last executing test programs: 4.495122406s ago: executing program 4 (id=1065): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000e00)={'gretap0\x00', r0, 0x1, 0x7, 0xa, 0x71, {{0x19, 0x4, 0x1, 0x21, 0x64, 0x66, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x17}, {[@end, @end, @generic={0x44, 0xd, "6afd052ddf622340d61edd"}, @noop, @end, @timestamp_addr={0x44, 0x3c, 0xb7, 0x1, 0xd, [{@rand_addr=0x64010102, 0x2}, {@multicast2}, {@rand_addr=0x64010100, 0xe4cb}, {@multicast1, 0x8}, {@rand_addr=0x64010102, 0x80}, {@local, 0x3}, {@empty, 0x10000}]}]}}}}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x3d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) 4.395690217s ago: executing program 4 (id=1066): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="010000000000fdffffff10000000180001801400020076657468315f746f5f68737200000000080011"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) 4.380939521s ago: executing program 4 (id=1067): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x39, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002480)={'netdevsim0\x00', &(0x7f0000002400)=@ethtool_coalesce={0xf, 0xfffffff8, 0x7, 0x4, 0x5, 0x5, 0x7ffffffe, 0x7, 0x5, 0x4, 0x3, 0x5, 0x5, 0xfffffffa, 0x8, 0x7fff, 0x6, 0x1310000, 0x2, 0x2, 0x7, 0x4000007, 0x8}}) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000540), 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001000000400000004000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ca16771e66c43b6de6279d8e"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @loopback}, 0x83, 0x0, 0x2}}, 0x2e) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)="cacafd486242d211", &(0x7f0000000180), 0x1003, r3}, 0x38) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x3, 0x200, 0x5000000000}) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x18, 0x3, &(0x7f0000000040)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @exit], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0), 0x0, 0x10, 0x7}, 0x94) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r3, &(0x7f0000000140), &(0x7f0000000080)=""/113}, 0x20) 3.9528218s ago: executing program 4 (id=1070): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffd}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x2, 0xb, 0xf4, 0x0, 0x3, 0x0, 0x70bd2c, 0x25dfdafc, [@sadb_key={0x1, 0x8}]}, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000000000000000000000100000002000000000000002c000000000000000000000001"], 0xf8}, 0x4008004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x70, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0xd410, 0xf69aa1672a50ebb1}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x7}, @IFLA_GRE_REMOTE={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x35}}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x10) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect(r6, &(0x7f0000000040)=@un=@file={0x1, './file0\x00'}, 0x80) ioctl$sock_SIOCINQ(r5, 0x541b, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r9, 0xffffffffffffffff, 0x500}, 0x57) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 3.351201712s ago: executing program 4 (id=1076): unshare(0x62040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) (async) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000005bf989bfb7ffff95d80000000000000000000000f900000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x10000000) gettid() (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) (async) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xc4}}, 0x0) (async) close(0xffffffffffffffff) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000000)={'netdevsim0\x00'}) socketpair(0x1d, 0x2, 0x7, &(0x7f0000000040)) (async) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r3], 0x88}}, 0x4000804) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbcbbbbbbbbb4aa468739b8508060001080006040001da82ce4f59beaaaaaaaaaaaa0a01010057330377"], 0x0) (async) sendmsg$inet(r3, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x7, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x0, 0x13, 0x81, 0x0, 0x0, 0x70bd25}, @sadb_sa={0x2, 0x1, 0x4d3, 0xfc, 0x0, 0x91, 0x1, 0x20000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x4, @private1, 0x1b}}]}, 0x22a}}, 0x0) unshare(0x68040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) writev(0xffffffffffffffff, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) 3.115041996s ago: executing program 0 (id=1078): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e21, @loopback}, 0x20, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x9, 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_delrule={0x30, 0x21, 0x105, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x30}}, 0x0) 2.953482132s ago: executing program 0 (id=1080): r0 = socket$inet6(0xa, 0x800000000000002, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400200010000100000000b40d0011"], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002140)={0x18, 0x1409, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x8000000) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="12008864"], 0xfce) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r4 = socket$inet6(0xa, 0x80000, 0x5) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000100)=0xb2, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@gettaction={0x18, 0x32, 0x9408f9ce2610ee65, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x14040800}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000003880)=[{{0x0, 0x26, 0x0, 0x0, &(0x7f0000000000)=""/23, 0x59}, 0x8}], 0x1, 0x0, 0x0) 2.739541665s ago: executing program 2 (id=1083): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@can, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x2, 0x48094) r1 = accept4$llc(r0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) writev(r1, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket(0x3, 0x80f, 0xc) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x20c}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r3) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) socket(0x10, 0x803, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[@ANYBLOB], 0x3c}}, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (rerun: 64) connect$bt_l2cap(r4, &(0x7f0000000180)={0x1f, 0x4}, 0xe) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x2, 0x1, 0x4, 0x4}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[r4, 0xffffffffffffffff], &(0x7f0000000480)=[{0x5, 0x3, 0x4, 0xc}, {0x5, 0x2, 0xf, 0x4}], 0x10, 0x7ff}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES32=r9, @ANYRES64=r9], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) 2.399814984s ago: executing program 3 (id=1085): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r4 = socket(0x400000000010, 0x3, 0x0) unshare(0x2040400) r5 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001300010000000000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000000000000010000c800c0022"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a8008000204fe0f0500080000003e120000080006"], 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000002640)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000002880)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002840)={&(0x7f00000028c0)=ANY=[@ANYRES64=r6, @ANYRES16=0x0, @ANYBLOB="00082bbd7000ffdbdf25040000000c0001800800030002000000040001803c000180140002006d616376746170300000000000000000080003000100000008000100", @ANYRES32=r8, @ANYBLOB="14000200766972745f77696669300000000000002c000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000004bd0180300001801400020070696d726567310000000000000000000800030000000000080003000200000008000300020000000c00018008000300000d0000040001804c00018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000300000000001400020069705f767469300000000000000000008800018014000200626f6e645f736c6176655f3100000000140002007866726d300000000000000000000000080003000200000014000200776732000000000000000000000000001400020074756e6c30000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="0800030001006e3000000000000000000000000000000000000000009dc89e814c685b0242c91425cf198e02c75297d36dff58412c54acd52ff166fabf99ef7f14b670839a1fe7326bb05190cac92f9c3ce6f6943c09351e3168f4046947daaec9a8"], 0x1a4}, 0x1, 0x0, 0x0, 0x40}, 0x80) setsockopt$packet_int(r5, 0x107, 0xe, 0x0, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = socket$netlink(0x10, 0x3, 0x4) bind$unix(r12, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) write(r13, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xa}, {0xffff, 0xffff}, {0x10, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000280)=r14) openat$cgroup_freezer_state(r0, &(0x7f0000000200), 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000008b40)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @loopback}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880) writev(r0, &(0x7f0000003500)=[{&(0x7f0000001440)="34325a3ec95335e2316325bc217474e55486f13461aa6d72f8ad90ba36f13758495616c22692c9888acd74c8141f760b360d963b2ea9defa4e0d04a1b08b1e9bca95a6fef2e1e2e3bcdf3fe633f09f44363b28eec64030d7269c6024f118efe0eaeda4ce2ffd74748748ea9e1f264a4efc5eb41bc90831fc6d70a3bb367f094dd21b1165959e0a48e43d1e01976a1b9b430e28acd780f7ea7bb157a161644979b927f6c7109538395a73f29cfbc4b79f775dc80ac55ec12ebf839793e3a665921c15820a20298addeb88eddabce5fcef43cc3e81dd4aa8a5f84a0f9f996f3705c0e88146b1e19b21aee9d4143adf57e60a482507714ac4d52d2d2160cdf2809ec84ec9d77d208fd5f432ec3b99343b90e4acc82033da76f34a63a14afae361533e1fcfa6af0a79632c6c794fc1ec142eac90249a1a805b5ed73226f01b33f95f41fbdc2e25e8dc53cc7ac7ba242d904c7899c839d4c5d9d919e67aa15d9ae4f4da9b080bc0b124af94583cecfb08dcebbe5fe70f2a73d727e5c1e7c402e82497e1596c92fecce9b0f83c7e99bafd08c953529186c98acd728b4885c70664b516100cc7dccbb3b2cb72889564dbe9e8bb4df5ec61b60215a8b0093a47f45be324de9ce13e2cdb02e70945d0bb9931061f0c559b4137e04f6b7d94795a11242565485ca654ccdec9dabfd5a344652dfc9a74fd89fd578408671e2745062713d7fc50486abe3c226b139058f2f9c1cdf0301bbcc388a4ac6ed2ad38f54fe1e4d88e316c15ac1039281b1a74ed890174d4c80a28ce29b05a223e07ad8c4a378a2b44ce349bc74ae73af2852130f7ad525c3853e2328fa12ff7b8444c1ec39a46b1c47ed2d7918d09a70b3d3ea39c16d17f397bccd069b62e231c5d251373de33602641d4220da1f3fb62f55989fbe379f35aa578949a3cdcc638befddd2e24d898d25ef9508467ac6d8952cb2fb9b7a5a9eb5238fb8e1cfc8bd967d2ad877ccbcad2a8f1c41b5e2b779df09ba8596ea37ed93a1dba30df412834a89b9510c42dbd697470087dd4c3c8458b177705a9aea6b5c26ac5999290bd63fa10c441cbdeb24f5918522f1cfd512b9627ecd59f275f0c469dc6e3b12e8a5a5a9a13b134ddd31b5a6feef3f6b9df2165291487f9397a95b18c6e800a4c7bd127dbc2c62a8f70368cf43b0d120fbc681fa781fde92df025871dbab0af3104eceb3187b7f7d5d7957047f30b6b03fdf26ede899d807725bd584a7380732f915089d775d45ff2620db6656e3c8efd52d3951b4aa52fddd9355581a6ba83192f93b285b7025bb524106c2633254a41868770cd6c8c539b9a83875a43bc4040ab1f31a4bfa99059b689318f01ee8e36525c5ed85fab4192d68c39f025b6762f0ed0acd647bb04436cd12bcba484baadb4b47c2e629b757943cf753c4cd330878f3bcd217b52ef916af4abaecb7c9ca7386e6c3458b89cae0391ec3b567e0a1ee45b7167e38507a5466b61e1defec4019a07efd4f524d55a431b7701c3bad1c0939ef7096e7ab4f5d4ee933a89c60413d299f96ce2e9da028cc17ef7b278307e224dc011a043cad95e0ce14aa55e5c1e03b224e081689cd064080286f30344941f17675c688b11544030e6277423da966e99fe1522ad5f8b37314113f8f78c152d18881148e97bd174dfd04951490c7aa3e344b8c02ff14cc3c61369825ed3d5155057c3f9ea645d094545179ddcf17ff75e549da3e28a9848b6e7d4432535ed7b04cd8b61933d68cccd8a056b949c16cbcb7b500c302837067face71a411e65950771ca68cfbb60f70d7aa9f81db96413e56fc92aa714452909158dc7f7478e8623a4e59ddce28e3c08726e1e28857f80891c12be40ec3543a384e5b95194c3b78c7f7f987e9a051fb56e0e17285bab975858d41b56c176ccaabdadadc88d51e5d9d126cf5581a9b975ade73f6b2ae6a4a9a72d568de6795e4d3791b64670ebbf78f17ae9bd24b684417be361c48ce9f1bc55a77e6f55689575c0dc4d3dd0c2c4257d5f3fc8e0300f7f76c3fd26e8b19c4ad239c179ee67bca56788412721a2ebead64f24c42ce4bba250b1e9fa84912d60c3d737297cb4e6e0bb1976903efe355dcc902ba0355d2e64018d0320fe6a43fdab880e7ac3d01a52848d6020b9ac83f1fea19a4db6afa7d3eb383ab6dba2edef4b2d0ba97bdb929bcc233951d44396a3e65e5860fa71a30168c0cf59ced3c776495b5ccdeab23a124f2e72629457aa4c2ea0cc6bf4a1b17105205b33956439f3d853af200ed5d24031c1fda9934f564524d571c38e2fe30103764a5bcb1e3d21305031ee5add1b205832eee5b196478688a6f25727ee6832425c6710898c62c13bac4ba951c2ad8eaff59856997a7c2b451bab9242ef610257a9b64fc99141bbd8f590bdeb2ef12020ba8ed784f492e6ef3195df7da08c9d27cf24118c29a571deda94b8e3434b170adbc33e3ab47755d4e7b1ce9716b2fc03687902c7703f888a86b4f38f0d52f477f98590352c82cc0ff4718a4c37b0ea9bd6d66d9b5c8fc7aabfd08c9a7a75bb3d6e970e8bf1f344b344186f078521d7b26a002bd1cba1ea408941e2f943278bd5abe504474ad89501aaee9935b77fc417bbc20e795f22259c3ad0f5a2fb205e581f617a992a6baabe41226b8005e34de92adfb70da635c60f4e7c8509b739f88eca6e91ea5142e107ce2c147c96e68d8e775a7464321f639846e7de8c6a91ed18fcaefbd44118e240d42ae6af70781c9dc71ef30230d3d50061716d080e9a1faf057243a0af6b12e1a76a1267a5a39e085f25b8bd289e3a140d266b46be7c59dbeec32edd1695fc4ba196ebc797b86e6885c6fb6ba04f282b71ccfc535707362c8b73d850a549c48b95bde8ca4f95249e8cc9b7751f6d42d2765505d06e5ff208dd1772ddfdf81086476516ce83fc70551cc66d27691c9fb951b71ceb6e9424ee66dcf129fa3f2906296e7b6b2a764027a72818d9cce46f8b47841d1024b16a5009045178dc7cbbfc5121c6378887a449cf0c9793d53c1d861ab7d7c9eb9e4713a0b071237cb3faa44a1c2567af77f6acb9a1b95e243c65b1c88b3c639b17c6b6a936bc01d9efcb0e7e4e0465b1dc7f3edb970d733043600d34f135f0f439bb82b1aade9a70b1435976f8aa7125009dec0f9d96fa613d62ddd09c621396c4ef82c5fbd1f745d64e05ae27e1069ee66bc10e301f95eda0215f0cdd423771e97b1cf634bc93c239caa557b7e7a8e599f7973ee31d8e9f6fdb05466eb278883bc315bfac83464ca462d5b966879bafeb007ea505e797ee8921b6f82540aa876740bc6d26a13065a3d0160e269ecdb905aad6eac3ee330fa9055f66b4f4305fb983931c1e229d6a0210f25756788e9a70e91a3aa5da28e677d84ac3fbe097c322011a050d7b2ea1612d10cbcdfcef38f22369eb531a724e4d7f9b8e8aa6664aa8ba1e378e4d9e626b863d46c9352bfdd0cf467bc1f17f0f534fee341b88d55a53d7a09d34b76eeec96dccb8f332585c753e9fd09ad4bd527e58781f854627f72eb8d6e59e68048c4b8ea4bfd76a8f27125bd51054732c6ca9096e69476dc8e52b51fdae262dcd91c2e23a414cb16d1d2159f33993fbda87c46a9e7b58195916eea891b7dee88fd23f1e461728161d8af0e067b4c80ca8fe0acd010fcdad461708c7ee41d4e2fd2cebd5c34de4edd763f6cfc583689141808ecf42e20b79f6d5ef323649c2b9ebb4ef4d4526767e44c58358105cd394410bacd486475c26e7ee8d79c731ad82d820f7fd20b0daca649334771ee07234e44b401a7fc7e7b86a845ce18946dc7c14b17854a80a0af5d0dc8bd0614650681982d2f6cec264da5add6720d84bcd3acefbca4fa00ffb53105cfe9da7ac34c88dab0b50878390bc1ef6a388df4f41be51714d22a29544edf59feedb71789efd8c40f1fd572ffc3b05a7eec9040ccd554c1b37b888bc6dac1fa4656a2c95bc9a5d10f2d0162b773ca6a6d9a30a9e172e6c8cca1de09626ca3e59b4dbb82f4dd949cc341deee27a0800e17a73a56386c0527f4d0f7c28f1d44b2c83cad51f616ad09e4e4ae2a1901b5fc0de12c5f93ffb547b4b3326f9cab45f8fcc8761196751585a8ff493b3d9ef077f899918bde019e0e66e818dedcff7d6d2ee0b1fcc1845716242adf546f08551cbd4f0e44482a39a871c5729a566b5726f2f33cbf28b47a7d661e2e35cfe3a548a5f1eec8069eed21c92c44e253bf275cbc7825b7e26f52145d415139cf09216335e19a3b4276269eed91c1b557f80f4101a0d733269b40d9ef0e9b12d3baa379e5a0c1300c63c5ff8c72f4420652838d6763544c6fd4c65a06a26eda3454206727c0507614c2a88277ebe880a5ecf981be57873a573d481eae5433d65dc4dc16d118bc057975265945bd9ddc64c0a63be3d5083fad6b22cfc89bc78c395b9ba767d8079fc4c2ffc9280888c2f53fd39801ad24b59f51a8318e5e9af7e1223cb4d385e3e4001f6249878d60cbcc9f67af75ff04de1ca8918eab36f915b9a150fdf99dc4df4af16715d3706fbd934c8e8479a99734dd6c32328565e3a351f5c8a61a2657d8dac76fb9623a6095adb4200d8e3707bc015aaf97ff0190caa4b22e102458fb40901fe161943f4c6ed6654264baa7dfa15e80cadaa0959e4030ee90451f1a35350ae7e6686f399f3bb230b87c36ebb536369e0bf32ee95f1a8fbbf05a0f74e801200cc4730ef0b35e9f6559f051023b23b29dad69477064118c67cc63ca3c4c8b564c446ce0d88d98252d2edb04983045e5424935791b208d90152b15287425c514f23ce64b41178e66fb55e1fe0aa153596a940ee6297b4046cf9a413232570638861a74e36c57fd548517d8028f18e8c194bc259b667b886f875d8f46a0554d3a11c0866fa2f988230e54192a96ffbae5f7fb5c0a71aa88bf59389c75a6093b3482a3f6e5c7d5704e97eec57e8037fe4df05d18b8bb75ae249e2c28a71fb2d5cdaf59168007e07dba122f5cf0d645bcd4e736159c6393bb772b820fb3c8fc17cb88393c90233fe4ab880593384bd96de985655c768d6f6f2f67896e7e15b3cbc513bfc52f63cba2c9b708bcc2252cda70822111c4503a7257c0d89fe1eb3d7d99e93c9b0b0935bc198bb8ce04917f73269716337b7bfb5142d8a7147bd5c84ca9bb41c5a86d5d36efc61d0d787cc085a9db5c3388aa2b4bd287627da24e70b62601fd0beaceba112d305148a8c97cae338094c8d92732b5c220abf8e0ce94826de7fe01e32932d05905c341545eeff2a86cd18912272f32e3cea5cbf13236b48de5b1235483449fb892f14a499a6ba89cdcc4224580bfc6a28b5cc25b6274381da039e4961977423d9c3d9217bbfddf7e5f2e044d892daa1f0b1018fac5a590be3bfd0995fc2126f805b00bb95afdd9740dcacea283c681da742e2fb99014b435593ed796e7230d135f65079575d1b51674bbaec6c02e7064f7c72d05bd65ccfa61e3b55110cf00e7aa359347b19c8c0e54c3ed30995966ad8e186314f5d852cd31ccfaa9d0c7e849d68a6b0cff756d0ab7ad920b44de00310c0edaa5ae60bf0787ece2e07da207608de0926e5e5b344bf8bab13c87b38fdd623353c37b448c5ee03678e9941b84f544c2ea87ed759156bf67e2e0fba081210479c4a71d671d03b6d2f5841aebc57a13f4f4d5432cda29b5962e39a093c69285902f11e4a75cdfd38b5f52e4238c90a0942ea741a79ead7e044bca535f51644b35dcc9d5d54b11a1e6c000000000000000000dc539a783a8e75a1fea31936bb9a09c88d55cf1771a67092228c231f39d79c28d1a9c544ce80546e4b8a5b924b6ef436d97eb77a1c8c300d6d775fdc61f3303b00cff340d8ea575b8136ea5efc84786fb76f3fc61b5ce797cb281aeac5acb5e63a33412ce27c", 0xfeb7}, {&(0x7f0000000080)="4326cf937e13ee59da7470150a873243abfea809b88a998078b3084d08030a225b1b296225c17f4b09678041529c949acafe18e62a48271f7830c85579b4f780c17484b9f547f8b3bb6b73de8928444b7f35b7a4aa420778028e4cc363c69a9e95c33c9581447916400607df4eeb04d1903b1b7c00fc0696602cc79d7151b69b2f3b3fcd1128a6acdc48aba5193eb9d4fd11a65e0e1598011f4a7343b0e62b38022bb6ebe507b99dc69aebd5b0c1c9059c221b7a8bd04786b5a00bb5a0050597d9002d12bd74579c38948645232309c873809bc1aefc7d44a3d4b7ae796ead08a87acbb4c33d91446f9a89f6caad87a9b03a38cd4051b90ec1c6b17a14c190ead881b3a042ec0c1f15631a763fa7e7d35d4dad2ebcbec86544e0306f9b7910144196baa8d90f33617db2f8551135e25e50f51acedad250", 0x137}, {0x0}, {&(0x7f0000001240)="d35c99d267", 0x5}, {0x0}, {&(0x7f0000000300)="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", 0xbfa}, {0x0}, {0x0}, {0x0}], 0x9) 2.398063338s ago: executing program 2 (id=1086): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvfrom$netrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYRES8=r1], 0x18}], 0x1, 0x0, 0x0, 0xc8}, 0x300) 2.277990781s ago: executing program 1 (id=1087): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2, 0xf, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@private, @in6=@dev}}, @sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x78}}, 0x0) close(r4) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x51cf8d4f258ee1a4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x3, 0x1, 0x6, 0x40}, {0x9e, 0x0, 0x2, 0x401, 0x1}, 0xd73, 0xb29, 0x400372}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.192816136s ago: executing program 2 (id=1088): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x45}, {0x6, 0x37, 0x0, 0x7}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000004000000180100002020752500000000002020207b1af8ef00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000002d00000085000000230000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000000000000850000007100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0x1d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000340)='module_request\x00', r3}, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fcdbdf2517000000500006800800060006000000440004"], 0x64}, 0x1, 0x0, 0x0, 0x48098}, 0x400c800) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 1.980092966s ago: executing program 0 (id=1089): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x10000000}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r3 = socket(0x28, 0x5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r3, 0x900}, 0x20) syz_emit_ethernet(0x1c2, &(0x7f0000000240)={@local, @local, @void, {@ipv6={0x86dd, @dccp_packet={0xf, 0x6, "acc069", 0x18c, 0x21, 0x1, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, {[@routing={0x2e, 0xa, 0x1, 0x40, 0x0, [@mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1]}, @srh={0xc, 0x4, 0x4, 0x2, 0x0, 0x30, 0x7, [@ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x35}]}, @srh={0x33, 0x8, 0x4, 0x4, 0xe, 0x0, 0x4, [@private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], {{0x4e24, 0x4e22, 0x4, 0x1, 0x2, 0x0, 0x0, 0x9, 0x6, "d41043", 0x2, "0ae660"}, "bde8baa4fd32eb7e77dd447da0817569e07ce9f5339bc50a0b90cb1f30f97eeffe94310d2d6cad9ca887472a6150f08e70c53088aa8c7794ce5223c4c56c2f1d79544a4b8b960ed4158f6c409456da4720b629934d7d1d170fc98262a1bd4c8c4234043d8c41decf495e0352143c7d70e7f57040a5b58f9d77666d1943575d9963074a0fa06371884334cd7d8f5a1f47f33938f2fb30b3561978abc1828cdd83a959df84476b040cd645740db22a5ff8705fb9b6"}}}}}}, 0x0) 1.84344502s ago: executing program 3 (id=1090): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000000c0), 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xfba1, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2a94, 0x60004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}]}, 0x44}}, 0x4008040) write$cgroup_pid(r2, &(0x7f0000000140)=r4, 0x57) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) 1.787135483s ago: executing program 0 (id=1091): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) (async) recvmmsg(r3, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448d4, &(0x7f00000002c0)={0x8004, 0x2, '\x00', 0x0, 0x40}) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_deladdr={0x8c, 0x15, 0x4, 0x70bd2a, 0x25dfdbfd, {0x2, 0x78, 0x8, 0x0, r2}, [@IFA_LABEL={0x14, 0x3, 'nicvf0\x00'}, @IFA_LABEL={0x14, 0x3, 'veth0_to_bond\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @private=0xa010102}, @IFA_LOCAL={0x8, 0x2, @empty}, @IFA_LABEL={0x14, 0x3, 'veth1_to_bond\x00'}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_LOCAL={0x8, 0x2, @empty}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2000c841}, 0x8080) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f00000012c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20010822}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1409, 0x300, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x40080) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c000180140003"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0) (rerun: 32) 1.652197835s ago: executing program 3 (id=1092): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0x0}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21, 0x31863}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x14, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000940)=""/4096, 0x1f00, 0x8, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x5, 0x9b9, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000600)=[r0, r0, r0, r0, r6], &(0x7f0000000640)=[{0x1, 0x3, 0x1, 0x5}], 0x10, 0x8}, 0x94) r11 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r11, 0x84, 0x7c, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x24}}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000001030101000002000000000000000000"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r13, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.232849533s ago: executing program 1 (id=1096): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2002, 0x4, 0x5}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000ff0300000000fcffffff1811000019a1a4df7e64a09cce82e9611df163df8504632e3744b55529375deb2b602033d6fb8bdf8b04590d9ff1971d5b7d9ec4aa33581f583e1caec096035097534d9bf376a70bd63de8af3b36cd3eacbca36362929bda1937d46bc96580cbfdb5fe9d4348ab9a8e2a27423860b73ad652eb32594843ccb1c202d5eabb7ecad2453a908cf84bf2051513d257f7dc75f800be97add1ca65cc386f7441ecf210abf7233ea1787265008496d42ca2cadd645608a909b84b82bf5b4d4c8af1c51092d3badc2fdbde1d835710f57a4717", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000840000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x4048800) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 1.046655194s ago: executing program 0 (id=1097): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f0000000e40)=[{{&(0x7f0000000440), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000900)=""/231, 0xe7}], 0x1, &(0x7f0000000600)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000640), 0x6e, &(0x7f00000008c0)=[{&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f0000000700)=""/188, 0xbc}, {&(0x7f00000007c0)=""/89, 0x59}, {&(0x7f0000000840)=""/88, 0x58}], 0x4, &(0x7f0000001ac0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x40, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000ac0)=""/76, 0x4c}, {&(0x7f0000000b40)=""/126, 0x7e}, {&(0x7f0000000fc0)=""/154, 0x9a}], 0x3, &(0x7f0000000cc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000f40), 0x6e, &(0x7f0000000d80), 0x0, &(0x7f0000000dc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}], 0x4, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0xff, 0x0, 0xfffff038}, {0x28, 0x0, 0x10, 0xffeff024}, {0x6, 0x0, 0x83, 0xfffffffd}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x117, 0x2048a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x30086, 0x22}}}}}}]}, 0x48}}, 0x24008000) r5 = socket$inet6(0xa, 0x3, 0xff) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10011, 0xffffffffffffffff, 0xa10b1000) connect$bt_sco(r2, &(0x7f0000000100)={0x1f, @none}, 0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000c40)={'wg2\x00', 0x0}) sendmmsg(r6, &(0x7f0000001800)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000ec0)='O', 0x1}], 0x1}}, {{&(0x7f0000000c80)=@ll={0x11, 0x19, r9, 0x1, 0x81, 0x6, @broadcast}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000d00)="c3dfe1aa2599aecaaeb8da011bca2643c38100626c84eb07", 0x18}, {&(0x7f0000000d40)="4261273ad586cc6dbe6750ab3913ee1a61f4d294a1f5b6085b68a8592773e2c50f", 0x21}, {&(0x7f0000000e00)="6a9f2768f96214afa39e247dc37e0a91ea1fc33764e1d9cf3a12a1f3b740e53f82777fff6f686665b59fbe8f6d8f59f0d42070743ad624e7d1ba687915e959ec3c8c2e115b35a5788459b31fda1d34cc8164c2adb0329fc1fbdbead9b3adf9873c671f7b4f30a838bc1f31a2eb67b504565a", 0x72}], 0x3, &(0x7f0000001900)=[{0x108, 0x111, 0x3c3, "04855f1978ae7adf5f93e5b5ee28895622c6abe3ca1c2c9447a1ccf402e7df806e6816f23741fd52b1ed98f96f33e6ef4132beef5c21aad3eef446f67a03a706c0b06d3b8e55d0cdb48c7b311d7502858fb185a98c46ba0cc3945fd806c36a0f30bfc6c391f9ded532ded7b0f10a9ff87979c8fef4e944a63db9821494c34b67cc70a7a83323e5f5f5651f62820f40c8da4692780d66c77995119713ee62752060b8a379ce48afe1584fe4dbb2a030d562d8f709f9394a6bc48fb8fb00d792008c3fa96c361557b8a97ecd3f5d3afce5d67dbd150407a9188a91993049e628ead3dc232467d312c145ab5b4d99e6566ec4f1f4d0060a"}, {0x80, 0x38, 0x3ff, "7f6ab7cd3132d5f1f0d080c5b7aecebb6cb19a0fd48231845173b9aeb6fcefdc062a5c9b672d42faddee9a4c8272c4eb98defd986ee9bab242892ca8f91168831c916ee5c3a01251492b3209615dadd3fc3dbe3498d2fe84dd5621eb6ad26a490847dfab9ed97febb7394cc15a3da228"}], 0x188}}, {{&(0x7f0000001100)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f0000001280)=[{&(0x7f0000001180)="3d7e2aa78227a4076aba27a0c808602ed0372a0835df5dac21d7419015c49bb3749daef2baa2ad6aac8cceba1b3ecf6c5acfa0b236e83097d4ac5b410fdc20bee04eb8f451e2d027ab88a29ac9dd7f4063f09a3f47e27d7f0c357123fc3903675578f297182b05b9447034b563d42681ed71fa4fc3913d0ad7e024a1815ba3bff420a84453570b8b63ac16c407842e7c17947e732c353c92950af7f15e57541ebf0d67e04e7c9ee8c879abe7390c6c1eb87afac5", 0xb4}], 0x1, &(0x7f00000012c0)=[{0x78, 0x101, 0x2, "668b7eba18097dc5d45e6b9fdd9aab8871ad3e06a742038ac1fad51ee7ca4e0c56b630ea85f3fed6ec00fb8940686d0d8417ab7a34e205c5e4f2e3abbd5e7966b38b72b65b9c015fa19309db6ac261a1378ae0c7c5a0ff252fe037a1f45f151dcce75381"}, {0xb0, 0x10c, 0x5, "c9d1fc02fd6e768638b85aa924e38e774f0b6554dfc57a67ebc34db87a82b01499a703036ae387ce673abc61bdd205f8beaed8f5e6a39c784c22ecfa7eec74e8f5dccc10f784f422e65eea47b6e8548d0963e23ae4ff1e44baa3312a3b2e905d9bee3589eb0b3e8feda0cd7bc32ea048b2164f2b6929f8848a1132e391f52319807fde95034d142a6bff7426e500244c15edcf145cbee3ba45421bb0"}, {0x68, 0x10b, 0x2, "ed791edceaf64fe9772cf91504b043eabd4f7f991697a1ea089d791d46ef48814dd4e8a25c1b00de252d1523b9f1fcd8ff46804a10cd61de9597b6710b2578f25b0814d16f5c316b4935c03a951a1921ab7e504e"}], 0x190}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001500)="f7b7476f7527001a0bded632b3c35a7b0ab97c120eae7acf334ffa3c321439de7f3969f2885ff58bb2d009820595631b6e173fbfc4065ac6fe755783eea54c537f1790b8d17c92a1d9e0dc249981c0e688e524c37d2cc3e0b5785a1dd389cbbbbe3708d24390830d5ab675f5e7121f8276184828ef5d34", 0x77}, {&(0x7f0000001580)="9747a42160497a097b23f2cf6daa2756955517", 0x13}], 0x2, &(0x7f0000001600)=[{0xf8, 0x10b, 0x9, "f64112ea5311ea5ce53fb4d230e9c3e5f6bceb1cd6977abbb4b559ba118fad8d3463eb87ec3165f299542f7dc871c4606edfd9fd3d36579f672da2065beab708f5133fefd2359e13a7aed28f73a894a8c018ce36385cdce136aff0e527a85b0220b4bcd0ad922190a3b6ab0b209966e5b0812144f80a99e3b2c55be90ff5f6d8efcdb6a7e540daf40133fb633b8332158ade3c5159f381b064a42018bd9079e75af48d432451bc3b9203ee654e0ddd4da0c0ade729d765b2fa21aef4961220b775df71aeab2be6fc0b09c4a178d8cd858cb6dbb64311fedae847b3a77014ec72608aa04a24"}, {0x10, 0x103, 0x7}, {0x78, 0x118, 0x5, "b3b7454f09f6b889a3a7ed8adc21e7dd20d605a1f56ad421473a4f7972bad8d5031b9ec880d23a12f0d2f0cd1a81370b344e6f51b379b62aae81317734b2b3c681f78b98c94fea8d840292ef3a0e56e6e778b2d3bcc94c9fab844b154a28fa1cbc8042eb"}], 0x180}}], 0x4, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0xe6, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xc0, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r10 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r10, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000540)=[{0x0}, {&(0x7f00000003c0)="5c6817db84aafc4ba93b3b7b773c1f5c014e2a4405abce2e2192542afa9748dcd0a777a42e01e563f192537c527923b0f362103e5bbeda2dca0d9d2b5e5238329691753f1860286f1aaa075a70123a788ba8d0e1205af7751df76effba5cb644966e7b7566d2", 0x66}, {&(0x7f0000000b40)="9eb8a2c0e241fb0402ac8d04ecbc724648d79b443d283855fdba1e1dc628359101e57e31436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ae2ff2e4ad7a3db413358c266a43f743c155d8bcbab110f73f4f12d0728bada715bf5ab80002346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f029190a14386c73e7017cf0fe0275d2d6f9531b12f12e29b903f30c3228aa9ab3a503e9512", 0xcc}], 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000"], 0x18}, 0x40080c0) sendmmsg(r5, &(0x7f0000008440)=[{{&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}], 0x1, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES8, @ANYRESDEC=r11, @ANYRESOCT=r11, @ANYRESHEX, @ANYRESHEX=r11, @ANYRESOCT=r11, @ANYRESOCT=r11, @ANYBLOB="233596c1cb38abfa40f3240712b26efa1bb4fca55d14d97b408e966e98d1c8fec819cef4bb7ac4eb5adc953c4d14cbb26a142094011abcd0c12cd22879639ff51aeb1c99647e505d1cb70c18d60c50e90a1c0e703b6c541baaddab4f05e8755e6356b5c60e857100f8e2b96b1e5796f5da9e07c1d5b5b57f8edb32fc56c1e34e4170118d5064c6a77eb6", @ANYRES8=r11, @ANYRESDEC=r11], 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.01530628s ago: executing program 1 (id=1098): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r0, &(0x7f0000005500)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203030000001ff4008460d064e2474042a6470800010001"], 0x1c}}, 0x0) close(r1) (async) socket$packet(0x11, 0x3, 0x300) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x0) (async) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) (async, rerun: 32) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x0) (rerun: 32) sendmmsg$sock(r4, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000011) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async, rerun: 32) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) (rerun: 32) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x8}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x10, 0xffff}, {0x5}}, [@TCA_RATE={0x0, 0x5, {0xf8, 0x1}}]}, 0xfffffffffffffe77}}, 0x40) (async) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x4) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x80010, r3, 0x65cf2000) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x9, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @remote}]}}]}, 0x44}}, 0x24004001) (async, rerun: 32) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000ffff25bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2002000000200500300012800b00010065727370616e0000200002800400120006001800050000000500160002"], 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) 923.953911ms ago: executing program 2 (id=1099): unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc0}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0300000000000000000002000900010073797a300000000014000000020a0302000010000000000002000003140000001100010000000000000000000000000aea2edcee96f992ca8c47d33bad1629ab361d453bfc4a8f5f134d96d2f326194393f179263dc2c3f17477c29163c4860e76498869e9486b525d7cded61842aa5dd0232cb2424dcb578bfa7b3b5df7e97723ff3c9f447e0eba43fbdf0ff930961e62e15ebaaf45e76dc20fde6a65650e5bac5a0eac4d18bcf834b57dcc"], 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400000000bca900000000000300000000000000009500000000000000bf98000000000000560800b7000000000000009500"/81], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1ef", 0x23}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x40800) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001146000002f0600ac141430e0000003808a8972bd0b72e410"], 0xdd12}], 0x1}, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc8f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x20004000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000003c0)="f0e81d781553c0b0eba79836238245b47c9022142d5d13ddb1010e882134a64e064e709e7b12eb255957ae5f97f815f34d53433d6fa27cf7f1284698e2b02b584a9fc33478573fb6b082bc6bc5d4b8f9da3a192170eb9e4b23723fd4ec4e9bbc2dc6fcd524f40facf83361409c53861bc671bc8afb7b0d859ecf052b4d7d1b770c33d47a12", 0x85) 923.216082ms ago: executing program 3 (id=1100): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006"], 0xac}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYRES32=r0], 0xac}}, 0x200040c0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYRES32=r0], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3, @ANYBLOB="e0fdfbf2160600e1"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async) sendto$inet6(r5, 0x0, 0x0, 0x800, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r6, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdirat$cgroup(r6, &(0x7f0000000100)='syz0\x00', 0x1ff) (async) sendfile(r7, r7, 0x0, 0x9) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="000000003e4786945a365fa2a457059831c8bb81e9bfc79220283983409c4b0bd0", @ANYRES32=0x0, @ANYBLOB="0005000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r10, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) (async) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) 827.647082ms ago: executing program 1 (id=1101): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000002f95abbe480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r1, @ANYBLOB="14000600ff80000000000000000000000000000014000700ff05"], 0x70}}, 0x0) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c61737400000000040002800800034000000105"], 0xe4}}, 0x20050800) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, r5, 0x30d}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, r5, 0x400, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20080800}, 0xc005) 592.681269ms ago: executing program 3 (id=1102): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRESDEC], 0x50) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010023010000340220000200810000008100", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0)=0x2f5, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001000)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x7fff}], 0x1, 0x1000000000fe, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000600)=@in={0x2, 0x0, @multicast2}, &(0x7f0000000680)=0x80, 0x80000) write$nci(r1, &(0x7f0000000300)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x9, {{0x1, 0x3, 0xe2, "a081638b01bfae0b855f280e418801b40f4333979050162fd7492beb59f5232ac34a5bac93b563d9cd1310ff6a3d0ff001dd6b567c8307ea3f70d14c0758561c99da51afbb6f3bca9e104698339d35af214e9485a489c49db1144619ce63245b35c298284a5cb3b8fd6286946cf593d506df7159b11c5b278a90690bda39e5b8e8cbc3485a928a4d248d7145d36ec075d99348dc367c83cec234dff636719416c8877e541b500a411163e043889193ee5742a5f1bcc2273586e1f01a5c3495b5a279f20cead8350e2f668a22622d29254487c1f2fb24668cfb6cf9ad9a13f93a7cce"}, {0xfd, 0x4, 0x4, 0x400, 0x86, 0xf37b}}}, 0xf6) read$nci(r1, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000004000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200030000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000a7a0091b359fb2dd96ca30f8367b31e1d0931d6d057f97e622c08b8b19db28708b965d1a14e8fd6c9d65119cfdd02f79144357be38829dc8257d3b7daf7649b5a744db"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) syz_emit_ethernet(0x72, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x3c, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f008400000000110000"}}}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1f, 0x13, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x401}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x539}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000400)='syzkaller\x00', 0xcab, 0xf9, &(0x7f0000000740)=""/249, 0x41000, 0x10, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x7, 0x1ff, 0x401}, 0x10, 0x0, r5, 0x1, 0x0, &(0x7f0000000840)=[{0x0, 0x2, 0x0, 0x2}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_lookup=0x24}, 0x6f) pipe(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113300000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="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", 0xfa, 0x80, &(0x7f0000000240)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80000000}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1e, 0x1, 0x0) shutdown(r6, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 431.957398ms ago: executing program 1 (id=1103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="77ba00000000000000001f000000080001000000000008000300", @ANYRES32=r3], 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xfc, r3, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="85a24a5f222dc1d3d6e8e010fcf59a23e46b486c9dd070efd0950a40718ac915"}]}, @NL80211_ATTR_REKEY_DATA={0xb0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2b33b29abeb9e6720fd3afe09e1f1f6c0cd8acad10e1ad9a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8eea02d7d345810d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9a314791a2aae0c88aa5d2e60d30b8977be0eebd3b8c54e78dc3c231a67820fb"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "03dd9b8aa8045a46"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="121d808bc18a455dd26dc3299d686697"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eea0faadff7e82d401f6c59ad9f5e1cc"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xd}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="31001a1fc7f480f43f4127e9b897e9fb4d77f1ba6f2b2bf5"}]}]}, 0xfc}}, 0x20000040) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 327.900861ms ago: executing program 1 (id=1104): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x140e, 0x101, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3, 0x0, 0x7ffe}, 0x18) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32=r5], 0x60}, 0x1, 0x0, 0x0, 0x20}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev}], 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @remote}], 0x10) sendmmsg$inet6(r8, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0xff12}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r8, &(0x7f000000cf00), 0x40003d0, 0x0) sendmmsg$sock(r7, &(0x7f00000011c0)=[{{&(0x7f0000000180)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x4}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)="f8056eac82688c48648140eb15a3bc101490518350cdab687a1a0561ad94f8bbf05386dafe45e9943f606f", 0x2b}, {&(0x7f0000000100)="d34ff6cb2fb6ba75e592ae96034d16986f25617a6dc4e99efd3e6bacdb2bebd781b94ca17ac1fcad3e81625d2d528cec", 0x30}, {&(0x7f0000000200)="f302013436289603c10242f357bbdeeb69227edf4fd2d7a45b3392eda417e89203f89100f74c4e5ac3505e88521f498fee7f9c05de7b2c0d17a19aa74167b35062ca4a9dc2a7cd7e3912e2df3b0f172392a7a0bb7034e6f2c5db97da729485bb63fb358e8ebc67", 0x67}, {&(0x7f00000004c0)="1110de1e5b02e6c293fcc3adf210b36d4e80d024b930e310e0f1413105d3111501e1aa030658047f45b1fcecaff9f2400b9fa9274db8dbb360afc0aa7fae18b7fd09ad183b7ad27dd711b7c92f0812e2b2bd9fda20d5516ee02f6e9a65a15ee20545af79d1f5b79128650fe6a2fe6844aa87d6a8579eb22fd2bc9f3c26ec37bbfaef4ba0271cac82e6aa2dc3c1c2ed54606daf1f2a59f480140fd70f9a1993", 0x9f}, {&(0x7f0000000580)="ed05baaece61e016a7692eacbc1a91df6bbece3f36a1b19cd614ce59df3315fc76e4bc03cd65a99dc8dba6f8bc4d0ee9ee633e33bcd2265b35147a23a35d85f0f61ae6d220119f91462bc3b0fea2bdb83f74ac3e2946236dc81f14c44fd8341b6aabc5bda3b016d04c4269b2fab7bdbbb56cba582c91083491d95d79086aa47f3367c4b8254e2d03ae6df1153ad09b850a7a2752c72daf04fb8ad526d0fd1fc34f3558db2dcdd1aa946cc11a5d7165bcf6f0dc8bd615639156c2b6c84edadc9a704bccda312d0a93cd1871372933d832ee30ff7e2315b7cd253da6dee968d5eb6e82878b8376ae46d8d252184fe27092ed76982c8a59044e", 0xf8}], 0x5, &(0x7f0000000280)=[@txtime={{0x18, 0x1, 0x3d, 0x39}}], 0x18}}, {{&(0x7f0000000740)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x4, 0x4}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000880)="9c463670914e489a064652d3e839e56aa8b0e0ad7eced499b776d751f6e971432a82dad52146d6b9dd2f85b2409614741d5f1561a826723fa0c370f7e2c6d833533dc8b534b00e1d9a9c2d02594010dbfffca8d7c896e7b0bee7741aa312e6e6e7b727836fecf0aa7cec2a", 0x6b}, {&(0x7f0000000980)="d794229ebafa68e91f39e27d9a0267d79158d5f1bcd7625b5f67fbcff5ba6f8144da51f3c34d6a12263e49d36a359d5badbf2a7cafeb111e4cc4d2eb824c2b158335f58903fd68c7b3b9d537981ff4077f13bc3a623fe4266ff157806ad04dec1eab29f16aaa616abc18667e3b25b59609de4a9685298aa8407d20e0e798243a0d4ec29ead9f5d0e6e0ca23a11d3c6f60d6a0b5966c941a9fc63a854fa1f571c954d93b8f2b8573c7c0c5cc934a73455", 0xb0}, {&(0x7f0000000a40)="01a560c28da6e334d0098891efd777fdd8503bb637ed3fe889eba0442001d2425c96b71244fc860dfaa3a30dde3dbdef560a2d5fd179eac393597a11422e741a32b97afe24ccfb2be18ad29f930901cdb9d7382201331c6e2ceacde5d6ef4b4161c8011dd6b23f4da7cc733683423d1d92946cee33a7a2d0aecaad782a36b194aa1f54559ea4009cc3dcd5d91c8e1483e2a1fd1915", 0x95}, {&(0x7f0000000b00)="e72653e8b020fd5d485131ac6dc33e8ffb07953eb857b46b97672f108fbadbb272dedb3509e20e88b4c7800df3c17ece2ecd1502500755aa25c7b2331d7559ee570a1b7056293e4d41c1c3572b34acb3802379a8b2648ff297dddc788882ceb5c0a4dc90ea0a0ce6bf434cbda573f235a0cc0c11387fa9384fab1d32a548e56deaeefde665e1806d0b0cf99adc3729e877a65ad706d4bd87dccb821339c664497257d0edbb4ad90326c79c7ca86c8031166741b3f6", 0xb5}], 0x4, &(0x7f0000000c40)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x16}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x81}}], 0x78}}, {{&(0x7f0000000cc0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @broadcast}, 0x2, 0x1}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000d40)="0ac04aa5e0104403c045429b1842b91bcca6a5bb2afd6f6dd0112ca6286fca8b70f6b6aba82c4d5c7ae434024b01329234320b5238636a71af0f31d25a10d8d180e2474570a43630f48c1ec7513e2a8b0ae409e34ba0188027c520ca54d6c102e779d94e1f90f1c9ae9533fe5069a5b679bdda7170c682a31a17ca3fbe7936c5722269c655821338f4b4a41f1baa6a0709e8d964f94b6d50e471df16eea60d2c0f9d6eb94392afec8309dd92f6de1ed8f9b5c94a65bd9b979cfb42d8ca5ba2c5efb6f2547b8bc4709388d40bd3e3442f6c39a39a3793234b65cc8d6a410ed5b52316234ca562ac8d77cc", 0xea}, {&(0x7f0000000e40)="13a89a97e714d59878c2661cfd206966b8810cb8387a4472e37e13f0c1d12ea2e388121d262e7690adf51af30c87a363195f8fcd0bf34c889e34f2af0d2ebf3a955dfe3212c7647555a478932b78de21a057d03735cece2e0d3d86ffc39314745829ee9f3a982f6bc48de650f1ea661982eb974e497405ebe1dfd1d8dc31b73184e751bdc3", 0x85}, {&(0x7f0000000f00)="fbc6fbabbd1de7c5d0779878f88c083e86c8d3aa70c2ef0671ad543acb10c1d170f36a613301e5e1df02953b", 0x2c}, {&(0x7f0000000f40)="8773f31fb4746376f3ca1e95aede532f5d202299f690ef9dd5429cc34cebea691672ced41645339283e78d470ed424dd4279722a5114f6df18cd7d206696211a40916a291f22546a36c4220f7b886095a4765067d751d0cdb221", 0x5a}, {&(0x7f0000000fc0)="17182a3cd92bb9", 0x7}, {&(0x7f0000001000)="1a499e0153ca3baa7d77f39e8fea234478bd9a6281cd2d722255bb11ef6400b7de65d4", 0x23}], 0x6, &(0x7f0000001100)=[@mark={{0x14, 0x1, 0x24, 0x8a8}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xde}}, @mark={{0x14, 0x1, 0x24, 0xfffffeff}}, @txtime={{0x18, 0x1, 0x3d, 0xc98}}, @txtime={{0x18, 0x1, 0x3d, 0x10}}], 0xc0}}], 0x3, 0x20000000) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmmsg(r4, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}, 0xbd}], 0x1, 0x10020, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008"], 0x5c}}, 0x40) 301.697141ms ago: executing program 4 (id=1105): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r3 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r3, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000023c0)=r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001046010700000000000000100a0000000600010017000000"], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000000400010500010007000000050001330700000000000000000d00000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) r8 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x6e) recvmmsg$unix(r8, &(0x7f0000002240), 0x0, 0x10002, &(0x7f0000002380)={0x77359400}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f00000020c0)='ns/ipc\x00') r11 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @loopback}}, 0x40, 0x5, 0x6, 0x9, 0x80, 0x6, 0x6}, 0x9c) bind$llc(r11, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000000), 0xffffff6a) sendmsg$BATADV_CMD_GET_HARDIF(r4, 0x0, 0x40890) sendfile(r11, r12, 0x0, 0xffffffff000) listen(r11, 0x4) sendmsg$IPSET_CMD_LIST(r10, &(0x7f00000024c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3000000706050000000000000000000700000705000100070000000900020073797a30000000000500010007000000"], 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r6, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7cc3ce0435cb1c42fae019fd1d4ba02d04e5c33fb298166e20df03f38653ef3672c47024a9b3a39b04b040ce905377de40590d5d211646dd4201e793f6d39801f2a33f3a2fde03a942a0b34646d4fcb7891d7074cc8981f32c2a6d262"], 0x1c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0x800, 0x70bdad, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xb80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) 0s ago: executing program 0 (id=1106): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000400000000000000000003850000002c000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1500}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) unshare(0x6a040000) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x88, 0xb, 0x0, 0x20000000) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="25c89d0918a25b3725f245a434ac", 0x0, 0xf01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.85' (ED25519) to the list of known hosts. [ 84.438727][ T5848] cgroup: Unknown subsys name 'net' [ 84.617134][ T5848] cgroup: Unknown subsys name 'cpuset' [ 84.626968][ T5848] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.313412][ T5848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.043802][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.057782][ T5871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.065749][ T5872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.074610][ T5879] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.083153][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.091630][ T5879] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.099713][ T5879] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.106679][ T5872] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.114230][ T5872] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.122963][ T5879] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.123255][ T5872] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.131482][ T5879] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.137758][ T5872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.146266][ T5879] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.152891][ T5872] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.158735][ T5879] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.168517][ T5872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.174168][ T5881] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.179823][ T5876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.187071][ T5881] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.196879][ T5872] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.201486][ T5881] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.208781][ T5876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.222005][ T5881] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.222246][ T5872] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.938228][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 90.021197][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 90.102816][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 90.120330][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 90.260822][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.268023][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.276047][ T5862] bridge_slave_0: entered allmulticast mode [ 90.283555][ T5862] bridge_slave_0: entered promiscuous mode [ 90.307120][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 90.358834][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.366708][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.374017][ T5862] bridge_slave_1: entered allmulticast mode [ 90.381582][ T5862] bridge_slave_1: entered promiscuous mode [ 90.407570][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.414896][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.422309][ T5868] bridge_slave_0: entered allmulticast mode [ 90.429566][ T5868] bridge_slave_0: entered promiscuous mode [ 90.486906][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.494299][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.501616][ T5868] bridge_slave_1: entered allmulticast mode [ 90.508896][ T5868] bridge_slave_1: entered promiscuous mode [ 90.535868][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.608687][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.631365][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.638533][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.646277][ T5863] bridge_slave_0: entered allmulticast mode [ 90.653628][ T5863] bridge_slave_0: entered promiscuous mode [ 90.662337][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.669544][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.677308][ T5863] bridge_slave_1: entered allmulticast mode [ 90.684893][ T5863] bridge_slave_1: entered promiscuous mode [ 90.738109][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.745374][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.753184][ T5873] bridge_slave_0: entered allmulticast mode [ 90.760456][ T5873] bridge_slave_0: entered promiscuous mode [ 90.784821][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.803912][ T5862] team0: Port device team_slave_0 added [ 90.825537][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.832946][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.840325][ T5873] bridge_slave_1: entered allmulticast mode [ 90.849164][ T5873] bridge_slave_1: entered promiscuous mode [ 90.875863][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.916238][ T5862] team0: Port device team_slave_1 added [ 90.952305][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.975519][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.983156][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.990535][ T5874] bridge_slave_0: entered allmulticast mode [ 90.998843][ T5874] bridge_slave_0: entered promiscuous mode [ 91.022626][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.035376][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.047271][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.058131][ T5868] team0: Port device team_slave_0 added [ 91.065041][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.072662][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.079883][ T5874] bridge_slave_1: entered allmulticast mode [ 91.087498][ T5874] bridge_slave_1: entered promiscuous mode [ 91.141577][ T5868] team0: Port device team_slave_1 added [ 91.190521][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.197907][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.224413][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.261846][ T5871] Bluetooth: hci4: command tx timeout [ 91.262207][ T5872] Bluetooth: hci3: command tx timeout [ 91.267730][ T51] Bluetooth: hci1: command tx timeout [ 91.273409][ T5872] Bluetooth: hci0: command tx timeout [ 91.273532][ T5872] Bluetooth: hci2: command tx timeout [ 91.294387][ T5863] team0: Port device team_slave_0 added [ 91.303520][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.315994][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.326023][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.333487][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.360342][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.381950][ T5873] team0: Port device team_slave_0 added [ 91.402633][ T5863] team0: Port device team_slave_1 added [ 91.409153][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.416189][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.442789][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.486282][ T5873] team0: Port device team_slave_1 added [ 91.507010][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.514676][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.540629][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.553872][ T5874] team0: Port device team_slave_0 added [ 91.607284][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.614678][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.640860][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.654389][ T5874] team0: Port device team_slave_1 added [ 91.688206][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.695506][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.721627][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.734677][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.741893][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.768028][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.799037][ T5862] hsr_slave_0: entered promiscuous mode [ 91.805685][ T5862] hsr_slave_1: entered promiscuous mode [ 91.815048][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.822171][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.849111][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.925759][ T5868] hsr_slave_0: entered promiscuous mode [ 91.932609][ T5868] hsr_slave_1: entered promiscuous mode [ 91.938856][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 91.945076][ T5868] Cannot create hsr debugfs directory [ 91.953776][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.961151][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.987240][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.000564][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.007666][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.033841][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.066385][ T982] cfg80211: failed to load regulatory.db [ 92.119246][ T5873] hsr_slave_0: entered promiscuous mode [ 92.126310][ T5873] hsr_slave_1: entered promiscuous mode [ 92.133029][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 92.138791][ T5873] Cannot create hsr debugfs directory [ 92.221146][ T5863] hsr_slave_0: entered promiscuous mode [ 92.227933][ T5863] hsr_slave_1: entered promiscuous mode [ 92.234683][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 92.240439][ T5863] Cannot create hsr debugfs directory [ 92.400427][ T5874] hsr_slave_0: entered promiscuous mode [ 92.407859][ T5874] hsr_slave_1: entered promiscuous mode [ 92.414299][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 92.420058][ T5874] Cannot create hsr debugfs directory [ 92.837255][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.850135][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.869504][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.906951][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.988549][ T5873] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.013978][ T5873] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.026312][ T5873] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.039618][ T5873] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.136695][ T5868] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.146985][ T5868] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.160476][ T5868] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.192612][ T5868] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.281460][ T5863] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.335385][ T5863] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.342806][ T51] Bluetooth: hci1: command tx timeout [ 93.350826][ T51] Bluetooth: hci4: command tx timeout [ 93.353967][ T5881] Bluetooth: hci2: command tx timeout [ 93.356267][ T51] Bluetooth: hci0: command tx timeout [ 93.362881][ T5871] Bluetooth: hci3: command tx timeout [ 93.376090][ T5863] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.390416][ T5863] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.458458][ T5874] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.486928][ T5874] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.503441][ T5874] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.516981][ T5874] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.566360][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.626699][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.648017][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.687019][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.694474][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.731155][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.760230][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.767412][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.777127][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.784402][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.808428][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.815705][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.856158][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.927015][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.961542][ T3161] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.968695][ T3161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.006759][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.026701][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.047903][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.055141][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.123141][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.169176][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.176459][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.217025][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.273434][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.280644][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.349363][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.357118][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.399028][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.406272][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.570136][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.636373][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.802322][ T5862] veth0_vlan: entered promiscuous mode [ 94.836740][ T5862] veth1_vlan: entered promiscuous mode [ 94.879895][ T5873] veth0_vlan: entered promiscuous mode [ 94.929520][ T5873] veth1_vlan: entered promiscuous mode [ 94.990290][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.093299][ T5862] veth0_macvtap: entered promiscuous mode [ 95.112226][ T5873] veth0_macvtap: entered promiscuous mode [ 95.128139][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.157017][ T5862] veth1_macvtap: entered promiscuous mode [ 95.174333][ T5873] veth1_macvtap: entered promiscuous mode [ 95.277222][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.295150][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.316444][ T5863] veth0_vlan: entered promiscuous mode [ 95.340297][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.362710][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.380138][ T4206] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.408758][ T5863] veth1_vlan: entered promiscuous mode [ 95.424319][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.431446][ T5871] Bluetooth: hci0: command tx timeout [ 95.431785][ T5881] Bluetooth: hci3: command tx timeout [ 95.436999][ T5871] Bluetooth: hci4: command tx timeout [ 95.443570][ T5881] Bluetooth: hci2: command tx timeout [ 95.448007][ T5872] Bluetooth: hci1: command tx timeout [ 95.463162][ T4206] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.508852][ T4206] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.519700][ T4206] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.560848][ T4206] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.569668][ T4206] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.618898][ T5874] veth0_vlan: entered promiscuous mode [ 95.654884][ T4206] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.664391][ T4206] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.700180][ T5874] veth1_vlan: entered promiscuous mode [ 95.774758][ T5863] veth0_macvtap: entered promiscuous mode [ 95.824526][ T5863] veth1_macvtap: entered promiscuous mode [ 95.857665][ T4206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.874521][ T4206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.897728][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.898725][ T5868] veth0_vlan: entered promiscuous mode [ 95.911238][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.923037][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.935837][ T5874] veth0_macvtap: entered promiscuous mode [ 95.977957][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.987634][ T5868] veth1_vlan: entered promiscuous mode [ 95.999497][ T5874] veth1_macvtap: entered promiscuous mode [ 96.055438][ T4206] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.066200][ T4206] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.086130][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.087761][ T4206] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.100977][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.107886][ T4206] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.115550][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.127784][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.165394][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.227403][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.243864][ T5873] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.266993][ T5868] veth0_macvtap: entered promiscuous mode [ 96.278853][ T5868] veth1_macvtap: entered promiscuous mode [ 96.313675][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.360103][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.385880][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.438211][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.517201][ T5987] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.555428][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.579192][ T5162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.589513][ T5162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.753136][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.804324][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.822121][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.852886][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.862676][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.935047][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.952110][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.013856][ T5991] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 97.074797][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.083817][ T6001] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 97.102048][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.115264][ T6001] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 97.236751][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.253701][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.366533][ T6004] C: renamed from team_slave_0 (while UP) [ 97.392398][ T6004] netlink: 'syz.2.8': attribute type 1 has an invalid length. [ 97.404217][ T6004] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8'. [ 97.414823][ T6004] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 97.502551][ T5871] Bluetooth: hci2: command tx timeout [ 97.508105][ T5872] Bluetooth: hci3: command tx timeout [ 97.508693][ T6008] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4'. [ 97.515450][ T5872] Bluetooth: hci0: command tx timeout [ 97.522849][ T5869] Bluetooth: hci4: command tx timeout [ 97.528128][ T5871] Bluetooth: hci1: command tx timeout [ 97.750924][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.779449][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.857835][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 97.971197][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 98.284253][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.300160][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.376353][ T6022] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12'. [ 98.799459][ T6033] Bluetooth: MGMT ver 1.23 [ 99.426401][ T6055] tipc: Started in network mode [ 99.444463][ T6055] tipc: Node identity 2a85865b6f0c, cluster identity 4711 [ 99.455458][ T6055] tipc: Enabled bearer , priority 0 [ 99.505594][ T6056] syzkaller0: entered promiscuous mode [ 99.512108][ T6056] syzkaller0: entered allmulticast mode [ 99.696518][ T6058] tipc: Resetting bearer [ 99.763094][ T6058] tipc: Disabling bearer [ 100.140202][ T6078] netlink: 'syz.1.22': attribute type 1 has an invalid length. [ 100.150996][ T6078] netlink: 232 bytes leftover after parsing attributes in process `syz.1.22'. [ 100.159917][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 100.678065][ T6082] netlink: 'syz.2.24': attribute type 6 has an invalid length. [ 100.735785][ T6091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27'. [ 100.850024][ T6082] trusted_key: syz.2.24 sent an empty control message without MSG_MORE. [ 100.864381][ T6082] netlink: 44 bytes leftover after parsing attributes in process `syz.2.24'. [ 100.874226][ T6082] netlink: 44 bytes leftover after parsing attributes in process `syz.2.24'. [ 100.945930][ T6091] pim6reg: entered allmulticast mode [ 100.953242][ T6092] pim6reg: left allmulticast mode [ 101.087354][ T6094] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 101.256877][ T6101] syzkaller0: entered promiscuous mode [ 101.272127][ T6101] syzkaller0: entered allmulticast mode [ 102.442759][ T6138] tipc: Started in network mode [ 102.447715][ T6138] tipc: Node identity d26d53adc8d2, cluster identity 4711 [ 102.469257][ T6138] tipc: Enabled bearer , priority 0 [ 102.485789][ T6140] tap0: tun_chr_ioctl cmd 1074025675 [ 102.494947][ T6140] tap0: persist disabled [ 102.499580][ T6145] syzkaller0: entered promiscuous mode [ 102.505721][ T6145] syzkaller0: entered allmulticast mode [ 102.558212][ T6138] __nla_validate_parse: 4 callbacks suppressed [ 102.558232][ T6138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.42'. [ 103.014600][ T6137] tipc: Resetting bearer [ 103.112899][ T6137] tipc: Disabling bearer [ 103.161522][ T6167] netlink: 14 bytes leftover after parsing attributes in process `syz.4.50'. [ 103.328545][ T30] audit: type=1804 audit(1755552136.945:2): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.50" name="memory.events" dev="tmpfs" ino=60 res=1 errno=0 [ 103.400791][ T30] audit: type=1800 audit(1755552136.945:3): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.50" name="memory.events" dev="tmpfs" ino=60 res=0 errno=0 [ 103.460464][ T6173] Zero length message leads to an empty skb [ 103.509436][ T6173] netlink: 'syz.0.52': attribute type 4 has an invalid length. [ 103.701798][ T6186] netlink: 'syz.4.54': attribute type 13 has an invalid length. [ 103.802939][ T6190] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.126165][ T6186] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.134713][ T6186] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.176820][ T6152] infiniband syz1: set active [ 104.193599][ T6152] infiniband syz1: added macvlan1 [ 104.214206][ T6152] syz1: rxe_create_cq: returned err = -12 [ 104.220438][ T6152] infiniband syz1: Couldn't create ib_mad CQ [ 104.238844][ T6152] infiniband syz1: Couldn't open port 1 [ 104.313526][ T6152] RDS/IB: syz1: added [ 104.325128][ T6152] smc: adding ib device syz1 with port count 1 [ 104.333941][ T6152] smc: ib device syz1 port 1 has pnetid [ 104.377634][ T6186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.395994][ T6186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.695941][ T60] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.788003][ T60] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.817623][ T60] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.824602][ T6215] netlink: 84 bytes leftover after parsing attributes in process `syz.1.59'. [ 104.871462][ T60] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.907268][ T6215] netlink: 84 bytes leftover after parsing attributes in process `syz.1.59'. [ 105.470553][ T6236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.66'. [ 105.591897][ T6241] netlink: 32 bytes leftover after parsing attributes in process `syz.1.66'. [ 106.068382][ T6243] : entered promiscuous mode [ 106.307462][ T6273] syzkaller1: entered promiscuous mode [ 106.325670][ T6273] syzkaller1: entered allmulticast mode [ 106.381782][ T6273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.72'. [ 106.620222][ T6287] netlink: 'syz.1.75': attribute type 12 has an invalid length. [ 106.837936][ T6297] netlink: 'syz.3.77': attribute type 1 has an invalid length. [ 106.989069][ T6300] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 107.026787][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.78'. [ 107.338474][ T6310] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.965061][ T6333] netlink: 45 bytes leftover after parsing attributes in process `syz.1.88'. [ 107.979576][ T6333] warning: `syz.1.88' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.361152][ T6350] netlink: 'syz.3.92': attribute type 1 has an invalid length. [ 108.470120][ T6335] tipc: Started in network mode [ 108.476571][ T6335] tipc: Node identity ca86bdc74f32, cluster identity 4711 [ 108.485208][ T6335] tipc: Enabled bearer , priority 0 [ 108.581137][ T6337] syzkaller0: entered promiscuous mode [ 108.587369][ T6337] syzkaller0: entered allmulticast mode [ 108.594524][ T6337] tipc: Resetting bearer [ 108.600969][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'. [ 108.679471][ T6337] tipc: Resetting bearer [ 108.998890][ T6366] netlink: 'syz.1.96': attribute type 1 has an invalid length. [ 109.533057][ T5975] tipc: Node number set to 2243214791 [ 110.066598][ T6337] tipc: Disabling bearer [ 110.147451][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.99'. [ 110.207557][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.99'. [ 110.358634][ T6386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.413761][ T6386] netlink: 20 bytes leftover after parsing attributes in process `syz.0.101'. [ 110.499101][ T6386] tipc: Started in network mode [ 110.530850][ T6386] tipc: Node identity cac2507168a6, cluster identity 4711 [ 110.538303][ T6386] tipc: Enabled bearer , priority 0 [ 110.581944][ T6399] syzkaller0: entered promiscuous mode [ 110.587481][ T6399] syzkaller0: entered allmulticast mode [ 110.612711][ T6386] tipc: Resetting bearer [ 110.675785][ T6385] tipc: Resetting bearer [ 110.707263][ T6385] tipc: Disabling bearer [ 111.375400][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.111'. [ 111.399950][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.112'. [ 111.440854][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'. [ 111.629534][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'. [ 111.714528][ T6440] tipc: Enabled bearer , priority 0 [ 111.742566][ T6440] syzkaller0: entered promiscuous mode [ 111.748153][ T6440] syzkaller0: entered allmulticast mode [ 111.839566][ T6440] veth0_to_bond: mtu less than device minimum [ 111.864334][ T6438] tipc: Resetting bearer [ 111.887221][ T6438] tipc: Disabling bearer [ 111.992947][ T6450] dummy0: entered promiscuous mode [ 112.012557][ T6450] vlan2: entered promiscuous mode [ 112.348057][ T6470] tipc: Started in network mode [ 112.361135][ T6470] tipc: Node identity 7e1dc3a9c0a1, cluster identity 4711 [ 112.404736][ T6470] tipc: Enabled bearer , priority 0 [ 112.428719][ T6472] syzkaller0: entered promiscuous mode [ 112.439775][ T6472] syzkaller0: entered allmulticast mode [ 112.522017][ T6477] netlink: 48 bytes leftover after parsing attributes in process `syz.3.127'. [ 112.550288][ T6470] tipc: Resetting bearer [ 112.559937][ T6469] tipc: Resetting bearer [ 112.583109][ T6469] tipc: Disabling bearer [ 112.602769][ T6479] netlink: 'syz.0.128': attribute type 4 has an invalid length. [ 112.696757][ T6481] netlink: 'syz.0.130': attribute type 10 has an invalid length. [ 112.719764][ T6481] netlink: 'syz.0.130': attribute type 49 has an invalid length. [ 112.986140][ T6495] __nla_validate_parse: 1 callbacks suppressed [ 112.986160][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'. [ 113.178423][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.136'. [ 113.215733][ T6502] netlink: 32 bytes leftover after parsing attributes in process `syz.4.136'. [ 113.231836][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.136'. [ 113.276043][ T6510] netlink: 'syz.2.138': attribute type 6 has an invalid length. [ 113.285677][ T6510] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.138'. [ 113.300050][ T6506] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 113.623306][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'. [ 113.897767][ T6525] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.165256][ T6525] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.276175][ T6551] netlink: 'syz.1.146': attribute type 1 has an invalid length. [ 114.363450][ T6554] netlink: 'syz.1.146': attribute type 16 has an invalid length. [ 114.369282][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 114.392998][ T6554] netlink: 'syz.1.146': attribute type 17 has an invalid length. [ 114.415137][ T6525] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.548835][ T6551] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.717204][ T6557] lo speed is unknown, defaulting to 1000 [ 114.774388][ T6525] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.860818][ T6557] lo speed is unknown, defaulting to 1000 [ 114.885307][ T6557] lo speed is unknown, defaulting to 1000 [ 115.004249][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.064106][ T4206] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.107405][ T4206] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.195663][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.414235][ T6576] openvswitch: netlink: Multiple metadata blocks provided [ 115.561835][ T6557] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 115.627780][ T6557] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 115.759314][ T6596] netlink: 44 bytes leftover after parsing attributes in process `syz.2.156'. [ 115.785748][ T6588] sch_fq: defrate 0 ignored. [ 115.885413][ T6557] lo speed is unknown, defaulting to 1000 [ 115.920161][ T6596] netlink: 'syz.2.156': attribute type 2 has an invalid length. [ 115.944615][ T6557] lo speed is unknown, defaulting to 1000 [ 115.969359][ T6596] netlink: 'syz.2.156': attribute type 1 has an invalid length. [ 116.014542][ T6557] lo speed is unknown, defaulting to 1000 [ 116.053921][ T6557] lo speed is unknown, defaulting to 1000 [ 116.086662][ T6557] lo speed is unknown, defaulting to 1000 [ 116.105521][ T6557] lo speed is unknown, defaulting to 1000 [ 116.230096][ T6557] lo speed is unknown, defaulting to 1000 [ 116.619777][ T6612] tipc: Enabling of bearer rejected, failed to enable media [ 116.659923][ T6614] tipc: Enabling of bearer rejected, failed to enable media [ 117.172344][ T6638] netlink: 'syz.1.165': attribute type 22 has an invalid length. [ 117.197753][ T6638] netlink: 168 bytes leftover after parsing attributes in process `syz.1.165'. [ 117.269685][ T6641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.166'. [ 117.477711][ T5935] IPVS: starting estimator thread 0... [ 117.530944][ T6645] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 117.592072][ T6648] IPVS: using max 24 ests per chain, 57600 per kthread [ 118.027263][ T6660] __nla_validate_parse: 1 callbacks suppressed [ 118.027282][ T6660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.171'. [ 118.082226][ T6650] lo speed is unknown, defaulting to 1000 [ 118.730284][ T6690] netlink: 'syz.1.181': attribute type 3 has an invalid length. [ 119.218955][ T6714] can: request_module (can-proto-4) failed. [ 119.886118][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 119.923994][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 119.955382][ T6750] netlink: 248 bytes leftover after parsing attributes in process `syz.0.189'. [ 120.584996][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 120.723357][ T6729] lo speed is unknown, defaulting to 1000 [ 120.726753][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'. [ 120.946716][ T6784] netlink: 'syz.4.197': attribute type 1 has an invalid length. [ 121.014307][ T6798] Driver unsupported XDP return value 0 on prog (id 61) dev N/A, expect packet loss! [ 121.038435][ T6787] netlink: 60 bytes leftover after parsing attributes in process `syz.1.198'. [ 121.410022][ T6811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.201'. [ 121.590594][ T6811] vlan2: entered promiscuous mode [ 121.620253][ T6811] ip6gretap0: entered promiscuous mode [ 121.728211][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 121.853174][ T6827] netlink: 68 bytes leftover after parsing attributes in process `syz.1.203'. [ 122.039841][ T6821] bridge_slave_1: left allmulticast mode [ 122.070770][ T6821] bridge_slave_1: left promiscuous mode [ 122.111115][ T6821] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.187041][ T6821] bridge_slave_0: left allmulticast mode [ 122.223520][ T6821] bridge_slave_0: left promiscuous mode [ 122.264071][ T6821] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.605812][ T6852] netlink: 'syz.4.208': attribute type 1 has an invalid length. [ 122.683629][ T6852] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.691268][ T6833] syzkaller0: entered promiscuous mode [ 122.701033][ T6833] syzkaller0: entered allmulticast mode [ 122.859998][ T6852] vlan2: entered allmulticast mode [ 122.884797][ T6852] veth1: entered allmulticast mode [ 122.891647][ T6852] bond1: (slave vlan2): Opening slave failed [ 123.051763][ T6865] __nla_validate_parse: 1 callbacks suppressed [ 123.051785][ T6865] netlink: 32 bytes leftover after parsing attributes in process `syz.0.210'. [ 123.202081][ T6879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'. [ 123.504503][ T6879] bridge_slave_1: left allmulticast mode [ 123.510342][ T6879] bridge_slave_1: left promiscuous mode [ 123.523749][ T6879] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.540617][ T6879] bridge_slave_0: left allmulticast mode [ 123.546684][ T6879] bridge_slave_0: left promiscuous mode [ 123.555740][ T6879] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.793014][ T6885] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 123.814306][ T6888] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 123.829035][ T6888] pim6reg0: linktype set to 774 [ 123.835693][ T6890] tipc: Enabling of bearer rejected, failed to enable media [ 123.936158][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.218'. [ 124.296461][ T6929] netlink: 100 bytes leftover after parsing attributes in process `syz.3.223'. [ 124.339258][ T6931] netlink: 'syz.2.224': attribute type 26 has an invalid length. [ 124.647095][ T6940] netlink: 'syz.2.225': attribute type 13 has an invalid length. [ 124.841059][ T6914] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 125.074893][ T6932] bridge1: entered promiscuous mode [ 125.080185][ T6932] bridge1: entered allmulticast mode [ 125.117662][ T6932] team0: Port device bridge1 added [ 125.226051][ T6950] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.689931][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 125.778332][ T6940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.807974][ T6940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.029018][ T6942] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 126.108144][ T6970] syzkaller1: entered promiscuous mode [ 126.173430][ T6970] syzkaller1: entered allmulticast mode [ 126.186651][ T5977] syz1: Port: 1 Link DOWN [ 126.206378][ T176] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.236068][ T176] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.267126][ T176] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.358010][ T176] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.429099][ T6999] netlink: 'syz.2.233': attribute type 4 has an invalid length. [ 126.490057][ T6999] netlink: 'syz.2.233': attribute type 4 has an invalid length. [ 126.590030][ T7008] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.238'. [ 127.204674][ T7024] block nbd0: server does not support multiple connections per device. [ 127.257203][ T7024] block nbd0: shutting down sockets [ 127.455171][ T7040] : entered promiscuous mode [ 127.974653][ T7069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.249'. [ 128.039509][ T7071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.250'. [ 128.157818][ T7077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.250'. [ 128.253083][ T7069] veth0_t_wifi: renamed from veth0_macvtap [ 128.620074][ T7092] netlink: 32 bytes leftover after parsing attributes in process `syz.3.254'. [ 128.799004][ T7104] netlink: 44 bytes leftover after parsing attributes in process `syz.1.257'. [ 129.755359][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'. [ 130.729432][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.271'. [ 130.797993][ T7178] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 130.946645][ T7188] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 131.024771][ T7193] netlink: 316 bytes leftover after parsing attributes in process `syz.3.275'. [ 131.435340][ T30] audit: type=1800 audit(1755552165.055:4): pid=7198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.276" name="memory.events" dev="tmpfs" ino=345 res=0 errno=0 [ 131.770303][ T7205] netlink: 'syz.1.278': attribute type 2 has an invalid length. [ 131.923790][ T7207] netlink: 36 bytes leftover after parsing attributes in process `syz.1.279'. [ 133.032089][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.157517][ T7244] netlink: 16 bytes leftover after parsing attributes in process `syz.4.288'. [ 133.288205][ T7246] tipc: Enabled bearer , priority 0 [ 133.428438][ T7255] netlink: 416 bytes leftover after parsing attributes in process `syz.3.290'. [ 133.446482][ T7256] netlink: 'syz.4.291': attribute type 10 has an invalid length. [ 133.469924][ T7257] netlink: 'syz.4.291': attribute type 10 has an invalid length. [ 133.504333][ T7256] netlink: 40 bytes leftover after parsing attributes in process `syz.4.291'. [ 133.541490][ T7257] netlink: 40 bytes leftover after parsing attributes in process `syz.4.291'. [ 133.559828][ T7231] syzkaller0: entered promiscuous mode [ 133.574545][ T7231] syzkaller0: entered allmulticast mode [ 133.596157][ T7255] netlink: 20 bytes leftover after parsing attributes in process `syz.3.290'. [ 133.615941][ T7256] dummy0: entered promiscuous mode [ 133.622451][ T7256] dummy0: entered allmulticast mode [ 133.648233][ T7256] bridge0: port 3(dummy0) entered blocking state [ 133.664826][ T7256] bridge0: port 3(dummy0) entered disabled state [ 133.765067][ T7231] tipc: Resetting bearer [ 133.819214][ T7230] tipc: Resetting bearer [ 134.406627][ T6421] tipc: Node number set to 2724483185 [ 134.785095][ T7264] netlink: 32 bytes leftover after parsing attributes in process `syz.2.292'. [ 136.639484][ T7230] tipc: Disabling bearer [ 136.665353][ T5527] veth0_t_wifi: left promiscuous mode [ 136.731548][ T7260] lo speed is unknown, defaulting to 1000 [ 136.859043][ T7302] netlink: 'syz.3.299': attribute type 30 has an invalid length. [ 136.906426][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'. [ 136.929011][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'. [ 137.009362][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.303'. [ 137.190791][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.305'. [ 137.211237][ T7319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.489910][ T7350] netlink: 20 bytes leftover after parsing attributes in process `syz.4.316'. [ 138.509976][ T7346] netlink: 'syz.3.315': attribute type 1 has an invalid length. [ 138.759636][ T7369] netlink: 36 bytes leftover after parsing attributes in process `syz.0.319'. [ 138.770146][ T7369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.914693][ T7294] lo speed is unknown, defaulting to 1000 [ 139.735092][ T7386] netlink: 165 bytes leftover after parsing attributes in process `syz.4.322'. [ 140.487025][ T7412] netlink: 20 bytes leftover after parsing attributes in process `syz.1.331'. [ 140.916368][ T7430] netlink: 'syz.3.335': attribute type 1 has an invalid length. [ 140.965895][ T7430] netlink: 'syz.3.335': attribute type 3 has an invalid length. [ 140.989669][ T7430] netlink: 224 bytes leftover after parsing attributes in process `syz.3.335'. [ 141.042763][ T7432] netlink: 24 bytes leftover after parsing attributes in process `syz.4.336'. [ 141.223061][ T7435] netdevsim netdevsim0: Direct firmware load for /. failed with error -2 [ 141.245133][ T7435] netdevsim netdevsim0: Falling back to sysfs fallback for: /. [ 141.355549][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.341'. [ 141.368564][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.339'. [ 141.389538][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.341'. [ 141.407782][ T7443] netlink: 'syz.4.341': attribute type 12 has an invalid length. [ 141.425261][ T7443] netlink: 'syz.4.341': attribute type 14 has an invalid length. [ 141.669535][ T7413] netlink: 80 bytes leftover after parsing attributes in process `syz.2.330'. [ 141.703186][ T7413] netlink: 'syz.2.330': attribute type 13 has an invalid length. [ 141.721421][ T7452] netlink: 'syz.4.343': attribute type 1 has an invalid length. [ 141.921548][ T7413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.932761][ T7413] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.948890][ T7413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.987625][ T7410] lo speed is unknown, defaulting to 1000 [ 142.238711][ T7464] netlink: 'syz.0.345': attribute type 21 has an invalid length. [ 143.358953][ T7508] netlink: 'syz.2.355': attribute type 1 has an invalid length. [ 143.392671][ T7502] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 143.630108][ T7519] netlink: 'syz.0.358': attribute type 3 has an invalid length. [ 143.685341][ T7519] netlink: 'syz.0.358': attribute type 1 has an invalid length. [ 143.728323][ T7519] __nla_validate_parse: 5 callbacks suppressed [ 143.728341][ T7519] netlink: 220 bytes leftover after parsing attributes in process `syz.0.358'. [ 144.321581][ T7535] netlink: 16 bytes leftover after parsing attributes in process `syz.0.361'. [ 144.383262][ T7514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.452323][ T7537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.362'. [ 144.527659][ T10] IPVS: starting estimator thread 0... [ 144.582258][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 144.650942][ T7542] IPVS: using max 26 ests per chain, 62400 per kthread [ 144.744340][ T7515] lo speed is unknown, defaulting to 1000 [ 144.855364][ T7550] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.367'. [ 145.173079][ T7560] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 145.291341][ T7569] netlink: 52 bytes leftover after parsing attributes in process `syz.0.369'. [ 145.354717][ T7569] netlink: 52 bytes leftover after parsing attributes in process `syz.0.369'. [ 145.363455][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 145.378599][ T7565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.365'. [ 145.444142][ T7565] netlink: 428 bytes leftover after parsing attributes in process `syz.4.365'. [ 145.490916][ T7569] netlink: 52 bytes leftover after parsing attributes in process `syz.0.369'. [ 145.589868][ T7565] netlink: 32 bytes leftover after parsing attributes in process `syz.4.365'. [ 145.938920][ T7580] netlink: 'syz.4.372': attribute type 21 has an invalid length. [ 146.003363][ T7581] netlink: 'syz.0.371': attribute type 2 has an invalid length. [ 146.048689][ T7578] netlink: 'syz.0.371': attribute type 2 has an invalid length. [ 146.249241][ T7586] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 146.276985][ T7561] lo speed is unknown, defaulting to 1000 [ 147.602668][ T7622] netlink: 'syz.3.383': attribute type 21 has an invalid length. [ 147.628401][ T7622] netlink: 'syz.3.383': attribute type 1 has an invalid length. [ 148.461135][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 148.954900][ T7689] netlink: 'syz.4.396': attribute type 29 has an invalid length. [ 149.140185][ T7692] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 149.149553][ T7687] __nla_validate_parse: 8 callbacks suppressed [ 149.149573][ T7687] netlink: 36 bytes leftover after parsing attributes in process `syz.0.397'. [ 149.554285][ T7712] netlink: 56 bytes leftover after parsing attributes in process `syz.2.403'. [ 149.651619][ T7714] netlink: 28 bytes leftover after parsing attributes in process `syz.2.403'. [ 149.875986][ T7725] geneve0: entered promiscuous mode [ 149.906933][ T7727] vxcan1: tx address claim with different name [ 149.920601][ T7725] vlan2: entered promiscuous mode [ 150.178294][ T7741] tipc: Enabled bearer , priority 0 [ 150.231177][ T7741] syzkaller0: entered promiscuous mode [ 150.246441][ T7741] syzkaller0: entered allmulticast mode [ 150.273109][ T7741] tipc: Resetting bearer [ 150.282585][ T7739] tipc: Resetting bearer [ 150.358026][ T7739] tipc: Disabling bearer [ 150.448436][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.414'. [ 150.541789][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.414'. [ 150.542484][ T7760] atomic_op ffff88802e8ba998 conn xmit_atomic 0000000000000000 [ 150.570202][ T7763] IPVS: length: 243 != 8 [ 151.349833][ T7794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.547100][ T7801] tipc: Enabling of bearer rejected, failed to enable media [ 151.606714][ T7801] netlink: 24 bytes leftover after parsing attributes in process `syz.1.428'. [ 151.623296][ T7803] netlink: 108 bytes leftover after parsing attributes in process `syz.4.429'. [ 151.627122][ T7801] netlink: 24 bytes leftover after parsing attributes in process `syz.1.428'. [ 151.757274][ T7811] netlink: 232 bytes leftover after parsing attributes in process `syz.1.431'. [ 151.769169][ T7811] netlink: 232 bytes leftover after parsing attributes in process `syz.1.431'. [ 152.555327][ T7855] team_slave_0: entered promiscuous mode [ 152.561369][ T7855] team_slave_1: entered promiscuous mode [ 152.586019][ T7855] vlan0: entered promiscuous mode [ 152.599299][ T7855] team0: entered promiscuous mode [ 153.000510][ T7871] Bluetooth: MGMT ver 1.23 [ 153.137860][ T7875] netlink: 'syz.3.447': attribute type 4 has an invalid length. [ 153.307062][ T7882] netlink: 'syz.0.450': attribute type 7 has an invalid length. [ 153.615516][ T7901] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.746893][ T7905] netlink: 'syz.0.457': attribute type 5 has an invalid length. [ 153.802110][ T7910] netlink: 'syz.0.457': attribute type 5 has an invalid length. [ 153.948667][ T7923] openvswitch: netlink: Flow actions attr not present in new flow. [ 154.000906][ T7924] openvswitch: netlink: Flow actions attr not present in new flow. [ 154.872789][ T7950] __nla_validate_parse: 10 callbacks suppressed [ 154.872811][ T7950] netlink: 32 bytes leftover after parsing attributes in process `syz.3.467'. [ 154.981731][ T7979] netlink: 'syz.1.470': attribute type 1 has an invalid length. [ 154.995322][ T7979] netlink: 232 bytes leftover after parsing attributes in process `syz.1.470'. [ 155.006836][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.470'. [ 155.183029][ T7982] netlink: 224 bytes leftover after parsing attributes in process `syz.2.472'. [ 155.496229][ T7990] netlink: 40 bytes leftover after parsing attributes in process `syz.3.475'. [ 156.294446][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.484'. [ 156.476971][ T8024] veth1_to_hsr: entered promiscuous mode [ 156.500149][ T8024] veth1_to_hsr: entered allmulticast mode [ 157.345360][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 157.366787][ T8041] wg1 speed is unknown, defaulting to 1000 [ 157.407684][ T8046] : entered promiscuous mode [ 157.426353][ T8041] wg1 speed is unknown, defaulting to 1000 [ 157.434330][ T8044] sctp: [Deprecated]: syz.0.489 (pid 8044) Use of int in max_burst socket option. [ 157.434330][ T8044] Use struct sctp_assoc_value instead [ 157.511604][ T8041] wg1 speed is unknown, defaulting to 1000 [ 157.606238][ T8041] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 157.663276][ T8061] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.681498][ T8041] wg1 speed is unknown, defaulting to 1000 [ 157.693384][ T8041] wg1 speed is unknown, defaulting to 1000 [ 157.706079][ T8041] wg1 speed is unknown, defaulting to 1000 [ 157.717616][ T8041] wg1 speed is unknown, defaulting to 1000 [ 157.733879][ T8041] wg1 speed is unknown, defaulting to 1000 [ 157.862340][ T8070] netlink: 32 bytes leftover after parsing attributes in process `syz.3.496'. [ 157.918829][ T8073] netlink: 20 bytes leftover after parsing attributes in process `syz.0.497'. [ 157.976238][ T8068] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 158.167866][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 158.200921][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.501'. [ 158.443545][ T8097] openvswitch: netlink: IP tunnel dst address not specified [ 158.635540][ T8106] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:2048 [ 158.659125][ T8108] tipc: Enabled bearer , priority 10 [ 158.917601][ T8120] netlink: 'syz.1.514': attribute type 8 has an invalid length. [ 159.544076][ T8128] netlink: 'syz.3.516': attribute type 10 has an invalid length. [ 159.709964][ T8145] syzkaller1: entered promiscuous mode [ 159.716318][ T8145] syzkaller1: entered allmulticast mode [ 159.724398][ T8145] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 159.773076][ T6419] tipc: Node number set to 3200041897 [ 159.859428][ T8156] bond0: entered promiscuous mode [ 159.931065][ T8156] bond_slave_0: entered promiscuous mode [ 159.942911][ T8156] bond_slave_1: entered promiscuous mode [ 159.986973][ T8156] batadv0: entered promiscuous mode [ 160.004365][ T8156] hsr1: entered allmulticast mode [ 160.035973][ T8156] bond0: entered allmulticast mode [ 160.061209][ T8156] bond_slave_0: entered allmulticast mode [ 160.081574][ T8156] bond_slave_1: entered allmulticast mode [ 160.110002][ T8156] batadv0: entered allmulticast mode [ 160.138000][ T8156] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 160.188202][ T8156] bond0: left promiscuous mode [ 160.196057][ T8156] bond_slave_0: left promiscuous mode [ 160.219445][ T8156] bond_slave_1: left promiscuous mode [ 160.239840][ T8156] batadv0: left promiscuous mode [ 160.563979][ T8178] __nla_validate_parse: 10 callbacks suppressed [ 160.564002][ T8178] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.530'. [ 160.619578][ T8180] Set syz0 is full, maxelem 0 reached [ 160.890352][ T8197] netlink: 'syz.1.536': attribute type 10 has an invalid length. [ 160.913315][ T8194] bridge_slave_0: left allmulticast mode [ 160.937321][ T8194] bridge_slave_0: left promiscuous mode [ 160.947706][ T8194] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.978509][ T8194] bridge_slave_1: left allmulticast mode [ 160.987655][ T8203] ieee802154 phy0 wpan0: encryption failed: -22 [ 160.997596][ T8194] bridge_slave_1: left promiscuous mode [ 161.011536][ T8194] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.035898][ T8194] bond0: (slave bond_slave_0): Releasing backup interface [ 161.048369][ T8194] bond_slave_0: left allmulticast mode [ 161.079471][ T8194] bond0: (slave bond_slave_1): Releasing backup interface [ 161.109838][ T8194] bond_slave_1: left allmulticast mode [ 161.131902][ T8194] team0: Port device team_slave_0 removed [ 161.165504][ T8194] team0: Port device team_slave_1 removed [ 161.176519][ T8194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.187131][ T8194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.256248][ T8194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.295328][ T8194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.766067][ T8219] netlink: 'syz.1.539': attribute type 10 has an invalid length. [ 161.843992][ T8223] netlink: 'syz.4.541': attribute type 1 has an invalid length. [ 161.852823][ T8219] team0: Port device dummy0 added [ 161.857947][ T8221] netlink: 'syz.1.539': attribute type 10 has an invalid length. [ 162.019303][ T8221] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 162.035077][ T8221] team0: Failed to send options change via netlink (err -105) [ 162.056814][ T8221] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 162.070237][ T8221] team0: Port device dummy0 removed [ 162.087889][ T8221] dummy0: entered allmulticast mode [ 162.117482][ T8226] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 162.135160][ T8226] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 162.197546][ T8230] gretap1: entered promiscuous mode [ 162.223137][ T8230] bond2: (slave gretap1): making interface the new active one [ 162.237122][ T8230] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 162.277776][ T8201] wg1 speed is unknown, defaulting to 1000 [ 162.553056][ T8241] netlink: 'syz.3.544': attribute type 1 has an invalid length. [ 162.596898][ T8241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.648645][ T8240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.781178][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.551'. [ 162.826605][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.551'. [ 163.066319][ T8276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.556'. [ 163.085066][ T8276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'. [ 163.487252][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 163.778977][ T8307] netlink: 248 bytes leftover after parsing attributes in process `syz.4.564'. [ 163.818348][ T8312] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 163.835669][ T8307] netlink: 48 bytes leftover after parsing attributes in process `syz.4.564'. [ 163.930414][ T5865] udevd[5865]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 163.945993][ T8307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.564'. [ 164.289628][ T8324] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 164.482035][ T8330] tap0: tun_chr_ioctl cmd 1074025677 [ 164.528982][ T8330] tap0: linktype set to 776 [ 164.667793][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.574'. [ 164.744073][ T8341] smc: net device bond0 applied user defined pnetid SYZ [ 165.185030][ T8363] tap0: tun_chr_ioctl cmd 1074025677 [ 165.191013][ T8363] tap0: linktype set to 823 [ 165.672271][ T8382] FAULT_INJECTION: forcing a failure. [ 165.672271][ T8382] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 165.685726][ T8382] CPU: 0 UID: 0 PID: 8382 Comm: syz.4.585 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 165.685756][ T8382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 165.685776][ T8382] Call Trace: [ 165.685786][ T8382] [ 165.685796][ T8382] dump_stack_lvl+0x189/0x250 [ 165.685830][ T8382] ? __pfx____ratelimit+0x10/0x10 [ 165.685859][ T8382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.685882][ T8382] ? __pfx__printk+0x10/0x10 [ 165.685911][ T8382] ? __might_fault+0xb0/0x130 [ 165.685952][ T8382] should_fail_ex+0x414/0x560 [ 165.685984][ T8382] _copy_from_user+0x2d/0xb0 [ 165.686007][ T8382] __sys_connect+0x123/0x440 [ 165.686038][ T8382] ? __fget_files+0x3a0/0x420 [ 165.686056][ T8382] ? __pfx___sys_connect+0x10/0x10 [ 165.686097][ T8382] ? __pfx_ksys_write+0x10/0x10 [ 165.686122][ T8382] ? rcu_is_watching+0x15/0xb0 [ 165.686150][ T8382] __x64_sys_connect+0x7a/0x90 [ 165.686182][ T8382] do_syscall_64+0xfa/0x3b0 [ 165.686209][ T8382] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.686236][ T8382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.686256][ T8382] ? clear_bhb_loop+0x60/0xb0 [ 165.686281][ T8382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.686300][ T8382] RIP: 0033:0x7fd678f8ebe9 [ 165.686324][ T8382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.686340][ T8382] RSP: 002b:00007fd679da7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 165.686365][ T8382] RAX: ffffffffffffffda RBX: 00007fd6791b5fa0 RCX: 00007fd678f8ebe9 [ 165.686379][ T8382] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000004 [ 165.686392][ T8382] RBP: 00007fd679da7090 R08: 0000000000000000 R09: 0000000000000000 [ 165.686404][ T8382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.686415][ T8382] R13: 00007fd6791b6038 R14: 00007fd6791b5fa0 R15: 00007fff6fb76c68 [ 165.686448][ T8382] [ 165.931955][ T8377] syzkaller0: entered promiscuous mode [ 165.938204][ T8377] syzkaller0: entered allmulticast mode [ 166.091917][ T8390] nbd: must specify a device to reconfigure [ 166.124056][ T8386] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.943618][ T8403] __nla_validate_parse: 4 callbacks suppressed [ 166.943644][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.590'. [ 167.829544][ T8403] veth1_macvtap: left promiscuous mode [ 168.207371][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'. [ 168.475747][ T8422] FAULT_INJECTION: forcing a failure. [ 168.475747][ T8422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.499031][ T8422] CPU: 0 UID: 0 PID: 8422 Comm: syz.4.597 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 168.499064][ T8422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 168.499076][ T8422] Call Trace: [ 168.499085][ T8422] [ 168.499095][ T8422] dump_stack_lvl+0x189/0x250 [ 168.499127][ T8422] ? __pfx____ratelimit+0x10/0x10 [ 168.499157][ T8422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.499183][ T8422] ? __pfx__printk+0x10/0x10 [ 168.499228][ T8422] should_fail_ex+0x414/0x560 [ 168.499263][ T8422] _copy_to_user+0x31/0xb0 [ 168.499290][ T8422] simple_read_from_buffer+0xe1/0x170 [ 168.499327][ T8422] proc_fail_nth_read+0x1b3/0x220 [ 168.499363][ T8422] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.499391][ T8422] ? rw_verify_area+0x2a6/0x4d0 [ 168.499417][ T8422] ? __lock_acquire+0xab9/0xd20 [ 168.499446][ T8422] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.499472][ T8422] vfs_read+0x1fd/0xa30 [ 168.499498][ T8422] ? fdget_pos+0x247/0x320 [ 168.499522][ T8422] ? __pfx___mutex_lock+0x10/0x10 [ 168.499554][ T8422] ? __pfx_vfs_read+0x10/0x10 [ 168.499583][ T8422] ? __fget_files+0x2a/0x420 [ 168.499607][ T8422] ? __fget_files+0x3a0/0x420 [ 168.499629][ T8422] ? __fget_files+0x2a/0x420 [ 168.499659][ T8422] ksys_read+0x145/0x250 [ 168.499690][ T8422] ? __pfx_ksys_read+0x10/0x10 [ 168.499714][ T8422] ? rcu_is_watching+0x15/0xb0 [ 168.499742][ T8422] ? do_syscall_64+0xbe/0x3b0 [ 168.499778][ T8422] do_syscall_64+0xfa/0x3b0 [ 168.499809][ T8422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.499829][ T8422] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 168.499850][ T8422] ? clear_bhb_loop+0x60/0xb0 [ 168.499876][ T8422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.499896][ T8422] RIP: 0033:0x7fd678f8d5fc [ 168.499916][ T8422] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 168.499932][ T8422] RSP: 002b:00007fd679da7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 168.499954][ T8422] RAX: ffffffffffffffda RBX: 00007fd6791b5fa0 RCX: 00007fd678f8d5fc [ 168.499969][ T8422] RDX: 000000000000000f RSI: 00007fd679da70a0 RDI: 0000000000000005 [ 168.499981][ T8422] RBP: 00007fd679da7090 R08: 0000000000000000 R09: 0000000000000000 [ 168.499994][ T8422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.500005][ T8422] R13: 00007fd6791b6038 R14: 00007fd6791b5fa0 R15: 00007fff6fb76c68 [ 168.500041][ T8422] [ 169.059860][ T8434] tipc: Enabled bearer , priority 0 [ 169.134857][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'. [ 169.167946][ T8433] tipc: Resetting bearer [ 169.176890][ T8437] syzkaller0: entered promiscuous mode [ 169.184444][ T8437] syzkaller0: entered allmulticast mode [ 169.329857][ T8437] tipc: Resetting bearer [ 169.463037][ T8437] tipc: Disabling bearer [ 169.521806][ T8462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.606'. [ 169.561143][ T8467] sctp: [Deprecated]: syz.1.610 (pid 8467) Use of int in maxseg socket option. [ 169.561143][ T8467] Use struct sctp_assoc_value instead [ 170.007371][ T8477] bridge0: port 3(macsec0) entered blocking state [ 170.040058][ T8477] bridge0: port 3(macsec0) entered disabled state [ 170.049290][ T8477] macsec0: entered allmulticast mode [ 170.066852][ T8477] macsec0: left allmulticast mode [ 170.222646][ T8478] pim6reg1: entered promiscuous mode [ 170.228327][ T8478] pim6reg1: entered allmulticast mode [ 170.269155][ T8489] netlink: 32 bytes leftover after parsing attributes in process `syz.1.618'. [ 170.635909][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.622'. [ 170.655845][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.622'. [ 170.972146][ T8520] netlink: 'syz.3.624': attribute type 4 has an invalid length. [ 171.113177][ T8526] vxcan1: entered allmulticast mode [ 172.097077][ T8558] ipvlan3: entered promiscuous mode [ 172.127091][ T8558] bridge0: port 1(ipvlan3) entered blocking state [ 172.158430][ T8558] bridge0: port 1(ipvlan3) entered disabled state [ 172.190996][ T8558] ipvlan3: entered allmulticast mode [ 172.214977][ T8558] gretap0: entered allmulticast mode [ 172.223475][ T8558] ipvlan3: left allmulticast mode [ 172.228591][ T8558] gretap0: left allmulticast mode [ 172.280397][ T8568] netlink: 'syz.2.635': attribute type 1 has an invalid length. [ 172.381945][ T8568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.417251][ T8569] bond1: (slave geneve3): making interface the new active one [ 172.427696][ T8569] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 172.440923][ T176] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.476712][ T176] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.508722][ T176] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.539859][ T176] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.689721][ T8576] sctp: [Deprecated]: syz.3.639 (pid 8576) Use of int in maxseg socket option. [ 172.689721][ T8576] Use struct sctp_assoc_value instead [ 172.975021][ T10] IPVS: starting estimator thread 0... [ 173.059324][ T8556] wg1 speed is unknown, defaulting to 1000 [ 173.100862][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'. [ 173.101369][ T8586] IPVS: using max 24 ests per chain, 57600 per kthread [ 173.659935][ T8618] tls_set_device_offload_rx: netdev not found [ 173.712374][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.650'. [ 173.757082][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.651'. [ 173.848792][ T8617] bridge0: port 1(macvlan2) entered blocking state [ 173.879689][ T8617] bridge0: port 1(macvlan2) entered disabled state [ 173.933179][ T8617] macvlan2: entered allmulticast mode [ 173.965257][ T8617] bridge0: entered allmulticast mode [ 174.055036][ T8617] macvlan2: left allmulticast mode [ 174.060394][ T8617] bridge0: left allmulticast mode [ 174.255158][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.654'. [ 174.372302][ T8632] geneve2: entered promiscuous mode [ 174.377593][ T8632] geneve2: entered allmulticast mode [ 174.394355][ T8638] netlink: 144 bytes leftover after parsing attributes in process `syz.0.655'. [ 174.521517][ T8642] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 174.620881][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 175.011597][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.660'. [ 175.082597][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.661'. [ 175.097610][ T8671] netlink: 20 bytes leftover after parsing attributes in process `syz.3.661'. [ 175.108622][ T8671] tipc: Invalid UDP bearer configuration [ 175.108684][ T8671] tipc: Enabling of bearer rejected, failed to enable media [ 175.581588][ T8692] netlink: 10664 bytes leftover after parsing attributes in process `syz.4.668'. [ 175.631783][ T8692] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 175.692535][ T8697] netlink: 20 bytes leftover after parsing attributes in process `syz.2.669'. [ 176.106730][ T8684] wg1 speed is unknown, defaulting to 1000 [ 176.285792][ T8709] sctp: [Deprecated]: syz.3.672 (pid 8709) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.285792][ T8709] Use struct sctp_sack_info instead [ 177.086504][ T8735] batadv_slave_0: entered promiscuous mode [ 177.184412][ T8733] batadv_slave_0: left promiscuous mode [ 177.531048][ T8749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.680423][ T8753] syzkaller1: entered promiscuous mode [ 177.700726][ T8753] syzkaller1: entered allmulticast mode [ 177.776958][ T8757] netlink: 'syz.4.684': attribute type 1 has an invalid length. [ 177.910546][ T8760] bond4: (slave gretap2): making interface the new active one [ 177.922901][ T8760] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 178.041374][ T8724] wg1 speed is unknown, defaulting to 1000 [ 178.074291][ T8757] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 178.387711][ T8737] wg1 speed is unknown, defaulting to 1000 [ 179.283612][ T8777] wg1 speed is unknown, defaulting to 1000 [ 180.153858][ T8799] IPVS: Error connecting to the multicast addr [ 180.575659][ T8789] wg1 speed is unknown, defaulting to 1000 [ 180.655628][ T8787] wg1 speed is unknown, defaulting to 1000 [ 180.814028][ T8820] openvswitch: netlink: IPv6 tunnel dst address is zero [ 181.753667][ T8835] __nla_validate_parse: 4 callbacks suppressed [ 181.753693][ T8835] netlink: 32 bytes leftover after parsing attributes in process `syz.1.705'. [ 182.061959][ T8846] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 182.124017][ T8850] netlink: 32 bytes leftover after parsing attributes in process `syz.2.709'. [ 182.343518][ T8854] netlink: 'syz.4.712': attribute type 1 has an invalid length. [ 182.381735][ T8854] netlink: 'syz.4.712': attribute type 3 has an invalid length. [ 182.408618][ T8859] netlink: 'syz.0.710': attribute type 1 has an invalid length. [ 182.414850][ T8854] netlink: 224 bytes leftover after parsing attributes in process `syz.4.712'. [ 182.434579][ T8861] netlink: 40 bytes leftover after parsing attributes in process `syz.4.712'. [ 182.437803][ T8858] netlink: 'syz.0.710': attribute type 1 has an invalid length. [ 182.464050][ T8861] netlink: 3 bytes leftover after parsing attributes in process `syz.4.712'. [ 182.495416][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.712'. [ 182.587930][ T8858] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.854490][ T8874] tipc: Enabled bearer , priority 0 [ 182.869568][ T8875] syzkaller0: entered promiscuous mode [ 182.890436][ T8875] syzkaller0: entered allmulticast mode [ 182.947028][ T8874] tipc: Enabling of bearer rejected, already enabled [ 182.956069][ T8878] netlink: 'syz.4.714': attribute type 1 has an invalid length. [ 183.014978][ T8882] Can't find ip_set type [ 183.278925][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'. [ 183.302491][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.721'. [ 183.314183][ T8898] netlink: 332 bytes leftover after parsing attributes in process `syz.0.722'. [ 183.323974][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'. [ 183.444936][ T8901] tipc: Enabling of bearer rejected, already enabled [ 183.535756][ T8901] tipc: Resetting bearer [ 183.540059][ T8909] netlink: 'syz.4.725': attribute type 3 has an invalid length. [ 183.782935][ T8919] netlink: 'syz.1.727': attribute type 1 has an invalid length. [ 184.636677][ T8945] netlink: 'syz.0.735': attribute type 1 has an invalid length. [ 184.778711][ T8948] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 184.996799][ T8910] wg1 speed is unknown, defaulting to 1000 [ 185.269583][ T8930] netlink: 'syz.2.729': attribute type 13 has an invalid length. [ 185.302171][ T8930] netlink: 'syz.2.729': attribute type 17 has an invalid length. [ 185.588470][ T8930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.608559][ T982] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 185.831426][ T8973] netem: incorrect ge model size [ 185.836891][ T8973] netem: change failed [ 186.381611][ T176] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 186.391827][ T176] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 186.543198][ T982] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 186.721091][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 186.733077][ T8926] wg1 speed is unknown, defaulting to 1000 [ 186.764747][ T8960] wg1 speed is unknown, defaulting to 1000 [ 187.026264][ T8989] netlink: 'syz.0.749': attribute type 12 has an invalid length. [ 187.040926][ T8989] __nla_validate_parse: 11 callbacks suppressed [ 187.040948][ T8989] netlink: 132 bytes leftover after parsing attributes in process `syz.0.749'. [ 187.640939][ T9001] netlink: 68 bytes leftover after parsing attributes in process `syz.1.753'. [ 187.719042][ T9005] syz.0.754: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 187.801081][ T9005] CPU: 0 UID: 0 PID: 9005 Comm: syz.0.754 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 187.801113][ T9005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.801126][ T9005] Call Trace: [ 187.801134][ T9005] [ 187.801144][ T9005] dump_stack_lvl+0x189/0x250 [ 187.801179][ T9005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.801207][ T9005] ? __pfx__printk+0x10/0x10 [ 187.801237][ T9005] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 187.801263][ T9005] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 187.801290][ T9005] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 187.801318][ T9005] warn_alloc+0x214/0x310 [ 187.801353][ T9005] ? stack_depot_save_flags+0x40/0x860 [ 187.801384][ T9005] ? __pfx_warn_alloc+0x10/0x10 [ 187.801418][ T9005] ? kasan_save_track+0x4f/0x80 [ 187.801446][ T9005] ? xskq_create+0x56/0x170 [ 187.801471][ T9005] ? xsk_init_queue+0xb0/0x110 [ 187.801494][ T9005] ? xsk_setsockopt+0x4dc/0x8d0 [ 187.801516][ T9005] ? do_sock_setsockopt+0x17c/0x1b0 [ 187.801534][ T9005] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 187.801552][ T9005] ? do_syscall_64+0xfa/0x3b0 [ 187.801581][ T9005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.801611][ T9005] __vmalloc_node_range_noprof+0x125/0x12f0 [ 187.801677][ T9005] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 187.801716][ T9005] ? __kasan_kmalloc+0x93/0xb0 [ 187.801748][ T9005] vmalloc_user_noprof+0xad/0xf0 [ 187.801779][ T9005] ? xskq_create+0xbf/0x170 [ 187.801808][ T9005] xskq_create+0xbf/0x170 [ 187.801838][ T9005] xsk_init_queue+0xb0/0x110 [ 187.801880][ T9005] xsk_setsockopt+0x4dc/0x8d0 [ 187.801908][ T9005] ? __pfx_xsk_setsockopt+0x10/0x10 [ 187.801939][ T9005] ? __pfx_aa_sk_perm+0x10/0x10 [ 187.801973][ T9005] ? aa_sock_opt_perm+0xff/0x1b0 [ 187.801995][ T9005] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 187.802017][ T9005] ? __pfx_xsk_setsockopt+0x10/0x10 [ 187.802044][ T9005] do_sock_setsockopt+0x17c/0x1b0 [ 187.802068][ T9005] __x64_sys_setsockopt+0x13f/0x1b0 [ 187.802093][ T9005] do_syscall_64+0xfa/0x3b0 [ 187.802120][ T9005] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.802147][ T9005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.802167][ T9005] ? clear_bhb_loop+0x60/0xb0 [ 187.802193][ T9005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.802213][ T9005] RIP: 0033:0x7f10c5d8ebe9 [ 187.802231][ T9005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.802247][ T9005] RSP: 002b:00007f10c6c9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 187.802269][ T9005] RAX: ffffffffffffffda RBX: 00007f10c5fb5fa0 RCX: 00007f10c5d8ebe9 [ 187.802283][ T9005] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 187.802295][ T9005] RBP: 00007f10c5e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 187.802307][ T9005] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.802319][ T9005] R13: 00007f10c5fb6038 R14: 00007f10c5fb5fa0 R15: 00007fffa529c8e8 [ 187.802353][ T9005] [ 187.802374][ T9005] Mem-Info: [ 187.940799][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.756'. [ 187.958457][ T9005] active_anon:7653 inactive_anon:0 isolated_anon:0 [ 187.958457][ T9005] active_file:3140 inactive_file:39869 isolated_file:0 [ 187.958457][ T9005] unevictable:768 dirty:36 writeback:0 [ 187.958457][ T9005] slab_reclaimable:10904 slab_unreclaimable:142302 [ 187.958457][ T9005] mapped:32196 shmem:4233 pagetables:1016 [ 187.958457][ T9005] sec_pagetables:0 bounce:0 [ 187.958457][ T9005] kernel_misc_reclaimable:0 [ 187.958457][ T9005] free:1282110 free_pcp:15769 free_cma:0 [ 188.121192][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.756'. [ 188.149003][ T9005] Node 0 active_anon:30540kB inactive_anon:0kB active_file:12560kB inactive_file:159276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128720kB dirty:156kB writeback:0kB shmem:15396kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12140kB pagetables:3968kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 188.253707][ T9005] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 188.289281][ T9005] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 188.327065][ T9005] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 188.334246][ T9005] Node 0 DMA32 free:1221364kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30492kB inactive_anon:0kB active_file:12560kB inactive_file:157704kB unevictable:1536kB writepending:156kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:41292kB local_pcp:21388kB free_cma:0kB [ 188.389832][ T9005] lowmem_reserve[]: 0 0 1 1 1 [ 188.395614][ T9005] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 188.435029][ T9005] lowmem_reserve[]: 0 0 0 0 0 [ 188.439953][ T9005] Node 1 Normal free:3892972kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19968kB local_pcp:14272kB free_cma:0kB [ 188.471794][ T9020] nbd: must specify a size in bytes for the device [ 188.486578][ T9005] lowmem_reserve[]: 0 0 0 0 0 [ 188.555964][ T9005] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 188.590028][ T9005] Node 0 DMA32: 55*4kB (UM) 108*8kB (UME) 5*16kB (UM) 309*32kB (UME) 43*64kB (UME) 47*128kB (UE) 35*256kB (UM) 28*512kB (UM) 15*1024kB (UE) 12*2048kB (UME) 278*4096kB (UM) = 1221740kB [ 188.614971][ T9005] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 188.628558][ T9005] Node 1 Normal: 217*4kB (UME) 51*8kB (UME) 39*16kB (UME) 98*32kB (UME) 27*64kB (UME) 11*128kB (UME) 3*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3892972kB [ 188.649069][ T9005] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 188.659166][ T9005] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 188.676248][ T9005] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 188.686316][ T9005] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 188.700183][ T9005] 47239 total pagecache pages [ 188.706788][ T9005] 0 pages in swap cache [ 188.711547][ T9005] Free swap = 124996kB [ 188.715847][ T9005] Total swap = 124996kB [ 188.720339][ T9005] 2097051 pages RAM [ 188.724455][ T9005] 0 pages HighMem/MovableOnly [ 188.729338][ T9005] 425656 pages reserved [ 188.733915][ T9005] 0 pages cma reserved [ 189.034520][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.763'. [ 189.099177][ T9037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.763'. [ 189.143880][ T9037] netlink: 'syz.0.763': attribute type 5 has an invalid length. [ 189.215196][ T60] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.239529][ T60] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.269532][ T9044] bond0: option lp_interval: invalid value (0) [ 189.284466][ T9044] bond0: option lp_interval: allowed values 1 - 2147483647 [ 189.314835][ T60] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.328697][ T60] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.428549][ T9052] netlink: 20 bytes leftover after parsing attributes in process `syz.2.765'. [ 189.603138][ T30] audit: type=1107 audit(1755552223.225:5): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 189.629389][ T9055] netlink: 161784 bytes leftover after parsing attributes in process `syz.1.767'. [ 190.012692][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'. [ 190.022258][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'. [ 190.249753][ T9086] macsec1: entered allmulticast mode [ 190.272811][ T9086] bond0: entered allmulticast mode [ 190.278250][ T9086] bond_slave_0: entered allmulticast mode [ 190.355418][ T9086] bond_slave_1: entered allmulticast mode [ 190.393429][ T9086] bond0: left allmulticast mode [ 190.398443][ T9086] bond_slave_0: left allmulticast mode [ 190.405491][ T9086] bond_slave_1: left allmulticast mode [ 190.742272][ T9110] netlink: 'syz.1.781': attribute type 21 has an invalid length. [ 190.780951][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 190.790913][ T9110] netlink: 'syz.1.781': attribute type 1 has an invalid length. [ 190.791911][ T9116] netlink: 'syz.1.781': attribute type 21 has an invalid length. [ 190.807871][ T9116] netlink: 'syz.1.781': attribute type 1 has an invalid length. [ 191.186914][ T9136] IPVS: length: 163 != 1880 [ 191.330274][ T9145] netlink: 'syz.4.792': attribute type 99 has an invalid length. [ 191.923230][ T9154] wg1 speed is unknown, defaulting to 1000 [ 191.995389][ T9165] netlink: 'syz.3.797': attribute type 1 has an invalid length. [ 192.052773][ T9170] __nla_validate_parse: 7 callbacks suppressed [ 192.052794][ T9170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.797'. [ 192.059154][ T9165] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.063408][ T9167] tipc: Enabling of bearer rejected, already enabled [ 192.511386][ T9178] netlink: 'syz.4.800': attribute type 4 has an invalid length. [ 192.595225][ T9177] netlink: 'syz.4.800': attribute type 4 has an invalid length. [ 192.862417][ T9198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.805'. [ 194.288576][ T9257] sctp: [Deprecated]: syz.2.822 (pid 9257) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.288576][ T9257] Use struct sctp_sack_info instead [ 194.324929][ T9258] netlink: 244 bytes leftover after parsing attributes in process `syz.0.823'. [ 194.466088][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.477840][ T9257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.889709][ T9292] netlink: 'syz.0.830': attribute type 1 has an invalid length. [ 194.962237][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.831'. [ 195.019427][ T9299] netlink: 'syz.3.831': attribute type 5 has an invalid length. [ 196.514659][ T9292] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 196.516698][ T9297] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 196.647353][ T9307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.833'. [ 196.701649][ T9309] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 196.793497][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.834'. [ 196.886790][ T9315] netlink: 'syz.3.834': attribute type 5 has an invalid length. [ 196.920974][ T9315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.834'. [ 196.951571][ T9316] netlink: 64 bytes leftover after parsing attributes in process `syz.1.835'. [ 196.987926][ T9319] tipc: Enabled bearer , priority 0 [ 196.996324][ T9319] syzkaller0: entered promiscuous mode [ 197.008451][ T9319] syzkaller0: entered allmulticast mode [ 197.109877][ T9316] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.205902][ T9324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.229324][ T9319] tipc: Enabled bearer , priority 10 [ 197.282552][ T9316] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.320502][ T9317] tipc: Resetting bearer [ 197.434844][ T9317] tipc: Disabling bearer [ 197.503758][ T9316] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.546442][ T9298] wg1 speed is unknown, defaulting to 1000 [ 197.610068][ T9330] tipc: Enabled bearer , priority 0 [ 197.630435][ T9330] syzkaller0: entered promiscuous mode [ 197.648767][ T9336] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5 [ 197.662734][ T9330] syzkaller0: entered allmulticast mode [ 197.757529][ T9316] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.786113][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'. [ 197.847039][ T9342] tipc: Resetting bearer [ 197.859716][ T9329] tipc: Resetting bearer [ 197.886707][ T9329] tipc: Disabling bearer [ 198.155253][ T176] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.226610][ T176] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.347670][ T4206] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.411280][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.496961][ T9368] netlink: 36 bytes leftover after parsing attributes in process `syz.4.848'. [ 199.476708][ T9409] macvlan1: entered promiscuous mode [ 199.487689][ T9409] ipvlan0: entered promiscuous mode [ 199.496107][ T9409] ipvlan0: left promiscuous mode [ 199.507248][ T9409] macvlan1: left promiscuous mode [ 199.525449][ T9363] wg1 speed is unknown, defaulting to 1000 [ 199.580829][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 199.604240][ T9413] tipc: Enabling of bearer rejected, already enabled [ 199.667537][ T9413] sch_tbf: burst 12 is lower than device syzkaller0 mtu (313) ! [ 199.705844][ T9413] tipc: New replicast peer: 255.255.255.255 [ 199.735375][ T9413] tipc: Enabled bearer , priority 10 [ 200.660096][ T9437] nbd2: detected capacity change from 0 to 63 [ 200.675440][ T9447] netlink: 'syz.1.866': attribute type 1 has an invalid length. [ 200.689454][ T9442] block nbd2: NBD_DISCONNECT [ 200.729597][ T9442] block nbd2: Disconnected due to user request. [ 200.736522][ T9442] block nbd2: shutting down sockets [ 200.893843][ T9437] netlink: 40 bytes leftover after parsing attributes in process `syz.2.864'. [ 200.931876][ T9437] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 201.028628][ T9450] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 201.053566][ T9450] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 201.168382][ T9462] netlink: 'syz.2.870': attribute type 16 has an invalid length. [ 201.188507][ T9441] gretap1: entered promiscuous mode [ 201.204549][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.870'. [ 201.208708][ T9465] netlink: 16 bytes leftover after parsing attributes in process `syz.3.869'. [ 201.225380][ T9441] bond2: (slave gretap1): making interface the new active one [ 201.234676][ T9441] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 201.303380][ T9415] wg1 speed is unknown, defaulting to 1000 [ 201.393727][ T9468] netlink: 36 bytes leftover after parsing attributes in process `syz.4.871'. [ 201.449417][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.871'. [ 201.507969][ T9468] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.871'. [ 201.734816][ T9490] netlink: 16 bytes leftover after parsing attributes in process `syz.2.875'. [ 202.728218][ T9476] wg1 speed is unknown, defaulting to 1000 [ 203.095003][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.885'. [ 203.213302][ T9540] sctp: [Deprecated]: syz.2.887 (pid 9540) Use of int in max_burst socket option deprecated. [ 203.213302][ T9540] Use struct sctp_assoc_value instead [ 203.490460][ T9548] netlink: 20 bytes leftover after parsing attributes in process `syz.2.889'. [ 203.555294][ T9548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.889'. [ 203.601870][ T9554] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.889'. [ 203.616155][ T9553] netlink: 64 bytes leftover after parsing attributes in process `syz.0.892'. [ 203.680222][ T9554] netlink: zone id is out of range [ 203.723090][ T9554] netlink: zone id is out of range [ 203.756770][ T9554] netlink: zone id is out of range [ 203.771400][ T9554] netlink: zone id is out of range [ 203.776596][ T9554] netlink: zone id is out of range [ 203.790489][ T9554] netlink: zone id is out of range [ 203.796784][ T9554] netlink: zone id is out of range [ 203.802658][ T9554] netlink: zone id is out of range [ 203.807826][ T9554] netlink: zone id is out of range [ 203.813856][ T9554] netlink: zone id is out of range [ 203.839510][ T9548] bond2: entered promiscuous mode [ 203.847134][ T9548] bond2: entered allmulticast mode [ 203.854877][ T9548] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.953303][ T9561] tipc: Enabled bearer , priority 0 [ 204.035510][ T9561] syzkaller0: entered promiscuous mode [ 204.042496][ T9561] syzkaller0: entered allmulticast mode [ 204.059315][ T9573] IPVS: Error connecting to the multicast addr [ 204.336883][ T9580] netlink: 'syz.1.894': attribute type 1 has an invalid length. [ 205.080893][ T10] tipc: Node number set to 1166640731 [ 205.837239][ T9568] tipc: Resetting bearer [ 205.857202][ T9559] tipc: Resetting bearer [ 205.887058][ T9559] tipc: Disabling bearer [ 205.899408][ T9560] wg1 speed is unknown, defaulting to 1000 [ 206.107777][ T9598] netlink: 224 bytes leftover after parsing attributes in process `syz.3.903'. [ 206.159216][ T9597] netlink: 224 bytes leftover after parsing attributes in process `syz.3.903'. [ 206.483216][ T9621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.907'. [ 206.921439][ T9632] netlink: 16 bytes leftover after parsing attributes in process `syz.3.909'. [ 206.952430][ T9632] netlink: 'syz.3.909': attribute type 33 has an invalid length. [ 206.974979][ T9632] netlink: 152 bytes leftover after parsing attributes in process `syz.3.909'. [ 207.057036][ T9640] tipc: Enabled bearer , priority 0 [ 207.064436][ T9635] tipc: Enabling of bearer rejected, already enabled [ 207.078187][ T9640] syzkaller0: entered promiscuous mode [ 207.088070][ T9640] syzkaller0: entered allmulticast mode [ 207.239498][ T9633] tipc: Resetting bearer [ 207.309741][ T9633] tipc: Disabling bearer [ 208.633490][ T176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.653668][ T176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.904179][ T9729] sctp: [Deprecated]: syz.2.933 (pid 9729) Use of int in maxseg socket option. [ 208.904179][ T9729] Use struct sctp_assoc_value instead [ 208.909218][ T9730] __nla_validate_parse: 1 callbacks suppressed [ 208.909245][ T9730] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.932'. [ 208.928221][ T9731] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.932'. [ 209.281865][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.937'. [ 209.316817][ T9704] wg1 speed is unknown, defaulting to 1000 [ 209.378002][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.937'. [ 209.760072][ T9767] netlink: 'syz.2.943': attribute type 1 has an invalid length. [ 209.917473][ T9767] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.099251][ T9770] bond3: (slave bridge0): making interface the new active one [ 210.112645][ T9770] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 210.125488][ T9772] lo speed is unknown, defaulting to 1000 [ 210.162593][ T9774] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 210.294769][ T9772] lo speed is unknown, defaulting to 1000 [ 210.312786][ T9772] lo speed is unknown, defaulting to 1000 [ 210.372999][ T9772] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 210.464984][ T9776] syzkaller0: entered promiscuous mode [ 210.494940][ T9776] syzkaller0: entered allmulticast mode [ 210.503700][ T9772] lo speed is unknown, defaulting to 1000 [ 210.627223][ T9772] lo speed is unknown, defaulting to 1000 [ 210.669298][ T9772] lo speed is unknown, defaulting to 1000 [ 210.684823][ T9772] lo speed is unknown, defaulting to 1000 [ 210.713541][ T9772] lo speed is unknown, defaulting to 1000 [ 210.826086][ T9803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.951'. [ 210.927018][ T9811] netlink: 'syz.0.954': attribute type 1 has an invalid length. [ 210.982598][ T9815] netlink: 'syz.1.953': attribute type 21 has an invalid length. [ 211.077712][ T9815] netlink: 132 bytes leftover after parsing attributes in process `syz.1.953'. [ 211.096498][ T9814] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 211.201443][ T9824] netlink: 596 bytes leftover after parsing attributes in process `syz.0.956'. [ 211.224342][ T9815] netlink: 'syz.1.953': attribute type 10 has an invalid length. [ 211.913031][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 211.919299][ T5869] Bluetooth: hci2: command 0x0406 tx timeout [ 211.919317][ T5876] Bluetooth: hci3: command 0x0406 tx timeout [ 211.935407][ T9854] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 212.029562][ T9863] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.964'. [ 212.032446][ T9854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.965'. [ 212.464698][ T9881] netlink: 'syz.0.974': attribute type 8 has an invalid length. [ 212.631797][ T9887] netlink: 'syz.4.976': attribute type 1 has an invalid length. [ 212.645870][ T9887] netlink: 224 bytes leftover after parsing attributes in process `syz.4.976'. [ 212.716138][ T9892] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 212.876053][ T9896] net_ratelimit: 4 callbacks suppressed [ 212.876074][ T9896] sock: sock_set_timeout: `syz.4.978' (pid 9896) tries to set negative timeout [ 212.945956][ T9891] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 213.288527][ T9876] wg1 speed is unknown, defaulting to 1000 [ 213.313119][ T9876] lo speed is unknown, defaulting to 1000 [ 213.446257][ T9909] sctp: [Deprecated]: syz.4.980 (pid 9909) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.446257][ T9909] Use struct sctp_sack_info instead [ 214.516847][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.987'. [ 214.618563][ T9946] netlink: 26 bytes leftover after parsing attributes in process `syz.4.987'. Stopping sshd: stopped /usr/sbin/sshd (pid 5620) OK [ 215.151520][ T6419] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 215.201534][ T6419] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 215.209745][ T9962] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 215.338877][ T9963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. Stopping crond: [ 215.407045][ T6419] lo speed is unknown, defaulting to 1000 [ 215.582947][ T9977] IPVS: Unknown mcast interface: pimreg1 stopped /usr/sbin/crond (pid 5604) [ 215.617818][ T9978] sctp: [Deprecated]: syz.2.996 (pid 9978) Use of int in max_burst socket option deprecated. [ 215.617818][ T9978] Use struct sctp_assoc_value instead OK [ 215.645165][ T9977] 8021q: VLANs not supported on ip6_vti0 [ 215.691167][ T9984] netlink: 20 bytes leftover after parsing attributes in process `syz.4.999'. [ 215.857442][ T9978] syzkaller1: entered promiscuous mode [ 215.942405][ T9978] syzkaller1: entered allmulticast mode Stopping dhcpcd... [ 216.421916][T10011] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 216.467481][T10011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1003'. no /sbin/dhcpcd found; none killed [ 216.529393][T10014] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 216.655886][T10021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.742707][T10021] tap0: tun_chr_ioctl cmd 1074025676 [ 216.753507][T10021] tap0: owner set to 0 [ 216.854532][T10031] nbd: must specify a size in bytes for the device [ 216.870895][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 216.875679][T10034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1010'. Stopping network: [ 217.024783][T10041] netlink: 'syz.1.1012': attribute type 1 has an invalid length. [ 218.766770][T10041] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 218.799766][T10047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1012'. [ 218.995846][T10073] netlink: 221 bytes leftover after parsing attributes in process `syz.1.1019'. [ 219.065845][T10075] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 219.122301][T10075] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 219.182810][T10082] netlink: 'syz.3.1018': attribute type 1 has an invalid length. [ 219.203758][T10082] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1018'. [ 219.225682][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1018'. [ 219.335938][T10075] tipc: Enabled bearer , priority 0 [ 219.412090][T10075] syzkaller0: entered promiscuous mode [ 219.428396][T10075] syzkaller0: entered allmulticast mode OK [ 219.698739][T10081] tipc: Resetting bearer [ 219.722237][T10071] wg1 speed is unknown, defaulting to 1000 Stopping iptables: [ 219.759547][T10071] lo speed is unknown, defaulting to 1000 [ 219.938597][T10074] tipc: Resetting bearer [ 220.007757][T10074] tipc: Disabling bearer modprobe: can't change directory to '6.17.0-rc1-syzkaller-00215-gbab3ce404553': No such file or directory iptables v1.8.11 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded. FAIL Stopping system message bus: Unknown signal 33 [ 220.917769][T10146] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20004 [ 220.986826][T10148] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004 [ 221.736628][T10177] openvswitch: netlink: Multiple metadata blocks provided [ 221.823038][T10143] wg1 speed is unknown, defaulting to 1000 [ 221.849496][T10143] lo speed is unknown, defaulting to 1000 [ 221.967192][T10181] tipc: Enabling of bearer rejected, already enabled killall: udevd: no process killed [ 222.323833][T10192] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1048'. Stopping klogd: start-stop-daemon: warning: killing process 5221: No such process FAIL Stopping acpid: [ 223.004513][T10214] netlink: 'syz.3.1052': attribute type 1 has an invalid length. [ 223.062011][T10214] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 223.253355][T10224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1054'. [ 223.257977][T10223] vlan0: entered promiscuous mode [ 223.294574][T10223] macvtap0: entered promiscuous mode [ 223.326529][T10231] netlink: 'syz.3.1055': attribute type 21 has an invalid length. [ 223.336024][T10231] netlink: 'syz.3.1055': attribute type 22 has an invalid length. [ 223.351380][T10231] netlink: 'syz.3.1055': attribute type 23 has an invalid length. [ 223.369882][T10231] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1055'. [ 223.486568][T10238] sctp: [Deprecated]: syz.2.1057 (pid 10238) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.486568][T10238] Use struct sctp_sack_info instead [ 223.936466][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'. [ 224.033326][T10250] wg1 speed is unknown, defaulting to 1000 [ 224.041920][T10250] lo speed is unknown, defaulting to 1000 [ 224.077336][T10255] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 224.101966][ T3161] bond0: (slave bond_slave_0): interface is now down [ 224.130577][ T3161] bond0: (slave bond_slave_1): interface is now down OK [ 224.208324][ T3161] bond0: (slave bond_slave_0): interface is now down [ 224.226427][ T3161] bond0: (slave bond_slave_1): interface is now down [ 224.281559][ T4206] bond0: (slave bond_slave_0): interface is now down [ 224.314773][ T4206] bond0: (slave bond_slave_1): interface is now down [ 224.357204][ T4206] bond0: now running without any active interface! Stopping syslogd: stopped /sbin/syslogd (pid 5214) OK [ 225.017503][T10289] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 225.387747][T10303] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 225.722563][T10316] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1075'. [ 225.771265][T10316] bridge_slave_0: entered allmulticast mode umount: can't remount debugfs read-only umount: tmpfs busy - remounted read-only [ 226.093168][T10331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1079'. [ 226.159893][T10336] pim6reg: entered allmulticast mode [ 226.196240][T10338] pim6reg: left allmulticast mode [ 226.409228][T10337] tc_dump_action: action bad kind [ 226.735908][T10315] wg1 speed is unknown, defaulting to 1000 [ 226.801934][T10315] lo speed is unknown, defaulting to 1000 [ 226.893700][T10365] tipc: Enabled bearer , priority 0 [ 226.945761][T10367] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1088'. [ 227.009190][T10372] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1088'. [ 227.070562][T10365] syzkaller0: entered promiscuous mode [ 227.092524][T10365] syzkaller0: entered allmulticast mode [ 227.111960][T10367] gretap0: entered promiscuous mode [ 227.162321][T10372] 0ªî{X¹¦: renamed from gretap0 [ 227.174506][T10372] 0ªî{X¹¦: left promiscuous mode [ 227.187006][T10372] 0ªî{X¹¦: entered allmulticast mode [ 227.206659][T10372] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 227.256734][T10375] tipc: Resetting bearer [ 227.265307][T10380] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1091'. [ 227.310248][T10380] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1091'. [ 227.346193][T10380] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1091'. [ 227.420732][T10380] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1091'. [ 227.436973][T10361] tipc: Resetting bearer [ 227.461572][T10380] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1091'. [ 227.481086][T10380] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1091'. [ 227.506099][T10361] tipc: Disabling bearer [ 227.527924][T10380] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1091'. [ 227.561297][T10380] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1091'. [ 227.600344][T10380] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1091'. [ 227.639449][T10380] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1091'. [ 227.671119][T10380] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1091'. [ 227.680505][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1094'. [ 227.721575][ T4206] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.763591][ T7682] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.787470][ T7682] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.853493][ T7682] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.878261][T10396] tipc: Enabling of bearer rejected, max 3 bearers permitted umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.1.85 closed by remote host. [ 229.591571][T10408] wg1 speed is unknown, defaulting to 1000 [ 229.599343][T10408] lo speed is unknown, defaulting to 1000 [ 230.179264][ T7425] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 230.191223][ T7425] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 230.199659][ T7425] CPU: 0 UID: 0 PID: 7425 Comm: kbnepd bnep0 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 230.211832][ T7425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 230.221915][ T7425] RIP: 0010:klist_del+0x49/0x110 [ 230.226879][ T7425] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 69 9e b3 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 4b 9e b3 f6 4d 8b 7e 58 4c 89 f7 e8 5f 74 [ 230.246484][ T7425] RSP: 0018:ffffc9001c037768 EFLAGS: 00010202 [ 230.252566][ T7425] RAX: 000000000000000b RBX: ffff88807ef8e860 RCX: ffff888078321e00 [ 230.260549][ T7425] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 230.268526][ T7425] RBP: ffffc9001c037890 R08: ffff88807844e2d3 R09: 1ffff1100f089c5a [ 230.276505][ T7425] R10: dffffc0000000000 R11: ffffed100f089c5b R12: dffffc0000000000 [ 230.284493][ T7425] R13: 1ffff1100fdf1d0c R14: 0000000000000000 R15: ffff88807b0da750 [ 230.292470][ T7425] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 230.301466][ T7425] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.308061][ T7425] CR2: 00007ffc021ebc24 CR3: 00000000595d2000 CR4: 00000000003526f0 [ 230.316059][ T7425] Call Trace: [ 230.319353][ T7425] [ 230.322290][ T7425] device_del+0x280/0x8e0 [ 230.326628][ T7425] ? _raw_spin_unlock_irq+0x2e/0x50 [ 230.331834][ T7425] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 230.337902][ T7425] ? __pfx_device_del+0x10/0x10 [ 230.342756][ T7425] ? netdev_unregister_kobject+0x344/0x450 [ 230.348568][ T7425] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 230.355001][ T7425] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 230.361772][ T7425] ? __mutex_lock+0x5b6/0x1360 [ 230.366554][ T7425] ? rtnl_net_dev_lock+0x257/0x2f0 [ 230.371682][ T7425] unregister_netdevice_queue+0x33c/0x380 [ 230.377411][ T7425] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 230.383659][ T7425] ? rtnl_net_dev_lock+0x36/0x2f0 [ 230.388693][ T7425] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 230.393816][ T7425] unregister_netdev+0x1f/0x60 [ 230.398589][ T7425] bnep_session+0x294d/0x2b40 [ 230.403268][ T7425] ? rcu_is_watching+0x15/0xb0 [ 230.408035][ T7425] ? trace_sched_exit_tp+0x36/0x110 [ 230.413247][ T7425] ? __lock_acquire+0xab9/0xd20 [ 230.418118][ T7425] ? __pfx_bnep_session+0x10/0x10 [ 230.423147][ T7425] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 230.429045][ T7425] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 230.435384][ T7425] ? __pfx_woken_wake_function+0x10/0x10 [ 230.441029][ T7425] ? __kthread_parkme+0x7b/0x200 [ 230.445988][ T7425] ? __kthread_parkme+0x1a1/0x200 [ 230.451026][ T7425] kthread+0x70e/0x8a0 [ 230.455116][ T7425] ? __pfx_bnep_session+0x10/0x10 [ 230.460144][ T7425] ? __pfx_kthread+0x10/0x10 [ 230.464744][ T7425] ? _raw_spin_unlock_irq+0x23/0x50 [ 230.469951][ T7425] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.475162][ T7425] ? __pfx_kthread+0x10/0x10 [ 230.479781][ T7425] ret_from_fork+0x3f9/0x770 [ 230.484380][ T7425] ? __pfx_ret_from_fork+0x10/0x10 [ 230.489528][ T7425] ? __switch_to_asm+0x39/0x70 [ 230.494389][ T7425] ? __switch_to_asm+0x33/0x70 [ 230.499162][ T7425] ? __pfx_kthread+0x10/0x10 [ 230.503761][ T7425] ret_from_fork_asm+0x1a/0x30 [ 230.508577][ T7425] [ 230.511599][ T7425] Modules linked in: [ 230.519007][ T7425] ---[ end trace 0000000000000000 ]--- [ 230.525977][ T7425] RIP: 0010:klist_del+0x49/0x110 [ 230.531057][ T7425] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 69 9e b3 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 4b 9e b3 f6 4d 8b 7e 58 4c 89 f7 e8 5f 74 [ 230.550759][ T7425] RSP: 0018:ffffc9001c037768 EFLAGS: 00010202 [ 230.556861][ T7425] RAX: 000000000000000b RBX: ffff88807ef8e860 RCX: ffff888078321e00 [ 230.563204][T10310] ================================================================== [ 230.565695][ T7425] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 230.573024][T10310] BUG: KASAN: slab-use-after-free in __mutex_lock+0x7fc/0x1360 [ 230.573060][T10310] Read of size 8 at addr ffff8880797280a0 by task khidpd_15c25886/10310 [ 230.581053][ T7425] RBP: ffffc9001c037890 R08: ffff88807844e2d3 R09: 1ffff1100f089c5a [ 230.588555][T10310] [ 230.588573][T10310] CPU: 1 UID: 0 PID: 10310 Comm: khidpd_15c25886 Tainted: G D 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 230.588607][T10310] Tainted: [D]=DIE [ 230.588615][T10310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 230.588630][T10310] Call Trace: [ 230.588639][T10310] [ 230.588652][T10310] dump_stack_lvl+0x189/0x250 [ 230.588685][T10310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.588712][T10310] ? lock_release+0x4b/0x3e0 [ 230.588748][T10310] ? __virt_addr_valid+0x4a5/0x5c0 [ 230.588779][T10310] print_report+0xca/0x240 [ 230.588808][T10310] ? __mutex_lock+0x7fc/0x1360 [ 230.588855][T10310] kasan_report+0x118/0x150 [ 230.588890][T10310] ? __mutex_lock+0x7fc/0x1360 [ 230.588927][T10310] __mutex_lock+0x7fc/0x1360 [ 230.588961][T10310] ? __mutex_lock+0x5b6/0x1360 [ 230.588996][T10310] ? l2cap_unregister_user+0x6a/0x1b0 [ 230.589025][T10310] ? __pfx___mutex_lock+0x10/0x10 [ 230.589076][T10310] ? __pfx___timer_delete_sync+0x10/0x10 [ 230.589118][T10310] l2cap_unregister_user+0x6a/0x1b0 [ 230.589148][T10310] hidp_session_thread+0x3c9/0x410 [ 230.589178][T10310] ? __pfx_hidp_session_thread+0x10/0x10 [ 230.589204][T10310] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 230.589233][T10310] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 230.589265][T10310] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 230.589293][T10310] ? __kthread_parkme+0x7b/0x200 [ 230.589316][T10310] ? __kthread_parkme+0x1a1/0x200 [ 230.589346][T10310] kthread+0x70e/0x8a0 [ 230.589375][T10310] ? __pfx_hidp_session_thread+0x10/0x10 [ 230.589401][T10310] ? __pfx_kthread+0x10/0x10 [ 230.589429][T10310] ? _raw_spin_unlock_irq+0x23/0x50 [ 230.589456][T10310] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.589485][T10310] ? __pfx_kthread+0x10/0x10 [ 230.589513][T10310] ret_from_fork+0x3f9/0x770 [ 230.589538][T10310] ? __pfx_ret_from_fork+0x10/0x10 [ 230.589564][T10310] ? __switch_to_asm+0x39/0x70 [ 230.589592][T10310] ? __switch_to_asm+0x33/0x70 [ 230.589620][T10310] ? __pfx_kthread+0x10/0x10 [ 230.589648][T10310] ret_from_fork_asm+0x1a/0x30 [ 230.589688][T10310] [ 230.589696][T10310] [ 230.596944][ T7425] R10: dffffc0000000000 R11: ffffed100f089c5b R12: dffffc0000000000 [ 230.604872][T10310] Allocated by task 5874: [ 230.604887][T10310] kasan_save_track+0x3e/0x80 [ 230.604915][T10310] __kasan_kmalloc+0x93/0xb0 [ 230.607230][ T7425] R13: 1ffff1100fdf1d0c R14: 0000000000000000 R15: ffff88807b0da750 [ 230.621270][T10310] __kmalloc_noprof+0x27a/0x4f0 [ 230.621296][T10310] hci_alloc_dev_priv+0x28/0x2060 [ 230.621317][T10310] vhci_create_device+0x120/0x6e0 [ 230.621338][T10310] vhci_write+0x3ce/0x4a0 [ 230.621357][T10310] vfs_write+0x5c6/0xb30 [ 230.625132][ T7425] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 230.635125][T10310] ksys_write+0x145/0x250 [ 230.635154][T10310] do_syscall_64+0xfa/0x3b0 [ 230.638457][ T7425] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.641382][T10310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.641403][T10310] [ 230.641409][T10310] Freed by task 5874: [ 230.646062][ T7425] CR2: 00007ffc021ebc24 CR3: 00000000595d2000 CR4: 00000000003526f0 [ 230.651247][T10310] kasan_save_track+0x3e/0x80 [ 230.651272][T10310] kasan_save_free_info+0x46/0x50 [ 230.655855][ T7425] Kernel panic - not syncing: Fatal exception [ 230.924967][ T7425] Kernel Offset: disabled [ 230.929290][ T7425] Rebooting in 86400 seconds..