entered allmulticast mode [ 232.805443][ T9618] TC_ACT_REPEAT abuse ? [ 232.854879][ T9624] xt_hashlimit: size too large, truncated to 1048576 [ 233.288685][ T9638] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 233.481499][ T9642] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 233.630323][ T9642] netlink: 'syz.3.931': attribute type 32 has an invalid length. [ 233.758482][ T9642] bond1: option coupled_control: invalid value (28) [ 233.795276][ T9642] bond1 (unregistering): Released all slaves [ 234.201871][ T9687] bridge_slave_0: default FDB implementation only supports local addresses [ 234.384627][ T9695] sctp: [Deprecated]: syz.4.942 (pid 9695) Use of int in max_burst socket option deprecated. [ 234.384627][ T9695] Use struct sctp_assoc_value instead [ 234.461803][ T9702] syzkaller0: entered promiscuous mode [ 234.467559][ T9702] syzkaller0: entered allmulticast mode [ 234.909913][ T9713] bond2 (unregistering): Released all slaves [ 234.959726][ T46] IPVS: starting estimator thread 0... [ 235.042377][ T9724] syzkaller1: entered promiscuous mode [ 235.048205][ T9724] syzkaller1: entered allmulticast mode [ 235.056037][ T9722] IPVS: using max 30 ests per chain, 72000 per kthread [ 235.512957][ T9731] lo speed is unknown, defaulting to 1000 [ 235.633141][ T9736] lo speed is unknown, defaulting to 1000 [ 235.746654][ T9743] netlink: 'syz.1.954': attribute type 36 has an invalid length. [ 235.750699][ T9742] geneve2: entered promiscuous mode [ 239.029742][ T9769] __nla_validate_parse: 5 callbacks suppressed [ 239.029759][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.962'. [ 239.048293][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'. [ 239.092367][ T9771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.961'. [ 239.269819][ T141] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.287177][ T141] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 239.306321][ T141] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 239.324324][ T9785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 239.436870][ T9785] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.444181][ T141] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.455172][ T141] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 239.463508][ T141] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 239.472054][ T141] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.482773][ T141] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 239.496948][ T141] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 239.938878][ T9785] bond1 (unregistering): Released all slaves [ 239.991076][ T141] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.003737][ T141] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 240.013373][ T141] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 240.128113][ T9811] lo speed is unknown, defaulting to 1000 [ 240.234220][ T9817] netlink: 'syz.0.970': attribute type 1 has an invalid length. [ 240.245284][ T9817] netlink: 'syz.0.970': attribute type 2 has an invalid length. [ 240.276618][ T9817] netlink: 'syz.0.970': attribute type 1 has an invalid length. [ 240.315433][ T9817] netlink: 'syz.0.970': attribute type 2 has an invalid length. [ 240.450324][ T9823] netlink: 128 bytes leftover after parsing attributes in process `syz.2.972'. [ 240.585371][ T9837] nbd: must specify a size in bytes for the device [ 240.631762][ T9834] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 240.648138][ T9837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.977'. [ 240.984880][ T9856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.984'. [ 240.994913][ T9856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.984'. [ 241.472497][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.992'. [ 241.523979][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.992'. [ 241.576522][ T9902] 8021q: adding VLAN 0 to HW filter on device bond1 [ 241.705632][ T9915] netem: incorrect gi model size [ 241.711715][ T9915] netem: change failed [ 242.015864][ T9932] tipc: Can't bind to reserved service type 2 [ 242.168176][ T9938] lo speed is unknown, defaulting to 1000 [ 242.212213][ T9946] xt_TCPMSS: Only works on TCP SYN packets [ 242.425371][ T5996] IPVS: starting estimator thread 0... [ 242.478399][ T9953] tipc: Enabling of bearer rejected, failed to enable media [ 242.547518][ T9966] IPVS: using max 31 ests per chain, 74400 per kthread [ 242.640001][ T5202] udevd[5202]: worker [9013] terminated by signal 33 (Unknown signal 33) [ 242.669476][ T5202] udevd[5202]: worker [9013] failed while handling '/devices/virtual/nfc/nfc2/rfkill41' [ 243.304422][T10011] netlink: 'syz.1.1020': attribute type 1 has an invalid length. [ 243.471476][T10014] netlink: 'syz.0.1021': attribute type 2 has an invalid length. [ 243.667689][T10021] syzkaller0: entered promiscuous mode [ 243.693643][T10021] syzkaller0: entered allmulticast mode [ 243.696739][T10022] netlink: 'syz.3.1022': attribute type 21 has an invalid length. [ 243.798729][T10021] netlink: 'syz.2.1023': attribute type 58 has an invalid length. [ 244.126898][T10032] __nla_validate_parse: 6 callbacks suppressed [ 244.126915][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'. [ 244.191560][T10040] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 244.263960][T10044] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 244.400855][T10056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1034'. [ 244.401779][T10048] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 244.540192][T10048] bond2 (unregistering): Released all slaves [ 244.674312][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1034'. [ 244.710743][T10065] syzkaller0: refused to change device tx_queue_len [ 244.717678][ T6476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.731372][ T6476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.882699][T10084] syzkaller0: entered promiscuous mode [ 244.912516][T10084] syzkaller0: entered allmulticast mode [ 244.996743][T10086] ip6_vti0 speed is unknown, defaulting to 1000 [ 245.007697][T10086] ip6_vti0 speed is unknown, defaulting to 1000 [ 245.047267][T10086] ip6_vti0 speed is unknown, defaulting to 1000 [ 245.202792][T10093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1041'. [ 245.234843][T10092] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1042'. [ 245.455569][T10103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1043'. [ 245.554848][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 245.556683][T10109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1045'. [ 245.616324][ T5921] ip6_vti0 speed is unknown, defaulting to 1000 [ 245.624528][T10086] infiniband syz2: set down [ 245.632249][T10086] infiniband syz2: added ip6_vti0 [ 245.638273][T10112] lo: entered promiscuous mode [ 245.667040][T10112] tunl0: entered promiscuous mode [ 245.676778][T10112] gre0: entered promiscuous mode [ 245.699282][T10112] gretap0: entered promiscuous mode [ 245.713989][T10112] erspan0: entered promiscuous mode [ 245.736076][T10112] ip_vti0: entered promiscuous mode [ 245.758269][T10112] ip6_vti0: entered promiscuous mode [ 245.777661][T10112] sit0: entered promiscuous mode [ 245.786423][T10086] RDS/IB: syz2: added [ 245.791167][T10086] smc: adding ib device syz2 with port count 1 [ 245.798063][T10086] smc: ib device syz2 port 1 has no pnetid [ 245.815519][T10112] ip6tnl0: entered promiscuous mode [ 245.829582][T10112] ip6gre0: entered promiscuous mode [ 245.841299][T10112] ip6gretap0: entered promiscuous mode [ 245.849400][T10112] vcan0: entered promiscuous mode [ 245.859661][T10112] bond0: entered promiscuous mode [ 245.874117][T10112] bond_slave_0: entered promiscuous mode [ 245.889101][T10112] bond_slave_1: entered promiscuous mode [ 245.901575][T10112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.917094][T10112] team0: entered promiscuous mode [ 245.922301][T10112] team_slave_0: entered promiscuous mode [ 245.928868][T10112] team_slave_1: entered promiscuous mode [ 245.936060][T10112] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.947876][T10112] nlmon0: entered promiscuous mode [ 245.956621][T10112] caif0: entered promiscuous mode [ 245.961766][T10112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.978917][ T24] ip6_vti0 speed is unknown, defaulting to 1000 [ 245.999213][T10086] ip6_vti0 speed is unknown, defaulting to 1000 [ 246.633030][T10086] ip6_vti0 speed is unknown, defaulting to 1000 [ 247.151355][T10169] lo speed is unknown, defaulting to 1000 [ 247.209083][T10169] ip6_vti0 speed is unknown, defaulting to 1000 [ 247.311238][T10179] netlink: 'syz.4.1064': attribute type 11 has an invalid length. [ 247.329814][T10179] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.1064'. [ 247.378208][T10179] bond2: (slave ip_vti0): Device is not bonding slave [ 247.385231][T10179] bond2: option active_slave: invalid value (ip_vti0) [ 247.395634][T10179] bond2 (unregistering): Released all slaves [ 247.581525][T10086] ip6_vti0 speed is unknown, defaulting to 1000 [ 247.738929][T10194] netlink: zone id is out of range [ 247.744305][T10194] netlink: zone id is out of range [ 247.750016][T10194] netlink: get zone limit has 4 unknown bytes [ 247.886072][T10196] syz.4.1069: vmalloc error: size 6279168, failed to allocated page array size 12264, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 247.908315][T10201] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1070'. [ 247.943817][T10196] CPU: 1 UID: 0 PID: 10196 Comm: syz.4.1069 Not tainted syzkaller #0 PREEMPT(full) [ 247.943840][T10196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 247.943856][T10196] Call Trace: [ 247.943865][T10196] [ 247.943873][T10196] dump_stack_lvl+0x189/0x250 [ 247.943910][T10196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.943929][T10196] ? __pfx__printk+0x10/0x10 [ 247.943950][T10196] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 247.943983][T10196] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 247.944008][T10196] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 247.944038][T10196] warn_alloc+0x214/0x310 [ 247.944066][T10196] ? __pfx_warn_alloc+0x10/0x10 [ 247.944096][T10196] ? __get_vm_area_node+0x28f/0x300 [ 247.944136][T10196] ? bpf_check+0x19b/0x1c300 [ 247.944157][T10196] __vmalloc_node_range_noprof+0x690/0x12d0 [ 247.944206][T10196] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 247.944226][T10196] ? rcu_is_watching+0x15/0xb0 [ 247.944252][T10196] ? trace_kmalloc+0x1f/0xb0 [ 247.944269][T10196] ? __kvmalloc_node_noprof+0x5e9/0x910 [ 247.944290][T10196] ? bpf_check+0x19b/0x1c300 [ 247.944305][T10196] vzalloc_noprof+0xb2/0xf0 [ 247.944325][T10196] ? bpf_check+0x19b/0x1c300 [ 247.944343][T10196] bpf_check+0x19b/0x1c300 [ 247.944363][T10196] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 247.944383][T10196] ? lockdep_hardirqs_on+0x98/0x140 [ 247.944404][T10196] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 247.944422][T10196] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 247.944450][T10196] ? try_to_wake_up+0x7f5/0x12b0 [ 247.944480][T10196] ? wake_up_q+0x99/0xd0 [ 247.944498][T10196] ? rwsem_wake+0xec/0x140 [ 247.944518][T10196] ? __pfx_rwsem_wake+0x10/0x10 [ 247.944534][T10196] ? count_memcg_event_mm+0x21/0x260 [ 247.944558][T10196] ? __lock_acquire+0x6b6/0x2cf0 [ 247.944583][T10196] ? __lock_acquire+0x6b6/0x2cf0 [ 247.944615][T10196] ? __pfx_bpf_check+0x10/0x10 [ 247.944634][T10196] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 247.944658][T10196] ? lockdep_hardirqs_on+0x98/0x140 [ 247.944678][T10196] ? ktime_get_with_offset+0x93/0x2a0 [ 247.944697][T10196] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 247.944716][T10196] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 247.944748][T10196] ? __asan_memset+0x22/0x50 [ 247.944766][T10196] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 247.944780][T10196] ? security_bpf_prog_load+0x125/0x3f0 [ 247.944804][T10196] bpf_prog_load+0x13ba/0x1a10 [ 247.944835][T10196] ? __pfx_bpf_prog_load+0x10/0x10 [ 247.944876][T10196] ? bpf_lsm_bpf+0x9/0x20 [ 247.944889][T10196] ? security_bpf+0x7e/0x300 [ 247.944911][T10196] __sys_bpf+0x507/0x860 [ 247.944931][T10196] ? __pfx___sys_bpf+0x10/0x10 [ 247.944966][T10196] ? rcu_is_watching+0x15/0xb0 [ 247.944993][T10196] __x64_sys_bpf+0x7c/0x90 [ 247.945010][T10196] do_syscall_64+0xfa/0xf80 [ 247.945032][T10196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.945047][T10196] ? clear_bhb_loop+0x60/0xb0 [ 247.945066][T10196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.945080][T10196] RIP: 0033:0x7ff13f58f749 [ 247.945103][T10196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.945116][T10196] RSP: 002b:00007ff1404a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.945132][T10196] RAX: ffffffffffffffda RBX: 00007ff13f7e5fa0 RCX: 00007ff13f58f749 [ 247.945143][T10196] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 247.945152][T10196] RBP: 00007ff13f613f91 R08: 0000000000000000 R09: 0000000000000000 [ 247.945162][T10196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.945172][T10196] R13: 00007ff13f7e6038 R14: 00007ff13f7e5fa0 R15: 00007ffcd90f7e98 [ 247.945201][T10196] [ 248.006686][T10196] Mem-Info: [ 248.240330][T10206] kthread_run failed with err -4 [ 248.263222][T10196] active_anon:8424 inactive_anon:0 isolated_anon:0 [ 248.263222][T10196] active_file:2888 inactive_file:39933 isolated_file:0 [ 248.263222][T10196] unevictable:768 dirty:92 writeback:0 [ 248.263222][T10196] slab_reclaimable:11376 slab_unreclaimable:104067 [ 248.263222][T10196] mapped:29130 shmem:1358 pagetables:1038 [ 248.263222][T10196] sec_pagetables:0 bounce:0 [ 248.263222][T10196] kernel_misc_reclaimable:0 [ 248.263222][T10196] free:1313750 free_pcp:14172 free_cma:0 [ 248.403558][T10196] Node 0 active_anon:33696kB inactive_anon:0kB active_file:11552kB inactive_file:159528kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116520kB dirty:364kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12972kB pagetables:4112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 248.477207][T10196] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 248.512600][T10086] ip6_vti0 speed is unknown, defaulting to 1000 [ 248.554727][T10196] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 248.568391][T10219] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 248.598760][T10196] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 248.604699][T10196] Node 0 DMA32 free:1348084kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33452kB inactive_anon:0kB active_file:11552kB inactive_file:159528kB unevictable:1536kB writepending:364kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:37080kB local_pcp:18720kB free_cma:0kB [ 248.607263][T10219] bond2 (unregistering): Released all slaves [ 248.640362][T10196] lowmem_reserve[]: 0 0 0 0 0 [ 248.649831][T10196] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 248.687297][T10196] lowmem_reserve[]: 0 0 0 0 0 [ 248.692041][T10196] Node 1 Normal free:3891140kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21512kB local_pcp:14752kB free_cma:0kB [ 248.747369][T10196] lowmem_reserve[]: 0 0 0 0 0 [ 248.753059][T10196] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 248.766889][T10196] Node 0 DMA32: 621*4kB (M) 236*8kB (M) 21*16kB (ME) 444*32kB (UME) 116*64kB (UM) 36*128kB (ME) 46*256kB (UME) 21*512kB (UM) 14*1024kB (UM) 5*2048kB (UME) 310*4096kB (UM) = 1347812kB [ 248.785962][T10196] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 248.806479][T10223] netlink: 'syz.2.1075': attribute type 1 has an invalid length. [ 248.832365][T10196] Node 1 Normal: 231*4kB (UE) 63*8kB (UME) 53*16kB (UME) 71*32kB (UME) 22*64kB (UME) 5*128kB (UME) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3891140kB [ 248.851876][T10196] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 248.862440][T10196] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 248.876078][T10196] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 248.903802][T10196] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 248.913859][T10196] 44177 total pagecache pages [ 248.919744][T10196] 0 pages in swap cache [ 248.926335][T10196] Free swap = 124996kB [ 248.930501][T10196] Total swap = 124996kB [ 248.934649][T10196] 2097051 pages RAM [ 248.981069][T10196] 0 pages HighMem/MovableOnly [ 249.016851][T10196] 424280 pages reserved [ 249.021047][T10196] 0 pages cma reserved [ 249.139550][T10235] ªªªªªª: renamed from wg2 (while UP) [ 249.167522][T10237] __nla_validate_parse: 4 callbacks suppressed [ 249.167537][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1079'. [ 249.200699][T10086] ip6_vti0 speed is unknown, defaulting to 1000 [ 249.299007][T10244] sctp: [Deprecated]: syz.1.1080 (pid 10244) Use of struct sctp_assoc_value in delayed_ack socket option. [ 249.299007][T10244] Use struct sctp_sack_info instead [ 249.319181][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1080'. [ 249.390088][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1082'. [ 249.458288][T10248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1082'. [ 249.470953][T10248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1082'. [ 249.583656][T10086] ip6_vti0 speed is unknown, defaulting to 1000 [ 249.823284][T10245] lo speed is unknown, defaulting to 1000 [ 250.114185][T10260] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 250.270204][T10257] lo speed is unknown, defaulting to 1000 [ 250.278049][T10257] ip6_vti0 speed is unknown, defaulting to 1000 [ 250.709764][T10272] tipc: Enabled bearer , priority 0 [ 250.767525][T10270] tipc: Disabling bearer [ 251.058127][T10283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1093'. [ 251.124135][T10277] syzkaller0: entered promiscuous mode [ 251.129973][T10277] syzkaller0: entered allmulticast mode [ 251.171183][T10277] netlink: 'syz.1.1091': attribute type 16 has an invalid length. [ 251.182471][T10283] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1093'. [ 251.194287][T10277] netlink: 'syz.1.1091': attribute type 17 has an invalid length. [ 251.602093][T10283] bond1 (unregistering): Released all slaves [ 251.638898][T10277] lo: left promiscuous mode [ 251.653401][T10277] tunl0: left promiscuous mode [ 251.668381][T10277] gre0: left promiscuous mode [ 251.673824][T10277] gretap0: left promiscuous mode [ 251.680283][T10277] erspan0: left promiscuous mode [ 251.686810][T10277] ip_vti0: left promiscuous mode [ 251.720566][T10277] ip6_vti0: left promiscuous mode [ 251.741366][T10277] sit0: left promiscuous mode [ 251.754899][T10277] ip6tnl0: left promiscuous mode [ 251.770423][T10277] ip6gre0: left promiscuous mode [ 251.780483][T10277] ip6gretap0: left promiscuous mode [ 251.787915][T10277] vcan0: left promiscuous mode [ 251.794749][T10277] bond0: left promiscuous mode [ 251.801729][T10277] bond_slave_0: left promiscuous mode [ 251.807898][T10277] bond_slave_1: left promiscuous mode [ 251.815161][T10277] team0: left promiscuous mode [ 251.821087][T10277] team_slave_0: left promiscuous mode [ 251.827618][T10277] team_slave_1: left promiscuous mode [ 251.834675][T10277] nlmon0: left promiscuous mode [ 251.846280][T10277] caif0: left promiscuous mode [ 251.859824][T10277] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.311408][T10321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1096'. [ 252.321923][T10321] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1096'. [ 253.314661][T10308] geneve4: entered promiscuous mode [ 253.497265][T10329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1103'. [ 253.536187][T10335] tipc: Failed to remove unknown binding: 66,1,1/0:4241295521/4241295523 [ 253.580143][T10335] tipc: Failed to remove unknown binding: 66,1,1/0:4241295521/4241295523 [ 253.599443][T10338] vxcan3: entered allmulticast mode [ 253.879261][T10339] vxcan3: entered allmulticast mode [ 253.974880][T10341] lo speed is unknown, defaulting to 1000 [ 254.013383][T10341] ip6_vti0 speed is unknown, defaulting to 1000 [ 254.222449][T10372] netlink: 'syz.2.1115': attribute type 1 has an invalid length. [ 254.308149][T10376] bond1: (slave bridge4): making interface the new active one [ 254.317027][T10376] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 254.343138][T10365] lo speed is unknown, defaulting to 1000 [ 254.435465][T10365] ip6_vti0 speed is unknown, defaulting to 1000 [ 254.779814][T10393] No such timeout policy "syz0" [ 255.491702][T10412] netlink: 'syz.2.1127': attribute type 4 has an invalid length. [ 255.767046][T10420] can: request_module (can-proto-3) failed. [ 255.781070][T10426] syzkaller1: entered promiscuous mode [ 255.787875][T10426] syzkaller1: entered allmulticast mode [ 256.244937][T10437] xt_CT: You must specify a L4 protocol and not use inversions on it [ 256.273300][T10437] __nla_validate_parse: 2 callbacks suppressed [ 256.273317][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1134'. [ 256.284508][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.310887][T10435] lo speed is unknown, defaulting to 1000 [ 256.320983][T10435] ip6_vti0 speed is unknown, defaulting to 1000 [ 256.435427][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1139'. [ 256.448180][T10448] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 257.033466][T10473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1145'. [ 257.380063][T10485] bond8: Unable to set down delay as MII monitoring is disabled [ 257.394386][T10485] bond8 (unregistering): Released all slaves [ 257.463952][T10496] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1149'. [ 257.590971][T10505] netlink: 'syz.1.1150': attribute type 62 has an invalid length. [ 257.604065][T10505] netlink: 'syz.1.1150': attribute type 1 has an invalid length. [ 257.613259][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1150'. [ 257.622727][T10505] netlink: 'syz.1.1150': attribute type 1 has an invalid length. [ 257.631876][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1150'. [ 257.743099][T10518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1153'. [ 257.890688][T10524] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1155'. [ 258.184219][T10549] tipc: Enabling of bearer rejected, failed to enable media [ 258.217220][T10550] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1164'. [ 258.296260][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1162'. [ 259.015400][T10573] xt_NFQUEUE: number of queues (65532) out of range (got 118598) [ 259.157088][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 259.262517][T10580] netlink: 'syz.2.1172': attribute type 3 has an invalid length. [ 259.358705][T10586] Bluetooth: MGMT ver 1.23 [ 259.393992][T10586] lo speed is unknown, defaulting to 1000 [ 259.413602][T10586] ip6_vti0 speed is unknown, defaulting to 1000 [ 260.001459][T10617] sctp: [Deprecated]: syz.0.1182 (pid 10617) Use of int in maxseg socket option. [ 260.001459][T10617] Use struct sctp_assoc_value instead [ 260.633698][T10642] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20000 [ 261.418667][T10685] bond2: Unable to set down delay as MII monitoring is disabled [ 261.432114][T10685] bond2 (unregistering): Released all slaves [ 261.461346][T10700] __nla_validate_parse: 6 callbacks suppressed [ 261.461363][T10700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1204'. [ 261.495141][T10703] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1202'. [ 261.592970][T10700] 8021q: adding VLAN 0 to HW filter on device bond2 [ 261.600392][ T852] lo speed is unknown, defaulting to 1000 [ 261.616576][ T852] syz0: Port: 1 Link DOWN [ 261.704730][T10692] bond2 (unregistering): Released all slaves [ 261.816381][T10700] bond2: (slave ip_vti0): Device is not bonding slave [ 261.823535][T10700] bond2: option active_slave: invalid value (ip_vti0) [ 261.834599][T10719] netlink: zone id is out of range [ 261.840280][T10719] netlink: zone id is out of range [ 261.842736][T10700] bond2 (unregistering): Released all slaves [ 261.846008][T10719] netlink: zone id is out of range [ 261.857265][T10719] netlink: zone id is out of range [ 261.862493][T10719] netlink: zone id is out of range [ 261.868727][T10719] netlink: zone id is out of range [ 261.874080][T10719] netlink: zone id is out of range [ 261.879979][T10719] netlink: zone id is out of range [ 261.885599][T10719] netlink: zone id is out of range [ 261.891347][T10719] netlink: zone id is out of range [ 262.047237][T10711] syzkaller0: entered promiscuous mode [ 262.053034][T10711] syzkaller0: entered allmulticast mode [ 262.166906][T10726] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1212'. [ 262.532363][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 263.714736][T10742] tipc: Enabled bearer , priority 0 [ 263.778417][T10742] tipc: Disabling bearer [ 263.982059][T10765] bridge_slave_1: left allmulticast mode [ 264.039702][T10765] bridge_slave_1: left promiscuous mode [ 264.059943][T10765] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.122853][T10780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1225'. [ 264.515524][T10807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1229'. [ 264.541743][T10807] netlink: 'syz.2.1229': attribute type 2 has an invalid length. [ 264.571421][T10807] : entered promiscuous mode [ 264.600184][T10807] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1229'. [ 265.052410][T10830] lo speed is unknown, defaulting to 1000 [ 265.066477][T10830] ip6_vti0 speed is unknown, defaulting to 1000 [ 265.165115][T10840] IPVS: set_ctl: invalid protocol: 44 172.20.20.50:20001 [ 265.281094][T10842] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1236'. [ 265.570272][T10857] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1239'. [ 266.152244][T10873] netlink: 'syz.4.1244': attribute type 10 has an invalid length. [ 266.235522][T10879] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1246'. [ 266.267513][T10878] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1246'. [ 266.641391][T10889] __nla_validate_parse: 2 callbacks suppressed [ 266.641408][T10889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1250'. [ 266.689715][T10889] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1250'. [ 267.179641][T10915] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1257'. [ 267.294775][T10909] lo speed is unknown, defaulting to 1000 [ 267.308415][T10909] ip6_vti0 speed is unknown, defaulting to 1000 [ 267.500828][T10929] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1262'. [ 267.712557][T10941] netlink: 'syz.3.1266': attribute type 1 has an invalid length. [ 267.740465][T10941] net_ratelimit: 45 callbacks suppressed [ 267.740483][T10941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.932310][T10942] lo speed is unknown, defaulting to 1000 [ 268.004937][T10942] ip6_vti0 speed is unknown, defaulting to 1000 [ 268.593899][T10972] lo speed is unknown, defaulting to 1000 [ 268.625059][T10972] ip6_vti0 speed is unknown, defaulting to 1000 [ 268.869957][T10985] tipc: Enabled bearer , priority 0 [ 268.886801][T10985] syzkaller0: entered promiscuous mode [ 268.892560][T10985] syzkaller0: entered allmulticast mode [ 269.030610][T10985] netem: change failed [ 269.049389][T10985] tipc: Resetting bearer [ 269.095619][T10984] tipc: Resetting bearer [ 269.142051][T10984] tipc: Disabling bearer [ 269.322726][T10988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1278'. [ 269.356728][T10989] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1278'. [ 269.586842][T10994] syzkaller0: entered promiscuous mode [ 269.603432][T10994] syzkaller0: entered allmulticast mode [ 269.720592][T11004] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1284'. [ 269.747009][T11004] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1284'. [ 269.862494][T11012] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.907177][T11012] netlink: 'syz.0.1283': attribute type 1 has an invalid length. [ 269.930492][T11012] netlink: 'syz.0.1283': attribute type 2 has an invalid length. [ 269.991075][T11017] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 270.010706][T11017] bond2 (unregistering): Released all slaves [ 270.376588][T11055] netlink: 'syz.4.1293': attribute type 1 has an invalid length. [ 270.456934][T11058] tipc: Enabled bearer , priority 0 [ 270.476811][T11058] syzkaller0: entered promiscuous mode [ 270.482310][T11058] syzkaller0: entered allmulticast mode [ 270.507810][T11059] lo speed is unknown, defaulting to 1000 [ 270.525352][T11059] ip6_vti0 speed is unknown, defaulting to 1000 [ 270.666138][T11058] tipc: Resetting bearer [ 270.686666][T11058] netlink: 'syz.1.1294': attribute type 12 has an invalid length. [ 270.696940][ T30] audit: type=1800 audit(1766087567.194:5): pid=11071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1296" name="memory.events" dev="tmpfs" ino=1347 res=0 errno=0 [ 270.714878][T11058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1294'. [ 270.773327][T11057] tipc: Resetting bearer [ 270.850340][T11057] tipc: Disabling bearer [ 271.340621][T11113] syzkaller0: entered promiscuous mode [ 271.346481][T11113] syzkaller0: entered allmulticast mode [ 271.361406][T11113] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1308'. [ 271.708746][ T13] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.717374][ T13] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 271.725690][ T13] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 271.740893][ T13] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.750201][ T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 271.760472][ T13] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 271.770713][T11136] netlink: 'syz.1.1313': attribute type 41 has an invalid length. [ 271.785131][ T13] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.797403][ T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 271.806867][ T13] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 271.928906][ T13] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.943922][ T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 271.957456][ T13] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 271.970094][T11144] tipc: Enabled bearer , priority 0 [ 272.120546][T11150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1318'. [ 272.161570][T11144] tipc: Disabling bearer [ 272.388644][T11173] SET target dimension over the limit! [ 272.507559][T11180] netlink: 'syz.1.1326': attribute type 2 has an invalid length. [ 272.595446][T11184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1328'. [ 272.633695][T11170] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.711486][T11196] ieee802154 phy1 wpan1: encryption failed: -90 [ 272.891672][T11170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.907563][T11170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.025341][T11178] geneve3: entered promiscuous mode [ 273.047275][T11210] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1331'. [ 273.057831][T11210] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 273.065373][T11210] IPv6: NLM_F_CREATE should be set when creating new route [ 273.089751][T11184] bond2: entered promiscuous mode [ 273.095087][T11184] 8021q: adding VLAN 0 to HW filter on device bond2 [ 273.120246][T11192] 8021q: adding VLAN 0 to HW filter on device bond2 [ 273.127371][T11192] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 273.140157][T11192] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 273.164282][T11195] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 273.175453][T11195] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 273.193233][ T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.203589][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.212919][ T13] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 273.223050][ T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.233750][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.244072][ T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 273.266907][ T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.290270][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.299933][ T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 273.310371][ T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.320797][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.330027][ T13] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 273.387584][T11216] lo speed is unknown, defaulting to 1000 [ 273.400510][T11216] ip6_vti0 speed is unknown, defaulting to 1000 [ 273.600777][T11228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1335'. [ 273.619138][T11225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1335'. [ 273.628519][T11225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1335'. [ 273.681920][T11232] tipc: New replicast peer: 0.0.0.0 [ 273.689885][T11232] tipc: Enabled bearer , priority 10 [ 273.700258][T11232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1336'. [ 273.716024][T11232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1336'. [ 273.767650][T11232] ip6gretap0: entered promiscuous mode [ 273.786798][T11232] ip6gretap0: left promiscuous mode [ 273.946137][T11238] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1338'. [ 273.956122][T11238] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1338'. [ 274.695870][ T5996] tipc: Node number set to 4292972610 [ 275.022460][T11285] lo speed is unknown, defaulting to 1000 [ 275.034672][T11287] lo speed is unknown, defaulting to 1000 [ 275.042089][T11292] SET target dimension over the limit! [ 275.050359][T11285] ip6_vti0 speed is unknown, defaulting to 1000 [ 275.560383][T11287] ip6_vti0 speed is unknown, defaulting to 1000 [ 276.289340][T11330] lo speed is unknown, defaulting to 1000 [ 276.298097][T11330] ip6_vti0 speed is unknown, defaulting to 1000 [ 276.755971][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 277.270698][T11353] __nla_validate_parse: 4 callbacks suppressed [ 277.270714][T11353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1364'. [ 277.330940][T11352] lo speed is unknown, defaulting to 1000 [ 277.358720][T11352] ip6_vti0 speed is unknown, defaulting to 1000 [ 277.551151][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1367'. [ 277.631381][T11370] netlink: 'syz.4.1368': attribute type 39 has an invalid length. [ 277.710103][T11375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1370'. [ 277.740355][T11370] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1368'. [ 277.758060][T11375] team1: entered promiscuous mode [ 277.816273][T11375] team1: entered allmulticast mode [ 277.848223][T11375] 8021q: adding VLAN 0 to HW filter on device team1 [ 278.210528][T11370] IPVS: set_ctl: invalid protocol: 60 172.30.1.5:20009 [ 278.332764][T11395] netlink: 'syz.0.1374': attribute type 2 has an invalid length. [ 278.369001][T11392] netlink: 'syz.2.1373': attribute type 1 has an invalid length. [ 278.387453][T11395] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1374'. [ 278.406419][T11398] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1375'. [ 278.531891][T11402] netlink: 'syz.3.1376': attribute type 1 has an invalid length. [ 278.656037][T11414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1376'. [ 278.692633][T11409] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 278.717447][T11409] bond2: (slave batadv1): making interface the new active one [ 278.737848][T11409] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 278.749198][T11414] 8021q: adding VLAN 0 to HW filter on device bond2 [ 278.845160][T11416] lo speed is unknown, defaulting to 1000 [ 278.853446][T11416] ip6_vti0 speed is unknown, defaulting to 1000 [ 279.437331][T11423] netlink: 'syz.0.1381': attribute type 1 has an invalid length. [ 279.453914][T11423] netlink: 'syz.0.1381': attribute type 4 has an invalid length. [ 279.473734][T11423] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1381'. [ 279.522902][T11424] netlink: 'syz.0.1381': attribute type 1 has an invalid length. [ 279.536589][T11423] netlink: 'syz.0.1381': attribute type 1 has an invalid length. [ 279.565813][T11424] netlink: 'syz.0.1381': attribute type 4 has an invalid length. [ 279.573570][T11424] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1381'. [ 279.622920][T11423] netlink: 'syz.0.1381': attribute type 4 has an invalid length. [ 279.670108][T11423] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1381'. [ 279.738851][T11427] lo speed is unknown, defaulting to 1000 [ 279.757499][T11427] ip6_vti0 speed is unknown, defaulting to 1000 [ 279.918329][T11438] veth9: entered promiscuous mode [ 280.375593][T11456] syz_tun: entered promiscuous mode [ 280.386198][T11456] syz_tun: left promiscuous mode [ 280.657568][T11472] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 281.078587][T11495] tipc: Enabled bearer , priority 0 [ 281.096522][T11490] syzkaller0: entered promiscuous mode [ 281.102026][T11490] syzkaller0: entered allmulticast mode [ 281.150359][T11490] tipc: Resetting bearer [ 281.161652][T11488] tipc: Resetting bearer [ 281.181156][T11488] tipc: Disabling bearer [ 281.502798][T11517] 8021q: adding VLAN 0 to HW filter on device bond3 [ 281.610358][T11523] 8021q: adding VLAN 0 to HW filter on device bond3 [ 281.636647][T11523] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 281.648512][T11523] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 281.733328][T11517] x_tables: duplicate underflow at hook 1 [ 281.983605][T11545] lo speed is unknown, defaulting to 1000 [ 282.004921][T11545] ip6_vti0 speed is unknown, defaulting to 1000 [ 282.071428][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.092390][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.116690][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.126181][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.165918][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.175159][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.225604][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.246536][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.256394][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.276810][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.286473][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.306520][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.316508][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.334419][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.355155][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.375404][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.386259][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.406454][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.416804][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.426206][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.436657][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.446243][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.456422][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.465629][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.476486][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.485920][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.495190][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.505150][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.515148][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.527871][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.537332][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.546843][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.561230][T11555] tipc: Enabling of bearer rejected, failed to enable media [ 282.988710][T11580] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 283.013927][T11580] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 283.114236][T11580] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 283.126172][T11580] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 283.164890][T11584] __nla_validate_parse: 8 callbacks suppressed [ 283.164907][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1422'. [ 283.203038][T11584] macsec2: entered promiscuous mode [ 283.223153][T11584] 0ªî{X¹¦: entered promiscuous mode [ 283.246005][T11584] macsec2: entered allmulticast mode [ 283.262366][T11584] 0ªî{X¹¦: left promiscuous mode [ 283.300904][T11580] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 283.311054][T11580] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 283.383598][T11580] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 283.402291][T11580] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 283.569176][T11599] syzkaller1: entered promiscuous mode [ 283.575125][T11599] syzkaller1: entered allmulticast mode [ 283.609440][ T6453] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 283.626312][ T6453] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 283.643074][T11601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1425'. [ 283.643145][T11604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1427'. [ 283.675214][ T6453] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 283.684161][ T6453] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 283.760071][ T6453] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 283.776072][ T6453] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 283.829004][ T141] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 283.842054][ T141] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 283.888473][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1428'. [ 284.053072][T11620] validate_nla: 6 callbacks suppressed [ 284.053087][T11620] netlink: 'syz.3.1433': attribute type 3 has an invalid length. [ 284.074036][T11625] netlink: 'syz.0.1435': attribute type 1 has an invalid length. [ 284.085074][T11625] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1435'. [ 284.185069][T11630] veth1_to_bond: entered allmulticast mode [ 284.217451][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1436'. [ 284.258776][T11631] bond0: (slave bond_slave_1): Releasing backup interface [ 284.288466][T11631] veth1_to_bond (unregistering): left allmulticast mode [ 284.548935][T11646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1440'. [ 285.124217][T11665] lo speed is unknown, defaulting to 1000 [ 285.147659][T11665] ip6_vti0 speed is unknown, defaulting to 1000 [ 285.380113][T11669] lo speed is unknown, defaulting to 1000 [ 285.602686][T11669] ip6_vti0 speed is unknown, defaulting to 1000 [ 285.862772][T11687] netlink: 'syz.3.1451': attribute type 1 has an invalid length. [ 285.898204][T11687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.076909][ T30] audit: type=1800 audit(1766087582.594:6): pid=11680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1448" name="memory.events" dev="tmpfs" ino=1560 res=0 errno=0 [ 286.873812][T11713] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 287.267775][T11725] lo speed is unknown, defaulting to 1000 [ 287.308559][T11725] ip6_vti0 speed is unknown, defaulting to 1000 [ 287.948277][T11744] batadv1: entered promiscuous mode [ 288.049991][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1464'. [ 288.069482][T11730] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1459'. [ 288.094002][T11730] netlink: 'syz.3.1459': attribute type 9 has an invalid length. [ 288.105553][T11730] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1459'. [ 288.293888][T11760] bond0: left promiscuous mode [ 288.356316][T11767] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 288.394925][T11760] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.574204][ T3490] bond7: (slave dummy0): failed to get link speed/duplex [ 288.708136][ T3490] bond7: (slave dummy0): failed to get link speed/duplex [ 288.806015][ T5920] ip6_vti0 speed is unknown, defaulting to 1000 [ 288.828728][ T5920] syz2: Port: 1 Link ACTIVE [ 288.864493][ T6475] bond7: (slave dummy0): failed to get link speed/duplex [ 288.889731][ T5920] ip6_vti0 speed is unknown, defaulting to 1000 [ 289.276338][ T50] bond7: (slave dummy0): failed to get link speed/duplex [ 289.399275][ T50] bond7: (slave dummy0): failed to get link speed/duplex [ 289.517663][ T50] bond7: (slave dummy0): failed to get link speed/duplex [ 289.559777][T11786] __nla_validate_parse: 1 callbacks suppressed [ 289.559795][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1470'. [ 289.577212][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1470'. [ 289.619037][T11790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1472'. [ 289.628625][ T50] bond7: (slave dummy0): failed to get link speed/duplex [ 289.760722][T11792] netlink: 'syz.0.1473': attribute type 2 has an invalid length. [ 289.777485][T11795] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1474'. [ 289.779837][T11792] netlink: 'syz.0.1473': attribute type 1 has an invalid length. [ 289.793733][T11795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1474'. [ 289.836390][T11797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1475'. [ 289.856773][T11797] bond0: left promiscuous mode [ 289.861944][T11797] bond_slave_0: left promiscuous mode [ 289.873026][T11797] bond_slave_1: left promiscuous mode [ 289.879777][T11797] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 289.892020][T11797] batadv0: left promiscuous mode [ 290.152181][T11812] SET target dimension over the limit! [ 290.362295][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1485'. [ 290.382215][T11827] ip6t_rpfilter: unknown options [ 290.391084][T11827] vetè0_virt_wif: renamed from lo [ 290.398869][T11824] netlink: 'syz.2.1485': attribute type 22 has an invalid length. [ 290.408195][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1485'. [ 290.453536][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1485'. [ 290.453542][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.453579][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.462964][T11824] netlink: 'syz.2.1485': attribute type 22 has an invalid length. [ 290.508923][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.529666][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1485'. [ 290.539106][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.691600][T11839] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 290.725323][T11844] lo speed is unknown, defaulting to 1000 [ 290.780483][T11844] ip6_vti0 speed is unknown, defaulting to 1000 [ 290.983361][T11848] lo speed is unknown, defaulting to 1000 [ 290.989896][ T12] net_ratelimit: 10 callbacks suppressed [ 290.989912][ T12] bond7: (slave dummy0): failed to get link speed/duplex [ 291.171958][ T6475] bond7: (slave dummy0): failed to get link speed/duplex [ 291.680244][T11861] IPv6: sit2: Disabled Multicast RS [ 291.698733][ T12] bond7: (slave dummy0): failed to get link speed/duplex [ 291.743203][T11854] netlink: 'syz.2.1490': attribute type 6 has an invalid length. [ 291.818751][T11848] ip6_vti0 speed is unknown, defaulting to 1000 [ 291.865848][ T6475] bond7: (slave dummy0): failed to get link speed/duplex [ 292.114014][T11868] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 292.475857][ T6453] bond7: (slave dummy0): failed to get link speed/duplex [ 292.587243][ T6467] bond7: (slave dummy0): failed to get link speed/duplex [ 292.708982][ T6453] bond7: (slave dummy0): failed to get link speed/duplex [ 292.822414][T11892] lo speed is unknown, defaulting to 1000 [ 292.827364][ T6453] bond7: (slave dummy0): failed to get link speed/duplex [ 292.846206][T11892] ip6_vti0 speed is unknown, defaulting to 1000 [ 292.956029][ T50] bond7: (slave dummy0): failed to get link speed/duplex [ 293.074234][ T13] bond7: (slave dummy0): failed to get link speed/duplex [ 293.242300][T11913] ip6erspan0: entered allmulticast mode [ 293.425512][T11923] netlink: 'syz.3.1509': attribute type 13 has an invalid length. [ 293.455983][T11923] netlink: 'syz.3.1509': attribute type 17 has an invalid length. [ 293.527626][T11926] vlan0: entered promiscuous mode [ 293.546556][T11926] bridge0: entered promiscuous mode [ 293.736670][T11928] veth1_macvtap: left promiscuous mode [ 294.433953][T11976] lo: entered allmulticast mode [ 294.502257][T11976] dvmrp3: entered allmulticast mode [ 294.531134][T11975] lo: left allmulticast mode [ 294.543031][T11975] dvmrp3: left allmulticast mode [ 294.890250][T11998] __nla_validate_parse: 5 callbacks suppressed [ 294.890268][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1526'. [ 294.934463][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1526'. [ 294.966234][T11998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1526'. [ 295.019859][T12009] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1530'. [ 295.228108][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1532'. [ 295.250167][T12016] block nbd0: shutting down sockets [ 295.330928][T12034] tipc: Enabling of bearer rejected, failed to enable media [ 295.568167][T12049] lo speed is unknown, defaulting to 1000 [ 295.595529][T12049] ip6_vti0 speed is unknown, defaulting to 1000 [ 295.675246][T12057] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1540'. [ 295.704236][T12056] lo speed is unknown, defaulting to 1000 [ 295.943890][T12064] 8021q: adding VLAN 0 to HW filter on device bond3 [ 295.953526][T12064] team0: Port device bond3 added [ 295.996287][ T3490] net_ratelimit: 15 callbacks suppressed [ 295.996306][ T3490] bond7: (slave dummy0): failed to get link speed/duplex [ 296.136179][ T3490] bond7: (slave dummy0): failed to get link speed/duplex [ 296.246157][ T6467] bond7: (slave dummy0): failed to get link speed/duplex [ 296.355885][ T50] bond7: (slave dummy0): failed to get link speed/duplex [ 296.364392][T12083] netlink: 'syz.4.1547': attribute type 47 has an invalid length. [ 296.393321][T12056] ip6_vti0 speed is unknown, defaulting to 1000 [ 296.406152][T12083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1547'. [ 296.415252][T12083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1547'. [ 296.498894][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1538'. [ 296.569541][T12090] IPVS: set_ctl: invalid protocol: 46 10.1.1.2:20001 [ 296.604083][ T3490] bond7: (slave dummy0): failed to get link speed/duplex [ 296.803431][ T3490] bond7: (slave dummy0): failed to get link speed/duplex [ 297.001026][T12101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1552'. [ 297.021054][T12102] trusted_key: syz.3.1552 sent an empty control message without MSG_MORE. [ 297.176109][ T12] bond7: (slave dummy0): failed to get link speed/duplex [ 297.614426][T12114] lo speed is unknown, defaulting to 1000 [ 297.647507][T12114] ip6_vti0 speed is unknown, defaulting to 1000 [ 297.656551][ T12] bond7: (slave dummy0): failed to get link speed/duplex [ 297.776225][ T6433] bond7: (slave dummy0): failed to get link speed/duplex [ 297.850704][T12144] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 297.858354][T12144] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 297.886000][ T3490] bond7: (slave dummy0): failed to get link speed/duplex [ 297.896970][T12151] netlink: 'syz.4.1564': attribute type 83 has an invalid length. [ 297.945444][T12154] tipc: Enabled bearer , priority 0 [ 298.213429][T12158] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.232636][T12158] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.292507][T12164] : renamed from bond_slave_0 [ 298.331283][T12158] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.341907][T12158] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.452030][T12158] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.464753][T12158] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.635405][T12158] batman_adv: batadv0: Removing interface: netdevsim0 [ 298.680114][T12158] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.713373][T12158] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.907758][ T1008] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.920890][ T1008] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.931066][T12170] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 298.941352][ T5899] tipc: Node number set to 3185551297 [ 298.963694][ T6433] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.972717][ T6433] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.019311][ T6433] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.044203][ T6433] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.092795][ T6433] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.111500][ T6433] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.192574][T12176] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 299.291073][T12176] dummy0: left allmulticast mode [ 299.296393][T12176] dummy0: left promiscuous mode [ 299.301540][T12176] bridge0: port 3(dummy0) entered disabled state [ 299.403376][T12176] bridge_slave_0: left allmulticast mode [ 299.422167][T12176] bridge_slave_0: left promiscuous mode [ 299.429218][T12176] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.441538][T12176] bridge_slave_1: left allmulticast mode [ 299.450076][T12176] bridge_slave_1: left promiscuous mode [ 299.456609][T12176] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.472342][T12176] bond0: (slave bond_slave_0): Releasing backup interface [ 299.497931][T12176] bond0: (slave bond_slave_1): Releasing backup interface [ 299.521333][T12176] team0: Port device team_slave_0 removed [ 299.547501][T12176] team0: Port device team_slave_1 removed [ 299.557623][T12176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.585418][T12176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.601913][T12176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.611273][T12176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.640527][T12176] bond0: (slave wlan1): Releasing backup interface [ 299.676623][T12176] bond1: (slave bridge4): Releasing active interface [ 299.714038][T12200] tipc: Enabled bearer , priority 0 [ 299.741799][T12205] syzkaller0: entered promiscuous mode [ 299.779295][T12205] syzkaller0: entered allmulticast mode [ 299.930921][T12223] __nla_validate_parse: 4 callbacks suppressed [ 299.930939][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1584'. [ 299.948127][T12190] tipc: Resetting bearer [ 300.006621][T12190] tipc: Disabling bearer [ 300.245385][T12251] tipc: Enabled bearer , priority 0 [ 300.266344][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1590'. [ 300.266362][T12248] tipc: Resetting bearer [ 300.296217][T12251] syzkaller0: entered promiscuous mode [ 300.312619][T12251] syzkaller0: entered allmulticast mode [ 300.443346][T12250] tipc: Resetting bearer [ 300.468825][T12267] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1594'. [ 300.486891][T12250] tipc: Disabling bearer [ 300.501566][T12248] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1588'. [ 300.529870][T12267] netlink: 'syz.2.1594': attribute type 3 has an invalid length. [ 300.951883][T12289] xt_hashlimit: invalid rate [ 301.065505][T12249] Cannot find add_set index 2 as target [ 301.103748][T12299] net_ratelimit: 13 callbacks suppressed [ 301.103767][T12299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.120651][T12299] xt_CONNSECMARK: invalid mode: 66 [ 301.126967][ T1008] bond7: (slave dummy0): failed to get link speed/duplex [ 301.155661][T12303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1605'. [ 301.217015][T12306] tipc: Enabled bearer , priority 0 [ 301.253397][T12304] tipc: Disabling bearer [ 301.276010][ T6467] bond7: (slave dummy0): failed to get link speed/duplex [ 301.298965][T12313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1609'. [ 301.397838][ T50] bond7: (slave dummy0): failed to get link speed/duplex [ 301.515985][ T50] bond7: (slave dummy0): failed to get link speed/duplex [ 301.636764][ T6476] bond7: (slave dummy0): failed to get link speed/duplex [ 301.756037][ T3490] bond7: (slave dummy0): failed to get link speed/duplex [ 301.822039][T12339] IPv6: Can't replace route, no match found [ 301.868744][ T6467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.878927][ T6467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.886752][ T50] bond7: (slave dummy0): failed to get link speed/duplex [ 301.931622][T12344] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1619'. [ 301.948572][T12345] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1619'. [ 301.995803][ T6476] bond7: (slave dummy0): failed to get link speed/duplex [ 302.106895][ T3490] bond7: (slave dummy0): failed to get link speed/duplex [ 302.198710][T12366] lo speed is unknown, defaulting to 1000 [ 302.205662][T12366] ip6_vti0 speed is unknown, defaulting to 1000 [ 302.220700][T12367] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1622'. [ 302.544848][T12372] netlink: 'syz.1.1625': attribute type 3 has an invalid length. [ 302.553611][T12372] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1625'. [ 302.607682][T12375] tipc: Enabled bearer , priority 0 [ 302.615201][T12376] syzkaller0: entered promiscuous mode [ 302.630218][T12376] syzkaller0: entered allmulticast mode [ 302.656091][T12375] tipc: Resetting bearer [ 302.674960][T12376] netlink: 'syz.2.1626': attribute type 83 has an invalid length. [ 302.702633][T12374] tipc: Resetting bearer [ 302.781520][T12374] tipc: Disabling bearer [ 302.957085][T12383] tipc: Enabling of bearer rejected, already enabled [ 303.308310][T12393] lo speed is unknown, defaulting to 1000 [ 303.352595][T12393] ip6_vti0 speed is unknown, defaulting to 1000 [ 303.748042][T12397] lo speed is unknown, defaulting to 1000 [ 303.824749][T12413] netlink: 'syz.2.1637': attribute type 9 has an invalid length. [ 303.834530][T12399] lo speed is unknown, defaulting to 1000 [ 303.840790][T12397] ip6_vti0 speed is unknown, defaulting to 1000 [ 304.285810][T12399] ip6_vti0 speed is unknown, defaulting to 1000 [ 304.644777][T12431] lo speed is unknown, defaulting to 1000 [ 304.656622][T12431] ip6_vti0 speed is unknown, defaulting to 1000 [ 305.846758][T12451] lo speed is unknown, defaulting to 1000 [ 305.854304][T12451] ip6_vti0 speed is unknown, defaulting to 1000 [ 305.881348][T12457] IPVS: set_ctl: invalid protocol: 0 172.20.20.46:20003 [ 306.115879][ T6475] net_ratelimit: 22 callbacks suppressed [ 306.115897][ T6475] bond7: (slave dummy0): failed to get link speed/duplex [ 306.278472][ T12] bond7: (slave dummy0): failed to get link speed/duplex [ 306.386242][ T141] bond7: (slave dummy0): failed to get link speed/duplex [ 306.408099][T12479] tipc: Resetting bearer [ 306.441550][T12479] tipc: Enabling of bearer rejected, already enabled [ 306.572676][ T141] bond7: (slave dummy0): failed to get link speed/duplex [ 306.789397][ T3551] bond7: (slave dummy0): failed to get link speed/duplex [ 306.948693][T12496] macsec1: entered promiscuous mode [ 306.990489][ T141] bond7: (slave dummy0): failed to get link speed/duplex [ 307.234008][T12505] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 307.256272][ T3551] bond7: (slave dummy0): failed to get link speed/duplex [ 307.276560][T12510] lo speed is unknown, defaulting to 1000 [ 307.286892][T12510] ip6_vti0 speed is unknown, defaulting to 1000 [ 307.328768][T12514] netlink: 'syz.1.1663': attribute type 1 has an invalid length. [ 307.376713][ T3551] bond7: (slave dummy0): failed to get link speed/duplex [ 307.481335][T12516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1664'. [ 307.506823][ T12] bond7: (slave dummy0): failed to get link speed/duplex [ 307.756884][ T141] bond7: (slave dummy0): failed to get link speed/duplex [ 307.778499][T12525] lo speed is unknown, defaulting to 1000 [ 307.883829][T12525] ip6_vti0 speed is unknown, defaulting to 1000 [ 307.957961][T12544] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1671'. [ 308.037719][T12546] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1671'. [ 308.096420][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1673'. [ 308.207673][T12550] erspan0: entered promiscuous mode [ 308.326239][T12552] tipc: Enabling of bearer rejected, failed to enable media [ 308.384789][T12553] tipc: Enabling of bearer rejected, failed to enable media [ 409.876223][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 414.225721][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 414.232344][ C1] rcu: 1-...!: (10499 ticks this GP) idle=dc1c/1/0x4000000000000004 softirq=56047/56047 fqs=95 [ 414.243758][ C1] rcu: (t=10500 jiffies g=43889 q=3067 ncpus=2) [ 414.250091][ C1] rcu: rcu_preempt kthread starved for 10278 jiffies! g43889 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 414.261276][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 414.271233][ C1] rcu: RCU grace-period kthread stack dump: [ 414.277128][ C1] task:rcu_preempt state:R running task stack:27392 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 414.290612][ C1] Call Trace: [ 414.293888][ C1] [ 414.296812][ C1] __schedule+0x14bc/0x5000 [ 414.301327][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 414.306521][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 414.312406][ C1] ? __pfx___schedule+0x10/0x10 [ 414.317252][ C1] ? schedule+0x91/0x360 [ 414.321483][ C1] schedule+0x165/0x360 [ 414.325631][ C1] schedule_timeout+0x12b/0x270 [ 414.330467][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 414.335824][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 414.341732][ C1] ? __pfx_process_timeout+0x10/0x10 [ 414.347008][ C1] ? prepare_to_swait_event+0x341/0x380 [ 414.352544][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 414.357390][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 414.363527][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 414.368792][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 414.373980][ C1] ? finish_swait+0xcd/0x1f0 [ 414.378558][ C1] rcu_gp_kthread+0x99/0x390 [ 414.383132][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 414.388324][ C1] ? __kthread_parkme+0x7b/0x200 [ 414.393246][ C1] ? __kthread_parkme+0x1a1/0x200 [ 414.398256][ C1] kthread+0x711/0x8a0 [ 414.402312][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 414.407594][ C1] ? __pfx_kthread+0x10/0x10 [ 414.412191][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 414.417382][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 414.422732][ C1] ? __pfx_kthread+0x10/0x10 [ 414.427339][ C1] ret_from_fork+0x599/0xb30 [ 414.431936][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 414.437045][ C1] ? __switch_to_asm+0x39/0x70 [ 414.441799][ C1] ? __switch_to_asm+0x33/0x70 [ 414.446550][ C1] ? __pfx_kthread+0x10/0x10 [ 414.451156][ C1] ret_from_fork_asm+0x1a/0x30 [ 414.455925][ C1] [ 414.458932][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 414.465246][ C1] Sending NMI from CPU 1 to CPUs 0: [ 414.470440][ C0] NMI backtrace for cpu 0 [ 414.470462][ C0] CPU: 0 UID: 0 PID: 12573 Comm: syz.2.1676 Not tainted syzkaller #0 PREEMPT(full) [ 414.470498][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 414.470516][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x37/0x70 [ 414.470545][ C0] Code: 08 f0 76 92 65 8b 15 b8 a5 b5 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 6c 16 00 00 00 74 2c 8b 91 48 16 00 00 <83> fa 02 75 21 48 8b 91 50 16 00 00 48 8b 32 48 8d 7e 01 8b 89 4c [ 414.470559][ C0] RSP: 0018:ffffc9000bbf7318 EFLAGS: 00000246 [ 414.470574][ C0] RAX: ffffffff81b5ba87 RBX: 1ffff11017128101 RCX: ffff88802e699e80 [ 414.470586][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 414.470596][ C0] RBP: ffffc9000bbf74a0 R08: ffffffff8f805a77 R09: 1ffffffff1f00b4e [ 414.470608][ C0] R10: dffffc0000000000 R11: fffffbfff1f00b4f R12: ffff8880b8940808 [ 414.470620][ C0] R13: dffffc0000000000 R14: ffff8880b883b9c0 R15: 0000000000000001 [ 414.470631][ C0] FS: 0000000000000000(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 414.470645][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 414.470656][ C0] CR2: 0000200001000000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 414.470671][ C0] Call Trace: [ 414.470678][ C0] [ 414.470684][ C0] smp_call_function_many_cond+0xce7/0x12b0 [ 414.470710][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 414.470735][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 414.470762][ C0] ? rcu_is_watching+0x15/0xb0 [ 414.470782][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 414.470801][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 414.470823][ C0] flush_tlb_mm_range+0x6b1/0x1280 [ 414.470853][ C0] ? free_pgd_range+0x144b/0x14c0 [ 414.470876][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 414.470901][ C0] tlb_flush_mmu+0x1a7/0x680 [ 414.470926][ C0] tlb_finish_mmu+0xc3/0x1d0 [ 414.470945][ C0] ? free_pgd_range+0x144b/0x14c0 [ 414.470968][ C0] free_ldt_pgtables+0x17b/0x320 [ 414.470986][ C0] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 414.471012][ C0] ? down_read+0x274/0x2e0 [ 414.471032][ C0] ? exit_mmap+0x115/0xb20 [ 414.471051][ C0] exit_mmap+0x174/0xb20 [ 414.471069][ C0] ? uprobe_clear_state+0x20f/0x290 [ 414.471092][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 414.471109][ C0] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 414.471136][ C0] ? __pfx_exit_aio+0x10/0x10 [ 414.471157][ C0] ? uprobe_clear_state+0x27c/0x290 [ 414.471182][ C0] __mmput+0x118/0x430 [ 414.471197][ C0] exit_mm+0x1da/0x2c0 [ 414.471216][ C0] ? __pfx_exit_mm+0x10/0x10 [ 414.471239][ C0] do_exit+0x658/0x2310 [ 414.471261][ C0] ? do_raw_spin_lock+0x121/0x290 [ 414.471282][ C0] ? __pfx_do_exit+0x10/0x10 [ 414.471308][ C0] do_group_exit+0x21c/0x2d0 [ 414.471327][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 414.471348][ C0] get_signal+0x1285/0x1340 [ 414.471381][ C0] arch_do_signal_or_restart+0x9a/0x7a0 [ 414.471404][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 414.471432][ C0] ? exit_to_user_mode_loop+0x55/0x4f0 [ 414.471449][ C0] exit_to_user_mode_loop+0x87/0x4f0 [ 414.471464][ C0] ? rcu_is_watching+0x15/0xb0 [ 414.471484][ C0] do_syscall_64+0x2e3/0xf80 [ 414.471505][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.471520][ C0] ? clear_bhb_loop+0x60/0xb0 [ 414.471538][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.471553][ C0] RIP: 0033:0x7f3024b8f749 [ 414.471567][ C0] Code: Unable to access opcode bytes at 0x7f3024b8f71f. [ 414.471576][ C0] RSP: 002b:00007f3025a45038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 414.471591][ C0] RAX: 000000000003ff6f RBX: 00007f3024de6090 RCX: 00007f3024b8f749 [ 414.471602][ C0] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000005 [ 414.471613][ C0] RBP: 00007f3024c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 414.471623][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.471633][ C0] R13: 00007f3024de6128 R14: 00007f3024de6090 R15: 00007fff14b447e8 [ 414.471653][ C0] [ 414.858816][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 414.858837][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 414.858845][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x2f/0x70 [ 414.858865][ C1] Code: 8b 04 24 65 48 8b 0c 25 08 f0 76 92 65 8b 15 b8 a5 b5 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 6c 16 00 00 00 <74> 2c 8b 91 48 16 00 00 83 fa 02 75 21 48 8b 91 50 16 00 00 48 8b [ 414.858877][ C1] RSP: 0018:ffffc90000a08ad0 EFLAGS: 00000246 [ 414.858889][ C1] RAX: ffffffff896202fa RBX: ffff8880545df000 RCX: ffff88801ce9db80 [ 414.858899][ C1] RDX: 0000000000000100 RSI: 0000000000000009 RDI: ffff8880545df000 [ 414.858908][ C1] RBP: 1ffff1100a8bbe6a R08: ffffffff89615756 R09: ffffffff8df41cc0 [ 414.858917][ C1] R10: 0000000000000001 R11: ffffffff89549fc0 R12: dffffc0000000000 [ 414.858926][ C1] R13: ffff8880545df354 R14: ffff888054c18c00 R15: 0000000000000009 [ 414.858935][ C1] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 414.858946][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 414.858955][ C1] CR2: 000000110c28854e CR3: 0000000069074000 CR4: 00000000003526f0 [ 414.858967][ C1] Call Trace: [ 414.858974][ C1] [ 414.858979][ C1] taprio_dequeue_from_txq+0x2a/0x980 [ 414.859003][ C1] taprio_dequeue_tc_priority+0x1ac/0x750 [ 414.859027][ C1] ? taprio_dequeue+0x26/0x550 [ 414.859040][ C1] taprio_dequeue+0x186/0x550 [ 414.859052][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 414.859071][ C1] __qdisc_run+0x23f/0x1510 [ 414.859103][ C1] qdisc_run+0xc7/0x300 [ 414.859121][ C1] net_tx_action+0x7ac/0x9f0 [ 414.859137][ C1] ? net_tx_action+0x617/0x9f0 [ 414.859152][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 414.859166][ C1] ? __pfx_net_tx_action+0x10/0x10 [ 414.859193][ C1] handle_softirqs+0x27d/0x850 [ 414.859209][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 414.859225][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 414.859241][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 414.859260][ C1] __irq_exit_rcu+0xca/0x1f0 [ 414.859272][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 414.859291][ C1] irq_exit_rcu+0x9/0x30 [ 414.859302][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 414.859318][ C1] [ 414.859323][ C1] [ 414.859328][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 414.859342][ C1] RIP: 0010:do_idle+0x15f/0x520 [ 414.859355][ C1] Code: 17 e9 0d 0f 83 c4 03 00 00 e8 bd c4 d1 ff 83 3d e6 17 e9 0d 00 75 09 e8 af 0e b2 09 85 c0 74 32 e8 96 aa 1b 00 e8 91 29 b2 09 4c f7 ff ff 48 b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 0f [ 414.859365][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000286 [ 414.859376][ C1] RAX: 5ec28cdef737a400 RBX: ffff88801ce9db80 RCX: 5ec28cdef737a400 [ 414.859385][ C1] RDX: 0000000000000000 RSI: ffffffff8d76bd39 RDI: ffffffff8bbfc660 [ 414.859394][ C1] RBP: ffffc90000197f10 R08: ffffffff8f805a77 R09: 1ffffffff1f00b4e [ 414.859403][ C1] R10: dffffc0000000000 R11: fffffbfff1f00b4f R12: ffffffff8f805a70 [ 414.859412][ C1] R13: 1ffff110039d3b70 R14: 0000000000000001 R15: 0000000000000001 [ 414.859433][ C1] ? ct_nmi_exit+0x14b/0x1d0 [ 414.859453][ C1] ? __pfx_do_idle+0x10/0x10 [ 414.859478][ C1] cpu_startup_entry+0x44/0x60 [ 414.859491][ C1] start_secondary+0x101/0x110 [ 414.859510][ C1] common_startup_64+0x13e/0x147 [ 414.859538][ C1] [ 416.181668][ C1] sched: DL replenish lagged too much