last executing test programs: 4.395436642s ago: executing program 2 (id=4388): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0xa4, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x60, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xe}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xd4f9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10001}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xff}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfffffffc}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20040015}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000680099e5b790190100fcfffffffeffffff0a00000000000000060007"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 4.188247428s ago: executing program 2 (id=4393): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) close(0x3) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000002440)=0x8) r2 = accept(r0, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x17, 0x700, 0x9592, 0xffffffff, {{0x17, 0x4, 0x1, 0x32, 0x5c, 0x65, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x25}, @private=0xa010101, {[@cipso={0x86, 0x45, 0x0, [{0x1, 0xd, "6504a9e809064ded902751"}, {0x6, 0xb, "b371c7c14801000000"}, {0x5, 0x11, "0c1378f02ca7972a42a9e350ee3947"}, {0x5, 0xd, "f3844f0ccf0fd7c3ca1dfe"}, {0x1, 0x9, "a5bfb16ffd962c"}]}]}}}}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41100, 0x20}, 0x94) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000000)=0x8000a4ff, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r8, 0x8b2a, &(0x7f0000000040)) r9 = accept4$llc(r2, &(0x7f0000000500)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000540)=0x10, 0x800) recvmsg(r9, &(0x7f0000001ac0)={&(0x7f0000000580)=@pppoe, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000a80)=""/139, 0x8a}, {&(0x7f00000006c0)=""/208, 0xd0}, {&(0x7f00000007c0)=""/200, 0xc8}, {&(0x7f00000008c0)=""/60, 0x3c}, {&(0x7f0000000900)=""/112, 0x70}, {&(0x7f0000002480)=""/4096, 0xffffffffffffffed}, {&(0x7f0000001980)=""/109, 0x6d}], 0x7, &(0x7f0000001a80)=""/55, 0x37}, 0x10100) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000980)={0xffffffffffffffff}) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a580000020000002c00048028000180080001006f7366001c0002800800034000000001080001400003000000000000000000000900010073797a30000000000900020073797a32000400001400000000000000000000000000000ab2d538fb7beb1b684597c5998e44ac6407e9e03414b45b2480cc25d4253700000000"], 0x80}}, 0x0) accept4(r10, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000140)=0x80, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x18, 0x1e, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffff00}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x8}, @alu={0x4, 0x1, 0x9, 0x0, 0x0, 0xfffffffffffffffe, 0x10}, @call={0x85, 0x0, 0x0, 0xa2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000c40)='GPL\x00', 0x600000, 0x75, &(0x7f0000000c80)=""/117, 0x40f00, 0x2, '\x00', r4, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000d40)={0x5, 0xd, 0x3, 0x800}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000fc0)=[r5, r5, r5], &(0x7f0000001000)=[{0x2, 0x4, 0x1, 0xa}, {0x5, 0x5, 0x9, 0x6}, {0x2, 0x5, 0x7, 0x1}, {0x1, 0x1, 0xc, 0xc}, {0x3, 0x5, 0xc, 0x5}, {0x5, 0x2, 0x4, 0x7}], 0x10, 0x9}, 0x94) sendmsg$SOCK_DIAG_BY_FAMILY(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x14, 0x7a3cc0df0763377f, 0x0, 0x0, {0x11, 0x28}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.044493812s ago: executing program 0 (id=4396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x1, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x24000144}, 0x2000) 3.947393654s ago: executing program 0 (id=4397): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) (async) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc"], 0x23c}}, 0x4004000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r5, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r5, 0xaa0f4000) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r7, 0xe6905000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x1000) (async) mmap(&(0x7f0000362000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) (async) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) (async) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r4, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r2, 0x0) (async) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x2, 0x0) 3.780419923s ago: executing program 0 (id=4399): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0806000108080604"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x20000000) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$sock(r4, &(0x7f0000000540)={&(0x7f0000000040)=@phonet={0x23, 0xe0, 0x5, 0x5}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)="1a35b8dd7bea5989fe180a21602030ff6759f6776fe98dc8801b72a8dcfd57801d8957401e247e31972c5d5238110c8b900b5b2cea3a574c9bbc97f25aa202d1e35907be63b11b3ddbd8b8714a22bf9843a1159166284a0f2962b2a55102c97aa837d54f6e32d016f1009b29c177141c6f7fb6d88837c9c7158b39469c67baf0e90284fe7e9faef9ff24f61b2dee494bb41a1dac6b06589339db6e79e82793c2540ca3f33814ac4d9f896cc1387b46e5bc0bbbb4077e8a5e41873eaca291f6dfe8110b0eb82f253989d55f4316aa966056", 0xd1}, {&(0x7f0000000380)="3142944c5370ad41d348a94f77cb30499aa87d02dfeda6fa9bb1b0c1fdfcc948cc81135f5b8ae9f9b3a4ce569b48f0e5ed95886749aa332039c3f0a9846225ffc8231480862b6b45fc4b45ad00ef0c86236153a170d8c6fb5823b34f0136d63931183bcc6d547ee41c30833e2f358e19fa99d044ff819d4f1cce7096cc64a16a2225cf842fced7009fda963441eb65225e78405228dbf9b26396e369b7021a7d525a8b677afb0568c5015573", 0xac}], 0x2, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x91}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x43843ae}}], 0x90}, 0x24040811) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r1) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, r5, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x41}, 0x4100) 3.709750853s ago: executing program 3 (id=4401): sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1405, 0x14, 0x70bd2c, 0x25dfdbfd, "", [{{0x8}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24048002}, 0x2000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000140)={0x6, 'team0\x00', {}, 0x5}) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000140)={0x6, 'team0\x00', {}, 0x5}) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000280)={r1, &(0x7f0000000180)='team0\x00', 0x80, &(0x7f00000001c0)={@align=0x7, {0x7, 0xc, 0x1, 0x2}}, 0xfffffff8, &(0x7f0000000200), &(0x7f0000000240)=0x3}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000280)={r1, &(0x7f0000000180)='team0\x00', 0x80, &(0x7f00000001c0)={@align=0x7, {0x7, 0xc, 0x1, 0x2}}, 0xfffffff8, &(0x7f0000000200), &(0x7f0000000240)=0x3}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8810) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x84, 0x2, 0x7, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffff}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffffffffffff8001}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x401}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_PKTS={0xc}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8800}, 0x10) (async) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x84, 0x2, 0x7, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffff}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffffffffffff8001}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x401}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_PKTS={0xc}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8800}, 0x10) bind$inet6(r2, &(0x7f0000000580)={0xa, 0x4e21, 0x2, @private0, 0x5}, 0x1c) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f00000005c0)=0x1) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000600)={0xf29, 0x4, 0x2, 0x0, 0x0, [{{r5}, 0x5}, {{r0}}]}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000680), &(0x7f00000006c0)=0x4) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000700), &(0x7f0000000740)=0x4) (async) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000700), &(0x7f0000000740)=0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r2) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f00000007c0)={{r5}, 0x0, 0x0, @unused=[0x7, 0x6, 0x1, 0xe], @name="3e0eb75e49d7dd2740bcfe61fa5e6318cb5479f6ad7c552906bd6ea617206e5535ff654f2a00525a2dde5ff2884e23e688a35ee0d2a98e68b9969f5829bee947da1df52ced461f8adef685cdf6e8f7411729a267586a5166673f4f65703b25f56eacc81542e29ab94659225596d07cd9be0ab81949ca648c8d841a5571e1331266eb407cf4cd704ee59f03644c369f79fbd3fbba272a36e5dfdd75e35d2652df66bbe2f211dda7405f5c03d215efab85f0924d32c2d8e7998872c2d9c0be352df6661402d130c8e42954e70371404bdae99ab760aee0f6179751b0529e7f01c70881f4e0f37c252a4cf89dcfd2ee19a79ac4653ef54f6be9a3e20d3196bd974d3047ed2459031f7d0a6bacae4590b8797de799c8359d2932899298f4e21759a4e9f09d45df3e7f5c72f85510fd2c7b21fa4824d9b5644677417468877c0e95473876d5509ed0dacb56deb8cf353e95f4e9468737e0a239945ec606c81404c8b01f32cf0c815dd17787ac13a5546b6c8606556b958a1d8ccaad0a74315246488346e127032bf6790cbadedb8ac40ce2b012e2942cff81e57bbb6d9106a662b96883aa9f7e2aa938951ab00e9b6d0632f6dac5a3fa555b373059beec46c94b21f4bd98fb28d922a67cac0d8b66d688e80bd08796435e53637da1af8e4aa4c85d90a12669f3c3b83a7d29bbdcfc27a34f93f55e98c4b5c1b0cce7c0147f535abd5ef131f284de139432baf03f726814461f34c5df6c902915045025da65b06bf3dbeade11d1eea0a431964e6fe8cd4a53e42a121bce5bc7d57728223c22e117ef870ca6ff75291e162b9daf35e99ed1607704588c50905b87dc0530000bb90a7ad402a1a4d00fbec97a515d270127771d940598287d88d687d735f5522bc6c2c1a2866ba59695dc78b9a80cfcfd80762dd026a5c1f9adb95f33a259370548ad54bccd080e82721e0cc472413b87ef9da3d1912611f7e87c0f9fd469167ed693fca1a2a3dbe5dcef157d897b1382164625e0fe75b244f33daf3300c762fd48099a4ef611038a11cea2491da413da80434159649ce1911dfa9d195a9f9e3a227a83b54ed751a9a25c011029ea932a6ffedfaef13e64b55dc5ad1da47cc9ff309e413c8548c8b19d590e3e5937284ca6fb45dd75a23fc0b1e4b83b8346a10d68ce125b651ef20f4a80f2216fc5f10e11fabf894b72e4f5c59507b90eaae0cca7361f90bff17ce653b0d89147b2df469c7283f8bb9b6ad96e38f0530dea520a19801c0685a2de08bb0832f9cf8b06505842e4bbeaaa455afbdc54b92e1094790c15be6647fbf55fca8785b5115b296c44dea23d025540ee24acb36b8a78094f8cb84dc30360329255baf4964ce80f6aea431a02f60e38650369b9c288fdac66c85ec96bc12679dd3b6d4a6911dc5126092abaad308b3e020cf64a5eb6aeabba3c3aabc503031a0c3a568fb7c9693a0c4055705d7bf2d1a605d98d5bce15305d7590f39c47ec673dd70342592a2fe3a08818aa12c31c8c260500d7afeee781cc14038be703df950278eb61e1f76042c8b0b76207bafde3a7d0fb4dd9e284454568cf59b0bb3ef7c30859c8c2a94d1c49e1ed5653569e5e0c1068b429b722188fb28f4d6ed6cd6c587a126a86a17cd31f556c654619a1703acf907f5b1c0caee86747c9f161ea206f791108f16863fa324a6c8cc3bed34c86bb51638ae61267e277beb2a4dea72650aced2704c9b27930c7a94c525c2cddba69dc91298c9f13d62dabe5a06e9ca5ce427b2362cf84fb2cddf62ff010832026979aa0ecc349e19ad45de788b53f0db12019babc9ff2369a57e00b3ceb15fb03884af66321dfe7109f3cf6130056d8ae961b5716d6e29747a39a70f211f9305b7a863643208c2c2baa2267a024c7a79ef4a849f55402c1010f565df083e571b3fc1604bc80969a6542346db0de0ba78504d20b76c376aeb444477d4aef1ff35488b5766d3f734d4de82329db9c1e50fc661ea70e60df6ebe8af76cc311168d1e3d324eedcd43893bee67c7ca650bb0bbbac2b2ef210e1bc0e326d1146446e0e50580cb169c4930a16869fc4cb53abaa03694e3ab3dc5590354fbb66e40498194889d4134ef1bbd93b1e3b0d2f53a3499c39bd561b593ef6c181167d04ab3f6a0ab9635517363fd07429b5c77ec06e2eaae1d50b247ecb52579769be9ddf62e315dd4844535a942c253a5a30f9d1da750bd7de1424b304ad253b93fed2139bcdb1750dedf14834960a56d0632188ad76cc8c4f0481f72b3365664d0982b62cab4953f0600a400bcfe3bbb1b60f39ef1ab098ccece26baa2dbbab391e8a3b0b2ad5f922dda8cf4d3234537e4c537565cca57cb0fa19d2214d5659236edf8284455fc3dce96f5e1ac82c216df70a2a719060a9f14464d100b3af3506e81c848b380b6089b94736753838f3cd78c535b09e83ecd437563b893118ebebd53ea1347ca09ebbd9acd55540b93a2698d3cada1fba7f324e3b0c23a12ff162ac9736674032a43f7f26e637b57b3e102c8ba6a226fb2b3879db56d964873cf5f1a4b398c9e3b12a736c5afcf2ce42b1b7a910346da1f84d94ef8aeda096ca0f8003b7bd8112d4fa76ee25f07777d3959ad89c608fe573bb3ad640fb02656d55e17b538b16e0768b1b391010c88943dec85d73913ebcd50fba5f3da9a14de47f70775efa17af600efefae0ecb4217b1c6923f7b5f49c9b7a803bc233b77beb62af6be67b1d7518e0e302dca4ebef8cc335ab5a0c639fd46322298b7e3bcd81f076255135b151c0e5b94dce7764e6e60004d8d70ceb852c27f5f0a221c97cb0d87c6ac46af929eb53a82e9b1057b35b89a59713b0fade8b0f91d793b13df03ff657ba3cacbde2ef6e0f1263afe287ac6e18fd523222fc5dc32180089235f7e85f6670e9a4f27f07dca24e7e50effb2701b145405d9c3321fbde5fc1eb224279b9a5bc31398cf7860b8c869b5428bed1d72ee3a6f149cad03b15c01d2cb1f88e509a4608067b3948c8c26116216f2c2b34c4b1e98235f8b571bf9a0472685fe3027ca7c056a71bf5295304f359dedb9825795251d405ff7d7433b20f8e01ffc579ee8ccfb57779aa797bd870584e1e5c4e8428196d47a9c42d72da2e101a422c8645fbc7f545c780447d72355b51f77f480fb0047bf65a2ebdd814f7fc230010049a4fe401e2d4a809c0b54de4661cfb0d2be1d0911075dae56d8a5fd866b0e6ba69382b6900cebb646efff26bed5f6e2700823bcd0d57d423c2d023174f179e848aad788a4d9386171a680530db29c55124ac217838ef434f32edc7af79dbd70c405289ccfe2aeefb98b3a502945c79129d608650e40c29c43698ba4c841a218e7e654af733edfa4f520bf7d297f018badc40e82f01a671c2a4193a7ab8ac121cd9784aa365f71338ee0a86f740bb11aabb8cdc2e08af598a08edf293f098db2829210fe2f6daf9f45259b276f5e58560428afd4faaeb24d54fbcd372cdbb643dc9d7b3204dbe34df5692faf6995e10f4e3c98d06a22ac74aa3ab1be6994676ffbf6eaa2c2b56591da8b8f1bc2dae2c893881f5d89e7e4f284582e8f560418f9a69126cfe063966bde84a2f3bb7e3842c55b3349ef8e521ed9dfa6e3e297f5fd44c61b7ed2ede4d9d719157880e3527935d51aa540f79bb7c17cc89cebd9c0231cbe9072aa22442fb6dcdfe2f62c5558ca3641374ab793a80c33c64d302c452c0dcca1d3443d36a28e6aa389cd420783a7bc0a76df391a11bdf5a9e2dca804f8f2bc5e5daae19831401127a2a65efbdd36229c5e6e687e2f198afe5b949ba64c756fcb669158ebae600a4321b42d2700a0bd02249adc7161fb46f76747f74361fa64a816888f3b3f73665ee32aef8e038ffa369e929032fe4795b0563568c608d9ca410341297441a5f96f4eab2317be0421132b01ba8ca8cdfb83703abe3181b05f8477d4238e7bb00b5eb3713bc9003c2727fa497ca56d998166a398de469da182db88a5689399f5fd345c035a8b75f8450ddbe375d8c15b2798d8a982e39b1e341539d38a7737c2155a0efeba8992e239c7a27907d19b075cd9654e0498fbec4cecd144356eda970c598523270eb534308971a9c28072d0909c187b462a4f2d7f45ae50179b8bb73d49b79578fd1642b4d4e2ec9f158b5f1d8c1f3f64cebfe35ebf6c411c5737ba53db27a05b2dcf227dd4daa653f42f18ebae0c6356450ee6f46d756379806681bac421e64983f02609e79830efab6681070d096eec115c9b14a46cfd03c4c1dff0052461e78271c1a78c228e37c215d08422af5839d59a51141f4299b159d1ce6822f3ce931536a95f347e258771e3777d438b8f287fa59eb75a2cd62cca9bd6c830d03979ed95d93a5245aa51dd3dd4a7bb9df16ac9876be3e7d0904906b34deb425ab38b4a76243d919f21b87dfb90f1a5b01316b42f240808a8051073af20aa4f94e486475d571f96dc60975448b93eef3c1c1824537c50af5c5f8d9c578be6091cfbcdc06025482586a6ebce5c0880da3490559c1ad5d3277e0530cfcb673f00824c95bd98f524960924d4c4646b81a10b54e6883b9cc4511917dcf68399bc757c4e6bdaedcbf06b4caf7d8b3e5b2b9da1c9eb4175ad85679179c821ec78a8aab46769c9477f387213d47c32dd4bdd4b9ac00833f8e08c0d1e7a79e6231f13a6d7dc803a75575339b91f0a125418c5d06aeb11f5109b5276bc0d61c6e449d5616d7b1d2c0e9fd456ecbd092b1130871e6538ff82c65f1b3e946f1e93823644f667c00829cea87f0ee98a1df1d4aed15b7d19e50dfbd6a9b466c3af332e06efa417ecdc17f0574b035225ab7d0d30864de7722b23e9e032a73c45f3314945ed9af396a78e1d988a2b93d1374ff77f24bfb29edf69de953a81f9111d239072628fd9ef1ae87e539d75a186d6cbd72741a54e87e491a9e5e2f6da3e93ae5c70c506c432629cbd6c2635fadb984fc71335d4f0c279ba086d119fbb644a09437ca4e2331ac702842a826753318e54810904c8ea193529aca53ea4b32f2cb4ed312605ecf5eed75675b467b3716fa9fe0fce20092d218f206ac5c99c339f70930fdce7b6b36e021b1982eaa7abb9c847ec57dfcf598c7ac722444154f082ca0a0236ab804dbb70436eec3dcccc3134630759f34ea196a37be2c7c2a89ae3efbf3dd1c429102e1bb65a0a27daee3493abab4a7b333f6b82b6a8b177d97eef4654d56156866160c0fd233378518d223105f0008a8c5e602ff9017f5abcdcd8eb9de3c17e723ee9568d1c26daa2b18e19b4811813a2f0a34a0c875b457bb1f986eb8177d689d4cf42e8c97bbe567192db689a600122dd57b6180d1b83948877efdbad1c52d0be83dae050929745a732a711c356d97388b6e1d75751006c84005abbc00987147fd6ce1ed03b47c988f4911f6ed23159d27e29741ac6cd7f9068f242bb844a6e74080f5a11d611791abedeccbeac7db1a2f4e4afa080146470cca540f0960c473923d4f900955716d0236015e84dd06c8880b351cf7b0ab846b2555477ad30cfcfdb0cfbcf1c81e1b2ac3707850d3caf3a053eb608d1c6353cb419dd810cb7f6516b7a228bfe9e35e2aa0177dcf4c78f86e327201861c7e87021a46849e7674b95872ed7791068e4d9cdad9a6e3e3e97584be42d36d08d9d52e4bc20a4262f007f0794a1588bad6a262f06b772cf"}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000017c0)={0x6, [0x3, 0x4, 0x1d9, 0x0, 0x5, 0x8]}, &(0x7f0000001800)=0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000001940)={r1, &(0x7f0000001840)='%\x00', 0x40, &(0x7f0000001880)={@_ha_fsid={[0x3, 0x6]}, {0x3, 0x81, 0x3, 0x71}}, 0xbbe, &(0x7f00000018c0)={@_ha_fsid}, &(0x7f0000001900)=0x8}) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x44, r3, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xe}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x114}, 0x4) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000001ac0)={0x0, 'veth1_macvtap\x00', {0x1}, 0x70}) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000001ac0)={0x0, 'veth1_macvtap\x00', {0x1}, 0x70}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001b40)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001b40)={'vxcan1\x00', 0x0}) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000001b80)={@dev, 0x0}, &(0x7f0000001bc0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000001c00)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000001d00)=0xe8) sendmsg$nl_route(r2, &(0x7f0000001e40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d40)=@can_delroute={0x8c, 0x19, 0x1, 0x70bd29, 0x25dfdbff, {}, [@CGW_SRC_IF={0x8, 0x9, r8}, @CGW_MOD_UID={0x8, 0xe, 0xee01}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffa, 0xfffffffffffffffd, 0xffffffffffffffff, 0xc9}}, @CGW_DST_IF={0x8, 0xa, r9}, @CGW_MOD_XOR={0x15, 0x3, {{{0xd2, 0x1, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "fef4621e66e402ed"}, 0xa}}, @CGW_MOD_UID={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x1, 0x1, 0x1, 0x1}, 0x8, 0x66977249fb127750, 0x0, 0x0, "d75be360d0df58dc"}}}, @CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x0, 0x1, 0x1}, 0x8, 0x0, 0x0, 0x0, "236b618875280079"}, 0x9}}, @CGW_MOD_UID={0x8, 0xe, r10}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000084}, 0x8000) (async) sendmsg$nl_route(r2, &(0x7f0000001e40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d40)=@can_delroute={0x8c, 0x19, 0x1, 0x70bd29, 0x25dfdbff, {}, [@CGW_SRC_IF={0x8, 0x9, r8}, @CGW_MOD_UID={0x8, 0xe, 0xee01}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffa, 0xfffffffffffffffd, 0xffffffffffffffff, 0xc9}}, @CGW_DST_IF={0x8, 0xa, r9}, @CGW_MOD_XOR={0x15, 0x3, {{{0xd2, 0x1, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "fef4621e66e402ed"}, 0xa}}, @CGW_MOD_UID={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x1, 0x1, 0x1, 0x1}, 0x8, 0x66977249fb127750, 0x0, 0x0, "d75be360d0df58dc"}}}, @CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x0, 0x1, 0x1}, 0x8, 0x0, 0x0, 0x0, "236b618875280079"}, 0x9}}, @CGW_MOD_UID={0x8, 0xe, r10}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000084}, 0x8000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000001f40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x14, 0x3, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20001}, 0x40005) syz_genetlink_get_family_id$l2tp(&(0x7f0000001f80), r6) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000001f80), r6) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x50, r2, 0x100000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001fc0)='ns/time_for_children\x00') ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000002000)) 3.617009335s ago: executing program 4 (id=4403): setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) (async) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x6}, 0xaf) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x48, r0, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x8e, 0x5}}]}, 0x48}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 3.585184142s ago: executing program 2 (id=4404): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$tipc(0x1e, 0x2, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x2a, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x7}}}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24004000}, 0x800) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmmsg(r2, &(0x7f0000000840)=[{{&(0x7f00000001c0)=@nfc={0x27, r3, 0xffffffffffffffff, 0x7}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)="3844b0b5172534b09eea01a1ba5657d5de049e11811fd627b74206573c5c1fb1abaa8ab6072d", 0x26}, {&(0x7f00000002c0)="a620cf4ab6fcb2cb5e36c4829b680d8695b98f2c0c3c12c3d2c7b21bf68c3736eb424f53cec672d8c6d24fe7eb62f16fa9cbb70ba257cd2d66eac3459c2eeb9687247eb2cdb2dc91ba55338eecfe9d3b2ce0652e4a9a5c28b22a21361510be0edc4c9550917046b9d9cdd5e270b1721d314b8c46fd2006c7df47b5b12eafeb28da06f099", 0x84}, {&(0x7f0000000440)="43839db080c467ac47e873cbcaf4ef944c99c720e85ab8d08eed304db0347f4aab1e29863bddb0303c51c2a84e4ffe8d6ba0b647de7ae64847ea3045b1cc76317ac46cfc837b7b974585493de5024b646be0a9b9c1eaae0f6587464b1771bf989b00b0907db5f30349844969541bf69dfae439b054e8d7a7e42a513564a3709bf49b74170abf83ee3af8127f3e2d301ae7ba86afd469c6f958265b83ce64e060bf21678b047e4c209c195b97292a3558fbc574c6665a3b397c5848", 0xbb}, {&(0x7f0000000500)="bce2fb324a01931b2275e78b28e53b812f949f1b1247b9c4e489773b82a0f1dbf01863ff122017799cfee8bdfbd387185ed5f14f0fa95f954a746de2e7348e", 0x3f}], 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/678], 0x298}}], 0x1, 0x40000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="26eb6d12cb78af20c43504e686a3130f2b", 0x11}], 0x1) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00']) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) socket(0x11, 0x2, 0x10001) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86dd", 0x12}], 0x1) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 3.491169265s ago: executing program 4 (id=4405): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000880)={0x8, 0x5, 0x7fff, 0x71, 0x0, 0x1a, 0x17, "d8f693ddf9dfd88b19b942e6941b79b871c43f0d", "4e310690029ffd2fd84c35833f8b062ab6ac9c46"}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000010011a801000f480040005800800090000000000080003803000018005"], 0x270}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 3.424137856s ago: executing program 1 (id=4406): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x60a241, &(0x7f0000000040)={@_ha_fsid={[0xb5, 0x7d1]}, {0x8, 0x5, 0xde, 0xffff}}, 0x5, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xffffff0e}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x814) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x3c, 0x6cd30b10618c88cf, 0x70bd28, 0x25dfdbff, {0x2}, [@nested={0x8, 0x128, 0x0, 0x1, [@nested={0x4, 0x112}]}, @typed={0x8, 0x15f, 0x0, 0x0, @u32=0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c4}, 0x4000000) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x410000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@getchain={0x54, 0x66, 0x204, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3, 0x1}, {0xc, 0xa}, {0xe, 0x10}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0xfffffff9}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x6dec6e74fb3df13f}, 0x1) bind$can_j1939(r0, &(0x7f0000000540)={0x1d, r2, 0x2, {0x1, 0xff, 0x2}}, 0x18) sendmmsg(r0, &(0x7f0000000680)=[{{&(0x7f0000000580)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000600)="da019569fce72ae6d42e486850", 0xd}], 0x1}}], 0x1, 0x15) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x948f925}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xb4, r3, 0x100, 0x70bd2d, 0x4, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7fffffff}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x13}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xb90}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x220}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xd5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2a5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) bind$alg(r0, &(0x7f00000009c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000001140)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001100)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x24, 0x18, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0xc00, 0x0, 0x0, {0x0, 0x0, 0x8}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}, @NFT_MSG_NEWRULE={0x4b8, 0x6, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x398, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xe8, 0x3, "df11bdf1dd1697249ab47f31cfbf279efa74da30c9a5b5dc73854019d6503443049fb5e72460d57506960baf899d4abbed698bb626d40366f52bd8b81386023b0d205d5a2470a237e7f96b8d412cda2734e8eb065c542c386362d8d06fcde1f23e9d26023a5dfdaa35b3251350bd47281231b03ace8ba5a88005862983640f7ccfe8aca975acd742b01c6b3376799e14d64f31f11127fd61690a1b5467e098bb26441cc8e7c1ad5c79cae6742167ea7230f09b1d51117f1677a807b9fdaa5175e90ca0fd3f452f71ea5557fbb5ec79b76cfbcbac50022b8f70805ebde2270b0c28734ff6"}, @NFTA_MATCH_NAME={0x8, 0x1, 'u32\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x52, 0x3, "89420333fa8cfa95048367bc0a6a23dc9395347cc40e827b04bd03ca42d65b117874e03988e16fa8990f883f99ce0f9768f8b0ca39ff346149390ee657670b72011a3345f3758408b6dc4445ea65"}]}}}, {0x1c0, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1ac, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x198, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x56, 0x1, "f56a2e559e4c95a4fe6223f30979a35d9be497c140660593337c5cde71d338ad634601fe2b220cbe7ae0d73680b5a8f183f79e5a9e8980bbc1fc4b3c75a64f768aec62b280457eff2fc7260b519584fb0dc2"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xd3, 0x1, "242f31bfd7f5c2dde214978e74808d36803d3e18472a54fb31959680bb2de7a8007608d4db74acc50a2757c674d0edac3a1fa88e06af2f7333b22856360bd5b3491bb934c491c1a75539d0391ddc36b27a63c5daa26745a2a7273413f4d9e93266464807cfe81a10fa0ba1fc5846fc44740ce6598c75dedf3c96519268eed91add7d0a52c6bc50d5c66841a053d9b602e17670955cb18e3f57fd33f362ccde92d4e2e154e6cf6eca6b6a73f95e224e76d2a4faac3d1275033e8ca711617761d9dd3b2d7c1248173c4e090b51b32743"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0xc8, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x40, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}]}, @NFT_MSG_NEWRULE={0xb8, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8100}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_USERDATA={0x5e, 0x7, 0x1, 0x0, "27c5355bb1dc5f4a67923023e74bdae5d8e5797c1d6cb657487865d002f13020d2f282a3b12d88b04349551fdb177e64a8225afdea52a4916f3870c046444728f8752b969b34884dc6fd18197e076b735f725e49d06131f45ded"}]}, @NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x660}, 0x1, 0x0, 0x0, 0x40010}, 0x4) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000011c0), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x44, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xb}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2f}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c002}, 0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x24, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x90) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)={0x98, r3, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_REG_RULES={0x64, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xd}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0xf0) ioctl$sock_ifreq(r5, 0x8918, &(0x7f0000001580)={'veth0_to_batadv\x00', @ifru_addrs=@l2={0x1f, 0x6, @any, 0xa, 0x1}}) syz_genetlink_get_family_id$mptcp(&(0x7f00000015c0), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000001600), r8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001680)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001840)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001800)={&(0x7f00000016c0)=@RTM_NEWMDB={0x138, 0x54, 0x20, 0x70bd27, 0x25dfdbff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x1, 0x3, {@in6_addr=@remote, 0xad236fb572ef19ba}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x2, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x3, 0x4, {@in6_addr=@rand_addr=' \x01\x00', 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x3, 0x1, {@ip4=@private=0xa010102, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x1, 0x0, {@ip4=@private=0xa010101, 0x1000}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x1, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x44}, 0x8add}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x0, 0x3, {@in6_addr=@private2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x5195da10f9f4768f, 0x0, 0x101, {@ip4=@multicast2, 0xc5b3}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x3, {@ip4=@empty, 0x10dba}}}]}, 0x138}}, 0x400c001) socket$xdp(0x2c, 0x3, 0x0) sendmsg$inet(r6, &(0x7f0000001e80)={&(0x7f0000001880)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000001dc0)=[{&(0x7f00000018c0)="79b2546f34c8b4085471fe6d49deba6736aa8ff697b38478256df95837d3340efb2ef79b51c27a83fda0cb2a2fa4", 0x2e}, {&(0x7f0000001900)="14d886a3773fc49634fe2a8e05271e6c103ca156b6dfcf9b9043a734c20005890b6cdb3afd85caf1160dce214dfe19d6d47b793ce323d93aeebee2cdd66a260de3f7d57ee534e0d860dd78c05ac1472ab02922f2dc8709bf2f70534c90011f", 0x5f}, {&(0x7f0000001980)="f72fc861877e3e1374cf5000155ea33d604b86c5acf5e68f62f834a92771ab5277494167f00d0dffafd93e907115a573a7285efe3445404f87466620d2371a6812e7a968b633880d30158651d59fd1ad9ad8bcba59369ace204c17d602e1e4fa61455616683a9daeeb01fd200c68bd06671ea64b8a4580fbc3832e88634fca2fd67cec782537b831caf0d5fe432251857ab63b22689565011fac9175fcc68ea453ad743154e88053246c93da1cd9acaac4ac66a4649b51821ae65c6463dadfe5450ebb88d6447b453d89b002b9e3b97b2192c3ff6e2ff280426b33555e0b8169f01f69db9f06be4f8a85f5ac6d04a759ad80", 0xf2}, {&(0x7f0000001a80)="da4d189f4848a6b0ffcd82bf97b335282107a8eaf7c8894541836bd1fc4e57f4954a408cf3282d455f809620979af06b323cb6a76b0922f15fcf27178372af537f91b654ea7ad59b3cb7f23f70d8d616edc3feaaa7e4b8b4802745a400", 0x5d}, {&(0x7f0000001b00)="4971bf6404a33ae36bd384745ca465cf00a7ee34892ed0091d83fb65916821bb35a7fd8aa96be08f845a2ab3da0ead460340df3d51", 0x35}, {&(0x7f0000001b40)="a37796f86a927345578e30c0232e5571962899b511cdd060adaf26d7cc5c65e17de9d31220406703a1a1f505f9c248f965f217feb9987baf3911b16848928ade162f4e1a0dc2c3dc4842e98f1b4417386473b012d5173c25db294bb816a041508c031cbbb29aecd93fd1e87e2ea2450c82dc2dfd24bf673292d878a7a4706613c03c6fd8757683d1b964afddadf7cd1350ad5ea5ce8119480aa319", 0x9b}, {&(0x7f0000001c00)="420419dbf9d303ba732b59f11e837dd62f2fd456a5a5fdb75388b35c0977afacc1ff4c65d9e51bf7e296455d164b3ba804a811721e756c61525f745ce68eb405b89886a934d0fa22515ab58f0ae669325542b570fb45a6f9582fc83457d7c939ddf634f8025312d843f28753c826a3716797b50c8a7da2d248a7cd64be46477504f54343c37272cc2706fb7bd073eea35e47c5784a186837a9a1a14f8cf70319ceb1b76b5936a50423c02f34d43497d0f6daa94506ca0786e8fa94790cd9651988398aeaee664ef77fd18bdc48f7498b9c07df3156ca2fe3efd45993f5541209be1fb82ca0da64c823038415f35e0309d3", 0xf1}, {&(0x7f0000001d00)="817d94fd4dc74cfea1388dafb1b1cdcccff169ceef493b8ae684952f4f4e8583cb193cdf597ae9a87ba478294434d72e03254999152dd6ccfb52bf565cc1cdce2470995120039eee470e13c5ed452c7c441bc3c356e8aab4e8dab6e24a18191dc9cc6aeb8d84966b3776ef8b23b412dc877eb7554cd8c07f8941519ed519ad2737722be8ef30b586fd6f0b5c26e7bffbb08a49830892198cc9c3ea81586fc9c8b72017d79b27", 0xa6}], 0x8, &(0x7f0000001e40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x18}, 0x4044024) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r8, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x40}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x15}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xe62}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x80) 3.42154314s ago: executing program 3 (id=4407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x4db8}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x7, 0x9, 0x2d}, {0xffffff89, 0x9d2, 0x2, 0x10000}, {0x9, 0x3, 0x8, 0x8}, {0x0, 0x8, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffed3, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0xb, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x4, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x87d0, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x1, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x1, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x8001, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x5, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 3.403337159s ago: executing program 4 (id=4408): socket$packet(0x11, 0x2, 0x300) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff1fff3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x13a, 0x13a, 0x5, [@datasec={0x6, 0x6, 0x0, 0xf, 0x2, [{0x2, 0x2, 0xfffffffa}, {0x5, 0x7fffffff, 0x9}, {0x4, 0x8, 0xc6}, {0x5, 0x9, 0xd74}, {0x5, 0x10001}, {0x5, 0xffff, 0x7}], "f6a1"}, @enum64={0x7, 0xa, 0x0, 0x13, 0x0, 0x0, [{0xa, 0xd4f0, 0x9}, {0x4, 0xffffffff, 0xc}, {0x6, 0x6, 0x7}, {0x10, 0x1000, 0x3}, {0x4, 0x5, 0x987}, {0x1, 0x7ff, 0xc0}, {0xd, 0x4}, {0xa, 0x80000001, 0x908}, {0x2, 0x5, 0x1}, {0xb, 0x5, 0x3}]}, @enum64={0x3, 0x6, 0x0, 0x13, 0x1, 0x8, [{0xe, 0x3, 0x1}, {0x3, 0x100, 0x2}, {0x2, 0x7, 0x2}, {0x5, 0x9, 0xf784}, {0x7, 0x3}, {0x6, 0x3, 0x9}]}, @ptr={0x6, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x30, 0x61, 0x30]}}, &(0x7f0000000640)=""/158, 0x159, 0x9e, 0x1, 0x1, 0x10000}, 0x28) (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0x0, 0x8a2c4b4, 0x8}, 0xc) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x34, &(0x7f0000000100)=""/52, 0x41000, 0x8, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000740)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x7, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000880)=[0xffffffffffffffff, r4, r5], &(0x7f00000008c0)=[{0x3, 0x4, 0xa, 0x6}], 0x10, 0x100}, 0x94) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80) 3.300371155s ago: executing program 1 (id=4409): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e22, @local}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x4, 0x60}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000580)={0xffffffffffffffff}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) splice(r4, 0x0, r3, &(0x7f0000000080), 0x6, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x2c, r7, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x2c}}, 0x20000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) socket$kcm(0x29, 0x5, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000480)={@ipv4={""/10, ""/2, @dev}, 0x0}, &(0x7f00000004c0)=0x14) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) r11 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00'}, 0x18) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r12}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%ps \x00'}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0xa888, 0x0, 0x5000000}}]}}]}, 0x48}}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r16 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x6, 0x6, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0xc, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x401}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @alu={0x7, 0x1, 0x5, 0x0, 0x9, 0x80, 0x76a2e8b393e8b826}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x5c, &(0x7f0000000400)=""/92, 0x41100, 0x0, '\x00', r9, @fallback=0xa, r10, 0x8, &(0x7f0000000540)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x9, 0x4, 0x2}, 0x10, 0x0, r11, 0x3, &(0x7f0000000780)=[r12, 0x1, r13, r15, r16], &(0x7f00000007c0)=[{0x0, 0x1, 0x3, 0x1}, {0x5, 0x4, 0x10, 0x1}, {0x1, 0x3, 0xf, 0x7}], 0x10, 0x6}, 0x94) 3.23300187s ago: executing program 0 (id=4410): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000008e80)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xb, 'sit0\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000240)=0x5da2333f, 0x4) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, 0x0, 0x700) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x28, r5, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000085}, 0x4c040) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r5, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x1) 3.197734111s ago: executing program 2 (id=4411): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, 0x0) socket$pptp(0x18, 0x1, 0x2) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) read$nci(r1, &(0x7f00000002c0)=""/100, 0x64) write$nci(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="500002"], 0x5) 3.124174815s ago: executing program 4 (id=4412): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0x0, 0x8003f}, {0x6, 0x2, 0x9, 0xfdfffff7}]}, 0x10) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r5) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) (rerun: 32) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r8, &(0x7f0000001f80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000000dc0)={0x1158, r9, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7c6, 0x66}}}}, [@NL80211_ATTR_TESTDATA={0x37, 0x45, "7213730bd4391f7986009c1bc62b45a89413e50c337aa66f89c7869545c58b17dec331f5890811c19909bbcd982c1231fbe8e2"}, @NL80211_ATTR_TESTDATA={0x92, 0x45, "3bf265856aa9611fae038462dab9f313d2aaefdaf1da8546b464efe27e504d297cecea7ae2ecc2db0fdf7bb6fa6d11ac45d6a675fd8e81679ab1f64b85eba1cb6cafd9c06b207b85182be63b021b4a7d82ee5570dcee8eb15d8cbf76ed7f7979b1245581d2109e1e89ef2406e4ff4fde40eb76cf634b58b5ee00f4e456308cd6fc140e6d8ee82b8f220725b72140"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x67, 0x45, "951c6b7d159ed1744c0c0f99867fa534b1e443ca75f3b954726d76c1979395bdfb3aabf95d7ee649b748d0eff5e61943c847c579126b44e7ca286f802d207acbd77d655185afc32e18f117e1ab4054b101797589396ec24c17611357084c9c1c023b62"}]}, 0x1158}, 0x1, 0x0, 0x0, 0x4040035}, 0x0) (async, rerun: 64) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x48, r11, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x48}, 0x4, 0x700000000000000}, 0x0) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r11, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000010) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 3.109378717s ago: executing program 0 (id=4413): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x1f49141d3f9ada22}, 0xc) (async, rerun: 32) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) (rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002f00130027bdf000000000000400000008000c"], 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) 3.107578653s ago: executing program 1 (id=4414): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x5, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x5, 0x7}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8849}, 0x20004804) sendto(r1, &(0x7f0000000300)="8cb5916c28972e27be26fafe937a83268d48b64f978b5565e6e7221585a76b1ab8e927b77fd69033bc411d4110b26159f6f761ea7e4bba811bdf2c398a86c987a14482047a0b90532cbf17367842d65b91aaafa036ad86d3b4", 0x59, 0x4000001, &(0x7f0000000380)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r4) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)={0x2a4, r5, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f5a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x618}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x729d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3800000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9ec9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xa, @mcast2, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8bb0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x2a4}}, 0x4004080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1830000001000000000000800300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000c07f0085000000060000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x40}, 0x94) 3.103437151s ago: executing program 3 (id=4415): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newtfilter={0x120, 0x2c, 0x5, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x7, 0xe}, {0x8, 0x7}, {0x9, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0xe0, 0x2, [@TCA_FLOW_POLICE={0xa0, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x5, 0xf7, 0x2, 0x100, {0x13, 0x0, 0xfff7, 0x7, 0x7, 0x7fff}, {0x6, 0x0, 0xb7, 0xfffe, 0x0, 0x18}, 0x7fffffff, 0x7, 0x7ff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd4ba, 0x4, 0xfff, 0x5e2, 0x0, {0xec, 0x2, 0x8, 0x10, 0x3, 0xa}, {0x2, 0x1, 0x400, 0x0, 0x2, 0x2}, 0x7, 0x1, 0x7}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x7}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1992a}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x2}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xfff2}}, @TCA_FLOW_EMATCHES={0x14, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x57, 0xa}}, @TCA_RATE={0x6, 0x5, {0x5, 0x4b}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x20, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x20, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x9}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x2}, {0xffff, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x400, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x20000000) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000b9ffffff4c00000002000000000000000800000d000000000300000001000000eeffffff010000000b000000030000000f0000000100000008000000030000000c0000000100000005000000040000000c000000030000000000"], 0x0, 0x66}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r11, 0x20, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071100200000000000000400000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0x8, 0x0, 0x5a}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r9}, 0x8) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r13, 0x0) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r13, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000a4b000/0x1000)=nil, 0x1000, 0x0, 0x11, r14, 0x1000) (async) mmap(&(0x7f0000a4b000/0x1000)=nil, 0x1000, 0x0, 0x11, r14, 0x1000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r14, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r14) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r14) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 2.968307217s ago: executing program 4 (id=4416): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write(r0, &(0x7f0000000000)="eca36410bf2558afe1c39f386fab3ab53c9d541f265bc051c74dfd787e126f9e8147cce3f72b94880a44768b5383a65c39d0624d4ee7644af3284b97837789c3569f7a200c214b62df84a7fe1b1bae3cc4c28d35afe76ef47f0d9902a68db6d3012e8b3a4c2166ac5197e2d5238a60075954f7b158a94e6ea642be61447f358f6f10610697bc1ba4661511ca6409897dbfe100a71f5b8a52d180895199eb1b5fe0599d7c282f155eeef475885096c65c3686e7cdb487c81e305aecfdefa9d2cc487a0df8fa8aea9b2156ff99ffb6b77efb8895be3214457f4d755790f01350e9f330e6bde7ac13d1679e9977dc83ad6af4c6c5a71ea816a736", 0xf9) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008}, 0x41) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x144, r3, 0xc01, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3ff, @loopback, 0x7ab}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0x22, 0x3, "ab30ebe1807122be543e69c034949705825acd6d7cc74842ab0c915e4b37"}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20085ee9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x90}, 0x404c040) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x144, r3, 0xc01, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3ff, @loopback, 0x7ab}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0x22, 0x3, "ab30ebe1807122be543e69c034949705825acd6d7cc74842ab0c915e4b37"}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20085ee9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x90}, 0x404c040) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x40, 0x0, 0x3a15, 0x3, {{0x9, 0x4, 0x1, 0x3e, 0x24, 0x65, 0x0, 0x8, 0x29, 0x0, @empty, @multicast1, {[@rr={0x7, 0xf, 0x31, [@loopback, @broadcast, @rand_addr=0x64010101]}]}}}}}) bind$xdp(0xffffffffffffffff, &(0x7f0000000580)={0x2c, 0x9, r4, 0x16}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r1) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r5, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80825}, 0x5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000740), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000780)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000007c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000007c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000800)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000840)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r6, &(0x7f0000000940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x7c, r7, 0x600, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, 'nl80211\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, 'gre0\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '[{'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_FIRMWARE_NAME={0xd, 0x14, 'udp:syz0\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xd, 0x14, 'udp:syz0\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0xc000) (async) sendmsg$NFC_CMD_FW_DOWNLOAD(r6, &(0x7f0000000940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x7c, r7, 0x600, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, 'nl80211\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, 'gre0\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '[{'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_FIRMWARE_NAME={0xd, 0x14, 'udp:syz0\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xd, 0x14, 'udp:syz0\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0xc000) r12 = accept4$inet(r0, &(0x7f0000000980)={0x2, 0x0, @broadcast}, &(0x7f00000009c0)=0x10, 0x800) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000a00)={@dev, @loopback}, &(0x7f0000000a40)=0xc) setsockopt$IP_VS_SO_SET_STARTDAEMON(r12, 0x0, 0x48b, &(0x7f0000000a80)={0x1, 'veth1_to_batadv\x00', 0x2}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, r5, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x7, 0x24, [{0x9}, {0x1, 0x1}, {0x9, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x800) poll(&(0x7f0000000c00)=[{0xffffffffffffffff, 0x25}], 0x1, 0xb178) socket$igmp6(0xa, 0x3, 0x2) (async) r14 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r14, 0x29, 0xcd, &(0x7f0000000c40)={{0xa, 0x4e20, 0x3ff, @mcast2, 0x8000}, {0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}, 0x5}, 0x0, {[0x0, 0xebc5, 0x5, 0x5, 0x7, 0x3, 0x6, 0xe4e]}}, 0x5c) (async) setsockopt$MRT6_DEL_MFC(r14, 0x29, 0xcd, &(0x7f0000000c40)={{0xa, 0x4e20, 0x3ff, @mcast2, 0x8000}, {0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}, 0x5}, 0x0, {[0x0, 0xebc5, 0x5, 0x5, 0x7, 0x3, 0x6, 0xe4e]}}, 0x5c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000d00)={0x0, 0x10, &(0x7f0000000cc0)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}]}, &(0x7f0000000d40)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000d00)={0x0, 0x10, &(0x7f0000000cc0)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}]}, &(0x7f0000000d40)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r12, 0x84, 0x10, &(0x7f0000000d80)=@assoc_value={r15, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r14, 0x84, 0x21, &(0x7f0000000dc0)=0x7, 0x4) (async) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r14, 0x84, 0x21, &(0x7f0000000dc0)=0x7, 0x4) 2.957374321s ago: executing program 3 (id=4417): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000000)={0x0, 0x9, "be5f21", 0x8, 0x80}) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000005c0)={&(0x7f0000000240)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)="3aa5ab34e2e035a7c04c", 0xa}, {&(0x7f0000000300)="1768abcb9628e5b139c9428dcf5b70388abe6cc3c7f7fc9a7f06518550b4fec8809cd8be6e71e54f5adad18b680a2ceb1dffe72b2c82051e09a0dfed0cfff2d95d895ba1b680cde79d65db8a910df45c7ae5e7ed169e0b15e49ca4b6de316ebdbd58966358a0458c867843344f2bc359eb5216c63a5f84a12ea52fed6c19c22ad32ee1cb7c3e7d5b32afb65e28cfb9656c0f0b92a69a8fa9e8b2f97770233860f1cd9aed7545841f3a7d480ee183e976c7048af3ea1b7ee37ba59cfde3c61c05995116e1d86c8805ffde73c7d167de8d1e85730e2a9aad949f7aad918c7035c013d53fe07691abf885974214eb9c869befdfe73a1a680185", 0xf8}, {&(0x7f0000000400)="fe62492f2eb9fcceed7711a88b", 0xd}, {&(0x7f0000000440)="ca0d40ca94eab4f8e1571b", 0xb}], 0x4, &(0x7f00000004c0)=[{0x30, 0x104, 0x5, "8f1d100fb054b42a66c56faea764e2b8f4c3925b8a044204fbdc1b"}, {0xc8, 0x6, 0xd, "d40e8eb87d8f1198afe39ad3cf48fa01756ae1161300838be8bb8400502f6928b7df80c6cfafe3ed6876ce2b155d068e100414f8536fbb4bd4e21898397b1a40a6f7acb21a81b47237b0c5324aa8731f9d9b15d2e9b1854d30fbaf3bbaa9b4c9e31dd2197b3ac5f79e9ec7bcbdab1724687696594c2ec5ffa5481477421bd584a37939b0f2acbd4f45b9015f100396f4d1bccbfc5ad505f3e12f25b5d755b273350f8ce95d4451d471ada57b2a1910fb4f734b3823940ecd"}], 0xf8}, 0x2000d005) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15e32dae4e04ee36d6001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={r1, r6, 0x16, 0x0, @val=@tracing={0x0, 0x9}}, 0x20) 2.132030914s ago: executing program 1 (id=4418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x2, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0xa5, 0x4, 0x30, 0x46, @private0, @empty, 0x1, 0x80, 0xfffffffc, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x3f, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010", @ANYRES64=r0], 0x7c}}, 0x0) 2.028287368s ago: executing program 3 (id=4419): socket$inet6(0xa, 0x4, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fc0803ff0000000000200000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="b5e379a5389bcfd05ad9ca72d507", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @initdev, @loopback}, &(0x7f0000000200)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r2, 0x25, 0x8, @void}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg\x00', 0x20}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f00000007c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r5, 0x1, 0x0, 0xfffffffe, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'batadv0\x00', &(0x7f0000000140)=@ethtool_test={0x1a, 0x9, 0x5, 0x4, [0x3, 0x81, 0x7, 0x1000]}}) 2.010511708s ago: executing program 1 (id=4420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x1, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040080}, 0x4040000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0x80c0) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000019}, 0x8080) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001500)={0x14, 0x3, 0x7, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002b00)={0x28, r1, 0xe25, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x78}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000094) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) 106.497977ms ago: executing program 2 (id=4421): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000007a40)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="d27e096c28b61f97670f283a7de80ecc00bacc33bd8a94d2dc0db0cc", 0x1c}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x4004041) recvmmsg(r4, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/13, 0xd}, {&(0x7f0000000340)=""/15, 0xf}], 0x2}, 0xd}], 0x1, 0x40010120, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd700000dcdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="2200330000080211009a78e805010004002400"/30], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$NL80211_CMD_TESTMODE(r5, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000980)=ANY=[@ANYBLOB="900300a046abf6009d459d77c29cd410ca65822a600f60636f5be7ad", @ANYRES16=r6, @ANYBLOB="020025bd7000fbdbdf252d00000008000300", @ANYRES32=r9, @ANYBLOB="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"], 0x390}, 0x1, 0x0, 0x0, 0x8000}, 0x4054) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f00000002c0)={0x4800, 0x5, 0x0, 0xfffffffe}, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@generic='^(']}, 0x18}}, 0x40000) setsockopt$MRT_ADD_MFC_PROXY(r11, 0x0, 0xd2, &(0x7f0000000180)={@rand_addr=0x64010101, @empty, 0x3, "a9cf7282e58ae93243c7a5a70f4b59b4330dc63693dd7b764194f0c4d24c87f4", 0x6e19, 0x5, 0xe36c, 0x4}, 0x3c) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r1, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x60c5}, 0x90) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r7) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r10, &(0x7f0000000940)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x48, r12, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x1e}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x400c804) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x700}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x884) 3.352142ms ago: executing program 2 (id=4422): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x3ff0000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x200}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6011010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) r1 = socket(0xa, 0x800, 0x8) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1}, 0xc) 2.8968ms ago: executing program 4 (id=4423): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) socket$kcm(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000200)={0x4, 0x0, 0x1, 0x1, 0x74, 0x81, 0x8, 0x40, 0x8, 0x9, 0x0, 0x7, 0x9, 0x7}, 0xe) sendmmsg$inet(r3, &(0x7f0000000680)=[{{&(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="81ec", 0x2}], 0x1}}], 0x1, 0x4008010) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xbdfaeaa3c0070f25, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000100)={'macsec0\x00', @broadcast}) close(0x3) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) 2.01534ms ago: executing program 3 (id=4424): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x1000) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x2, &(0x7f0000000000)=@srh={0x0, 0x0, 0x4, 0x0, 0x7, 0x10, 0x8}, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x8}, 0x18) r6 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f00000001c0)=0xffffffffffffffff) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x15, &(0x7f0000000300)=@raw=[@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], &(0x7f0000000480)='syzkaller\x00', 0xa1, 0x5a, &(0x7f0000000040)=""/90, 0x41000, 0x0, '\x00', r1, 0x1c, r2, 0x8, &(0x7f0000000580)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xf5bc, r3, 0x1, &(0x7f00000006c0)=[r5, r7, r0, r0], &(0x7f0000000700)=[{0x4, 0x1, 0xd, 0x5}], 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) 916.325µs ago: executing program 1 (id=4425): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/174, 0xae}, {&(0x7f00000005c0)=""/4082, 0xff2}], 0x5}, 0x2}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendto$inet6(r1, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) (async) shutdown(r1, 0x1) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) (async) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/174, 0xae}, {&(0x7f00000005c0)=""/4082, 0xff2}], 0x5}, 0x2}], 0x1, 0x0, 0x0) (async) 0s ago: executing program 0 (id=4426): syz_emit_ethernet(0x86, &(0x7f0000000780)=ANY=[@ANYBLOB="ffffffffffff0180c2000000080045000078000000000011907800000000000000004e248345c23a2fb2a0e93d000100fff80400000030bd05a78f0edbcb66cce5984343e09c262fc62d381cd6515d33e142245708d985db081dcb26409ecb60274324d724100c1c28b8552c9dfdf23da2340cb8cbc71f5489d79cc13665174cedcb215e4a1a"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x2, 0x4a, &(0x7f00000004c0)="c20b02f1a9b9693d1c1c8994ef970cd6b0aa194eb9c83aa8391874a40bcb92fc982db8d358b52605da3b5fcf2d10825553cffd8e3ebe044fd4318278d338f7900be9e8bd2bea3fdc440a", 0xb, 0x1, 0x15c1, 0x5506, 0x88, 0x1, 0x9, 'syz1\x00'}) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x16, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="9104000000000000"], 0x0}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) unshare(0x2c020400) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xffffffffffdfffff, 0x0, 0x10, r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1b0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) write$nci(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="60060202"], 0x8) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x25dfdbfc, {}, [@typed={0x32, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x228, 0x0, 0x0, 0x0, 0x0, 0x0, 0x190, 0x1f0, 0x1f0, 0x190, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @empty, 0x0, 0xff, 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@private=0xa010100, @rand_addr=0x64010101, 0xff000000, 0x0, 'pim6reg\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x6, 0x2}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x1, 0x4, 0x4, 0x2, 0x3, 0x6], 0x6, 0x2}}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288) kernel console output (not intermixed with test programs): 0kB gpu_reclaim:0kB [ 344.803031][T16622] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 344.806416][T16638] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 344.853787][T16622] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 344.901835][T16622] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 344.916994][T16622] Node 0 DMA32 free:1255416kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21808kB inactive_anon:0kB active_file:4kB inactive_file:169812kB unevictable:0kB writepending:180kB zspages:0kB present:3129332kB managed:2548696kB mlocked:0kB bounce:0kB free_pcp:41036kB local_pcp:19700kB free_cma:0kB [ 344.970498][T16622] lowmem_reserve[]: 0 0 0 0 0 [ 344.974412][T16640] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2937'. [ 344.978944][T16622] Node 0 [ 344.985412][T16640] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.2937'. [ 344.989737][T16622] Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 344.989803][T16622] lowmem_reserve[]: 0 0 0 0 0 [ 344.989852][T16622] Node 1 Normal free:3948796kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 344.989915][T16622] lowmem_reserve[]: 0 0 0 0 0 [ 344.989962][T16622] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 344.990123][T16622] Node 0 DMA32: 665*4kB (UME) 128*8kB (UM) 343*16kB (UME) 126*32kB (UME) 15*64kB (ME) 150*128kB (UM) 141*256kB (UM) 67*512kB (U) 37*1024kB (UM) 4*2048kB (UME) 270*4096kB (UM) = 1255764kB [ 345.108128][T16622] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 345.120952][T16622] Node 1 Normal: 1*4kB (U) 5*8kB (UM) 9*16kB (UM) 4*32kB (UM) 7*64kB (UM) 4*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (UM) = 3948796kB [ 345.185159][T16622] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.254047][T16622] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.284358][T16622] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.303301][T16622] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.317508][T16622] 43025 total pagecache pages [ 345.324417][T16622] 0 pages in swap cache [ 345.331632][T16622] Free swap = 124996kB [ 345.335944][T16622] Total swap = 124996kB [ 345.341651][T16622] 2097051 pages RAM [ 345.345780][T16622] 0 pages HighMem/MovableOnly [ 345.352683][T16622] 428196 pages reserved [ 345.357309][T16622] 0 pages cma reserved [ 345.848723][T16673] : renamed from bond0 (while UP) [ 346.095527][T16662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2944'. [ 346.153829][T16685] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2950'. [ 346.237613][T16694] xt_CT: You must specify a L4 protocol and not use inversions on it [ 346.289938][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2954'. [ 346.467692][T16709] netlink: 'syz.1.2958': attribute type 1 has an invalid length. [ 346.615193][T16719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2960'. [ 347.181432][T16737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2967'. [ 347.430981][T16719] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 347.515851][T16752] xt_hashlimit: size too large, truncated to 1048576 [ 347.854884][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 347.869020][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 347.878938][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 347.888903][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 347.896615][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 348.193975][T16783] xt_hashlimit: size too large, truncated to 1048576 [ 348.381257][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b4fac00: rx timeout, send abort [ 348.709034][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 348.808098][T16807] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2987'. [ 348.821601][T16807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2987'. [ 348.881398][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b4fb800: rx timeout, send abort [ 348.890794][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b4fac00: abort rx timeout. Force session deactivation [ 349.377102][T16769] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.384972][T16769] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.392812][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b4fb800: abort rx timeout. Force session deactivation [ 349.407834][T16769] bridge_slave_0: entered allmulticast mode [ 349.416570][T16769] bridge_slave_0: entered promiscuous mode [ 349.426672][T16769] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.435494][T16769] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.444569][T16769] bridge_slave_1: entered allmulticast mode [ 349.454534][T16769] bridge_slave_1: entered promiscuous mode [ 349.543986][T16769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.559443][T16769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.599300][T16769] team0: Port device team_slave_0 added [ 349.608327][T16769] team0: Port device team_slave_1 added [ 349.681505][T16769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.692549][T16769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.722349][T16769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.737337][T16769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.745774][T16769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.774059][T16769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.857352][T16769] hsr_slave_0: entered promiscuous mode [ 349.864711][T16769] hsr_slave_1: entered promiscuous mode [ 349.872114][T16769] debugfs: 'hsr0' already exists in 'hsr' [ 349.878632][T16769] Cannot create hsr debugfs directory [ 349.925571][T16853] netlink: 'syz.3.2998': attribute type 1 has an invalid length. [ 349.936896][T16853] __nla_validate_parse: 1 callbacks suppressed [ 349.937729][T16853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2998'. [ 349.990359][ T5625] Bluetooth: hci4: command tx timeout [ 350.042552][T16856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2998'. [ 350.130891][T16859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3000'. [ 350.397355][T16769] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.411531][T16769] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.561568][T16769] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.573487][T16769] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.685738][T16871] lo speed is unknown, defaulting to 1000 [ 350.716495][T16769] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.727043][T16769] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.746383][T16871] lo speed is unknown, defaulting to 1000 [ 350.757209][T16871] lo speed is unknown, defaulting to 1000 [ 350.770032][T16871] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 350.831979][T16871] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 350.853601][T16871] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 350.886442][T16769] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.925146][T16769] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.950824][T16871] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 350.990492][T16871] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 351.043956][T16879] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 351.182057][T16871] lo speed is unknown, defaulting to 1000 [ 351.241110][T16871] lo speed is unknown, defaulting to 1000 [ 351.253186][T16769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 351.284674][T16769] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 351.310846][T16769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 351.343518][T16769] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 351.365773][T16769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 351.365800][T16871] lo speed is unknown, defaulting to 1000 [ 351.398628][T16769] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 351.435363][T16769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 351.437120][T16871] lo speed is unknown, defaulting to 1000 [ 351.454421][T16769] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 351.466740][T16871] lo speed is unknown, defaulting to 1000 [ 351.473869][T16890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3010'. [ 351.484367][T16871] lo speed is unknown, defaulting to 1000 [ 351.499374][T16871] lo speed is unknown, defaulting to 1000 [ 351.519924][T16871] lo speed is unknown, defaulting to 1000 [ 351.643869][T16769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.668796][T16769] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.686901][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.694170][ T3302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.712982][T12997] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.720344][T12997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.837364][T16916] netlink: 81 bytes leftover after parsing attributes in process `syz.1.3014'. [ 351.862164][T16916] netlink: 'syz.1.3014': attribute type 11 has an invalid length. [ 351.934646][T16918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3015'. [ 352.016357][T16922] ªªªªªª†Ý'É|d<: renamed from lo (while UP) [ 352.070120][ T5625] Bluetooth: hci4: command tx timeout [ 352.453876][T16940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.751208][T16769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.847002][T16962] bond10: option lp_interval: invalid value (0) [ 352.855405][T16962] bond10: option lp_interval: allowed values 1 - 2147483647 [ 352.866707][T16962] bond10 (unregistering): Released all slaves [ 352.906809][T16970] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.924726][T16970] bridge_slave_0 (unregistering): left allmulticast mode [ 352.936873][T16970] bridge_slave_0 (unregistering): left promiscuous mode [ 352.949062][T16970] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.984315][T16973] macvtap0: entered allmulticast mode [ 352.991477][T16973] veth0_macvtap: entered allmulticast mode [ 353.023865][T16769] veth0_vlan: entered promiscuous mode [ 353.049696][T16769] veth1_vlan: entered promiscuous mode [ 353.094620][T16769] veth0_macvtap: entered promiscuous mode [ 353.127745][T16769] veth1_macvtap: entered promiscuous mode [ 353.152608][T16769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.170496][T16769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.239538][T12989] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.260586][T12989] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.298495][T12989] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.307256][T12989] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.520874][T16956] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 353.662496][T12993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.694022][T12993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.820724][ T3302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.830440][ T3302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.831029][T16995] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3033'. [ 354.149948][ T5625] Bluetooth: hci4: command tx timeout [ 354.323032][T17023] sctp: [Deprecated]: syz.4.3040 (pid 17023) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.323032][T17023] Use struct sctp_sack_info instead [ 354.367264][T17027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3039'. [ 354.386282][T17026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3041'. [ 354.604792][T17027] 8021q: adding VLAN 0 to HW filter on device bond10 [ 354.823981][T17044] xt_TPROXY: Can be used only with -p tcp or -p udp [ 354.836898][T17044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3045'. [ 354.852364][T17044] netlink: 'syz.2.3045': attribute type 2 has an invalid length. [ 355.194338][T17064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.346579][T17075] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3056'. [ 355.370443][T17075] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3056'. [ 355.372160][T17074] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20004 [ 355.382756][T17075] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3056'. [ 355.398811][T17075] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3056'. [ 355.408270][T17075] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3056'. [ 355.417593][T17075] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3056'. [ 355.451441][T17081] Cannot find add_set index 4 as target [ 355.530215][T17088] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 355.551657][T17090] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 355.702828][T17095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3062'. [ 355.713300][T17095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3062'. [ 355.853729][T17102] netlink: 'syz.4.3064': attribute type 4 has an invalid length. [ 355.886929][T17102] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3064'. [ 355.897754][T17101] geneve2: entered promiscuous mode [ 355.910103][T17101] geneve2: entered allmulticast mode [ 355.935182][T17108] tun0: tun_chr_ioctl cmd 1074025675 [ 355.948715][T17108] tun0: persist enabled [ 356.076362][T17116] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3070'. [ 356.091259][T17118] IPv6: NLM_F_CREATE should be specified when creating new route [ 356.113644][T17117] netlink: 'syz.1.3071': attribute type 1 has an invalid length. [ 356.121651][T17117] netlink: 'syz.1.3071': attribute type 2 has an invalid length. [ 356.135559][T17118] netlink: 'syz.3.3069': attribute type 1 has an invalid length. [ 356.189272][T17118] netlink: 'syz.3.3069': attribute type 33 has an invalid length. [ 356.248416][ T5625] Bluetooth: hci4: command tx timeout [ 356.331301][T17118] bond0 (unregistering): Released all slaves [ 356.509395][T17096] Bluetooth: hci5: Opcode 0x0401 failed: -4 [ 356.654898][T17152] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 356.999588][T17172] netlink: 'syz.2.3084': attribute type 1 has an invalid length. [ 357.060146][T17172] 8021q: adding VLAN 0 to HW filter on device bond11 [ 357.159422][T17179] batadv0: entered promiscuous mode [ 357.166971][T17179] macsec1: entered promiscuous mode [ 357.174743][T17179] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 357.183603][T17179] batadv0: left promiscuous mode [ 357.760657][ T5625] Bluetooth: hci5: command 0x0401 tx timeout [ 357.792209][T17197] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.897238][T17197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.913340][T17197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.063853][ T5717] ªªªªªª†Ý'É|d< speed is unknown, defaulting to 1000 [ 358.066069][T17207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.073718][ T5717] syz0: Port: 1 Link DOWN [ 358.110965][T12997] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.131458][T12997] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.159297][ T3302] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.207566][T17220] batman_adv: batadv0: Adding interface: veth0 [ 358.236763][T17220] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.284224][T17220] batman_adv: batadv0: Interface activated: veth0 [ 358.311115][T13014] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.860400][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 358.872124][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 358.876880][T17262] netlink: Unknown conntrack attr (type=9481, max=9) [ 358.891183][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 358.906254][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 358.914961][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 358.969691][T17262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.009869][T17266] gtp0: entered promiscuous mode [ 359.042303][T17266] gtp0: entered allmulticast mode [ 359.063554][T17269] veth0_to_bond: default FDB implementation only supports local addresses [ 359.245329][T17276] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 359.274672][T17275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.594213][T17297] netlink: 'syz.1.3115': attribute type 7 has an invalid length. [ 359.614099][T17299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.660798][T17297] netlink: 'syz.1.3115': attribute type 8 has an invalid length. [ 359.809500][T17313] xt_hashlimit: size too large, truncated to 1048576 [ 359.841773][T17313] xt_hashlimit: max too large, truncated to 1048576 [ 359.867298][T17313] xt_hashlimit: overflow, rate too high: 0 [ 359.931410][T17261] ªªªªªª†Ý'É|d< speed is unknown, defaulting to 1000 [ 360.054953][T12989] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.095449][T12989] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.450120][T12989] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.473222][T12989] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.662357][T12989] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.674031][T12989] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.833616][T17350] geneve2: entered promiscuous mode [ 360.839836][T17350] geneve2: entered allmulticast mode [ 360.961894][ T5625] Bluetooth: hci2: command tx timeout [ 361.120095][T17366] __nla_validate_parse: 10 callbacks suppressed [ 361.120113][T17366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3132'. [ 361.181307][T17366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.414106][T17385] netlink: 'syz.1.3138': attribute type 21 has an invalid length. [ 361.504016][T12989] pimreg: left allmulticast mode [ 361.527600][T12989] pimreg3: left allmulticast mode [ 361.702204][T17403] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 362.044147][T12989] bond2 (unregistering): (slave gretap1): Removing an active aggregator [ 362.059545][T12989] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 362.099810][T12989] bond3 (unregistering): (slave gretap0): Releasing active interface [ 362.207466][T12989] bond4 (unregistering): (slave geneve2): Releasing active interface [ 362.281730][T12989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.293948][T12989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.304894][T12989] bond0 (unregistering): (slave team0): Releasing backup interface [ 362.323646][T12989] bond0 (unregistering): Released all slaves [ 362.334383][T12989] bond1 (unregistering): Released all slaves [ 362.350384][T12989] bond2 (unregistering): Released all slaves [ 362.365855][T12989] bond3 (unregistering): Released all slaves [ 362.400124][T12989] bond4 (unregistering): Released all slaves [ 362.416600][T12989] bond5 (unregistering): (slave veth3): Releasing active interface [ 362.426725][T12989] bond5 (unregistering): (slave veth5): Releasing active interface [ 362.442899][T12989] bond5 (unregistering): Released all slaves [ 362.462508][T12989] bond6 (unregistering): Released all slaves [ 362.478713][T12989] bond7 (unregistering): Released all slaves [ 362.494664][T12989] bond8 (unregistering): Released all slaves [ 362.519644][T12989] bond9 (unregistering): Released all slaves [ 362.536330][T12989] bond10 (unregistering): Released all slaves [ 362.566578][T12989] bond11 (unregistering): Released all slaves [ 362.582651][T17385] netlink: 'syz.1.3138': attribute type 6 has an invalid length. [ 362.590552][T17385] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3138'. [ 362.719966][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 362.836622][T12989] : left promiscuous mode [ 362.897833][T17399] ªªªªªª†Ý'É|d< speed is unknown, defaulting to 1000 [ 362.930996][T13014] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 363.029274][ T5625] Bluetooth: hci2: command tx timeout [ 363.036250][T17261] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.051730][T17261] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.066230][T17261] bridge_slave_0: entered allmulticast mode [ 363.087181][T17261] bridge_slave_0: entered promiscuous mode [ 363.108647][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 363.119259][T17261] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.133008][T17261] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.140996][T17261] bridge_slave_1: entered allmulticast mode [ 363.150584][T17261] bridge_slave_1: entered promiscuous mode [ 363.161393][ T3302] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 363.417621][T17261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.500175][T17261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.586500][T12989] hsr_slave_0: left promiscuous mode [ 363.603474][T12989] hsr_slave_1: left promiscuous mode [ 363.639328][T12989] veth1_macvtap: left promiscuous mode [ 363.652970][T12989] veth0_macvtap: left promiscuous mode [ 363.671409][T12989] veth1_vlan: left promiscuous mode [ 363.689630][T12989] v: left promiscuous mode [ 363.929530][T17477] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3153'. [ 364.264728][T12989] team0 (unregistering): Port device team_slave_1 removed [ 364.286803][T12989] team0 (unregistering): Port device team_slave_0 removed [ 364.453268][T17261] team0: Port device team_slave_0 added [ 364.515792][T17486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3154'. [ 364.539847][T17488] netlink: 'syz.3.3154': attribute type 5 has an invalid length. [ 364.591142][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 364.634360][T17261] team0: Port device team_slave_1 added [ 364.691015][T17497] netlink: 'syz.1.3156': attribute type 1 has an invalid length. [ 364.698975][T12997] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 364.756331][T17497] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3156'. [ 364.814332][T17261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.831142][T17261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.868875][T17261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.881678][T17261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.889270][T17261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.917007][T17261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.932510][T17505] tc_dump_action: action bad kind [ 364.998301][T13014] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 365.108854][ T5625] Bluetooth: hci2: command tx timeout [ 365.140468][T17261] hsr_slave_0: entered promiscuous mode [ 365.171253][T17261] hsr_slave_1: entered promiscuous mode [ 365.189869][T17261] debugfs: 'hsr0' already exists in 'hsr' [ 365.196840][T17261] Cannot create hsr debugfs directory [ 365.224776][T12989] IPVS: stop unused estimator thread 0... [ 365.566323][T17544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.935746][T17566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3171'. [ 365.946566][T17566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3171'. [ 366.157844][T17569] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 366.182397][T17575] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3173'. [ 366.596109][T17593] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3177'. [ 366.629616][T17593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3177'. [ 366.784432][T17261] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 366.806434][T17605] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3180'. [ 366.833421][T17261] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 366.866270][T17261] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 366.876985][T17610] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3181'. [ 366.903498][T17261] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 366.923943][T17610] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3181'. [ 366.934612][T17261] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 366.971780][T17261] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 367.004197][T17261] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 367.047582][T17261] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 367.172586][T17261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.189845][ T5625] Bluetooth: hci2: command tx timeout [ 367.250269][T17261] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.301749][T12997] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.309069][T12997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.376833][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.384039][ T3302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.530247][T17653] netlink: 'syz.3.3190': attribute type 1 has an invalid length. [ 367.541723][T17655] 8021q: VLANs not supported on ipvlan0 [ 367.556509][T17653] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3190'. [ 367.590322][T17653] block nbd1: not configured, cannot reconfigure [ 367.952945][T17683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3195'. [ 368.000493][T17683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.104803][T17691] netlink: 'syz.0.3196': attribute type 1 has an invalid length. [ 368.137026][T17691] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3196'. [ 368.338583][T17709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3199'. [ 368.773235][T17731] team0: Port device team_slave_0 removed [ 368.943273][T17261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.965838][T17740] syzkaller1: entered promiscuous mode [ 368.977369][T17740] syzkaller1: entered allmulticast mode [ 369.219731][T17758] ipvlan1: entered promiscuous mode [ 369.236006][T17758] ipvlan1: entered allmulticast mode [ 369.249226][T17758] veth0_vlan: entered allmulticast mode [ 369.286823][T17261] veth0_vlan: entered promiscuous mode [ 369.332359][T17261] veth1_vlan: entered promiscuous mode [ 369.401913][T17261] veth0_macvtap: entered promiscuous mode [ 369.443725][T17261] veth1_macvtap: entered promiscuous mode [ 369.504162][T17261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.548743][T17261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.709863][T13013] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.741142][T13013] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.752885][T13013] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.918816][T17791] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 369.959735][T13014] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.962090][ T3302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.013730][ T3302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.160044][T17806] macvtap3: entered promiscuous mode [ 370.165778][T17806] macvtap3: entered allmulticast mode [ 370.171627][T17806] vlan0: entered allmulticast mode [ 370.176937][T17806] v: entered allmulticast mode [ 370.187606][T13025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.224857][T13025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.296251][T17813] xt_hashlimit: overflow, try lower: 3/0 [ 370.687174][T17833] bond1: (slave vlan2): making interface the new active one [ 370.723882][T17833] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 370.852804][T17845] xt_hashlimit: size too large, truncated to 1048576 [ 371.001493][T17854] netlink: 'syz.4.3234': attribute type 21 has an invalid length. [ 371.072805][T17854] netlink: 'syz.4.3234': attribute type 21 has an invalid length. [ 371.096936][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 371.108490][T13014] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.119268][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 371.132967][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 371.142373][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 371.152094][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 371.165289][T13014] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.250383][T13022] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.310874][T13022] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.514379][T17874] xt_hashlimit: size too large, truncated to 1048576 [ 371.555002][T17870] xt_CT: No such helper "snmp" [ 371.752536][T17884] __nla_validate_parse: 10 callbacks suppressed [ 371.752554][T17884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3238'. [ 372.250851][T17859] ªªªªªª†Ý'É|d< speed is unknown, defaulting to 1000 [ 372.326694][T17923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3243'. [ 372.469219][T17930] 8021q: VLANs not supported on ip_vti0 [ 372.637222][T17940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3247'. [ 372.646641][T17940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3247'. [ 372.666154][T17940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3247'. [ 372.675394][T17940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3247'. [ 372.698138][T13025] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.716792][T13025] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.740408][T13025] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.834894][T17859] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.842422][T17859] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.849973][T17859] bridge_slave_0: entered allmulticast mode [ 372.857282][T17859] bridge_slave_0: entered promiscuous mode [ 372.865508][T17859] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.873465][T17859] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.880821][T17859] bridge_slave_1: entered allmulticast mode [ 372.889855][T17859] bridge_slave_1: entered promiscuous mode [ 372.920699][T17859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.932869][T17859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.966350][T17859] team0: Port device team_slave_0 added [ 372.974174][T17859] team0: Port device team_slave_1 added [ 373.002076][T17859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.009444][T17859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.035919][T17859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.048760][T17859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.055753][T17859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.082228][T17859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.130530][T17859] hsr_slave_0: entered promiscuous mode [ 373.137149][T17859] hsr_slave_1: entered promiscuous mode [ 373.143694][T17859] debugfs: 'hsr0' already exists in 'hsr' [ 373.149520][T17859] Cannot create hsr debugfs directory [ 373.269485][ T5625] Bluetooth: hci1: command tx timeout [ 373.316520][T17859] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.327326][T17859] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.354064][T12989] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.414104][T17859] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.424837][T17859] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.512405][T17859] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.523686][T17859] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.602398][T17859] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.613887][T17859] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.705233][T17885] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 374.750741][T17859] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 374.771575][T17952] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3249'. [ 374.786714][T17953] ip6t_rpfilter: unknown options [ 374.829121][T17859] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 374.857545][T17859] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 374.880525][T17859] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 374.904946][T17859] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 374.923806][ T1214] IPVS: starting estimator thread 0... [ 374.947924][T17859] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 374.972592][T17859] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 375.005524][T17859] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 375.019891][T17961] IPVS: using max 31 ests per chain, 74400 per kthread [ 375.192832][T17859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.222042][T17859] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.235340][T12989] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.242554][T12989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.259028][T13025] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.266329][T13025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.348716][ T5625] Bluetooth: hci1: command tx timeout [ 375.646671][T17859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.723066][T17859] veth0_vlan: entered promiscuous mode [ 375.742131][T17859] veth1_vlan: entered promiscuous mode [ 375.795473][T17859] veth0_macvtap: entered promiscuous mode [ 375.809026][T17859] veth1_macvtap: entered promiscuous mode [ 375.860062][T17859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.889924][T17859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.920039][T13022] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.930743][T17975] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 375.935242][T13022] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.949418][T13022] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.961701][T17981] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3253'. [ 375.999032][T18002] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3258'. [ 376.127069][T13022] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.258593][T18012] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3260'. [ 376.350824][T18012] bond1: entered allmulticast mode [ 376.361417][T18012] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.386361][ T3302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.425331][ T3302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.647303][T18041] netlink: 'syz.4.3265': attribute type 1 has an invalid length. [ 376.682723][T18041] 8021q: adding VLAN 0 to HW filter on device bond2 [ 376.702112][T18041] bond2: (slave batadv1): Opening slave failed [ 376.900505][T18053] netlink: 'syz.0.3268': attribute type 29 has an invalid length. [ 376.928139][T13022] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.938930][T18053] netlink: 'syz.0.3268': attribute type 1 has an invalid length. [ 376.947215][T13022] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.957081][T13022] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.988178][ T3302] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.359253][T18063] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 377.428234][ T5625] Bluetooth: hci1: command tx timeout [ 379.213714][T18014] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 379.299615][T18063] __nla_validate_parse: 3 callbacks suppressed [ 379.299632][T18063] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3271'. [ 379.334123][T13025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.363974][T13025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.463835][T18069] x_tables: duplicate underflow at hook 2 [ 379.476461][T18070] x_tables: duplicate underflow at hook 2 [ 379.508786][ T5625] Bluetooth: hci1: command tx timeout [ 379.585026][T18075] sch_fq: defrate 0 ignored. [ 379.605859][T18075] netlink: 'syz.3.3229': attribute type 16 has an invalid length. [ 379.632322][T18075] netlink: 'syz.3.3229': attribute type 17 has an invalid length. [ 379.648688][T18078] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3276'. [ 379.963314][T18092] syzkaller0: entered promiscuous mode [ 379.969954][T18092] syzkaller0: entered allmulticast mode [ 380.146605][T18109] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3284'. [ 380.164989][T18104] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3284'. [ 380.805313][T18139] ip_tables: iptables: counters copy to user failed while replacing table [ 380.815956][T18139] netlink: 'syz.1.3292': attribute type 33 has an invalid length. [ 380.992284][T18143] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 381.005870][T18143] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 381.095507][T18150] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3296'. [ 381.104996][T18151] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3296'. [ 383.000995][T18096] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 383.161172][T18165] netlink: 'syz.4.3302': attribute type 39 has an invalid length. [ 383.208822][T18174] netlink: 'syz.2.3304': attribute type 1 has an invalid length. [ 383.218768][T18171] netlink: 'syz.1.3305': attribute type 9 has an invalid length. [ 383.220364][T18170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3303'. [ 383.240243][T18171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3305'. [ 383.261258][T18171] netlink: 'syz.1.3305': attribute type 9 has an invalid length. [ 383.272869][T18171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3305'. [ 383.643059][T18196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.701098][T18209] netlink: 'syz.3.3315': attribute type 10 has an invalid length. [ 383.721414][T18209] team0: Port device dummy0 added [ 383.754262][T18209] netlink: 'syz.3.3315': attribute type 10 has an invalid length. [ 383.784577][T18209] team0: Port device dummy0 removed [ 383.933176][T18225] xt_hashlimit: size too large, truncated to 1048576 [ 384.139553][T18241] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 386.613883][T18200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 386.830659][T18259] netlink: 'syz.2.3326': attribute type 1 has an invalid length. [ 386.872107][T18265] netlink: 'syz.0.3329': attribute type 9 has an invalid length. [ 387.071707][T18279] netlink: 'syz.0.3334': attribute type 2 has an invalid length. [ 387.080481][T18279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3334'. [ 387.246827][T18290] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3336'. [ 387.288697][T18290] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3336'. [ 387.435377][T18300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3340'. [ 387.684914][T18318] netlink: 'syz.0.3346': attribute type 12 has an invalid length. [ 387.715065][T18318] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3346'. [ 387.742903][T18318] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3346'. [ 387.933979][T18335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3350'. [ 387.989366][T18336] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3350'. [ 388.021930][T18336] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3350'. [ 388.056521][T18343] netlink: 576 bytes leftover after parsing attributes in process `syz.1.3351'. [ 388.262345][T18349] bond1: Unable to set up delay as MII monitoring is disabled [ 388.289626][T18349] bond1 (unregistering): Released all slaves [ 388.306842][T18364] Cannot find add_set index 2 as target [ 388.448773][T18363] syzkaller0: entered promiscuous mode [ 388.454830][T18363] syzkaller0: entered allmulticast mode [ 388.617653][T18384] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 388.631637][T15558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.722793][T18392] syzkaller0: entered promiscuous mode [ 388.730947][T18392] syzkaller0: entered allmulticast mode [ 388.868779][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.669540][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.708562][T15558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.549997][T18378] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 391.562833][T18392] netlink: 'syz.3.3363': attribute type 1 has an invalid length. [ 391.580684][T18392] netlink: 'syz.3.3363': attribute type 2 has an invalid length. [ 391.675649][T18405] syzkaller1: entered promiscuous mode [ 391.681331][T18405] syzkaller1: entered allmulticast mode [ 391.750433][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.791267][T18413] netlink: 'syz.2.3370': attribute type 7 has an invalid length. [ 391.800193][T18413] netlink: 'syz.2.3370': attribute type 8 has an invalid length. [ 391.853694][T18418] syzkaller0: entered promiscuous mode [ 391.871278][T18418] syzkaller0: entered allmulticast mode [ 391.900679][T18408] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 391.909060][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.925677][T18408] netlink: 'syz.4.3368': attribute type 4 has an invalid length. [ 392.046041][T18421] : renamed from bond0 (while UP) [ 392.081255][T18423] netlink: 'syz.0.3373': attribute type 5 has an invalid length. [ 392.103656][T18423] __nla_validate_parse: 5 callbacks suppressed [ 392.103672][T18423] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3373'. [ 392.195700][T18428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3374'. [ 392.267195][T18436] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3376'. [ 392.278789][T18436] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3376'. [ 392.296955][T18436] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3376'. [ 392.396834][T18444] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3377'. [ 392.424786][T18445] ipt_REJECT: TCP_RESET invalid for non-tcp [ 392.550445][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.620591][T18457] IPv6: Can't replace route, no match found [ 392.758338][T18463] netlink: 312 bytes leftover after parsing attributes in process `syz.1.3380'. [ 392.799344][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.843957][T18471] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3383'. [ 393.119173][T18481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3384'. [ 393.129410][T18481] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3384'. [ 393.193153][ T1214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.848212][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.868438][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.950065][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.194314][T18430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.542750][T18506] netlink: 'syz.1.3392': attribute type 4 has an invalid length. [ 395.761230][T18520] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 395.908751][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.987454][T18538] IPVS: length: 24 != 168229635864 [ 396.948371][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.989085][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.997434][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.028462][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.057197][T18542] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 399.282559][T18591] __nla_validate_parse: 4 callbacks suppressed [ 399.282576][T18591] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3414'. [ 399.344580][T18598] TCP: TCP_TX_DELAY enabled [ 399.415655][T18602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.435202][T18602] netlink: Unknown conntrack attr (type=2053, max=9) [ 399.442486][T18602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.453845][T18603] netlink: 'syz.1.3420': attribute type 83 has an invalid length. [ 399.639883][T18618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3425'. [ 399.642799][T18619] netlink: 'syz.0.3426': attribute type 21 has an invalid length. [ 399.747673][T18629] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3428'. [ 399.786047][T18621] bond0: entered promiscuous mode [ 399.791637][T18621] bond0: entered allmulticast mode [ 399.797267][T18621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.893316][T18636] netlink: 'syz.3.3430': attribute type 2 has an invalid length. [ 399.953963][T18641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.072576][T15558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.109784][T18652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3435'. [ 400.122264][T18652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3435'. [ 400.165524][T18658] netlink: 'syz.3.3437': attribute type 12 has an invalid length. [ 400.174091][T18658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3437'. [ 400.199297][T18650] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.276593][T18663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3436'. [ 400.304377][T18658] netlink: 'syz.3.3437': attribute type 12 has an invalid length. [ 400.318664][T12997] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.318775][T18658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3437'. [ 400.342081][T12997] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.353601][T12997] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.363095][T12997] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.472665][T18650] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.522121][T18670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3439'. [ 400.612113][T18650] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.648517][T18674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3441'. [ 400.761565][T18650] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.927281][T18687] syz_tun: entered allmulticast mode [ 400.941675][T18686] syz_tun: left allmulticast mode [ 401.030763][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.111334][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.205283][T18697] bridge1: entered promiscuous mode [ 401.212304][T18697] bridge1: entered allmulticast mode [ 401.288553][T12989] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.308642][T12989] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.380152][T12989] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.611215][T18717] vlan2: entered allmulticast mode [ 401.641372][T18717] bridge2: entered allmulticast mode [ 401.673286][T18732] netlink: 'syz.1.3457': attribute type 1 has an invalid length. [ 401.760161][T12997] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.782502][T18737] netlink: 'syz.1.3457': attribute type 1 has an invalid length. [ 401.883881][T18732] xt_CT: You must specify a L4 protocol and not use inversions on it [ 402.040311][T18755] netlink: 'syz.4.3464': attribute type 9 has an invalid length. [ 402.149801][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.186596][T18765] netlink: 'syz.2.3467': attribute type 1 has an invalid length. [ 402.345803][T18765] bond1: entered promiscuous mode [ 402.366243][T18765] 8021q: adding VLAN 0 to HW filter on device bond1 [ 402.407885][T18771] 8021q: adding VLAN 0 to HW filter on device bond1 [ 402.421808][T18771] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 402.448331][T18771] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 402.461807][T18771] bond1: (slave ip6gre1): making interface the new active one [ 402.471343][T18771] ip6gre1: entered promiscuous mode [ 402.478318][T18771] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 402.677123][T18794] netlink: 'syz.2.3473': attribute type 21 has an invalid length. [ 402.792783][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.266795][T18830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.315598][T18830] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 403.661233][T18854] v: renamed from veth0_vlan [ 404.073183][ T1214] net_ratelimit: 1 callbacks suppressed [ 404.073787][ T1214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.234618][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.496213][T18905] Bluetooth: ISO socket layer initialized [ 404.592793][T18909] Unsupported ieee802154 address type: 0 [ 404.678107][T18913] macvtap1: entered promiscuous mode [ 404.683580][T18913] macvtap1: entered allmulticast mode [ 404.689911][T18913] veth1_to_bridge: entered promiscuous mode [ 404.697017][T18913] veth1_to_bridge: entered allmulticast mode [ 404.722702][T18913] team0: Device macvtap1 failed to register rx_handler [ 404.732548][T18913] veth1_to_bridge: left allmulticast mode [ 404.754800][T18913] veth1_to_bridge: left promiscuous mode [ 404.939090][T18920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.279704][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.493990][T18958] __nla_validate_parse: 11 callbacks suppressed [ 405.494008][T18958] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3516'. [ 405.549854][T18958] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3516'. [ 405.604483][T18962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3518'. [ 406.134906][T18989] xt_limit: Overflow, try lower: 536871034/127 [ 406.310589][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.504454][T19018] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3530'. [ 407.108550][ T1214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.331660][T19045] validate_nla: 2 callbacks suppressed [ 407.331709][T19045] netlink: 'syz.3.3535': attribute type 1 has an invalid length. [ 407.350474][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.471748][T19048] bond1: (slave gretap1): making interface the new active one [ 407.480088][T19048] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 407.541956][T19048] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3535'. [ 407.552477][T19048] 8021q: adding VLAN 0 to HW filter on device bond1 [ 408.389554][T15558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.283989][T19005] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 409.432567][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.511076][T19059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3539'. [ 409.594313][T19056] 8021q: adding VLAN 0 to HW filter on device bond2 [ 409.689261][T19068] netlink: 'syz.2.3542': attribute type 1 has an invalid length. [ 409.765759][T19078] netlink: 'syz.4.3545': attribute type 1 has an invalid length. [ 409.830919][ T1214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.874401][T19068] bond2: option mode: invalid value (8) [ 409.902818][T19068] bond2 (unregistering): Released all slaves [ 409.965417][T19095] netlink: 'syz.3.3546': attribute type 1 has an invalid length. [ 410.001788][T19075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.082283][T19075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.151909][ T1214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.164386][T19078] 8021q: adding VLAN 0 to HW filter on device bond3 [ 410.265091][T19093] bond3: (slave geneve4): making interface the new active one [ 410.300079][T19093] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 410.338169][T19090] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.3542'. [ 410.465056][T19117] bridge3: entered promiscuous mode [ 410.480190][T15558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.505366][T19117] bridge3: entered allmulticast mode [ 410.556474][ T5279] v: left promiscuous mode [ 410.609970][ T1214] v: entered promiscuous mode [ 410.907771][T19146] syzkaller0: entered promiscuous mode [ 410.925202][T19146] syzkaller0: entered allmulticast mode [ 410.938252][T19144] netlink: 'syz.1.3556': attribute type 4 has an invalid length. [ 411.126234][T19156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3557'. [ 411.182384][T19161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.192472][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.476813][T19178] syz.4.3562: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 411.508997][T15558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.561976][T19177] netlink: 'syz.4.3562': attribute type 3 has an invalid length. [ 411.566433][T19178] CPU: 0 UID: 0 PID: 19178 Comm: syz.4.3562 Not tainted syzkaller #0 PREEMPT(full) [ 411.566490][T19178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 411.566524][T19178] Call Trace: [ 411.566567][T19178] [ 411.566673][T19178] dump_stack_lvl+0xe8/0x150 [ 411.566872][T19178] warn_alloc+0x24c/0x270 [ 411.566982][T19178] ? stack_depot_save_flags+0x33/0x800 [ 411.567153][T19178] ? __pfx_warn_alloc+0x10/0x10 [ 411.567219][T19178] ? kasan_save_track+0x3e/0x80 [ 411.567295][T19178] ? __kasan_kmalloc+0x93/0xb0 [ 411.567381][T19178] ? xsk_setsockopt+0x52a/0x960 [ 411.567537][T19178] ? do_sock_setsockopt+0x17c/0x1b0 [ 411.567754][T19178] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 411.567844][T19178] ? do_syscall_64+0x174/0x580 [ 411.567988][T19178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.568111][T19178] __vmalloc_node_range_noprof+0x12c/0x1730 [ 411.568250][T19178] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 411.568319][T19178] ? __kasan_kmalloc+0x93/0xb0 [ 411.568390][T19178] ? __kmalloc_cache_noprof+0x32d/0x660 [ 411.568442][T19178] ? __kmalloc_cache_noprof+0x150/0x660 [ 411.568508][T19178] vmalloc_user_noprof+0xad/0xe0 [ 411.568591][T19178] ? xskq_create+0xbf/0x170 [ 411.568647][T19178] xskq_create+0xbf/0x170 [ 411.568708][T19178] xsk_init_queue+0x8a/0xe0 [ 411.568768][T19178] xsk_setsockopt+0x52a/0x960 [ 411.568832][T19178] ? __fget_files+0x2a/0x420 [ 411.568916][T19178] ? __pfx_xsk_setsockopt+0x10/0x10 [ 411.568965][T19178] ? __pfx_aa_sk_perm+0x10/0x10 [ 411.569080][T19178] ? aa_sock_opt_perm+0xff/0x1a0 [ 411.569156][T19178] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 411.569232][T19178] ? __pfx_xsk_setsockopt+0x10/0x10 [ 411.569288][T19178] do_sock_setsockopt+0x17c/0x1b0 [ 411.569368][T19178] __x64_sys_setsockopt+0x13d/0x1b0 [ 411.569440][T19178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.569486][T19178] do_syscall_64+0x174/0x580 [ 411.569533][T19178] ? trace_irq_disable+0x3b/0x140 [ 411.569603][T19178] ? clear_bhb_loop+0x70/0xc0 [ 411.569657][T19178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.569711][T19178] RIP: 0033:0x7f9b56b9e0d9 [ 411.569757][T19178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.569773][T19178] RSP: 002b:00007f9b57a00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 411.569819][T19178] RAX: ffffffffffffffda RBX: 00007f9b56e26090 RCX: 00007f9b56b9e0d9 [ 411.569831][T19178] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000017 [ 411.569840][T19178] RBP: 00007f9b56c35024 R08: 0000000000000004 R09: 0000000000000000 [ 411.569850][T19178] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.569861][T19178] R13: 00007f9b56e26128 R14: 00007f9b56e26090 R15: 00007ffed4718e88 [ 411.569889][T19178] [ 411.601919][T19178] Mem-Info: [ 411.698850][T19177] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3562'. [ 411.958351][T19193] xt_hashlimit: size too large, truncated to 1048576 [ 411.982129][T19178] active_anon:5706 inactive_anon:0 isolated_anon:0 [ 411.982129][T19178] active_file:1 inactive_file:42599 isolated_file:0 [ 411.982129][T19178] unevictable:0 dirty:75 writeback:0 [ 411.982129][T19178] slab_reclaimable:12053 slab_unreclaimable:118820 [ 411.982129][T19178] mapped:29307 shmem:528 pagetables:1367 [ 411.982129][T19178] sec_pagetables:0 bounce:0 [ 411.982129][T19178] kernel_misc_reclaimable:0 [ 411.982129][T19178] free:1298641 free_pcp:14544 free_cma:0 [ 412.061208][T19187] bond2: entered promiscuous mode [ 412.071785][T19178] Node 0 active_anon:22624kB inactive_anon:0kB active_file:4kB inactive_file:170192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117128kB dirty:300kB writeback:0kB shmem:2112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17148kB pagetables:5416kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 412.132581][T19200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3568'. [ 412.154648][T19187] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.3565'. [ 412.184119][T19178] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 412.231535][T19188] macvlan2: entered promiscuous mode [ 412.245658][T19188] macvlan2: entered allmulticast mode [ 412.255357][T19188] bond2: (slave macvlan2): Opening slave failed [ 412.262049][T19178] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 412.363100][T19178] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 412.382089][T19178] Node 0 DMA32 free:1220188kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22824kB inactive_anon:0kB active_file:4kB inactive_file:170192kB unevictable:0kB writepending:300kB zspages:0kB present:3129332kB managed:2548696kB mlocked:0kB bounce:0kB free_pcp:56340kB local_pcp:37792kB free_cma:0kB [ 412.436779][T19178] lowmem_reserve[]: 0 0 0 0 0 [ 412.442617][T19187] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 412.451181][T19178] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 412.483355][T19178] lowmem_reserve[]: 0 0 0 0 0 [ 412.489949][T19187] 0ªX¹¦Dö»: entered allmulticast mode [ 412.496645][T19178] Node 1 Normal free:3948728kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 412.496698][T19213] netlink: 'syz.0.3571': attribute type 11 has an invalid length. [ 412.555142][T15557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.579017][T19178] lowmem_reserve[]: 0 0 0 0 0 [ 412.618744][T19178] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 412.658371][T19178] Node 0 DMA32: 1099*4kB (M) 724*8kB (UM) 165*16kB (UME) 306*32kB (UME) 66*64kB (UME) 90*128kB (UME) 143*256kB (UME) 15*512kB (UME) 25*1024kB (UME) 7*2048kB (ME) 269*4096kB (UM) = 1224412kB [ 412.720482][T19178] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 412.753626][T19178] Node 1 Normal: 0*4kB 5*8kB (UM) 9*16kB (UM) 6*32kB (UM) 9*64kB (UM) 6*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (UM) = 3948728kB [ 412.771031][T19178] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 412.784354][T19223] netlink: 'syz.1.3573': attribute type 2 has an invalid length. [ 412.809713][T19225] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3574'. [ 412.833143][T19225] openvswitch: netlink: Message has 512 unknown bytes. [ 412.844769][T19178] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 412.873918][T19229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3576'. [ 412.898400][T19178] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 412.934141][T19178] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 412.986964][T19178] 43123 total pagecache pages [ 413.009252][T19178] 0 pages in swap cache [ 413.030764][T19178] Free swap = 124996kB [ 413.043228][T19178] Total swap = 124996kB [ 413.046764][T19234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3578'. [ 413.055660][T19178] 2097051 pages RAM [ 413.077601][T19178] 0 pages HighMem/MovableOnly [ 413.096535][T19178] 428196 pages reserved [ 413.111339][T19178] 0 pages cma reserved [ 413.190588][ T1214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.294492][T19254] netlink: 'syz.1.3585': attribute type 8 has an invalid length. [ 413.313154][T19257] ipt_rpfilter: unknown options [ 413.379998][T19258] syzkaller0: entered promiscuous mode [ 413.392807][T19258] syzkaller0: entered allmulticast mode [ 413.724719][T19279] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3593'. [ 413.876220][T19285] netlink: 'syz.4.3595': attribute type 1 has an invalid length. [ 414.082061][T19296] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3599'. [ 414.331586][T19310] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20004 [ 414.382711][T19312] syzkaller0: entered promiscuous mode [ 414.388518][T19312] syzkaller0: entered allmulticast mode [ 414.450028][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a134c00: rx timeout, send abort [ 414.630698][T15557] net_ratelimit: 3 callbacks suppressed [ 414.630715][T15557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.835037][T19342] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3611'. [ 414.864805][T19336] IPVS: Scheduler module ip_vs_sip not found [ 414.942918][ C0] vcan0: j1939_tp_rxtimer: 0xffff888068692c00: rx timeout, send abort [ 414.951746][ T1214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.958358][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a134c00: abort rx timeout. Force session deactivation [ 415.047411][T19345] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 415.222051][T19357] bridge0: port 1(ipvlan2) entered blocking state [ 415.248871][T19357] bridge0: port 1(ipvlan2) entered disabled state [ 415.265357][T19357] ipvlan2: entered allmulticast mode [ 415.283750][T19357] bridge0: entered allmulticast mode [ 415.299816][T19357] ipvlan2: left allmulticast mode [ 415.305064][T19357] bridge0: left allmulticast mode [ 415.388470][T19368] 8021q: adding VLAN 0 to HW filter on device bond2 [ 415.424169][T19361] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 415.451228][ C0] vcan0: j1939_tp_rxtimer: 0xffff888068692c00: abort rx timeout. Force session deactivation [ 415.668575][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.229822][ T1214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.397061][T19374] __nla_validate_parse: 2 callbacks suppressed [ 416.397080][T19374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3620'. [ 416.413835][T19374] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3620'. [ 416.427146][T19374] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3620'. [ 416.669968][T19392] block nbd0: Unsupported socket: should be TCP or UNIX. [ 416.719031][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.740792][T19399] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3630'. [ 416.766909][T19392] can: request_module (can-proto-3) failed. [ 416.970060][T19415] netlink: 'syz.1.3634': attribute type 10 has an invalid length. [ 417.102365][T19428] netlink: 'syz.3.3638': attribute type 2 has an invalid length. [ 417.138376][T19428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3638'. [ 417.177118][T19438] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 417.367177][T19448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3643'. [ 417.461242][T19445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3642'. [ 417.508866][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.546196][T19459] netlink: 'syz.3.3646': attribute type 9 has an invalid length. [ 417.715522][T19466] tc_dump_action: action bad kind [ 417.750308][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.931307][T19486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3654'. [ 417.973016][T19486] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3654'. [ 418.035941][T19495] siw: device registration error -23 [ 418.121469][T19500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3659'. [ 418.340167][T19515] 8021q: adding VLAN 0 to HW filter on device bond3 [ 418.349796][T19515] bond0: (slave bond3): Enslaving as an active interface with an up link [ 418.369364][T19520] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 418.377261][T19520] team0: Device ipvlan0 is already an upper device of the team interface [ 418.409497][T19529] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 418.489764][T19536] ipvlan2: entered promiscuous mode [ 418.789244][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.815870][T19558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.880818][T19565] netlink: Conntrack attr has 4 unknown bytes [ 418.887018][T19565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.034680][T19572] netlink: 'syz.2.3680': attribute type 4 has an invalid length. [ 419.190861][T19578] netlink: 'syz.1.3683': attribute type 10 has an invalid length. [ 419.426346][T19593] netlink: 'syz.2.3688': attribute type 4 has an invalid length. [ 419.486657][T19595] netlink: 'syz.3.3687': attribute type 8 has an invalid length. [ 419.725758][T19608] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 419.737399][T19609] netlink: 'syz.3.3692': attribute type 1 has an invalid length. [ 419.832030][T15557] net_ratelimit: 2 callbacks suppressed [ 419.832047][T15557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.000431][T19621] netlink: 'syz.2.3697': attribute type 1 has an invalid length. [ 420.439667][T19648] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 420.454421][T19648] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 420.563536][T19653] team1: entered promiscuous mode [ 420.570155][T19653] team1: entered allmulticast mode [ 420.699035][T19668] netlink: 'syz.1.3710': attribute type 4 has an invalid length. [ 420.878356][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.046447][T19692] openvswitch: netlink: Duplicate or invalid key (type 0). [ 421.240291][T19705] siw: device registration error -23 [ 421.356491][T19714] 8021q: VLANs not supported on xfrm0 [ 421.473727][T19721] netlink: 'syz.4.3724': attribute type 2 has an invalid length. [ 421.627885][T19734] __nla_validate_parse: 20 callbacks suppressed [ 421.635946][T19734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3727'. [ 421.727466][T19741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3730'. [ 421.919070][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.007090][T19745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3732'. [ 422.175474][T19760] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3738'. [ 422.184899][T19760] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 422.309385][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.333202][T19772] Bluetooth: MGMT ver 1.23 [ 422.474226][T19782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3746'. [ 422.491956][T19782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3746'. [ 422.515418][T19784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.539393][T19784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.549779][T19784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.560439][T19784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.602990][T19787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3748'. [ 422.615268][T19787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3748'. [ 422.624873][T19787] netlink: 'syz.2.3748': attribute type 14 has an invalid length. [ 422.639391][T19787] netlink: 'syz.2.3748': attribute type 13 has an invalid length. [ 422.833107][T19796] netlink: 'syz.2.3752': attribute type 2 has an invalid length. [ 423.234913][T13005] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.273341][T13005] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.314480][T13024] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.345896][T13024] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.539122][T19833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.566084][T19838] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3767'. [ 423.617389][T19843] netlink: 193 bytes leftover after parsing attributes in process `syz.2.3768'. [ 423.776601][T19848] vlan2: entered allmulticast mode [ 423.782546][T19848] veth1_virt_wifi: entered allmulticast mode [ 423.879553][T19852] netlink: 'syz.4.3772': attribute type 1 has an invalid length. [ 423.989123][T19855] bond3: invalid ARP target 0.0.0.0 specified for addition [ 423.996634][T19855] bond3: option arp_ip_target: invalid value (0) [ 424.009417][T19855] bond3 (unregistering): Released all slaves [ 424.040612][T19861] bond5: (slave gretap1): making interface the new active one [ 424.049151][T19861] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 424.373506][ T29] IPVS: starting estimator thread 0... [ 424.391064][T19876] netlink: 'syz.4.3780': attribute type 21 has an invalid length. [ 424.401704][T19878] netlink: 'syz.1.3781': attribute type 1 has an invalid length. [ 424.422291][T19876] netlink: 'syz.4.3780': attribute type 1 has an invalid length. [ 424.508912][T19880] IPVS: using max 34 ests per chain, 81600 per kthread [ 424.523831][T19878] 8021q: adding VLAN 0 to HW filter on device bond3 [ 424.533795][T19888] netlink: 'syz.0.3783': attribute type 1 has an invalid length. [ 424.810015][T19878] bond3: (slave geneve2): making interface the new active one [ 424.834950][T19878] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 424.896550][T19896] bond4: (slave gretap1): making interface the new active one [ 424.935389][T19896] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 425.014859][T19903] geneve0: entered allmulticast mode [ 425.031652][T15557] net_ratelimit: 95 callbacks suppressed [ 425.031666][T15557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.180570][T19917] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 425.201033][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.329489][T13014] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.349200][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.361780][T13014] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.383331][T13014] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.421366][T19936] netlink: 'syz.1.3790': attribute type 2 has an invalid length. [ 425.471594][T13014] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.582658][T19949] ip_tables: iptables: counters copy to user failed while replacing table [ 425.619448][T19948] ip_tables: iptables: counters copy to user failed while replacing table [ 426.080616][T15557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.549497][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 426.636414][T20023] __nla_validate_parse: 8 callbacks suppressed [ 426.636429][T20023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3813'. [ 426.726317][T20028] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 426.966240][T20045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3816'. [ 427.020939][T20050] bond0: Device is already in use. [ 427.104394][ T5279] veth0_vlan: left promiscuous mode [ 427.121686][T15557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.130534][ T29] veth0_vlan: entered promiscuous mode [ 427.182578][T20058] xt_TPROXY: Can be used only with -p tcp or -p udp [ 427.193527][T20055] netlink: 1192 bytes leftover after parsing attributes in process `syz.3.3822'. [ 427.209700][T20058] netlink: 'syz.2.3823': attribute type 32 has an invalid length. [ 427.230551][T20058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3823'. [ 427.323521][T20058] bond3: option coupled_control: invalid value (47) [ 427.345806][T20058] bond3 (unregistering): Released all slaves [ 427.863160][T20090] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3829'. [ 427.952349][T20094] netlink: 'syz.2.3828': attribute type 10 has an invalid length. [ 428.151316][T15557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.394933][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.091124][T20078] bridge_slave_1: left allmulticast mode [ 429.096865][T20078] bridge_slave_1: left promiscuous mode [ 429.104916][T20078] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.114837][T20078] bridge_slave_0: left allmulticast mode [ 429.121206][T20078] bridge_slave_0: left promiscuous mode [ 429.127232][T20078] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.260654][T20087] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3829'. [ 429.270131][T20086] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3829'. [ 429.277000][T20094] veth1_macvtap: left promiscuous mode [ 429.304490][T20094] : (slave macsec0): Error -34 calling dev_set_mtu [ 429.315605][T20098] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3831'. [ 429.524006][T20111] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 429.542961][T20112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3836'. [ 429.565550][T20116] xt_hashlimit: size too large, truncated to 1048576 [ 429.594812][T20112] sctp: [Deprecated]: syz.3.3836 (pid 20112) Use of int in max_burst socket option. [ 429.594812][T20112] Use struct sctp_assoc_value instead [ 429.612670][T20118] nbd: must specify a size in bytes for the device [ 429.646209][T20112] Cannot find del_set index 4 as target [ 429.720777][T20118] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3837'. [ 429.962188][T20150] netlink: 'syz.0.3841': attribute type 1 has an invalid length. [ 429.977655][T20147] ªªªªªª†Ý'É|d< speed is unknown, defaulting to 1000 [ 430.047200][T20152] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 430.163119][T20162] syzkaller0: entered promiscuous mode [ 430.189594][T20162] syzkaller0: entered allmulticast mode [ 430.238400][T15557] net_ratelimit: 2 callbacks suppressed [ 430.238417][T15557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.270217][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.432130][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.505973][T20252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.515255][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.676839][T20261] netlink: 'syz.3.3874': attribute type 21 has an invalid length. [ 431.709006][T20261] __nla_validate_parse: 13 callbacks suppressed [ 431.709022][T20261] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3874'. [ 431.789359][T20269] xt_CT: You must specify a L4 protocol and not use inversions on it [ 431.900358][T20276] ip_tables: iptables: counters copy to user failed while replacing table [ 431.916291][T20277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.924939][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.023929][T20281] tunl0: entered promiscuous mode [ 432.039616][T20281] netlink: 'syz.4.3880': attribute type 4 has an invalid length. [ 432.055883][T20286] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3882'. [ 432.065813][T20281] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3880'. [ 432.083351][T20287] xt_time: unknown flags 0xf4 [ 432.310393][T15557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.354294][T20301] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3890'. [ 432.367829][T20301] netlink: 'syz.3.3890': attribute type 3 has an invalid length. [ 432.399178][T20307] x_tables: duplicate underflow at hook 3 [ 432.569161][T20320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.626524][T20318] gre1: entered promiscuous mode [ 432.644046][T20322] SET target dimension over the limit! [ 432.665605][T20314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3892'. [ 432.678694][T20314] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3892'. [ 433.053855][T20345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3902'. [ 433.152594][T20349] Bluetooth: MGMT ver 1.23 [ 433.252609][T20361] netlink: 'syz.0.3909': attribute type 1 has an invalid length. [ 433.273419][T20361] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3909'. [ 434.351574][T20414] tipc: Started in network mode [ 434.362961][T20414] tipc: Node identity ce1d3a6d8e4e, cluster identity 4711 [ 434.388745][T20414] tipc: Enabled bearer , priority 11 [ 434.816966][T20431] netlink: 'syz.1.3926': attribute type 1 has an invalid length. [ 435.133838][T20435] bridge2: entered promiscuous mode [ 435.188220][ T4933] Bluetooth: hci2: command 0x0401 tx timeout [ 435.189473][ T5625] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 435.263353][T20442] bridge2: entered promiscuous mode [ 435.448930][T15558] net_ratelimit: 8 callbacks suppressed [ 435.448948][T15558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.510349][T15558] tipc: Node number set to 1079196269 [ 435.532200][T16568] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 435.570365][T20458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3932'. [ 435.610454][T20458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3932'. [ 435.644856][T20458] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 435.695012][T16568] CPU: 1 UID: 0 PID: 16568 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 435.695035][T16568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.695047][T16568] Call Trace: [ 435.695054][T16568] [ 435.695062][T16568] dump_stack_lvl+0xe8/0x150 [ 435.695094][T16568] dump_header+0xd3/0x4b0 [ 435.695155][T16568] oom_kill_process+0x3ab/0x970 [ 435.695188][T16568] out_of_memory+0x1064/0x1480 [ 435.695215][T16568] ? try_charge_memcg+0xbca/0x1590 [ 435.695258][T16568] ? __pfx_out_of_memory+0x10/0x10 [ 435.695284][T16568] ? do_raw_spin_unlock+0xf5/0x210 [ 435.695332][T16568] try_charge_memcg+0xc74/0x1590 [ 435.695371][T16568] ? __pfx_try_charge_memcg+0x10/0x10 [ 435.695393][T16568] ? percpu_ref_tryget+0x15/0x180 [ 435.695440][T16568] ? charge_memcg+0x20/0x2b0 [ 435.695473][T16568] charge_memcg+0x19c/0x2b0 [ 435.695497][T16568] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 435.695520][T16568] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 435.695548][T16568] swap_cache_alloc_folio+0x4de/0x990 [ 435.695581][T16568] swap_cache_read_folio+0x44/0x120 [ 435.695604][T16568] swap_cluster_readahead+0x3a0/0x640 [ 435.695629][T16568] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 435.695662][T16568] ? get_vma_policy+0x27b/0x3c0 [ 435.695691][T16568] swapin_readahead+0x19a/0xc10 [ 435.695715][T16568] ? swap_table_get+0x1e/0x260 [ 435.695734][T16568] ? swap_table_get+0x1e/0x260 [ 435.695752][T16568] ? __pfx_swapin_readahead+0x10/0x10 [ 435.695774][T16568] ? swap_table_get+0x1e/0x260 [ 435.695791][T16568] ? swap_table_get+0x1e/0x260 [ 435.695805][T16568] ? swap_table_get+0x1e/0x260 [ 435.695824][T16568] ? swap_table_get+0x216/0x260 [ 435.695842][T16568] ? swap_cache_get_folio+0x2e7/0x2f0 [ 435.695868][T16568] do_swap_page+0x455/0x5060 [ 435.695909][T16568] ? __pte_offset_map+0x29/0x240 [ 435.695934][T16568] ? __lock_acquire+0x683/0x2cf0 [ 435.695957][T16568] ? do_swap_page+0x124/0x5060 [ 435.695985][T16568] ? __pfx_do_swap_page+0x10/0x10 [ 435.696011][T16568] ? __pte_offset_map+0x1ae/0x240 [ 435.696033][T16568] ? pte_offset_map_rw_nolock+0xea/0x160 [ 435.696055][T16568] handle_mm_fault+0x124c/0x3080 [ 435.696088][T16568] ? handle_mm_fault+0xec/0x3080 [ 435.696115][T16568] ? __pfx_handle_mm_fault+0x10/0x10 [ 435.696132][T16568] ? lock_vma_under_rcu+0x45a/0x500 [ 435.696179][T16568] do_user_addr_fault+0xa4d/0x1340 [ 435.696230][T16568] ? trace_page_fault_user+0x84/0x1e0 [ 435.696258][T16568] exc_page_fault+0x6a/0xc0 [ 435.696283][T16568] asm_exc_page_fault+0x26/0x30 [ 435.696301][T16568] RIP: 0033:0x7f9b56b5e90e [ 435.696318][T16568] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 435.696334][T16568] RSP: 002b:00007ffed4719168 EFLAGS: 00010246 [ 435.696350][T16568] RAX: 0000000000000000 RBX: 000055556511a500 RCX: 00007f9b56b5e90e [ 435.696363][T16568] RDX: 00007ffed47191c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 435.696374][T16568] RBP: 00007ffed471922c R08: 0000000000000000 R09: 0000000000000000 [ 435.696385][T16568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 435.696395][T16568] R13: 00000000000927c0 R14: 0000000000069f33 R15: 00007ffed4719280 [ 435.696426][T16568] [ 435.696438][T16568] memory: usage 307200kB, limit 307200kB, failcnt 378 [ 436.105800][T16568] memory+swap: usage 307420kB, limit 9007199254740988kB, failcnt 0 [ 436.114065][T16568] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 436.121769][T16568] Memory cgroup stats for /syz4: [ 436.161340][T20458] Unsupported xt match [ 436.199072][T16568] cache 8192 [ 436.204503][T20458] unable to load match [ 436.254289][T16568] rss 45056 [ 436.274497][T16568] rss_huge 0 [ 436.294972][T16568] shmem 0 [ 436.310373][T16568] mapped_file 4096 [ 436.325269][T16568] dirty 0 [ 436.340562][T16568] writeback 0 [ 436.359476][T16568] workingset_refault_anon 0 [ 436.384621][T16568] workingset_refault_file 0 [ 436.411854][T16568] swap 180224 [ 436.427695][T16568] swapcached 180224 [ 436.445571][T16568] pgpgin 88250 [ 436.464710][T16568] pgpgout 88237 [ 436.469523][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.489508][T16568] pgfault 141682 [ 436.499372][T16568] pgmajfault 2 [ 436.511929][T16568] inactive_anon 40960 [ 436.532742][T16568] active_anon 4096 [ 436.535493][T20493] xt_hashlimit: max too large, truncated to 1048576 [ 436.544730][T16568] inactive_file 0 [ 436.561692][T16568] active_file 8192 [ 436.578388][T16568] unevictable 0 [ 436.592476][T16568] hierarchical_memory_limit 314572800 [ 436.615777][T20493] No such timeout policy "syz1" [ 436.616717][T16568] hierarchical_memsw_limit 9223372036854771712 [ 436.677993][T16568] total_cache 8192 [ 436.682249][T16568] total_rss 45056 [ 436.693458][T16568] total_rss_huge 0 [ 436.713313][T16568] total_shmem 0 [ 436.726305][T16568] total_mapped_file 4096 [ 436.748930][T16568] total_dirty 0 [ 436.752805][T16568] total_writeback 0 [ 436.757056][T16568] total_workingset_refault_anon 0 [ 436.784115][T16568] total_workingset_refault_file 0 [ 436.804480][T16568] total_swap 180224 [ 436.817198][T16568] total_swapcached 180224 [ 436.832230][T16568] total_pgpgin 88250 [ 436.846482][T16568] total_pgpgout 88237 [ 436.873092][ T5625] Bluetooth: hci5: command 0x0401 tx timeout [ 436.879772][T16568] total_pgfault 141682 [ 436.888517][T16568] total_pgmajfault 2 [ 436.902264][T20505] __nla_validate_parse: 1 callbacks suppressed [ 436.902278][T20505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3940'. [ 436.909157][T16568] total_inactive_anon 40960 [ 436.918779][T20505] batman_adv: batadv0: Interface deactivated: veth0 [ 436.939960][T16568] total_active_anon 4096 [ 436.944253][T16568] total_inactive_file 0 [ 436.950162][T20505] batman_adv: batadv0: Removing interface: veth0 [ 436.956554][T16568] total_active_file 8192 [ 436.962438][T16568] total_unevictable 0 [ 436.966470][T16568] anon_cost 0 [ 436.970014][T16568] file_cost 0 [ 436.973484][T16568] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3905,pid=20350,uid=0 [ 436.990692][T16568] Memory cgroup out of memory: Killed process 20350 (syz.4.3905) total-vm:106680kB, anon-rss:1256kB, file-rss:27288kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 437.248968][T20520] xt_CT: You must specify a L4 protocol and not use inversions on it [ 437.458581][T20527] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3947'. [ 437.486072][T20528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3947'. [ 437.509422][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.523594][T15558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.532562][T20527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3947'. [ 437.545649][T20531] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3948'. [ 437.561185][T20534] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 437.561351][T20501] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.569268][T20532] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3948'. [ 437.592004][T20501] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.602727][T20528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3947'. [ 437.753804][T20530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.905974][T20501] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.946802][T20501] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.040173][T20546] openvswitch: netlink: Duplicate or invalid key (type 0). [ 438.056898][T20545] openvswitch: netlink: Duplicate or invalid key (type 0). [ 438.067103][T20501] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.090137][T20501] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.122180][T20548] netlink: 'syz.1.3953': attribute type 1 has an invalid length. [ 438.283889][T20501] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.296223][T20554] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 438.316268][T20501] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.332072][T20554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.406416][T20554] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3954'. [ 438.549735][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.688544][T12997] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.711614][T12997] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.747476][T12997] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.790873][T12997] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.918879][T13014] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.955829][T13014] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.993704][T13014] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.026710][T13014] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.181570][T20584] netlink: 'syz.3.3963': attribute type 6 has an invalid length. [ 439.207659][T20583] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3964'. [ 439.248102][T20583] netlink: 'syz.2.3964': attribute type 2 has an invalid length. [ 439.256013][T20584] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 439.269087][T20583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3964'. [ 439.772487][T20526] syz.4.3945 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 439.784050][T20526] CPU: 1 UID: 0 PID: 20526 Comm: syz.4.3945 Not tainted syzkaller #0 PREEMPT(full) [ 439.784091][T20526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 439.784102][T20526] Call Trace: [ 439.784109][T20526] [ 439.784116][T20526] dump_stack_lvl+0xe8/0x150 [ 439.784148][T20526] dump_header+0xd3/0x4b0 [ 439.784174][T20526] oom_kill_process+0x3ab/0x970 [ 439.784196][T20526] out_of_memory+0x1064/0x1480 [ 439.784223][T20526] ? try_charge_memcg+0xbca/0x1590 [ 439.784260][T20526] ? __pfx_out_of_memory+0x10/0x10 [ 439.784285][T20526] ? do_raw_spin_unlock+0xf5/0x210 [ 439.784314][T20526] try_charge_memcg+0xc74/0x1590 [ 439.784354][T20526] ? __pfx_try_charge_memcg+0x10/0x10 [ 439.784376][T20526] ? percpu_ref_tryget+0x15/0x180 [ 439.784420][T20526] ? charge_memcg+0x20/0x2b0 [ 439.784447][T20526] charge_memcg+0x19c/0x2b0 [ 439.784471][T20526] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 439.784495][T20526] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 439.784523][T20526] swap_cache_alloc_folio+0x4de/0x990 [ 439.784554][T20526] swap_cache_read_folio+0x44/0x120 [ 439.784578][T20526] swap_cluster_readahead+0x3a0/0x640 [ 439.784604][T20526] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 439.784637][T20526] ? get_vma_policy+0x27b/0x3c0 [ 439.784667][T20526] swapin_readahead+0x19a/0xc10 [ 439.784689][T20526] ? swap_table_get+0x1e/0x260 [ 439.784708][T20526] ? swap_table_get+0x1e/0x260 [ 439.784726][T20526] ? __pfx_swapin_readahead+0x10/0x10 [ 439.784747][T20526] ? swap_table_get+0x1e/0x260 [ 439.784764][T20526] ? swap_table_get+0x1e/0x260 [ 439.784778][T20526] ? swap_table_get+0x1e/0x260 [ 439.784797][T20526] ? swap_table_get+0x216/0x260 [ 439.784815][T20526] ? swap_cache_get_folio+0x2e7/0x2f0 [ 439.784840][T20526] do_swap_page+0x455/0x5060 [ 439.784879][T20526] ? __pte_offset_map+0x29/0x240 [ 439.784905][T20526] ? __lock_acquire+0x683/0x2cf0 [ 439.784927][T20526] ? do_swap_page+0x124/0x5060 [ 439.784955][T20526] ? __pfx_do_swap_page+0x10/0x10 [ 439.784981][T20526] ? __pte_offset_map+0x1ae/0x240 [ 439.785003][T20526] ? pte_offset_map_rw_nolock+0xea/0x160 [ 439.785025][T20526] handle_mm_fault+0x124c/0x3080 [ 439.785060][T20526] ? handle_mm_fault+0xec/0x3080 [ 439.785093][T20526] ? __pfx_handle_mm_fault+0x10/0x10 [ 439.785110][T20526] ? lock_vma_under_rcu+0x45a/0x500 [ 439.785131][T20526] ? __pfx_do_futex+0x10/0x10 [ 439.785203][T20526] do_user_addr_fault+0xa4d/0x1340 [ 439.785239][T20526] ? trace_page_fault_user+0x84/0x1e0 [ 439.785266][T20526] exc_page_fault+0x6a/0xc0 [ 439.785290][T20526] asm_exc_page_fault+0x26/0x30 [ 439.785308][T20526] RIP: 0033:0x7f9b56a517bf [ 439.785325][T20526] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 52 08 3c 00 89 f0 4c 8d 05 49 e8 3b 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 [ 439.785339][T20526] RSP: 002b:00007ffed4718ec8 EFLAGS: 00010206 [ 439.785355][T20526] RAX: 000000008178929f RBX: ffffffff8178929f RCX: 0000000000000004 [ 439.785367][T20526] RDX: 000000000000129f RSI: ffffffff8178929f RDI: 0000000000000013 [ 439.785379][T20526] RBP: 0000000000000000 R08: 00007f9b56e10000 R09: 00007f9b56e12000 [ 439.785390][T20526] R10: 00000000817892a3 R11: 0000000000000013 R12: 00007f9b56e26128 [ 439.785401][T20526] R13: 000000000000000a R14: ffffffff8178929f R15: 00007f9b57955720 [ 439.785414][T20526] ? do_user_addr_fault+0x1bf/0x1340 [ 439.785440][T20526] ? do_user_addr_fault+0x1bf/0x1340 [ 439.785469][T20526] ? do_user_addr_fault+0x1bf/0x1340 [ 439.785498][T20526] [ 439.785529][T20526] memory: usage 307200kB, limit 307200kB, failcnt 982 [ 439.963315][T20608] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 440.161626][T20526] memory+swap: usage 307284kB, limit 9007199254740988kB, failcnt 0 [ 440.174722][T20608] bond3 (unregistering): Released all slaves [ 440.238900][T20526] kmem: usage 307072kB, limit 9007199254740988kB, failcnt 0 [ 440.270131][T20526] Memory cgroup stats for /syz4: [ 440.270248][T20526] cache 0 [ 440.292657][T20526] rss 0 [ 440.306454][T20526] rss_huge 0 [ 440.321949][T20526] shmem 0 [ 440.334230][T20526] mapped_file 0 [ 440.351803][T20526] dirty 0 [ 440.360598][T20526] writeback 0 [ 440.381338][T20526] workingset_refault_anon 233 [ 440.405196][T20526] workingset_refault_file 217 [ 440.425959][T20526] swap 151552 [ 440.440994][T20526] swapcached 1306624 [ 440.464056][T20526] pgpgin 88741 [ 440.518259][T20526] pgpgout 88725 [ 440.522423][T20526] pgfault 142028 [ 440.549386][ T1214] net_ratelimit: 1 callbacks suppressed [ 440.549400][ T1214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.555813][T20526] pgmajfault 193 [ 440.591880][T20526] inactive_anon 36864 [ 440.622090][T20526] active_anon 28672 [ 440.631299][T15558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.652729][T20526] inactive_file 0 [ 440.675770][T20526] active_file 0 [ 440.691309][T20526] unevictable 0 [ 440.703336][T20526] hierarchical_memory_limit 314572800 [ 440.727528][T20526] hierarchical_memsw_limit 9223372036854771712 [ 440.751407][T20526] total_cache 0 [ 440.768092][T20526] total_rss 0 [ 440.786722][T20526] total_rss_huge 0 [ 440.802058][T20526] total_shmem 0 [ 440.817022][T20526] total_mapped_file 0 [ 440.832895][T20526] total_dirty 0 [ 440.843410][T20526] total_writeback 0 [ 440.854534][T20526] total_workingset_refault_anon 233 [ 440.880095][T20526] total_workingset_refault_file 217 [ 440.896785][T20526] total_swap 151552 [ 440.931484][T20526] total_swapcached 1306624 [ 440.950662][T20526] total_pgpgin 88741 [ 440.967680][T20526] total_pgpgout 88725 [ 440.989189][T20526] total_pgfault 142028 [ 441.009552][T20526] total_pgmajfault 193 [ 441.027465][T20526] total_inactive_anon 36864 [ 441.056186][T20526] total_active_anon 28672 [ 441.075986][T20526] total_inactive_file 0 [ 441.090727][T20526] total_active_file 0 [ 441.103462][T20526] total_unevictable 0 [ 441.112464][T20659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.120873][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.137246][T20526] anon_cost 0 [ 441.150086][T20526] file_cost 0 [ 441.164248][T20526] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3945,pid=20526,uid=0 [ 441.246672][T20526] Memory cgroup out of memory: Killed process 20526 (syz.4.3945) total-vm:102312kB, anon-rss:1260kB, file-rss:23068kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 441.578660][ T1214] ªªªªªª†Ý'É|d< speed is unknown, defaulting to 1000 [ 441.613285][ T1214] syz0: Port: 1 Link ACTIVE [ 441.673799][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.996943][T20704] bond0 (unregistering): Released all slaves [ 442.053222][T20711] netlink: 'syz.0.3999': attribute type 17 has an invalid length. [ 442.075190][T20711] __nla_validate_parse: 8 callbacks suppressed [ 442.075202][T20711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3999'. [ 442.106301][T20711] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3999'. [ 442.232195][T20711] erspan0: entered promiscuous mode [ 442.249606][T20711] gretap0: entered promiscuous mode [ 442.411182][T20726] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4001'. [ 442.710322][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.745874][T20745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4003'. [ 442.909730][T20745] bond0: Invalid ad_actor_system MAC address. [ 442.915965][T20745] bond0: option ad_actor_system: invalid value (1) [ 442.929110][T20745] bond0 (unregistering): Released all slaves [ 443.088205][T20769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4009'. [ 443.332038][T20780] netlink: zone id is out of range [ 443.351216][T20780] netlink: zone id is out of range [ 443.365935][T20780] netlink: zone id is out of range [ 443.384897][T20780] netlink: zone id is out of range [ 443.464710][T20780] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4011'. [ 443.835148][T20809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4017'. [ 443.872953][T20809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4017'. [ 443.909949][T20809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4017'. [ 443.963520][T20809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4017'. [ 445.287513][T20867] netlink: 'syz.1.4035': attribute type 11 has an invalid length. [ 445.437042][T20877] 8021q: adding VLAN 0 to HW filter on device bond5 [ 445.453803][T20877] bond5: entered promiscuous mode [ 445.463804][T20877] bond5: entered allmulticast mode [ 445.474042][T20884] netlink: 'syz.2.4037': attribute type 39 has an invalid length. [ 445.666298][T20893] xt_hashlimit: size too large, truncated to 1048576 [ 445.679641][T20893] xt_hashlimit: max too large, truncated to 1048576 [ 445.686824][T20893] xt_hashlimit: invalid rate [ 445.830483][T15557] net_ratelimit: 511 callbacks suppressed [ 445.830495][T15557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.629741][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.868842][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.108438][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 447.909016][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.211971][T20867] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 448.225479][T20899] netlink: 'syz.2.4042': attribute type 1 has an invalid length. [ 448.374492][T20902] vxcan0: tx address claim with dlc 0 [ 448.504328][T20910] netlink: 'syz.1.4048': attribute type 10 has an invalid length. [ 448.532822][T20912] netlink: 'syz.3.4047': attribute type 29 has an invalid length. [ 448.533132][T20910] veth0_macvtap: left promiscuous mode [ 448.564361][T20910] team0: Device veth0_macvtap failed to register rx_handler [ 448.575398][T20917] __nla_validate_parse: 47 callbacks suppressed [ 448.575413][T20917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4051'. [ 448.652012][T20917] syzkaller0: entered promiscuous mode [ 448.672507][T20917] syzkaller0: entered allmulticast mode [ 448.691356][T20917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4051'. [ 448.776005][T20926] xt_socket: unknown flags 0x8 [ 448.781584][T20926] ip_tables: iptables: counters copy to user failed while replacing table [ 448.949353][T15558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.083698][T20948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4059'. [ 449.099258][T20949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4059'. [ 449.125272][T20946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4060'. [ 449.177098][T20946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4060'. [ 449.614458][T20978] veth0_to_team: entered promiscuous mode [ 449.668962][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.939739][T20992] pim6reg: entered allmulticast mode [ 449.949269][T20996] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4073'. [ 449.973923][T20998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4072'. [ 449.989371][T15558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.687765][T21046] netlink: 'syz.0.4089': attribute type 1 has an invalid length. [ 450.714508][T21049] netlink: 'syz.3.4090': attribute type 39 has an invalid length. [ 450.723267][T21046] netlink: 'syz.0.4089': attribute type 2 has an invalid length. [ 450.744229][T21046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.752879][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.776930][T21051] xt_hashlimit: max too large, truncated to 1048576 [ 450.798522][T21051] No such timeout policy "syz1" [ 450.819111][T21053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4091'. [ 450.925606][T21053] 8021q: adding VLAN 0 to HW filter on device bond5 [ 450.952946][T21056] 8021q: adding VLAN 0 to HW filter on device bond5 [ 450.962921][T21056] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 450.979043][T21056] bond5: (slave vti0): Error -95 calling set_mac_address [ 451.031096][T15558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.061781][T21061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4092'. [ 451.179879][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.250778][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.365531][T21079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.374006][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.382912][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.408277][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.421594][T21079] openvswitch: netlink: IPv4 tunnel dst address is zero [ 451.433559][T21079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.472650][T21081] netlink: 'syz.4.4098': attribute type 21 has an invalid length. [ 451.484125][T21081] netlink: 'syz.4.4098': attribute type 4 has an invalid length. [ 451.494255][T21081] netlink: 'syz.4.4098': attribute type 5 has an invalid length. [ 451.548511][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.737366][T21101] gretap0: entered promiscuous mode [ 451.745407][T21101] gretap0: left promiscuous mode [ 451.759278][T21100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.075515][T21132] netlink: 'syz.3.4110': attribute type 7 has an invalid length. [ 452.122124][T21135] ªªªªªª†Ý'É|d< speed is unknown, defaulting to 1000 [ 452.268964][T21143] x_tables: duplicate underflow at hook 2 [ 452.291068][T21143] block nbd1: Unsupported socket: should be TCP or UNIX. [ 452.783535][T21169] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 452.844393][T21172] netlink: 'syz.0.4125': attribute type 1 has an invalid length. [ 452.935379][T21172] 8021q: adding VLAN 0 to HW filter on device bond6 [ 452.977451][T21178] bond6: (slave geneve3): making interface the new active one [ 452.991652][T21178] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 453.045814][T21183] gretap2: entered promiscuous mode [ 453.067258][T21183] gretap2: entered allmulticast mode [ 453.243654][T21198] Unsupported ieee802154 address type: 0 [ 453.581964][T21217] __nla_validate_parse: 17 callbacks suppressed [ 453.581982][T21217] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4138'. [ 453.643412][T21219] netlink: 'syz.1.4139': attribute type 83 has an invalid length. [ 453.725162][T21222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4140'. [ 454.151749][T21249] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4148'. [ 454.197385][T21249] gretap0: entered promiscuous mode [ 454.217316][T21252] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4148'. [ 454.267164][T21255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4150'. [ 454.289688][T21252] 0ªî{X¹¦: renamed from gretap0 [ 454.318697][T21252] 0ªî{X¹¦: left promiscuous mode [ 454.340775][T21252] 0ªî{X¹¦: entered allmulticast mode [ 454.371916][T21259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4151'. [ 454.393842][T13019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.431214][T13019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.436297][T21262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.463571][T21263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.560871][T15558] IPVS: starting estimator thread 0... [ 454.574750][T21269] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4154'. [ 454.659390][T21270] IPVS: using max 36 ests per chain, 86400 per kthread [ 455.182826][T21312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4166'. [ 455.214676][T21312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4166'. [ 455.276164][T21312] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4166'. [ 455.764455][T21344] netlink: 'syz.2.4175': attribute type 2 has an invalid length. [ 455.826853][T21344] : entered promiscuous mode [ 455.986294][T21356] syzkaller0: entered promiscuous mode [ 456.001335][T21356] syzkaller0: entered allmulticast mode [ 456.221424][T13019] net_ratelimit: 35 callbacks suppressed [ 456.221440][T13019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.237324][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.245483][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.344616][T21376] tipc: Failed to remove unknown binding: 66,1,1/0:1112027063/1112027065 [ 456.478226][T21386] netlink: 'syz.4.4183': attribute type 27 has an invalid length. [ 457.049759][T21388] ipt_rpfilter: unknown options [ 457.080383][T21389] bond0: invalid NS target ff00:: specified for addition [ 457.098777][T21389] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 457.245519][T21398] netlink: 'syz.2.4189': attribute type 1 has an invalid length. [ 457.269217][T15558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.292552][T21398] netlink: 'syz.2.4189': attribute type 1 has an invalid length. [ 457.348987][T13020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.382853][T13020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.549098][T21418] tipc: Started in network mode [ 457.568385][T21418] tipc: Node identity ac14142f, cluster identity 4711 [ 457.584392][T21418] tipc: New replicast peer: 0.0.0.0 [ 457.592459][T21418] tipc: Enabled bearer , priority 10 [ 458.036721][T21450] netlink: 'syz.0.4205': attribute type 7 has an invalid length. [ 458.059005][T21450] netlink: 'syz.0.4205': attribute type 8 has an invalid length. [ 458.072370][T21453] netlink: 'syz.2.4206': attribute type 39 has an invalid length. [ 458.311916][T15558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.528803][T12997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.545493][T12997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.598882][T15558] tipc: Node number set to 2886997039 [ 458.788395][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.853836][T21507] sctp: [Deprecated]: syz.3.4223 (pid 21507) Use of int in maxseg socket option. [ 458.853836][T21507] Use struct sctp_assoc_value instead [ 458.887692][T21508] __nla_validate_parse: 19 callbacks suppressed [ 458.887711][T21508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4222'. [ 458.924908][T21507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4223'. [ 458.953769][T21504] 8021q: adding VLAN 0 to HW filter on device bond6 [ 458.974391][T21501] macvlan3: entered promiscuous mode [ 458.986135][T21501] macvlan3: entered allmulticast mode [ 459.000095][T21501] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 459.014407][T21515] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4223'. [ 459.026691][T21504] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 459.037074][T21504] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 459.402338][T21525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.455436][T21525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.486496][T21525] bond0 (unregistering): (slave bond3): Releasing backup interface [ 459.502514][T21525] bond0 (unregistering): Released all slaves [ 459.637613][T21549] netlink: 'syz.1.4234': attribute type 21 has an invalid length. [ 459.650725][T21549] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4234'. [ 459.660916][T21549] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4234'. [ 459.878658][T21563] netlink: 'syz.3.4239': attribute type 10 has an invalid length. [ 459.932995][T21563] team0: Device veth0_macvtap failed to register rx_handler [ 460.095797][T21574] netlink: 'syz.0.4241': attribute type 12 has an invalid length. [ 460.119584][T21574] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4241'. [ 460.143375][T21574] netlink: 59 bytes leftover after parsing attributes in process `syz.0.4241'. [ 460.289942][T21588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4246'. [ 460.345893][T21588] bond0: option xmit_hash_policy: invalid value (64) [ 460.359601][T21588] bond0 (unregistering): Released all slaves [ 460.415369][T21595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4248'. [ 460.477619][T21547] bond3 (unregistering): Released all slaves [ 460.703257][T21605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4250'. [ 460.740337][T21606] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 460.757087][T21606] syzkaller1: group set to 0 [ 461.099935][T21627] tipc: Started in network mode [ 461.116651][T21627] tipc: Node identity 16eceef6167c, cluster identity 4711 [ 461.126416][T21627] tipc: Enabled bearer , priority 0 [ 461.148924][T21627] syzkaller0: entered promiscuous mode [ 461.155931][T21627] syzkaller0: entered allmulticast mode [ 461.201755][T21627] vcan1: entered promiscuous mode [ 461.208432][T21627] vcan1: entered allmulticast mode [ 461.261395][T21626] tipc: Resetting bearer [ 461.302331][T21626] tipc: Disabling bearer [ 461.429646][T15557] net_ratelimit: 12 callbacks suppressed [ 461.429664][T15557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.497888][T21648] team0: Device gtp0 is up. Set it down before adding it as a team port [ 461.712332][T21666] validate_nla: 1 callbacks suppressed [ 461.712348][T21666] netlink: 'syz.4.4266': attribute type 2 has an invalid length. [ 461.774228][T21670] nft_compat: unsupported protocol 0 [ 461.828722][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.873264][ T3302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.908235][ T3302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.126868][T21690] team0: Port device syz_tun added [ 462.415103][T21718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.446438][T21718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.468570][T15558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.522024][T21718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.530592][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.559915][T21718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.601223][T21726] 8021q: VLANs not supported on gre0 [ 462.649393][T21724] xt_hashlimit: size too large, truncated to 1048576 [ 463.142285][T21748] netlink: 'syz.2.4291': attribute type 11 has an invalid length. [ 463.173661][T21748] netlink: 'syz.2.4291': attribute type 4 has an invalid length. [ 463.343683][T21755] syzkaller0: entered promiscuous mode [ 463.363915][T21755] syzkaller0: entered allmulticast mode [ 463.683373][T21794] tipc: Started in network mode [ 463.697051][T21794] tipc: Node identity 2003, cluster identity 4711 [ 463.719597][T21794] tipc: Node number set to 8195 [ 463.791119][T21797] tap0: tun_chr_ioctl cmd 1074025672 [ 463.818164][T21797] tap0: ignored: set checksum disabled [ 464.057319][T21820] netlink: 'syz.3.4315': attribute type 2 has an invalid length. [ 464.105366][T21823] __nla_validate_parse: 11 callbacks suppressed [ 464.105382][T21823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4316'. [ 464.124393][T21829] netlink: 'syz.2.4318': attribute type 3 has an invalid length. [ 464.134422][T21827] bond7: (slave vlan4): Opening slave failed [ 464.144360][T21829] netlink: 'syz.2.4318': attribute type 1 has an invalid length. [ 464.155976][T21829] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4318'. [ 464.372092][T21840] tunl0: left promiscuous mode [ 464.388905][ T5625] Bluetooth: hci1: command 0x0405 tx timeout [ 464.471336][T21843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4323'. [ 464.502577][T21851] IPv6: NLM_F_CREATE should be specified when creating new route [ 464.554270][T21851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4326'. [ 464.597129][T21840] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 464.624532][T21840] geneve2: left promiscuous mode [ 464.636663][T21840] 8021q: adding VLAN 0 to HW filter on device bond1 [ 464.658519][T21848] vcan1: entered promiscuous mode [ 464.663716][T21848] vcan1: entered allmulticast mode [ 464.700407][T21850] bridge_slave_1: left allmulticast mode [ 464.713091][T21850] bridge_slave_1: left promiscuous mode [ 464.723812][T21850] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.736121][T21863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4330'. [ 464.740438][T21864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4328'. [ 464.767320][T21850] bridge_slave_0: left allmulticast mode [ 464.780699][T21850] bridge_slave_0: left promiscuous mode [ 464.795906][T21850] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.847666][T21874] xt_ecn: cannot match TCP bits for non-tcp packets [ 464.857845][T21859] netlink: 'syz.0.4328': attribute type 3 has an invalid length. [ 464.880862][T21870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4332'. [ 465.055823][T21884] ip6gre1: entered allmulticast mode [ 465.082908][T21884] syzkaller1: entered promiscuous mode [ 465.098395][T21884] syzkaller1: entered allmulticast mode [ 465.633466][T21929] netlink: 'syz.4.4350': attribute type 4 has an invalid length. [ 465.826693][T21938] 8021q: adding VLAN 0 to HW filter on device bond3 [ 465.909038][T21949] netlink: 'syz.3.4354': attribute type 3 has an invalid length. [ 465.941716][T21949] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4354'. [ 465.994419][T21949] netlink: 'syz.3.4354': attribute type 3 has an invalid length. [ 466.014532][T21949] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4354'. [ 466.153626][T21943] nbd1: detected capacity change from 0 to 8388608 [ 466.181621][ T5625] block nbd1: Receive control failed (result -104) [ 466.188382][ T5618] block nbd1: Receive control failed (result -32) [ 466.631475][T15558] net_ratelimit: 24 callbacks suppressed [ 466.631493][T15558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.658658][T21987] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4368'. [ 467.212548][T22014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.369731][T22032] netlink: 'syz.2.4381': attribute type 5 has an invalid length. [ 467.428154][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.499039][ T3302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.538248][ T3302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.559139][T22036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.672008][T15558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.910579][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.061809][T22071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.308513][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.516961][T22094] netlink: 'syz.4.4403': attribute type 142 has an invalid length. [ 469.212779][T22144] __nla_validate_parse: 10 callbacks suppressed [ 469.212795][T22144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4417'. [ 469.984009][T22141] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 471.188083][ T5618] Bluetooth: hci0: command 0x0c1a tx timeout [ 471.828872][T15558] net_ratelimit: 232 callbacks suppressed [ 471.828887][T15558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.920152][T22118] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 472.059437][T13019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.106731][T13019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.192501][ T29] [ 472.194886][ T29] ====================================================== [ 472.201934][ T29] WARNING: possible circular locking dependency detected [ 472.209035][ T29] syzkaller #0 Not tainted [ 472.213451][ T29] ------------------------------------------------------ [ 472.220508][ T29] kworker/1:1/29 is trying to acquire lock: [ 472.226412][ T29] ffff88801c295210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 472.236947][ T29] [ 472.236947][ T29] but task is already holding lock: [ 472.244307][ T29] ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 472.253708][ T29] [ 472.253708][ T29] which lock already depends on the new lock. [ 472.253708][ T29] [ 472.264115][ T29] [ 472.264115][ T29] the existing dependency chain (in reverse order) is: [ 472.273133][ T29] [ 472.273133][ T29] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 472.281215][ T29] down_write+0x96/0x200 [ 472.286030][ T29] kernfs_add_one+0x41/0x5e0 [ 472.291176][ T29] kernfs_create_dir_ns+0x1a1/0x230 [ 472.296904][ T29] internal_create_group+0x440/0x1180 [ 472.302810][ T29] cpuhp_invoke_callback+0x434/0x810 [ 472.308657][ T29] cpuhp_issue_call+0x3f0/0x750 [ 472.314031][ T29] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 472.320633][ T29] __cpuhp_setup_state+0x3f/0x60 [ 472.326089][ T29] do_one_initcall+0x250/0x870 [ 472.331382][ T29] do_initcall_level+0x10a/0x1a0 [ 472.336931][ T29] do_initcalls+0x59/0xa0 [ 472.341793][ T29] kernel_init_freeable+0x29d/0x3e0 [ 472.347516][ T29] kernel_init+0x1d/0x1d0 [ 472.352384][ T29] ret_from_fork+0x514/0xb70 [ 472.357516][ T29] ret_from_fork_asm+0x1a/0x30 [ 472.362817][ T29] [ 472.362817][ T29] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 472.370646][ T29] [ 472.370646][ T29] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 472.378408][ T29] cpus_read_lock+0x42/0x160 [ 472.383542][ T29] static_key_slow_inc+0x12/0x30 [ 472.389013][ T29] nbd_genl_reconfigure+0x1301/0x1e80 [ 472.394954][ T29] genl_family_rcv_msg_doit+0x233/0x340 [ 472.401077][ T29] genl_rcv_msg+0x614/0x7a0 [ 472.406119][ T29] netlink_rcv_skb+0x226/0x4a0 [ 472.411407][ T29] genl_rcv+0x28/0x40 [ 472.415912][ T29] netlink_unicast+0x7bb/0x940 [ 472.421252][ T29] netlink_sendmsg+0x813/0xb40 [ 472.426543][ T29] sock_sendmsg_nosec+0x13a/0x180 [ 472.432093][ T29] ____sys_sendmsg+0x54e/0x850 [ 472.437378][ T29] ___sys_sendmsg+0x2a5/0x360 [ 472.442578][ T29] __x64_sys_sendmsg+0x1b1/0x290 [ 472.448047][ T29] do_syscall_64+0x174/0x580 [ 472.453180][ T29] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.459609][ T29] [ 472.459609][ T29] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 472.467301][ T29] __mutex_lock+0x19d/0x1550 [ 472.472427][ T29] nbd_queue_rq+0x373/0x1150 [ 472.477548][ T29] blk_mq_dispatch_rq_list+0x499/0x1990 [ 472.483654][ T29] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 472.490514][ T29] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 472.497019][ T29] blk_mq_run_work_fn+0x16c/0x300 [ 472.502593][ T29] process_scheduled_works+0xa8e/0x14e0 [ 472.508679][ T29] worker_thread+0xa47/0xfb0 [ 472.513798][ T29] kthread+0x388/0x470 [ 472.518400][ T29] ret_from_fork+0x514/0xb70 [ 472.523539][ T29] ret_from_fork_asm+0x1a/0x30 [ 472.528829][ T29] [ 472.528829][ T29] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 472.536038][ T29] __mutex_lock+0x19d/0x1550 [ 472.541177][ T29] nbd_queue_rq+0xc1/0x1150 [ 472.546209][ T29] blk_mq_dispatch_rq_list+0x499/0x1990 [ 472.552282][ T29] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 472.559141][ T29] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 472.565644][ T29] blk_mq_run_work_fn+0x16c/0x300 [ 472.571197][ T29] process_scheduled_works+0xa8e/0x14e0 [ 472.577268][ T29] worker_thread+0xa47/0xfb0 [ 472.582384][ T29] kthread+0x388/0x470 [ 472.586975][ T29] ret_from_fork+0x514/0xb70 [ 472.592095][ T29] ret_from_fork_asm+0x1a/0x30 [ 472.597391][ T29] [ 472.597391][ T29] -> #4 (set->srcu){.+.+}-{0:0}: [ 472.604534][ T29] __synchronize_srcu+0xc9/0x2f0 [ 472.610031][ T29] elevator_switch+0x1e8/0x7b0 [ 472.615317][ T29] elevator_change+0x2fa/0x480 [ 472.620602][ T29] elevator_set_default+0x375/0x440 [ 472.626321][ T29] blk_register_queue+0x3f3/0x4e0 [ 472.631869][ T29] __add_disk+0x6cb/0xe30 [ 472.636722][ T29] add_disk_fwnode+0x100/0x3a0 [ 472.642011][ T29] nbd_dev_add+0x733/0xb60 [ 472.646954][ T29] nbd_init+0x15f/0x1e0 [ 472.651717][ T29] do_one_initcall+0x250/0x870 [ 472.657016][ T29] do_initcall_level+0x10a/0x1a0 [ 472.662477][ T29] do_initcalls+0x59/0xa0 [ 472.667327][ T29] kernel_init_freeable+0x29d/0x3e0 [ 472.673053][ T29] kernel_init+0x1d/0x1d0 [ 472.677910][ T29] ret_from_fork+0x514/0xb70 [ 472.683039][ T29] ret_from_fork_asm+0x1a/0x30 [ 472.688346][ T29] [ 472.688346][ T29] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 472.696173][ T29] __mutex_lock+0x19d/0x1550 [ 472.701286][ T29] elevator_change+0x1af/0x480 [ 472.706569][ T29] elevator_set_none+0xb5/0x140 [ 472.711940][ T29] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 472.718372][ T29] nbd_start_device+0x189/0xb30 [ 472.723757][ T29] nbd_genl_connect+0x1597/0x1c10 [ 472.729309][ T29] genl_family_rcv_msg_doit+0x233/0x340 [ 472.735390][ T29] genl_rcv_msg+0x614/0x7a0 [ 472.740427][ T29] netlink_rcv_skb+0x226/0x4a0 [ 472.745715][ T29] genl_rcv+0x28/0x40 [ 472.750221][ T29] netlink_unicast+0x7bb/0x940 [ 472.755514][ T29] netlink_sendmsg+0x813/0xb40 [ 472.760796][ T29] sock_sendmsg_nosec+0x13a/0x180 [ 472.766354][ T29] ____sys_sendmsg+0x54e/0x850 [ 472.771642][ T29] ___sys_sendmsg+0x2a5/0x360 [ 472.776845][ T29] __x64_sys_sendmsg+0x1b1/0x290 [ 472.782299][ T29] do_syscall_64+0x174/0x580 [ 472.787414][ T29] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.793838][ T29] [ 472.793838][ T29] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 472.802454][ T29] blk_alloc_queue+0x544/0x690 [ 472.807762][ T29] __blk_mq_alloc_disk+0x194/0x390 [ 472.813407][ T29] nbd_dev_add+0x494/0xb60 [ 472.818378][ T29] nbd_init+0x15f/0x1e0 [ 472.823064][ T29] do_one_initcall+0x250/0x870 [ 472.828356][ T29] do_initcall_level+0x10a/0x1a0 [ 472.833817][ T29] do_initcalls+0x59/0xa0 [ 472.838662][ T29] kernel_init_freeable+0x29d/0x3e0 [ 472.844377][ T29] kernel_init+0x1d/0x1d0 [ 472.849237][ T29] ret_from_fork+0x514/0xb70 [ 472.854349][ T29] ret_from_fork_asm+0x1a/0x30 [ 472.859643][ T29] [ 472.859643][ T29] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 472.866861][ T29] fs_reclaim_acquire+0x71/0x100 [ 472.872336][ T29] kmem_cache_alloc_noprof+0x64/0x5f0 [ 472.878241][ T29] __kernfs_iattrs+0xdd/0x380 [ 472.883472][ T29] kernfs_iop_setattr+0xe6/0x3f0 [ 472.888948][ T29] notify_change+0xbba/0xea0 [ 472.894077][ T29] do_truncate+0x1c2/0x250 [ 472.899035][ T29] path_openat+0x2fed/0x3830 [ 472.904275][ T29] do_file_open+0x23e/0x4a0 [ 472.909399][ T29] do_sys_openat2+0x115/0x200 [ 472.914604][ T29] __x64_sys_openat+0x138/0x170 [ 472.919986][ T29] do_syscall_64+0x174/0x580 [ 472.925102][ T29] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.931523][ T29] [ 472.931523][ T29] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 472.940044][ T29] __lock_acquire+0x1520/0x2cf0 [ 472.945467][ T29] lock_acquire+0x106/0x350 [ 472.950513][ T29] down_write+0x96/0x200 [ 472.955288][ T29] kernfs_link_sibling+0x4c7/0x5a0 [ 472.960923][ T29] kernfs_add_one+0x1d2/0x5e0 [ 472.966125][ T29] kernfs_create_dir_ns+0x1a1/0x230 [ 472.971857][ T29] sysfs_create_dir_ns+0x12f/0x2a0 [ 472.977500][ T29] kobject_add_internal+0x622/0xcd0 [ 472.983336][ T29] kobject_add+0x163/0x240 [ 472.988371][ T29] device_add+0x3fa/0xb80 [ 472.993234][ T29] hid_add_device+0x272/0x3e0 [ 472.998489][ T29] hidp_session_dev_work+0x45/0x160 [ 473.004289][ T29] process_scheduled_works+0xa8e/0x14e0 [ 473.010358][ T29] worker_thread+0xa47/0xfb0 [ 473.015473][ T29] kthread+0x388/0x470 [ 473.020161][ T29] ret_from_fork+0x514/0xb70 [ 473.025309][ T29] ret_from_fork_asm+0x1a/0x30 [ 473.030607][ T29] [ 473.030607][ T29] other info that might help us debug this: [ 473.030607][ T29] [ 473.040840][ T29] Chain exists of: [ 473.040840][ T29] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 473.040840][ T29] [ 473.055274][ T29] Possible unsafe locking scenario: [ 473.055274][ T29] [ 473.062743][ T29] CPU0 CPU1 [ 473.068149][ T29] ---- ---- [ 473.073527][ T29] lock(&root->kernfs_rwsem); [ 473.078308][ T29] lock(cpuhp_state_mutex); [ 473.085423][ T29] lock(&root->kernfs_rwsem); [ 473.092713][ T29] lock(&root->kernfs_iattr_rwsem); [ 473.098009][ T29] [ 473.098009][ T29] *** DEADLOCK *** [ 473.098009][ T29] [ 473.106159][ T29] 3 locks held by kworker/1:1/29: [ 473.111212][ T29] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 473.122210][ T29] #1: ffffc90000a47c40 ((work_completion)(&session->dev_init)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 473.134561][ T29] #2: ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 473.144410][ T29] [ 473.144410][ T29] stack backtrace: [ 473.150304][ T29] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 473.150322][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 473.150332][ T29] Workqueue: events hidp_session_dev_work [ 473.150356][ T29] Call Trace: [ 473.150362][ T29] [ 473.150368][ T29] dump_stack_lvl+0xe8/0x150 [ 473.150388][ T29] print_circular_bug+0x2e1/0x300 [ 473.150428][ T29] check_noncircular+0x12e/0x150 [ 473.150453][ T29] __lock_acquire+0x1520/0x2cf0 [ 473.150480][ T29] ? __lock_acquire+0x683/0x2cf0 [ 473.150504][ T29] ? kernfs_link_sibling+0x4c7/0x5a0 [ 473.150525][ T29] lock_acquire+0x106/0x350 [ 473.150553][ T29] ? kernfs_link_sibling+0x4c7/0x5a0 [ 473.150578][ T29] down_write+0x96/0x200 [ 473.150597][ T29] ? kernfs_link_sibling+0x4c7/0x5a0 [ 473.150616][ T29] ? __pfx_down_write+0x10/0x10 [ 473.150634][ T29] ? kernfs_root+0x1c/0x230 [ 473.150652][ T29] ? kernfs_root+0x1c/0x230 [ 473.150669][ T29] ? kernfs_root+0x1c/0x230 [ 473.150687][ T29] ? kernfs_root+0x1ea/0x230 [ 473.150706][ T29] kernfs_link_sibling+0x4c7/0x5a0 [ 473.150729][ T29] kernfs_add_one+0x1d2/0x5e0 [ 473.150751][ T29] kernfs_create_dir_ns+0x1a1/0x230 [ 473.150773][ T29] sysfs_create_dir_ns+0x12f/0x2a0 [ 473.150793][ T29] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 473.150811][ T29] ? do_raw_spin_unlock+0xf5/0x210 [ 473.150827][ T29] kobject_add_internal+0x622/0xcd0 [ 473.150850][ T29] kobject_add+0x163/0x240 [ 473.150872][ T29] ? __pfx_kobject_add+0x10/0x10 [ 473.150892][ T29] ? class_to_subsys+0xb6/0x120 [ 473.150909][ T29] ? get_device_parent+0xbc/0x3a0 [ 473.150931][ T29] device_add+0x3fa/0xb80 [ 473.150951][ T29] hid_add_device+0x272/0x3e0 [ 473.150970][ T29] ? hidp_session_dev_work+0x1e/0x160 [ 473.150991][ T29] hidp_session_dev_work+0x45/0x160 [ 473.151011][ T29] ? process_scheduled_works+0xa20/0x14e0 [ 473.151025][ T29] process_scheduled_works+0xa8e/0x14e0 [ 473.151049][ T29] ? __pfx_process_scheduled_works+0x10/0x10 [ 473.151066][ T29] ? assign_work+0x3cf/0x5d0 [ 473.151080][ T29] worker_thread+0xa47/0xfb0 [ 473.151105][ T29] kthread+0x388/0x470 [ 473.151123][ T29] ? __pfx_worker_thread+0x10/0x10 [ 473.151136][ T29] ? __pfx_kthread+0x10/0x10 [ 473.151154][ T29] ret_from_fork+0x514/0xb70 [ 473.151174][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 473.151192][ T29] ? __switch_to+0xc89/0x1420 [ 473.151209][ T29] ? __pfx_kthread+0x10/0x10 [ 473.151227][ T29] ret_from_fork_asm+0x1a/0x30 [ 473.151252][ T29] [ 473.413352][ T5618] Bluetooth: hci4: command 0x0406 tx timeout [ 473.420903][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.432012][ T29] hid-generic 0005:15C1:5506.0001: collection stack underflow [ 473.439647][ T29] hid-generic 0005:15C1:5506.0001: item 0 2 0 12 parsing failed [ 473.447805][ T29] hid-generic 0005:15C1:5506.0001: probe with driver hid-generic failed with error -22 [ 473.475861][T22167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4426'. [ 473.493777][T13019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.502444][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.511905][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.520995][T22167] set match dimension is over the limit! [ 473.988379][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.389679][T13008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.398210][T13008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.028407][ T29] net_ratelimit: 7 callbacks suppressed [ 477.028426][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.668357][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.728367][T13008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.736607][T13008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.708646][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.848124][T13008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.856412][T13008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.748220][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.978086][T13008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.986372][T13008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog