last executing test programs: 9.376242218s ago: executing program 4 (id=2868): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000040)={r2}) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x20, 0x68, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x1, 0x0, 0x8}, [@NHA_ID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048040}, 0x4000000) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'ip6gre0\x00', @remote}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)={0x14, 0x2d, 0x9, 0x70bd26, 0x80000, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 9.090623816s ago: executing program 4 (id=2872): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x6, 0x4) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x7, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) (async) r4 = socket$alg(0x26, 0x5, 0x0) unshare(0x6020400) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r6}, 0x90) (async) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) (async) r7 = socket(0x10, 0x80002, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000000080)={0x14, r9, 0x21, 0x8d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) (async) sendmsg$nl_route_sched(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0x51b, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x800, 0x9, 0x20000005, 0x9, 0x1}, 0x1}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0) r10 = accept$ax25(r7, &(0x7f00000011c0)={{0x3, @rose}, [@bcast, @default, @bcast, @remote, @rose, @bcast, @null, @null]}, &(0x7f0000000040)=0x48) recvfrom(r4, &(0x7f0000000380)=""/245, 0xf5, 0x2003, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x1, 0x3, 0x2, 0x0, {0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}, 0x80) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xf0, &(0x7f00000001c0)="b9fe268cb89e14f088a847ef6e2e15", 0x0, 0x100, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x30, r1, 0xf7dc9000) (async) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0xb3, @mcast2, 0x7}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 8.845489767s ago: executing program 4 (id=2877): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvfrom$packet(r2, &(0x7f00000001c0)=""/182, 0xb6, 0x40, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 8.626297502s ago: executing program 4 (id=2882): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "8e4212c5d03828c0", "3b302eda54efbd505000df558bd6a4d0089a85f65a51471f6d1fd992bf36cb83", "b41e6c8d", "a254db2753e4d284"}, 0x38) shutdown(r1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x3ff}, {{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x3}, 0x5}], 0x2, 0x0, 0x0) r5 = accept(r3, 0x0, &(0x7f0000000180)) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000080), 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffffe26b653db8985db900"/112], 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[], 0x1a4}, 0x1, 0x0, 0x0, 0x4014841}, 0x4040084) sendmmsg$unix(r1, &(0x7f00000015c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000}}], 0x1, 0x4085) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f00000000c0)=0x4, 0x4) r8 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @loopback, 0x9}, 0x1c) setsockopt$inet6_int(r8, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f00000000c0)="4b0003000000", 0x6) sendto$inet6(r8, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 7.62373536s ago: executing program 4 (id=2891): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0xf, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9, 0x408}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x44}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000000c0)=0x5, 0x4) 7.45626981s ago: executing program 4 (id=2893): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYBLOB="08001b"], 0x30}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200440e5}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$OBJ_GET_PROG(0x9, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0xfffffe96) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r5 = getpid() (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x16}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) syz_open_procfs$namespace(r5, 0xfffffffffffffffe) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r2, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB, @ANYRES32, @ANYBLOB], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) 4.048134468s ago: executing program 0 (id=2920): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x5, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r2, 0x4) r3 = socket$inet6(0xa, 0x5, 0xa) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a000000050000000200000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000dd0e0000001811000033551947c96d90b471501f884e0fbb52a320c0752af26d5561cfaf9532f4652b36fe89ed4ff7f87fb92b77d3730d2074b5e552467cd87b445153116796fe367da8326e865d2bb774ca44144858e21050557362db7b8d1ff002186837d57af0ea380358653a717fbbf77322707ec3d1a4b418c644848dc031831baa107bde60d572cb210e901bf35747caf5f362179737e5e2b2888c200d921e7f6119644af7c3d208084f5933537890d54f3c1473a32fa95d0ec119b5ac53e23d6bcce581d08d78f147e026779c7181d596e65f000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000085000000110000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{r4}, &(0x7f00000007c0), &(0x7f0000000800)='%ps \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x18) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="0209000002ee0000000000000000000039fb1f385cc0b6bd1f4f2a216e6f3c313046c09d8f5856b85059c05060b67220a73ae824fea735e90837ec"], 0x10}}, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r6) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, r8, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) sendmsg$NBD_CMD_STATUS(r6, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000ffdbdf250500000008000100000000000c00060001000000000600000c00030001000000000000000c00060003000000000000000800010000000000"], 0x48}, 0x1, 0x0, 0x0, 0x895}, 0x1) sendto(r3, &(0x7f0000000340)="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", 0xfd, 0x40, 0x0, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000740)={'ip6tnl0\x00', 0x0}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00@', @ANYRES16=0x0, @ANYBLOB="100029bd700001dcdf250e0000002c0002800800080006000000060002004e210000080006000001000005000d00000000000800060009000000"], 0x40}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) socket$nl_route(0x10, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@gettaction={0x134, 0x32, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xe223}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x803}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8e2}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7e3d}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcb}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2ad}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x0, 0xffe0}, {}, {0xffff}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 3.522055349s ago: executing program 3 (id=2926): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000040)=0x5) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000001000370429bd7000fcdbdf2500000000", @ANYRES16=r0, @ANYRESOCT=0x0], 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) socket$caif_stream(0x25, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r2, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4020088}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004010) socket(0x10, 0x803, 0x0) (async) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) (async) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000040)=0x5) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000001000370429bd7000fcdbdf2500000000", @ANYRES16=r0, @ANYRESOCT=0x0], 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) (async) socket$caif_stream(0x25, 0x1, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r2, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4020088}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004010) (async) 3.286853087s ago: executing program 3 (id=2927): r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@remote, @remote, @rose, @null, @remote, @rose]}, &(0x7f0000000080)=0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000002c0)={0x10000018}) syz_genetlink_get_family_id$fou(&(0x7f0000000340), r5) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000001e40)=0x9, 0x4) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x48, 0x1406, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044004}, 0x20008011) getsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000400)={0xffffffff, {{0xa, 0x4e24, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}}, 0x88) recvfrom(r7, &(0x7f0000000180)=""/45, 0x2d, 0x140, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x4, 0x0, 0x3, 0x1, {0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, '\x00', 0x2c}}}}, 0x80) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0xffffffff}, 0x10) 3.271094749s ago: executing program 0 (id=2928): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2c, 0x10, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0xd}, {0x10, 0xe}, {0xfff2, 0xc}}}, 0x24}}, 0x20044000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000180001002bbd700000000000020000040000fd0900110000060015000200000014001680100008800c"], 0x38}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000180001002bbd700000000000020000040000fd0900110000060015000200000014001680100008800c"], 0x38}}, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000200)=0xe) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0xd1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000000206050000000000000000000000000105000100070000000900020073797a300000000014000700080006000000000008001340000000000500050002000000050004000000000011000300"], 0x60}}, 0x0) 2.94010988s ago: executing program 3 (id=2929): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {0xf, 0xb}, {0x9, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r11 = socket$kcm(0x10, 0x2, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000300)=[{0x29, 0x0, 0x8, 0x3}, {0xb, 0x1, 0x0, 0x3}]}, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r12, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r10}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x6, 0x3, 0x1, 0x0, 0x0, 0x400000000}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 2.829415538s ago: executing program 0 (id=2931): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRESOCT=0x0, @ANYRES32, @ANYRES16, @ANYRES32=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0500000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="d7732eb97488aca555af5a547ee1e423e6338740fdc21d6f7754d6a53101648c9ea9f7a61f5467cf51d156e9e00098294ed7739d6da387baf447900951a6f8b881025c595d84c7493c8024c01adedc003d2870e85b4a6c4117b748db56a5e4a20741d73553c682c3a1be2b083986bcabe10c520efdc4b1064bbad4a080d485098a2ab54f1f6c7a6626a95d09b5eb06727b64affb751d91209b3330cbd0b40fe789467e0f7d6d1275f809b6c98aee3ef4c81816e927167ce29eea0ffa6b9208991efca5c94b5824de62144a7eee4f695f3f9055bb05785a1506204dc02efea62c64ece97c18f95db0da9559d5c923c2271286", @ANYBLOB="0000000000000000000000000000000000000000e801721571067c0000000000000000fe030f74961a4920a753218b1d4fe593dc15208de2c445e16102954a06e3fdae33dbd1fc79dad2f393254e57a7fbe8b813d71df305ad7f5777"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000006380000082bc2c9c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000700850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x4c0, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x490, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0xffffffd1, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x0, 0x2, "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"}]}}]}, 0x4c0}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000000500)=0xd0) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) recvmsg$can_raw(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x40000003) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r12}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa98aaaaaaaa86dd6000000000442f00fe80000000000000000000000000001100000000000000000000ffff000000002421880b0000000000000057000086dd080088be000000001000000001000000000096b764e00a83888b072901aca2730000080022eb0000000020000000020000000000"], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62"], 0x10b8}, 0x8000) socket$netlink(0x10, 0x3, 0x0) 1.918642835s ago: executing program 0 (id=2937): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@struct={0x1, 0x2, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x4, 0x9}, {0x3, 0x5, 0x2}]}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x41, 0xff9, 0x1}, 0x28) (rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_80211_join_ibss(&(0x7f0000000240)='wlan0\x00', 0x0, 0x12, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a010400000000000000000a0600010900010073797a31000000000900020073797a3200000000780004806400018009000100686173680000000054000280080007400000000108000540000000070800024000000004080003400000007e0800014000000010080006400000000c08000740000000000800064000000005080002400000000c0800044000000004100001800a00010071756f746100"], 0xcc}}, 0x24000840) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r5, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async, rerun: 64) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r7, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r8, 0x4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080", @ANYRESHEX, @ANYRESOCT=r3, @ANYRES64=r4], 0x2c}}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)=@rc={0x1f, @none, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000040)="a1f721cac46330ad55734dbfadec711bac693a31f26f963a8395bf38cd603bd73a83e03d53f21457b98cbe98be", 0x2d}, {&(0x7f00000000c0)}, {&(0x7f00000002c0)="1831188956eae62dc599c791e1ac99f0d386619f0d41265f889945e4aeee59280f00a441ca2cdc0092555818b4015eb1e3df28048c579aa0af29bd001aebe7287c0c976cdb210883553273373f46e19d45ef5eb3469f2cb117a31366b44f28c287cfd5f5b7d047d62bc03d47e1d60e21efbc93d6338037bfc50ec998db4ae502", 0x80}], 0x3, &(0x7f0000000340)=[{0xc8, 0x109, 0x2, "82295ca24029cb688199c5c7e250ee335d7d55e37a13d8d6916cd8ce79811af2c0ca83670aad41ade745d3105dae2f8e63d9504d1c7d4aef26d7d1e50b7996d16ba23f81fa93f976f17f52f92d555c1f84b74f6b08dc5e62708a3a3ba843d54cdabe05470e5d5e4b4fb28f0f5cef391d0fa8b171db637195a1c6a933ff167625f32ee0de153b841a93b81ae6f0f42ba97a6b3c2fd345d65a0845c55d9061cac53acd8bed89dcd5ba4b6bce78af899efa10b82f92fe"}], 0xc8}, 0x20008080) 1.825120938s ago: executing program 2 (id=2938): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a00010000000000fdffffff0a00", @ANYRES32=0x0, @ANYBLOB="0000000000b47d619900000000000014000100fc000000000000000000000000000001000000000000000000"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, r1, 0x6e566000) (async, rerun: 64) sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) (async, rerun: 64) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) unshare(0x22020400) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000e00000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) socket$inet6(0xa, 0x80000, 0xfffffff7) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r4}, 0x18) (async) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28) (rerun: 64) unshare(0x2a020400) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r7, 0x0) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x4, 0x8, 0x3, 0x5, 0xffffffffffffffff, 0x6, '\x00', 0x0, r7, 0x2, 0x3, 0x4, 0x8}, 0x50) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.694570687s ago: executing program 2 (id=2939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000006240)={0x0, 0x6, 0x17}, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c000000520001002cbd7000fcdbdf250208000300cead0000080002000700000008000500ff00000008000600ff0f0000080001000004000008000200010000800800060004000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000300)="06", 0x40000}], 0x2}}], 0x1, 0x890) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000002c0)=0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000b00)={'batadv0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r10, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028c38ada72ea5b21c493a12ef87cbd7000fedbdf25110000", @ANYRES32=r9, @ANYBLOB], 0x24}}, 0x20008840) ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) socket(0x1d, 0x2, 0x5) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r12, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000240)={'ip6erspan0\x00', 0x800}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x174, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_VFINFO_LIST={0x13c, 0x16, 0x0, 0x1, [{0x94, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0x4}}, @IFLA_VF_MAC={0x28, 0x1, {0x1, @multicast}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7ff, 0x9}}, @IFLA_VF_MAC={0x28, 0x1, {0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}}, @IFLA_VF_LINK_STATE={0x37, 0x5, {0x6, 0x5}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x789, 0xbe}}]}, {0xa4, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7b8a, 0x8}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1, 0xfffd}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7f, 0x2}}, @IFLA_VF_MAC={0x28, 0x1, {0xb, @remote}}, @IFLA_VF_RSS_QUERY_EN={0x0, 0x7, {0x8, 0x4}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x901}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x7}}, @IFLA_VF_VLAN={0x10, 0x2, {0x6, 0xa49, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x6, 0x9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0x3}}]}]}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_GROUP={0x8, 0x1b, 0x8}, @IFLA_CARRIER={0x5, 0x21, 0x22}]}, 0x174}}, 0x8000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 1.304333541s ago: executing program 3 (id=2940): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) (async, rerun: 64) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x28, 0x12, 0xa01, 0x0, 0x0, {0x6}, [@typed={0xc, 0xa1, 0x0, 0x0, @u64=0x15a2}, @typed={0x8, 0xf8, 0x0, 0x0, @str='}{+\x00'}]}, 0x28}}, 0x0) (rerun: 64) 1.290254473s ago: executing program 1 (id=2941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1, 0x0, 0x0, 0x801}, 0x4000045) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="a1a70000", @ANYRES16=r5, @ANYBLOB="01002abd7000fddbdf250f00000008000300", @ANYRES32=r6, @ANYBLOB="0500380000000000"], 0x24}, 0x1, 0x1000000, 0x0, 0x24008850}, 0x4004a040) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x204, 0x3ff, 0x7}}}}]}, 0x44}}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r10, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000001bfc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x7, 0xffe0}, {}, {0xb, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x4c004) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000"], 0x64}, 0x1, 0x0, 0x0, 0x200cc090}, 0x503e96d05e2195a7) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x1f, &(0x7f0000000300)=""/112, &(0x7f0000000180)=0x70) setsockopt$sock_linger(r12, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x3}, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000540)) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000008a14000000110020e8641801000000000000000000"], 0x70}}, 0x0) 1.102138303s ago: executing program 0 (id=2942): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00'}) r1 = epoll_create1(0x0) syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbcbbbbbbbbb4aa468739b8508060001080006040001da82ce4f59beaaaaaaaaaaaa0a01010057"], 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x2003}, {r1, 0xf401}], 0x2, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000100)) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) unshare(0x200) r3 = socket(0x8, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d61746368000000200002"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r5) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r6, 0x607}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044894) writev(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5) setsockopt$inet_tcp_int(r7, 0x6, 0x6, &(0x7f00000000c0)=0xffffffff, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$IMGETCOUNT(r3, 0x40106183, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000480)={0x68000005}) socket$nl_netfilter(0x10, 0x3, 0xc) 1.005730254s ago: executing program 3 (id=2943): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) writev(0xffffffffffffffff, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000042}, 0x8000) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000003605f17dcf292375bcecb52df71f6a446fc4f7aa68583fe1cada9f3ac4c82540dd552e9f9250d78b48466ff8139b7c3f973ff27f73ab6722bb1aa45f888abbf3d8db1350204a11acfbf14651ecd5c872aaa12dcdb1e4f3fdd0b1a4684883f3dbfb7a9a78df082bf1f56316f7220956d40b3b40", @ANYRES16=r1, @ANYBLOB="050100000000008000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="10001780050001000300000000000000"], 0x2c}}, 0x0) 837.145384ms ago: executing program 2 (id=2944): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="58000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e300000000000000000000000080004000e0400001c0016801800018014000b00070000ce"], 0x58}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x86a242, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000000)=0x1) close(r2) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) 761.986062ms ago: executing program 1 (id=2945): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r1, 0x1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r1, &(0x7f0000000380)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendmsg(r0, &(0x7f0000000640)={0x0, 0x5f, 0x0, 0x9, 0x0, 0x0, 0x11000000}, 0x2000c894) 718.226808ms ago: executing program 1 (id=2946): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c00038028000080080003"], 0xec}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c00038028000080080003"], 0xec}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000bc0)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000bc0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000dc0)={{r3, 0x3, 0x4, 0x3, 0x7, 0xc, 0x3344, 0x6, 0x0, 0x6, 0x8, 0x0, 0xd, 0x7e60, 0x97}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000001c0)={{r3, 0x0, 0x3, 0x0, 0x1, 0x5, 0x1, 0xfff, 0x81, 0xb2, 0x9, 0x81, 0x7, 0x9, 0xfffffffffffffff9}, 0x20, [0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000001c0)={{r3, 0x0, 0x3, 0x0, 0x1, 0x5, 0x1, 0xfff, 0x81, 0xb2, 0x9, 0x81, 0x7, 0x9, 0xfffffffffffffff9}, 0x20, [0x0, 0x0, 0x0, 0x0]}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000000)={'wlan1\x00', @random="c32014016800"}) 704.789569ms ago: executing program 2 (id=2947): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0x6d}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) 400.111454ms ago: executing program 1 (id=2948): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r1 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) r3 = epoll_create(0x1200000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x40000001}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)={0x2000a212}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r5}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, &(0x7f00000002c0)=0x10) r8 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r8, 0x84, 0x75, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) sendmmsg$inet6(r5, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) listen(r4, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001000)={'ip_vti0\x00', &(0x7f00000010c0)={'syztnl0\x00', 0x0, 0x40, 0x8000, 0x3, 0x2, {{0x3d, 0x4, 0x1, 0x19, 0xf4, 0x66, 0x0, 0x9f, 0x29, 0x0, @broadcast, @local, {[@timestamp_addr={0x44, 0x24, 0xae, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x1f}}, {@rand_addr=0x64010102, 0xe469}, {@multicast2, 0x356}, {@broadcast, 0x1000}]}, @cipso={0x86, 0x57, 0x2, [{0x6, 0x8, "6ba7ef50ff6e"}, {0x2, 0x2}, {0x0, 0x4, "2ff6"}, {0x2, 0x4, "54f9"}, {0x1, 0x4, "f29a"}, {0x6, 0x3, '\x00'}, {0x5, 0x12, "3b71308e6a2911017ad1656bd5cacdbf"}, {0x1, 0x10, "78d6e14cde48515e83dd7791bc3d"}, {0x6, 0xb, "1647e7f4eb07e45ccc"}, {0x5, 0xb, "d47f24359b0b6f4352"}]}, @timestamp_prespec={0x44, 0x2c, 0x53, 0x3, 0x6, [{@multicast1, 0x100}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x4511}, {@remote, 0xfffffff7}, {@rand_addr=0x64010102, 0x80d}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x7fff}]}, @lsrr={0x83, 0x17, 0xe0, [@multicast1, @private=0xa010102, @private=0xa010101, @remote, @broadcast]}, @ssrr={0x89, 0x1b, 0xe2, [@multicast2, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}, @loopback]}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001200)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x3, '\x00', r9, r7, 0x3, 0x3, 0x5}, 0x50) accept$netrom(r4, 0x0, 0x0) 399.604427ms ago: executing program 2 (id=2949): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f00000003c0)=0x4, 0x4) write(r0, &(0x7f00000002c0), 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x200}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000c80)=ANY=[@ANYBLOB='2\x00\x00\x00', @ANYRES16=r3, @ANYRES16=r1], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10000}, 0x1c, &(0x7f00000001c0)}}], 0x1, 0x11) shutdown(r4, 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0xb0, &(0x7f0000000a40)=[@in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0xba0b, @local, 0x9}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e20, 0x9831, @private0, 0xf}, @in6={0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x513}, @in6={0xa, 0x4e23, 0x81, @loopback, 0x10000}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x82, &(0x7f0000000340)={r6, 0x0, 0x0, 0x9}, &(0x7f00000001c0)=0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)={r7, 0x4f, "9836ba01e9f815626e6c492b45e25616e50a57833994b49c59c7c6b17399a22f02370440e5af94738389b78171cf701c4484d5eaa5586f38955bfdf508b6caa7e2f3874eede059d1311fb48cae6a83"}, &(0x7f0000000480)=0x57) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r9, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f0000000f40)=""/218, 0xda}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}], 0x8}, 0x80000002}], 0x4, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r12 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x34, r11, 0x300, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0xffffffffffffff66, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x851}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 206.700039ms ago: executing program 3 (id=2950): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000950000300000000062f0dc2a88e2833f6d6ba11f0837adb9c4b1891cd5e6be43b56931aee7a0b60c196f902a7b59c27085eedbbf0a4355ce4284a84b274bca4e6b483c77026c58866cd74bcc12f4af2b6024d333372c0b49ec9127257ea74459fba2792fba98e4295b"], &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x52, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) (async) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x52, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x90, r5, 0x209, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xc}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7f}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40001}, 0x8001) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x90, r5, 0x209, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xc}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7f}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40001}, 0x8001) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r8, @ANYBLOB="28002f800c00020002000065b602fd00080001000000000010000380040003800500010000"], 0x44}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r8, @ANYBLOB="28002f800c00020002000065b602fd00080001000000000010000380040003800500010000"], 0x44}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000000), 0x0) (async) writev(r9, &(0x7f0000000000), 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r9, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0x30, r10, 0x8, 0x800, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x4, @bearer=@udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x30}}, 0x20000001) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0xc, 0x0, 0x1, &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0}, 0xfffffffffffffd7d) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000000660000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000f33e93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000400), r2) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r14, 0x200, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x4, 0xb9cc]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000014}, 0x24004080) r15 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x3, @val=@netfilter={0x5, 0x0, 0x5, 0x1}}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@map=r13, r11, 0x20, 0x2015, r0, @value=r15, @void, @void, @void, r12}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@map=r13, r11, 0x20, 0x2015, r0, @value=r15, @void, @void, @void, r12}, 0x20) 202.583427ms ago: executing program 0 (id=2951): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000000c0)='console\x00', r3}, 0x18) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x6, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 32.17798ms ago: executing program 1 (id=2952): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="000800000008b821f80000004fc9417f5ef99f5e97409e24bb324d0d3dbcd6a4cb0215e4e6189bc0530081a240690fc2ead6561680ca1ce9b4c3f3d433dfb68cc296bdf576c408e00b4fdea0bb9975c6f10e262ff597d60bd7ebe2e803f0abdccbb59f6c69eceda79339f413d2ef661b046b5a"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x14}}, 0x4000008) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x24, 0x3e, 0x10b, 0xfffffffc, 0x25dfdbfd, {0x4, 0x7c}, [@nested={0x4, 0x136}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="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", 0xfb}, {&(0x7f0000001480)="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", 0x1000}], 0x2}, 0x0) 31.609865ms ago: executing program 2 (id=2953): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) (async) listen(r1, 0x3) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x100000000) close(0x3) (async) close(0x3) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f0000000400)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x100000001, 0x0, 0x400000}, 0x0, &(0x7f0000000240)={0xb, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x6, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x916}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x7ffffffb, 0x2}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x6, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x916}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x7ffffffb, 0x2}, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x5b, 0x12, 0x4e23}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @remote}]}}}]}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x13, &(0x7f00000003c0)=ANY=[@ANYRES32=r7], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f00000005c0)={&(0x7f0000000280), 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x48, r10, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xc4}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x27a}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x787}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x25a}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x5aaa3b036de89983}, 0x40000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000008c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'ip6gre0\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x2, 0x1, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x40, 0x7800, 0x5, 0x1}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000000a40)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000e40)={0x234, r9, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x138, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x118, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x2a, 0x2, './cgroup.c2\xd3\xe6\xb6\x1d\x80/\xdc\x94\x93\xff\xb46\x99\xd69\xef\xdc\x8c^pu/syz0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc96c}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9a}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'ip6tnl\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x647e}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-@\'\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd20b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x4040080}, 0x44050) 0s ago: executing program 1 (id=2954): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES16=r5], 0x48}, 0x1, 0x0, 0x0, 0x8000010}, 0x20004801) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000580)=0xd, 0x4) recvmmsg(r5, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)=""/124, 0x7c}], 0x2}, 0x6}], 0x1, 0x40000022, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x1, 0x7, 0x7ff, 0x946, 0x10}, {0x6, 0x2, 0x0, 0x5dc, 0x6, 0xfffdfff8}, 0xffff, 0x3, 0x17cf}}, @TCA_TBF_BURST={0x8, 0x6, 0xffffff01}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) pipe(&(0x7f0000000200)) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r7], 0x38}}, 0x50) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0xcd8) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) kernel console output (not intermixed with test programs): stering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.207326][T11146] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.321714][T11146] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.332644][T11146] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.474846][T11189] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1320'. [ 231.493442][T11193] virt_wifi0 speed is unknown, defaulting to 1000 [ 231.493864][T11189] nbd: must specify at least one socket [ 231.582957][T11197] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1322'. [ 231.621006][T11199] tipc: Resetting bearer [ 231.696819][ T6407] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.711216][ T6407] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.728253][ T6407] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 231.818016][ T6407] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 231.857231][ T6407] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 231.876313][ T6407] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 231.937930][ T6407] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.946188][ T6407] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.962570][ T6407] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.972228][ T6407] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.982222][T11195] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.003028][ T6418] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.012264][ T6418] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.190852][T11214] netlink: 'syz.2.1325': attribute type 8 has an invalid length. [ 232.228099][T11216] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 232.250091][T11214] __nla_validate_parse: 1 callbacks suppressed [ 232.250107][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1325'. [ 232.299835][T11214] bond0: entered promiscuous mode [ 232.311556][T11216] netlink: 'syz.1.1327': attribute type 1 has an invalid length. [ 232.319286][T11214] bond_slave_0: entered promiscuous mode [ 232.319564][T11214] bond_slave_1: entered promiscuous mode [ 232.319774][T11214] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 232.323888][T11214] syz_tun: entered promiscuous mode [ 232.366199][T11214] veth1_to_bridge: entered promiscuous mode [ 232.373934][T11214] hsr1: entered promiscuous mode [ 232.579012][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1329'. [ 232.603337][T11225] erspan0: entered promiscuous mode [ 232.612340][T11225] erspan0: left promiscuous mode [ 232.757104][T11233] bridge0: entered allmulticast mode [ 232.763481][T11237] syz_tun: left allmulticast mode [ 232.769935][T11237] syz_tun: left promiscuous mode [ 232.784842][T11237] bridge0: port 3(syz_tun) entered disabled state [ 232.830950][T11237] bridge_slave_1: left allmulticast mode [ 232.837212][T11237] bridge_slave_1: left promiscuous mode [ 232.853621][T11237] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.889752][T11237] bridge_slave_0: left allmulticast mode [ 232.895523][T11237] bridge_slave_0: left promiscuous mode [ 232.926489][T11237] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.269025][T11250] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1337'. [ 233.306129][ T30] audit: type=1800 audit(1759946212.706:6): pid=11245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1334" name="memory.events" dev="tmpfs" ino=1374 res=0 errno=0 [ 233.395276][T11258] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1337'. [ 233.423523][T11250] nbd: socks must be embedded in a SOCK_ITEM attr [ 233.864811][T11276] tipc: Enabling of bearer rejected, already enabled [ 233.888664][T11279] ksmbd: Unknown IPC event: 3, ignore. [ 233.904524][T11281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1345'. [ 233.911289][T11279] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1343'. [ 233.923815][T11279] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1343'. [ 233.950406][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1346'. [ 234.006529][T11284] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 234.017465][ T7649] bond0: (slave bond_slave_0): interface is now down [ 234.024452][ T7649] bond0: (slave bond_slave_1): interface is now down [ 234.035757][ T7649] bond0: (slave wlan1): interface is now down [ 234.057460][ T7649] bond0: (slave syz_tun): interface is now down [ 234.098586][ T7649] bond0: (slave bond_slave_0): interface is now down [ 234.126970][ T7649] bond0: (slave bond_slave_1): interface is now down [ 234.133710][ T7649] bond0: (slave wlan1): interface is now down [ 234.167126][ T7649] bond0: (slave syz_tun): interface is now down [ 234.208197][ T7649] bond0: (slave bond_slave_0): interface is now down [ 234.229676][ T7649] bond0: (slave bond_slave_1): interface is now down [ 234.256836][ T7649] bond0: (slave wlan1): interface is now down [ 234.287009][ T7649] bond0: (slave syz_tun): interface is now down [ 234.307923][T11299] netlink: 'syz.4.1348': attribute type 3 has an invalid length. [ 234.317461][ T7649] bond0: (slave bond_slave_0): interface is now down [ 234.324215][ T7649] bond0: (slave bond_slave_1): interface is now down [ 234.337186][T11299] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1348'. [ 234.346898][ T7649] bond0: (slave wlan1): interface is now down [ 234.365039][ T7649] bond0: (slave syz_tun): interface is now down [ 234.376154][T11301] netlink: 'syz.0.1350': attribute type 1 has an invalid length. [ 234.385582][T11301] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1350'. [ 234.407434][ T7649] bond0: (slave bond_slave_0): interface is now down [ 234.418774][ T7649] bond0: (slave bond_slave_1): interface is now down [ 234.440612][ T7649] bond0: (slave wlan1): interface is now down [ 234.446770][ T7649] bond0: (slave syz_tun): interface is now down [ 234.511241][ T6901] bond0: (slave bond_slave_0): interface is now down [ 234.524334][ T6901] bond0: (slave bond_slave_1): interface is now down [ 234.545682][ T6901] bond0: (slave wlan1): interface is now down [ 234.552556][ T6901] bond0: (slave syz_tun): interface is now down [ 234.579948][ T7649] bond0: (slave bond_slave_0): interface is now down [ 234.586737][ T7649] bond0: (slave bond_slave_1): interface is now down [ 234.607028][ T7649] bond0: (slave wlan1): interface is now down [ 234.613610][ T7649] bond0: (slave syz_tun): interface is now down [ 234.667180][ T7649] bond0: (slave bond_slave_0): interface is now down [ 234.673976][ T7649] bond0: (slave bond_slave_1): interface is now down [ 234.681951][ T7649] bond0: (slave wlan1): interface is now down [ 234.689022][ T7649] bond0: (slave syz_tun): interface is now down [ 234.710286][ T7647] bond0: (slave bond_slave_0): interface is now down [ 234.717231][ T7647] bond0: (slave bond_slave_1): interface is now down [ 234.735116][ T7647] bond0: (slave wlan1): interface is now down [ 234.746988][ T7647] bond0: (slave syz_tun): interface is now down [ 234.750420][T11314] virt_wifi0 speed is unknown, defaulting to 1000 [ 234.764067][ T7647] bond0: now running without any active interface! [ 235.002350][T11329] netlink: 'syz.3.1357': attribute type 18 has an invalid length. [ 235.036618][T11329] netlink: 'syz.3.1357': attribute type 18 has an invalid length. [ 235.092716][ T7647] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.137355][ T7647] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.173190][ T7647] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.190969][ T7647] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.364782][T11347] netlink: 'syz.1.1364': attribute type 6 has an invalid length. [ 235.424843][T11350] virt_wifi0 speed is unknown, defaulting to 1000 [ 235.749376][T11350] netlink: 'syz.4.1365': attribute type 16 has an invalid length. [ 235.768182][T11350] netlink: 'syz.4.1365': attribute type 17 has an invalid length. [ 235.814751][T11350] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 236.431458][T11387] virt_wifi0 speed is unknown, defaulting to 1000 [ 236.542338][T11390] macsec0: entered allmulticast mode [ 236.602950][T11397] can: request_module (can-proto-0) failed. [ 236.643147][T11397] gre0: entered allmulticast mode [ 237.859530][T11437] __nla_validate_parse: 10 callbacks suppressed [ 237.859551][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1384'. [ 237.944447][T11437] bridge2: entered allmulticast mode [ 237.951433][T11445] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 237.962620][T11437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1384'. [ 237.973190][T11437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1384'. [ 238.136106][T11457] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1388'. [ 238.199370][T11452] virt_wifi0 speed is unknown, defaulting to 1000 [ 238.561997][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1396'. [ 238.563432][T11483] geneve3: entered promiscuous mode [ 238.571261][T11485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1396'. [ 238.587739][ T6418] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.604321][T11483] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1395'. [ 238.614528][ T6418] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.623833][ T6418] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.634762][T11483] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1395'. [ 238.681252][ T6418] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.706899][T11488] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1397'. [ 238.784822][T11493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1399'. [ 238.825202][T11495] netlink: 'syz.1.1400': attribute type 14 has an invalid length. [ 239.493542][T11520] virt_wifi0 speed is unknown, defaulting to 1000 [ 239.513004][T11525] tipc: Enabled bearer , priority 0 [ 239.553676][T11522] veth0_to_batadv: entered promiscuous mode [ 239.562773][T11522] veth0_to_batadv: entered allmulticast mode [ 239.724421][T11525] tipc: Resetting bearer [ 240.570322][ T9847] tipc: Node number set to 2841988519 [ 240.968154][T11539] dummy0: entered promiscuous mode [ 240.973586][T11539] macvtap1: entered promiscuous mode [ 240.981108][T11539] macvtap1: entered allmulticast mode [ 240.986674][T11539] dummy0: entered allmulticast mode [ 241.006452][T11546] dummy0: left allmulticast mode [ 241.015804][T11546] dummy0: left promiscuous mode [ 241.058031][T11521] tipc: Disabling bearer [ 241.084281][T11545] virt_wifi0 speed is unknown, defaulting to 1000 [ 241.105439][T11553] netlink: 'syz.3.1412': attribute type 1 has an invalid length. [ 241.133202][T11553] netlink: 'syz.3.1412': attribute type 2 has an invalid length. [ 241.257015][T11559] ip6gretap0: entered promiscuous mode [ 241.263846][T11559] macsec2: entered promiscuous mode [ 241.421560][T11573] netlink: 'syz.1.1417': attribute type 1 has an invalid length. [ 241.597903][T11577] virt_wifi0 speed is unknown, defaulting to 1000 [ 241.735257][T11586] virt_wifi0 speed is unknown, defaulting to 1000 [ 241.926655][T11596] netlink: 'syz.2.1421': attribute type 1 has an invalid length. [ 241.986567][T11596] 8021q: adding VLAN 0 to HW filter on device bond4 [ 242.023604][T11600] bond4: (slave geneve2): making interface the new active one [ 242.041556][T11600] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 242.080148][T11596] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 242.105515][T11596] bond4: entered promiscuous mode [ 242.113104][T11596] geneve2: entered promiscuous mode [ 242.164883][T11602] virt_wifi0 speed is unknown, defaulting to 1000 [ 242.375424][T11610] netlink: 'syz.3.1426': attribute type 12 has an invalid length. [ 242.644658][T11635] tipc: Resetting bearer [ 242.777935][ T9845] page_pool_release_retry() stalled pool shutdown: id 49, 1 inflight 61 sec [ 243.063863][T11657] syzkaller1: entered promiscuous mode [ 243.074996][T11657] syzkaller1: entered allmulticast mode [ 243.082956][T11655] tipc: Enabling of bearer rejected, failed to enable media [ 243.113627][T11659] __nla_validate_parse: 8 callbacks suppressed [ 243.113644][T11659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1432'. [ 243.208864][T11667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1437'. [ 243.490882][T11679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1438'. [ 243.578914][T11682] virt_wifi0 speed is unknown, defaulting to 1000 [ 243.695080][T11685] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1441'. [ 243.769301][T11690] netlink: 'syz.4.1442': attribute type 3 has an invalid length. [ 243.935516][T11695] tipc: Enabling of bearer rejected, failed to enable media [ 244.192709][T11717] veth0_to_bridge: entered promiscuous mode [ 244.275474][T11710] virt_wifi0 speed is unknown, defaulting to 1000 [ 244.294752][T11721] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1447'. [ 244.422593][T11729] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 244.447422][T11729] bond5 (unregistering): Released all slaves [ 244.463465][T11731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1453'. [ 244.685726][T11710] veth0_to_bridge: left promiscuous mode [ 245.181734][T11771] sctp: [Deprecated]: syz.0.1460 (pid 11771) Use of int in max_burst socket option. [ 245.181734][T11771] Use struct sctp_assoc_value instead [ 245.296182][T11775] netlink: 'syz.4.1463': attribute type 1 has an invalid length. [ 245.320556][T11775] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.547804][T11790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1468'. [ 245.709170][T11799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1470'. [ 245.963621][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1471'. [ 246.312054][T11812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1473'. [ 246.807331][T11838] siw: device registration error -23 [ 247.258036][T11858] batadv_slave_1: entered promiscuous mode [ 247.273149][T11858] bridge_slave_1: left allmulticast mode [ 247.279178][T11858] bridge_slave_1: left promiscuous mode [ 247.285035][T11858] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.316257][T11858] bridge_slave_0: left allmulticast mode [ 247.323506][T11858] bridge_slave_0: left promiscuous mode [ 247.344236][T11858] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.520789][T11861] 8021q: VLANs not supported on vcan0 [ 247.566471][T11861] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 247.618236][T11857] batadv_slave_1: left promiscuous mode [ 247.866200][T11892] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 247.903880][T11892] tipc: Enabling of bearer rejected, already enabled [ 248.239302][T11910] netlink: 'syz.1.1501': attribute type 1 has an invalid length. [ 248.363139][T11922] __nla_validate_parse: 3 callbacks suppressed [ 248.363159][T11922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1504'. [ 248.390322][T11924] tipc: Enabling of bearer rejected, already enabled [ 248.419292][T11924] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1505'. [ 248.433577][T11926] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 248.448360][T11929] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 248.720215][ T30] audit: type=1804 audit(1759946228.126:7): pid=11937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1509" name="/newroot/330/cgroup.controllers" dev="tmpfs" ino=1712 res=1 errno=0 [ 248.746771][ T30] audit: type=1800 audit(1759946228.126:8): pid=11937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1509" name="cgroup.controllers" dev="tmpfs" ino=1712 res=0 errno=0 [ 248.785500][ T30] audit: type=1800 audit(1759946228.176:9): pid=11941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1509" name="cgroup.controllers" dev="tmpfs" ino=1712 res=0 errno=0 [ 248.859853][T11943] macsec3: entered promiscuous mode [ 248.865253][T11946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1512'. [ 248.874450][T11943] macsec3: entered allmulticast mode [ 248.896739][T11946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1512'. [ 248.948009][T11949] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1513'. [ 249.002251][T11957] netlink: 'syz.3.1515': attribute type 5 has an invalid length. [ 249.026080][T11958] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1515'. [ 249.140620][T11962] dvmrp8: entered allmulticast mode [ 249.214810][T11962] virt_wifi0 speed is unknown, defaulting to 1000 [ 249.330371][T11977] netlink: 'syz.1.1521': attribute type 1 has an invalid length. [ 249.380251][T11972] syzkaller1: entered promiscuous mode [ 249.386336][T11972] syzkaller1: entered allmulticast mode [ 249.618162][T11987] bond1: (slave bridge0): making interface the new active one [ 249.626465][T11987] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 249.692572][T11961] dvmrp8: left allmulticast mode [ 249.726026][T11996] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1522'. [ 249.955090][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1526'. [ 250.097956][T12017] syz.3.1529: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 250.138448][T12017] CPU: 0 UID: 0 PID: 12017 Comm: syz.3.1529 Not tainted syzkaller #0 PREEMPT(full) [ 250.138476][T12017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 250.138497][T12017] Call Trace: [ 250.138505][T12017] [ 250.138515][T12017] dump_stack_lvl+0x189/0x250 [ 250.138550][T12017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.138573][T12017] ? __pfx__printk+0x10/0x10 [ 250.138596][T12017] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 250.138622][T12017] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 250.138650][T12017] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 250.138679][T12017] warn_alloc+0x214/0x310 [ 250.138720][T12017] ? stack_depot_save_flags+0x40/0x860 [ 250.138750][T12017] ? __pfx_warn_alloc+0x10/0x10 [ 250.138778][T12017] ? kasan_save_track+0x4f/0x80 [ 250.138799][T12017] ? xskq_create+0x56/0x170 [ 250.138827][T12017] ? xsk_init_queue+0xb0/0x110 [ 250.138851][T12017] ? xsk_setsockopt+0x4dc/0x8d0 [ 250.138875][T12017] ? do_sock_setsockopt+0x179/0x1b0 [ 250.138920][T12017] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 250.138948][T12017] ? do_syscall_64+0xfa/0xfa0 [ 250.138977][T12017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.139016][T12017] __vmalloc_node_range_noprof+0x125/0x12f0 [ 250.139088][T12017] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 250.139121][T12017] ? __kasan_kmalloc+0x93/0xb0 [ 250.139146][T12017] vmalloc_user_noprof+0xad/0xf0 [ 250.139172][T12017] ? xskq_create+0xbf/0x170 [ 250.139201][T12017] xskq_create+0xbf/0x170 [ 250.139235][T12017] xsk_init_queue+0xb0/0x110 [ 250.139266][T12017] xsk_setsockopt+0x4dc/0x8d0 [ 250.139315][T12017] ? __pfx_xsk_setsockopt+0x10/0x10 [ 250.139348][T12017] ? __pfx_aa_sk_perm+0x10/0x10 [ 250.139376][T12017] ? aa_sock_opt_perm+0xff/0x1b0 [ 250.139407][T12017] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 250.139436][T12017] ? __pfx_xsk_setsockopt+0x10/0x10 [ 250.139466][T12017] do_sock_setsockopt+0x179/0x1b0 [ 250.139502][T12017] __x64_sys_setsockopt+0x13f/0x1b0 [ 250.139540][T12017] do_syscall_64+0xfa/0xfa0 [ 250.139570][T12017] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.139602][T12017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.139623][T12017] ? clear_bhb_loop+0x60/0xb0 [ 250.139650][T12017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.139671][T12017] RIP: 0033:0x7f4e81d8eec9 [ 250.139691][T12017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.139710][T12017] RSP: 002b:00007f4e82cd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 250.139733][T12017] RAX: ffffffffffffffda RBX: 00007f4e81fe5fa0 RCX: 00007f4e81d8eec9 [ 250.139749][T12017] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 250.139763][T12017] RBP: 00007f4e81e11f91 R08: 0000000000000004 R09: 0000000000000000 [ 250.139777][T12017] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.139790][T12017] R13: 00007f4e81fe6038 R14: 00007f4e81fe5fa0 R15: 00007ffefbc76078 [ 250.139827][T12017] [ 250.144654][T12017] Mem-Info: [ 250.232205][T12027] tipc: Enabled bearer , priority 10 [ 250.236293][T12017] active_anon:4815 inactive_anon:0 isolated_anon:0 [ 250.236293][T12017] active_file:3205 inactive_file:39941 isolated_file:0 [ 250.236293][T12017] unevictable:768 dirty:191 writeback:0 [ 250.236293][T12017] slab_reclaimable:11927 slab_unreclaimable:159903 [ 250.236293][T12017] mapped:29157 shmem:1356 pagetables:1122 [ 250.236293][T12017] sec_pagetables:0 bounce:0 [ 250.236293][T12017] kernel_misc_reclaimable:0 [ 250.236293][T12017] free:1252801 free_pcp:19175 free_cma:0 [ 250.502882][T12017] Node 0 active_anon:19360kB inactive_anon:0kB active_file:12820kB inactive_file:159564kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116628kB dirty:760kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14076kB pagetables:4352kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 250.534928][T12017] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 250.577658][T12029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1528'. [ 250.597278][T12017] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 250.697086][T12017] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 250.716091][T12017] Node 0 DMA32 free:1103428kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19212kB inactive_anon:0kB active_file:12820kB inactive_file:157744kB unevictable:1536kB writepending:760kB present:3129332kB managed:2562036kB mlocked:0kB bounce:0kB free_pcp:54268kB local_pcp:34780kB free_cma:0kB [ 250.755476][T12017] lowmem_reserve[]: 0 0 1 1 1 [ 250.760857][T12017] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 250.793390][T12017] lowmem_reserve[]: 0 0 0 0 0 [ 250.794579][T12028] syzkaller0: entered promiscuous mode [ 250.798729][T12017] Node 1 Normal free:3892272kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16644kB local_pcp:8100kB free_cma:0kB [ 250.810813][T12028] syzkaller0: entered allmulticast mode [ 250.836179][T12017] lowmem_reserve[]: 0 0 0 0 0 [ 250.851170][T12017] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 250.865069][T12017] Node 0 DMA32: 937*4kB (UME) 96*8kB (UME) 304*16kB (UME) 472*32kB (UME) 243*64kB (UME) 47*128kB (UME) 62*256kB (UME) 22*512kB (UME) 14*1024kB (UM) 6*2048kB (UM) 245*4096kB (M) = 1103332kB [ 250.865837][T12035] ip6t_srh: unknown srh match flags C404 [ 250.942171][T12017] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 250.955736][T12017] Node 1 Normal: 198*4kB (UME) 59*8kB (UME) 48*16kB (UME) 136*32kB (UME) 39*64kB (UME) 11*128kB (UME) 4*256kB (ME) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 946*4096kB (M) = 3892272kB [ 250.976103][T12017] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.991830][T12017] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 251.002310][T12017] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 251.012504][T12017] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 251.073184][T12017] 44498 total pagecache pages [ 251.082647][T12017] 0 pages in swap cache [ 251.091026][T12017] Free swap = 124996kB [ 251.095298][T12017] Total swap = 124996kB [ 251.101489][T12017] 2097051 pages RAM [ 251.105445][T12017] 0 pages HighMem/MovableOnly [ 251.110805][T12017] 424452 pages reserved [ 251.115082][T12017] 0 pages cma reserved [ 251.200712][T12048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1536'. [ 252.597283][T12048] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 252.733392][T12064] netlink: 'syz.0.1537': attribute type 9 has an invalid length. [ 253.566054][T12092] __nla_validate_parse: 5 callbacks suppressed [ 253.566075][T12092] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1548'. [ 253.748004][T12103] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1551'. [ 253.848072][T12107] netlink: 'syz.1.1553': attribute type 21 has an invalid length. [ 254.190382][T12116] virt_wifi0 speed is unknown, defaulting to 1000 [ 254.220774][T12117] veth0: entered promiscuous mode [ 254.421851][T12127] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1559'. [ 254.434408][T12127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1559'. [ 254.539724][T12117] veth0: left promiscuous mode [ 254.623588][T12132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1562'. [ 254.684040][T12135] virt_wifi0 speed is unknown, defaulting to 1000 [ 254.986857][T12149] virt_wifi0 speed is unknown, defaulting to 1000 [ 255.062340][T12154] netlink: 'syz.0.1565': attribute type 3 has an invalid length. [ 255.110180][T12154] netlink: 'syz.0.1565': attribute type 1 has an invalid length. [ 255.167331][T12154] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1565'. [ 255.609566][T12174] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1568'. [ 255.742658][T12176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1571'. [ 255.995275][T12189] netlink: 'syz.0.1575': attribute type 10 has an invalid length. [ 256.004846][T12190] veth0: entered promiscuous mode [ 256.028948][T12186] virt_wifi0 speed is unknown, defaulting to 1000 [ 256.188011][T12190] netlink: 'syz.4.1574': attribute type 16 has an invalid length. [ 256.195886][T12190] netlink: 'syz.4.1574': attribute type 17 has an invalid length. [ 256.258284][T12196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1576'. [ 256.439574][T12196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1576'. [ 256.445736][T12190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.462559][T12190] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.477345][T12190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 256.683259][T12190] veth0: left promiscuous mode [ 256.962141][T12214] virt_wifi0 speed is unknown, defaulting to 1000 [ 258.194240][T12250] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 258.318314][T12255] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 258.714443][T12271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.725388][T12271] batadv_slave_0: entered promiscuous mode [ 258.768397][T12273] __nla_validate_parse: 6 callbacks suppressed [ 258.768419][T12273] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1597'. [ 259.140264][T12285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1602'. [ 259.162833][T12285] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1602'. [ 259.355550][T12298] tipc: Enabling of bearer rejected, already enabled [ 259.464641][T12303] virt_wifi0 speed is unknown, defaulting to 1000 [ 259.518719][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1608'. [ 259.589818][T12309] hsr_slave_0: left promiscuous mode [ 259.702413][T12306] virt_wifi0 speed is unknown, defaulting to 1000 [ 260.013657][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1609'. [ 260.086834][T12330] sctp: [Deprecated]: syz.0.1610 (pid 12330) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.086834][T12330] Use struct sctp_sack_info instead [ 260.192895][T12335] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1612'. [ 260.204435][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1612'. [ 260.213869][T12335] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 260.235334][T12338] tc_dump_action: action bad kind [ 260.242854][T12338] tc_dump_action: action bad kind [ 260.277583][T12338] tc_dump_action: action bad kind [ 260.282856][T12338] tc_dump_action: action bad kind [ 260.313650][T12338] tc_dump_action: action bad kind [ 260.337142][T12338] tc_dump_action: action bad kind [ 260.415128][T12338] tc_dump_action: action bad kind [ 260.429371][T12338] tc_dump_action: action bad kind [ 260.468215][T12338] tc_dump_action: action bad kind [ 260.474100][T12338] tc_dump_action: action bad kind [ 260.486617][T12338] tc_dump_action: action bad kind [ 260.501720][T12338] tc_dump_action: action bad kind [ 260.511077][T12338] tc_dump_action: action bad kind [ 260.527819][T12338] tc_dump_action: action bad kind [ 260.543159][T12338] tc_dump_action: action bad kind [ 260.549988][T12338] tc_dump_action: action bad kind [ 260.555931][T12338] tc_dump_action: action bad kind [ 260.567236][T12338] tc_dump_action: action bad kind [ 260.580219][T12338] tc_dump_action: action bad kind [ 260.592315][T12338] tc_dump_action: action bad kind [ 260.606499][T12338] tc_dump_action: action bad kind [ 260.617823][T12338] tc_dump_action: action bad kind [ 260.634264][T12338] tc_dump_action: action bad kind [ 260.649306][T12338] tc_dump_action: action bad kind [ 260.654640][T12347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1616'. [ 260.674919][T12338] tc_dump_action: action bad kind [ 260.685159][T12338] tc_dump_action: action bad kind [ 260.703414][T12338] tc_dump_action: action bad kind [ 260.770079][T12338] tc_dump_action: action bad kind [ 260.776739][T12338] tc_dump_action: action bad kind [ 260.782822][T12347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1616'. [ 260.869994][T12338] tc_dump_action: action bad kind [ 260.894936][T12354] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1617'. [ 260.907958][T12338] tc_dump_action: action bad kind [ 260.913426][T12338] tc_dump_action: action bad kind [ 260.925210][T12338] tc_dump_action: action bad kind [ 260.947513][T12354] block nbd0: not configured, cannot reconfigure [ 261.024323][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.169996][T12366] netlink: 'syz.4.1619': attribute type 1 has an invalid length. [ 261.317824][T12371] bond0: (slave dummy0): Releasing backup interface [ 261.358909][T12371] bond0: (slave bond_slave_0): Releasing backup interface [ 261.380962][T12371] bond0: (slave bond_slave_1): Releasing backup interface [ 261.392534][T12371] team0: Port device team_slave_1 removed [ 261.401026][T12371] bond0: (slave batadv_slave_0): Releasing backup interface [ 261.410694][T12380] netlink: 'syz.2.1624': attribute type 2 has an invalid length. [ 261.413260][T12371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.429291][T12371] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 262.434222][T12417] vlan2: left promiscuous mode [ 262.443747][T12417] geneve1: left promiscuous mode [ 262.452991][T12417] vlan2: left allmulticast mode [ 262.498869][T12417] geneve1: left allmulticast mode [ 262.519210][T12417] ip6tnl2: left promiscuous mode [ 262.531771][T12417] ip6tnl2: left allmulticast mode [ 262.560627][T12417] bridge2: left allmulticast mode [ 262.586479][T12417] geneve3: left promiscuous mode [ 262.640299][ T7647] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.685770][ T7647] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.740188][ T7647] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.768691][ T7647] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.108940][T12473] netlink: zone id is out of range [ 263.114727][T12473] netlink: zone id is out of range [ 263.120010][T12473] netlink: zone id is out of range [ 263.125429][T12473] netlink: zone id is out of range [ 263.131778][T12473] netlink: zone id is out of range [ 263.147095][T12473] netlink: zone id is out of range [ 263.158012][T12473] netlink: zone id is out of range [ 263.170561][T12473] netlink: zone id is out of range [ 263.187373][T12473] netlink: zone id is out of range [ 263.192923][T12473] netlink: zone id is out of range [ 263.248419][T12485] xt_bpf: check failed: parse error [ 263.912486][T12521] virt_wifi0 speed is unknown, defaulting to 1000 [ 263.993875][T12528] __nla_validate_parse: 12 callbacks suppressed [ 263.993894][T12528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1665'. [ 264.014600][T12528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1665'. [ 264.577680][T12561] netlink: 'syz.2.1674': attribute type 9 has an invalid length. [ 264.675380][T12554] virt_wifi0 speed is unknown, defaulting to 1000 [ 264.693647][T12564] tipc: Resetting bearer [ 265.064882][T12582] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 265.539797][T12602] netlink: 'syz.0.1681': attribute type 1 has an invalid length. [ 265.809584][T12613] : entered promiscuous mode [ 265.821436][T12611] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1685'. [ 266.035565][T12622] syzkaller0: entered promiscuous mode [ 266.043740][T12622] syzkaller0: entered allmulticast mode [ 266.070158][T12631] ipvlan3: entered promiscuous mode [ 266.079300][T12631] bridge0: port 4(ipvlan3) entered blocking state [ 266.087624][T12631] bridge0: port 4(ipvlan3) entered disabled state [ 266.095633][T12631] ipvlan3: entered allmulticast mode [ 266.105584][T12631] ipvlan3: left allmulticast mode [ 266.748720][T12644] netlink: 'syz.2.1695': attribute type 2 has an invalid length. [ 266.764224][T12648] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1697'. [ 267.806122][T12640] virt_wifi0 speed is unknown, defaulting to 1000 [ 267.902134][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1699'. [ 267.947830][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1700'. [ 268.115804][T12675] sctp: [Deprecated]: syz.0.1705 (pid 12675) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.115804][T12675] Use struct sctp_sack_info instead [ 268.398990][T12687] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1707'. [ 268.545910][T12695] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1711'. [ 268.553308][T12692] virt_wifi0 speed is unknown, defaulting to 1000 [ 268.558267][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1711'. [ 268.575686][T12696] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1713'. [ 269.091370][T12709] Bluetooth: MGMT ver 1.23 [ 269.222151][T12728] netlink: 'syz.3.1723': attribute type 30 has an invalid length. [ 269.272282][T12723] __nla_validate_parse: 1 callbacks suppressed [ 269.272300][T12723] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1723'. [ 269.474795][T12740] syz_tun: entered allmulticast mode [ 269.934261][T12766] netlink: 'syz.4.1736': attribute type 1 has an invalid length. [ 270.012132][T12766] bond3: entered promiscuous mode [ 270.022343][T12766] 8021q: adding VLAN 0 to HW filter on device bond3 [ 270.562280][T12798] block nbd0: Unsupported socket: should be TCP or UNIX. [ 270.655763][T12808] netlink: 'syz.3.1746': attribute type 3 has an invalid length. [ 270.665612][T12808] netlink: 'syz.3.1746': attribute type 1 has an invalid length. [ 270.674731][T12808] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1746'. [ 270.974396][T12819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1750'. [ 271.123403][T12821] net_ratelimit: 42 callbacks suppressed [ 271.123422][T12821] netlink: zone id is out of range [ 271.135553][T12821] netlink: zone id is out of range [ 271.144239][T12821] netlink: zone id is out of range [ 271.150558][T12821] netlink: zone id is out of range [ 271.160690][T12821] netlink: zone id is out of range [ 271.176562][T12821] netlink: zone id is out of range [ 271.182898][ T5841] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 271.189402][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 271.200680][T12821] netlink: zone id is out of range [ 271.212393][T12821] netlink: zone id is out of range [ 271.227452][T12821] netlink: zone id is out of range [ 271.233903][T12827] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1753'. [ 271.244731][T12821] netlink: zone id is out of range [ 271.307130][T12830] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1753'. [ 271.327541][T12829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1754'. [ 271.408435][T12834] netlink: 'syz.3.1755': attribute type 3 has an invalid length. [ 271.734238][T12851] Cannot find set identified by id 3 to match [ 271.782670][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1759'. [ 271.843498][T12856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1761'. [ 272.092377][T12861] tipc: Enabling of bearer rejected, already enabled [ 272.115698][T12861] netlink: 'syz.4.1762': attribute type 1 has an invalid length. [ 272.135020][T12861] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1762'. [ 272.347965][T12869] netlink: 'syz.0.1764': attribute type 12 has an invalid length. [ 272.554229][T12876] virt_wifi0 speed is unknown, defaulting to 1000 [ 272.676277][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1768'. [ 272.972270][T12890] tipc: Enabling of bearer rejected, already enabled [ 273.560455][T12913] tipc: Enabling of bearer rejected, already enabled [ 273.678298][T12918] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1806) ! [ 273.703246][T12913] tipc: Resetting bearer [ 273.719808][T12922] syz.1.1780: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 273.734953][T12922] CPU: 0 UID: 0 PID: 12922 Comm: syz.1.1780 Not tainted syzkaller #0 PREEMPT(full) [ 273.734979][T12922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 273.734992][T12922] Call Trace: [ 273.735000][T12922] [ 273.735008][T12922] dump_stack_lvl+0x189/0x250 [ 273.735050][T12922] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.735073][T12922] ? __pfx__printk+0x10/0x10 [ 273.735095][T12922] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 273.735123][T12922] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 273.735152][T12922] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 273.735182][T12922] warn_alloc+0x214/0x310 [ 273.735211][T12922] ? stack_depot_save_flags+0x40/0x860 [ 273.735237][T12922] ? __pfx_warn_alloc+0x10/0x10 [ 273.735265][T12922] ? kasan_save_track+0x4f/0x80 [ 273.735286][T12922] ? xskq_create+0x56/0x170 [ 273.735315][T12922] ? xsk_init_queue+0xb0/0x110 [ 273.735340][T12922] ? xsk_setsockopt+0x4dc/0x8d0 [ 273.735365][T12922] ? do_sock_setsockopt+0x179/0x1b0 [ 273.735392][T12922] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 273.735420][T12922] ? do_syscall_64+0xfa/0xfa0 [ 273.735450][T12922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.735481][T12922] __vmalloc_node_range_noprof+0x125/0x12f0 [ 273.735540][T12922] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 273.735575][T12922] ? __kasan_kmalloc+0x93/0xb0 [ 273.735601][T12922] vmalloc_user_noprof+0xad/0xf0 [ 273.735627][T12922] ? xskq_create+0xbf/0x170 [ 273.735668][T12922] xskq_create+0xbf/0x170 [ 273.735699][T12922] xsk_init_queue+0xb0/0x110 [ 273.735730][T12922] xsk_setsockopt+0x4dc/0x8d0 [ 273.735758][T12922] ? __pfx_xsk_setsockopt+0x10/0x10 [ 273.735786][T12922] ? __pfx_aa_sk_perm+0x10/0x10 [ 273.735811][T12922] ? aa_sock_opt_perm+0xff/0x1b0 [ 273.735838][T12922] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 273.735865][T12922] ? __pfx_xsk_setsockopt+0x10/0x10 [ 273.735893][T12922] do_sock_setsockopt+0x179/0x1b0 [ 273.735926][T12922] __x64_sys_setsockopt+0x13f/0x1b0 [ 273.735960][T12922] do_syscall_64+0xfa/0xfa0 [ 273.735989][T12922] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.736018][T12922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.736047][T12922] ? clear_bhb_loop+0x60/0xb0 [ 273.736071][T12922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.736090][T12922] RIP: 0033:0x7faabef8eec9 [ 273.736109][T12922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.736144][T12922] RSP: 002b:00007faabfe06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 273.736166][T12922] RAX: ffffffffffffffda RBX: 00007faabf1e5fa0 RCX: 00007faabef8eec9 [ 273.736181][T12922] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 273.736194][T12922] RBP: 00007faabf011f91 R08: 0000000000000004 R09: 0000000000000000 [ 273.736207][T12922] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.736220][T12922] R13: 00007faabf1e6038 R14: 00007faabf1e5fa0 R15: 00007ffd0755e1e8 [ 273.736255][T12922] [ 273.736264][T12922] Mem-Info: [ 274.070475][T12922] active_anon:6345 inactive_anon:0 isolated_anon:0 [ 274.070475][T12922] active_file:3205 inactive_file:39952 isolated_file:0 [ 274.070475][T12922] unevictable:768 dirty:146 writeback:0 [ 274.070475][T12922] slab_reclaimable:12359 slab_unreclaimable:149497 [ 274.070475][T12922] mapped:30609 shmem:2905 pagetables:1170 [ 274.070475][T12922] sec_pagetables:0 bounce:0 [ 274.070475][T12922] kernel_misc_reclaimable:0 [ 274.070475][T12922] free:1246254 free_pcp:33541 free_cma:0 [ 274.151598][T12922] Node 0 active_anon:24480kB inactive_anon:0kB active_file:12820kB inactive_file:159608kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116836kB dirty:584kB writeback:0kB shmem:9284kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14000kB pagetables:4444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 274.216063][T12922] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 274.343172][T12922] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 274.406694][T12922] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 274.429500][T12938] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.448824][T12922] Node 0 DMA32 free:1077460kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19232kB inactive_anon:0kB active_file:12820kB inactive_file:157788kB unevictable:1536kB writepending:584kB present:3129332kB managed:2562036kB mlocked:0kB bounce:0kB free_pcp:121916kB local_pcp:96948kB free_cma:0kB [ 274.457532][T12938] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.508880][T12922] lowmem_reserve[]: 0 0 1 1 1 [ 274.518198][T12922] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 274.555648][T12922] lowmem_reserve[]: 0 0 0 0 0 [ 274.562279][T12922] Node 1 Normal free:3891972kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16888kB local_pcp:8788kB free_cma:0kB [ 274.596191][T12922] lowmem_reserve[]: 0 0 0 0 0 [ 274.605638][T12933] virt_wifi0 speed is unknown, defaulting to 1000 [ 274.619375][T12922] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 274.636521][T12922] Node 0 DMA32: 1949*4kB (UME) 871*8kB (UM) 365*16kB (UME) 222*32kB (UME) 102*64kB (UME) 42*128kB (UME) 20*256kB (UME) 9*512kB (UM) 8*1024kB (UME) 4*2048kB (UME) 247*4096kB (UM) = 1077436kB [ 274.642227][T12944] ªªªªªª: renamed from lo (while UP) [ 274.672835][T12922] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 274.685554][T12922] Node 1 Normal: 72*4kB (UME) 59*8kB (UME) 48*16kB (UME) 140*32kB (UME) 41*64kB (UME) 11*128kB (UME) 4*256kB (ME) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 946*4096kB (M) = 3892024kB [ 274.769042][T12922] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 274.780583][T12922] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 274.810775][T12922] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 274.842240][T12922] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 274.876770][T12922] 44533 total pagecache pages [ 274.892023][T12922] 0 pages in swap cache [ 274.904403][T12922] Free swap = 124996kB [ 274.914032][T12922] Total swap = 124996kB [ 274.924978][T12938] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.945974][T12922] 2097051 pages RAM [ 274.956183][T12922] 0 pages HighMem/MovableOnly [ 274.971376][T12922] 424452 pages reserved [ 274.976117][T12938] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.995000][T12922] 0 pages cma reserved [ 275.001232][T12953] __nla_validate_parse: 1 callbacks suppressed [ 275.001249][T12953] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1787'. [ 275.160113][T12938] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.253558][T12938] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.291898][T12960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1789'. [ 275.670943][T12938] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.682405][T12938] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.045143][T12994] netlink: 'syz.1.1797': attribute type 1 has an invalid length. [ 276.288204][T12996] vlan0: entered allmulticast mode [ 276.293386][T12996] bond2: entered allmulticast mode [ 276.444798][ T7647] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.467466][ T7647] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.519402][T13006] netlink: 'syz.4.1799': attribute type 8 has an invalid length. [ 276.545401][ T7647] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.556283][ T7647] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.634336][ T7647] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.643830][T13010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1801'. [ 276.666265][ T7647] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.747102][ T6418] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.755353][ T6418] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.905224][T13022] virt_wifi0 speed is unknown, defaulting to 1000 [ 276.954348][T13027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1805'. [ 277.288154][T13040] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1809'. [ 277.316185][T13040] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1809'. [ 277.805913][T13051] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1811'. [ 280.118009][T13061] virt_wifi0 speed is unknown, defaulting to 1000 [ 280.131799][T13084] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1820'. [ 280.148887][T13084] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1820'. [ 280.597604][T13106] netlink: 'syz.4.1825': attribute type 9 has an invalid length. [ 280.613221][T13102] virt_wifi0 speed is unknown, defaulting to 1000 [ 280.780883][T13117] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1825'. [ 281.551296][T13123] sctp: [Deprecated]: syz.2.1832 (pid 13123) Use of int in max_burst socket option. [ 281.551296][T13123] Use struct sctp_assoc_value instead [ 281.640421][T13123] netlink: 'syz.2.1832': attribute type 33 has an invalid length. [ 281.659959][T13123] netlink: 'syz.2.1832': attribute type 17 has an invalid length. [ 281.739977][T13123] net_ratelimit: 9 callbacks suppressed [ 281.739996][T13123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.049192][T13136] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1835'. [ 282.380999][T13152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1839'. [ 282.562815][T13160] virt_wifi0 speed is unknown, defaulting to 1000 [ 282.718254][T13172] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 282.734600][T13172] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 282.864184][T13183] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1848'. [ 282.894629][T13173] virt_wifi0 speed is unknown, defaulting to 1000 [ 282.929313][T13168] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1845'. [ 283.470934][T13192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1851'. [ 283.589956][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1854'. [ 283.602197][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1854'. [ 283.645577][T13204] netlink: 'syz.2.1855': attribute type 13 has an invalid length. [ 284.229354][T13204] bridge0: port 3(0!) entered disabled state [ 284.235757][T13204] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.638629][T13204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.698100][T13204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.067337][ T6418] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.081882][ T6418] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.119147][ T6418] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.140482][ T6418] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.161364][ T6418] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.190734][ T6418] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.207306][ T6418] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.225300][ T6418] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.364578][T13230] virt_wifi0 speed is unknown, defaulting to 1000 [ 285.492123][T13237] virt_wifi0 speed is unknown, defaulting to 1000 [ 285.586270][T13243] bond3: entered promiscuous mode [ 285.591877][T13243] bond3: entered allmulticast mode [ 285.599229][T13243] 8021q: adding VLAN 0 to HW filter on device bond3 [ 286.172736][T13251] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1864'. [ 286.183649][T13251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1864'. [ 286.302566][T13243] bond3 (unregistering): Released all slaves [ 286.529407][T13255] tipc: Enabled bearer , priority 10 [ 286.606612][T13255] 8021q: adding VLAN 0 to HW filter on device bond5 [ 286.665865][T13255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1866'. [ 286.969281][T13271] tipc: Enabled bearer , priority 0 [ 286.976655][T13271] syzkaller0: entered promiscuous mode [ 286.982916][T13271] syzkaller0: entered allmulticast mode [ 287.000538][T13281] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 287.066707][T13284] netlink: 'syz.0.1875': attribute type 1 has an invalid length. [ 287.075179][T13284] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1875'. [ 287.095091][T13284] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1875'. [ 287.126072][T13291] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1874'. [ 287.145177][T13269] virt_wifi0 speed is unknown, defaulting to 1000 [ 287.281935][T13295] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1876'. [ 288.593381][T13280] tipc: Resetting bearer [ 288.615198][T13280] tipc: Disabling bearer [ 289.018375][T13316] netlink: 'syz.1.1882': attribute type 10 has an invalid length. [ 289.326800][T13334] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1887'. [ 289.398566][T13337] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1888'. [ 289.451327][T13331] netlink: 19836 bytes leftover after parsing attributes in process `syz.4.1888'. [ 289.496329][T13334] virt_wifi0 speed is unknown, defaulting to 1000 [ 290.044900][T13357] netlink: 'syz.4.1894': attribute type 5 has an invalid length. [ 290.328630][T13377] netlink: 'syz.2.1901': attribute type 3 has an invalid length. [ 290.418589][T13383] tap0: tun_chr_ioctl cmd 1074025677 [ 290.424468][T13383] tap0: linktype set to 0 [ 290.771364][T13393] virt_wifi0 speed is unknown, defaulting to 1000 [ 291.235676][T13412] __nla_validate_parse: 4 callbacks suppressed [ 291.235780][T13412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1910'. [ 291.272020][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1911'. [ 291.392405][T13419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1910'. [ 291.821424][T13427] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1915'. [ 291.888261][T13439] netlink: 'syz.4.1915': attribute type 10 has an invalid length. [ 291.938348][T13439] team0: Port device dummy0 added [ 291.952959][T13431] virt_wifi0 speed is unknown, defaulting to 1000 [ 292.449469][T13449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1920'. [ 292.517501][T13450] 8021q: adding VLAN 0 to HW filter on device bond6 [ 292.590919][T13449] vlan0: entered promiscuous mode [ 292.596106][T13449] batadv0: entered promiscuous mode [ 292.715772][T13431] geneve0: entered promiscuous mode [ 293.268881][T13484] ieee802154 phy1 wpan1: encryption failed: -90 [ 293.379979][T13494] ieee802154 phy1 wpan1: encryption failed: -22 [ 293.388001][T13497] xt_TPROXY: Can be used only with -p tcp or -p udp [ 293.598662][T13496] bond4 (unregistering): Released all slaves [ 293.674012][T13506] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1934'. [ 293.885299][T13517] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1938'. [ 294.070285][T13527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1940'. [ 294.233116][T13525] virt_wifi0 speed is unknown, defaulting to 1000 [ 294.243775][T13532] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1940'. [ 294.310130][T13528] virt_wifi0 speed is unknown, defaulting to 1000 [ 294.424390][T13540] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1942'. [ 295.140315][T13572] netlink: 'syz.0.1953': attribute type 1 has an invalid length. [ 295.229568][T13565] virt_wifi0 speed is unknown, defaulting to 1000 [ 295.321985][T13573] bond6: (slave veth7): Enslaving as an active interface with a down link [ 296.049456][T13585] netlink: 'syz.2.1957': attribute type 10 has an invalid length. [ 296.071822][T13585] !: left allmulticast mode [ 296.083209][T13585] !: left promiscuous mode [ 296.106049][T13585] bridge0: port 3(0!) entered disabled state [ 296.129539][T13585] !: entered promiscuous mode [ 296.135270][T13585] bond0: (slave 0!): Enslaving as an active interface with an up link [ 296.220550][T13596] 0ªX¹¦D: renamed from gretap0 [ 296.234276][T13596] 0ªX¹¦D: entered allmulticast mode [ 296.242209][T13596] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 296.523255][T13601] virt_wifi0 speed is unknown, defaulting to 1000 [ 296.840069][T13616] netlink: 'syz.3.1967': attribute type 8 has an invalid length. [ 296.893846][T13623] __nla_validate_parse: 2 callbacks suppressed [ 296.893865][T13623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1968'. [ 296.903666][T13613] virt_wifi0 speed is unknown, defaulting to 1000 [ 296.916624][T13622] batadv_slave_1: entered promiscuous mode [ 296.948025][T13622] netlink: 'syz.2.1968': attribute type 2 has an invalid length. [ 297.001029][T13621] batadv_slave_1: left promiscuous mode [ 297.046474][T13620] virt_wifi0 speed is unknown, defaulting to 1000 [ 297.059352][T13631] tipc: Enabling of bearer rejected, already enabled [ 297.112591][T13631] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 297.121083][T13631] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 297.325590][T13637] IPVS: persistence engine module ip_vs_pe_ not found [ 297.614701][T13648] macsec1: entered allmulticast mode [ 297.620884][T13648] vlan0: entered allmulticast mode [ 297.626777][T13648] veth0_vlan: entered allmulticast mode [ 297.641989][T13648] vlan0: left allmulticast mode [ 297.649822][T13648] veth0_vlan: left allmulticast mode [ 297.853459][T13650] virt_wifi0 speed is unknown, defaulting to 1000 [ 298.329865][T13672] netlink: 'syz.2.1981': attribute type 1 has an invalid length. [ 298.398126][T13672] bond6: entered promiscuous mode [ 298.405578][T13672] 8021q: adding VLAN 0 to HW filter on device bond6 [ 298.449663][T13672] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1981'. [ 298.475912][T13672] bond6: entered allmulticast mode [ 298.601808][T13672] bond6: (slave bridge7): making interface the new active one [ 298.614811][T13672] bridge7: entered promiscuous mode [ 298.622483][T13672] bridge7: entered allmulticast mode [ 298.631768][T13672] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 299.099281][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 299.105380][ T5841] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 299.464648][T13707] virt_wifi0 speed is unknown, defaulting to 1000 [ 299.936628][T13734] sctp: [Deprecated]: syz.0.1996 (pid 13734) Use of int in max_burst socket option deprecated. [ 299.936628][T13734] Use struct sctp_assoc_value instead [ 300.179033][T13740] Unsupported ieee802154 address type: 0 [ 300.311250][T13742] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 300.322554][T13742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.375088][T13742] hsr0: entered promiscuous mode [ 300.420572][T13742] hsr0: entered allmulticast mode [ 300.464340][T13742] hsr_slave_0: entered allmulticast mode [ 300.495717][T13742] hsr_slave_1: entered allmulticast mode [ 300.576583][T13750] virt_wifi0 speed is unknown, defaulting to 1000 [ 300.645568][T13765] netlink: 'syz.3.2003': attribute type 10 has an invalid length. [ 300.687058][T13765] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2003'. [ 300.729020][T13765] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 300.765458][T13765] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 300.789913][T13765] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 300.896109][T13771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2005'. [ 301.101705][T13768] syzkaller1: entered promiscuous mode [ 301.108120][T13768] syzkaller1: entered allmulticast mode [ 301.110255][T13785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2008'. [ 301.124471][T13778] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2006'. [ 301.131349][T13785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2008'. [ 301.197581][T13780] virt_wifi0 speed is unknown, defaulting to 1000 [ 301.719075][T13783] virt_wifi0 speed is unknown, defaulting to 1000 [ 301.793686][T13791] virt_wifi0 speed is unknown, defaulting to 1000 [ 302.245516][T13823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2019'. [ 302.565990][T13830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2022'. [ 302.576026][T13830] chnl_net:caif_netlink_parms(): no params data found [ 302.595746][T13830] caif1: entered promiscuous mode [ 302.701373][T13829] virt_wifi0 speed is unknown, defaulting to 1000 [ 302.949782][T13838] netlink: 'syz.1.2025': attribute type 1 has an invalid length. [ 302.970317][T13838] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2025'. [ 303.215418][T13848] bridge_slave_0: left promiscuous mode [ 303.258730][T13848] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.292576][T13848] bridge_slave_1: left allmulticast mode [ 303.304283][T13848] bridge_slave_1: left promiscuous mode [ 303.310206][T13848] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.353004][T13848] bond0: (slave bond_slave_0): Releasing backup interface [ 303.371435][T13863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2031'. [ 303.390910][T13848] bond_slave_0: left allmulticast mode [ 303.419654][T13848] bond0: (slave bond_slave_1): Releasing backup interface [ 303.432305][T13848] bond_slave_1: left allmulticast mode [ 303.461225][T13848] team0: Port device team_slave_0 removed [ 303.465418][T13831] netlink: 'syz.0.2021': attribute type 2 has an invalid length. [ 303.539869][T13848] team0: Port device team_slave_1 removed [ 303.546605][T13848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.593242][T13848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.634678][T13848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.689867][T13848] bond3: (slave vti0): Releasing backup interface [ 303.705828][T13848] bond4: left allmulticast mode [ 303.715284][T13848] bond4: left promiscuous mode [ 303.721873][T13848] bridge0: port 3(bond4) entered disabled state [ 303.735364][T13852] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 303.841701][T13880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2032'. [ 303.856267][T13864] tipc: Enabled bearer , priority 0 [ 303.877601][T13869] syzkaller0: entered promiscuous mode [ 303.883141][T13869] syzkaller0: entered allmulticast mode [ 304.094763][T13882] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 304.121543][T13859] tipc: Resetting bearer [ 304.223726][T13859] tipc: Disabling bearer [ 304.272707][T13893] xfrm1: entered allmulticast mode [ 304.490357][ T30] audit: type=1800 audit(1759946283.896:10): pid=13907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2040" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=2239 res=0 errno=0 [ 304.943981][T13928] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 305.075636][T13937] netlink: 'syz.4.2050': attribute type 9 has an invalid length. [ 305.104801][T13937] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2050'. [ 305.289596][T13936] virt_wifi0 speed is unknown, defaulting to 1000 [ 305.394531][T13953] netlink: 352 bytes leftover after parsing attributes in process `syz.3.2052'. [ 305.402538][T13956] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2053'. [ 305.589096][T13966] netlink: 'syz.4.2057': attribute type 41 has an invalid length. [ 305.724272][T13971] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 305.764236][T13976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2058'. [ 305.824647][T13980] netlink: 528 bytes leftover after parsing attributes in process `syz.2.2061'. [ 305.864146][T13985] netlink: 'syz.3.2060': attribute type 1 has an invalid length. [ 306.042281][T13985] 8021q: adding VLAN 0 to HW filter on device bond7 [ 306.109514][T13975] bond7: (slave ip6gretap2): making interface the new active one [ 306.132456][T13975] bond7: (slave ip6gretap2): Enslaving as an active interface with an up link [ 306.169950][T13979] veth9: entered promiscuous mode [ 306.186588][T13979] bond7: (slave veth9): Enslaving as an active interface with a down link [ 306.218723][T13991] bond7: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 306.262378][T13964] virt_wifi0 speed is unknown, defaulting to 1000 [ 306.499882][T13964] tipc: can't start tipc receive workqueue [ 306.721813][T14012] nbd: must specify at least one socket [ 307.377434][T14040] virt_wifi0 speed is unknown, defaulting to 1000 [ 307.431902][T14062] __nla_validate_parse: 7 callbacks suppressed [ 307.431933][T14062] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2082'. [ 307.485116][T14043] virt_wifi0 speed is unknown, defaulting to 1000 [ 307.874582][T14072] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2085'. [ 308.235778][T14082] virt_wifi0 speed is unknown, defaulting to 1000 [ 308.718880][T14099] netlink: 'syz.3.2090': attribute type 3 has an invalid length. [ 308.861686][T14102] syz_tun: entered allmulticast mode [ 308.891789][T14099] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2090'. [ 308.913461][T14106] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2091'. [ 308.940465][T14096] syz_tun: left allmulticast mode [ 309.121347][T14118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2093'. [ 309.239885][T14123] IPVS: set_ctl: invalid protocol: 0 172.20.20.36:20000 [ 309.314582][T14118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2093'. [ 309.360098][T14118] bond0: entered promiscuous mode [ 309.396573][T14118] bond0: left promiscuous mode [ 309.431411][T14121] "syz.3.2094" (14121) uses obsolete ecb(arc4) skcipher [ 309.950724][T14147] delete_channel: no stack [ 310.009144][T14160] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2106'. [ 310.281449][T14179] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 310.406697][T14186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2114'. [ 310.427947][T14186] netlink: 'syz.2.2114': attribute type 3 has an invalid length. [ 310.726351][T14202] virt_wifi0 speed is unknown, defaulting to 1000 [ 311.163038][T14219] tipc: Enabled bearer , priority 0 [ 311.206426][T14219] tipc: Disabling bearer [ 311.239244][T14222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2123'. [ 311.347627][T14227] netlink: 'syz.4.2124': attribute type 1 has an invalid length. [ 311.378270][T14227] netlink: 'syz.4.2124': attribute type 1 has an invalid length. [ 311.515071][T14231] bond3: entered promiscuous mode [ 311.791211][T14247] syzkaller1: entered promiscuous mode [ 311.807980][T14247] syzkaller1: entered allmulticast mode [ 311.956314][T14256] sctp: [Deprecated]: syz.3.2130 (pid 14256) Use of struct sctp_assoc_value in delayed_ack socket option. [ 311.956314][T14256] Use struct sctp_sack_info instead [ 312.071380][T14260] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2131'. [ 312.351078][T14271] netlink: 'syz.3.2135': attribute type 1 has an invalid length. [ 312.360479][T14272] netlink: 'syz.3.2135': attribute type 1 has an invalid length. [ 312.427654][T14272] bond8: entered promiscuous mode [ 312.433463][T14272] 8021q: adding VLAN 0 to HW filter on device bond8 [ 312.489511][T14278] bond8: (slave bridge6): making interface the new active one [ 312.516860][T14278] bridge6: entered promiscuous mode [ 312.525944][T14278] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 312.726458][T14298] netlink: 'syz.3.2140': attribute type 66 has an invalid length. [ 312.734547][T14299] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2142'. [ 312.900585][T14302] virt_wifi0 speed is unknown, defaulting to 1000 [ 313.001502][T14307] virt_wifi0 speed is unknown, defaulting to 1000 [ 313.022814][T14314] veth0: entered promiscuous mode [ 313.250455][T14314] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2145'. [ 313.724645][T14350] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2153'. [ 313.742223][T14314] veth0: left promiscuous mode [ 313.810805][T14347] dvmrp8: entered allmulticast mode [ 313.852244][T14342] virt_wifi0 speed is unknown, defaulting to 1000 [ 313.911434][T14353] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2155'. [ 314.041781][T14347] virt_wifi0 speed is unknown, defaulting to 1000 [ 314.281857][T14365] netlink: 'syz.3.2159': attribute type 2 has an invalid length. [ 314.296503][T14365] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2159'. [ 314.311193][T14357] syzkaller0: entered promiscuous mode [ 314.316709][T14357] syzkaller0: entered allmulticast mode [ 314.393046][T14371] netlink: 468 bytes leftover after parsing attributes in process `syz.1.2160'. [ 314.576261][T14368] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2156'. [ 314.830933][T14389] virt_wifi0 speed is unknown, defaulting to 1000 [ 314.863376][T14390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2163'. [ 314.884161][T14385] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2162'. [ 314.896675][T14390] bridge13: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 315.392419][T14397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2165'. [ 315.449416][T14401] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 317.044602][T14430] virt_wifi0 speed is unknown, defaulting to 1000 [ 317.445463][T14450] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 317.711607][T14460] netlink: 'syz.2.2177': attribute type 2 has an invalid length. [ 317.722044][T14461] virt_wifi0 speed is unknown, defaulting to 1000 [ 317.741081][T14464] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 317.757458][T14464] gretap2: entered promiscuous mode [ 317.767400][T14464] gretap2: entered allmulticast mode [ 317.983869][T14466] virt_wifi0 speed is unknown, defaulting to 1000 [ 318.975701][T14516] bond4: option ad_select: invalid value (34) [ 319.048509][T14516] bond4 (unregistering): Released all slaves [ 319.058131][T14527] __nla_validate_parse: 5 callbacks suppressed [ 319.058150][T14527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2195'. [ 319.430485][T14549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2203'. [ 319.442438][T14550] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2202'. [ 319.466857][T14549] syzkaller1: entered promiscuous mode [ 319.477677][T14549] syzkaller1: entered allmulticast mode [ 319.495563][T14551] netlink: 'syz.1.2200': attribute type 2 has an invalid length. [ 319.611248][T14555] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2203'. [ 319.826056][T14557] netlink: 'syz.1.2200': attribute type 1 has an invalid length. [ 319.870271][T14557] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2200'. [ 319.879572][T14557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2200'. [ 320.203469][T14581] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 320.644918][T14604] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2214'. [ 320.683242][T14606] tipc: Enabled bearer , priority 18 [ 320.773842][T14611] virt_wifi0 speed is unknown, defaulting to 1000 [ 320.853175][T14616] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2219'. [ 320.927123][T14618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2220'. [ 320.989345][T14623] virt_wifi0 speed is unknown, defaulting to 1000 [ 321.264009][T14639] SET target dimension over the limit! [ 321.283804][T14641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2225'. [ 321.513497][T14648] netlink: 'syz.0.2227': attribute type 6 has an invalid length. [ 321.606572][T14648] netlink: 'syz.0.2227': attribute type 12 has an invalid length. [ 321.780500][T14660] vlan3: entered promiscuous mode [ 321.790471][T14660] veth1: entered promiscuous mode [ 321.848988][T14669] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.465598][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.937176][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 323.218677][T14715] tipc: Enabled bearer , priority 0 [ 323.331831][T14715] syzkaller0: entered promiscuous mode [ 323.347523][T14715] syzkaller0: entered allmulticast mode [ 323.444558][T14715] tipc: Resetting bearer [ 323.510766][T14715] tipc: Disabling bearer [ 323.890878][T14752] macvtap2: entered promiscuous mode [ 323.928491][T14752] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 324.258496][T14772] __nla_validate_parse: 10 callbacks suppressed [ 324.258515][T14772] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2260'. [ 324.285673][T14776] sctp: [Deprecated]: syz.2.2263 (pid 14776) Use of int in max_burst socket option deprecated. [ 324.285673][T14776] Use struct sctp_assoc_value instead [ 324.313592][T14772] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 324.342136][T14774] tap0: tun_chr_ioctl cmd 1074025681 [ 324.368480][T14776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2263'. [ 324.525974][T14789] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2267'. [ 325.057367][T14822] xt_TCPMSS: Only works on TCP SYN packets [ 325.166483][T14824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2277'. [ 325.257891][T14829] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2278'. [ 325.261849][T14831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2279'. [ 325.486202][T14842] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2284'. [ 325.516201][T14842] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2284'. [ 325.530155][T14842] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2284'. [ 325.557085][T14842] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2284'. [ 325.711431][T14848] xt_CT: You must specify a L4 protocol and not use inversions on it [ 326.441847][T14883] virt_wifi0 speed is unknown, defaulting to 1000 [ 326.713867][T14906] netlink: 'syz.4.2302': attribute type 12 has an invalid length. [ 326.893528][T14910] netlink: 'syz.4.2303': attribute type 1 has an invalid length. [ 326.909626][T14910] netlink: 'syz.4.2303': attribute type 30 has an invalid length. [ 327.066148][T14917] virt_wifi0 speed is unknown, defaulting to 1000 [ 327.595905][T14922] virt_wifi0 speed is unknown, defaulting to 1000 [ 328.128434][T14960] netlink: 'syz.3.2315': attribute type 2 has an invalid length. [ 328.365826][T14969] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 328.386418][T14969] bond7 (unregistering): Released all slaves [ 328.431404][T14967] virt_wifi0 speed is unknown, defaulting to 1000 [ 328.547902][T14975] virt_wifi0 speed is unknown, defaulting to 1000 [ 328.951667][T14980] virt_wifi0 speed is unknown, defaulting to 1000 [ 328.985695][T15001] virt_wifi0 speed is unknown, defaulting to 1000 [ 329.276635][T15012] vlan2: entered promiscuous mode [ 329.282119][T15012] vlan2: entered allmulticast mode [ 329.335969][T15017] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 329.353120][T15017] netdevsim netdevsim3 netdevsim3: left promiscuous mode [ 329.425337][T15024] __nla_validate_parse: 14 callbacks suppressed [ 329.425358][T15024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2332'. [ 329.495672][T15024] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2332'. [ 329.509932][T15030] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2333'. [ 329.560619][T15031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2333'. [ 330.125613][T15057] siw: device registration error -23 [ 330.216857][T15063] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2341'. [ 330.338702][T15059] tipc: Resetting bearer [ 330.517694][T15069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.608399][T15080] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2346'. [ 330.628259][T15080] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2346'. [ 330.715520][T15087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2349'. [ 330.727271][T15089] vlan0: entered promiscuous mode [ 330.818564][T15087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2349'. [ 330.859071][T15088] syzkaller0: entered promiscuous mode [ 330.864674][T15088] syzkaller0: entered allmulticast mode [ 331.213150][T15114] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2356'. [ 331.529040][T15127] netlink: 'syz.3.2359': attribute type 6 has an invalid length. [ 332.552877][T15108] netlink: 'syz.4.2353': attribute type 6 has an invalid length. [ 332.739364][T15133] netlink: 'syz.2.2361': attribute type 10 has an invalid length. [ 332.895214][T15133] bridge0: entered promiscuous mode [ 332.950010][T15133] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 332.984273][T15143] netlink: 'syz.0.2365': attribute type 13 has an invalid length. [ 333.039003][T15143] netlink: 'syz.0.2365': attribute type 17 has an invalid length. [ 333.211451][T15143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.359002][T15143] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.405582][T15143] 0ªX¹¦À: left allmulticast mode [ 333.458390][T15143] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 333.512543][T15164] tipc: Enabled bearer , priority 0 [ 333.530644][T15160] syzkaller0: entered promiscuous mode [ 333.536163][T15160] syzkaller0: entered allmulticast mode [ 333.594997][T15160] syzkaller0: mtu less than device minimum [ 333.615090][T15169] netlink: 'syz.2.2370': attribute type 21 has an invalid length. [ 333.626671][T15169] netlink: 'syz.2.2370': attribute type 21 has an invalid length. [ 333.810396][T15159] tipc: Resetting bearer [ 333.871440][T15159] tipc: Disabling bearer [ 333.904109][ T6407] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 334.154271][T15192] netlink: 'syz.0.2377': attribute type 1 has an invalid length. [ 334.240323][T15192] 8021q: adding VLAN 0 to HW filter on device bond7 [ 334.258439][T15193] bond7: (slave wlan0): Opening slave failed [ 334.289991][T15200] bond7: (slave wlan0): Opening slave failed [ 335.114411][T15232] virt_wifi0 speed is unknown, defaulting to 1000 [ 335.313242][T15247] virt_wifi0 speed is unknown, defaulting to 1000 [ 335.675002][T15247] tc_dump_action: action bad kind [ 336.173532][T15289] netlink: 'syz.0.2399': attribute type 1 has an invalid length. [ 336.223224][T15289] __nla_validate_parse: 10 callbacks suppressed [ 336.223262][T15289] netlink: 888 bytes leftover after parsing attributes in process `syz.0.2399'. [ 336.338851][T15297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2404'. [ 336.349711][T15295] virt_wifi0 speed is unknown, defaulting to 1000 [ 336.391696][T15301] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2403'. [ 336.417751][T15301] netlink: 'syz.4.2403': attribute type 3 has an invalid length. [ 336.505655][T15302] 8021q: adding VLAN 0 to HW filter on device bond4 [ 336.713011][T15313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2407'. [ 336.717890][T15312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2407'. [ 336.782384][T15318] ip6gre2: entered allmulticast mode [ 337.112699][T15334] tipc: Enabling of bearer rejected, failed to enable media [ 337.444206][T15347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2414'. [ 337.497761][T15350] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2415'. [ 338.057101][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 338.155770][T15353] tipc: Enabled bearer , priority 0 [ 338.164375][T15353] syzkaller0: entered promiscuous mode [ 338.171889][T15353] syzkaller0: entered allmulticast mode [ 338.207683][T15353] tipc: Resetting bearer [ 338.219862][T15356] netlink: 'syz.2.2417': attribute type 10 has an invalid length. [ 338.261203][T15353] tap0: tun_chr_ioctl cmd 1074025676 [ 338.266535][T15353] tap0: owner set to 0 [ 338.288045][T15368] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2420'. [ 338.365583][T15352] tipc: Resetting bearer [ 338.410482][T15352] tipc: Disabling bearer [ 338.472634][T15376] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 338.482880][T15371] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2421'. [ 338.595877][T15376] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2422'. [ 338.977977][T15401] virt_wifi0 speed is unknown, defaulting to 1000 [ 339.043435][T15403] netlink: 'syz.3.2427': attribute type 1 has an invalid length. [ 339.139027][T15407] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 339.150586][T15407] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 339.618876][T15418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 340.014990][T15444] virt_wifi0 speed is unknown, defaulting to 1000 [ 343.164052][T15484] __nla_validate_parse: 9 callbacks suppressed [ 343.164073][T15484] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2444'. [ 343.205072][T15486] dvmrp5: entered allmulticast mode [ 343.233494][T15486] virt_wifi0 speed is unknown, defaulting to 1000 [ 343.361242][T15495] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2447'. [ 343.410352][T15497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2448'. [ 343.502049][T15483] dvmrp5: left allmulticast mode [ 343.517387][T15501] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2449'. [ 343.556233][T15501] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2449'. [ 343.789251][T15514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2452'. [ 344.493645][T15544] nbd: must specify an index to disconnect [ 344.511390][T15554] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2465'. [ 344.668922][T15565] virt_wifi0 speed is unknown, defaulting to 1000 [ 344.705600][T15559] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 344.713282][T15559] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 344.720955][T15559] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 344.728597][T15559] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 344.736312][T15559] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 344.744012][T15559] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 344.751635][T15559] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 344.759263][T15559] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 344.766933][T15559] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 344.780631][T15559] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 345.210614][T15591] geneve3: entered promiscuous mode [ 345.226814][ T7649] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 345.252423][ T7649] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 345.287530][ T7649] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 345.304390][ T7649] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 345.451615][T15603] netlink: 'syz.0.2477': attribute type 15 has an invalid length. [ 345.604901][T15618] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2480'. [ 345.788087][T15623] virt_wifi0 speed is unknown, defaulting to 1000 [ 345.854536][T15629] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2483'. [ 345.874974][T15629] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2483'. [ 345.920456][T15631] veth0_to_team: entered promiscuous mode [ 346.129295][T15623] netlink: 'syz.1.2482': attribute type 16 has an invalid length. [ 346.137456][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 346.145900][T15623] netlink: 'syz.1.2482': attribute type 17 has an invalid length. [ 346.241089][T15648] netlink: 'syz.4.2487': attribute type 4 has an invalid length. [ 346.391811][T15664] ieee802154 phy1 wpan1: encryption failed: -22 [ 346.505370][T15631] veth0_to_team: left promiscuous mode [ 346.711671][T15676] delete_channel: no stack [ 347.134193][T15685] bond4: entered promiscuous mode [ 347.141162][T15685] bond4: entered allmulticast mode [ 347.147025][T15685] 8021q: adding VLAN 0 to HW filter on device bond4 [ 347.525155][T15685] bond4 (unregistering): Released all slaves [ 347.766745][T15689] virt_wifi0 speed is unknown, defaulting to 1000 [ 348.333465][T15723] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 348.344050][T15723] syzkaller1: linktype set to 6 [ 348.439488][T15730] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 348.445542][T15730] syzkaller1: linktype set to 778 [ 349.497731][T15761] Bluetooth: MGMT ver 1.23 [ 349.591053][T15766] netlink: 'syz.4.2508': attribute type 7 has an invalid length. [ 349.658927][T15766] netlink: 'syz.4.2508': attribute type 8 has an invalid length. [ 349.666793][T15766] netlink: 'syz.4.2508': attribute type 13 has an invalid length. [ 349.938544][T15782] netlink: 'syz.2.2511': attribute type 1 has an invalid length. [ 349.988329][T15784] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 350.239150][T15791] syzkaller1: entered allmulticast mode [ 350.566775][T15797] __nla_validate_parse: 4 callbacks suppressed [ 350.566796][T15797] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2514'. [ 350.640043][T15797] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2514'. [ 350.848455][T15812] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2517'. [ 350.948862][T15812] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2517'. [ 351.034359][T15823] virt_wifi0 speed is unknown, defaulting to 1000 [ 351.054374][T15824] virt_wifi0 speed is unknown, defaulting to 1000 [ 351.751434][T15853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2526'. [ 351.988055][T15862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2528'. [ 352.740187][T15914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2534'. [ 352.793200][T15916] net_ratelimit: 3315 callbacks suppressed [ 352.793221][T15916] openvswitch: netlink: Message has 8 unknown bytes. [ 353.385667][T15917] bridge8: port 1(veth11) entered blocking state [ 353.392688][T15917] bridge8: port 1(veth11) entered disabled state [ 353.399776][T15917] veth11: entered allmulticast mode [ 353.426267][T15917] veth11: entered promiscuous mode [ 353.491727][T15919] bridge8: port 2(veth0_to_bond) entered blocking state [ 353.534189][T15919] bridge8: port 2(veth0_to_bond) entered disabled state [ 353.589444][T15919] veth0_to_bond: entered allmulticast mode [ 353.603981][T15919] veth0_to_bond: entered promiscuous mode [ 353.624642][T15923] vlan3: entered allmulticast mode [ 353.631512][T15923] veth1: entered allmulticast mode [ 353.640555][T15923] bridge8: port 3(vlan3) entered blocking state [ 353.679422][T15923] bridge8: port 3(vlan3) entered disabled state [ 353.704796][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2537'. [ 353.722479][T15923] vlan3: entered promiscuous mode [ 353.737075][T15923] veth1: entered promiscuous mode [ 353.974300][T15947] bond0: (slave syz_tun): Releasing backup interface [ 354.022749][T15947] syz_tun (unregistering): left promiscuous mode [ 354.075341][T15967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2543'. [ 354.135169][T15968] netlink: 'syz.4.2542': attribute type 13 has an invalid length. [ 354.157600][T15968] netlink: 'syz.4.2542': attribute type 17 has an invalid length. [ 354.363186][T15971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2544'. [ 354.389073][T15968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 354.486187][T15969] virt_wifi0 speed is unknown, defaulting to 1000 [ 354.761840][T15991] can: request_module (can-proto-0) failed. [ 354.854633][T15996] virt_wifi0 speed is unknown, defaulting to 1000 [ 354.996146][T16005] netlink: 'syz.3.2552': attribute type 37 has an invalid length. [ 355.192920][T16010] virt_wifi0 speed is unknown, defaulting to 1000 [ 355.264939][T16015] tipc: Enabling of bearer rejected, already enabled [ 355.323305][T16011] virt_wifi0 speed is unknown, defaulting to 1000 [ 355.665016][T16027] tipc: New replicast peer: 255.255.255.255 [ 355.692547][T16027] tipc: Enabled bearer , priority 10 [ 355.914216][T16037] __nla_validate_parse: 1 callbacks suppressed [ 355.914236][T16037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2561'. [ 356.571257][T16059] ip6t_srh: unknown srh invflags 4000 [ 356.979034][T16082] virt_wifi0 speed is unknown, defaulting to 1000 [ 357.205117][T16098] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2574'. [ 357.984753][T16105] netlink: 'syz.1.2579': attribute type 1 has an invalid length. [ 357.992630][T16105] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2579'. [ 358.026388][T16105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2579'. [ 358.176628][T16113] netlink: 'syz.1.2583': attribute type 1 has an invalid length. [ 358.190129][T16113] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2583'. [ 359.037366][T16142] ipt_rpfilter: unknown options [ 359.119740][T16149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2593'. [ 359.339424][ T44] IPVS: starting estimator thread 0... [ 359.451591][T16163] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2598'. [ 359.470112][T16161] IPVS: using max 26 ests per chain, 62400 per kthread [ 359.600208][T16171] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 359.890792][T16180] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2603'. [ 359.964922][T16181] virt_wifi0 speed is unknown, defaulting to 1000 [ 360.180358][T16183] syzkaller1: entered promiscuous mode [ 360.201620][T16183] syzkaller1: entered allmulticast mode [ 361.009230][T16211] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2612'. [ 361.103171][T16214] tipc: Enabling of bearer rejected, already enabled [ 361.223907][T16216] netlink: 'syz.3.2614': attribute type 4 has an invalid length. [ 361.567069][T16236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2618'. [ 361.909155][T16250] C: renamed from lo (while UP) [ 361.947168][T16250] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 361.971357][T16253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2624'. [ 362.103183][T16267] netlink: 'syz.4.2624': attribute type 13 has an invalid length. [ 362.137207][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 362.254021][T16272] netlink: 'syz.1.2627': attribute type 83 has an invalid length. [ 362.450372][T16253] Set syz1 is full, maxelem 6117 reached [ 362.930776][T16275] veth0_to_bridge: mtu less than device minimum [ 362.961106][T16270] virt_wifi0 speed is unknown, defaulting to 1000 [ 363.154137][T16288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2631'. [ 363.538077][T16312] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2637'. [ 363.551062][T16312] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2637'. [ 363.588181][T16312] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2637'. [ 363.600977][T16315] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2638'. [ 363.644516][T16315] tipc: Enabled bearer , priority 10 [ 363.655375][T16315] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2638'. [ 363.754648][T16320] netlink: zone id is out of range [ 363.762090][T16320] netlink: zone id is out of range [ 363.797616][T16320] netlink: zone id is out of range [ 363.803107][T16320] netlink: zone id is out of range [ 363.870001][T16320] netlink: zone id is out of range [ 363.875258][T16320] netlink: zone id is out of range [ 364.106614][T16323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2640'. [ 364.536345][T16358] x_tables: duplicate underflow at hook 2 [ 364.713595][T16372] virt_wifi0 speed is unknown, defaulting to 1000 [ 365.642033][T16396] tipc: Enabling of bearer rejected, already enabled [ 365.782507][T16410] bridge9: entered allmulticast mode [ 366.424185][T16433] netlink: 'syz.1.2668': attribute type 11 has an invalid length. [ 366.435929][T16433] __nla_validate_parse: 4 callbacks suppressed [ 366.435949][T16433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2668'. [ 366.443145][T16435] net_ratelimit: 3 callbacks suppressed [ 366.443162][T16435] IPv6: addrconf: prefix option has invalid lifetime [ 366.494888][ T38] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.494980][T16433] netlink: 'syz.1.2668': attribute type 11 has an invalid length. [ 366.505821][ T38] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.531483][T16437] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.2671'. [ 366.541545][ T38] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.561842][T16433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2668'. [ 366.613414][ T38] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.840507][T16451] netlink: zone id is out of range [ 366.852261][T16451] netlink: zone id is out of range [ 366.887137][T16451] netlink: zone id is out of range [ 366.898988][T16451] netlink: zone id is out of range [ 366.904174][T16451] netlink: zone id is out of range [ 366.947005][T16451] netlink: zone id is out of range [ 366.954204][T16451] netlink: zone id is out of range [ 366.977527][T16451] netlink: zone id is out of range [ 366.982883][T16451] netlink: zone id is out of range [ 367.486551][T16470] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2678'. [ 367.514425][T16470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2678'. [ 367.538639][T16474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2677'. [ 367.548841][T16476] tipc: Enabling of bearer rejected, already enabled [ 367.568677][T16474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2677'. [ 367.582875][T16477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2679'. [ 367.592918][T16474] netlink: 'syz.3.2677': attribute type 14 has an invalid length. [ 367.601834][T16474] netlink: 'syz.3.2677': attribute type 13 has an invalid length. [ 367.912728][T16494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2682'. [ 368.520849][T16530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2691'. [ 368.952207][T16545] netlink: 'syz.2.2696': attribute type 83 has an invalid length. [ 369.329526][T16561] macvlan4: entered promiscuous mode [ 369.335622][T16561] vlan0: entered promiscuous mode [ 369.521673][T16573] virt_wifi0 speed is unknown, defaulting to 1000 [ 369.771108][T16546] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 369.778212][T16546] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 369.833702][T16546] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 369.837785][T16592] virt_wifi0 speed is unknown, defaulting to 1000 [ 369.869937][T16546] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 369.888191][T16594] netlink: 'syz.2.2708': attribute type 2 has an invalid length. [ 369.912834][T16546] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 369.932864][T16546] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 369.958009][T16546] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 369.965246][T16546] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 370.260051][T16617] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 370.442811][T16622] netlink: 'syz.0.2715': attribute type 1 has an invalid length. [ 370.526161][T16622] bond8: entered promiscuous mode [ 370.531765][T16622] 8021q: adding VLAN 0 to HW filter on device bond8 [ 370.552468][T16622] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 370.560179][T16622] IPv6: NLM_F_CREATE should be set when creating new route [ 370.567436][T16622] IPv6: NLM_F_CREATE should be set when creating new route [ 370.575269][T16622] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 370.710300][T16626] 8021q: adding VLAN 0 to HW filter on device bond8 [ 370.738376][T16626] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address [ 370.779389][T16626] bond8: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 370.821979][T16626] bond8: (slave wireguard0): making interface the new active one [ 370.855320][T16626] wireguard0: entered promiscuous mode [ 370.889686][T16626] bond8: (slave wireguard0): Enslaving as an active interface with an up link [ 370.892786][T16647] netlink: 'syz.2.2720': attribute type 4 has an invalid length. [ 370.955491][T16622] bond8: (slave wireguard1): The slave device specified does not support setting the MAC address [ 370.984682][T16622] bond8: (slave wireguard1): Enslaving as a backup interface with an up link [ 371.235721][T16663] xt_CT: You must specify a L4 protocol and not use inversions on it [ 371.570218][T16674] __nla_validate_parse: 7 callbacks suppressed [ 371.570236][T16674] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2730'. [ 371.629133][T16672] syzkaller1: entered promiscuous mode [ 371.657844][T16672] syzkaller1: entered allmulticast mode [ 371.745347][T16676] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2729'. [ 371.915395][T16691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2732'. [ 371.979255][T16693] netlink: 'syz.3.2732': attribute type 1 has an invalid length. [ 372.091830][T16700] pimreg: entered allmulticast mode [ 372.098086][T16687] virt_wifi0 speed is unknown, defaulting to 1000 [ 372.142955][T16699] pimreg: left allmulticast mode [ 372.315991][T16711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2738'. [ 372.334511][T16711] netlink: 'syz.3.2738': attribute type 21 has an invalid length. [ 372.419348][T16711] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2738'. [ 372.735219][T16737] Cannot find set identified by id 65534 to match [ 373.025104][T16731] virt_wifi0 speed is unknown, defaulting to 1000 [ 373.496744][T16751] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2749'. [ 373.504606][T16768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2753'. [ 373.523498][T16763] syz.1.2752: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 373.543129][T16731] net_ratelimit: 16 callbacks suppressed [ 373.543149][T16731] openvswitch: netlink: Message has 4 unknown bytes. [ 373.559141][T16763] CPU: 1 UID: 0 PID: 16763 Comm: syz.1.2752 Not tainted syzkaller #0 PREEMPT(full) [ 373.559169][T16763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 373.559190][T16763] Call Trace: [ 373.559199][T16763] [ 373.559209][T16763] dump_stack_lvl+0x189/0x250 [ 373.559241][T16763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.559263][T16763] ? __pfx__printk+0x10/0x10 [ 373.559286][T16763] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 373.559312][T16763] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 373.559339][T16763] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 373.559368][T16763] warn_alloc+0x214/0x310 [ 373.559402][T16763] ? __pfx_warn_alloc+0x10/0x10 [ 373.559439][T16763] ? __get_vm_area_node+0x28f/0x300 [ 373.559464][T16763] ? xskq_create+0xbf/0x170 [ 373.559497][T16763] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 373.559557][T16763] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 373.559590][T16763] ? __kasan_kmalloc+0x93/0xb0 [ 373.559617][T16763] vmalloc_user_noprof+0xad/0xf0 [ 373.559642][T16763] ? xskq_create+0xbf/0x170 [ 373.559681][T16763] xskq_create+0xbf/0x170 [ 373.559714][T16763] xsk_init_queue+0xb0/0x110 [ 373.559750][T16763] xsk_setsockopt+0x57b/0x8d0 [ 373.559781][T16763] ? __pfx_xsk_setsockopt+0x10/0x10 [ 373.559813][T16763] ? __pfx_aa_sk_perm+0x10/0x10 [ 373.559841][T16763] ? aa_sock_opt_perm+0xff/0x1b0 [ 373.559873][T16763] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 373.559902][T16763] ? __pfx_xsk_setsockopt+0x10/0x10 [ 373.559931][T16763] do_sock_setsockopt+0x179/0x1b0 [ 373.559968][T16763] __x64_sys_setsockopt+0x13f/0x1b0 [ 373.560014][T16763] do_syscall_64+0xfa/0xfa0 [ 373.560042][T16763] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.560071][T16763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.560091][T16763] ? clear_bhb_loop+0x60/0xb0 [ 373.560115][T16763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.560144][T16763] RIP: 0033:0x7faabef8eec9 [ 373.560163][T16763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.560181][T16763] RSP: 002b:00007faabfde5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 373.560201][T16763] RAX: ffffffffffffffda RBX: 00007faabf1e6090 RCX: 00007faabef8eec9 [ 373.560216][T16763] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008 [ 373.560228][T16763] RBP: 00007faabf011f91 R08: 0000000000000004 R09: 0000000000000000 [ 373.560240][T16763] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 373.560252][T16763] R13: 00007faabf1e6128 R14: 00007faabf1e6090 R15: 00007ffd0755e1e8 [ 373.560288][T16763] [ 373.560417][T16763] Mem-Info: [ 373.841158][T16763] active_anon:10640 inactive_anon:0 isolated_anon:0 [ 373.841158][T16763] active_file:3411 inactive_file:39994 isolated_file:0 [ 373.841158][T16763] unevictable:768 dirty:132 writeback:0 [ 373.841158][T16763] slab_reclaimable:12624 slab_unreclaimable:247644 [ 373.841158][T16763] mapped:33270 shmem:7191 pagetables:1156 [ 373.841158][T16763] sec_pagetables:0 bounce:0 [ 373.841158][T16763] kernel_misc_reclaimable:0 [ 373.841158][T16763] free:1160015 free_pcp:12858 free_cma:0 [ 373.887901][T16763] Node 0 active_anon:42560kB inactive_anon:0kB active_file:13644kB inactive_file:159776kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133080kB dirty:524kB writeback:0kB shmem:27228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15428kB pagetables:4488kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 373.981000][T16763] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 374.062332][T16763] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 374.118070][T16763] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 374.126459][T16763] Node 0 DMA32 free:730364kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30748kB inactive_anon:0kB active_file:13644kB inactive_file:157964kB unevictable:1536kB writepending:568kB present:3129332kB managed:2562036kB mlocked:0kB bounce:0kB free_pcp:49832kB local_pcp:27804kB free_cma:0kB [ 374.222625][T16763] lowmem_reserve[]: 0 0 1 1 1 [ 374.237662][T16763] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 374.295120][T16763] lowmem_reserve[]: 0 0 0 0 0 [ 374.311493][T16763] Node 1 Normal free:3895748kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13216kB local_pcp:7296kB free_cma:0kB [ 374.374127][T16763] lowmem_reserve[]: 0 0 0 0 0 [ 374.384145][T16763] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 374.400584][T16763] Node 0 DMA32: 1233*4kB (UME) 1599*8kB (UME) 855*16kB (UM) 456*32kB (UM) 296*64kB (UM) 98*128kB (UM) 56*256kB (UM) 25*512kB (UME) 22*1024kB (UME) 5*2048kB (ME) 147*4096kB (M) = 739500kB [ 374.422219][T16763] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 374.443552][T16763] Node 1 Normal: 195*4kB (UME) 59*8kB (UME) 48*16kB (UME) 189*32kB (UME) 55*64kB (UME) 17*128kB (UME) 4*256kB (ME) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 946*4096kB (M) = 3895748kB [ 374.480184][T16784] netlink: 'syz.3.2757': attribute type 13 has an invalid length. [ 374.488546][T16763] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 374.499906][T16763] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 374.536990][T16763] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 374.546592][T16763] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 374.580074][T16763] 45837 total pagecache pages [ 374.602921][T16763] 0 pages in swap cache [ 374.610694][T16763] Free swap = 124996kB [ 374.628107][T16763] Total swap = 124996kB [ 374.632716][T16763] 2097051 pages RAM [ 374.636546][T16763] 0 pages HighMem/MovableOnly [ 374.667921][T16763] 424452 pages reserved [ 374.672353][T16763] 0 pages cma reserved [ 375.760025][T16814] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 375.772128][T16814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2764'. [ 375.792409][T16814] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2764'. [ 375.864608][T16784] tipc: Resetting bearer [ 376.034388][ T38] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.088021][ T38] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.115314][ T38] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.115334][ T5939] syz2: Port: 1 Link DOWN [ 376.148836][ T38] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.227544][ T38] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.268024][ T38] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.288030][ T38] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.307690][ T38] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.392845][T16821] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2767'. [ 376.872601][T16853] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 376.899947][T16852] netlink: 'syz.0.2774': attribute type 1 has an invalid length. [ 376.929446][T16852] __nla_validate_parse: 3 callbacks suppressed [ 376.929466][T16852] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2774'. [ 377.299355][T16865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2777'. [ 377.320878][T16865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2777'. [ 377.395664][T16867] virt_wifi0 speed is unknown, defaulting to 1000 [ 377.843454][T16885] syzkaller0: left promiscuous mode [ 377.862466][T16885] syzkaller0: left allmulticast mode [ 377.934544][ T9867] syz2: Port: 1 Link ACTIVE [ 378.155524][T16900] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2787'. [ 378.170027][T16901] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2787'. [ 378.171077][T16898] IPVS: Unknown mcast interface: vcan0 [ 378.215802][T16900] bond0: entered promiscuous mode [ 378.224720][T16900] bond0: left promiscuous mode [ 378.249820][T16901] bond0: entered promiscuous mode [ 378.278805][T16901] bond0: left promiscuous mode [ 378.313680][T16893] virt_wifi0 speed is unknown, defaulting to 1000 [ 378.363290][T16906] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2788'. [ 378.872204][T16922] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20002 [ 378.890004][T16920] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2793'. [ 379.124157][T16929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2796'. [ 379.169208][T16929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2796'. [ 379.806584][T16954] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2800'. [ 382.336737][T16995] netlink: 'syz.0.2812': attribute type 9 has an invalid length. [ 382.356115][T16995] __nla_validate_parse: 3 callbacks suppressed [ 382.356134][T16995] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2812'. [ 382.787703][T16999] macvtap1: entered promiscuous mode [ 382.793054][T16999] veth1_to_hsr: entered promiscuous mode [ 382.840047][T16999] macvtap1: entered allmulticast mode [ 382.845479][T16999] veth1_to_hsr: entered allmulticast mode [ 383.111854][T17010] netlink: 'syz.0.2816': attribute type 1 has an invalid length. [ 383.140847][T17010] netlink: 'syz.0.2816': attribute type 2 has an invalid length. [ 383.168048][T17011] netlink: 'syz.0.2816': attribute type 1 has an invalid length. [ 383.187061][T17011] netlink: 'syz.0.2816': attribute type 2 has an invalid length. [ 383.202765][T17014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2817'. [ 383.224343][T17014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2817'. [ 383.255563][T17013] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 383.309600][T17013] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2817'. [ 383.368119][T17021] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2819'. [ 383.693233][T17034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2821'. [ 383.726010][T17036] netlink: 'syz.2.2824': attribute type 1 has an invalid length. [ 383.777370][T17038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2823'. [ 383.902631][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.359546][T17051] veth7: entered promiscuous mode [ 384.666107][T17062] syzkaller0: entered promiscuous mode [ 384.674109][T17064] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2830'. [ 384.683291][T17062] syzkaller0: entered allmulticast mode [ 384.713124][T17063] virt_wifi0 speed is unknown, defaulting to 1000 [ 384.853099][T17065] bond9: option packets_per_slave: invalid value (1764717422) [ 384.882534][T17065] bond9: option packets_per_slave: allowed values 0 - 65535 [ 384.893075][T17065] bond9 (unregistering): Released all slaves [ 386.390966][T17081] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 386.498650][T17083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2835'. [ 386.793335][T17098] netlink: 'syz.3.2840': attribute type 38 has an invalid length. [ 386.810279][T17105] tipc: Enabled bearer , priority 0 [ 386.822227][T17098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2840'. [ 386.854445][T17105] tipc: Disabling bearer [ 386.904723][T17110] team0: Port device dummy0 removed [ 386.915973][T17110] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 387.039845][T17112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.086792][T17115] netlink: 'syz.0.2847': attribute type 21 has an invalid length. [ 387.216106][T17125] openvswitch: netlink: Flow key attr not present in new flow. [ 387.343458][T17133] tipc: Enabling of bearer rejected, already enabled [ 387.352859][T17133] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 387.426605][T17136] x_tables: duplicate underflow at hook 3 [ 387.452579][T17137] pimreg: entered allmulticast mode [ 387.544021][T17145] bridge5: entered allmulticast mode [ 387.650270][T17152] netlink: 'syz.1.2857': attribute type 1 has an invalid length. [ 387.681207][T17157] netlink: 'syz.4.2855': attribute type 2 has an invalid length. [ 387.780505][T17152] tipc: Enabling of bearer rejected, failed to enable media [ 388.075609][T17168] __nla_validate_parse: 1 callbacks suppressed [ 388.075629][T17168] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2863'. [ 388.187943][T17173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2865'. [ 388.198070][T17175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2861'. [ 388.285075][T17167] netlink: 'syz.4.2861': attribute type 1 has an invalid length. [ 388.293109][T17167] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2861'. [ 388.317823][T17182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2864'. [ 388.702628][T17207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2870'. [ 388.735067][T17208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2870'. [ 388.786745][T17207] vlan1: entered promiscuous mode [ 388.794813][T17207] macvtap0: entered promiscuous mode [ 388.846268][T17208] vlan1: entered promiscuous mode [ 388.953654][T17213] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe [ 389.341977][T17244] sctp: [Deprecated]: syz.1.2880 (pid 17244) Use of struct sctp_assoc_value in delayed_ack socket option. [ 389.341977][T17244] Use struct sctp_sack_info instead [ 389.462661][T17251] netlink: 'syz.4.2882': attribute type 5 has an invalid length. [ 389.563058][T17256] tipc: Enabled bearer , priority 0 [ 389.587936][T17256] syzkaller0: entered promiscuous mode [ 389.593462][T17256] syzkaller0: entered allmulticast mode [ 389.601870][T17260] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2882'. [ 389.641076][T17256] tipc: Resetting bearer [ 389.709492][T17263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2886'. [ 390.084889][T17256] tipc: Resetting bearer [ 390.155389][T17256] tipc: Disabling bearer [ 390.186581][T17276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2887'. [ 391.430044][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 391.441667][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 391.451618][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 391.468028][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 391.480120][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 391.515373][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 391.524984][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 391.532787][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 391.550597][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 391.558899][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 391.733999][T17318] virt_wifi0 speed is unknown, defaulting to 1000 [ 392.132408][T17353] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 392.222330][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 392.554615][T15904] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 393.405755][T15904] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 393.414905][T15904] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 393.422877][T15904] bond0 (unregistering): Released all slaves [ 393.438795][T15904] bond1 (unregistering): Released all slaves [ 393.453844][T15904] bond2 (unregistering): Released all slaves [ 393.547995][T15904] bond3 (unregistering): Released all slaves [ 393.643494][T15904] bond4 (unregistering): Released all slaves [ 393.657132][ T51] Bluetooth: hci4: command tx timeout [ 393.812730][T15904] tipc: Disabling bearer [ 393.876366][T15904] tipc: Disabling bearer [ 393.917210][T15904] tipc: Left network mode [ 393.925277][T17369] __nla_validate_parse: 6 callbacks suppressed [ 393.925298][T17369] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2919'. [ 393.977814][T17369] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2919'. [ 394.004340][T17369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2919'. [ 394.013694][T17376] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2921'. [ 394.029740][T17376] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2921'. [ 394.089280][T17318] chnl_net:caif_netlink_parms(): no params data found [ 394.454646][T17395] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2926'. [ 394.494467][T17395] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2926'. [ 395.112304][T17413] netlink: 'syz.2.2930': attribute type 1 has an invalid length. [ 395.142621][T17318] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.167829][T17318] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.185319][T17318] bridge_slave_0: entered allmulticast mode [ 395.205445][T17318] bridge_slave_0: entered promiscuous mode [ 395.220511][T17420] netlink: 'syz.2.2930': attribute type 11 has an invalid length. [ 395.278208][T17413] 8021q: adding VLAN 0 to HW filter on device bond9 [ 395.288166][T17415] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2931'. [ 395.316054][T17417] vlan3: entered allmulticast mode [ 395.321612][T17417] veth1: entered allmulticast mode [ 395.334233][T17418] tipc: Enabling of bearer rejected, already enabled [ 395.344886][T17318] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.353729][T17318] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.361268][T17318] bridge_slave_1: entered allmulticast mode [ 395.373633][T17318] bridge_slave_1: entered promiscuous mode [ 395.381361][T17411] syzkaller0: entered promiscuous mode [ 395.387168][T17411] syzkaller0: entered allmulticast mode [ 395.414150][T17411] netlink: 'syz.3.2929': attribute type 39 has an invalid length. [ 395.472911][T17434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2933'. [ 395.562230][T17318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.576770][T17318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.662641][T15904] hsr_slave_0: left promiscuous mode [ 395.669552][T15904] hsr_slave_1: left promiscuous mode [ 395.737850][ T51] Bluetooth: hci4: command tx timeout [ 396.127795][T17453] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2938'. [ 396.219863][T17456] netlink: 'syz.2.2939': attribute type 1 has an invalid length. [ 396.379713][T17458] can: request_module (can-proto-5) failed. [ 396.678613][T17456] 8021q: adding VLAN 0 to HW filter on device bond10 [ 396.710000][T17318] team0: Port device team_slave_0 added [ 396.726545][T17318] team0: Port device team_slave_1 added [ 396.837074][T17318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.844240][T17318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.892864][T17318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.968544][T17318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.982526][T17318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.010257][T17318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.101400][T17473] virt_wifi0 speed is unknown, defaulting to 1000 [ 397.141141][T17482] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 397.149229][T17482] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 397.167842][T17476] virt_wifi0 speed is unknown, defaulting to 1000 [ 397.224443][T17479] bond11: entered promiscuous mode [ 397.239421][T17479] 8021q: adding VLAN 0 to HW filter on device bond11 [ 397.273361][T15904] IPVS: stop unused estimator thread 0... [ 397.389403][T17486] 8021q: adding VLAN 0 to HW filter on device bond11 [ 397.398618][T17486] bond11: (slave wireguard0): The slave device specified does not support setting the MAC address [ 397.410767][T17486] bond11: (slave wireguard0): Error -95 calling set_mac_address [ 397.464015][T17318] hsr_slave_0: entered promiscuous mode [ 397.496295][T17318] hsr_slave_1: entered promiscuous mode [ 397.512527][T17318] debugfs: 'hsr0' already exists in 'hsr' [ 397.532102][T17318] Cannot create hsr debugfs directory [ 397.818214][ T51] Bluetooth: hci4: command tx timeout [ 397.912988][T17508] netlink: 'syz.0.2951': attribute type 10 has an invalid length. [ 397.923126][T17508] dummy0: entered promiscuous mode [ 397.947927][T17508] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 397.980498][T15904] ------------[ cut here ]------------ [ 397.986063][T15904] WARNING: CPU: 0 PID: 15904 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x26d/0x2f0 [ 397.995856][T15904] Modules linked in: [ 398.001259][T15904] CPU: 0 UID: 0 PID: 15904 Comm: kworker/u8:63 Not tainted syzkaller #0 PREEMPT(full) [ 398.011336][T15904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 398.021599][T15904] Workqueue: netns cleanup_net [ 398.026439][T15904] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 398.032366][T15904] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 eb a8 38 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 19 56 19 f8 e8 d4 fe d3 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 c6 fe d3 f7 90 0f 0b 90 e9 60 fe ff ff [ 398.052537][T15904] RSP: 0000:ffffc9001bef7878 EFLAGS: 00010293 [ 398.058775][T15904] RAX: ffffffff89eb1c9c RBX: ffff888032044900 RCX: ffff8880499d3c80 [ 398.066822][T15904] RDX: 0000000000000000 RSI: ffffffff8d9c68ab RDI: ffff8880499d3c80 [ 398.074888][T15904] RBP: ffffc9001bef7990 R08: ffffffff8f9d4c37 R09: 1ffffffff1f3a986 [ 398.083570][T15904] R10: dffffc0000000000 R11: fffffbfff1f3a987 R12: ffffffff8f5ce900 [ 398.091654][T15904] R13: 1ffff920037def3c R14: ffff888032045dc0 R15: dffffc0000000000 [ 398.099735][T15904] FS: 0000000000000000(0000) GS:ffff888125d3b000(0000) knlGS:0000000000000000 [ 398.109077][T15904] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.115691][T15904] CR2: 000000110c3552d1 CR3: 0000000075a70000 CR4: 00000000003526f0 [ 398.124220][T15904] Call Trace: [ 398.127846][T15904] [ 398.130839][T15904] xfrm_net_exit+0x2d/0x70 [ 398.135297][T15904] ops_undo_list+0x49a/0x990 [ 398.140361][T15904] ? __pfx_ops_undo_list+0x10/0x10 [ 398.145520][T15904] ? do_raw_spin_unlock+0x122/0x240 [ 398.150852][T15904] cleanup_net+0x4d8/0x820 [ 398.155316][T15904] ? __pfx_cleanup_net+0x10/0x10 [ 398.160385][T15904] ? _raw_spin_unlock_irq+0x23/0x50 [ 398.165629][T15904] ? process_scheduled_works+0x9ef/0x17b0 [ 398.171785][T15904] ? process_scheduled_works+0x9ef/0x17b0 [ 398.177635][T15904] process_scheduled_works+0xade/0x17b0 [ 398.183258][T15904] ? __pfx_process_scheduled_works+0x10/0x10 [ 398.189338][T15904] worker_thread+0x8a0/0xda0 [ 398.194007][T15904] kthread+0x711/0x8a0 [ 398.198552][T15904] ? __pfx_worker_thread+0x10/0x10 [ 398.203720][T15904] ? __pfx_kthread+0x10/0x10 [ 398.208422][T15904] ? _raw_spin_unlock_irq+0x23/0x50 [ 398.213665][T15904] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.219624][T15904] ? __pfx_kthread+0x10/0x10 [ 398.224279][T15904] ret_from_fork+0x4b9/0x870 [ 398.229302][T15904] ? __pfx_ret_from_fork+0x10/0x10 [ 398.234481][T15904] ? __switch_to_asm+0x39/0x70 [ 398.239340][T15904] ? __switch_to_asm+0x33/0x70 [ 398.245367][T15904] ? __pfx_kthread+0x10/0x10 [ 398.250064][T15904] ret_from_fork_asm+0x1a/0x30 [ 398.254897][T15904] [ 398.258351][T15904] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 398.265656][T15904] CPU: 0 UID: 0 PID: 15904 Comm: kworker/u8:63 Not tainted syzkaller #0 PREEMPT(full) [ 398.275308][T15904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 398.285394][T15904] Workqueue: netns cleanup_net [ 398.290211][T15904] Call Trace: [ 398.293604][T15904] [ 398.296560][T15904] dump_stack_lvl+0x99/0x250 [ 398.301270][T15904] ? __asan_memcpy+0x40/0x70 [ 398.305920][T15904] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.311250][T15904] ? __pfx__printk+0x10/0x10 [ 398.315877][T15904] vpanic+0x281/0x750 [ 398.319874][T15904] ? __pfx__printk+0x10/0x10 [ 398.324481][T15904] ? __pfx_vpanic+0x10/0x10 [ 398.329016][T15904] ? is_bpf_text_address+0x292/0x2b0 [ 398.334444][T15904] panic+0xb9/0xc0 [ 398.338189][T15904] ? __pfx_panic+0x10/0x10 [ 398.342650][T15904] __warn+0x31b/0x4b0 [ 398.346657][T15904] ? xfrm_state_fini+0x26d/0x2f0 [ 398.351615][T15904] ? xfrm_state_fini+0x26d/0x2f0 [ 398.356568][T15904] report_bug+0x2be/0x4f0 [ 398.360919][T15904] ? xfrm_state_fini+0x26d/0x2f0 [ 398.365878][T15904] ? xfrm_state_fini+0x26d/0x2f0 [ 398.370825][T15904] ? xfrm_state_fini+0x26f/0x2f0 [ 398.375778][T15904] handle_bug+0x84/0x160 [ 398.380032][T15904] exc_invalid_op+0x1a/0x50 [ 398.384651][T15904] asm_exc_invalid_op+0x1a/0x20 [ 398.389513][T15904] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 398.395075][T15904] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 eb a8 38 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 19 56 19 f8 e8 d4 fe d3 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 c6 fe d3 f7 90 0f 0b 90 e9 60 fe ff ff [ 398.414869][T15904] RSP: 0000:ffffc9001bef7878 EFLAGS: 00010293 [ 398.420981][T15904] RAX: ffffffff89eb1c9c RBX: ffff888032044900 RCX: ffff8880499d3c80 [ 398.428977][T15904] RDX: 0000000000000000 RSI: ffffffff8d9c68ab RDI: ffff8880499d3c80 [ 398.436971][T15904] RBP: ffffc9001bef7990 R08: ffffffff8f9d4c37 R09: 1ffffffff1f3a986 [ 398.444967][T15904] R10: dffffc0000000000 R11: fffffbfff1f3a987 R12: ffffffff8f5ce900 [ 398.452961][T15904] R13: 1ffff920037def3c R14: ffff888032045dc0 R15: dffffc0000000000 [ 398.460972][T15904] ? xfrm_state_fini+0x26c/0x2f0 [ 398.465965][T15904] ? xfrm_state_fini+0x26c/0x2f0 [ 398.470938][T15904] xfrm_net_exit+0x2d/0x70 [ 398.475459][T15904] ops_undo_list+0x49a/0x990 [ 398.480079][T15904] ? __pfx_ops_undo_list+0x10/0x10 [ 398.485210][T15904] ? do_raw_spin_unlock+0x122/0x240 [ 398.490431][T15904] cleanup_net+0x4d8/0x820 [ 398.494868][T15904] ? __pfx_cleanup_net+0x10/0x10 [ 398.499844][T15904] ? _raw_spin_unlock_irq+0x23/0x50 [ 398.505065][T15904] ? process_scheduled_works+0x9ef/0x17b0 [ 398.510804][T15904] ? process_scheduled_works+0x9ef/0x17b0 [ 398.516552][T15904] process_scheduled_works+0xade/0x17b0 [ 398.522143][T15904] ? __pfx_process_scheduled_works+0x10/0x10 [ 398.528159][T15904] worker_thread+0x8a0/0xda0 [ 398.532790][T15904] kthread+0x711/0x8a0 [ 398.536883][T15904] ? __pfx_worker_thread+0x10/0x10 [ 398.542043][T15904] ? __pfx_kthread+0x10/0x10 [ 398.546648][T15904] ? _raw_spin_unlock_irq+0x23/0x50 [ 398.551862][T15904] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.557076][T15904] ? __pfx_kthread+0x10/0x10 [ 398.561675][T15904] ret_from_fork+0x4b9/0x870 [ 398.566288][T15904] ? __pfx_ret_from_fork+0x10/0x10 [ 398.571432][T15904] ? __switch_to_asm+0x39/0x70 [ 398.576216][T15904] ? __switch_to_asm+0x33/0x70 [ 398.580997][T15904] ? __pfx_kthread+0x10/0x10 [ 398.585607][T15904] ret_from_fork_asm+0x1a/0x30 [ 398.590407][T15904] [ 398.593599][T15904] Kernel Offset: disabled [ 398.597932][T15904] Rebooting in 86400 seconds..