last executing test programs: 2m53.119688745s ago: executing program 3 (id=5169): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x19, r5, 0x1, 0xd8, 0x6, @random="98c8ca71225f"}, 0x14) sendto$packet(r6, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r5, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) 2m52.439608774s ago: executing program 0 (id=5173): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000480), 0x8) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x8001, 0x8000, 0x5, 0x6, {{0x16, 0x4, 0x3, 0x20, 0x58, 0x68, 0x0, 0xa, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x38}, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xdf, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0x81}, {@rand_addr=0x64010101, 0xfe3}, {@multicast2, 0x5}]}, @lsrr={0x83, 0x13, 0x41, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x3c}]}, @rr={0x7, 0x7, 0xd2, [@rand_addr=0x64010101]}, @generic={0x83, 0x9, "bd832540b5c09f"}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="9110b6000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1}, 0x94) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fcf142525f0000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x3, [@union={0x8, 0x1, 0x0, 0x5, 0x1, 0x1, [{0x3, 0x3, 0x3}]}, @enum={0x10, 0x5, 0x0, 0x6, 0x4, [{0x7, 0x8}, {0xa, 0xac8}, {0xb, 0x79d}, {0xc, 0xd}, {0x8, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x24b1}}]}, {0x0, [0x0]}}, &(0x7f0000000780)=""/93, 0x7f, 0x5d, 0x1, 0x80000001, 0x10000, @value=r0}, 0x28) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x17, 0xb, 0x4, 0x1000, 0x22008, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)=@generic={&(0x7f0000000a00)='./file0\x00', 0x0, 0x8}, 0x18) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a80)='blkio.bfq.idle_time\x00', 0x0, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f900ffff0000000004000000850000003600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ac0)={0x1, 0xffffffffffffffff}, 0x4) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000080), &(0x7f00000001c0)=r9}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r9}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_ext={0x1c, 0x8, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @alu={0x7, 0x1, 0x6, 0x3, 0x7, 0x80, 0x1}]}, &(0x7f0000000680)='GPL\x00', 0xd51, 0xe, &(0x7f00000006c0)=""/14, 0x40f00, 0x2c, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000840)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0xb, 0x0, 0x2}, 0x10, 0x1a965, 0xffffffffffffffff, 0x2, &(0x7f0000000b00)=[r4, r5, r6, r7, r8, r9], &(0x7f0000000b40)=[{0x5, 0x5, 0xa, 0x2}, {0x1, 0x4, 0xa, 0x5}], 0x10, 0x1}, 0x94) (async, rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1c8, 0xc8, 0x8, 0x0, 0x5803, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000, 0xffffff], [0xff000000, 0x0, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x6c, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @local, [0xff000000, 0xff0000ff, 0xff], [0xff, 0x0, 0xff, 0xff000000], 'caif0\x00', 'tunl0\x00', {0xff}, {}, 0x2b, 0xe9, 0x5, 0x1c}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c80)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r11, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="55000e0080000000080211000000080211000001505050505050000000000000000000009d92fd67da8a"], 0xcc}}, 0x0) 2m52.09376979s ago: executing program 3 (id=5174): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) 2m51.71458948s ago: executing program 0 (id=5176): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0xc64, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x0, 0x89dc, 0x2, 0x76, 0x6, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x7, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542a, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x9, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0x40894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0xd67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x45, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x75, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x6, 0xf, 0x100, 0x7, 0x100, 0x1, 0x9, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0x5, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x2, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0x9, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x7, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffff9, 0xffffffff, 0xfffff7f6, 0x10000, 0x3, 0x8000, 0x0, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375b, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x14, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x8, 0x8, 0x9, 0x9, 0x2, 0x4000005}}]}}]}, 0xc64}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f00000006c0)=""/194, 0xc2}], 0x2}, 0x40000000) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000010000d0300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001b000000000008000a00", @ANYRES32=r6, @ANYBLOB], 0x30}}, 0x4000080) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r8, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) close(0x4) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000240)={0x7, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100020e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) 2m51.400062256s ago: executing program 4 (id=5177): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x8) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000040), 0x14) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000180)={r1, &(0x7f0000000080)=']%/^$%(\\[{\x00', 0x30e03, &(0x7f00000000c0)={@_ha_fsid={[0xa, 0xc6]}, {0x6, 0x5, 0x2, 0x2000}}, 0x5, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x4}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000180)={r1, &(0x7f0000000080)=']%/^$%(\\[{\x00', 0x30e03, &(0x7f00000000c0)={@_ha_fsid={[0xa, 0xc6]}, {0x6, 0x5, 0x2, 0x2000}}, 0x5, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2400}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2400}, 0x94) 2m51.309921577s ago: executing program 2 (id=5178): r0 = socket(0x2b, 0x80801, 0x1) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0xa3, 0x7, 0x2}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_TABLE={0x8, 0xf, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x842}, 0x0) 2m51.292020202s ago: executing program 4 (id=5179): r0 = socket$inet(0x2, 0xa, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x58, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x67}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4010) r2 = socket(0x2, 0xa, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x87}, {0x6}]}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x14c, 0x24, 0xf0b, 0x1e, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x3, 0x6, 0xe9, 0x4, 0x0, 0x0, 0x1}}, @TCA_CHOKE_STAB={0x104, 0x2, "0c029d9a32426fae0f3ed75e15c168f9d20b54bc3788416745fa1bd74f2c7f12c8c318b261369d5e93d44db80ff5d7a440e0e29bdd79ec720b8f4a714c194bda237534057b53d42f12b1e1652f5c6fc2f3e6b4c45c227ec5817a93601590b2015e566e9543dfd0240167e75ddc666807434e15141c633b86b32e122e041f4f9cfc9534b523cc36c965b5c51e12c021d07a3fd19e84897a132ea0c8b8e45495c5815a1fd3914b8072fca1782fe48bdeb0654154a3d7706836a79965a9a40688f0ee105f0e52be8a02322e3e017e6a06ec0fabb51fd2c4d0ace8061cef929a3bdb09d2edabf42a4c726a2a4bbf3945fde351dda943f33702c2272c05e29caed9b8"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m51.128271167s ago: executing program 3 (id=5180): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40005200060010"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00'], 0x38}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x41aa, 0x6, 0x0, 0x8, 0x90, 0x8}, 0xc) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) r5 = accept4$bt_l2cap(r4, &(0x7f0000000480), &(0x7f00000004c0)=0xe, 0x80000) connect$bt_l2cap(r5, &(0x7f0000000440)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xe) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000140)="e7", 0x1}], 0x1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x18103, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x0, 0x3, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0x0, 0x2, 0x1, 0x0, 0x4}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0xfffff71f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKMODE={0x5, 0x11, 0xfb}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c0c1}, 0x40000) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000340)="0a000300010000", 0x7) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES32=r3, @ANYRESOCT=0x0, @ANYBLOB="b6c04c4f33815cf3581ddeb3b5bacfd4a95887c12669a4bead292380546358ca64087520c8d31695e394409e269bc08dc1f687ec3006ab17f458b06976141b4bd7b84ec3329333ead0e4a21c530334e0e381b49b2c653bf921453e9cdee790d5c8cde08193d76e81e8995461229a6a4e561d5658950ff9519cd5f94869ae8868da6e575141128e8ecf3e8308095466478474cd2a48b16adca1a97b9deec877cb8a22ae609627fc6ac0e6eacd5d03df4b9b23689a815adc5c5049571a1c428178ac8a5b084b78275e672aa3b7de890eb990082329"], 0x18}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 2m51.002570396s ago: executing program 2 (id=5181): syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000006a]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x238}, 0x1, 0x0, 0x0, 0x4000004}, 0x60) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x178, 0x2, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xeb5285b54b452cb2}, @CTA_EXPECT_NAT={0x12c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x41}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x25}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7ff}]}, 0x178}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1f}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg2\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x10}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4052}, 0x20000000) 2m50.953883994s ago: executing program 4 (id=5182): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x20008802}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r7], 0x54}}, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r11, 0xf) setsockopt$inet6_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x3) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r11, 0x894b, &(0x7f00000000c0)) r12 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r13], 0x3c}}, 0x0) 2m50.785453666s ago: executing program 3 (id=5184): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x19, r5, 0x1, 0xd8, 0x6, @random="98c8ca71225f"}, 0x14) sendto$packet(r6, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r5, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) 2m50.698381225s ago: executing program 2 (id=5185): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x2de89ed507d52c2, 0xe, 0x0, 0xfffffffb}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe6b}, 0x48) (async) socket$netlink(0x10, 0x3, 0x9) 2m50.286266927s ago: executing program 0 (id=5186): getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x54, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x200000c0}, 0x5) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000011c0), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1080}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x24, r1, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000050}, 0x40000c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000001540)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001300)={0x1dc, 0xa, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x3}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @connlimit={{0xe}, @void}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_EXPRESSIONS={0x180, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}]}}}, {0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}]}}}, {0x7c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x5c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}]}}}]}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) bind$alg(0xffffffffffffffff, &(0x7f0000001580)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001980)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001940)={&(0x7f00000016c0)={0x244, r4, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x79}}}}, [@NL80211_ATTR_TX_RATES={0x21c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x0, 0x6}, {0x0, 0x4}, {0x2, 0x4}, {0x2, 0x7}, {0x1, 0x9}, {0x2, 0x6}, {0x4, 0x2}, {0x4, 0x9}, {0x1, 0xa}, {0x3, 0x6}, {0x7}, {0x1, 0x2}, {}, {0x2, 0x7}, {0x0, 0x4}, {0x3, 0x6}, {0x6, 0x6}, {0x5, 0xa}, {0x5}, {0x6, 0x9}, {0x2}, {0x7, 0x8}, {0x3, 0xa}, {0x0, 0x5}, {0x2, 0x4}, {0x4, 0x2}, {0x6, 0xa}, {0x2, 0x2}, {0x4, 0x6}, {0x2, 0x9}, {0x2, 0x1}, {0x0, 0x9}, {0x7, 0xa}, {0x0, 0xa}, {0x1, 0x3}, {0x0, 0x9}, {0x2, 0x1}, {0x5, 0x8}, {0x1}, {0x3, 0x9}, {0x0, 0x2}, {0x3, 0x6}, {0x6, 0x4}, {0x7, 0x4}, {0x4, 0x8}, {0x0, 0x1}, {0x4, 0x9}, {0x0, 0x6}, {0x1, 0x3}, {0x4, 0x8}, {0x3, 0x1}, {0x1, 0x6}, {0x1, 0x3}, {0x0, 0x2}, {0x3, 0xa}, {0x7, 0x2}, {0x1, 0x8}, {0x2, 0xa}, {0x6, 0x2}, {0x6, 0x4}, {0x7, 0x5}]}]}, @NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x5, 0x5, 0x60, 0x12, 0x30, 0x3, 0x18, 0x48, 0x60, 0x9, 0x30]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6c, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x83, 0x0, 0x0, 0x0, 0x0, 0x401, 0x8001, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x9, 0x7, 0x9, 0x2, 0x9, 0x2, 0x100]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x4, 0x9}, {0x6, 0xa}, {0x2, 0x1}, {0x3, 0x8}, {0x4, 0x4}, {0x2, 0x8}, {0x3, 0x5}, {0x1, 0x4}, {0x5, 0x4}, {0x4, 0x6}, {0x1, 0x1}, {0x5}, {0x6, 0x6}, {0x5, 0x6}, {0x0, 0x8}, {0x4, 0x9}, {0x7, 0x5}, {0x1, 0x3}, {0x3, 0xa}, {0x7, 0x3}, {0x3, 0x7}, {0x3, 0x7}, {0x4, 0x9}, {0x5, 0x1}, {0x6, 0x8}, {0x1, 0x4}, {0x7, 0x7}, {0x0, 0x5}, {0x5, 0x7}, {0x6, 0x8}, {0x0, 0x6}, {0x4, 0x7}, {0x7, 0x7}, {0x1, 0xa}, {0x4, 0x5}, {0x0, 0x6}, {0x0, 0x2}, {0x4, 0x8}, {0x2, 0x9}, {0x1, 0x8}, {}, {0x1, 0x5}, {0x3, 0x8}, {0x4, 0x9}, {0x1, 0x8}, {0x2, 0x7}, {0x6, 0x5}, {0x7, 0x7}, {0x6, 0x8}, {0x4, 0xa}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0x4}, {0x6, 0x3}, {0x5, 0x8}, {0x1, 0x1}, {0x2, 0x7}, {0x7, 0x8}, {0x5, 0x5}, {0x0, 0xa}, {0x6, 0x4}, {0x1, 0x1}, {0x3, 0x9}, {0x0, 0x2}, {0x2, 0xa}, {0x0, 0x5}, {0x5}, {0x6, 0x8}, {0x7, 0x9}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x2, 0x1b, 0x1b, 0x5, 0xe, 0x36, 0x16, 0x3, 0x1, 0x6, 0x9]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x1, 0x9000, 0x9, 0x1, 0xfdda, 0x31]}}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x36, 0x5, 0x3, 0x1, 0x30, 0x24, 0x1, 0x1b, 0x6, 0x1, 0x2, 0x5, 0x2, 0xc, 0x18, 0x30, 0x30, 0x30, 0x3, 0x5, 0x16, 0xc, 0x5, 0x0, 0x60, 0x12, 0x0, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7, 0x81, 0x8, 0x1, 0x70, 0x8000, 0x401]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x36, 0x36, 0x6c, 0x6, 0x12, 0x6c, 0x24, 0xc, 0x16, 0x2, 0x1b, 0x24, 0x1, 0xb, 0x5e]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1, 0x48, 0x18, 0xb, 0x0, 0x3, 0x58, 0xb, 0x12, 0x3d, 0x4, 0x24, 0x6c, 0x4, 0x9, 0x5, 0x36, 0x16, 0x4, 0x6, 0x18, 0x18, 0xbcb1c55825c65535]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xb29, 0x2, 0x0, 0x3, 0xa, 0x9, 0xfbff]}}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x4, 0x48, 0x3, 0x36, 0x18, 0x6c, 0x12, 0x60]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x5, 0x6}, {0x4, 0x9}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x3}, {0x4, 0x1}, {0x5, 0x3}, {0x1}, {}, {0x7, 0x1}, {0x5, 0x8}, {0x0, 0xa}, {0x3, 0x9}, {0x6, 0x4}, {0x2, 0x5}, {0x2, 0xa}, {0x3, 0x2}, {0x5, 0x1}, {0x1, 0x2}, {0x0, 0x7}, {0x1, 0x4}, {0x5, 0xa}, {0x4, 0x2}, {0x6, 0x6}, {}, {0x3, 0x8}, {0x3, 0x8}, {0x4, 0x6}, {0x4, 0x6}, {0x1, 0x9}, {0x7}, {0x0, 0x2}, {0x4, 0x2}, {0x4, 0x7}, {0x7, 0x3}, {0x7, 0x5}, {0x2, 0x4}, {0x6, 0xa}, {}, {0x0, 0x1}, {0x1}, {0x6, 0x2}, {0x0, 0x7}, {0x1, 0x6}, {0x2, 0x5}, {0x2}, {0x3, 0x8}, {0x0, 0x1}, {0x0, 0x5}]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x42, 0x6, 0x2, 0x9, 0x4, 0x7ff, 0x2]}}]}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x800}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a00), r3) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x3c, r6, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80000001, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2}]}, 0x3c}}, 0x8010) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001b40), r0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x34, r7, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x70b}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20044014) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000001c40)={0xb, {{0xa, 0x4e22, 0x3, @private0}}, 0x0, 0x2, [{{0xa, 0x4e22, 0x891, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80}}, {{0xa, 0x4e22, 0x4a2c, @remote, 0x1}}]}, 0x190) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x800448d6, &(0x7f0000001e00)="e5671d2018987a97d6c5a0cc5c743d3c40811c3c6cc3ea18ce6512ce3ec5265905d7f57487d8789204270d408b947f2cdeb3e08d9c24c8a58ef866d4b189c903018bdd30e02c3c49d18f2e26760003e0df3f7a7d789968e280575f5be3f53c06851838a6f87c8a9d57878c2412c28b") r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001ec0), r3) sendmsg$SEG6_CMD_DUMPHMAC(r9, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x38, r11, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x200448d7) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000002000), r9) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000002100)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x50, r12, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0xc0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r10, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)=@gettclass={0x24, 0x2a, 0x400, 0x10, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x10}, {0x3, 0xd}, {0x1, 0xd}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0xc880) sendmsg$NBD_CMD_DISCONNECT(r13, 0x0, 0x0) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000002280), r2) sendmsg$DEVLINK_CMD_GET(r9, &(0x7f0000002380)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x70, r14, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000004}, 0x8040) 2m49.450570021s ago: executing program 0 (id=5187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710423000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2m49.449754947s ago: executing program 2 (id=5188): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r2, &(0x7f0000000300)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@void, {0x8100, 0x6, 0x1}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x9c, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "786b8afe8ef6c8e90c1e350689fcd4d61b4576015011084c54b22430637a2838", "563c538774ee22ce2bb8f46f7373cb97218dd5ee5af3108bd6d195c614d44230e598e0731465bf4fcdfa004c93ce4b4e", "02833533ce8152a09040f08bd2892b7233376dcda3f0b6962e66f617", {"2e7c8cbccc480860f94cd609888bc51a", "38a461132eddc6aef8a88f02e0ed7e13"}}}}}}}}}, 0xda) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000011c0)=@newqdisc={0x88, 0x24, 0xd0f, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0x2, 0x9, 0x6, 0x9, 0x8, 0x9, 0xa, 0x6, 0x2, 0x2, 0x2, 0x4, 0x8, 0x2, 0x22, 0xf], 0x0, [0x0, 0x6, 0xd, 0x6, 0x5, 0xf, 0x7, 0x8, 0x2, 0xfb42, 0xc4b, 0x7ff, 0x9, 0x0, 0xb, 0x54], [0xfff9, 0x9, 0xffff, 0xff, 0x2, 0x9f1, 0x1, 0x3b27, 0x1, 0xd, 0xe, 0x5, 0x91b, 0x3, 0x20, 0x7]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x60001d0}, 0x8840) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) 2m49.309221231s ago: executing program 3 (id=5189): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x891f, &(0x7f0000000000)={'vcan0\x00', 0x6}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, r2, 0x533, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xc081}, 0x4000) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_redir={0xa1, 0x0, 0x0, '\x00', @private2, @private0}}}}}}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_linger(r3, 0x1, 0x4b, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x43}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4811}, 0x40884) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xfff5, 0x4}, {}, {0x8, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xffffffff}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) syz_emit_ethernet(0xa2, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x6c, 0x2b, 0x0, @private2, @local, {[@routing={0x0, 0x0, 0x2, 0x8}], {0x4, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b42d43716462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x2f, 0xe, 0x0, 0x4, 0x8, @loopback, @private2, 0x20, 0x10, 0x1ff, 0xda36}}) 2m49.135088298s ago: executing program 0 (id=5190): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) socket$l2tp(0x2, 0x2, 0x73) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@restrict={0x3, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x61, 0x2e]}}, 0x0, 0x28, 0x0, 0x1, 0x2}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000b800000095"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000030000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8, 0x6, r6}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000040)="9eb1d91a92dc7c8fff658bb539e2ffb332da224694fdccf0d42de77a0a87e914330c5422", 0x24}], 0x2}, 0x20008b88) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r13, 0xc020660b, 0x0) socket(0x11, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 2m49.065107485s ago: executing program 4 (id=5191): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r1, &(0x7f00000000c0)="de", 0x1, 0x8000, &(0x7f0000000140)={0xa, 0xfffe, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xd, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}}, &(0x7f0000000380)=0xb0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c900000014003100fc010000000000000000000000000001ef948c95c530b78d405e13e70f8c004507df7200ccf002d2b87459afe968b1615070db6d58f2a45b89f70631a569c8aa967c896faea9929fecc4f188a871b2ca6ed36f479037b685fc0657f5a18a5202beb92193b4e8b4824bff2a0759fd4d817ead03fe1f9ee34d6ee1d113"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 2m48.779983936s ago: executing program 2 (id=5193): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0x403, 0x58bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x65, r7}) 2m48.633237177s ago: executing program 1 (id=5194): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x70bd2a, 0x25dfdbfc, {0xa, 0x0, 0x14, 0x9, 0x0, 0x0, 0x0, 0x1, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x1) 2m48.59678632s ago: executing program 1 (id=5195): r0 = socket(0x18, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getlink={0x20, 0x12, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x18020, 0x20}}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000084) 2m48.523735212s ago: executing program 1 (id=5196): r0 = socket(0xa, 0x3, 0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000140)={'IDLETIMER\x00'}, &(0x7f0000000280)=0x1e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001"], 0xa0}}, 0x0) (async) r2 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={0x0, @ax25={0x3, @default, 0x3}, @isdn={0x22, 0x4, 0x0, 0x0, 0x6}, @in={0x2, 0x4e22, @loopback}, 0x7, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='batadv0\x00', 0xd6, 0x7ff, 0x80}) (async, rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) 2m48.357119463s ago: executing program 1 (id=5197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x400c850}, 0x4040048) 2m48.341273948s ago: executing program 1 (id=5198): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080018"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000000)=0xfffffffa, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) 2m48.300835255s ago: executing program 4 (id=5199): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x19, r6, 0x1, 0xd8, 0x6, @random="98c8ca71225f"}, 0x14) sendto$packet(r7, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r6, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) 2m47.78921993s ago: executing program 2 (id=5200): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x14, r1, 0x100, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20009045}, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x0, 0xffffffff, {{0x11}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xec0}, 0x20000800) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x2}, 0x1c) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000680)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r9, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044000}, 0x90) r10 = socket$inet_sctp(0x2, 0x1, 0x84) clock_gettime(0x3, &(0x7f0000000540)) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x200, 0x3374, 0x6, r11}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x3ed0d747}, &(0x7f0000000380)=0x8) sendmmsg$inet_sctp(r6, &(0x7f00000004c0)=[{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x10000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x95f}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="eea6d356f28a096e7b156a4d6865b5bfc90a74fb5f2ebfa5bbb5493c659db9b84c77bd40e11db3fe00dd4622957e2297c17e0ba10e94", 0x36}, {&(0x7f0000000240)="984b20d6bfbd6201682f95dfbcf2b196484ffb00014ed0df5c6eaad7048249c1db088f74a732ccb7f4648376ffb2220c0fb22aa1b27a732b4c92bcd58080394b2c198a8adaf397f414983f5cfc4b0f895dbf645e0360152aaafda5636dd595b93ce9dd286b784f7da2dcfdb47a9fd459ae9bf7c69ea84c3421e188315f0c4ff99bb33e1c7c094bda1fe504ce71137a9320096d7140045cf2a649a822265f982b97e2a60540974c11ad00707bc2", 0xad}], 0x2, &(0x7f00000003c0)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @sndinfo={0x20, 0x84, 0x2, {0x98a, 0x200, 0xfffffbed, 0x1, r11}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @authinfo={0x18, 0x84, 0x6, {0xd6e}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x8008, 0x5, 0x4, r12}}, @dstaddrv6={0x20, 0x84, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}, @authinfo={0x18, 0x84, 0x6, {0x400}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0xf8, 0x1}], 0x1, 0x4008010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711243000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 2m47.787880106s ago: executing program 1 (id=5201): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) ppoll(&(0x7f0000000180)=[{r1, 0x8102}, {r1, 0x8000}], 0x2, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={[0x8]}, 0x8) socketpair(0x1, 0x80000, 0xfb4, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32], 0xfc}}, 0x4000800) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x0, 0x81, 0x8000, 0xfffffff8, 0xff, 0x1, 0x7e, 0x6, 0x0}, &(0x7f00000002c0)=0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000300)={r4, 0x200, 0x4}, 0x8) 2m47.759348841s ago: executing program 3 (id=5202): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000002bdd8f6e9015b1079cf4e186256fc1a1b135eef1ed487477c8d44299605b7c78c403ec28bd9f738702825cdfec43aa70085c4a5ab8b588195df48b59d120e8efaf9aba02eefefe2e3246491b8a9b6fc70cf703238e1b17910ea5d14f871b2cf6fc083515a9fdc0d096fea98199246eb29851701304bc240b96", @ANYRES16=r1, @ANYBLOB="10000000000000000000010000000000000002410000001000136574683a7465616d30000000"], 0x2c}}, 0x0) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000002bdd8f6e9015b1079cf4e186256fc1a1b135eef1ed487477c8d44299605b7c78c403ec28bd9f738702825cdfec43aa70085c4a5ab8b588195df48b59d120e8efaf9aba02eefefe2e3246491b8a9b6fc70cf703238e1b17910ea5d14f871b2cf6fc083515a9fdc0d096fea98199246eb29851701304bc240b96", @ANYRES16=r1, @ANYBLOB="10000000000000000000010000000000000002410000001000136574683a7465616d30000000"], 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="37040000000000000000000010d68200000000000000", @ANYRES32=r4, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYBLOB], 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x40, 0x700, 0x1, 0x3, {{0x10, 0x4, 0x2, 0x3a, 0x40, 0x65, 0x0, 0xf1, 0x29, 0x0, @local, @broadcast, {[@ssrr={0x89, 0xb, 0x20, [@loopback, @loopback]}, @rr={0x7, 0x1f, 0xac, [@loopback, @broadcast, @local, @private=0xa010101, @broadcast, @private=0xa010100, @multicast1]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@dev, @private, 0x0}, &(0x7f0000000200)=0xc) r7 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x8, 0x8, 0xfffffff8, 0x7, {{0xc, 0x4, 0x1, 0x6, 0x30, 0x64, 0x0, 0x9, 0x4, 0x0, @multicast2, @local, {[@rr={0x7, 0x1b, 0x2c, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}, @local, @remote, @empty]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x8, 0x8, 0xfffffff8, 0x7, {{0xc, 0x4, 0x1, 0x6, 0x30, 0x64, 0x0, 0x9, 0x4, 0x0, @multicast2, @local, {[@rr={0x7, 0x1b, 0x2c, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}, @local, @remote, @empty]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x881d6c7a661ea888, &(0x7f0000000380)={@initdev, 0x0}, &(0x7f00000003c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_virt_wifi\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x8000, 0x10, 0xc1, 0x401, {{0x1c, 0x4, 0x1, 0x1, 0x70, 0x65, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@timestamp_addr={0x44, 0x3c, 0x62, 0x1, 0xf, [{@loopback, 0x1}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x7}, {@remote, 0x26}, {@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@private=0xa010102, 0x100}]}, @lsrr={0x83, 0x1f, 0xbd, [@local, @empty, @local, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x8000, 0x10, 0xc1, 0x401, {{0x1c, 0x4, 0x1, 0x1, 0x70, 0x65, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@timestamp_addr={0x44, 0x3c, 0x62, 0x1, 0xf, [{@loopback, 0x1}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x7}, {@remote, 0x26}, {@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@private=0xa010102, 0x100}]}, @lsrr={0x83, 0x1f, 0xbd, [@local, @empty, @local, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000680)={@remote, 0x0}, &(0x7f00000006c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001240)={0x830, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x290, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xffff, 0xc5, 0x3, 0x1}, {0x25, 0x7, 0x9, 0x254}, {0x7, 0x3, 0xa}, {0x0, 0x8, 0x9, 0x80a4}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xac93}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @priority={{{0x24}, {0xb7}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9c2}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}]}}, {{0x8, 0x1, r14}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}]}}, {{0x8, 0x1, r16}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r18}, {0xb0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r19}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xe, 0xd, 0xdd, 0x5}, {0x8, 0x5, 0x8, 0x986}, {0x1, 0x81, 0x5, 0xd82}, {0x2, 0x0, 0x40, 0x3}, {0x7, 0x3, 0x3, 0x4}, {0x8001, 0x4, 0xf, 0xa5f}, {0x3, 0x9, 0xfe, 0x8}]}}}]}}, {{0x8, 0x1, r20}, {0x1c0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r21}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0x9, 0x8, 0xa}, {0x2, 0x10, 0x0, 0x5d6e}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r22}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x7, 0x7, 0x10000}, {0x8, 0x40, 0xa, 0x401}, {0x0, 0x4, 0x5, 0x1}]}}}]}}, {{0x8, 0x1, r23}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}]}}]}, 0x830}, 0x1, 0x0, 0x0, 0x4090}, 0x404c850) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001240)={0x830, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x290, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xffff, 0xc5, 0x3, 0x1}, {0x25, 0x7, 0x9, 0x254}, {0x7, 0x3, 0xa}, {0x0, 0x8, 0x9, 0x80a4}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xac93}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @priority={{{0x24}, {0xb7}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9c2}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}]}}, {{0x8, 0x1, r14}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}]}}, {{0x8, 0x1, r16}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r18}, {0xb0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r19}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xe, 0xd, 0xdd, 0x5}, {0x8, 0x5, 0x8, 0x986}, {0x1, 0x81, 0x5, 0xd82}, {0x2, 0x0, 0x40, 0x3}, {0x7, 0x3, 0x3, 0x4}, {0x8001, 0x4, 0xf, 0xa5f}, {0x3, 0x9, 0xfe, 0x8}]}}}]}}, {{0x8, 0x1, r20}, {0x1c0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r21}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0x9, 0x8, 0xa}, {0x2, 0x10, 0x0, 0x5d6e}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r22}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x7, 0x7, 0x10000}, {0x8, 0x40, 0xa, 0x401}, {0x0, 0x4, 0x5, 0x1}]}}}]}}, {{0x8, 0x1, r23}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}]}}]}, 0x830}, 0x1, 0x0, 0x0, 0x4090}, 0x404c850) 2m47.051566706s ago: executing program 4 (id=5203): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x8c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x70, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x6}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x8c}, 0x1, 0x0, 0x0, 0x401}, 0x4000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 2m46.889404149s ago: executing program 0 (id=5204): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x45, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0xe, 0x81, 0x4, [0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x20]}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000ff000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800090001"], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 1m22.850718127s ago: executing program 32 (id=5204): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x45, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0xe, 0x81, 0x4, [0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x20]}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000ff000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800090001"], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 0s ago: executing program 33 (id=5201): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) ppoll(&(0x7f0000000180)=[{r1, 0x8102}, {r1, 0x8000}], 0x2, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={[0x8]}, 0x8) socketpair(0x1, 0x80000, 0xfb4, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32], 0xfc}}, 0x4000800) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x0, 0x81, 0x8000, 0xfffffff8, 0xff, 0x1, 0x7e, 0x6, 0x0}, &(0x7f00000002c0)=0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000300)={r4, 0x200, 0x4}, 0x8) kernel console output (not intermixed with test programs): ate [ 536.061836][T19896] veth3: entered allmulticast mode [ 536.069200][T19896] veth3: entered promiscuous mode [ 536.078878][T19901] bridge2: port 2(veth0_to_bond) entered blocking state [ 536.109051][T19901] bridge2: port 2(veth0_to_bond) entered disabled state [ 536.135300][T19901] veth0_to_bond: entered allmulticast mode [ 536.143510][T19913] netlink: 'syz.1.3854': attribute type 9 has an invalid length. [ 536.159248][T19901] veth0_to_bond: entered promiscuous mode [ 536.161131][T19915] netlink: 'syz.1.3854': attribute type 9 has an invalid length. [ 536.179204][T19901] bridge2: port 2(veth0_to_bond) entered blocking state [ 536.186404][T19901] bridge2: port 2(veth0_to_bond) entered forwarding state [ 536.236372][ T9375] hsr_slave_0: left promiscuous mode [ 536.245662][ T9375] hsr_slave_1: left promiscuous mode [ 536.262955][ T9375] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 536.286602][ T9375] batman_adv: batadv0: Removing interface: ipvlan2 [ 536.351348][ T9375] veth1_macvtap: left promiscuous mode [ 536.359300][ T9375] veth0_macvtap: left promiscuous mode [ 536.389552][T19924] netlink: 'syz.2.3857': attribute type 3 has an invalid length. [ 537.326434][T19956] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3867'. [ 537.341668][T19953] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3865'. [ 537.578778][T19970] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 537.648261][ T9375] IPVS: stop unused estimator thread 0... [ 537.995922][T19988] 8021q: adding VLAN 0 to HW filter on device bond2 [ 538.177513][T20003] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 538.566098][T20028] syzkaller0: entered promiscuous mode [ 538.572000][T20028] syzkaller0: entered allmulticast mode [ 538.737472][T20034] syzkaller0: entered allmulticast mode [ 539.207761][T20083] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 539.214114][T20083] syzkaller1: linktype set to 823 [ 539.386504][T20092] validate_nla: 2 callbacks suppressed [ 539.386523][T20092] netlink: 'syz.1.3906': attribute type 2 has an invalid length. [ 539.389294][T20094] atomic_op ffff88801d382998 conn xmit_atomic 0000000000000000 [ 539.654763][T12218] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.679100][T12218] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.723866][T20120] netlink: 'syz.2.3912': attribute type 1 has an invalid length. [ 539.793619][T20120] 8021q: adding VLAN 0 to HW filter on device bond3 [ 539.844894][T20118] syzkaller1: entered promiscuous mode [ 539.863539][T20118] syzkaller1: entered allmulticast mode [ 539.948033][T20136] netlink: 'syz.4.3914': attribute type 21 has an invalid length. [ 539.964261][T20136] dvmrp0: entered allmulticast mode [ 542.386239][T20094] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 545.292773][T20166] __nla_validate_parse: 15 callbacks suppressed [ 545.292795][T20166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3926'. [ 545.313855][T20166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3926'. [ 545.538513][T20182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.742838][T20200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3937'. [ 545.828317][T20208] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3941'. [ 546.165870][T20237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3948'. [ 546.208426][T20237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3948'. [ 546.215452][T20236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3949'. [ 546.248797][T20243] vlan2: entered allmulticast mode [ 546.268480][T20236] netlink: 'syz.4.3949': attribute type 21 has an invalid length. [ 546.304261][T20236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3949'. [ 546.563732][T20266] pim6reg: entered allmulticast mode [ 546.606943][T20269] syzkaller1: entered promiscuous mode [ 546.633319][T20275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3958'. [ 546.642633][T20269] syzkaller1: entered allmulticast mode [ 546.664421][T20275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3958'. [ 547.484844][T20303] netlink: 'syz.3.3967': attribute type 3 has an invalid length. [ 548.560567][T20349] IPVS: set_ctl: invalid protocol: 92 10.1.1.1:21 [ 549.068516][T20347] wg1 speed is unknown, defaulting to 1000 [ 549.086868][T20347] lo speed is unknown, defaulting to 1000 [ 549.613975][T20369] syzkaller1: entered promiscuous mode [ 549.649548][T20369] syzkaller1: entered allmulticast mode [ 550.340031][T20389] block nbd0: server does not support multiple connections per device. [ 550.357606][T20394] __nla_validate_parse: 3 callbacks suppressed [ 550.357625][T20394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3987'. [ 550.379492][T20389] block nbd0: shutting down sockets [ 551.221575][T20416] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.229381][T20416] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.369834][T20416] bridge2: port 2(veth0_to_bond) entered disabled state [ 551.418511][T20416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.448379][T20416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.509001][T20416] tipc: Resetting bearer [ 551.598300][T20417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.613944][T20417] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.627452][T20417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.656845][T20417] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.664132][T20417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.674282][T20417] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.681487][T20417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.699528][T20417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.710109][T20417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.727522][T20417] veth1_vlan: left promiscuous mode [ 551.734116][T20417] veth0_vlan: left promiscuous mode [ 551.741518][T20417] veth0_vlan: entered promiscuous mode [ 551.752257][T20417] veth1_vlan: entered promiscuous mode [ 551.763075][T20417] veth1_macvtap: left promiscuous mode [ 551.769442][T20417] veth0_macvtap: left promiscuous mode [ 551.776708][T20417] veth0_macvtap: entered promiscuous mode [ 551.783956][T20417] veth1_macvtap: entered promiscuous mode [ 551.796731][T20417] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 551.805882][T20417] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 551.814527][T20417] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 551.822989][T20417] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 551.831289][T20417] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 551.846939][T20424] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3996'. [ 551.988446][T20447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4000'. [ 552.259687][T20460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4007'. [ 552.287280][T20460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4007'. [ 552.512104][T20477] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4012'. [ 552.544669][T20477] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4012'. [ 552.581610][T20477] netlink: 'syz.1.4012': attribute type 6 has an invalid length. [ 552.607703][T20477] netlink: 'syz.1.4012': attribute type 5 has an invalid length. [ 552.629524][T20477] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4012'. [ 552.638665][T20490] Cannot find set identified by id 65534 to match [ 552.733454][T20495] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4015'. [ 555.269535][T20518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4022'. [ 555.431447][T20530] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4024'. [ 555.461632][T20522] veth5: entered allmulticast mode [ 556.104906][T20564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4036'. [ 556.215640][T20569] xt_cluster: node mask cannot exceed total number of nodes [ 556.264441][T20573] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4041'. [ 556.300258][T20574] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4041'. [ 556.317123][T20573] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4041'. [ 556.324451][T20578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.338773][T20574] netlink: 'syz.1.4041': attribute type 14 has an invalid length. [ 556.524609][T20583] netlink: 'syz.2.4044': attribute type 1 has an invalid length. [ 556.672600][T20588] netlink: 'syz.1.4046': attribute type 10 has an invalid length. [ 556.771567][T20601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4047'. [ 556.792003][T20597] syzkaller0: entered promiscuous mode [ 556.811144][T20597] syzkaller0: entered allmulticast mode [ 556.923948][T20606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4051'. [ 557.461757][T20591] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 557.491471][T20620] netlink: 'syz.2.4055': attribute type 1 has an invalid length. [ 557.542574][T20620] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4055'. [ 557.571436][T20620] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4055'. [ 558.278704][T20658] tun0: tun_chr_ioctl cmd 2147767511 [ 558.599148][T20672] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 558.606488][T20672] IPv6: NLM_F_CREATE should be set when creating new route [ 558.646108][T20672] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4080'. [ 558.767166][T20684] netlink: 'syz.1.4086': attribute type 4 has an invalid length. [ 559.355215][T20718] bridge0: port 2(bridge_slave_1) entered listening state [ 559.377198][T20718] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.650142][T20733] netlink: 'syz.4.4108': attribute type 1 has an invalid length. [ 559.910547][T20744] bond1: (slave bridge1): making interface the new active one [ 559.942264][T20744] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 560.835628][T20794] __nla_validate_parse: 4 callbacks suppressed [ 560.835650][T20794] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.4134'. [ 561.238576][T20814] ipvlan3: entered promiscuous mode [ 561.248129][T20814] team0: Device ipvlan3 failed to register rx_handler [ 561.366641][T20820] syzkaller0: entered promiscuous mode [ 561.389088][T20820] syzkaller0: entered allmulticast mode [ 562.034359][T20865] bridge2: entered promiscuous mode [ 562.084978][T20869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4169'. [ 562.128209][T20872] netlink: 'syz.1.4171': attribute type 17 has an invalid length. [ 562.432175][T20891] syzkaller0: entered promiscuous mode [ 562.440651][T20891] syzkaller0: entered allmulticast mode [ 562.500828][T20895] netlink: 'syz.0.4182': attribute type 3 has an invalid length. [ 562.774807][T20910] sctp: [Deprecated]: syz.4.4188 (pid 20910) Use of struct sctp_assoc_value in delayed_ack socket option. [ 562.774807][T20910] Use struct sctp_sack_info instead [ 563.389242][T20943] syzkaller0: entered promiscuous mode [ 563.397497][T20943] syzkaller0: entered allmulticast mode [ 563.725025][T20967] tipc: Started in network mode [ 563.736712][T20967] tipc: Node identity 7f, cluster identity 4 [ 563.748186][T20967] tipc: Node number set to 127 [ 563.796562][T20971] x_tables: duplicate underflow at hook 2 [ 563.910367][T20975] tipc: Enabled bearer , priority 0 [ 563.918471][T20977] syzkaller0: entered promiscuous mode [ 563.925742][T20977] syzkaller0: entered allmulticast mode [ 563.938385][T20975] tipc: Resetting bearer [ 563.964852][T20974] tipc: Disabling bearer [ 564.925760][T21037] syzkaller0: entered promiscuous mode [ 564.934337][T21037] syzkaller0: entered allmulticast mode [ 565.039098][T21040] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 565.062936][T21044] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4245'. [ 565.348913][T21057] syzkaller0: entered promiscuous mode [ 565.375450][T21057] syzkaller0: entered allmulticast mode [ 565.543749][T21069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4257'. [ 566.169414][T21106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4269'. [ 566.612254][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.802275][T21137] syzkaller0: entered promiscuous mode [ 566.821391][T21137] syzkaller0: entered allmulticast mode [ 566.964631][T21151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4282'. [ 567.545862][T21184] netlink: 292 bytes leftover after parsing attributes in process `syz.4.4298'. [ 567.580505][T21184] netlink: 292 bytes leftover after parsing attributes in process `syz.4.4298'. [ 567.632963][T21191] syzkaller0: entered promiscuous mode [ 567.639032][T21191] syzkaller0: entered allmulticast mode [ 567.689481][T21190] pimreg9: entered allmulticast mode [ 568.032122][T21212] pimreg: entered allmulticast mode [ 568.059498][T21212] veth1_to_bond: entered allmulticast mode [ 568.082198][T21212] pimreg: left allmulticast mode [ 568.182198][T21220] syzkaller0: entered promiscuous mode [ 568.188321][T21220] syzkaller0: entered allmulticast mode [ 568.210561][T21211] veth1_to_bond: left allmulticast mode [ 568.256196][T21223] pimreg9: entered allmulticast mode [ 568.459577][T21235] syzkaller0: entered promiscuous mode [ 568.481270][T21235] syzkaller0: entered allmulticast mode [ 568.674055][T21252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4327'. [ 568.918224][T21267] syzkaller0: entered promiscuous mode [ 568.927255][T21267] syzkaller0: entered allmulticast mode [ 569.029638][T21270] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4335'. [ 569.054975][T21270] netlink: 'syz.2.4335': attribute type 1 has an invalid length. [ 569.075324][T21270] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4335'. [ 569.141793][T21277] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4338'. [ 569.480636][T21301] openvswitch: netlink: IP tunnel dst address not specified [ 569.544409][T21307] syzkaller0: entered promiscuous mode [ 569.551864][T21307] syzkaller0: entered allmulticast mode [ 572.315143][T21289] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 572.328902][T21302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4346'. [ 572.533753][T21330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4361'. [ 572.549205][T21335] syzkaller0: entered promiscuous mode [ 572.559848][T21335] syzkaller0: entered allmulticast mode [ 572.582236][T21330] block nbd0: shutting down sockets [ 572.881365][T21354] syzkaller0: entered promiscuous mode [ 572.887119][T21354] syzkaller0: entered allmulticast mode [ 573.249644][T21372] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4376'. [ 573.296365][T21373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4377'. [ 573.423057][T21380] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4380'. [ 574.150717][T21423] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4395'. [ 574.256808][T21429] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4398'. [ 574.503944][ T7325] IPVS: starting estimator thread 0... [ 574.511284][T21445] IPVS: rr: FWM 3 0x00000003 - no destination available [ 574.600994][T21446] IPVS: using max 34 ests per chain, 81600 per kthread [ 575.555490][T21494] ieee802154 phy1 wpan1: encryption failed: -90 [ 575.618303][T21497] syzkaller0: entered promiscuous mode [ 575.643052][T21497] syzkaller0: entered allmulticast mode [ 575.665708][T21497] xt_CT: You must specify a L4 protocol and not use inversions on it [ 575.794564][T21506] netlink: 'syz.4.4431': attribute type 83 has an invalid length. [ 575.943637][T21514] syzkaller0: entered promiscuous mode [ 575.953628][T21519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4434'. [ 575.956609][T21514] syzkaller0: entered allmulticast mode [ 575.985931][T21521] netlink: 'syz.4.4435': attribute type 1 has an invalid length. [ 575.995242][T21522] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4433'. [ 576.006178][T21522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4433'. [ 576.111441][T21530] netlink: 'syz.0.4433': attribute type 39 has an invalid length. [ 576.245206][T21521] 8021q: adding VLAN 0 to HW filter on device bond2 [ 576.273707][T21527] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 576.754983][T21548] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 576.858451][T21555] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 576.938408][ T7317] hsr0: entered promiscuous mode [ 577.049996][T21565] syzkaller0: entered promiscuous mode [ 577.055525][T21565] syzkaller0: entered allmulticast mode [ 577.756552][T21615] __nla_validate_parse: 69 callbacks suppressed [ 577.756574][T21615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4460'. [ 577.862941][T21622] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 577.915315][T21622] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 577.928269][T21622] gretap1: entered promiscuous mode [ 577.939465][T21622] gretap1: entered allmulticast mode [ 578.138048][T21636] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4469'. [ 578.153153][T21636] netlink: ct family unspecified [ 578.177720][T21633] syzkaller0: entered promiscuous mode [ 578.184087][T21633] syzkaller0: entered allmulticast mode [ 578.205635][T21636] netlink: 'syz.1.4469': attribute type 58 has an invalid length. [ 578.216667][T21636] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4469'. [ 578.278534][T21645] netlink: 'syz.3.4473': attribute type 10 has an invalid length. [ 578.396642][T21645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.404435][T21645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.413276][T21645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.420853][T21645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.443855][T21649] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4474'. [ 578.506729][T21651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4475'. [ 578.658477][T21662] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4480'. [ 578.679579][T21662] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4480'. [ 578.715027][T21661] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 578.771556][T21665] netlink: 'syz.1.4481': attribute type 1 has an invalid length. [ 578.813321][T21667] netlink: 412 bytes leftover after parsing attributes in process `syz.4.4482'. [ 578.865999][T21667] netlink: 'syz.4.4482': attribute type 1 has an invalid length. [ 578.953810][T21675] syzkaller0: entered promiscuous mode [ 578.959630][T21675] syzkaller0: entered allmulticast mode [ 579.129092][T21690] netlink: 'syz.1.4486': attribute type 2 has an invalid length. [ 579.152308][T21689] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.4488'. [ 579.175224][T21690] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4486'. [ 579.188096][T21689] netlink: Unknown conntrack attr (type=2304, max=9) [ 579.419435][T21703] openvswitch: netlink: Flow actions attr not present in new flow. [ 579.435850][T21703] ip_vti0: entered allmulticast mode [ 582.188175][T21693] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 582.392838][T21733] nbd: socks must be embedded in a SOCK_ITEM attr [ 582.401986][T21733] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 582.747310][T21757] openvswitch: netlink: Message has 4 unknown bytes. [ 582.850598][T21767] __nla_validate_parse: 4 callbacks suppressed [ 582.850618][T21767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4512'. [ 583.002697][T21776] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 583.199262][T21783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4517'. [ 583.336651][T21787] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4519'. [ 583.372211][T21785] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 583.382339][T21787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4519'. [ 583.563008][ T7314] IPVS: starting estimator thread 0... [ 583.607455][T21805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4524'. [ 583.670759][T21803] IPVS: using max 30 ests per chain, 72000 per kthread [ 583.894040][T21823] ieee802154 phy1 wpan1: encryption failed: -22 [ 583.902667][T21826] sctp: [Deprecated]: syz.1.4531 (pid 21826) Use of struct sctp_assoc_value in delayed_ack socket option. [ 583.902667][T21826] Use struct sctp_sack_info instead [ 584.241693][T21844] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4537'. [ 584.498002][ T1119] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 584.543499][T21861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4542'. [ 584.571040][T21867] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4543'. [ 584.619194][T21853] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20004 [ 584.993288][T21887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4550'. [ 585.091669][T21893] syzkaller0: entered promiscuous mode [ 585.105077][T21893] syzkaller0: entered allmulticast mode [ 585.406029][T21915] netlink: 'syz.2.4562': attribute type 1 has an invalid length. [ 585.457870][T21921] FAULT_INJECTION: forcing a failure. [ 585.457870][T21921] name failslab, interval 1, probability 0, space 0, times 0 [ 585.470835][T21921] CPU: 0 UID: 0 PID: 21921 Comm: syz.0.4563 Not tainted syzkaller #0 PREEMPT(full) [ 585.470860][T21921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 585.470872][T21921] Call Trace: [ 585.470882][T21921] [ 585.470891][T21921] dump_stack_lvl+0xe8/0x150 [ 585.470927][T21921] should_fail_ex+0x412/0x560 [ 585.471039][T21921] should_failslab+0xa8/0x100 [ 585.471072][T21921] __kmalloc_noprof+0xe8/0x760 [ 585.471099][T21921] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 585.471135][T21921] tomoyo_realpath_from_path+0xe3/0x5d0 [ 585.471171][T21921] ? tomoyo_domain+0xd7/0x130 [ 585.471203][T21921] ? tomoyo_path_number_perm+0x219/0x630 [ 585.471226][T21921] tomoyo_path_number_perm+0x246/0x630 [ 585.471251][T21921] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 585.471273][T21921] ? __lock_acquire+0x6b5/0x2cf0 [ 585.471319][T21921] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 585.471361][T21921] ? __fget_files+0x2a/0x420 [ 585.471387][T21921] ? __fget_files+0x2a/0x420 [ 585.471405][T21921] ? __fget_files+0x3a0/0x420 [ 585.471423][T21921] ? __fget_files+0x2a/0x420 [ 585.471447][T21921] security_file_ioctl+0xc3/0x2a0 [ 585.471470][T21921] __se_sys_ioctl+0x47/0x170 [ 585.471494][T21921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.471516][T21921] do_syscall_64+0x15f/0xf80 [ 585.471541][T21921] ? trace_irq_disable+0x3b/0x140 [ 585.471570][T21921] ? clear_bhb_loop+0x40/0x90 [ 585.471591][T21921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.471607][T21921] RIP: 0033:0x7f9342d9ce59 [ 585.471624][T21921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.471640][T21921] RSP: 002b:00007f9343bbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.471661][T21921] RAX: ffffffffffffffda RBX: 00007f9343015fa0 RCX: 00007f9342d9ce59 [ 585.471673][T21921] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000004 [ 585.471682][T21921] RBP: 00007f9343bbc090 R08: 0000000000000000 R09: 0000000000000000 [ 585.471692][T21921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.471702][T21921] R13: 00007f9343016038 R14: 00007f9343015fa0 R15: 00007ffc0bf1ceb8 [ 585.471732][T21921] [ 585.471740][T21921] ERROR: Out of memory at tomoyo_realpath_from_path. [ 585.712113][T21927] bond4: (slave gretap2): making interface the new active one [ 585.740514][T21927] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 585.786181][T21934] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 585.816661][T21934] ieee802154 phy1 wpan1: encryption failed: -22 [ 585.823269][T21915] bond4: (slave bridge3): Enslaving as an active interface with a down link [ 585.844153][T21932] macvlan2: entered promiscuous mode [ 585.849671][T21932] macvlan2: entered allmulticast mode [ 585.858110][T21932] bond4: entered promiscuous mode [ 585.864472][T21932] gretap2: entered promiscuous mode [ 585.875131][T21932] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 585.884432][T21932] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 585.901781][T21932] bond4: left promiscuous mode [ 585.906672][T21932] gretap2: left promiscuous mode [ 585.912295][T21941] netlink: 'syz.4.4569': attribute type 1 has an invalid length. [ 585.930535][T21937] bridge0: port 3(veth1_to_bridge) entered blocking state [ 585.937997][T21937] bridge0: port 3(veth1_to_bridge) entered disabled state [ 585.945632][T21937] veth1_to_bridge: entered allmulticast mode [ 585.953808][T21937] veth1_to_bridge: entered promiscuous mode [ 585.970167][T21937] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 585.985960][T21937] bridge0: port 3(veth1_to_bridge) entered blocking state [ 585.993310][T21937] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 586.016334][T21945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4569'. [ 586.127279][T21941] bond3: entered promiscuous mode [ 586.162612][T21941] bond3: entered allmulticast mode [ 586.187164][T21941] 8021q: adding VLAN 0 to HW filter on device bond3 [ 586.284164][T21945] macvlan2: entered promiscuous mode [ 586.299245][T21945] macvlan2: entered allmulticast mode [ 586.349612][T21954] syzkaller0: entered promiscuous mode [ 586.364892][T21954] syzkaller0: entered allmulticast mode [ 586.460764][T21968] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 586.695296][T21984] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.675982][T21984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 589.692398][T22008] netlink: 'syz.1.4586': attribute type 11 has an invalid length. [ 589.731234][T22008] netlink: 'syz.1.4586': attribute type 11 has an invalid length. [ 589.758909][T22008] __nla_validate_parse: 2 callbacks suppressed [ 589.758928][T22008] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4586'. [ 589.903172][T22011] syzkaller0: entered promiscuous mode [ 589.917493][T22011] syzkaller0: entered allmulticast mode [ 589.959416][T22018] netlink: 'syz.1.4591': attribute type 12 has an invalid length. [ 589.972857][T22018] netlink: 'syz.1.4591': attribute type 29 has an invalid length. [ 589.981495][T22018] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4591'. [ 589.991409][T22018] netlink: 59 bytes leftover after parsing attributes in process `syz.1.4591'. [ 590.051484][T22014] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 590.085223][T22014] bond2: (slave lo): Enslaving as an active interface with an up link [ 590.101367][T22014] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 590.184741][T22035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4595'. [ 590.264613][T22027] syzkaller0: entered promiscuous mode [ 590.270550][T22027] syzkaller0: entered allmulticast mode [ 590.464295][T22042] bond3: entered promiscuous mode [ 590.540440][T22058] netlink: 'syz.4.4600': attribute type 12 has an invalid length. [ 590.548520][T22058] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.4600'. [ 591.014821][T22076] syzkaller0: entered promiscuous mode [ 591.020911][T22076] syzkaller0: entered allmulticast mode [ 591.447297][T22093] syzkaller0: entered promiscuous mode [ 591.468747][T22093] syzkaller0: entered allmulticast mode [ 591.603342][T22103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4613'. [ 591.630453][T22106] netlink: 'syz.3.4614': attribute type 2 has an invalid length. [ 591.856733][T22116] syzkaller0: entered promiscuous mode [ 591.878080][T22116] syzkaller0: entered allmulticast mode [ 592.201354][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 592.370843][T22138] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4626'. [ 592.431377][T22142] syzkaller0: entered promiscuous mode [ 592.443754][T22142] syzkaller0: entered allmulticast mode [ 592.554027][T22145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 592.937174][T22159] syzkaller0: entered promiscuous mode [ 592.943238][T22159] syzkaller0: entered allmulticast mode [ 592.952397][T22166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4636'. [ 595.861680][T22166] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 595.894419][T22180] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4639'. [ 595.922080][T22188] syzkaller0: entered promiscuous mode [ 595.939435][T22188] syzkaller0: entered allmulticast mode [ 596.081697][T22204] netlink: 'syz.3.4642': attribute type 1 has an invalid length. [ 596.128372][T22208] netlink: 'syz.0.4644': attribute type 1 has an invalid length. [ 596.159725][T22208] 8021q: adding VLAN 0 to HW filter on device bond4 [ 596.197512][T22184] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 596.220212][T22208] bond4: (slave veth0_to_bond): making interface the new active one [ 596.248174][T22208] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 596.362927][T22208] bond4: (slave veth5): Enslaving as an active interface with a down link [ 596.477205][T22226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4648'. [ 596.562769][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.574984][T22226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4648'. [ 596.589040][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.614556][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.630890][T22235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4651'. [ 596.658877][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.705522][T22241] x_tables: unsorted underflow at hook 4 [ 596.713133][T22242] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 596.741942][T22235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.817846][T22237] syzkaller0: entered promiscuous mode [ 596.823979][T22237] syzkaller0: entered allmulticast mode [ 596.829712][T22250] netlink: zone id is out of range [ 596.839048][T22250] netlink: zone id is out of range [ 596.844593][T22250] netlink: zone id is out of range [ 596.851489][T22250] netlink: zone id is out of range [ 596.863535][T22250] netlink: zone id is out of range [ 596.870884][T22250] netlink: zone id is out of range [ 596.876150][T22250] netlink: zone id is out of range [ 596.881676][T22250] netlink: zone id is out of range [ 596.900569][T22250] netlink: zone id is out of range [ 599.652310][T22252] syzkaller0: entered promiscuous mode [ 599.657946][T22252] syzkaller0: entered allmulticast mode [ 599.925895][T22286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4667'. [ 600.017016][T22298] netlink: 'syz.1.4664': attribute type 2 has an invalid length. [ 600.017994][T22288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4665'. [ 600.025691][T22298] netlink: 'syz.1.4664': attribute type 8 has an invalid length. [ 600.049495][T22298] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4664'. [ 600.092012][T22296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4665'. [ 600.184744][T22297] bridge_slave_0: left allmulticast mode [ 600.213056][T22309] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 600.233088][T22297] bridge_slave_0: left promiscuous mode [ 600.264235][T22297] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.281979][T22297] bridge_slave_1: left allmulticast mode [ 600.288135][T22297] bridge_slave_1: left promiscuous mode [ 600.295675][T22297] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.306677][T22297] bond4: (slave veth0_to_bond): Releasing active interface [ 600.315106][T22297] bond4: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 600.336577][T22297] bond0: (slave bond_slave_0): Releasing backup interface [ 600.347154][T22297] bond0: (slave bond_slave_1): Releasing backup interface [ 600.358795][T22320] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4671'. [ 600.375235][T22297] team0: Port device team_slave_0 removed [ 600.385727][T22297] team0: Port device team_slave_1 removed [ 600.438193][ T7314] wg1 speed is unknown, defaulting to 1000 [ 600.716967][T22330] syzkaller0: entered promiscuous mode [ 600.725068][T22336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4675'. [ 600.725217][T22330] syzkaller0: entered allmulticast mode [ 601.393527][T22360] netlink: 'syz.1.4680': attribute type 1 has an invalid length. [ 603.872662][T22366] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 603.932141][T22369] xt_TCPMSS: Only works on TCP SYN packets [ 603.963315][T22366] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4682'. [ 604.021933][T22367] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4682'. [ 604.066967][T22360] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.100129][T22360] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.243594][T22367] bond6 (unregistering): Released all slaves [ 604.286976][T22385] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 604.403824][T22360] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.429623][T22360] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.439396][T22393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4691'. [ 604.529081][T22399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4692'. [ 604.546710][T22395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4690'. [ 604.562219][T22395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4690'. [ 604.573491][T22400] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.4689'. [ 604.584489][T22395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4690'. [ 604.620370][T22400] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 604.697427][T22400] 0ªX¹¦Dö»: entered allmulticast mode [ 604.728606][T22407] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4695'. [ 604.791316][T22360] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.804586][T22360] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.907442][T22405] syzkaller0: entered promiscuous mode [ 604.930014][T22405] syzkaller0: entered allmulticast mode [ 607.379143][T22396] wg1 speed is unknown, defaulting to 1000 [ 607.392022][T22396] lo speed is unknown, defaulting to 1000 [ 607.496516][T22360] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.520479][T22360] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.785490][ T9375] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.796909][ T9375] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.832179][T22438] netlink: 'syz.4.4702': attribute type 1 has an invalid length. [ 607.942304][T22441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4703'. [ 607.981308][ T9378] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.998219][ T9378] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.132672][ T9378] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.143728][ T9378] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.253690][ T9378] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.265089][ T9378] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.529000][T22457] bond5: Removing last ns target with arp_interval on [ 608.647162][T22462] syzkaller0: entered promiscuous mode [ 608.657296][T22462] syzkaller0: entered allmulticast mode [ 612.260947][T22498] __nla_validate_parse: 2 callbacks suppressed [ 612.260967][T22498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4725'. [ 612.276792][T22498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4725'. [ 612.408140][T22505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4727'. [ 612.607151][T22517] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4731'. [ 612.713446][T22530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4731'. [ 612.829464][T22536] netlink: 'syz.0.4736': attribute type 1 has an invalid length. [ 612.858807][T22529] syzkaller0: entered promiscuous mode [ 612.865437][T22529] syzkaller0: entered allmulticast mode [ 612.955177][T22536] bond6: entered promiscuous mode [ 612.968075][T22536] 8021q: adding VLAN 0 to HW filter on device bond6 [ 613.112858][ T30] audit: type=1107 audit(1779448906.852:16): pid=22552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<<„ZÜéaöyÛDI#ä÷…ŠK)ŸHyIKÕš>Yâå2€úÇópª…÷\{ñxüÊBÌÓãøŸìÇØ~ÿ(˜ëAž( )•Ú¯¶æfõø«ÉB3ÕÆ@ýÂòÚcˆx€´ûtfÁ•‡½«ßw¾Þš΂ޡWqe¦Õ«‡)”z·0k°¥ø3*E Giš\°ö1àçIÄwŒ^Ñ…Ç@µÐ^bëYÕ)ïB·Ú:Ê€–r28&}58|&j×GDm“KÒwsœòOÎê¿iÜl«iÎ „èUËýôªÅÀ)#GÁyv29¹Ó ÏuTFi ð½‡' [ 615.792883][T22558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4741'. [ 615.818714][T22560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4742'. [ 615.926626][T22564] block nbd3: not configured, cannot reconfigure [ 615.944052][T22566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4745'. [ 615.969064][T22567] netlink: 'syz.2.4743': attribute type 6 has an invalid length. [ 616.002610][T22571] netlink: 'syz.0.4746': attribute type 1 has an invalid length. [ 616.069359][T22571] 8021q: adding VLAN 0 to HW filter on device bond7 [ 616.087518][T22570] netlink: 'syz.1.4747': attribute type 29 has an invalid length. [ 616.143156][T22570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4747'. [ 616.416830][T22591] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4752'. [ 616.441414][T22567] bond6 (unregistering): Released all slaves [ 617.316467][T22638] __nla_validate_parse: 2 callbacks suppressed [ 617.316487][T22638] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4765'. [ 617.444564][T22650] tipc: Started in network mode [ 617.449649][T22650] tipc: Node identity ac14140f, cluster identity 4711 [ 617.458788][T22650] tipc: New replicast peer: 255.255.255.255 [ 617.469053][T22650] tipc: Enabled bearer , priority 10 [ 617.498767][T22642] net_ratelimit: 113 callbacks suppressed [ 617.498810][T22642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.655900][T22664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4773'. [ 617.676217][T22663] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 617.888676][T22681] netlink: 'syz.1.4781': attribute type 1 has an invalid length. [ 617.896995][T22681] netlink: 'syz.1.4781': attribute type 1 has an invalid length. [ 617.905847][T22681] netlink: 'syz.1.4781': attribute type 1 has an invalid length. [ 617.914848][T22681] netlink: 'syz.1.4781': attribute type 2 has an invalid length. [ 617.923494][T22681] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4781'. [ 617.934223][T22683] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 618.221732][ T30] audit: type=1800 audit(1779448911.952:17): pid=22706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4789" name="memory.events" dev="tmpfs" ino=1432 res=0 errno=0 [ 618.222700][T22704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4788'. [ 618.266748][ T30] audit: type=1804 audit(1779448911.992:18): pid=22706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4789" name="/newroot/279/memory.events" dev="tmpfs" ino=1432 res=1 errno=0 [ 618.525839][T22717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 618.540479][ T7328] tipc: Node number set to 2886997007 [ 618.843511][T22737] netlink: 'syz.4.4799': attribute type 1 has an invalid length. [ 618.898067][T22742] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4801'. [ 618.907535][T22737] 8021q: adding VLAN 0 to HW filter on device bond4 [ 618.937860][T22742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4801'. [ 618.997371][T22737] bond4: (slave ip6gretap1): making interface the new active one [ 619.033580][T22737] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 619.271965][T22764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4804'. [ 619.445636][T22772] netlink: 'syz.1.4806': attribute type 1 has an invalid length. [ 619.487185][T22772] netlink: 'syz.1.4806': attribute type 4 has an invalid length. [ 619.519976][T22772] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4806'. [ 619.676659][T22780] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 619.891651][T22800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4814'. [ 620.076041][T22807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4816'. [ 620.506071][T22836] tipc: Invalid UDP bearer configuration [ 620.506143][T22836] tipc: Enabling of bearer rejected, failed to enable media [ 621.386217][T22857] ip6tnl3: entered promiscuous mode [ 621.442210][ T9360] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 621.469582][ T9360] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 621.479501][ T7325] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 621.990978][ T7325] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 622.360085][ T7328] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 622.554502][T22960] __nla_validate_parse: 6 callbacks suppressed [ 622.554522][T22960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4855'. [ 622.561867][T22959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4855'. [ 622.638680][T22960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 622.714840][T22966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4857'. [ 622.954756][T22978] tipc: Enabling of bearer rejected, failed to enable media [ 623.025103][T22985] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 623.056548][T22988] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4864'. [ 623.095020][T22988] 0·: renamed from hsr0 (while UP) [ 623.105700][T22988] 0·: entered allmulticast mode [ 623.112386][T22988] hsr_slave_0: entered allmulticast mode [ 623.122915][T22988] hsr_slave_1: entered allmulticast mode [ 623.132467][T22988] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 623.162106][T22982] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 623.344223][T23001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4869'. [ 623.412589][T23003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4869'. [ 623.618665][T23010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4872'. [ 623.706885][T23012] sch_tbf: peakrate 5120 is lower than or equals to rate 131077 ! [ 624.007756][T23042] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4881'. [ 624.173083][T23045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4882'. [ 624.457749][T23062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4887'. [ 624.497248][T23062] bond0: entered promiscuous mode [ 624.510579][T23062] bond_slave_0: entered promiscuous mode [ 624.533968][T23062] bond_slave_1: entered promiscuous mode [ 624.556286][T23062] bond0: left promiscuous mode [ 624.569972][T23062] bond_slave_0: left promiscuous mode [ 624.583569][T23062] bond_slave_1: left promiscuous mode [ 624.629619][T23072] xt_TCPMSS: Only works on TCP SYN packets [ 625.074869][T23097] syzkaller0: entered promiscuous mode [ 625.080855][T23097] syzkaller0: entered allmulticast mode [ 625.367717][T23118] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 625.387351][T23119] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 625.480020][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 625.663870][T23134] netlink: 'syz.4.4913': attribute type 3 has an invalid length. [ 625.674084][T23134] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 625.807705][T23143] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 625.830944][T23146] --map-set only usable from mangle table [ 625.847847][T23143] bond5: (slave lo): Enslaving as an active interface with an up link [ 625.894417][T23143] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 626.654650][T23209] rdma_rxe: rxe_newlink: failed to add wg0 [ 626.859615][T23223] netlink: 'syz.3.4943': attribute type 6 has an invalid length. [ 626.928320][T23223] pim6reg527: entered allmulticast mode [ 627.188490][T23241] netlink: 'syz.2.4947': attribute type 1 has an invalid length. [ 627.377979][T23255] syzkaller1: entered promiscuous mode [ 627.397905][T23255] syzkaller1: entered allmulticast mode [ 627.954560][T23286] __nla_validate_parse: 14 callbacks suppressed [ 627.954583][T23286] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4957'. [ 628.018495][T23290] netlink: 'syz.2.4959': attribute type 24 has an invalid length. [ 628.044156][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.084759][T23286] veth3: entered allmulticast mode [ 628.098713][T23288] syzkaller0: entered promiscuous mode [ 628.111564][T23288] syzkaller0: entered allmulticast mode [ 628.136771][T23288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4958'. [ 628.319398][T23298] : entered promiscuous mode [ 628.453554][T23311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4965'. [ 628.483851][T23311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4965'. [ 628.571808][T23311] bridge4: port 1(vlan2) entered blocking state [ 628.578432][T23311] bridge4: port 1(vlan2) entered disabled state [ 628.585819][T23311] vlan2: entered allmulticast mode [ 628.602419][T23311] bridge4: entered allmulticast mode [ 628.621075][T23311] vlan2: left allmulticast mode [ 628.626525][T23311] bridge4: left allmulticast mode [ 628.894093][T23340] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.4970'. [ 628.937177][T23340] openvswitch: netlink: Message has 6 unknown bytes. [ 629.451123][ T30] audit: type=1804 audit(1779448923.192:19): pid=23369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4978" name="/newroot/386/cgroup.controllers" dev="tmpfs" ino=1963 res=1 errno=0 [ 629.482858][ T30] audit: type=1800 audit(1779448923.192:20): pid=23369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4978" name="cgroup.controllers" dev="tmpfs" ino=1963 res=0 errno=0 [ 629.604957][T23375] netlink: 'syz.2.4980': attribute type 8 has an invalid length. [ 629.705313][T23387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4981'. [ 630.665501][T23438] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 630.694029][T23438] bond5 (unregistering): Released all slaves [ 630.929415][T23466] netlink: 'syz.1.4995': attribute type 29 has an invalid length. [ 630.947691][T23465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4994'. [ 630.971358][T23466] netlink: 'syz.1.4995': attribute type 29 has an invalid length. [ 630.986279][T23469] sctp: [Deprecated]: syz.3.4996 (pid 23469) Use of struct sctp_assoc_value in delayed_ack socket option. [ 630.986279][T23469] Use struct sctp_sack_info instead [ 631.167001][T23478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5000'. [ 631.201401][T23478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5000'. [ 631.424171][T23495] block nbd0: server does not support multiple connections per device. [ 631.447964][T23495] block nbd0: shutting down sockets [ 631.525112][T23509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5006'. [ 631.619639][T23509] bond6 (unregistering): Released all slaves [ 631.873511][T23524] syzkaller0: entered promiscuous mode [ 631.889570][T23524] syzkaller0: entered allmulticast mode [ 631.955985][T23524] tipc: Enabled bearer , priority 0 [ 631.971851][T23523] tipc: Resetting bearer [ 632.022348][T23523] tipc: Disabling bearer [ 632.409481][T23558] bond0: entered promiscuous mode [ 632.424370][T23558] bond_slave_0: entered promiscuous mode [ 632.451454][T23558] bond_slave_1: entered promiscuous mode [ 632.546089][T23570] sctp: [Deprecated]: syz.3.5024 (pid 23570) Use of int in maxseg socket option. [ 632.546089][T23570] Use struct sctp_assoc_value instead [ 632.572896][T23569] syzkaller0: entered promiscuous mode [ 632.600161][T23569] syzkaller0: entered allmulticast mode [ 632.614026][T23570] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20001 [ 633.039296][T23583] __nla_validate_parse: 9 callbacks suppressed [ 633.039317][T23583] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5029'. [ 633.221130][T23607] vlan4: entered allmulticast mode [ 633.279159][T23583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.327796][T23583] bond_slave_0: left promiscuous mode [ 633.340890][T23583] bond_slave_0: left allmulticast mode [ 633.357669][T23583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.370094][T23583] bond_slave_1: left promiscuous mode [ 633.376266][T23583] bond_slave_1: left allmulticast mode [ 633.384080][T23583] bond0 (unregistering): Released all slaves [ 633.395071][T23615] lo: entered allmulticast mode [ 633.429222][T23615] lo: left allmulticast mode [ 633.778642][T23648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5044'. [ 633.799966][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 633.972430][T23658] netlink: 1024 bytes leftover after parsing attributes in process `syz.3.5046'. [ 634.063496][T23661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5047'. [ 634.129738][T23664] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 634.238999][T23664] bond6 (unregistering): Released all slaves [ 634.636071][T23679] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5050'. [ 634.762308][T23661] 8021q: adding VLAN 0 to HW filter on device bond8 [ 635.063738][T23681] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5048'. [ 635.077953][T23681] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5048'. [ 635.091148][T23681] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5048'. [ 635.927584][T23724] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 636.101396][T23728] netlink: 'syz.0.5065': attribute type 1 has an invalid length. [ 636.149665][T23728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 636.157058][T23728] IPv6: NLM_F_CREATE should be set when creating new route [ 636.196625][T23732] x_tables: unsorted entry at hook 1 [ 636.237542][T23735] netlink: 'syz.0.5065': attribute type 1 has an invalid length. [ 636.285111][T23735] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 636.793686][T23738] netlink: 'syz.4.5068': attribute type 21 has an invalid length. [ 637.144783][T23738] bond0: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 637.357500][T23738] bond0 (unregistering): Released all slaves [ 637.977349][T23762] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 638.008077][T23762] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 638.074978][T23774] netlink: 412 bytes leftover after parsing attributes in process `syz.3.5078'. [ 638.396260][T23780] netlink: 'syz.3.5080': attribute type 1 has an invalid length. [ 638.408338][T23780] netlink: 'syz.3.5080': attribute type 1 has an invalid length. [ 638.522021][T23780] bond7: entered promiscuous mode [ 638.528053][T23780] 8021q: adding VLAN 0 to HW filter on device bond7 [ 638.559178][T23784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5079'. [ 638.658144][T23783] bond7: (slave bridge4): making interface the new active one [ 638.668303][T23783] bridge4: entered promiscuous mode [ 638.681174][T23783] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 638.719238][T23788] veth1_macvtap: left promiscuous mode [ 638.732908][T23788] macsec0: entered promiscuous mode [ 638.748550][T23788] macsec0: entered allmulticast mode [ 638.783575][T23784] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 638.786612][T23790] veth1_macvtap: entered promiscuous mode [ 638.902143][T23790] veth1_macvtap: entered allmulticast mode [ 638.947627][T23790] macsec0: left promiscuous mode [ 638.966765][T23790] macsec0: left allmulticast mode [ 638.984779][T23790] veth1_macvtap: left allmulticast mode [ 639.372296][T23806] geneve2: entered promiscuous mode [ 639.395399][T23806] geneve2: entered allmulticast mode [ 639.424797][ T57] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 639.447831][ T57] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 639.467043][ T57] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 639.484407][ T57] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 639.757138][T23821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5090'. [ 640.385854][T23840] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5092'. [ 640.974936][T23862] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5098'. [ 641.062057][T23861] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 641.568227][T23880] syzkaller0: entered promiscuous mode [ 641.583831][T23880] syzkaller0: entered allmulticast mode [ 641.749911][T23861] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 642.922854][T23913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5108'. [ 649.015843][ C0] sched: DL replenish lagged too much [ 649.195022][T23913] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 649.327378][T23916] bond0 (unregistering): Released all slaves [ 650.440124][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 650.933977][T23939] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5112'. [ 651.354454][T23945] bond9: option resend_igmp: invalid value (32767) [ 651.402918][T23945] bond9: option resend_igmp: allowed values 0 - 255 [ 651.484842][T23945] bond9 (unregistering): Released all slaves [ 651.786821][T23957] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5117'. [ 653.916205][T24015] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5127'. [ 654.375296][T24028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5131'. [ 654.441277][T24028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5131'. [ 654.637210][T24043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5134'. [ 656.496555][T24077] pim6reg: entered allmulticast mode [ 656.797606][T24092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5146'. [ 656.865831][T24092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5146'. [ 656.947817][T24092] netlink: 'syz.4.5146': attribute type 15 has an invalid length. [ 657.066353][ T3349] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 657.126510][ T3349] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 657.181296][ T3349] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 657.212103][T24101] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5148'. [ 657.258973][T24104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5149'. [ 657.328009][T24101] veth1_to_team: entered promiscuous mode [ 657.351181][T24107] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 657.362862][T24101] gretap0: entered promiscuous mode [ 657.419148][T24101] hsr1: entered promiscuous mode [ 657.438282][ T3349] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 657.456480][T24113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5151'. [ 658.645272][T24138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5157'. [ 658.681038][T24139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5158'. [ 658.909518][T24139] veth0_macvtap: left promiscuous mode [ 659.466088][T24161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5161'. [ 659.530723][T24163] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5162'. [ 660.082180][T24174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5164'. [ 660.745260][T24186] bridge_slave_0: left allmulticast mode [ 660.796019][T24186] bridge_slave_0: left promiscuous mode [ 660.834467][T24186] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.992862][T24186] bridge_slave_1: left promiscuous mode [ 661.028533][T24186] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.094450][T24186] veth0_to_bond: left allmulticast mode [ 661.106089][T24186] veth0_to_bond: left promiscuous mode [ 661.120179][T24186] bridge2: port 2(veth0_to_bond) entered disabled state [ 661.183867][T24186] bond0: (slave bond_slave_0): Releasing backup interface [ 661.253520][T24186] bond0: (slave bond_slave_1): Releasing backup interface [ 661.294663][T24186] team0: Port device team_slave_0 removed [ 661.372778][T24186] team0: Port device team_slave_1 removed [ 661.402453][T24186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.449021][T24186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.498391][T24186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.528908][T24186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.581613][T24186] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 662.618070][T24244] netlink: 'syz.1.5175': attribute type 4 has an invalid length. [ 662.776880][T24246] __nla_validate_parse: 1 callbacks suppressed [ 662.776899][T24246] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5176'. [ 663.618503][T24263] netlink: 'syz.4.5182': attribute type 1 has an invalid length. [ 664.093120][T24264] bond0: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 664.364159][T24263] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5182'. [ 664.693862][T24270] veth7: entered promiscuous mode [ 664.747119][T24270] bond0: (slave veth7): Enslaving as a backup interface with a down link [ 664.947422][T24263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.959102][ T13] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 665.190224][ T13] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 665.468024][T24317] netlink: 'syz.4.5191': attribute type 49 has an invalid length. [ 665.486691][T24310] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5189'. [ 665.496821][T24310] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5189'. [ 665.507066][T24310] netlink: 'syz.3.5189': attribute type 5 has an invalid length. [ 665.514934][T24310] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5189'. [ 665.580325][T24327] netlink: 'syz.2.5193': attribute type 1 has an invalid length. [ 665.618833][T24316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.688033][T24316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 665.894294][T24346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5196'. [ 666.065314][T24327] 8021q: adding VLAN 0 to HW filter on device bond6 [ 666.076128][T24327] netlink: 'syz.2.5193': attribute type 1 has an invalid length. [ 666.087046][ T9362] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.096686][ T9362] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.106225][ T9362] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.116898][ T9362] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.147145][T24329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.156515][T24329] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.176578][T24329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.276817][T24329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.288815][T24329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.311689][T24329] veth1_vlan: left promiscuous mode [ 666.317894][T24329] veth0_vlan: left promiscuous mode [ 666.324763][T24329] veth0_vlan: entered promiscuous mode [ 666.334481][T24329] veth1_vlan: entered promiscuous mode [ 666.344321][T24329] veth1_macvtap: left promiscuous mode [ 666.351078][T24329] veth0_macvtap: left promiscuous mode [ 666.357674][T24329] veth0_macvtap: entered promiscuous mode [ 666.367110][T24329] veth1_macvtap: entered promiscuous mode [ 666.381618][T24329] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 666.390822][T24329] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 666.399230][T24329] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 666.408428][T24329] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 666.420447][T24329] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 666.476918][ T9362] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.488108][ T9362] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.526855][ T9372] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.534129][ T9372] bridge0: port 1(bridge_slave_0) entered listening state [ 666.572666][ T9372] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.579935][ T9372] bridge0: port 2(bridge_slave_1) entered listening state [ 666.584942][T24369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5201'. [ 666.662522][ T9372] bridge0: port 3(veth1_to_bridge) entered blocking state [ 666.669912][ T9372] bridge0: port 3(veth1_to_bridge) entered listening state [ 667.228460][ T9362] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.235953][ C1] bridge0: port 3(veth1_to_bridge) entered blocking state [ 683.750579][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 693.535141][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 697.169346][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 697.179380][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 727.264525][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.271959][ C1] bridge0: topology change detected, propagating [ 727.278765][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 727.279265][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.291288][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 727.291700][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 727.291950][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 727.292178][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 727.292422][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 727.292838][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 727.299985][ C1] bridge0: topology change detected, propagating [ 727.312336][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 727.329630][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 727.336272][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 730.462885][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 732.280166][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 732.280157][ C0] net_ratelimit: 23021 callbacks suppressed [ 732.281975][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 732.292998][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 732.298975][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 732.310917][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 732.322857][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 732.334861][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 732.353160][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 732.359246][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 732.372429][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 735.584140][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 737.289908][ C1] net_ratelimit: 22709 callbacks suppressed [ 737.289982][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 737.290048][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 737.297169][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 737.309011][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 737.320604][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 737.333177][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 737.344813][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 737.356626][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 737.368587][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 737.380793][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 742.299871][ C1] net_ratelimit: 23300 callbacks suppressed [ 742.299893][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 742.299953][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 742.300238][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 742.306854][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 742.318757][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 742.330692][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 742.342690][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 742.355120][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 742.366969][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 742.378855][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 747.309953][ C1] net_ratelimit: 21601 callbacks suppressed [ 747.310017][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 747.310017][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 747.316360][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 747.328401][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 747.340458][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 747.352329][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 747.364221][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 747.376491][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 747.388219][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 747.400295][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 750.943890][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 751.446163][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.319814][ C0] net_ratelimit: 25605 callbacks suppressed [ 752.319835][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 752.319888][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 752.326122][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 752.338234][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 752.350254][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 752.362527][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 752.374135][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 752.386092][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 752.398318][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 752.410122][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 757.329996][ C0] net_ratelimit: 25324 callbacks suppressed [ 757.330018][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 757.330069][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 757.336258][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 757.348584][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 757.360324][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 757.372310][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 757.384294][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 757.396301][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 757.408698][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 757.420790][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 762.340044][ C1] net_ratelimit: 25356 callbacks suppressed [ 762.340067][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 762.340071][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 762.340362][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 762.346319][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 762.358573][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 762.370338][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 762.382354][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 762.394313][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 762.406343][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 762.418298][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 767.349906][ C0] net_ratelimit: 25558 callbacks suppressed [ 767.349930][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 767.354383][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 767.356246][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 767.368466][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 767.380337][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 767.392304][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 767.404527][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 767.416504][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 767.428365][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 767.440195][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 772.359880][ C0] net_ratelimit: 25740 callbacks suppressed [ 772.359902][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 772.362486][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 772.366174][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 772.378439][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 772.390195][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 772.402423][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 772.414452][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 772.426122][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 772.438116][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 772.450122][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 777.369980][ C0] net_ratelimit: 25706 callbacks suppressed [ 777.370005][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 777.370053][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 777.376299][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 777.388265][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 777.400628][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 777.412587][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 777.424819][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 777.436549][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 777.448552][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:82:db:18:b7:80:9b, vlan:0) [ 777.460493][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 804.157235][ C0] kworker/u8:11: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 804.171816][ C0] CPU: 0 UID: 0 PID: 9360 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 804.171845][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 804.171859][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 804.172289][ C0] Call Trace: [ 804.172414][ C0] [ 804.172445][ C0] dump_stack_lvl+0xe8/0x150 [ 804.172711][ C0] warn_alloc+0x249/0x340 [ 804.172840][ C0] ? __pfx_warn_alloc+0x10/0x10 [ 804.172923][ C0] ? wake_all_kswapds+0x167/0x280 [ 804.172981][ C0] __alloc_pages_slowpath+0xcac/0xd40 [ 804.173031][ C0] __alloc_frozen_pages_noprof+0x322/0x380 [ 804.173101][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 804.173136][ C0] ? __pfx_policy_nodemask+0x10/0x10 [ 804.173235][ C0] ? lock_acquire+0x106/0x350 [ 804.173349][ C0] alloc_pages_mpol+0x235/0x490 [ 804.173385][ C0] allocate_slab+0x131/0x660 [ 804.173460][ C0] ? __pcs_replace_empty_main+0x2df/0x720 [ 804.173499][ C0] ___slab_alloc+0x154/0x6c0 [ 804.173522][ C0] ? __pcs_replace_empty_main+0x2df/0x720 [ 804.173551][ C0] __kmalloc_noprof+0x18a/0x760 [ 804.173578][ C0] ? __pcs_replace_empty_main+0x2df/0x720 [ 804.173599][ C0] ? __kmalloc_noprof+0x1b8/0x760 [ 804.173624][ C0] ? __pcs_replace_empty_main+0x25c/0x720 [ 804.173647][ C0] __pcs_replace_empty_main+0x2df/0x720 [ 804.173678][ C0] __kmalloc_noprof+0x474/0x760 [ 804.173705][ C0] ? __pcs_replace_empty_main+0x2df/0x720 [ 804.173724][ C0] ? __kmalloc_noprof+0x1b8/0x760 [ 804.173750][ C0] ? __pcs_replace_empty_main+0x25c/0x720 [ 804.173774][ C0] __pcs_replace_empty_main+0x2df/0x720 [ 804.173803][ C0] kmem_cache_alloc_noprof+0x37d/0x650 [ 804.173827][ C0] ? skb_ext_add+0x1b6/0x8f0 [ 804.174002][ C0] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 804.174033][ C0] skb_ext_add+0x1b6/0x8f0 [ 804.174061][ C0] ? net_generic+0x1f4/0x240 [ 804.174214][ C0] br_nf_forward_ip+0xc3/0xa30 [ 804.174256][ C0] ? NF_HOOK+0xa2/0x3f0 [ 804.174334][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 804.174354][ C0] nf_hook_slow+0xc5/0x220 [ 804.174415][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 804.174444][ C0] NF_HOOK+0x23e/0x3f0 [ 804.174474][ C0] ? NF_HOOK+0xa2/0x3f0 [ 804.174500][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 804.174528][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 804.174559][ C0] ? __skb_clone+0x483/0x7a0 [ 804.174610][ C0] ? br_handle_vlan+0x61/0x530 [ 804.174665][ C0] __br_forward+0x397/0x540 [ 804.174691][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 804.174720][ C0] br_flood+0x6ee/0xb80 [ 804.174762][ C0] br_handle_frame_finish+0x1521/0x1c80 [ 804.174782][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 804.174863][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 804.174893][ C0] ? ip6t_do_table+0x163/0x1560 [ 804.174984][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 804.175008][ C0] ? nf_hook_slow+0x176/0x220 [ 804.175029][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 804.175049][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 804.175096][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 804.175128][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 804.175147][ C0] ? nf_nat_ipv6_in+0x203/0x2c0 [ 804.175229][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 804.175260][ C0] br_nf_pre_routing_finish_ipv6+0x91f/0xc30 [ 804.175282][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 804.175310][ C0] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 804.175331][ C0] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 804.175352][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 804.175374][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 804.175394][ C0] ? br_nf_pre_routing+0x75f/0x14c0 [ 804.175432][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 804.175460][ C0] br_handle_frame+0x1277/0x1510 [ 804.175488][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 804.175510][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 804.175527][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 804.175557][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 804.175576][ C0] __netif_receive_skb_core+0x98f/0x3170 [ 804.175639][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 804.175668][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 804.175692][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 804.175730][ C0] ? process_backlog+0x3eb/0x1950 [ 804.175760][ C0] ? process_backlog+0x3eb/0x1950 [ 804.175784][ C0] ? process_backlog+0x3eb/0x1950 [ 804.175809][ C0] ? process_backlog+0x3eb/0x1950 [ 804.175902][ C0] process_backlog+0x76d/0x1950 [ 804.175944][ C0] __napi_poll+0xae/0x340 [ 804.175963][ C0] ? skb_defer_free_flush+0x233/0x260 [ 804.175989][ C0] net_rx_action+0x627/0xf70 [ 804.176014][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 804.176203][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 804.176244][ C0] ? try_to_wake_up+0x7f2/0x1380 [ 804.176322][ C0] handle_softirqs+0x22a/0x840 [ 804.176346][ C0] ? do_softirq+0x76/0xd0 [ 804.176369][ C0] ? kernel_fpu_end+0x62/0x80 [ 804.176461][ C0] do_softirq+0x76/0xd0 [ 804.176482][ C0] [ 804.176515][ C0] [ 804.176548][ C0] __local_bh_enable_ip+0xf8/0x130 [ 804.176569][ C0] blake2s_compress+0xf9/0x1eb0 [ 804.176703][ C0] ? finish_task_switch+0x41f/0xbe0 [ 804.176722][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 804.176778][ C0] ? finish_task_switch+0x41f/0xbe0 [ 804.176797][ C0] ? rcu_is_watching+0x15/0xb0 [ 804.176865][ C0] ? __schedule+0x1837/0x5740 [ 804.176900][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 804.176931][ C0] ? __chacha20poly1305_encrypt+0x316/0x350 [ 804.176954][ C0] ? __pfx___schedule+0x10/0x10 [ 804.176980][ C0] ? blake2s_update+0x134/0x450 [ 804.177004][ C0] blake2s_update+0x14b/0x450 [ 804.177027][ C0] hmac+0x1fc/0x3b0 [ 804.177056][ C0] ? __pfx_hmac+0x10/0x10 [ 804.177078][ C0] ? kernel_fpu_end+0x62/0x80 [ 804.177141][ C0] ? blake2s_compress+0x1e17/0x1eb0 [ 804.177182][ C0] kdf+0xff/0x2b0 [ 804.177207][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 804.177230][ C0] ? __pfx_kdf+0x10/0x10 [ 804.177262][ C0] ? blake2s_update+0x255/0x450 [ 804.177285][ C0] ? __asan_memset+0x22/0x50 [ 804.177342][ C0] wg_noise_handshake_create_initiation+0x473/0x830 [ 804.177378][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 804.177404][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 804.177431][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 804.177475][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 804.177575][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 804.177602][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 804.177634][ C0] ? ktime_get_coarse_with_offset+0x102/0x150 [ 804.177666][ C0] wg_packet_handshake_send_worker+0x18d/0x350 [ 804.177702][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 804.177730][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 804.177778][ C0] ? process_scheduled_works+0xa70/0x1860 [ 804.177823][ C0] ? process_scheduled_works+0xa70/0x1860 [ 804.177868][ C0] process_scheduled_works+0xb5d/0x1860 [ 804.177916][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 804.177943][ C0] ? assign_work+0x3d5/0x5e0 [ 804.177966][ C0] worker_thread+0xa53/0xfc0 [ 804.178013][ C0] kthread+0x389/0x470 [ 804.178063][ C0] ? __pfx_worker_thread+0x10/0x10 [ 804.178090][ C0] ? __pfx_kthread+0x10/0x10 [ 804.178115][ C0] ret_from_fork+0x514/0xb70 [ 804.178140][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 804.178161][ C0] ? __switch_to+0xc79/0x1410 [ 804.178243][ C0] ? __pfx_kthread+0x10/0x10 [ 804.178269][ C0] ret_from_fork_asm+0x1a/0x30 [ 804.178308][ C0] [ 804.178328][ C0] Mem-Info: [ 804.184344][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x2000920(GFP_ATOMIC|__GFP_ZERO|__GFP_NO_OBJ_EXT) [ 804.187999][ C0] active_anon:5948 inactive_anon:0 isolated_anon:14 [ 804.187999][ C0] active_file:3363 inactive_file:40049 isolated_file:7 [ 804.187999][ C0] unevictable:768 dirty:20 writeback:28 [ 804.187999][ C0] slab_reclaimable:11199 slab_unreclaimable:1406321 [ 804.187999][ C0] mapped:30490 shmem:1293 pagetables:1286 [ 804.187999][ C0] sec_pagetables:0 bounce:0 [ 804.187999][ C0] kernel_misc_reclaimable:0 [ 804.187999][ C0] free:10529 free_pcp:8940 free_cma:0 [ 804.197987][ C1] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 804.204946][ C0] Node 0 active_anon:23788kB inactive_anon:0kB active_file:13452kB inactive_file:159988kB unevictable:1536kB isolated(anon):56kB isolated(file):28kB mapped:121960kB dirty:80kB writeback:112kB shmem:3636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13476kB pagetables:4996kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 804.208224][ C1] node 0: slabs: 664, objs: 10264, free: 0 [ 804.211099][ C0] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 804.215660][ C1] node 1: slabs: 875, objs: 14000, free: 6 [ 804.219990][ C0] Node 0 [ 804.224830][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 804.229942][ C0] DMA free:10052kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 804.235247][ C1] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 804.241108][ C0] lowmem_reserve[]: 0 [ 804.247418][ C1] node 0: slabs: 664, objs: 10264, free: 0 [ 804.252710][ C0] 2492 [ 804.257364][ C1] node 1: slabs: 875, objs: 14000, free: 6 [ 804.262310][ C0] 2493 [ 804.267257][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x2000920(GFP_ATOMIC|__GFP_ZERO|__GFP_NO_OBJ_EXT) [ 804.272614][ C0] 2493 [ 804.277186][ C1] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 804.282916][ C0] 2493 [ 804.287755][ C1] node 0: slabs: 664, objs: 10264, free: 0 [ 804.293592][ C0] [ 804.298612][ C1] node 1: slabs: 875, objs: 14000, free: 6 [ 804.304355][ C0] Node 0 [ 804.309924][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 804.314743][ C0] DMA32 free:11244kB boost:76912kB min:111100kB low:119644kB high:128188kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23788kB inactive_anon:0kB active_file:13452kB inactive_file:159988kB unevictable:1536kB writepending:192kB zspages:0kB present:3129332kB managed:2552548kB mlocked:0kB bounce:0kB free_pcp:8052kB local_pcp:6036kB free_cma:0kB [ 804.320512][ C1] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 804.325531][ C0] lowmem_reserve[]: 0 [ 804.331316][ C1] node 0: slabs: 664, objs: 10264, free: 0 [ 804.336858][ C0] 0 [ 804.342371][ C1] node 1: slabs: 875, objs: 14000, free: 6 [ 804.346960][ C0] 0 [ 804.352791][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x2000920(GFP_ATOMIC|__GFP_ZERO|__GFP_NO_OBJ_EXT) [ 804.356999][ C0] 0 [ 804.361614][ C1] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 804.366447][ C0] 0 [ 804.370621][ C1] node 0: slabs: 664, objs: 10264, free: 0 [ 804.375722][ C0] Node 0 [ 804.380238][ C1] node 1: slabs: 875, objs: 14000, free: 6 [ 804.385795][ C0] Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 804.389964][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 804.394085][ C0] lowmem_reserve[]: 0 [ 804.398659][ C1] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 804.404133][ C0] 0 [ 804.408704][ C1] node 0: slabs: 664, objs: 10264, free: 0 [ 804.413472][ C0] 0 0 [ 804.417964][ C1] node 1: slabs: 875, objs: 14000, free: 6 [ 804.423439][ C0] 0 [ 804.428038][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x2000920(GFP_ATOMIC|__GFP_ZERO|__GFP_NO_OBJ_EXT) [ 804.433223][ C0] [ 804.433235][ C0] Node 1 [ 804.438494][ C1] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 804.444403][ C0] Normal free:20820kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:10240KB free_highatomic:1288KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:27668kB local_pcp:11556kB free_cma:0kB [ 804.449240][ C1] node 0: slabs: 664, objs: 10264, free: 0 [ 804.454359][ C0] lowmem_reserve[]: [ 804.459012][ C1] node 1: slabs: 875, objs: 14000, free: 6 [ 804.464907][ C0] 0 [ 804.469865][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 804.475286][ C0] 0 0 [ 804.481281][ C1] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 804.486137][ C0] 0 [ 804.491325][ C1] node 0: slabs: 664, objs: 10264, free: 0 [ 804.497285][ C0] 0 [ 804.503192][ C1] node 1: slabs: 875, objs: 14000, free: 6 [ 804.508552][ C0] Node 0 [ 804.514298][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x2000920(GFP_ATOMIC|__GFP_ZERO|__GFP_NO_OBJ_EXT) [ 804.520020][ C0] DMA: [ 804.526501][ C1] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 804.531796][ C0] 0*4kB [ 804.537236][ C1] node 0: slabs: 664, objs: 10264, free: 0 [ 804.542178][ C0] 1*8kB [ 804.547446][ C1] node 1: slabs: 875, objs: 14000, free: 6 [ 804.553338][ C0] (U) [ 804.558263][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 804.563531][ C0] 0*16kB [ 804.569141][ C1] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 804.574086][ C0] 1*32kB [ 804.580154][ C1] node 0: slabs: 664, objs: 10264, free: 0 [ 804.585158][ C0] (U) [ 804.590190][ C1] node 1: slabs: 875, objs: 14000, free: 6 [ 804.595195][ C0] 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10024kB [ 805.584567][ C0] Node 0 DMA32: 3412*4kB (UM) 474*8kB (UM) 215*16kB (UME) 508*32kB (UME) 1113*64kB (UME) 23*128kB (UME) 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 112336kB [ 805.601516][ C0] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 805.613115][ C0] Node 1 Normal: 0*4kB 3*8kB (UMH) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 2*256kB (MH) 2*512kB (UM) 2*1024kB (UH) 2*2048kB (UM) 4*4096kB (M) = 24520kB [ 805.629347][ C0] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 805.638990][ C0] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 805.648355][ C0] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 805.657986][ C0] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 805.667359][ C0] 44712 total pagecache pages [ 805.672187][ C0] 0 pages in swap cache [ 805.676391][ C0] Free swap = 124996kB [ 805.680602][ C0] Total swap = 124996kB [ 805.684771][ C0] 2097051 pages RAM [ 805.688589][ C0] 0 pages HighMem/MovableOnly [ 805.693317][ C0] 427132 pages reserved [ 805.697485][ C0] 0 pages cma reserved [ 813.866976][ C1] slab_out_of_memory: 180 callbacks suppressed [ 813.867013][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 813.868795][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 813.873358][ C1] cache: skbuff_ext_cache, object size: 184, buffer size: 256, default order: 0, min order: 0 [ 813.883176][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 813.893015][ C1] node 0: slabs: 37336, objs: 597376, free: 0 [ 813.903445][ C0] node 0: slabs: 44381, objs: 532572, free: 0 [ 813.914041][ C1] node 1: slabs: 92022, objs: 1472352, free: 49 [ 813.920286][ C0] node 1: slabs: 103984, objs: 1247808, free: 9 [ 813.926781][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 813.933152][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 813.939335][ C1] cache: skbuff_ext_cache, object size: 184, buffer size: 256, default order: 0, min order: 0 [ 813.949149][ C0] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 813.959906][ C1] node 0: slabs: 37336, objs: 597376, free: 0 [ 813.970320][ C0] node 0: slabs: 672, objs: 10352, free: 10 [ 813.980298][ C1] node 1: slabs: 92022, objs: 1472352, free: 49 [ 813.986522][ C0] node 1: slabs: 1357, objs: 21712, free: 33 [ 813.994341][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 813.998997][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 814.005178][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 814.014987][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 814.024836][ C1] node 0: slabs: 44381, objs: 532572, free: 0 [ 814.035350][ C0] node 0: slabs: 44381, objs: 532572, free: 0 [ 814.046121][ C1] node 1: slabs: 103984, objs: 1247808, free: 12 [ 814.052377][ C0] node 1: slabs: 103984, objs: 1247808, free: 12 [ 814.059242][T24391] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 814.065248][ T9360] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x2000920(GFP_ATOMIC|__GFP_ZERO|__GFP_NO_OBJ_EXT) [ 814.072433][ T1313] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 814.072498][ T1313] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 814.072516][ T1313] node 0: slabs: 44381, objs: 532572, free: 0 [ 814.072554][ T1313] node 1: slabs: 103984, objs: 1247808, free: 12 [ 814.072750][ T1313] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 814.072878][ T1313] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 814.072897][ T1313] node 0: slabs: 44382, objs: 532584, free: 11 [ 814.072911][ T1313] node 1: slabs: 103984, objs: 1247808, free: 12 [ 814.073219][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.137098][T24391] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 814.313163][ T9360] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 814.401769][ T9360] node 0: slabs: 677, objs: 10400, free: 9 [ 814.456550][ T9360] node 1: slabs: 1357, objs: 21712, free: 33 [ 814.521387][T24391] node 0: slabs: 42655, objs: 511860, free: 1735 [ 814.569956][T24391] node 1: slabs: 103984, objs: 1247808, free: 12 [ 822.834566][ C1] warn_alloc: 358 callbacks suppressed [ 822.834656][ C1] kworker/u8:15: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 822.838016][ C0] slab_out_of_memory: 159 callbacks suppressed [ 822.838034][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x2000920(GFP_ATOMIC|__GFP_ZERO|__GFP_NO_OBJ_EXT) [ 822.840203][ C1] ,cpuset= [ 822.851343][ C0] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 822.857477][ C1] / [ 822.870111][ C0] node 0: slabs: 1468, objs: 16744, free: 2 [ 822.870130][ C0] node 1: slabs: 1357, objs: 21712, free: 33 [ 822.870165][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 822.873434][ C1] ,mems_allowed=0-1 [ 822.883382][ C0] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 822.885782][ C1] [ 822.891854][ C0] node 0: slabs: 1468, objs: 16744, free: 2 [ 822.897984][ C1] CPU: 1 UID: 0 PID: 9374 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 822.898006][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 822.898019][ C1] Workqueue: kvfree_rcu_reclaim fill_page_cache_func [ 822.898166][ C1] Call Trace: [ 822.898176][ C1] [ 822.898187][ C1] dump_stack_lvl+0xe8/0x150 [ 822.898213][ C1] warn_alloc+0x249/0x340 [ 822.898247][ C1] ? __pfx_warn_alloc+0x10/0x10 [ 822.898284][ C1] ? wake_all_kswapds+0x167/0x280 [ 822.898312][ C1] __alloc_pages_slowpath+0xcac/0xd40 [ 822.898362][ C1] __alloc_frozen_pages_noprof+0x322/0x380 [ 822.898395][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 822.898429][ C1] ? __pfx_policy_nodemask+0x10/0x10 [ 822.898463][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 822.898494][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 822.898526][ C1] alloc_pages_mpol+0x235/0x490 [ 822.898562][ C1] allocate_slab+0x131/0x660 [ 822.898587][ C1] ? __pcs_replace_empty_main+0x2df/0x720 [ 822.898608][ C1] ___slab_alloc+0x154/0x6c0 [ 822.898632][ C1] ? __pcs_replace_empty_main+0x2df/0x720 [ 822.898688][ C1] __kmalloc_noprof+0x18a/0x760 [ 822.898716][ C1] ? __pcs_replace_empty_main+0x2df/0x720 [ 822.898735][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 822.898761][ C1] ? __pcs_replace_empty_main+0x25c/0x720 [ 822.898784][ C1] __pcs_replace_empty_main+0x2df/0x720 [ 822.898821][ C1] kmem_cache_alloc_noprof+0x37d/0x650 [ 822.898845][ C1] ? skb_ext_add+0x1b6/0x8f0 [ 822.898873][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 822.898902][ C1] skb_ext_add+0x1b6/0x8f0 [ 822.898929][ C1] ? net_generic+0x1f4/0x240 [ 822.898965][ C1] br_nf_forward_ip+0xc3/0xa30 [ 822.898984][ C1] ? NF_HOOK+0xa2/0x3f0 [ 822.899013][ C1] ? __pfx_br_nf_forward+0x10/0x10 [ 822.899031][ C1] nf_hook_slow+0xc5/0x220 [ 822.899054][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 822.899104][ C1] NF_HOOK+0x23e/0x3f0 [ 822.899129][ C1] ? ret_from_fork+0x514/0xb70 [ 822.899153][ C1] ? NF_HOOK+0xa2/0x3f0 [ 822.899179][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 822.899208][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 822.899238][ C1] ? __skb_clone+0x483/0x7a0 [ 822.899265][ C1] ? br_handle_vlan+0x61/0x530 [ 822.899294][ C1] __br_forward+0x397/0x540 [ 822.899319][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 822.899351][ C1] br_flood+0x6ee/0xb80 [ 822.899395][ C1] br_handle_frame_finish+0x1521/0x1c80 [ 822.899413][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 822.899445][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 822.899475][ C1] ? ip6t_do_table+0x163/0x1560 [ 822.899502][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 822.899525][ C1] ? nf_hook_slow+0x176/0x220 [ 822.899545][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 822.899565][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 822.899603][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 822.899634][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 822.899653][ C1] ? nf_nat_ipv6_in+0x203/0x2c0 [ 822.899682][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 822.899713][ C1] br_nf_pre_routing_finish_ipv6+0x91f/0xc30 [ 822.899733][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 822.899766][ C1] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 822.899787][ C1] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 822.899807][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 822.899837][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 822.899857][ C1] ? br_nf_pre_routing+0x75f/0x14c0 [ 822.899893][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 822.899921][ C1] br_handle_frame+0x1277/0x1510 [ 822.899950][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 822.899990][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 822.900008][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 822.900038][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 822.900056][ C1] __netif_receive_skb_core+0x98f/0x3170 [ 822.900094][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 822.900117][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 822.900147][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 822.900187][ C1] ? process_backlog+0x3eb/0x1950 [ 822.900218][ C1] ? process_backlog+0x3eb/0x1950 [ 822.900240][ C1] ? process_backlog+0x3eb/0x1950 [ 822.900264][ C1] ? process_backlog+0x3eb/0x1950 [ 822.900287][ C1] process_backlog+0x76d/0x1950 [ 822.900330][ C1] __napi_poll+0xae/0x340 [ 822.900350][ C1] ? skb_defer_free_flush+0x233/0x260 [ 822.900376][ C1] net_rx_action+0x627/0xf70 [ 822.900415][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 822.900467][ C1] handle_softirqs+0x22a/0x840 [ 822.900491][ C1] ? __irq_exit_rcu+0xca/0x220 [ 822.900518][ C1] __irq_exit_rcu+0xca/0x220 [ 822.900538][ C1] irq_exit_rcu+0x9/0x30 [ 822.900555][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 822.900584][ C1] [ 822.900590][ C1] [ 822.900598][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 822.900622][ C1] RIP: 0010:deref_stack_reg+0x13/0x230 [ 822.900693][ C1] Code: fe ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 20 48 89 54 24 18 <49> 89 f0 49 89 ff 48 be 00 00 00 00 00 fc ff df 48 8d 5f 08 49 89 [ 822.900709][ C1] RSP: 0018:ffffc900062ce380 EFLAGS: 00000282 [ 822.900818][ C1] RAX: fffffffffffffff0 RBX: ffffffff90d0f53c RCX: 0000000000000000 [ 822.900832][ C1] RDX: ffffc900062ce4e8 RSI: ffffc900062cfad0 RDI: ffffc900062ce4a8 [ 822.900846][ C1] RBP: dffffc0000000000 R08: ffffc900062ce507 R09: 0000000000000000 [ 822.900860][ C1] R10: ffffc900062ce4f8 R11: fffff52000c59ca1 R12: ffffc900062cfad0 [ 822.900874][ C1] R13: 1ffff92000c59c97 R14: ffffc900062ce4a8 R15: 1ffffffff21a1ea7 [ 822.900912][ C1] unwind_next_frame+0x19d5/0x2550 [ 822.900943][ C1] ? unwind_next_frame+0xa6/0x2550 [ 822.900967][ C1] ? fill_page_cache_func+0x46/0xe0 [ 822.900996][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 822.901077][ C1] arch_stack_walk+0x11b/0x150 [ 822.901107][ C1] ? process_scheduled_works+0xb5d/0x1860 [ 822.901129][ C1] ? fill_pool+0x156/0x580 [ 822.901183][ C1] stack_trace_save+0xa9/0x100 [ 822.901213][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 822.901244][ C1] ? stack_depot_save_flags+0x33/0x810 [ 822.901314][ C1] ? unwind_next_frame+0x51/0x2550 [ 822.901336][ C1] ? fill_pool+0x156/0x580 [ 822.901360][ C1] kasan_save_track+0x3e/0x80 [ 822.901411][ C1] ? kasan_save_track+0x3e/0x80 [ 822.901452][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 822.901478][ C1] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 822.901501][ C1] ? fill_pool+0x156/0x580 [ 822.901523][ C1] ? debug_object_activate+0x4a3/0x580 [ 822.901561][ C1] ? call_rcu+0x43/0x890 [ 822.901583][ C1] ? __destroy_inode+0x2b2/0x640 [ 822.901644][ C1] ? evict+0x8a7/0xb10 [ 822.901693][ C1] ? __dentry_kill+0x1a2/0x690 [ 822.901709][ C1] ? shrink_kill+0xa9/0x2c0 [ 822.901757][ C1] ? shrink_dentry_list+0x2e0/0x5e0 [ 822.901779][ C1] ? prune_dcache_sb+0x119/0x180 [ 822.901801][ C1] ? super_cache_scan+0x369/0x4b0 [ 822.901901][ C1] ? do_shrink_slab+0x6fb/0x1150 [ 822.901958][ C1] ? shrink_slab+0xe97/0x11f0 [ 822.901974][ C1] ? shrink_one+0x2d9/0x710 [ 822.902024][ C1] ? shrink_node+0x31bf/0x3ae0 [ 822.902050][ C1] ? do_try_to_free_pages+0x6a2/0x1990 [ 822.902069][ C1] ? try_to_free_pages+0x8f2/0xe30 [ 822.902089][ C1] ? __alloc_pages_direct_reclaim+0x148/0x310 [ 822.902112][ C1] ? __alloc_pages_slowpath+0x57d/0xd40 [ 822.902139][ C1] ? __alloc_frozen_pages_noprof+0x322/0x380 [ 822.902166][ C1] ? alloc_pages_mpol+0x235/0x490 [ 822.902192][ C1] ? alloc_pages_noprof+0xac/0x2a0 [ 822.902206][ C1] ? get_free_pages_noprof+0xf/0x80 [ 822.902233][ C1] ? fill_page_cache_func+0x46/0xe0 [ 822.902290][ C1] __kasan_slab_alloc+0x6c/0x80 [ 822.902318][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 822.902342][ C1] ? fill_pool+0x156/0x580 [ 822.902363][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 822.902382][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 822.902412][ C1] fill_pool+0x156/0x580 [ 822.902443][ C1] ? __pfx_fill_pool+0x10/0x10 [ 822.902467][ C1] ? kasan_save_stack+0x4d/0x60 [ 822.902498][ C1] ? __pfx_inode_free_by_rcu+0x10/0x10 [ 822.902628][ C1] ? debug_object_activate+0x47a/0x580 [ 822.902651][ C1] debug_object_activate+0x4a3/0x580 [ 822.902684][ C1] ? __pfx_inode_free_by_rcu+0x10/0x10 [ 822.902710][ C1] call_rcu+0x43/0x890 [ 822.902733][ C1] ? preempt_count_add+0x91/0x190 [ 822.902757][ C1] ? bpf_inode_storage_free+0x3f3/0x5b0 [ 822.902839][ C1] __destroy_inode+0x2b2/0x640 [ 822.902866][ C1] evict+0x8a7/0xb10 [ 822.902902][ C1] ? __pfx_evict+0x10/0x10 [ 822.902932][ C1] ? _raw_spin_unlock+0x28/0x50 [ 822.902957][ C1] ? iput+0xb25/0xe80 [ 822.902989][ C1] __dentry_kill+0x1a2/0x690 [ 822.903009][ C1] ? shrink_kill+0x8d/0x2c0 [ 822.903074][ C1] shrink_kill+0xa9/0x2c0 [ 822.903098][ C1] shrink_dentry_list+0x2e0/0x5e0 [ 822.903129][ C1] prune_dcache_sb+0x119/0x180 [ 822.903153][ C1] ? __pfx_prune_dcache_sb+0x10/0x10 [ 822.903181][ C1] ? list_lru_count_one+0x27/0x2c0 [ 822.903236][ C1] ? list_lru_count_one+0x264/0x2c0 [ 822.903267][ C1] super_cache_scan+0x369/0x4b0 [ 822.903304][ C1] do_shrink_slab+0x6fb/0x1150 [ 822.903333][ C1] ? shrink_slab+0x130/0x11f0 [ 822.903353][ C1] shrink_slab+0xe97/0x11f0 [ 822.903374][ C1] ? shrink_slab+0x130/0x11f0 [ 822.903399][ C1] ? __pfx_shrink_slab+0x10/0x10 [ 822.903424][ C1] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 822.903459][ C1] ? shrink_node+0x2d92/0x3ae0 [ 822.903491][ C1] shrink_one+0x2d9/0x710 [ 822.903525][ C1] ? shrink_node+0x2d92/0x3ae0 [ 822.903553][ C1] shrink_node+0x31bf/0x3ae0 [ 822.903581][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 822.903608][ C1] ? rcu_is_watching+0x15/0xb0 [ 822.903631][ C1] ? shrink_node+0x2d92/0x3ae0 [ 822.903657][ C1] ? unwind_next_frame+0xa6/0x2550 [ 822.903679][ C1] ? rcu_is_watching+0x15/0xb0 [ 822.903702][ C1] ? rcu_is_watching+0x15/0xb0 [ 822.903722][ C1] ? __kasan_check_byte+0x12/0x40 [ 822.903750][ C1] ? unwind_next_frame+0xa6/0x2550 [ 822.903772][ C1] ? rcu_is_watching+0x15/0xb0 [ 822.903794][ C1] ? unwind_next_frame+0xa6/0x2550 [ 822.903846][ C1] ? lock_release+0x4b/0x3c0 [ 822.903864][ C1] ? unwind_next_frame+0x1bbf/0x2550 [ 822.903885][ C1] ? deref_stack_reg+0x19f/0x230 [ 822.903912][ C1] ? unwind_next_frame+0xa6/0x2550 [ 822.903933][ C1] ? unwind_next_frame+0x1bbf/0x2550 [ 822.903959][ C1] ? __pfx_shrink_node+0x10/0x10 [ 822.903987][ C1] ? unwind_next_frame+0xa6/0x2550 [ 822.904009][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 822.904032][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 822.904059][ C1] ? arch_stack_walk+0x11b/0x150 [ 822.904086][ C1] ? vmpressure_prio+0x33/0x140 [ 822.904140][ C1] do_try_to_free_pages+0x6a2/0x1990 [ 822.904188][ C1] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 822.904220][ C1] try_to_free_pages+0x8f2/0xe30 [ 822.904247][ C1] ? __pfx_try_to_free_pages+0x10/0x10 [ 822.904273][ C1] ? psi_group_change+0xab8/0x1050 [ 822.904352][ C1] ? fs_reclaim_acquire+0x7c/0x100 [ 822.904384][ C1] __alloc_pages_direct_reclaim+0x148/0x310 [ 822.904415][ C1] ? __pfx___alloc_pages_direct_reclaim+0x10/0x10 [ 822.904478][ C1] ? wake_all_kswapds+0x167/0x280 [ 822.904507][ C1] __alloc_pages_slowpath+0x57d/0xd40 [ 822.904556][ C1] __alloc_frozen_pages_noprof+0x322/0x380 [ 822.904590][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 822.904622][ C1] ? __pfx_policy_nodemask+0x10/0x10 [ 822.904660][ C1] alloc_pages_mpol+0x235/0x490 [ 822.904694][ C1] alloc_pages_noprof+0xac/0x2a0 [ 822.904715][ C1] get_free_pages_noprof+0xf/0x80 [ 822.904743][ C1] fill_page_cache_func+0x46/0xe0 [ 822.904768][ C1] ? process_scheduled_works+0xa70/0x1860 [ 822.904789][ C1] process_scheduled_works+0xb5d/0x1860 [ 822.904846][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 822.904873][ C1] ? assign_work+0x3d5/0x5e0 [ 822.904897][ C1] worker_thread+0xa53/0xfc0 [ 822.904944][ C1] kthread+0x389/0x470 [ 822.904968][ C1] ? __pfx_worker_thread+0x10/0x10 [ 822.904987][ C1] ? __pfx_kthread+0x10/0x10 [ 822.905012][ C1] ret_from_fork+0x514/0xb70 [ 822.905036][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 822.905056][ C1] ? __switch_to+0xc79/0x1410 [ 822.905087][ C1] ? __pfx_kthread+0x10/0x10 [ 822.905112][ C1] ret_from_fork_asm+0x1a/0x30 [ 822.905151][ C1] [ 822.905205][ C1] Mem-Info: [ 822.908751][ C0] node 1: slabs: 1357, objs: 21712, free: 33 [ 822.912526][ C1] active_anon:5907 inactive_anon:47 isolated_anon:0 [ 822.912526][ C1] active_file:3010 inactive_file:39969 isolated_file:0 [ 822.912526][ C1] unevictable:768 dirty:0 writeback:0 [ 822.912526][ C1] slab_reclaimable:11199 slab_unreclaimable:1409630 [ 822.912526][ C1] mapped:30495 shmem:1293 pagetables:1259 [ 822.912526][ C1] sec_pagetables:0 bounce:0 [ 822.912526][ C1] kernel_misc_reclaimable:0 [ 822.912526][ C1] free:7313 free_pcp:9307 free_cma:0 [ 822.922713][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x2000920(GFP_ATOMIC|__GFP_ZERO|__GFP_NO_OBJ_EXT) [ 822.924839][ C1] Node 0 active_anon:23624kB inactive_anon:188kB active_file:12036kB inactive_file:159736kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121980kB dirty:0kB writeback:0kB shmem:3636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13504kB pagetables:4888kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 822.930928][ C0] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 822.940478][ C1] Node 1 active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 822.950546][ C0] node 0: slabs: 1468, objs: 16744, free: 2 [ 822.957198][ C1] Node 0 [ 822.960493][ C0] node 1: slabs: 1357, objs: 21712, free: 33 [ 822.963319][ C1] DMA free:10024kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:28kB free_cma:0kB [ 822.967911][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 822.972220][ C1] lowmem_reserve[]: 0 [ 822.977046][ C0] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 822.982076][ C1] 2492 2493 [ 822.987428][ C0] node 0: slabs: 1468, objs: 16744, free: 2 [ 822.993225][ C1] 2493 2493 [ 822.999531][ C0] node 1: slabs: 1357, objs: 21712, free: 33 [ 823.004809][ C1] [ 823.004819][ C1] Node 0 [ 823.010963][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x2000920(GFP_ATOMIC|__GFP_ZERO|__GFP_NO_OBJ_EXT) [ 823.015794][ C1] DMA32 free:4916kB boost:76912kB min:111100kB low:119644kB high:128188kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23624kB inactive_anon:188kB active_file:12036kB inactive_file:159736kB unevictable:1536kB writepending:0kB zspages:0kB present:3129332kB managed:2552548kB mlocked:0kB bounce:0kB free_pcp:12972kB local_pcp:4368kB free_cma:0kB [ 823.020659][ C0] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 823.025227][ C1] lowmem_reserve[]: [ 823.030952][ C0] node 0: slabs: 1468, objs: 16744, free: 2 [ 823.035518][ C1] 0 [ 823.041237][ C0] node 1: slabs: 1357, objs: 21712, free: 33 [ 823.046061][ C1] 0 [ 823.051803][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 823.056778][ C1] 0 0 [ 823.062502][ C0] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 823.068021][ C1] 0 [ 823.073488][ C0] node 0: slabs: 1468, objs: 16744, free: 2 [ 823.078053][ C1] [ 823.078063][ C1] Node 0 [ 823.083688][ C0] node 1: slabs: 1357, objs: 21712, free: 33 [ 823.088074][ C1] Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 823.092847][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x2000920(GFP_ATOMIC|__GFP_ZERO|__GFP_NO_OBJ_EXT) [ 823.097396][ C1] lowmem_reserve[]: 0 [ 823.101568][ C0] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 823.106654][ C1] 0 0 [ 823.111069][ C0] node 0: slabs: 1468, objs: 16744, free: 2 [ 823.116498][ C1] 0 0 [ 823.120566][ C0] node 1: slabs: 1357, objs: 21712, free: 33 [ 823.125299][ C1] [ 823.125310][ C1] Node 1 [ 823.129455][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 823.134019][ C1] Normal free:14312kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:14336KB free_highatomic:932KB active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:140kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24216kB local_pcp:7804kB free_cma:0kB [ 823.139459][ C0] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 823.144042][ C1] lowmem_reserve[]: 0 [ 823.148791][ C0] node 0: slabs: 1468, objs: 16744, free: 2 [ 823.153288][ C1] 0 0 [ 823.158725][ C0] node 1: slabs: 1357, objs: 21712, free: 33 [ 823.162880][ C1] 0 0 [ 823.168727][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x2000920(GFP_ATOMIC|__GFP_ZERO|__GFP_NO_OBJ_EXT) [ 823.173710][ C1] [ 823.173723][ C1] Node 0 [ 823.179591][ C0] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 823.184465][ C1] DMA: [ 823.189557][ C0] node 0: slabs: 1468, objs: 16744, free: 2 [ 823.194234][ C1] 0*4kB [ 823.200132][ C0] node 1: slabs: 1357, objs: 21712, free: 33 [ 823.205044][ C1] 1*8kB [ 823.210534][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 823.216372][ C1] (U) 0*16kB [ 823.221223][ C0] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 823.226391][ C1] 1*32kB [ 823.232373][ C0] node 0: slabs: 1468, objs: 16744, free: 2 [ 823.238237][ C1] (U) 0*64kB [ 823.243611][ C0] node 1: slabs: 1357, objs: 21712, free: 33 [ 823.249124][ C1] 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10024kB [ 824.741895][ C1] Node 0 DMA32: 201*4kB (UME) 495*8kB (UME) 806*16kB (UME) 246*32kB (UME) 97*64kB (UME) 41*128kB (UME) 151*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 76156kB [ 824.758932][ C1] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 824.770589][ C1] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 0*16kB 4*32kB (UMH) 2*64kB (M) 3*128kB (UMH) 3*256kB (MH) 3*512kB (UMH) 1*1024kB (U) 1*2048kB (M) 4*4096kB (M) = 22440kB [ 824.786941][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 824.797870][ C1] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 824.807231][ C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 824.816840][ C1] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 824.826177][ C1] 44204 total pagecache pages [ 824.830918][ C1] 0 pages in swap cache [ 824.835095][ C1] Free swap = 124996kB [ 824.839264][ C1] Total swap = 124996kB [ 824.843640][ C1] 2097051 pages RAM [ 824.847461][ C1] 0 pages HighMem/MovableOnly [ 824.852276][ C1] 427132 pages reserved [ 824.856630][ C1] 0 pages cma reserved [ 830.984683][ C1] slab_out_of_memory: 119 callbacks suppressed [ 830.984683][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 830.984704][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 830.990936][ C0] cache: skbuff_ext_cache, object size: 184, buffer size: 256, default order: 0, min order: 0 [ 831.000754][ C1] cache: skbuff_ext_cache, object size: 184, buffer size: 256, default order: 0, min order: 0 [ 831.010567][ C0] node 0: slabs: 43784, objs: 700544, free: 0 [ 831.021049][ C1] node 0: slabs: 43784, objs: 700544, free: 0 [ 831.031568][ C0] node 1: slabs: 92039, objs: 1472624, free: 15 [ 831.037788][ C1] node 1: slabs: 92039, objs: 1472624, free: 15 [ 831.044223][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 831.050714][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 831.056857][ C0] cache: skbuff_ext_cache, object size: 184, buffer size: 256, default order: 0, min order: 0 [ 831.066673][ C1] cache: skbuff_ext_cache, object size: 184, buffer size: 256, default order: 0, min order: 0 [ 831.076487][ C0] node 0: slabs: 43784, objs: 700544, free: 0 [ 831.086899][ C1] node 0: slabs: 43784, objs: 700544, free: 0 [ 831.097315][ C0] node 1: slabs: 92039, objs: 1472624, free: 15 [ 831.103548][ C1] node 1: slabs: 92039, objs: 1472624, free: 15 [ 831.113724][ T13] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 831.116319][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 831.122789][ T9362] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x2000920(GFP_ATOMIC|__GFP_ZERO|__GFP_NO_OBJ_EXT) [ 831.133541][ C1] cache: skbuff_ext_cache, object size: 184, buffer size: 256, default order: 0, min order: 0 [ 831.133571][ C1] node 0: slabs: 43784, objs: 700544, free: 0 [ 831.133588][ C1] node 1: slabs: 92039, objs: 1472624, free: 15 [ 831.143528][ T3349] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 831.144137][ T13] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 831.156823][ T3349] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 831.156845][ T3349] node 0: slabs: 1474, objs: 16808, free: 0 [ 831.156858][ T3349] node 1: slabs: 1357, objs: 21712, free: 33 [ 831.157171][ T3349] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x2000920(GFP_ATOMIC|__GFP_ZERO|__GFP_NO_OBJ_EXT) [ 831.167559][ T9378] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x2000920(GFP_ATOMIC|__GFP_ZERO|__GFP_NO_OBJ_EXT) [ 831.174193][ T3349] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 831.174291][ T3349] node 0: slabs: 1474, objs: 16808, free: 0 [ 831.174307][ T3349] node 1: slabs: 1357, objs: 21712, free: 33 [ 831.423528][ T9362] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 831.440512][ T13] node 0: slabs: 1474, objs: 16808, free: 0 [ 831.457307][ T13] node 1: slabs: 1361, objs: 21776, free: 39 [ 831.474747][ T9362] node 0: slabs: 1474, objs: 16808, free: 0 [ 831.527440][ T9362] node 1: slabs: 1361, objs: 21776, free: 39 [ 831.682687][ T9378] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 831.721871][ T9378] node 0: slabs: 1474, objs: 16808, free: 0 [ 831.755600][ T9378] node 1: slabs: 1361, objs: 21776, free: 38 [ 838.042490][ T31] INFO: task syz.2.5200:24373 blocked for more than 156 seconds. [ 838.090984][ T31] Not tainted syzkaller #0 [ 838.136181][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 838.217226][ T31] task:syz.2.5200 state:D stack:27904 pid:24373 tgid:24370 ppid:16636 task_flags:0x400040 flags:0x00080002 [ 838.326260][ T31] Call Trace: [ 838.355626][ T31] [ 838.400389][ T31] __schedule+0x1821/0x5740 [ 838.438478][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 838.475373][ T31] ? __pfx___schedule+0x10/0x10 [ 838.524505][ T31] ? schedule+0x90/0x360 [ 838.569521][ T31] schedule+0x164/0x360 [ 838.623581][ T31] schedule_preempt_disabled+0x13/0x30 [ 838.668334][ T31] __mutex_lock+0x7f7/0x1550 [ 838.717569][ T31] ? __mutex_lock+0x608/0x1550 [ 838.765529][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 838.809124][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 838.861479][ T31] ? radix_tree_lookup+0x240/0x290 [ 838.916851][ T31] genl_rcv_msg+0x10b/0x7a0 [ 838.963366][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 839.011969][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 839.083813][ T31] netlink_rcv_skb+0x232/0x4b0 [ 839.118837][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 839.151997][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 839.209223][ T31] ? down_read+0x270/0x2e0 [ 839.268070][ T31] ? genl_rcv+0xd/0x40 [ 839.305464][ T31] genl_rcv+0x28/0x40 [ 839.346438][ T31] netlink_unicast+0x75c/0x8e0 [ 839.397196][ T31] netlink_sendmsg+0x813/0xb40 [ 839.446482][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 839.518000][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 839.567291][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 839.605161][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 839.659166][ T31] __sys_sendto+0x672/0x710 [ 839.703397][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 839.778760][ T31] ? exc_page_fault+0x6a/0xc0 [ 839.831164][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 839.876925][ T31] __x64_sys_sendto+0xde/0x100 [ 839.946201][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.044809][ T31] do_syscall_64+0x15f/0xf80 [ 840.081183][ T31] ? trace_irq_disable+0x3b/0x140 [ 840.135085][ T31] ? clear_bhb_loop+0x40/0x90 [ 840.197594][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.340298][ T31] RIP: 0033:0x7f4b97f5d68e [ 840.377269][ T31] RSP: 002b:00007f4b98f29e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 840.486171][ T31] RAX: ffffffffffffffda RBX: 00007f4b98f2b6c0 RCX: 00007f4b97f5d68e [ 840.588884][ T31] RDX: 0000000000000020 RSI: 00007f4b98f2a000 RDI: 0000000000000004 [ 840.686101][ T31] RBP: 0000000000000000 R08: 00007f4b98f29f04 R09: 000000000000000c [ 840.779429][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 840.877686][ T31] R13: 00007f4b98f29f58 R14: 00007f4b98f2a000 R15: 0000000000000000 [ 840.945567][ T31] [ 840.969669][ T31] INFO: task syz.2.5200:24378 blocked for more than 159 seconds. [ 841.055093][ T31] Not tainted syzkaller #0 [ 841.113874][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 841.197748][ T31] task:syz.2.5200 state:D stack:27168 pid:24378 tgid:24370 ppid:16636 task_flags:0x400140 flags:0x00080002 [ 841.332454][ T31] Call Trace: [ 841.363786][ T31] [ 841.391608][ T31] __schedule+0x1821/0x5740 [ 841.438279][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 841.504772][ T31] ? __pfx___schedule+0x10/0x10 [ 841.538060][ T31] ? schedule+0x90/0x360 [ 841.580248][ T31] schedule+0x164/0x360 [ 841.631518][ T31] schedule_preempt_disabled+0x13/0x30 [ 841.694141][ T31] __mutex_lock+0x7f7/0x1550 [ 841.746302][ T31] ? __mutex_lock+0x608/0x1550 [ 841.795419][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 841.891714][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 841.950131][ T31] ? radix_tree_lookup+0x240/0x290 [ 842.007024][ T31] genl_rcv_msg+0x10b/0x7a0 [ 842.056844][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 842.092401][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 842.146558][ T31] netlink_rcv_skb+0x232/0x4b0 [ 842.198585][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 842.255481][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 842.313471][ T31] ? down_read+0x270/0x2e0 [ 842.358404][ T31] ? genl_rcv+0xd/0x40 [ 842.402479][ T31] genl_rcv+0x28/0x40 [ 842.450592][ T31] netlink_unicast+0x75c/0x8e0 [ 842.538663][ T31] netlink_sendmsg+0x813/0xb40 [ 842.589951][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 842.635965][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 842.700604][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 842.763817][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 842.816885][ T31] __sys_sendto+0x672/0x710 [ 842.852303][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 842.909607][ T31] ? fd_install+0x94/0x3d0 [ 842.966103][ T31] ? fd_install+0x306/0x3d0 [ 843.039987][ T31] __x64_sys_sendto+0xde/0x100 [ 843.095064][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.174072][ T31] do_syscall_64+0x15f/0xf80 [ 843.243512][ T31] ? trace_irq_disable+0x3b/0x140 [ 843.294423][ T31] ? clear_bhb_loop+0x40/0x90 [ 843.329854][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.414372][ T31] RIP: 0033:0x7f4b97f5d68e [ 843.449187][ T31] RSP: 002b:00007f4b98f08e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 843.519188][ T31] RAX: ffffffffffffffda RBX: 00007f4b98f0a6c0 RCX: 00007f4b97f5d68e [ 843.619438][ T31] RDX: 0000000000000020 RSI: 00007f4b98f09000 RDI: 0000000000000008 [ 843.731988][ T31] RBP: 0000000000000000 R08: 00007f4b98f08f04 R09: 000000000000000c [ 843.797582][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 843.876108][ T31] R13: 00007f4b98f08f58 R14: 00007f4b98f09000 R15: 0000000000000000 [ 844.015773][ T31] [ 844.030363][ T31] INFO: task syz.2.5200:24379 blocked for more than 162 seconds. [ 844.094077][ T31] Not tainted syzkaller #0 [ 844.154939][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 844.231953][ T31] task:syz.2.5200 state:D stack:27168 pid:24379 tgid:24370 ppid:16636 task_flags:0x400040 flags:0x00080002 [ 844.353251][ T31] Call Trace: [ 844.381576][ T31] [ 844.407463][ T31] __schedule+0x1821/0x5740 [ 844.454537][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 844.502627][ T31] ? __pfx___schedule+0x10/0x10 [ 844.548905][ T31] ? schedule+0x90/0x360 [ 844.607675][ T31] schedule+0x164/0x360 [ 844.643293][ T31] schedule_preempt_disabled+0x13/0x30 [ 844.697697][ T31] __mutex_lock+0x7f7/0x1550 [ 844.748484][ T31] ? __mutex_lock+0x608/0x1550 [ 844.795982][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 844.838794][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 844.932188][ T31] ? radix_tree_lookup+0x240/0x290 [ 844.968311][ T31] genl_rcv_msg+0x10b/0x7a0 [ 845.025423][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 845.065161][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 845.129224][ T31] netlink_rcv_skb+0x232/0x4b0 [ 845.185019][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 845.239365][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 845.294064][ T31] ? down_read+0x270/0x2e0 [ 845.359651][ T31] ? genl_rcv+0xd/0x40 [ 845.414898][ T31] genl_rcv+0x28/0x40 [ 845.470405][ T31] netlink_unicast+0x75c/0x8e0 [ 845.496207][ T31] netlink_sendmsg+0x813/0xb40 [ 845.531584][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 845.589826][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 845.646540][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 845.731048][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 845.770146][ T31] __sys_sendto+0x672/0x710 [ 845.805116][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 845.847722][ T31] ? fd_install+0x94/0x3d0 [ 845.882665][ T31] ? fd_install+0x306/0x3d0 [ 845.926361][ T31] __x64_sys_sendto+0xde/0x100 [ 845.976135][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.034658][ T31] do_syscall_64+0x15f/0xf80 [ 846.087880][ T31] ? trace_irq_disable+0x3b/0x140 [ 846.135660][ T31] ? clear_bhb_loop+0x40/0x90 [ 846.193324][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.244421][ T31] RIP: 0033:0x7f4b97f5d68e [ 846.275424][ T31] RSP: 002b:00007f4b98ee7e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 846.387845][ T31] RAX: ffffffffffffffda RBX: 00007f4b98ee96c0 RCX: 00007f4b97f5d68e [ 846.492418][ T31] RDX: 0000000000000024 RSI: 00007f4b98ee8000 RDI: 000000000000000c [ 846.535038][ T31] RBP: 0000000000000000 R08: 00007f4b98ee7f04 R09: 000000000000000c [ 846.613180][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 846.687414][ T31] R13: 00007f4b98ee7f58 R14: 00007f4b98ee8000 R15: 0000000000000000 [ 846.776528][ T31] [ 846.798128][ T31] INFO: task syz.3.5202:24372 blocked for more than 164 seconds. [ 846.887675][ T31] Not tainted syzkaller #0 [ 846.927424][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 847.011701][ T31] task:syz.3.5202 state:D stack:27904 pid:24372 tgid:24371 ppid:15992 task_flags:0x400040 flags:0x00080002 [ 847.126620][ T31] Call Trace: [ 847.158016][ T31] [ 847.210107][ T31] __schedule+0x1821/0x5740 [ 847.246656][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 847.280416][ T31] ? __pfx___schedule+0x10/0x10 [ 847.337024][ T31] ? schedule+0x90/0x360 [ 847.375837][ T31] schedule+0x164/0x360 [ 847.478381][ T31] schedule_preempt_disabled+0x13/0x30 [ 847.518139][ T31] __mutex_lock+0x7f7/0x1550 [ 847.570087][ T31] ? __mutex_lock+0x608/0x1550 [ 847.631863][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 847.686996][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 847.734323][ T31] ? radix_tree_lookup+0x240/0x290 [ 847.794115][ T31] genl_rcv_msg+0x10b/0x7a0 [ 847.843096][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 847.899058][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 847.958147][ T31] netlink_rcv_skb+0x232/0x4b0 [ 848.031659][ T31] ? __pfx_genl_rcv_msg+0x10/0x10