last executing test programs: 3.035198198s ago: executing program 3 (id=2634): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800000}}}, 0x90) syz_emit_ethernet(0x5f, &(0x7f0000000100)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0xdf, [@local]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x6, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"05bc7aa09186b9ccd74727b5bb"}}}}}}, 0x0) 2.933317873s ago: executing program 2 (id=2636): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@hci, &(0x7f0000000100)=0x80, 0x100000) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, 0x453, 0x200, 0x70bd26, 0x25dfdbfe, "b10f5df838bf881e507ce0215df714246c26b2c410684644e88e88b04a4e5e6497c9bad132b728c16456912df503c8c6f3d1a24af7759bc66e42b726cc69a8bbe3c8d68a025af744735ae6204863153c2752b6277aa48e5ec0f810ed89040a9b1b118c2b30192cf57394270c9710cae4b2103f7b0993ef7cfa1d89b0ed1950", ["", "", "", "", "", ""]}, 0x90}, 0x1, 0x0, 0x0, 0x8044}, 0x40840) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x99}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd91}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) socketpair(0x10, 0x4, 0xfffffffc, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r1) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x8c147b17ad1d4408, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x26044084) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000580)='cpuset.memory_pressure\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r6) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000600)=0x1, 0x4) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r7, &(0x7f0000000680), 0x0) ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f00000006c0)={{0x7f, 0x5}, 0x100, './file0\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f0000000800)={0x5, 0x1, 0x2, 0x4, 0x6ed79c0f, 0x2}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, 0x3, 0x1, 0x78e25f8db2f04dd5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xfffffffb}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8006}, 0x4004000) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000940)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000003980)=0x0) sendmmsg$nfc_llcp(r2, &(0x7f0000004f80)=[{&(0x7f0000000980)={0x27, r10, 0x1, 0x6, 0xe2, 0x2, "73635d931ad979e522632369f5c1eec31541e8e5214e62ce98f860ff3c20cfa0d55d0601905230d1470d455574200dc54b23e8f1b7aef310aa73ba09366f1d", 0x1c}, 0x60, &(0x7f0000001b40)=[{&(0x7f0000000a00)="ff57169795cd00323e1e34d8f8a6e1911ad2125449dd970f2a11ddffabcc7c", 0x1f}, {&(0x7f0000000a40)="d1bea378ae61fd5af7b1eb42f87035a25d95c179741dfb1e78aca17bdba384259c7892332f692a", 0x27}, {&(0x7f0000000a80)="71f3ec610ee513af69d6d5d8e892a5cd1ee8650a2173227568ffa36deb15db89ae4bcbf55a360c1bffec8579ba91722fcd10ac722c6216cccddd38e81fbede07c9a5a2e5cecdc264e121e125f1b872baea193f1ea00b088b3c8cfb952a561f952fe6164cf3c729e57e58e769e4d35a3a62bd883deba634a4631b3518c12c2ea3e397410ddcbd8eb10b75bb760be1aca2e516661baa4a38d7c17595779f7c8a809fe7d2b36850d881d881195595b24b8f40d3d14f02a351535152d678afd34b62efbda8009f80b630b3104693b145e1a2369debbdee60c15012e758ac17a9a2c3ca5cb23e577e61071d9024c139fc793e3adb4d72198b3ed563da6f5cb3ada84ca82e8cb6c0fd30b98cac21c85b6794dcf1015a979fcf394f2fb9a913619471ee948b0a8404dcc98b16e777ba752ce8eca8ee948680273c1652a1b7faaa571ed49254b3d754e0a6bca056103829cca9d7aeb65d455ed8045d9adffb3a2188817695d5aac84cce19e7bb6be56239e733ac876847a6b59b92f78efde76623f45fe4aa680ddeb3838735d7bb89e0cf49fb6868366efb0deb11225044498983e3b067db34535df3a6d33000410ce10ea98e76957df0de6463bb1aa537056d26d178a3fca3b359a55f66c4b6afe5f05128b96ec613279ec28d44cc719cf567e213147a9a979d28ddbe0096ad19e9e9ff487bead110b2265f6443ad2a0682dc702d0d24b1f5e584e23775005ac9042f28fc70729bad4d8c0ed694c6868cde60e78f3f8c82d3937569b124822cc6c8d3243f931dba1196bcabd69b6d03c54875156cded42fa05eca29ddbdfd90c6beb2192304c0506ef838fcf15938efd0c03be4dc211aca9b186c2b72886d3470b7e4cdc6569f5efbe0cc3c6f4482e65ed8d1771470e2f7525ea1ddc2b792e31476a2f895242df556da3941ca4f55130fa4a99fad50c50e0a1b3cc8cf50f343316a3b42f69d9a801a52f369fc3110bdfbd736372d3fbe5cabcae4a58d493a728da0ea41810bda6184e09fffda03cae0ebc7a61d80cc9d050721035b503f50422d1201488fb6f99001b347721595c20c439188658ac81ad2a4c31a7737e61c2e435c178ebcbd4ef78344e727338ac7523141b303745e603044aeed0cc40748d6cc2090a5c931762a6d9081d52a02366a8572e07cc7025e796d4fed3a0dddb8fe288782728eab19b07d13785667b320d800237260c170aceedc24b8352daae5e511991ba278b8121c2533b73c64c1b726dd8319783eb4ea2b697fe5a906fb5a695e194efd600118d08cd9dfc91ad90a339b0f21fa176ab781a82e2f19e786efab2348cd754985ff7b6c507a15cc2debd33f6c8bc3c36c33702be39fc282e3ed7ba35e101e6bdac627a35280803885d7375af3c3dfa066b6436e6394228610db866acc96f019e834d374032eee6d728f948bb695e4f9f7912ee45fa6ee4546950318249f31f4005d97c382277d33528c5334b183e9065fb9f2abddea468df84076382292dcbce2247457e2707b519079e4cc3403a3b943cc0ec7966e40d5c1af50536e7228f8b1d46e2b94ae517dba08be8004f7b080b25d0e9501f6afcb680eeadc2f4c6ed1340b5a3c68328fcaf43171c47280abe1053ae5af9a9d6960e7ee7defb1a7590b5b6ffcc1252bbb4473fe20b2d42ebadc3431b82f5702bd86186ad1f24d2845fed7ba2579e02b21721f76bf6b5e2ca99763509b94d87bec9e3a615b8b2339521a63cb2e51f7200f0605ca4b5474d5258e4ed21885442f4237ca69ebadfdec5904cd5b0d1ea8a45e71dc23eb2a136b4441def73fefb1cbfd3f61b6c1ffc6f98b819477ac81d8c8a220560391db4f5ccd71b25c0961a728b5c76ec419f31ef304f4e1c13ed24adcc44a58d82c3edf3f13a85ae82c955a3ec1baa1d3a7f6cd7d9259b3d3cdc10f0884d597cdf2e1dcd4fcf112837831450ce6389ae94c1b9793b36dceaae1527c28293993ba402b9033c0cd31644f082975f79713cafe92541749dd5830a876316fc86b965173f0cf2e6e5c6ad5dd4baf603898fc7127a73446bd66f5e4aecca7ad6a71a7f06af464adeab5abc5964a321659cb580588598601a461aa7f75cf4b14e0ae55613edea59b7807058f34ad36a1260a616e2865a2713526a61f5ef2640e4a1c41fe04fbcff703c3bb4f043c4ec28be461874733f889b4c9405a639069c7982a2a35f52d8a8abcf8b504a390219a4a860dd1a7efeb6dc8a737d9ff5be127603b9ea51f0db7fd936baa252fa1666d63d526de43f8d4cf59fbdd2d5c2fc349ab344a365e5e8cb17689ebe1b82c68fd4eca6b9be617800ec9fc4fa946fa59c33f38c4ed1efd9e819a1327c055be3dc3b6217a09f263be6cf0a3f2a6bb3278a4c68811f7973295f7d18ca966f73ee471458a1be7a5e262f8261f30d80072fa00ddf3a1bbf22b9fe4c76fc30479afc25779d28091cd9a40d37e1ec10602fe7cc1e14dfdc9c9fad932e2aa9c902f106cb574c79cd250f085fea7d37701515ad9f1e59a098220fc935d4e69585f4eb5f52294628612f0512314f6da7de1c8e5676f35ab5b21f2a65fa1211819dcee3c0c5665d38c86c01867dda420c3e3569bb130a1505058251bc510fb1679505f448b245f2ba48a531cf9100161c6b843d845c4de3ff811085664181037f31d1d0efbc1880dea0b35255717330a01986390f40b1da4cefc7636734d7f7b58580bee220f8aadfddde13cf0a3757cd46593a09b010e0efaa647d2a3d1154a8b1e3b16703a5f675bb8ee64af28518560772706476847dd570ec882b65ee938a3a80a467ee03877ddedd78abf5352951aa456f6d8ec910c8dc0bd5dce01a0b083100e2b747358f518fb5c1d12230f3ada4506618034210b1910c3201ef45a12a9544c00ba118ae20c302a554350c3434e062bf6635f933b53f10754ff0dc9a2a0132bfafcc13b8db0e47a79a70403cb988fab3a50ec04bb35ca6466b4dfe4a9aff7918d3cd73b02be79bdc78dfa37a235d742c452d540a129a8852213fcd3bdb1caf4919ad1a940c7404400e019e2509157ad87d594ecb342df39c0af1410e90fa529842b3f912a7675ec61a33cf4b75558b4ed16834a29531cea983a840e20a10407fa0effd734ec3d9f1ca1fccdf378e84eff5f1c6ea99eb9167a1625b23d6618a38f049633b2783e2648907f5a39e2eaa3640abe19fd65fbeb750b596779566f6393ba8e0e0b1580237bc9bea492563e4287d03afc6aedaf2df215e3b0b8a1d284ead3c5be3cf2bff3251844148aeaaac7470197052b9efe5cc93a0ac08748c8b5ee4ddc3213cd208b48277e2c8aa8a212a8bcde0f385779de54ac8aafa05bc79f18efc5b4a18d85bbea645cb35bab01516a7e22724484de765124db648f01838d37e6e738c7b319faa9370ad6519f79b05c00d07c0561bae6a4a20231fb2d8093badd3b68783903f8a19d5434d3cc6541dab5cc8fe2839c90b1729f526e07b59c401175afeeb4a738e3a93ce6d5d9e4dd4dbeec3fd046f5940335b133c11095f64ac0e82958b4d3de6d924a2fb4d6caa9989b213b01afef749a960ffbb392edd8c674956c16da4638dc1881d53bdfea10fe95c99d08b25d52c64ddf092fb19255b3c12fa25722db14dd1a6768112fc8d9cb531aa2164bbb41aa83027db733f5f145273a0fe21975881b1d8ca0da2b9ebe8edadee8c0d48a7d5949c82faf9bb7ce871c15d32733b397f078bbc48ae561291f4c10d1ceb250a6d9debf6e5cb0f7010b7c09057e75ae34b9a2e81fb2952d79f0977a238bb8bb6efab600ac7765cb74ac1d3b5d2ce9dc348da8a6cdc98ad8bae4a6e2f69d439e69ad8081fee4cb5df27db2f0cf4e5b41641eaca94288464a7aef165216d89739ca4cdf7dfa97a0cd76781e682d06108bf6751c1702c518be1cccdead9c6b38ee938e82a2333f5a004ed4d82c4cb2779c5118d68bc7510b46daef49bebfbf33c4df726027a17740e7e41efd6dfd8a465179f3c31bd28118ff91b4cf30d8401038562b02cda5cf2ad358dd6286cd1b557104d229de3b5fa2d75afb04413775de04ea94758406f74a8f32791de8eafe40f7064718ed5b86eede3f9fc1187fc0d761a5add42973655c694cfce50b4dc48ea576be1ef24a5906773f02a38135a37dd1786ec4626f677a4b1bc7ccc98df0ab43039678e28b55197873318a2c74b4a6c830e017584628912af0a9aa5b838423fe88ce0934dda9e51cc871a02535542dd19289f91039430cd48160d64e19caf291e30157b6ce9911502976489a6e8fc0f72f98774e132f45ab78fa074626d56f318f30e2b67600a49bdb03a1680ed04e084dc3b828face07a887ec64f9ad73676ca789af47fc7b5b1d34a30b3d3d437fdb55afa5f6dce2170e4a529cf9898d13efa6e97532827c99d36cf3ff9d887c0aca0b9ae22592cd4d7b9dce91705811bc16e003154bc0e5e25b8dc842baf19d5b93be5427211d0c18439101ce646fa29cec3ec0143d3aa32e3535a0178722987fd04ffac09baa7e4ef8bd673cb3644e1806ed95fa653c9b0639d9f6a6b58a617b299d4d5ea892260de8ff8f475d54a8673db9a99bdce22c8aba493dba7b2935d5c9d8668d78918da1e628447ba5a3aa03618b357119c2cf7185c419dafad9d285608c9901042d336486fc47b2a5c7576bf485d83f45189e08ff901fdcfde46974d8de10b2e19b415e97198df471b66a11b226f96dfab0401981989d3e7bd145ad31b98706a9de9c48d195520b39434dcf765072c6a7bbf4a134db29003865c27ca77e288ca971dc7ce8a844204c4f00185be2e126a9779e14286ae78d51308bd59b88412bb7c200cdc6798b353f4538efd587816ff9a3360caaf76131a7a480dbf317418dba0d657687139726e4a3770a83a279d9fcfb4c55a8f3c1a873284253039a631a005d872a39b2f7df91b3ca598170b53bb92e80054d87c1a8c61e2c090deb8dd20f423e95d7b72f490740b8da4b88f659d8d19805e0e9ccc6b049217c7bcf5097e1803d1b8c4d91e368ea841689f7047c8d5947abd8b7867426596d209cd49d30856daac8f9a93a7a5f820768fca6e8458f8a805e2609b9b229c5e43ba43b2009a73ebc149be26feb5845c4d79032103dd443f0ed7248dded79c80444fe0ec8c0d9d601a0192ee270260ed4f30bd761df02a9167757eb4aad2f1c9e08661f9b0a20787e479b15cfe03ac497f77d24378828321e1e016985c87283c41344842c784bdcbb4556fd945abb35b87081dc8d730f36a639e37b1335af61ad41151e849f6bc949c7f27785320085e4583307afafdae63fe2b802f4b1d02e0f5e18d697d759c647c3964e56251768ba1848cdffcb0db27174cb77ceb66ba0c0882a45499204562090c347267f2aff62276a11c9b6d47c8776f483f4476dc966adb3d755ad0eb46730ab68fee4c9cec1abd945707912b2f865123663b6a49557d040633460d61d2b67876b855f56d4c945c7d9ad39cc76af42d9b4bd69c42acb25632a34146b08a876e9bafb83b4d133f9c9d74d0dd977df0031380ae0548f83acd21c89427a4407ae90e5e0bb64992e512f5f8d96bb609100e038534ab27f72c9b1042be167c47bf0b35475be0cc0533a64b64bd334407def207ffdcdc07db15feeaa6836e4ebb28ee1289b5f85af7a0924f7452d160ade7231d904d6628b5a80e175336671dab3055b433734f6081de5e69a45917a8fd2f2bbf880fdca9843ad30895abad87329f988629eb35ae2ab432aa31e458e50abc98484ef99a76c5265c1ce2bca135ba6c028", 0x1000}, {&(0x7f0000001a80)="fa3823e81e69120fdb8eb9b4b76c10c502f5d8ce9667187fbc5148cf1c417f6bf75c70a25837bd0c316e220c51533136a87751451517718eba09913c906a9725544940551c68a6c16eb2b4802d702f22dd22f1d0ce6607d37b8340d8a96cb36a625bf87f53ba6119cdfba22db749980a8148d5d28d4f6934d578752ce24f24ac90765603fb", 0x85}], 0x4, 0x0, 0x0, 0x400c800}, {&(0x7f0000001b80)={0x27, 0x0, 0xffffffffffffffff, 0x4, 0x6, 0x7, "798700ba3e9bfa83d8a519fd5b9890f8b56fe10caab8bb1c626a1212916d36d428f050533b338208c58abdfc6af07eac0c749b984d140724c062af428a0fd7"}, 0x60, &(0x7f0000002080)=[{&(0x7f0000001c00)="523d5ec21d9d32b40a963bbeb6406bd5235250030d91282ebd0e209b963226322ec51346ebf8eb0cb7e59ae8a1c9c16251fee55377d25b350a9ebc57dfce450a418086c084b204efbaf7f42c7215b575d6e25fe82c54f8f19ecdcb163ee01a8573e9520e0d2358ffba2c38e2871a3736f86329983da8efde4a8e9cac3a8936aa84bb4ee19fb9e9d65c9bba2d2fd6ad08cccd9ba83415f6c0ba0acf289739509c893612d029e343b45f4142d9c19205afe7", 0xb1}, {&(0x7f0000001cc0)="5ae73964aa75e840b656bcc6379531b2da4b6cbe0dc335ddd0fa65201380ac09e49f196a0bf68018b5e647d2eb25f4a8ee1d13b9e4e2f770f2f4e155a30d8e3410fb1efd8e1148b8a7dd5994ed49497744e01a7c7a0ba6fba0d7efe0655899a2fa52943bd2ef7cd50447bbfaa8150d48840b5bc0726b3ea9f6500a995c274e76e49e52ceb7fb103d07e757110d1a826a43107ac88870608a82a9e1a1b101a972220aac3c12a2165d3f81f1432e8a9acbf9f257eec96d64322ebe9d6bcd4206938e791ab46f5d85709f934ca65805b47cca735166308fa3b41dc943403cc14bb978c40e3217b2b722d4f04460bc4dfb", 0xef}, {&(0x7f0000001dc0)}, {&(0x7f0000001e00)="8bd836306bb5d4dc62e07f8393469facdf94fd3bda5f005115613c88646982397c0238aaea2b353b647781d687dbe21511bef61fd01fbcd101b93e4bd4262a705d40ad8fda917db48243f79712faa829a21947fa5ed4dcb8ad88ba0adb7742b66f3a08b90d83eee667d04a31837b14ff52b0bff9fc6f7fd91ac77bafa40b4f5734598fe895b4f1cfd1055d9bc03edec938f5fba660408945689be90e32b35af2785dbf8092f62f29ab5b8c223330058d0ede", 0xb2}, {&(0x7f0000001ec0)="5b34df10c4c61055beb6d34e61cc9eab5714967e8ea85c212014fcea08fa6454f0cb31e189f18c7a85d19a0a45273961f59da43e592b4f26a95b05ece6828263d384c0c281d06b7db4c82a0cde293889651b421b352860d04890e57da116174af128bd2f70eda2db9300cbe5c21b17731058647bae9ee57743b310d6293cc1e095b0f08945163bc05d", 0x89}, {&(0x7f0000001f80)="3eeecdccd8ec896da9ee534194e1343f86d7e7e0761bb3c7526cdbdbc659e96c7cdbd9000dbc85ab9de3a2434021b79faff05e76d3ba831819ab959e4289d8352f81ba5e1c83008623ac1bc90f1746d84c0f763068a017c379f37baf7923c0c1a8e8f087b6e497d39dace42c30416b3b30059cd927e37873239f6c3cafaa11340a7ea7f769c08c79b3be19a49190a65024651359a6ff2aa4c612b3b8e2927f3b94ff4a6fee4cf37f576d8fde483dccaa474d0e917203b827a99c3cc9ee31cb6576692c640485866935a4da18bac76b", 0xcf}], 0x6, &(0x7f0000002100)={0x1010, 0x118, 0x2, "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"}, 0x1010, 0x40000}, {&(0x7f0000003140)={0x27, 0x0, 0x0, 0x1, 0xc, 0x4, "eccb1a8af957649ae776affe1b95f864f7f9b8b17af125cea2d18f2f3d2686d114ea17aa797682ebeac0219f0027ad13e73e16d29c90aacab2f99c30d8670d", 0x9}, 0x60, &(0x7f00000037c0)=[{&(0x7f00000031c0)="6ed772f9945bf5d1e00c7cdeed218a44f8416d0b0131ec497e7bb4b04597ac626bafa5b64fdd3e79f765dbc2f3092db7c76c0823d8c4635d5812a040a0bd2b1f441875cfeb33764076a68a8b04cff0c3e6f41b362ae037db6a9a6cdfe713cc3459f076f6fae708", 0x67}, {&(0x7f0000003240)="70a872b7b72933e89eb1b72efc89cb92e27e9e4ab22bd9fec9fd7b486d893aa02a0adcf705a2f3446feb403ba3b5f434e8", 0x31}, {&(0x7f0000003280)="2f7e58500d81a0fa54fa34be26f66443a40f712ec4552bbea62ba027e84291b3ea574b207afe69c7a1ae3e65e3d03e6c52c9a7d094e71eadbea51effb589973abcfce36ca32b0d703ad0a2619b276fd8176f4bfdd1a963e024ecf1a6dfbf78befd2c1d544e78fe32f115ba1312430def5a54b39192dc6f0c88546bb20550cbaa77231b35ea846b3c10bd386e2e047ff201b79618bf5f7b3b93bdaed6c556d13c47c980f0f249ce26be275025c276ed216c2dcebc4931fd5768cc5080b9dd4d15ae349d526a1dc67ea500dcc4bb1385b826e67da1f3f66fc277f1bee7", 0xdc}, {&(0x7f0000003380)="58b2d7f408d032a63f8ca6ce177697d5641d6571bc86bb5af7b2f200d36e5d5612abe5ab8feb5ab1592000fc27e446400de1a905e89a9eb56a5eba1dd397ed92b79263cf7b344a2dd9304a57b1e918af69832f211e6c330bfbbbe50325a2e3c9f4d3cf9dade8ba0e9c426f9dc03d616e68ed289fc041d97ba41c3dde8fbdf1d25dbb3a5de0ec7f6d99ae285cfdc79ada6579383560b04cccebfd0ca0b36a76ddf5650a53ce278b4166064005e6a32b1e6d7c0653595c71557f262868b1e4", 0xbe}, {&(0x7f0000003440)="b3235696406c72627aa98f4b6770218435e4f9595700e6f383919940eefbc48f88da0441b5dd8cf22948d9cd5ea6fed759a6750a5d6c4eb2c8237c917501aa311a9195235842d4ae3c6f5799a992f2eb0f7a43fc2ca9f70a9ce5b96e5817540083627ee68b72efd03728", 0x6a}, {&(0x7f00000034c0)="722c46d692dac7c5163ae8358a9a6807cc5a0c413a9a7bde9486be97a5ec8e7c0aa44ae1c54b6e2dec792a63fcdd392f876261945c2eea1ce87c7984f5852d2f7fdacf97c6140d9829f5b15137a38665f73e9ee64579ac41e1d4d09e50fb", 0x5e}, {&(0x7f0000003540)="34766c2d692135173e13c54f50443f594dc4bcc458b05f19146e993c718384a9e330", 0x22}, {&(0x7f0000003580)="e8b54539ff0c2540bb6f3b65db695f73f68469e28f50c98903d9548807dafe202740a34d974e6b506f0ae02f1fb0533848d25632d7093da4ac84fbea1fe33b6c971e25ea144795fbde1d295176fb75dc608ec8a95f700092aa95f4f3ace8b0aa5483d37e676cea451def7ace39b4906a3645facfb531ed0a7ce54638c12d521fc81789ca579d88a85168ab88db7a74e444e58c95dfe9124f557b8c8480f2bfdc8d724e57feaf558c8b763a635721d5ce1ca1d32b05d1311453d105ec80c70519b4a676df2e6b85c9f38b869186b543550067498216b24d5e88cd", 0xda}, {&(0x7f0000003680)="47ec2d134bf74c328abb2493f118d9c7da3ca89e6b63f06f5e1d003a5deec3", 0x1f}, {&(0x7f00000036c0)="e3c5e46a14cf539d6114664e9db6ff5cbac3a2c3e27b6fa9e57d1ddea352030920b4cf000efecd2e5847f4abb2444237df0ca7ad3dfcc0ab691809e445a857e6b3e8959f4130e4aaf10f2261f15029370a93225f8cf0554d7b9f0a3c96ce7c4ece38d2e448d087d8b2765b855fa7cf3f47eac1f536f811fc35ad8d10fe041daeeac2362bee5347cb2ef877a9d5c09c3294d4a5a47cf3a0775507f86783e281f07e41b1343e5d0365a3c45626be9f1288e335d046fd936d07ef351d692572d164d1fac698ddc8eb8aa06c6a25056fe345eca5279547175704102766b7cc", 0xdd}], 0xa, &(0x7f0000003880)={0xc8, 0x10e, 0x8, "665528b2465ae2680ca8d1b5e3d87649a09e9662ba8d26abd68be48e536b3c5630c1c050572d22c8ffad60e499c5d8cb9193411d357c146952ec987533b3132f4b755c7d8a977cb56296a4d0ad4fc832de6929221f71ac591523e5c1034b10efa87256a9016daf961201a90ddb6c562d76b80692af5c041fbfd95b5f98169608ebda6f17002ef04553a1b473989911dc8bcbe38c39a5ef66878e0f8d8564626b408dbc30af5756f6bc186903f790eb77b2f461c9b8"}, 0xc8, 0x1}, {&(0x7f00000039c0)={0x27, r11, 0x1, 0x4, 0x2, 0x80, "0685b2a3e733c2020d032ef1ede59fff5678d3ee9247dcfcd4f0a7ac811bcaf0a231f2d9a8a506376fda5affcf65396401c0db01ed848f5b424ca9b7ea5f85", 0x16}, 0x60, &(0x7f0000004e80)=[{&(0x7f0000003a40)="8f501e8ecc561725c8d278d214d19c6fae2781119cfcf17a7cc576c58f0059e3d75b68735c24f643f1fc5b1a4ac578145420204c4a4d9735279ddf50757a7d16786078ce6a94c456bc920b17c8c283bbd7cf41fb1425ca7ec11b094ea41454b0b341c7f158d1367d28ce7184fb0e34cc0b4d30cd7b7525d26587950a3e8c5c5a99e8a282fb9a14e5b1f3ef07", 0x8c}, {&(0x7f0000003b00)="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", 0x1000}, {&(0x7f0000004b00)="e07e501ef18dc4f1c7299180c0925dab211d42611036c49fdded2ca863a049af6ebf9dc428257dbf0729", 0x2a}, {&(0x7f0000004b40)="70c7a9a09bbec3622d2fb795545a9ea8eb57e2ef4d76c3eb4ecd3c243adb5a5ea80d48f249ebcb52e06a33dbfe0909caa499c6c2bee85d69b46f49655446d292e7208ad6d94b7fb28c159a4a02f337e6ba94d39785aae4d5ee0c2f5aa032955c51b539f10146a09956", 0x69}, {&(0x7f0000004bc0)="92f849740191cf83905f6f4678afa1f5af456d60621d0d960c01d99aed494d33447b6350a281acda33d350b9b6fdc3fdd3ac5465a2c47f744514836b8592809bf35f4f4d6693efe09cb5def20df43a", 0x4f}, {&(0x7f0000004c40)="0a8df6b7b70ca0da1372ec3dca137e103d037b76c52b30389e5542fb4c547b0f4794cd261cc044d9c472cda7e0a5beac8fb33ad3cfa63f1f5218933a319ba0fc438217ae8021beca046b822c7a5d8f25cbb9afbf86dbac", 0x57}, {&(0x7f0000004cc0)="dff892418c13ba50fce97a4a9d7eba36ade69de54f0dfc5eac180994474faa43e90b76ac82f926ab9dac4f292c767474e7e121008753a4c0c2e0ca536eb9acb006bbf1aa67422f714cfe88627b7af0ea8b357179f5cf5bdfca76612917660b96278e24ca57d18c8a31aa82b4d32632aa7efe4682cca167db29901a5c9338de4ea4fea545bf6b33d966fff46c8ff3ca272f0c847d49e104e917ac6b5f16479e27e50fa5e73f522247f6b370473baabd40e18362fd56d18bac049dc697266fa7c5ebaaebb6fdae4b5a5c45fd18c0e684a3", 0xd0}, {&(0x7f0000004dc0)="ca4144a8eadacacb20cb66f609922b93e6e5744a05be5fefff7444a70057b42a2249a00dfa04acf1d691fe015c138f854c0092a8dfe603a17ee970f26a3097066eda3f6fd1b027c9f89bbc7048fa9eadc777cfcd8fbc573927d6a860e00789e964d92a5cc6f54c1b0ec6f09e99f2a7e94a6462bc14876c806511311bd9dfbd50460405ea1bc92eedd5d93e653fb8c85aac55502d03ed1369ab15e2b9ec005b6a22d3", 0xa2}], 0x8, &(0x7f0000004f00)={0x78, 0x84, 0x0, "9ac89e344ffcb466f4a713ea6a643e49a839f651ee6e3a967a1774c9b8335f6725b0de3d559e509d6ca6b6e0f581f45e37df88c724d9c53601a6abf036f082781243c432edca1234d398ff09950e38de303161ffeddc092031ec119f3aa18981757795a9"}, 0x78, 0x8044}], 0x4, 0x4040400) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000005080)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000005100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000005200)={&(0x7f00000050c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005140)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x89d0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9048}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) r13 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r13, 0x541b, &(0x7f0000005240)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000005280)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000052c0)=0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000005300)={r14, 0x8, 0x9, 0x71e}, &(0x7f0000005340)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000005380)=@assoc_value={r15, 0x7}, 0x8) sendto$inet(r3, &(0x7f00000053c0)="a07953de01586a5c988695a0b2a798f26a53c3f0b73b2b8bb908472dc6250caf07c3edb274c869c16983c029e1be0d426752", 0x32, 0x40, &(0x7f0000005400)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 2.890680545s ago: executing program 2 (id=2638): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_coalesce={0x3c}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) close(r3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0xa, 0x6, 0x101, 0x48, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x10, 0x0, 0x1, 0x7}}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8}, 0x18) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x942, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xa, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4ae, 0x0, 0x0, 0x0, 0x208}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f00000000c0)='GPL\x00', 0x80000001, 0x0, 0x0, 0x41000, 0x20, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x5, 0x4, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000680)=[0x1, 0xffffffffffffffff, r5, r6, r7, r8, r9, r10, r11, 0x1], &(0x7f00000006c0)=[{0x3, 0x1, 0xa, 0xb}, {0x0, 0x4, 0xe, 0xa}, {0x3, 0x4, 0xe, 0x1}, {0x3, 0x1, 0xf, 0xc}, {0x3, 0x4, 0x4, 0x1}], 0x10, 0x2}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0xb4, 0x180, 0x32, @private0, @remote, 0x0, 0x20, 0x9, 0x1ff}}) 2.783864606s ago: executing program 2 (id=2642): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x79}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0xffffffffffffffff}, 0x6) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x0, 'batadv0\x00', {0x2}, 0x9}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0x82, &(0x7f0000000680)={0x2, 0x0, 0x4, 0x3}, &(0x7f0000000280)=0x20) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x81, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}, @IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x18, r5}, 0x18) (async) getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000480)={@mcast2, 0x0}, &(0x7f00000004c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x8, 0x0, 0x8, 0x100, r10, 0x3694, '\x00', r11, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0x1}, 0x50) (async) recvmsg$unix(r5, &(0x7f00000003c0)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/169, 0xa9}], 0x1, &(0x7f0000000300)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x12060) 2.645544715s ago: executing program 2 (id=2645): socket$inet6_sctp(0xa, 0x801, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e1c, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000a40)='~', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x5, 0x3, 0x80000000, 0x9, 0x80000001}, 0x14) socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d146"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r3, r4, 0x7, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0xc, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffd}]}, 0x2c}}, 0x1) socket$kcm(0x11, 0x3, 0x0) (async) r8 = socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240000000840800034000000007080004400000000f08000140000000000c0005800c0001007061796c6f6164000c00028008000240000000050900010073797a30000000000900020073797a3200"], 0xa8}}, 0x0) write(r8, &(0x7f00000001c0)="74a9e2495fff36", 0x7) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x6c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x40, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0x19, 0xd, 0x5, 0x4}, {0x2, 0x4, 0x8, 0x2172}, {0xfffe, 0x3, 0x0, 0x7}, {0x4, 0x3, 0x7, 0x7}, {0x6, 0x5, 0x5, 0x2}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x6c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x40, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0x19, 0xd, 0x5, 0x4}, {0x2, 0x4, 0x8, 0x2172}, {0xfffe, 0x3, 0x0, 0x7}, {0x4, 0x3, 0x7, 0x7}, {0x6, 0x5, 0x5, 0x2}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r13) (async) close(r13) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 2.628901628s ago: executing program 0 (id=2647): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, &(0x7f0000000100)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) (async) r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x54db00, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)=0x1) ioctl$PPPIOCSMAXCID(r3, 0x4004743c, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r4, &(0x7f0000000040), 0x37) close(r4) r5 = accept$inet(r4, &(0x7f0000000900), &(0x7f0000000940)=0x10) sendto$inet(r5, &(0x7f0000000b00)="a0bfedbec103c1f4e78caf1c61730b4e03f6d45e83fb0a9358a2fed954a097a800481d8aa248f9a4df8f4d6ef41e3178a8858936553fe637d0be21850e276479da4a65621ff0d26a8283a0fdbbb303b402793542be85db7c1fb50b5304151501479ad992930d56f628c3ba63e3d082cd21086917bfaafd511cd7c781a685b6f823311b48105e07678d35d762bd882c18abbbd977db28a4f552ac97e590dd38af09d93873d376cf88169ba740c94a71c82dbcd684e1b63f4c13cf0d428cc87d41253dc6977b60c770446c531b63699415fac97af45b9e7d0c86f51214e549cfde6a707c6ff542aa4784481da06d", 0xed, 0x8014, &(0x7f0000000980)={0x2, 0x4e24, @remote}, 0x10) (async) sendto$inet(r5, &(0x7f0000000b00)="a0bfedbec103c1f4e78caf1c61730b4e03f6d45e83fb0a9358a2fed954a097a800481d8aa248f9a4df8f4d6ef41e3178a8858936553fe637d0be21850e276479da4a65621ff0d26a8283a0fdbbb303b402793542be85db7c1fb50b5304151501479ad992930d56f628c3ba63e3d082cd21086917bfaafd511cd7c781a685b6f823311b48105e07678d35d762bd882c18abbbd977db28a4f552ac97e590dd38af09d93873d376cf88169ba740c94a71c82dbcd684e1b63f4c13cf0d428cc87d41253dc6977b60c770446c531b63699415fac97af45b9e7d0c86f51214e549cfde6a707c6ff542aa4784481da06d", 0xed, 0x8014, &(0x7f0000000980)={0x2, 0x4e24, @remote}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r6, 0x4) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r7, 0x0, 0x21, &(0x7f00000002c0), &(0x7f00000003c0)=0x4) pipe(&(0x7f00000006c0)) (async) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000800000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00e9ff000000000000016a295a0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000800000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00e9ff000000000000016a295a0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="1843000004000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7030000000000f7840000000c000000b70000000000000003180800eddebc3f0703f6ff1000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCDELRT(r9, 0x890c, &(0x7f0000000580)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e24, @multicast1}, 0xcc, 0x0, 0x0, 0x0, 0x280, &(0x7f0000000700)='macvtap0\x00', 0x6, 0x9, 0x3}) (async) ioctl$sock_inet_SIOCDELRT(r9, 0x890c, &(0x7f0000000580)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e24, @multicast1}, 0xcc, 0x0, 0x0, 0x0, 0x280, &(0x7f0000000700)='macvtap0\x00', 0x6, 0x9, 0x3}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r12, 0x29, 0x49, &(0x7f00000015c0), 0x4) (async) setsockopt$inet6_int(r12, 0x29, 0x49, &(0x7f00000015c0), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) ioctl$PPPIOCCONNECT(r13, 0x4004743a, &(0x7f0000000380)=0x2) (async) ioctl$PPPIOCCONNECT(r13, 0x4004743a, &(0x7f0000000380)=0x2) 2.542687724s ago: executing program 1 (id=2648): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xf}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffd3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000104"], 0x50}}, 0x4000084) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400122a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/219, 0xdb}], 0x1}, 0x40000000) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x2, &(0x7f00000000c0)=0xfa0, 0x4) getsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f00000002c0)=""/19, &(0x7f0000000240)=0x13) r7 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmsg(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1}, 0x2000) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0xffffffff, 0x1, {0x0, 0x0, 0x0, r3, {0x4, 0xffe0}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x24000084) recvmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000580)=@ax25={{0x3, @netrom}, [@rose, @bcast, @null, @default, @netrom, @remote, @remote, @default]}, 0x80, &(0x7f0000000680)=[{&(0x7f0000004100)=""/4096, 0x1000}, {&(0x7f0000005100)=""/4096, 0x1000}, {&(0x7f0000000600)=""/98, 0x62}], 0x3, &(0x7f0000000700)=""/5, 0x5}}, {{&(0x7f0000000740)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000006100)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/227, 0xe3}, {&(0x7f00000008c0)=""/94, 0x5e}, {&(0x7f0000000940)=""/99, 0x63}, {&(0x7f00000009c0)=""/240, 0xf0}, {&(0x7f0000000ac0)=""/20, 0x14}, {&(0x7f0000000b80)=""/20, 0x14}, {&(0x7f0000000bc0)=""/136, 0x88}, {&(0x7f0000007100)=""/4096, 0x1000}], 0x9, &(0x7f0000000d40)=""/193, 0xc1}, 0x2}], 0x2, 0x10002, &(0x7f0000000ec0)) 2.473596095s ago: executing program 4 (id=2649): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000090000003c0003800800010001000000140002007663616e3000000000000000000000000800030000000000140006"], 0x50}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000090000003c0003800800010001000000140002007663616e3000000000000000000000000800030000000000140006"], 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r6, 0x700, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xda061187b9da7f68) write$tun(r0, &(0x7f0000000440)={@val={0x70, 0xf7}, @void, @eth={@remote, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x8}}}}}}, 0x2e) 2.469516739s ago: executing program 0 (id=2650): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000040)=@xdp={0x2c, 0x1d9a6ca4369fa4b4, r2, 0x7}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000000c0)="2175ab91b5e0c8c0e2b7be01bc0afbd1e08055a88a6fb8c602ea801b1e46a0", 0x1f}, {&(0x7f00000001c0)="57cb1c51e5928f0da6e4921f13969a38ce04e642db3f832569fc21cca3812d0277b2a565a21e0245eb307ea602669806f047686de3c40e9bc5af5463e5026e3d784cbc7c28c73fe7d4ebb15248f935980c482a8cd17aaf9de4c851c0f53e2afa2fa34fc6e609cb7689feadce5e1de0f307e4b3e39ed74facfbabba8ac5c4d4cb75d8c962ddc22f95663d9113877a72b9d1f8ada76d046c93e443ac498a6f42ce888dd8d6a864dbd0986fbc31a01f6fe500be0c820d17be385d106dedf951ac80fde8db5f9a8433", 0xc7}, {&(0x7f00000002c0)="bcd8480036187bf38fc438bcbeb08be7dd4aa14c7b561aa9e4b7b02804885cee07ed12d42f14d9f754a3132765358c04dd500548f617b76cedd5a89eb28a9c1accf33d3690319d6ec7e3fdde40ddec4778250c72bd2fa8e3d34c27e5fedd205ef5c24d62e76192c91cb0cfbacef5cb9caa5ff9e665b1d20922d066c60bf5", 0x7e}, {&(0x7f0000000400)="fd04ae7f015e082e90f496f386794445df7ad1456468456b1d43a3f9b4a2dd42035f3c8e6adf521bd9b5db69ffdf765f9295a679f506bc171c2758caad2476687ffb7bca57249b86a98b0d87b0b90db73979adbd1d0b7f09bc15dc00c9232bad49023c768529930e8942170c8aa6819c721b630b7b1ecb01bb230be3b4f458cd43cd2c4e07a7a50becee7d4cdd4c0c", 0x8f}, {&(0x7f0000000340)="e8730590693b9d37d25a05bd44fadb6e3ff2f9974d032d5ea39eda5f25ec08dc3f9cc25b4a1154da4d042316e58f5a1475903da4b667aea823b99fef9ccb1d217439d48322ba44877e9afa86a8ef9182fa9e715e5f85be0b6d9d", 0x5a}], 0x5, &(0x7f0000000540)=[{0xf8, 0xff, 0x5, "70b2718cf787a6a530d966ba5a5d79da9768b08b1125cc2f657c76d6cd7b5a142384a3996b0c645976150a13694e87475cc6c863b1c4a9e5848c3f061c85b8bef7b82154305d1c62f82eac693d6e2afae135f48f5d79d94e826ab943a4e118af70caf45b9b6b600032ae46c966360cda37c479e59275eca3882d36a528795af4930d8d96885450fb90fb571260d1af9f9372b8df5fafe39307a1f8c4e07107e8ae1e13b31bdd20cb68cca245fd3d10a8a2a3663e496a8e854bb10d7b866f24ac92397436491b568d274b249c8167cc1f6c9985623383d288abc0f68e2680150233db72601d"}, {0xf8, 0x10a, 0x4, "f200462f26e264f291defd51b81b431736e610f5fa27421cc0411183b18a48eabc0cd6e7fe91d4d8aced26f11e274732217849f24ca5de180966f6ae1345945f58f2646190e1e33270cc3444b3f73c9baf2d5aa4e8c2a686f6486bedd1cf39358879c6adedf0dabc16485ddf7f735f3f90c1ec2bfb15ec77defc016c184bd3710c4664516ea0e04adad27712ae0fd2544f7d30791bc2d4784be0179715f8445210d0fc0d6c0ce8e6e6a209f15dcf77eed6f85d20dd56c82edf0ed2f91c5f671a92f536cecdc0d317997926eaadc506fa2585a36d8a6af7b390c1c136370f94f967c39ec41ab8"}, {0x38, 0x0, 0x80000001, "ef2b504d7abb01c6a0b5fac79d33326c037f7fb9bf6d629ad0fc925e1d1e02b11ec5"}], 0x228}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'dvmrp1\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYRESHEX=r0], 0x44}, 0x1, 0x2000000000000000}, 0x1) 2.353030838s ago: executing program 0 (id=2651): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x17c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010101, 0x0, 0x0, 0x4e21}, {@in=@broadcast, 0x0, 0x33}, @in6=@remote, {}, {0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x40000, 0x10000}, 0x0, 0x0, 0xa}, [@algo_auth={0x89, 0x1, {{'sha256\x00'}, 0x208, "408b1465cc98145235faa3108e14d7b2fee081eb57514a4196af7d15b24d9eb526931a287b2e7c3c563ca407db93c418bddf98a2dbff0f1ac7fa6d079ef090fb51"}}]}, 0x17c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000004680)=[{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000600)="00128f6787bbda3e1597c5f656fa1f40", 0x10}], 0x1, 0x0, 0x0, 0x4002}], 0x1, 0x4044800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newnexthop={0x28, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x6}]}, @NHA_RES_GROUP={0x4}]}, 0x28}}, 0x40000) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={0x0, @sco={0x1f, @none}, @ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @xdp={0x2c, 0x8, r7, 0xb}, 0xcee3, 0x0, 0x0, 0x0, 0x62fb, 0x0, 0x7, 0xa, 0x6}) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000240), 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000900000000000000000000001010"}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0x0, 0x2}, {0xfff3, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20084084) r8 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f00000004c0)}], 0x1, 0x4814) recvmmsg(r8, &(0x7f0000000e00), 0x0, 0x2001, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r9, 0x400448ca, 0x0) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x6020400) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r11, 0x400448cc, 0x0) 2.139452397s ago: executing program 3 (id=2652): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x204, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'ip_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20b82, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x0, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x401}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e105000000890600001144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x4) r11 = socket$alg(0x26, 0x5, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, 0x0, 0x0) r13 = accept4$alg(r12, 0x0, 0x0, 0x800) sendmsg$alg(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="f5a9496032", 0x5}], 0x1}, 0x55) bind$alg(r11, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) 956.743421ms ago: executing program 4 (id=2653): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x100, 0x2, 0xa, 0x404, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x2b, 0x6, "b3e42b2cb57d0577025b173fb756007b175058fc7752a290cfd546ffab23c4768c484963893c4b"}, @NFTA_TABLE_USERDATA={0xaa, 0x6, "0d2cfdbe34adab6cdc61a625df8b945bb3327f87d8bc51a028b866888b4ca95b051ec18a02825cd222895ecd4201805ede9879dcecc895aab15070cbcd9b99780d350b33b1909904754555ab6be8a476b45213910a1850adaba93843a771b6550d4d094608c4e58f6835877789c7b039067dc7c0dfe4e08e58829255ba0f9368aa5bb8869bd7205ce3734bbf3755e0a4ad6ec285c6632badd9c7ba1fff9ea4403252d27a6b0a"}]}, @NFT_MSG_DELCHAIN={0x1d0, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xce, 0xc, "94a6abd34681a3b256fcf5df72e291182a3dcdb6afb317761e00d3dd62771215f48a6f9bdf17a19c61b8f0597a588e3d53c40a9c4bd6369ee5c07db7d3a3886521fbc7b8cf408c5b37f3efd738d78ba4fdbfaf645733591baa531bc3c6f0d5ff185ca1070a70374710520d6b0d3a49befe6a42d2b70f149331b8900d12e847533eaaa7b431bf2e317a9307f50c89ffeb9958246e3d2594e979fd941dc6de7f7dd573f3b74b44712f9e2ab78b2fa5494ceeb5dfcd2c5bacb110eb4a81a112148577bf0d4d9377ea6d4b74"}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xc83}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x94, 0xc, "a822c6628e3e1201af013e17ce6efa1fbcd9ae1f84a9f7baade3510869c9b172d386f18560af7596553aad7039c96c18452f73b60211d142e94222c45da0e1383f3611f02a06c47f2d68431d053d14d5b1984f01656f4dc29d27eee42df789e3448857840fe73aa22791c4c20eb6610f5767ba24599fe46877b83c30d65ed49b870e30f07ca975ee6a17a9701ab5fca9"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x2f8}, 0x1, 0x0, 0x0, 0x10}, 0x4) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast]}, 0x48) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @empty}, {0x6, @random="8b4963bb0d27"}, 0x20, {0x2, 0x4e20, @local}, 'bridge_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x12, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008051}, 0x400c0c0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x4840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602200000000e000a00140000000280", 0x2a}, {&(0x7f0000000400)="6a718e5e", 0x4}], 0x2}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES8=r0], 0x4c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x670, 0x5, 0x350, 0x150, 0x210, 0xfeffffff, 0x150, 0x210, 0x2b8, 0x2b8, 0xffffffff, 0x2b8, 0x2b8, 0x5, 0x0, {[{{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'vlan1\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x13, @rand_addr, @empty, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @loopback}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, r7, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x70}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x62e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x44000) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x10, 0x8000, 0x200, 0x6, {{0xb, 0x4, 0x3, 0x32, 0x2c, 0x64, 0x0, 0xe6, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x14, 0xb5, 0x1, 0x7, [{@local, 0x2}, {@rand_addr=0x64010101, 0x2}]}, @end, @noop]}}}}}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0xfffffcb7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x88}}, 0x0) ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, &(0x7f0000000c00)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0}, &(0x7f0000000780)=0xc) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x40}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="09180000000000000000010000000800020002000000080001"], 0x24}}, 0x0) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000a80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f00000007c0)=ANY=[@ANYBLOB="6c0200001500040029bd7000fedbdf2500000000000000000000ffff00000000fc0200000000000000000000000000014e2200075d2300090200c08004000000", @ANYRES32=r9, @ANYRES32=r11, @ANYBLOB="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"], 0x26c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) 917.204136ms ago: executing program 0 (id=2654): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) listen(r5, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 913.443392ms ago: executing program 1 (id=2655): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) recvmmsg(r1, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}, 0x6290}], 0x1, 0x2160, 0x0) recvmsg$unix(r1, &(0x7f0000000300)={&(0x7f0000000140), 0x6e, &(0x7f0000001780)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f0000001580)=""/247, 0xf7}, {&(0x7f00000004c0)=""/65, 0x41}, {&(0x7f0000001840)=""/252, 0xfc}, {&(0x7f00000002c0)=""/63, 0x3f}], 0x6}, 0x183) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) shutdown(r2, 0x1) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x80800) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="170e0000000000000000010000600500070000000000000014001f0000000000000000000000ffffac14140008000a0000000000eeff010000000000080018007f000001000000000000"], 0x50}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "b4003a00"}, 0x28) shutdown(r0, 0x1) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001800)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r6, 0x0, 0xffffffff004) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) 841.032045ms ago: executing program 2 (id=2656): mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x19, 0x7, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cgroup.events\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000440)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e23, 0x4, @mcast1, 0x2}, @in6={0xa, 0x4e24, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, @in6={0xa, 0x4e23, 0x80000000, @remote, 0x3}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e20, @remote}], 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000208000200e000000208000740000000001800068008001700ac1414000400038008000100e0000002"], 0x7c}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x40, 0x1c}, 0xc) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x90, 0x1, 0x0, 0x2, {{0x8, 0x4, 0x0, 0x4, 0x20, 0x68, 0x0, 0x87, 0x4, 0x0, @broadcast, @rand_addr=0x64010101, {[@lsrr={0x83, 0xb, 0x93, [@broadcast, @loopback]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000600)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000880)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r5, @ANYBLOB="200029bd7000fbdbdf2509000000800001801400020065727370616e3000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="0800030001000000140002006970365f767469300000000000000000140002006970365f7674693000000000000000001400020070696d72656730000000000000000000140002006e65747063693000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="04000180140001800800030002000000080003000200000048c1fd36af5d92ff13d668844cdec0f0b1daa0414b5d24d3fd5c8bb147016455be895c04894d4d98fdb5b6498c4ed79c0400a9bd1676a700a45e0786b3eddfc611a73dfff089f0fb824b24426f"], 0xac}}, 0x8801) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newlink={0x80, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}, @IFLA_PHYS_PORT_ID={0x18, 0x22, "eb0e6701d9f5e620b716ab4b07ba1286a515c391"}, @IFLA_PHYS_SWITCH_ID={0x23, 0x24, "0a0727b9defac84f39b94bd4c383d2b4ab4ac812c976dd877a0cc48f1ee65a"}, @IFLA_PHYS_PORT_ID={0x5, 0x22, ';'}]}, 0x80}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057ffffffff00000000000000c3c670a37ae632b7bfba8ad60ee9e0c72173e78c294f6adaa73fd204d5a782a7a20b96e3cafe5d13e130b66f1e65263ede2cc49ad8f2a2a34d309895c266b35073134c645112ecb2bf707f7b14e5f43c2e480f885ac864083676e299e88f5ed726780d30be1230b9c11d7fc49cfb36383e4fad30a873cfedc3e5187e02509668a377dae20f9310cc91145e90a16393eefbddc2337a3a82755f9c192305bf396748f00ed97e68069a0340bc"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0xa0, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x4}, [@RTA_NEWDST={0x84, 0x13, [{0x8, 0x0, 0x1}, {0x48}, {0x999f}, {}, {0xa67}, {0x9}, {0xa7}, {0x831}, {0x2}, {0x6, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x2}, {0xc}, {0x4, 0x0, 0x1}, {0xffb6b, 0x0, 0x1}, {0x5}, {0x101}, {}, {0x7}, {0x208}, {0x3, 0x0, 0x1}, {0x8}, {0x7}, {0xb, 0x0, 0x1}, {0x2}, {0x7f, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x8f, 0x0, 0x1}, {0xd4}, {0x6, 0x0, 0x1}]}]}, 0xa0}}, 0x4000) r10 = socket$inet(0x2, 0x800, 0x2000007) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r10, 0xf502, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r11, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x30, 0x140c, 0x800, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40c0) 794.769348ms ago: executing program 3 (id=2657): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0x10}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x10, 0xf}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008cc}, 0x20004804) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r7, 0x894b, &(0x7f00000000c0)) setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f0000000080)=0x49e1, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x800, 0x0, 0x0) 734.276984ms ago: executing program 2 (id=2658): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x10, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000040)={0x0, 0x64ceef03d81ddb0f, 0x7, 0x0, 0x10001}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x8}]}}]}, 0x3c}}, 0x20008000) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x2, 0xac3, @loopback, 0x9}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5686d93d, 0x0, 0xff, 0xe, 0x7, 0x5}, 0x20) socket$nl_crypto(0x10, 0x3, 0x15) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r5, 0x80001000) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7}, 0x18) connect$can_j1939(r6, &(0x7f0000000040)={0x1d, r7, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) 615.959933ms ago: executing program 1 (id=2659): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000001640), &(0x7f0000001680)=0x14) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000001600)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000015c0)={&(0x7f0000001180)={0x430, r4, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xe, 0x3c}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_TX_RATES={0x2fc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0x7}, {0x6, 0x8}, {0x0, 0x3}, {0x6, 0x2}, {0x3, 0x4}, {0x7, 0x1}, {0x5, 0x5}, {0x0, 0x5}, {0x7, 0x4}, {0x4, 0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x3, 0x3}, {0x6, 0x1}, {0x2, 0x5}, {0x5, 0x9}, {0x3, 0x6}, {0x1, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x7, 0x3}, {0x4, 0x1}, {0x1, 0x7}, {0x7, 0x3}, {0x5, 0x2}, {0x7, 0x1}, {0x0, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x26ec, 0x40, 0x5, 0xa, 0x100, 0x1, 0x80, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x82, 0xc92, 0x6, 0x5, 0x9004, 0x8, 0x8, 0xacfb]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7e, 0x0, 0x43, 0x1ff, 0x7, 0x400, 0x2, 0x3]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x9, 0x18, 0x3, 0xb, 0xb, 0x18, 0x52, 0x48, 0x0, 0x0, 0x16, 0x9, 0x6, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x4, 0x9}, {0x4, 0x4}, {0x5, 0x9}, {0x5, 0x1}, {0x4, 0x8}, {0x3}, {0x1, 0x6}, {0x2, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {}, {0x5, 0x3}, {0x3, 0x9}, {0x5, 0x8}]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0xc, 0x3, 0x400, 0x0, 0xffff, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4f0, 0x8c83, 0x0, 0x9, 0x4, 0x3, 0xf, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5, 0x12, 0x16, 0xe4a4804a5ee51627, 0x12]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0x9}, {0x5, 0x6}, {0x2, 0x9}, {0x6}, {0x6, 0x1}, {0x7, 0xa}, {0x2, 0xa}, {0x6, 0x9}, {0x1, 0x5}, {0x0, 0x4}, {0x4, 0x4}, {0x6, 0xa}, {0x2, 0x2}, {0x2, 0x4}, {0x5, 0x5}, {0x0, 0x8}, {0x2, 0x8}, {0x4, 0x9}, {0x1, 0x9}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x6}, {0x1, 0x6}, {0x5, 0x9}, {}, {0x1}, {0x4, 0x4}, {0x7, 0x3}, {0x1, 0x3}, {0x3, 0x1}, {0x5, 0x8}, {0x1, 0x3}, {0x6, 0x9}, {0x0, 0x2}, {0x5, 0x3}, {0x5, 0x8}, {0x4, 0x5}, {0x0, 0x9}, {0x1, 0x2}, {0x5, 0x8}, {0x6, 0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x4}, {0x4, 0x1}, {0x3, 0x4}, {0x6, 0x9}, {0x6, 0x2}, {0x4, 0x7}, {0x4, 0x8}, {0x1, 0x7}, {0x5, 0xa}, {0x4, 0x4}, {0x7, 0x7}, {0x5, 0x7}, {0x3, 0x8}, {0x1, 0xa}, {0x1, 0x9}, {0x0, 0xa}, {0x2, 0x8}, {0x7, 0x1}, {0x5, 0x6}, {0x4, 0xa}, {0x0, 0xa}]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xa04d, 0x0, 0x4, 0x8, 0x8, 0x1ff, 0x7b]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x3, 0x9, 0x81, 0xfe, 0x4, 0x1, 0x1]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x6, 0x1, 0x1, 0xffff, 0x1, 0x1, 0xfe01]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x6, 0x3}, {0x5, 0x3}, {0x0, 0x5}, {0x1, 0x2}, {0x4, 0x5}, {0x1, 0x4}, {0x2, 0x9}, {0x1, 0x3}, {0x1, 0xa}, {0x3, 0x9}, {0x0, 0x2}, {0x1}, {0x1}, {0x1, 0x9}, {0x4, 0x7}, {0x6, 0x5}, {0x0, 0x2}, {0x3, 0x3}, {0x0, 0x6}, {0x6, 0xa}, {0x2, 0x8}, {0x6, 0x6}, {0x4, 0x5}, {0x2, 0x8}, {0x5, 0x6}, {0x0, 0x9}, {0x1, 0x5}, {0x5, 0x2}, {0x0, 0x7}, {0x1, 0x7}, {0x3, 0x1}, {0x1, 0x9}, {0x6, 0xa}, {0x6, 0x4}, {0x2}, {0x1, 0x9}, {0x4, 0x6}, {0x0, 0x6}, {0x3, 0x4}, {0x1, 0x6}]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0xa}, {0x6, 0x2}, {0x7, 0xa}, {0x4, 0xa}, {0x5, 0x1}, {0x5, 0x8}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x2}, {0x6, 0x4}, {0x2, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x1000, 0xd182, 0x401, 0x6, 0x3, 0x4]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6, 0x1b, 0x4, 0x1, 0x12, 0x60, 0x12, 0x4, 0x48, 0x9, 0x24, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x24, 0x9, 0x6, 0xb, 0x9, 0xff37, 0x7]}}]}, @NL80211_BAND_60GHZ={0xe4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x14, 0x6c, 0x6, 0x2, 0xc, 0x3, 0x48, 0x4, 0x18, 0x0, 0x5, 0x48, 0x1b, 0xb, 0xc, 0x9, 0x9, 0xc, 0xb, 0x6, 0x24, 0x6c, 0x5]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x6, 0x3}, {0x2, 0x1}, {0x4, 0x4}, {0x3, 0x9}, {0x2, 0x9}, {0x3, 0x7}, {0x1, 0x4}, {0x4, 0xa}, {0x7, 0x3}, {0x0, 0x9}, {0x1, 0x5}, {0x0, 0x2}, {0x0, 0x4}, {0x0, 0x9}, {0x2, 0x5}, {0x0, 0x5}, {0x4, 0x3}, {0x7, 0x3}, {0x7, 0x1}, {0x4, 0x6}, {0x7, 0x1}, {0x1, 0x6}, {0x5, 0x5}, {0x5, 0x8}, {0x7, 0x4}, {0x2}, {0x4, 0x3}, {0x3, 0x4}, {0x7, 0x9}, {0x0, 0x9}, {}, {0x6, 0x1}, {0x4}, {0x1, 0xa}, {0x3, 0x3}, {0x4, 0x8}, {0x1}, {0x1, 0x1}, {0x4, 0x7}, {0x2, 0x5}, {0x1, 0x7}, {0x4, 0x3}, {0x0, 0x9}, {0x3, 0xa}, {0x3, 0x2}, {0x4, 0xa}, {0x5, 0x7}, {0x3, 0x2}, {0x7, 0x8}, {0x5, 0x4}, {0x3, 0x8}, {0x6, 0x9}, {0x4, 0x1}, {0x6, 0x3}, {0x3, 0x1}]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0xa}, {0x4, 0x3}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0xa}, {0x2, 0x6}, {0x6, 0x9}, {0x0, 0x8}, {0x4, 0xa}, {0x6, 0x3}, {0x1}, {0x4, 0x1}, {0x2, 0x9}, {0x5, 0x9}, {0x3, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x7}, {0x1, 0x3}, {0x1, 0x7}, {0x4, 0x2}, {0x3}, {0x3, 0x5}, {0x4, 0x2}, {0x3, 0x7}, {0x7, 0x7}, {0x0, 0xa}, {0x3, 0x4}, {0x1}, {0x2, 0x3}, {0x0, 0x5}, {0x1, 0x8}, {0x7}, {0x4, 0x9}, {0x7, 0x7}, {0x1, 0x2}, {0x2, 0x9}, {0x0, 0x1}, {0x6, 0x7}, {0x7, 0x2}, {0x0, 0x7}, {0x0, 0x2}, {0x1, 0x9}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0x9}, {0x1, 0x2}, {0x4, 0x6}, {0x4, 0x6}, {0x5, 0x4}, {0x3, 0x7}, {0x1, 0x9}, {0x7, 0x5}, {0x1, 0x2}, {0x5, 0x8}, {0x0, 0x6}, {0x0, 0x7}, {0x0, 0x8}, {0x5, 0x5}, {0x1, 0x5}, {0x4}, {0x6, 0x4}, {0x3, 0x2}, {0x6, 0xa}, {0x6, 0x4}, {0x2, 0x7}, {0x1, 0x5}, {0x5, 0x8}, {0x4, 0xa}, {0x0, 0x7}, {0x0, 0x4}, {0x5}, {0x3, 0xa}, {0x1, 0x5}, {0x4, 0x7}, {0x0, 0x7}, {0x5, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfeff, 0x401, 0x5, 0xfd, 0x2c6, 0xbd6, 0x5, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x9}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x468}], @NL80211_ATTR_MESH_SETUP={0xec, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_IE={0xb4, 0x3, "a3258a69a0fb6b454bac0b83e54d2b056b5d624aa3121db372b4f78366ada22668b5ebf38d9c3b0853f3b034f45771fa49880b29b063629efae94f573aeeed6fed04cbe75a50cdb15b13fe98131004c009c0422205dc12fc55ce1399f675837c6c43010789299b135107a68b589c4516343c975b51178b0ee8a5bf745d4740e52d3e356060a8a828eefb709553a9df8be4fe4ed1c5b3af451ddab0205a89d31ba839ae460014b139db7773d50ab71238"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x430}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r7, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) (async) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0xffffffff) (async) r9 = accept4(r8, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000000300)={0x0, 0xa}, &(0x7f0000000380)=0x8) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r12, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r10], 0x4) 563.195489ms ago: executing program 4 (id=2660): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f00000009c0)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa86dd6001010000641100fe8000000000400000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000000)={0x0, 0x2710}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000200)=0x80, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="120000001c000100030000000000000007"], 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x99d475c06dfa8ba0}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r5, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="a461613fbd172a97207931ba0fb127995024ea04a487cb5a414e221bd1de2bcb21b589fa2d19aeff13c79cf7e1895b42e0814d23d7410c22a6194dcf32f8d990b5143f8e027a375e776077cfab7442d4b59ea947457d0a6fdc6ba15eea2db47906d036303123b6f3f3aae5234968c5ddf0db61e1ad908517da5e5473b9247bb1616c2512b8813f4e3abd8e285e02afab27f4878c150d2f11f1106cff1af1fcb0cc6ee9c0847effe3eb2e46a1a32d1a5baab369fd62166ce175fef5294f06ca70b9771013990bc16e8757f9cf", @ANYBLOB="01070000000000000000670000f4070001"], 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x0) 487.977247ms ago: executing program 1 (id=2661): recvmsg$unix(0xffffffffffffffff, 0x0, 0x40002021) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$packet(0x11, 0xa, 0x300) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_getaddr={0x50, 0x16, 0x100, 0x70bd28, 0x25dfdbfb, {0x2, 0x1, 0x40, 0xff}, [@IFA_LABEL={0x14, 0x3, 'dvmrp1\x00'}, @IFA_FLAGS={0x8, 0x8, 0x1cd}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x9, 0x9, 0x1}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0xa2}, 0x1, 0x0, 0x0, 0x24004834}, 0x800) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x1000, 0x800, 0x3, 0x3ff, 0x5, 0xff, 0x73a3}, 0x1c) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r1, 0x0, 0x0, 0x140, &(0x7f0000002e80)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="df4800000100000000000c0000000c0003800400050004000380180001801400bc7100000000000000040000000000000023"], 0x38}}, 0x0) (async) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000600)=@broadcast, &(0x7f00000006c0)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_a, @random="9ad0f4428095", @random="a634aa68cbfe", {0xa, 0xd12}, "", @void, @value=@ver_80211n={0x0, 0x3, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}}, 0x1c) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r4, 0x18000000000002a0, 0xeff, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x2100, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$nci(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="ff040600"], 0x4) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000400)={'ip6erspan0\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x7, 0xa5, "a32241fc88f3dbf8dc5499895a7886314ef49732db820c90cd4d29c0726a0209cd929acf29499d2b1762cbeaf38d6486e82623ab328a6e6ad432f1d6697019a20d11b44919b6d6701d212dca45c90ee15587553ba42edfb0cd15c5e1bebe334ed53ea1ae09c86086c8c2f5e9c07056f9cf1cf24fad7c06d3326c11fde7c0628fc347363f358c21dc59d45776d51502866fb8762fab93371f67a91dcdb88be751c5401e1004"}}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) accept$alg(r5, 0x0, 0x0) (async) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200020c0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'aegis128-generic\x00'}}}, 0xe0}}, 0x0) (async) sendmsg$nl_crypto(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) 417.459484ms ago: executing program 0 (id=2662): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d19eadbc774681e75a8fe60175a40f0be822787bbbad5ce1a3747b9c1f55ad73164ebbbf7dff5bf6e02019e4"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x8040}, 0x24000080) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000000)='\xe3]%@]%-:@-\x00', 0xb) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000006900030500000000000000000081"], 0x18}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r7, 0x4) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x24, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xafbb, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff2, 0x0, 0x0, 0x0, 0x6}, @alu={0x7, 0x0, 0xa, 0xa, 0x1, 0xfffffffffffffffc, 0x10}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @jmp={0x5, 0x1, 0xa, 0xb, 0x9, 0x7df3faaa99b602f4, 0xfffffffffffffff0}, @generic={0x9, 0x9, 0x5, 0x7, 0x400}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xfd7, 0x68, &(0x7f0000000040)=""/104, 0x41100, 0x18, '\x00', 0x0, 0x19, r6, 0x8, &(0x7f00000000c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xd, 0x5, 0x7}, 0x10, 0x2ef6a, r2, 0x1, &(0x7f0000000180)=[r0, r2, r0], &(0x7f00000001c0)=[{0x5, 0x4, 0xe, 0x6}], 0x10, 0xe}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0xe, &(0x7f00000013c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r8}, 0x94) r10 = socket$rds(0x15, 0x5, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020089540a000400"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$SO_RDS_TRANSPORT(r10, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 372.921101ms ago: executing program 4 (id=2663): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYRESOCT=r0], 0x4c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYRESOCT=r0], 0x4c}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) 366.274349ms ago: executing program 3 (id=2664): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0}}], 0x2, 0x20004086) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r2 = accept4(r1, &(0x7f0000000600)=@vsock={0x28, 0x0, 0x0, @local}, 0x0, 0x800) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0xd, 0x1, 0x8}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x48, r4, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4e}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 253.507056ms ago: executing program 0 (id=2665): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x6, 0x3, 0x1, 0x41, 0x8, 0xc85e, 0xffff, 0x401, [{0x7fffffff, 0x2, 0x0, 0x81e}]}}, @TCA_U32_MARK={0x10, 0xa, {0x1779800, 0x7}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 251.824867ms ago: executing program 4 (id=2666): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x14, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x3e0, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x368, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xa5, 0x5, "0b5be708cd3438065a09f2006411081cea224e815adcc9e0c99fcde2d8c053f313d18698bbdd56e4565cc21a446d5829744df5800c9a5b65a3f63fee742f35a52a05a13d202c015ebc566acbaf57cdedd3ddfcc43dee8257385c6380e46ae7b18204e222294bfe517192222f5dc944df1b36c4c1b892b36017a329ae5b8ec0f9d047216d03d8fadc1f2f282b9bb09ed34a1407bc5f0a6afc98e32fc950d259bdac"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tunl0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tunl0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x83\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xfd, 0x4, "4cda5853d8e583780a1de6ee8998b19f628964132b714b1c426464758d1cc74ae2077ced5a294a3d562988aa97263afe465bd7f254195aeadb09a60dca9c91e85a75b162abbe6e3359022818aa6858487cf4d97ac626958aa2e56a93018f59b21a9456633c8b2e9f58224009643fb7d153406cb29116d7dbff2b4bc6ee9521ac3b04c7d19d7ffa616f2f48b441a0cf25172eb0fc18a1c24a1cbdcb78025f13e263a5687d5d7719f384df1d0bca85c572a8ea974d63ad67f9e166934769319c418c4c4b7b29054c851548331d4225cc05cff0470dd0b859d9b0603be99f88982f1454ee0442a10b52977f6a6610f04c7672632630cb2a5dd3a7"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x53}, @ETHTOOL_A_BITSET_MASK={0xec, 0x5, "63f7d976209d6e589f825ae35a20bad284ddc0d2595bab9d030a9a4585f9dba23a997b32a8d1cc7d80a1dacd8811069a5c6a2f26311cca49dc65cafa5dc525454abfe7c0fadd6a50592c81a0bab6c4405149281280202f888a06f672b0ecb1a83475701f44052afc8130e394fd78113e6a0e1ec297e77399f54498a3ef63e2172c479e223640753a50e45f7e596ba67163385ab25bd5f72c15cc149965d53c10a7a093ead596d47c73694a04bc4d89a895d236969fd43f8a283f2fd8268467610244defedb41a8763370d7f317136dee73d3c942e9f0e881044c10d9bdea9da0eb745e5801db853b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tunl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'-}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x64, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x58, 0x5, "83cb3d71edee7c848f773694afb162ca488f43802509db7bba37765799410172dbf2d24ea29b516340814b3c8ddea94ae0a474ce3c78fc0ae6b2b322653cb221d8f15f9a12805f1528bf8856a4fd03d07503362c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x44080}, 0x40) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000003a00010020000000000000000a000000140001"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018006e344a00000000000c4d00000c0000009dbf5bff0100000000000005000000000000"], 0x0, 0x26}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r8, 0xf01, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x4f}}}}}, 0x28}}, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0xed000000, 0x10, &(0x7f0000000200), 0x10}, 0x80) 246.845369ms ago: executing program 1 (id=2667): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400"], 0x0, 0x34}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400"], 0x0, 0x34}, 0x28) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) (async) 149.440584ms ago: executing program 3 (id=2668): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x5, 0x8010, r0, 0xc08ba000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000006, 0x12, r0, 0xe93f6000) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f00000000c0)) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000080)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000002000270300000000010000008100000000000000000000001400030069703667c697995c703000000000000014000c0074"], 0x44}}, 0x0) 5.844447ms ago: executing program 1 (id=2669): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x2a}, &(0x7f0000000080)=0x8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={r1, @in={{0x2, 0x4e23, @remote}}, 0xffffffff, 0x800, 0x3ff, 0x6, 0x18, 0x2, 0x4}, 0x9c) sendto$inet6(r0, 0x0, 0x0, 0x24000084, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) 3.015968ms ago: executing program 4 (id=2670): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[{0x3, 0x4, 0x1, 0x7}, {0x1, 0x2, 0xc, 0x3}], 0x10, 0x80000000}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000240)={0x11, 0x2, 0x0, 0x1, 0x8, 0x6, @remote}, 0x14) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000240)=ANY=[], 0xfdef) (async, rerun: 32) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) (rerun: 32) syz_open_procfs$namespace(r5, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 0s ago: executing program 3 (id=2671): socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): ecified [ 130.140536][ T8232] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 130.351056][ T8283] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 130.367519][ T8283] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 130.383667][ T8294] veth1_macvtap: left promiscuous mode [ 130.397460][ T8294] macsec0: entered promiscuous mode [ 130.405894][ T8294] macsec0: entered allmulticast mode [ 130.453700][ T8302] veth1_macvtap: entered promiscuous mode [ 130.468819][ T8302] veth1_macvtap: entered allmulticast mode [ 130.488206][ T8302] macsec0: left promiscuous mode [ 130.494486][ T8302] macsec0: left allmulticast mode [ 130.500552][ T8302] veth1_macvtap: left allmulticast mode [ 130.716714][ T8319] __nla_validate_parse: 6 callbacks suppressed [ 130.716731][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.629'. [ 130.741886][ T8318] xt_l2tp: v2 doesn't support IP mode [ 131.057531][ T8330] vlan2: entered promiscuous mode [ 131.067421][ T8330] vlan2: entered allmulticast mode [ 131.077846][ T8330] hsr_slave_1: entered allmulticast mode [ 132.338698][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.645'. [ 132.460270][ T8387] macvtap1: entered promiscuous mode [ 132.465802][ T8387] vlan0: entered promiscuous mode [ 132.484441][ T8387] macvtap1: entered allmulticast mode [ 132.490607][ T8387] vlan0: entered allmulticast mode [ 132.497029][ T8387] veth0_vlan: entered allmulticast mode [ 132.669066][ T8402] netlink: 'syz.3.651': attribute type 1 has an invalid length. [ 132.751067][ T8407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.652'. [ 133.013149][ T8413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.653'. [ 133.835430][ T8400] netlink: 32 bytes leftover after parsing attributes in process `syz.4.650'. [ 133.845415][ T8402] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 134.107489][ T8424] team_slave_0: entered promiscuous mode [ 134.121729][ T8424] team_slave_1: entered promiscuous mode [ 134.173789][ T8424] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 134.211981][ T8424] team0: Device macvtap1 is already an upper device of the team interface [ 134.249833][ T8424] team_slave_0: left promiscuous mode [ 134.255361][ T8424] team_slave_1: left promiscuous mode [ 134.328337][ T8438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.661'. [ 134.434117][ T8445] netlink: 'syz.1.663': attribute type 2 has an invalid length. [ 134.449238][ T8445] netlink: 'syz.1.663': attribute type 8 has an invalid length. [ 134.456934][ T8445] netlink: 132 bytes leftover after parsing attributes in process `syz.1.663'. [ 134.604954][ T8452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.944066][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.673'. [ 135.001778][ T8476] bridge_slave_0: entered promiscuous mode [ 135.135493][ T8476] batadv1: entered allmulticast mode [ 135.609519][ T8501] tipc: Enabled bearer , priority 10 [ 135.693212][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'. [ 135.733916][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'. [ 135.748621][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'. [ 135.805151][ T8513] netlink: 'syz.2.683': attribute type 12 has an invalid length. [ 135.842039][ T8513] netlink: 'syz.2.683': attribute type 29 has an invalid length. [ 135.856134][ T8513] netlink: 148 bytes leftover after parsing attributes in process `syz.2.683'. [ 135.889978][ T8513] netlink: 59 bytes leftover after parsing attributes in process `syz.2.683'. [ 135.914677][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'. [ 135.948173][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'. [ 135.991092][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'. [ 136.029142][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'. [ 136.061843][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'. [ 136.120767][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'. [ 136.603354][ T8552] netlink: 'syz.1.699': attribute type 29 has an invalid length. [ 136.653870][ T8552] netlink: 'syz.1.699': attribute type 29 has an invalid length. [ 136.997323][ T8573] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 137.004071][ T8573] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 137.616124][ T8603] x_tables: duplicate underflow at hook 2 [ 137.625148][ T8602] tipc: Enabling of bearer rejected, failed to enable media [ 138.081080][ T8628] xt_TCPMSS: Only works on TCP SYN packets [ 138.252690][ T8635] team0: Device gtp0 is of different type [ 138.381153][ T8641] bridge1: port 1(ip6gretap1) entered blocking state [ 138.392323][ T8641] bridge1: port 1(ip6gretap1) entered disabled state [ 138.412263][ T8641] ip6gretap1: entered allmulticast mode [ 138.427623][ T8641] ip6gretap1: entered promiscuous mode [ 138.478191][ T8651] netlink: 'syz.3.733': attribute type 22 has an invalid length. [ 138.543135][ T3006] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.560439][ T3006] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.582709][ T3006] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.636643][ T3006] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.714682][ T8653] tipc: Started in network mode [ 138.726157][ T8653] tipc: Node identity 7ed257ca247d, cluster identity 4711 [ 138.735669][ T8653] tipc: Enabled bearer , priority 0 [ 138.841790][ T8653] syzkaller0: entered promiscuous mode [ 138.858022][ T8653] syzkaller0: entered allmulticast mode [ 138.904770][ T8653] tipc: Resetting bearer [ 139.151900][ T8652] tipc: Resetting bearer [ 139.195925][ T8652] tipc: Disabling bearer [ 139.374866][ T8699] sctp: [Deprecated]: syz.0.746 (pid 8699) Use of int in maxseg socket option. [ 139.374866][ T8699] Use struct sctp_assoc_value instead [ 139.642815][ T8721] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 139.652126][ T8723] syz.1.754: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 139.669274][ T51] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.685240][ T8719] xt_ecn: cannot match TCP bits for non-tcp packets [ 139.692665][ T51] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.704327][ T8723] CPU: 1 UID: 0 PID: 8723 Comm: syz.1.754 Not tainted syzkaller #0 PREEMPT(full) [ 139.704349][ T8723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.704358][ T8723] Call Trace: [ 139.704365][ T8723] [ 139.704371][ T8723] dump_stack_lvl+0x189/0x250 [ 139.704403][ T8723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.704425][ T8723] ? __pfx__printk+0x10/0x10 [ 139.704442][ T8723] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 139.704464][ T8723] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 139.704486][ T8723] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 139.704510][ T8723] warn_alloc+0x214/0x310 [ 139.704531][ T8723] ? stack_depot_save_flags+0x40/0x860 [ 139.704559][ T8723] ? __pfx_warn_alloc+0x10/0x10 [ 139.704580][ T8723] ? kasan_save_track+0x3e/0x80 [ 139.704598][ T8723] ? __kasan_kmalloc+0x93/0xb0 [ 139.704621][ T8723] ? xsk_setsockopt+0x4dc/0x8d0 [ 139.704652][ T8723] ? do_sock_setsockopt+0x17c/0x1b0 [ 139.704669][ T8723] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 139.704685][ T8723] ? do_syscall_64+0xfa/0xfa0 [ 139.704715][ T8723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.704741][ T8723] __vmalloc_node_range_noprof+0x125/0x12d0 [ 139.704797][ T8723] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 139.704826][ T8723] ? __kasan_kmalloc+0x93/0xb0 [ 139.704855][ T8723] vmalloc_user_noprof+0xad/0xf0 [ 139.704877][ T8723] ? xskq_create+0xbf/0x170 [ 139.704896][ T8723] xskq_create+0xbf/0x170 [ 139.704920][ T8723] xsk_init_queue+0xb0/0x110 [ 139.704940][ T8723] xsk_setsockopt+0x4dc/0x8d0 [ 139.704962][ T8723] ? __pfx_xsk_setsockopt+0x10/0x10 [ 139.704985][ T8723] ? __pfx_aa_sk_perm+0x10/0x10 [ 139.705008][ T8723] ? aa_sock_opt_perm+0xff/0x1b0 [ 139.705036][ T8723] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 139.705053][ T8723] ? __pfx_xsk_setsockopt+0x10/0x10 [ 139.705075][ T8723] do_sock_setsockopt+0x17c/0x1b0 [ 139.705096][ T8723] __x64_sys_setsockopt+0x13f/0x1b0 [ 139.705115][ T8723] do_syscall_64+0xfa/0xfa0 [ 139.705136][ T8723] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.705159][ T8723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.705176][ T8723] ? clear_bhb_loop+0x60/0xb0 [ 139.705197][ T8723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.705214][ T8723] RIP: 0033:0x7f14de78f6c9 [ 139.705230][ T8723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.705244][ T8723] RSP: 002b:00007f14df5f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 139.705263][ T8723] RAX: ffffffffffffffda RBX: 00007f14de9e5fa0 RCX: 00007f14de78f6c9 [ 139.705274][ T8723] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 139.705283][ T8723] RBP: 00007f14de811f91 R08: 0000000000000004 R09: 0000000000000000 [ 139.705293][ T8723] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.705302][ T8723] R13: 00007f14de9e6038 R14: 00007f14de9e5fa0 R15: 00007ffef9b442d8 [ 139.705328][ T8723] [ 139.705335][ T8723] Mem-Info: [ 139.718082][ T51] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.768001][ T8723] active_anon:5493 inactive_anon:0 isolated_anon:0 [ 139.768001][ T8723] active_file:2954 inactive_file:39895 isolated_file:0 [ 139.768001][ T8723] unevictable:768 dirty:36 writeback:0 [ 139.768001][ T8723] slab_reclaimable:10465 slab_unreclaimable:98643 [ 139.768001][ T8723] mapped:29330 shmem:1350 pagetables:1178 [ 139.768001][ T8723] sec_pagetables:0 bounce:0 [ 139.768001][ T8723] kernel_misc_reclaimable:0 [ 139.768001][ T8723] free:1329783 free_pcp:13820 free_cma:0 [ 139.899527][ T51] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.940194][ T8723] Node 0 active_anon:22000kB inactive_anon:0kB active_file:11816kB inactive_file:159388kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117284kB dirty:148kB writeback:0kB shmem:3868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12540kB pagetables:4796kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 140.172447][ T8723] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 140.226293][ T8723] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 140.257797][ T5834] Bluetooth: hci1: command tx timeout [ 140.274554][ T8723] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 140.303214][ T8723] Node 0 DMA32 free:1410596kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22104kB inactive_anon:0kB active_file:11816kB inactive_file:159388kB unevictable:1536kB writepending:148kB zspages:0kB present:3129332kB managed:2565156kB mlocked:0kB bounce:0kB free_pcp:35480kB local_pcp:19556kB free_cma:0kB [ 140.382608][ T8723] lowmem_reserve[]: 0 0 0 0 0 [ 140.392692][ T8723] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 140.432769][ T8723] lowmem_reserve[]: 0 0 0 0 0 [ 140.437627][ T8723] Node 1 Normal free:3895432kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16476kB local_pcp:6372kB free_cma:0kB [ 140.533847][ T8723] lowmem_reserve[]: 0 0 0 0 0 [ 140.540187][ T8723] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 140.616404][ T8723] Node 0 DMA32: 866*4kB (UME) 862*8kB (UME) 671*16kB (UME) 929*32kB (UM) 235*64kB (UM) 99*128kB (UME) 71*256kB (UME) 37*512kB (UM) 4*1024kB (UME) 0*2048kB 315*4096kB (M) = 1409992kB [ 140.650982][ T8723] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 140.663584][ T8723] Node 1 Normal: 200*4kB (UE) 53*8kB (UME) 34*16kB (UME) 57*32kB (UME) 22*64kB (UME) 10*128kB (UME) 6*256kB (UME) 5*512kB (ME) 2*1024kB (ME) 0*2048kB 948*4096kB (UM) = 3895432kB [ 140.691236][ T8723] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 140.725831][ T8723] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 140.747909][ T8723] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 140.767070][ T8723] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 140.781919][ T8723] 44198 total pagecache pages [ 140.796965][ T8723] 0 pages in swap cache [ 140.802259][ T8723] Free swap = 124996kB [ 140.806433][ T8723] Total swap = 124996kB [ 140.821036][ T8723] 2097051 pages RAM [ 140.824881][ T8723] 0 pages HighMem/MovableOnly [ 140.846261][ T8723] 424120 pages reserved [ 140.854173][ T8723] 0 pages cma reserved [ 141.322877][ T8788] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 141.333820][ T8793] __nla_validate_parse: 49 callbacks suppressed [ 141.333838][ T8793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.776'. [ 141.353436][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.777'. [ 141.361843][ T8789] netlink: 36 bytes leftover after parsing attributes in process `syz.4.775'. [ 141.401129][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.777'. [ 141.431667][ T8797] syzkaller0: create flow: hash 1211370527 index 2 [ 141.447167][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.777'. [ 141.447180][ T8789] bond_slave_1: left promiscuous mode [ 141.459663][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.777'. [ 141.476506][ T8795] netlink: 'syz.1.777': attribute type 14 has an invalid length. [ 141.479686][ T8789] bond_slave_1: left allmulticast mode [ 141.503340][ T8804] openvswitch: netlink: IP tunnel dst address not specified [ 141.514357][ T12] syzkaller0: tun_net_xmit 76 [ 141.519737][ T8796] netlink: 'syz.1.777': attribute type 14 has an invalid length. [ 141.527766][ T12] syzkaller0: tun_net_xmit 48 [ 141.528601][ T8795] netlink: 'syz.1.777': attribute type 13 has an invalid length. [ 141.538113][ T7582] syzkaller0: tun_net_xmit 76 [ 141.541102][ T8796] netlink: 'syz.1.777': attribute type 13 has an invalid length. [ 141.553886][ T8806] netlink: 16 bytes leftover after parsing attributes in process `syz.3.774'. [ 141.602201][ T8792] syzkaller0: delete flow: hash 1211370527 index 2 [ 141.638083][ T7582] syzkaller0: tun_net_xmit 76 [ 144.061145][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.786'. [ 144.101922][ T8841] netlink: 56 bytes leftover after parsing attributes in process `syz.3.789'. [ 144.371653][ T8846] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 144.394012][ T8856] netlink: 'syz.3.794': attribute type 2 has an invalid length. [ 144.419996][ T8846] team0: Port device batadv2 added [ 144.555340][ T8864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.795'. [ 144.815280][ T8875] netlink: 'syz.1.801': attribute type 11 has an invalid length. [ 144.955824][ T8879] netlink: 'syz.0.802': attribute type 27 has an invalid length. [ 144.963923][ T8881] x_tables: duplicate underflow at hook 1 [ 144.990810][ T8881] netlink: 'syz.3.803': attribute type 2 has an invalid length. [ 145.243169][ T8893] syzkaller0: entered promiscuous mode [ 145.248945][ T8893] syzkaller0: entered allmulticast mode [ 145.322438][ T8891] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 145.336051][ T8891] bond1 (unregistering): Released all slaves [ 145.526047][ T8899] syzkaller1: entered promiscuous mode [ 145.556925][ T8899] syzkaller1: entered allmulticast mode [ 145.622145][ T8914] netlink: 'syz.2.815': attribute type 30 has an invalid length. [ 145.681123][ T8915] tipc: Started in network mode [ 145.701548][ T8915] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 145.722710][ T8915] tipc: Enabled bearer , priority 2 [ 146.493828][ T8948] __nla_validate_parse: 3 callbacks suppressed [ 146.493847][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.825'. [ 146.706709][ T8948] xt_connbytes: Forcing CT accounting to be enabled [ 146.848175][ T10] tipc: Node number set to 10463914 [ 147.338053][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.838'. [ 147.568368][ T9003] bridge_slave_1: entered promiscuous mode [ 147.970284][ T9018] veth1_to_batadv: entered promiscuous mode [ 148.168195][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.845'. [ 148.216424][ T9020] netlink: 32 bytes leftover after parsing attributes in process `syz.2.845'. [ 148.330071][ T9014] syzkaller1: entered promiscuous mode [ 148.353709][ T9014] syzkaller1: entered allmulticast mode [ 148.501845][ T9042] netlink: 'syz.0.852': attribute type 83 has an invalid length. [ 148.513871][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.852'. [ 148.529542][ T9042] netlink: 64 bytes leftover after parsing attributes in process `syz.0.852'. [ 148.576551][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.853'. [ 148.594047][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.853'. [ 148.901847][ T9061] netlink: 5 bytes leftover after parsing attributes in process `syz.2.858'. [ 148.935272][ T9061] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 149.149439][ T9074] netlink: 'syz.4.861': attribute type 1 has an invalid length. [ 149.264062][ T9074] bond2: entered promiscuous mode [ 149.289915][ T9074] bond2: entered allmulticast mode [ 149.295609][ T9074] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.370886][ T9087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.866'. [ 149.380641][ T9087] tc_dump_action: action bad kind [ 149.675597][ T9104] netem: incorrect gi model size [ 149.681348][ T9104] netem: change failed [ 149.931459][ T9123] netlink: 'syz.4.877': attribute type 1 has an invalid length. [ 149.970745][ T9126] xfrm1: entered promiscuous mode [ 149.975896][ T9126] xfrm1: entered allmulticast mode [ 150.015152][ T9129] unsupported nlmsg_type 40 [ 150.227355][ T9147] IPv6: NLM_F_REPLACE set, but no existing node found! [ 150.272089][ T9141] sit1: entered promiscuous mode [ 150.277077][ T9141] sit1: entered allmulticast mode [ 151.040341][ T9186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.414660][ T9184] bond2 (unregistering): Released all slaves [ 151.447852][ T9191] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 151.535101][ T9204] __nla_validate_parse: 10 callbacks suppressed [ 151.535120][ T9204] netlink: 14 bytes leftover after parsing attributes in process `syz.2.904'. [ 151.672129][ T9207] netlink: 104 bytes leftover after parsing attributes in process `syz.4.905'. [ 151.690831][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.906'. [ 151.700465][ T9209] netlink: 20 bytes leftover after parsing attributes in process `syz.2.906'. [ 151.724054][ T9209] geneve2: entered promiscuous mode [ 151.736913][ T9209] geneve2: entered allmulticast mode [ 151.772217][ T69] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.797195][ T69] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.812398][ T69] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.823112][ T69] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.880898][ T9217] Unknown status report in ack skb [ 152.070521][ T9222] can: request_module (can-proto-4) failed. [ 152.124424][ T9230] netlink: 'syz.4.912': attribute type 4 has an invalid length. [ 152.171058][ T9230] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 152.183485][ T9222] can: request_module (can-proto-4) failed. [ 152.213625][ T9230] netlink: 'syz.4.912': attribute type 33 has an invalid length. [ 152.298638][ T9222] can: request_module (can-proto-4) failed. [ 152.444186][ T9222] can: request_module (can-proto-4) failed. [ 152.576118][ T9222] can: request_module (can-proto-4) failed. [ 152.654568][ T9222] can: request_module (can-proto-4) failed. [ 152.770982][ T9222] can: request_module (can-proto-4) failed. [ 152.801364][ T9273] netlink: 'syz.3.922': attribute type 8 has an invalid length. [ 152.831565][ T9275] netlink: 'syz.4.923': attribute type 1 has an invalid length. [ 153.084000][ T9286] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.104377][ T9292] Driver unsupported XDP return value 0 on prog (id 255) dev N/A, expect packet loss! [ 153.114757][ T9286] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.147504][ T9281] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 153.162505][ T9281] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 153.174319][ T9281] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 153.306748][ T9293] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 153.319524][ T9293] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 153.372646][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.931'. [ 153.382548][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.931'. [ 153.404283][ T9306] netlink: 156 bytes leftover after parsing attributes in process `syz.2.929'. [ 153.453697][ T9286] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.469048][ T9308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.929'. [ 153.478402][ T9286] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.500793][ T9310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.932'. [ 153.511126][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.931'. [ 153.530255][ T9305] syzkaller0: entered promiscuous mode [ 153.535921][ T9305] syzkaller0: entered allmulticast mode [ 153.631090][ T9286] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.641557][ T9286] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.774549][ T9286] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.788471][ T9286] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.984619][ T3006] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.998980][ T3006] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.023736][ T3006] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.032679][ T3006] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.054376][ T51] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.076572][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.179049][ T51] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.187290][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.366095][ T9350] xt_bpf: check failed: parse error [ 154.405357][ T9351] tipc: Enabled bearer , priority 0 [ 154.415313][ T9351] syzkaller0: entered promiscuous mode [ 154.421364][ T9351] syzkaller0: entered allmulticast mode [ 154.467171][ T9354] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 154.531063][ T9351] tipc: Resetting bearer [ 154.567752][ T9348] tipc: Resetting bearer [ 154.625821][ T9348] tipc: Disabling bearer [ 154.639058][ T9360] netlink: 'syz.3.947': attribute type 8 has an invalid length. [ 154.711987][ T9364] netlink: 'syz.0.949': attribute type 1 has an invalid length. [ 155.578750][ T9410] nbd: must specify a size in bytes for the device [ 155.602411][ T9410] netlink: 'syz.4.959': attribute type 10 has an invalid length. [ 155.682052][ T9410] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 155.854250][ T9429] netlink: 'syz.1.964': attribute type 11 has an invalid length. [ 156.346867][ T9464] IPVS: sh: FWM 3 0x00000003 - no destination available [ 156.357276][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 156.470546][ T9470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.659646][ T9478] bond4: Removing last arp target with arp_interval on [ 156.693681][ T9486] veth0: entered promiscuous mode [ 156.722606][ T9483] Unknown status report in ack skb [ 156.725056][ T9486] __nla_validate_parse: 8 callbacks suppressed [ 156.725071][ T9486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.981'. [ 156.886538][ T9494] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 156.906165][ T9485] veth0: left promiscuous mode [ 156.921479][ T9496] netlink: 20 bytes leftover after parsing attributes in process `syz.4.982'. [ 156.931937][ T9496] netlink: 64 bytes leftover after parsing attributes in process `syz.4.982'. [ 157.170013][ T9509] netlink: 'syz.4.988': attribute type 33 has an invalid length. [ 157.535260][ T9528] x_tables: duplicate underflow at hook 1 [ 157.705691][ T9539] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 157.724849][ T9539] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 157.746522][ T9539] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 157.763919][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1000'. [ 157.785188][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1000'. [ 157.953149][ T9545] syzkaller0: entered promiscuous mode [ 157.971495][ T9545] syzkaller0: entered allmulticast mode [ 157.986853][ T9551] netlink: 'syz.3.1004': attribute type 6 has an invalid length. [ 159.682134][ T9597] netlink: 'syz.1.1014': attribute type 1 has an invalid length. [ 159.726016][ T9591] can: request_module (can-proto-4) failed. [ 159.806688][ T9589] syzkaller1: entered promiscuous mode [ 159.819350][ T9589] syzkaller1: entered allmulticast mode [ 160.203316][ T9624] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.207026][ T9624] ipt_REJECT: ECHOREPLY no longer supported. [ 160.240389][ T9628] IPv6: sit1: Disabled Multicast RS [ 160.259035][ T9628] sit1: entered allmulticast mode [ 160.282890][ T9630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.048599][ T9671] ip6gre1: entered allmulticast mode [ 161.260008][ T9686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.490801][ T9697] xt_ecn: cannot match TCP bits for non-tcp packets [ 161.565125][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'. [ 161.594044][ T9703] tc_dump_action: action bad kind [ 161.600465][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'. [ 161.611876][ T9703] tc_dump_action: action bad kind [ 161.623437][ T9701] Unknown status report in ack skb [ 161.624713][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'. [ 161.647458][ T9708] netlink: 'syz.3.1047': attribute type 25 has an invalid length. [ 161.677877][ T9703] tc_dump_action: action bad kind [ 161.683123][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'. [ 161.745798][ T9703] tc_dump_action: action bad kind [ 161.757535][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'. [ 161.768475][ T9703] tc_dump_action: action bad kind [ 161.782101][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'. [ 161.801279][ T9703] tc_dump_action: action bad kind [ 161.889427][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'. [ 161.899144][ T9703] tc_dump_action: action bad kind [ 161.940402][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'. [ 161.970295][ T9703] tc_dump_action: action bad kind [ 162.011806][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'. [ 162.042246][ T9703] tc_dump_action: action bad kind [ 162.047444][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'. [ 162.158792][ T9703] tc_dump_action: action bad kind [ 162.163983][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'. [ 162.237900][ T9703] tc_dump_action: action bad kind [ 162.243786][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'. [ 162.267425][ T9729] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1054'. [ 162.287611][ T9703] tc_dump_action: action bad kind [ 162.295739][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'. [ 162.305390][ T9703] tc_dump_action: action bad kind [ 162.311746][ T9703] tc_dump_action: action bad kind [ 162.358867][ T9703] tc_dump_action: action bad kind [ 162.950555][ T9761] bond1 (unregistering): Released all slaves [ 163.401075][ T9788] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 163.430830][ T9788] bond1 (unregistering): Released all slaves [ 163.485467][ T9800] sctp: [Deprecated]: syz.3.1073 (pid 9800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.485467][ T9800] Use struct sctp_sack_info instead [ 163.568244][ T9797] netlink: 'syz.2.1072': attribute type 25 has an invalid length. [ 163.591832][ T9797] netlink: 'syz.2.1072': attribute type 7 has an invalid length. [ 163.721466][ T9811] xt_hashlimit: size too large, truncated to 1048576 [ 163.745370][ T9801] syzkaller0: entered promiscuous mode [ 163.756837][ T9801] syzkaller0: entered allmulticast mode [ 163.798866][ T9816] netlink: 'syz.1.1077': attribute type 1 has an invalid length. [ 163.980412][ T9825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.045073][ T9826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.158558][ T9825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.437297][ T9839] syzkaller0: entered promiscuous mode [ 164.456629][ T9839] syzkaller0: entered allmulticast mode [ 165.350480][ T5914] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 60 sec [ 166.590302][ T9906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.688682][ T9907] delete_channel: no stack [ 167.074262][ T9939] IPv6: Can't replace route, no match found [ 167.252285][ T9954] netlink: 'syz.1.1117': attribute type 1 has an invalid length. [ 167.547288][ T9959] veth0_to_bond: entered allmulticast mode [ 167.557755][ T9982] __nla_validate_parse: 23 callbacks suppressed [ 167.557773][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1123'. [ 167.608816][ T9976] tipc: New replicast peer: 255.255.255.255 [ 167.640268][ T9976] tipc: Enabled bearer , priority 10 [ 167.674167][ T9970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.951466][T10001] netlink: 'syz.3.1128': attribute type 83 has an invalid length. [ 168.009558][T10007] syzkaller0: entered promiscuous mode [ 168.015247][T10007] syzkaller0: entered allmulticast mode [ 168.220267][T10011] 8021q: adding VLAN 0 to HW filter on device bond4 [ 168.306828][T10018] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1135'. [ 168.307028][T10020] x_tables: duplicate underflow at hook 4 [ 168.631902][T10037] netlink: 'syz.1.1142': attribute type 1 has an invalid length. [ 168.661235][T10039] netlink: 'syz.4.1140': attribute type 10 has an invalid length. [ 170.123301][T10037] bond3: (slave gretap1): making interface the new active one [ 170.132022][T10037] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 170.142219][ T7582] tipc: Node number set to 1521440714 [ 170.279935][T10066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1149'. [ 170.383450][T10064] bond5: entered allmulticast mode [ 170.398007][T10072] bridge_slave_0: invalid flags given to default FDB implementation [ 170.482299][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1149'. [ 170.535354][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1149'. [ 170.540319][T10085] netlink: 'syz.3.1154': attribute type 1 has an invalid length. [ 170.619080][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1154'. [ 170.636979][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1154'. [ 170.648809][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1154'. [ 170.695421][T10101] netlink: 'syz.1.1158': attribute type 5 has an invalid length. [ 170.704740][T10101] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1158'. [ 170.731133][T10085] IPv6: addrconf: prefix option has invalid lifetime [ 170.749653][T10085] netlink: 'syz.3.1154': attribute type 11 has an invalid length. [ 170.757542][T10085] netlink: 'syz.3.1154': attribute type 11 has an invalid length. [ 170.778194][T10085] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1154'. [ 170.940935][T10110] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 170.959067][T10109] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 171.020378][T10119] netlink: 'syz.1.1162': attribute type 17 has an invalid length. [ 171.131229][T10119] bond0: left promiscuous mode [ 171.136045][T10119] bond_slave_0: left promiscuous mode [ 171.185510][T10119] bond_slave_1: left promiscuous mode [ 171.197327][T10119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.210056][T10119] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.226280][T10119] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.396900][T10142] netlink: 'syz.3.1168': attribute type 21 has an invalid length. [ 171.422140][T10139] geneve3: entered promiscuous mode [ 171.428988][T10139] geneve3: entered allmulticast mode [ 171.607715][ T5834] Bluetooth: hci4: link tx timeout [ 171.614564][ T5834] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.133343][T10179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.679920][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 173.848418][T10183] __nla_validate_parse: 5 callbacks suppressed [ 173.848436][T10183] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1179'. [ 174.252369][T10231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1193'. [ 174.479251][T10248] º: renamed from veth1_vlan (while UP) [ 174.613051][T10238] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 174.748307][T10247] macvlan3: entered promiscuous mode [ 174.758278][T10247] macvlan3: entered allmulticast mode [ 174.786836][T10247] bond2: entered promiscuous mode [ 174.796028][T10247] bridge2: entered promiscuous mode [ 174.821697][T10247] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 174.852794][T10247] bond2: left promiscuous mode [ 174.857704][T10247] bridge2: left promiscuous mode [ 174.978361][T10258] No such timeout policy "syz0" [ 175.009637][T10273] netlink: 'syz.3.1200': attribute type 10 has an invalid length. [ 175.017504][T10273] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1200'. [ 175.068198][T10273] dummy0: entered promiscuous mode [ 175.074288][T10273] bridge0: port 3(dummy0) entered blocking state [ 175.130848][T10273] bridge0: port 3(dummy0) entered disabled state [ 175.137477][T10273] dummy0: entered allmulticast mode [ 175.191118][T10273] bridge0: port 3(dummy0) entered blocking state [ 175.197637][T10273] bridge0: port 3(dummy0) entered forwarding state [ 175.412289][T10288] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1204'. [ 175.623845][T10305] netlink: 'syz.3.1207': attribute type 29 has an invalid length. [ 175.651749][T10305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1207'. [ 175.702109][T10314] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 175.892831][T10326] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 176.426139][T10358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1222'. [ 176.438129][T10358] netlink: 'syz.2.1222': attribute type 1 has an invalid length. [ 176.445926][T10358] netlink: 'syz.2.1222': attribute type 7 has an invalid length. [ 176.458491][T10358] netlink: 'syz.2.1222': attribute type 8 has an invalid length. [ 176.477460][T10358] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1222'. [ 176.713257][T10371] C: renamed from team_slave_0 [ 176.734359][T10371] netlink: 'syz.0.1228': attribute type 1 has an invalid length. [ 176.747076][T10371] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 176.794091][T10376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1227'. [ 176.828027][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1227'. [ 176.883290][T10376] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1227'. [ 177.171116][T10390] syzkaller0: entered promiscuous mode [ 177.176760][T10390] syzkaller0: entered allmulticast mode [ 177.192738][T10405] gre1: entered promiscuous mode [ 177.198116][T10405] gre1: entered allmulticast mode [ 177.215078][T10407] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 177.241730][T10404] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 179.488765][T10447] netlink: 'syz.4.1246': attribute type 18 has an invalid length. [ 179.521887][T10447] __nla_validate_parse: 5 callbacks suppressed [ 179.521904][T10447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1246'. [ 179.632660][T10447] netlink: 'syz.4.1246': attribute type 18 has an invalid length. [ 179.649476][T10447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1246'. [ 179.777282][T10462] syz.1.1251: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 179.803311][T10462] CPU: 1 UID: 0 PID: 10462 Comm: syz.1.1251 Not tainted syzkaller #0 PREEMPT(full) [ 179.803336][T10462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.803346][T10462] Call Trace: [ 179.803353][T10462] [ 179.803361][T10462] dump_stack_lvl+0x189/0x250 [ 179.803394][T10462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.803418][T10462] ? __pfx__printk+0x10/0x10 [ 179.803437][T10462] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 179.803461][T10462] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 179.803486][T10462] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 179.803512][T10462] warn_alloc+0x214/0x310 [ 179.803549][T10462] ? stack_depot_save_flags+0x40/0x860 [ 179.803579][T10462] ? __pfx_warn_alloc+0x10/0x10 [ 179.803606][T10462] ? kasan_save_track+0x3e/0x80 [ 179.803625][T10462] ? __kasan_kmalloc+0x93/0xb0 [ 179.803647][T10462] ? xsk_setsockopt+0x4dc/0x8d0 [ 179.803665][T10462] ? do_sock_setsockopt+0x17c/0x1b0 [ 179.803680][T10462] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 179.803695][T10462] ? do_syscall_64+0xfa/0xfa0 [ 179.803714][T10462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.803739][T10462] __vmalloc_node_range_noprof+0x125/0x12d0 [ 179.803792][T10462] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 179.803815][T10462] ? __kasan_kmalloc+0x93/0xb0 [ 179.803843][T10462] vmalloc_user_noprof+0xad/0xf0 [ 179.803866][T10462] ? xskq_create+0xbf/0x170 [ 179.803888][T10462] xskq_create+0xbf/0x170 [ 179.803913][T10462] xsk_init_queue+0xb0/0x110 [ 179.803936][T10462] xsk_setsockopt+0x4dc/0x8d0 [ 179.803960][T10462] ? __pfx_xsk_setsockopt+0x10/0x10 [ 179.803984][T10462] ? __pfx_aa_sk_perm+0x10/0x10 [ 179.804008][T10462] ? aa_sock_opt_perm+0xff/0x1b0 [ 179.804032][T10462] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 179.804049][T10462] ? __pfx_xsk_setsockopt+0x10/0x10 [ 179.804069][T10462] do_sock_setsockopt+0x17c/0x1b0 [ 179.804091][T10462] __x64_sys_setsockopt+0x13f/0x1b0 [ 179.804112][T10462] do_syscall_64+0xfa/0xfa0 [ 179.804133][T10462] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.804155][T10462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.804172][T10462] ? clear_bhb_loop+0x60/0xb0 [ 179.804193][T10462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.804208][T10462] RIP: 0033:0x7f14de78f6c9 [ 179.804225][T10462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.804237][T10462] RSP: 002b:00007f14df5f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 179.804255][T10462] RAX: ffffffffffffffda RBX: 00007f14de9e5fa0 RCX: 00007f14de78f6c9 [ 179.804267][T10462] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 179.804278][T10462] RBP: 00007f14de811f91 R08: 0000000000000004 R09: 0000000000000000 [ 179.804288][T10462] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.804299][T10462] R13: 00007f14de9e6038 R14: 00007f14de9e5fa0 R15: 00007ffef9b442d8 [ 179.804330][T10462] [ 179.804754][T10462] Mem-Info: [ 179.818265][T10467] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1253'. [ 179.889027][T10462] active_anon:5554 inactive_anon:0 isolated_anon:0 [ 179.889027][T10462] active_file:3082 inactive_file:39913 isolated_file:0 [ 179.889027][T10462] unevictable:768 dirty:102 writeback:0 [ 179.889027][T10462] slab_reclaimable:10511 slab_unreclaimable:99911 [ 179.889027][T10462] mapped:29412 shmem:1404 pagetables:1194 [ 179.889027][T10462] sec_pagetables:0 bounce:0 [ 179.889027][T10462] kernel_misc_reclaimable:0 [ 179.889027][T10462] free:1328287 free_pcp:13768 free_cma:0 [ 180.029081][T10477] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.1253'. [ 180.106068][T10462] Node 0 active_anon:22400kB inactive_anon:0kB active_file:12328kB inactive_file:159452kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121576kB dirty:416kB writeback:0kB shmem:4084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13144kB pagetables:4848kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 180.124680][T10477] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 180.178979][T10462] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 180.242123][T10462] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 180.284228][T10462] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 180.300888][T10462] Node 0 DMA32 free:1402096kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22500kB inactive_anon:0kB active_file:12328kB inactive_file:159452kB unevictable:1536kB writepending:416kB zspages:0kB present:3129332kB managed:2565156kB mlocked:0kB bounce:0kB free_pcp:37932kB local_pcp:17956kB free_cma:0kB [ 180.379105][T10462] lowmem_reserve[]: 0 0 0 0 0 [ 180.384014][T10462] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 180.430500][T10462] lowmem_reserve[]: 0 0 0 0 0 [ 180.435852][T10462] Node 1 Normal free:3895432kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16476kB local_pcp:6372kB free_cma:0kB [ 180.485246][T10462] lowmem_reserve[]: 0 0 0 0 0 [ 180.490836][T10462] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 180.512612][T10462] Node 0 DMA32: 771*4kB (UME) 780*8kB (UME) 823*16kB (UME) 437*32kB (UME) 357*64kB (UME) 136*128kB (UME) 79*256kB (UME) 23*512kB (UM) 5*1024kB (UME) 3*2048kB (M) 313*4096kB (UM) = 1402044kB [ 180.542706][T10487] netlink: 'syz.3.1256': attribute type 10 has an invalid length. [ 180.589974][T10488] netlink: 'syz.4.1258': attribute type 4 has an invalid length. [ 180.607299][T10462] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 180.619368][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1256'. [ 180.689985][T10462] Node 1 Normal: 200*4kB (UE) 53*8kB (UME) 34*16kB (UME) 57*32kB (UME) 22*64kB (UME) 10*128kB (UME) 6*256kB (UME) 5*512kB (ME) 2*1024kB (ME) 0*2048kB 948*4096kB (UM) = 3895432kB [ 180.757770][T10462] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 180.779524][T10462] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 180.791724][T10462] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 180.801544][T10462] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 180.840781][T10462] 44396 total pagecache pages [ 180.845497][T10462] 0 pages in swap cache [ 180.866718][T10502] tipc: Enabled bearer , priority 0 [ 180.888241][T10462] Free swap = 124996kB [ 180.892438][T10462] Total swap = 124996kB [ 180.913550][T10462] 2097051 pages RAM [ 180.917402][T10462] 0 pages HighMem/MovableOnly [ 180.967495][T10462] 424120 pages reserved [ 180.982069][T10502] syzkaller0: entered promiscuous mode [ 180.988119][T10462] 0 pages cma reserved [ 180.993466][T10502] syzkaller0: entered allmulticast mode [ 181.004754][T10502] tipc: Resetting bearer [ 181.065746][T10501] tipc: Resetting bearer [ 181.374251][T10522] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_rx_wq": -EINTR [ 181.391248][T10517] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR [ 182.653041][T10501] tipc: Disabling bearer [ 182.816870][T10562] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1271'. [ 182.841928][T10562] netlink: 'syz.3.1271': attribute type 2 has an invalid length. [ 182.860135][T10567] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.1274'. [ 182.870776][T10562] netlink: 'syz.3.1271': attribute type 2 has an invalid length. [ 182.900440][T10567] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.1274'. [ 182.989166][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1275'. [ 183.021484][T10575] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1277'. [ 183.056487][T10571] veth0_macvtap: left promiscuous mode [ 184.034676][T10633] netlink: 'syz.3.1294': attribute type 39 has an invalid length. [ 184.035266][T10635] netlink: 'syz.2.1296': attribute type 21 has an invalid length. [ 184.104157][T10642] netlink: 'syz.3.1294': attribute type 16 has an invalid length. [ 184.175784][T10642] netlink: 'syz.3.1294': attribute type 17 has an invalid length. [ 184.355190][T10642] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.434247][T10657] syzkaller1: entered promiscuous mode [ 184.448527][T10657] syzkaller1: entered allmulticast mode [ 184.884481][T10687] __nla_validate_parse: 8 callbacks suppressed [ 184.884497][T10687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1309'. [ 185.112492][T10709] openvswitch: netlink: Missing valid actions attribute. [ 185.122823][T10709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.358448][T10732] netlink: 'syz.2.1320': attribute type 1 has an invalid length. [ 185.361790][T10730] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1321'. [ 185.444322][T10732] bond5: (slave gretap1): making interface the new active one [ 185.453383][T10732] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 185.610519][T10748] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.1325'. [ 185.627597][T10748] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 185.656464][T10748] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.1325'. [ 185.674474][T10748] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 185.775969][T10759] tipc: Enabled bearer , priority 0 [ 185.792063][T10759] syzkaller0: entered promiscuous mode [ 185.806689][T10759] syzkaller0: entered allmulticast mode [ 186.020078][T10759] tipc: Resetting bearer [ 186.031572][T10776] netlink: 'syz.4.1331': attribute type 83 has an invalid length. [ 186.039881][T10771] : renamed from bridge_slave_0 (while UP) [ 186.063326][T10759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1329'. [ 186.073528][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1333'. [ 186.120941][T10771] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1331'. [ 186.130215][T10771] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1331'. [ 186.173549][T10777] bond3: option mode: invalid value (133) [ 186.182090][T10777] bond3 (unregistering): Released all slaves [ 186.215530][T10759] dummy0: left allmulticast mode [ 186.221391][T10759] dummy0: left promiscuous mode [ 186.226626][T10759] bridge0: port 3(dummy0) entered disabled state [ 186.251444][T10759] bridge_slave_1: left allmulticast mode [ 186.258131][T10759] bridge_slave_1: left promiscuous mode [ 186.264177][T10759] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.276668][T10759] bridge_slave_0: left allmulticast mode [ 186.292292][T10759] bridge_slave_0: left promiscuous mode [ 186.300195][T10759] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.456341][T10780] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1333'. [ 186.513935][T10800] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1340'. [ 186.531324][T10758] tipc: Resetting bearer [ 186.580928][T10758] tipc: Disabling bearer [ 186.612155][T10802] netlink: 'syz.0.1339': attribute type 1 has an invalid length. [ 186.745298][T10811] IPv6: NLM_F_CREATE should be specified when creating new route [ 186.775253][T10811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.782574][T10811] IPv6: NLM_F_CREATE should be set when creating new route [ 186.789846][T10811] IPv6: NLM_F_CREATE should be set when creating new route [ 186.818863][T10815] openvswitch: netlink: Missing valid actions attribute. [ 186.828100][T10815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.895451][T10819] ip6gre1: entered allmulticast mode [ 187.110826][T10831] netlink: 'syz.4.1349': attribute type 1 has an invalid length. [ 187.135327][T10838] netlink: 'syz.4.1349': attribute type 1 has an invalid length. [ 187.177047][T10843] netlink: 'syz.0.1352': attribute type 39 has an invalid length. [ 187.231647][ T5965] IPVS: starting estimator thread 0... [ 187.328061][T10847] IPVS: using max 37 ests per chain, 88800 per kthread [ 187.346681][T10831] 8021q: adding VLAN 0 to HW filter on device bond6 [ 187.447140][T10840] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 187.463605][T10840] bond6 (unregistering): Released all slaves [ 187.630913][T10856] netlink: 'syz.3.1355': attribute type 1 has an invalid length. [ 187.686350][T10860] dvmrp6: entered allmulticast mode [ 188.046752][T10890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.953939][T10921] nbd: illegal input index -8454144 [ 189.146285][T10925] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 189.779686][T10916] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 189.952713][T10935] __nla_validate_parse: 14 callbacks suppressed [ 189.952733][T10935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1381'. [ 190.024539][T10935] bond0: entered promiscuous mode [ 190.052788][T10935] bond_slave_0: entered promiscuous mode [ 190.061584][T10935] bond_slave_1: entered promiscuous mode [ 190.070387][T10935] gretap0: entered promiscuous mode [ 190.077434][T10935] hsr1: entered promiscuous mode [ 190.113805][T10948] syzkaller0: entered promiscuous mode [ 190.119851][T10948] syzkaller0: entered allmulticast mode [ 190.472753][T10973] netlink: 'syz.0.1393': attribute type 12 has an invalid length. [ 190.496711][T10973] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1393'. [ 190.506901][T10974] batadv_slave_0: entered promiscuous mode [ 190.522654][T10978] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1394'. [ 190.599945][T10971] batadv_slave_0: left promiscuous mode [ 190.636476][T10982] xt_hashlimit: size too large, truncated to 1048576 [ 190.645178][T10987] netlink: 'syz.3.1396': attribute type 1 has an invalid length. [ 190.686072][T10982] syz.1.1395: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 190.742493][T10987] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.841877][T10982] CPU: 1 UID: 0 PID: 10982 Comm: syz.1.1395 Not tainted syzkaller #0 PREEMPT(full) [ 190.841902][T10982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.841913][T10982] Call Trace: [ 190.841921][T10982] [ 190.841929][T10982] dump_stack_lvl+0x189/0x250 [ 190.841969][T10982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.841991][T10982] ? __pfx__printk+0x10/0x10 [ 190.842010][T10982] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 190.842033][T10982] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 190.842057][T10982] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 190.842083][T10982] warn_alloc+0x214/0x310 [ 190.842114][T10982] ? __pfx_warn_alloc+0x10/0x10 [ 190.842147][T10982] ? __get_vm_area_node+0x28f/0x300 [ 190.842170][T10982] ? htable_create+0x101/0x7a0 [ 190.842195][T10982] __vmalloc_node_range_noprof+0x690/0x12d0 [ 190.842243][T10982] ? alloc_pages_mpol+0x3cd/0x4a0 [ 190.842264][T10982] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 190.842291][T10982] ? rcu_is_watching+0x15/0xb0 [ 190.842311][T10982] ? htable_create+0x101/0x7a0 [ 190.842333][T10982] __kvmalloc_node_noprof+0x674/0x910 [ 190.842358][T10982] ? htable_create+0x101/0x7a0 [ 190.842377][T10982] ? hashlimit_pernet+0x23/0x240 [ 190.842397][T10982] ? hashlimit_pernet+0x23/0x240 [ 190.842415][T10982] ? hashlimit_pernet+0x23/0x240 [ 190.842443][T10982] htable_create+0x101/0x7a0 [ 190.842471][T10982] hashlimit_mt_check_common+0x719/0xa10 [ 190.842503][T10982] xt_check_match+0x3d1/0xab0 [ 190.842530][T10982] ? __pfx_xt_check_match+0x10/0x10 [ 190.842553][T10982] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 190.842585][T10982] ? xt_find_match+0x1f7/0x250 [ 190.842609][T10982] translate_table+0x1553/0x2040 [ 190.842654][T10982] ? __pfx_translate_table+0x10/0x10 [ 190.842679][T10982] ? __might_fault+0xb0/0x130 [ 190.842728][T10982] ? _copy_from_user+0x94/0xb0 [ 190.842754][T10982] do_ip6t_set_ctl+0x970/0xce0 [ 190.842783][T10982] ? rcu_is_watching+0x15/0xb0 [ 190.842802][T10982] ? trace_contention_end+0x39/0x120 [ 190.842823][T10982] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 190.842870][T10982] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 190.842899][T10982] ? file_init_path+0x3b/0x590 [ 190.842922][T10982] ? __lock_acquire+0xab9/0xd20 [ 190.842944][T10982] nf_setsockopt+0x26f/0x290 [ 190.842970][T10982] rawv6_setsockopt+0x23b/0x5b0 [ 190.842992][T10982] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 190.843009][T10982] ? aa_sock_opt_perm+0xff/0x1b0 [ 190.843035][T10982] ? sock_common_setsockopt+0x36/0xc0 [ 190.843058][T10982] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 190.843083][T10982] do_sock_setsockopt+0x17c/0x1b0 [ 190.843106][T10982] __x64_sys_setsockopt+0x13f/0x1b0 [ 190.843130][T10982] do_syscall_64+0xfa/0xfa0 [ 190.843151][T10982] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.843173][T10982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.843190][T10982] ? clear_bhb_loop+0x60/0xb0 [ 190.843212][T10982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.843228][T10982] RIP: 0033:0x7f14de78f6c9 [ 190.843252][T10982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.843267][T10982] RSP: 002b:00007f14df5f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 190.843286][T10982] RAX: ffffffffffffffda RBX: 00007f14de9e5fa0 RCX: 00007f14de78f6c9 [ 190.843299][T10982] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 190.843309][T10982] RBP: 00007f14de811f91 R08: 0000000000000528 R09: 0000000000000000 [ 190.843320][T10982] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000 [ 190.843332][T10982] R13: 00007f14de9e6038 R14: 00007f14de9e5fa0 R15: 00007ffef9b442d8 [ 190.843363][T10982] [ 190.843371][T10982] Mem-Info: [ 190.862174][T10988] macvlan3: entered promiscuous mode [ 190.869904][T10982] active_anon:8364 inactive_anon:0 isolated_anon:0 [ 190.869904][T10982] active_file:3082 inactive_file:39917 isolated_file:0 [ 190.869904][T10982] unevictable:768 dirty:134 writeback:0 [ 190.869904][T10982] slab_reclaimable:10683 slab_unreclaimable:100025 [ 190.869904][T10982] mapped:32278 shmem:4204 pagetables:1207 [ 190.869904][T10982] sec_pagetables:0 bounce:0 [ 190.869904][T10982] kernel_misc_reclaimable:0 [ 190.869904][T10982] free:1326615 free_pcp:12243 free_cma:0 [ 190.898710][T10988] macvlan3: entered allmulticast mode [ 190.917913][T10982] Node 0 active_anon:33628kB inactive_anon:0kB active_file:12328kB inactive_file:159476kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129172kB dirty:536kB writeback:0kB shmem:15364kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13080kB pagetables:4664kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 190.935669][T10988] bond2: entered allmulticast mode [ 190.946814][T10982] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 190.952241][T10988] bond2: entered promiscuous mode [ 190.960340][T10982] Node 0 [ 190.965279][T10988] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 190.967671][T10982] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 190.976669][T10988] team0: Port device macvlan3 added [ 190.988254][T10982] lowmem_reserve[]: [ 191.084774][T10982] 0 [ 191.153012][T11002] netlink: 'syz.3.1400': attribute type 1 has an invalid length. [ 191.162029][T10982] 2505 [ 191.348700][T11002] 8021q: adding VLAN 0 to HW filter on device bond3 [ 191.350219][T10982] 2505 [ 191.365135][T11002] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 191.386832][T10982] 2505 2505 [ 191.430155][T10982] Node 0 DMA32 free:1395596kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33644kB inactive_anon:0kB active_file:12328kB inactive_file:159476kB unevictable:1536kB writepending:536kB zspages:0kB present:3129332kB managed:2565156kB mlocked:0kB bounce:0kB free_pcp:29996kB local_pcp:11428kB free_cma:0kB [ 191.464158][T10982] lowmem_reserve[]: 0 0 0 0 0 [ 191.468972][T10982] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 191.498878][T10982] lowmem_reserve[]: 0 0 0 0 0 [ 191.503635][T10982] Node 1 Normal free:3895432kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16508kB local_pcp:6404kB free_cma:0kB [ 191.536630][T10982] lowmem_reserve[]: 0 0 0 0 0 [ 191.541523][T10982] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 191.554373][T10982] Node 0 DMA32: 1*4kB (E) 429*8kB (U) 686*16kB (UM) 582*32kB (UME) 322*64kB (UE) 128*128kB (UM) 80*256kB (UME) 23*512kB (UM) 5*1024kB (UME) 3*2048kB (M) 313*4096kB (UM) = 1395596kB [ 191.574773][T10982] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 191.586836][T10982] Node 1 Normal: 200*4kB (UE) 53*8kB (UME) 34*16kB (UME) 57*32kB (UME) 22*64kB (UME) 10*128kB (UME) 6*256kB (UME) 5*512kB (ME) 2*1024kB (ME) 0*2048kB 948*4096kB (UM) = 3895432kB [ 191.605169][T10982] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 191.614847][T10982] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 191.624348][T10982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 191.634226][T10982] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 191.643712][T10982] 47221 total pagecache pages [ 191.643744][T10996] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.648481][T10982] 0 pages in swap cache [ 191.648496][T10982] Free swap = 124996kB [ 191.648505][T10982] Total swap = 124996kB [ 191.648514][T10982] 2097051 pages RAM [ 191.648521][T10982] 0 pages HighMem/MovableOnly [ 191.648527][T10982] 424120 pages reserved [ 191.648534][T10982] 0 pages cma reserved [ 191.847279][T11002] bond3: (slave gretap2): making interface the new active one [ 191.851701][T11013] xt_socket: unknown flags 0x50 [ 191.868426][T11002] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 192.202715][T11025] syz_tun: entered allmulticast mode [ 192.213520][T11031] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1409'. [ 192.241745][T11031] netlink: 'syz.4.1409': attribute type 7 has an invalid length. [ 192.275639][T11031] netlink: 'syz.4.1409': attribute type 8 has an invalid length. [ 192.289893][T11025] syz_tun: left allmulticast mode [ 192.311317][T11031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1409'. [ 192.366308][T11031] gretap0: entered promiscuous mode [ 192.383693][T11031] batadv_slave_1: entered promiscuous mode [ 192.391340][T11031] batadv_slave_1: left promiscuous mode [ 192.401171][T11031] gretap0: left promiscuous mode [ 192.501428][T11037] sch_tbf: burst 0 is lower than device lo mtu (80) ! [ 192.526961][T11038] sch_tbf: burst 0 is lower than device lo mtu (80) ! [ 192.644610][T11052] netlink: 'syz.2.1413': attribute type 1 has an invalid length. [ 192.822301][T11057] bond6: (slave ip6gretap1): making interface the new active one [ 192.833025][T11057] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 192.852161][T11057] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 192.868175][T11057] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 192.934029][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1419'. [ 193.067384][T11080] netlink: 'syz.4.1421': attribute type 1 has an invalid length. [ 193.078240][T11080] netlink: 'syz.4.1421': attribute type 2 has an invalid length. [ 193.247072][T11085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.364023][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1426'. [ 193.381480][T11097] x_tables: duplicate underflow at hook 1 [ 193.407326][T11097] netlink: 'syz.2.1428': attribute type 23 has an invalid length. [ 193.432349][T11100] netlink: 'syz.0.1429': attribute type 23 has an invalid length. [ 193.548504][ T13] tipc: Subscription rejected, illegal request [ 193.580267][T11107] netlink: 'syz.2.1431': attribute type 32 has an invalid length. [ 193.600385][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1431'. [ 193.662586][T11107] bond7: Setting coupled_control to off (0) [ 194.169705][T11137] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 194.262363][T11137] sctp: [Deprecated]: syz.4.1444 (pid 11137) Use of int in max_burst socket option. [ 194.262363][T11137] Use struct sctp_assoc_value instead [ 194.282309][T11137] sctp: [Deprecated]: syz.4.1444 (pid 11137) Use of int in max_burst socket option. [ 194.282309][T11137] Use struct sctp_assoc_value instead [ 194.309035][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.324192][T11137] sctp: [Deprecated]: syz.4.1444 (pid 11137) Use of int in max_burst socket option. [ 194.324192][T11137] Use struct sctp_assoc_value instead [ 194.341684][T11137] sctp: [Deprecated]: syz.4.1444 (pid 11137) Use of int in max_burst socket option. [ 194.341684][T11137] Use struct sctp_assoc_value instead [ 194.358182][T11137] sctp: [Deprecated]: syz.4.1444 (pid 11137) Use of int in max_burst socket option. [ 194.358182][T11137] Use struct sctp_assoc_value instead [ 194.377528][T11137] sctp: [Deprecated]: syz.4.1444 (pid 11137) Use of int in max_burst socket option. [ 194.377528][T11137] Use struct sctp_assoc_value instead [ 194.395054][T11137] sctp: [Deprecated]: syz.4.1444 (pid 11137) Use of int in max_burst socket option. [ 194.395054][T11137] Use struct sctp_assoc_value instead [ 194.413784][T11137] sctp: [Deprecated]: syz.4.1444 (pid 11137) Use of int in max_burst socket option. [ 194.413784][T11137] Use struct sctp_assoc_value instead [ 194.432356][T11137] sctp: [Deprecated]: syz.4.1444 (pid 11137) Use of int in max_burst socket option. [ 194.432356][T11137] Use struct sctp_assoc_value instead [ 194.448516][T11137] sctp: [Deprecated]: syz.4.1444 (pid 11137) Use of int in max_burst socket option. [ 194.448516][T11137] Use struct sctp_assoc_value instead [ 194.719356][T11164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1449'. [ 196.080011][T11185] netlink: 'syz.1.1453': attribute type 33 has an invalid length. [ 196.110789][T11185] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1453'. [ 196.324867][T11202] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 196.333111][T11202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.390492][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 196.397054][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 196.414378][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 196.563139][T11216] openvswitch: netlink: EtherType 50a is less than min 600 [ 196.628599][T11219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1463'. [ 196.722472][T11222] tipc: Enabling of bearer rejected, failed to enable media [ 196.863414][T11232] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1470'. [ 196.912627][T11232] bond0 (unregistering): left promiscuous mode [ 196.919405][T11232] bond_slave_0: left promiscuous mode [ 196.925087][T11232] bond_slave_1: left promiscuous mode [ 196.933130][T11232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.951013][T11232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.969423][T11232] bond0 (unregistering): Released all slaves [ 197.167096][T11252] syzkaller0: entered promiscuous mode [ 197.173031][T11252] syzkaller0: entered allmulticast mode [ 197.207241][T11254] nbd: couldn't find a device at index 0 [ 197.216480][T11254] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1477'. [ 197.248515][T11254] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 197.417992][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1481'. [ 197.432811][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1482'. [ 197.590604][T11277] netlink: 'syz.2.1483': attribute type 15 has an invalid length. [ 197.604881][T11276] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1484'. [ 197.720395][T11280] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1485'. [ 197.869300][T11292] sctp: [Deprecated]: syz.2.1489 (pid 11292) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.869300][T11292] Use struct sctp_sack_info instead [ 197.955961][T11296] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1489'. [ 197.975811][T11298] sctp: [Deprecated]: syz.1.1491 (pid 11298) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.975811][T11298] Use struct sctp_sack_info instead [ 197.993214][T11295] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1490'. [ 198.049660][T11300] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 198.640798][T11339] veth0: entered promiscuous mode [ 198.863724][T11344] macvtap1: entered promiscuous mode [ 198.882805][T11344] vlan0: entered promiscuous mode [ 198.892029][T11344] macvtap1: entered allmulticast mode [ 198.914689][T11344] vlan0: entered allmulticast mode [ 198.921248][T11344] veth0_vlan: entered allmulticast mode [ 198.953398][T11349] macvtap2: entered promiscuous mode [ 198.962691][T11349] macvtap2: entered allmulticast mode [ 199.398999][T11379] bond4: ARP target 1.0.0.0 is already present [ 199.405214][T11379] bond4: option arp_ip_target: invalid value (1) [ 199.481416][T11379] bond4 (unregistering): Released all slaves [ 199.711215][T11404] netlink: 'syz.4.1520': attribute type 10 has an invalid length. [ 200.125608][T11432] netlink: 'syz.0.1525': attribute type 10 has an invalid length. [ 200.153374][ T36] tipc: Resetting bearer [ 200.252494][T11440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.293261][T11432] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 200.363909][T11441] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 200.415983][T11441] team1: entered promiscuous mode [ 200.438153][T11441] team1: entered allmulticast mode [ 200.581159][T11450] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 200.625595][ T36] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 200.638607][ T36] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 200.674442][ T36] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 200.700403][ T36] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 201.144085][T11486] __nla_validate_parse: 14 callbacks suppressed [ 201.144104][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1538'. [ 201.200183][T11490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.223355][T11490] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1540'. [ 201.423528][T11502] SET target dimension over the limit! [ 201.451029][T11503] SET target dimension over the limit! [ 201.574603][T11511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1547'. [ 201.600216][T11511] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1547'. [ 201.915698][T11525] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.930743][T11526] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 202.060984][T11539] netlink: 'syz.0.1551': attribute type 21 has an invalid length. [ 202.492769][T11541] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:0 [ 202.504946][T11541] IPVS: set_ctl: invalid protocol: 168 172.30.0.2:20001 [ 203.185192][T11539] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1551'. [ 203.241501][T11547] x_tables: duplicate underflow at hook 3 [ 203.384707][T11551] tipc: Enabled bearer , priority 0 [ 203.393068][T11551] syzkaller0: entered promiscuous mode [ 203.399003][T11551] syzkaller0: entered allmulticast mode [ 203.432853][T11556] netlink: 'syz.4.1556': attribute type 10 has an invalid length. [ 203.453119][T11551] tipc: Resetting bearer [ 203.470201][T11551] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1555'. [ 203.480221][T11556] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.521554][T11556] bond0: (slave team0): Enslaving as an active interface with an up link [ 203.544710][T11549] tipc: Resetting bearer [ 203.625766][T11571] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1561'. [ 203.639368][T11549] tipc: Disabling bearer [ 203.928825][T11594] xt_time: unknown flags 0xf4 [ 204.119542][T11610] v: renamed from vlan0 [ 204.439695][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1575'. [ 204.954634][T11644] IPv6: Can't replace route, no match found [ 205.105762][T11655] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1586'. [ 205.769892][T11677] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.1593'. [ 205.788131][T11677] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 206.159329][T11688] __nla_validate_parse: 1 callbacks suppressed [ 206.159347][T11688] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1595'. [ 206.159994][T11694] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1598'. [ 206.220775][T11688] bond8: (slave gre0): Device is not bonding slave [ 206.228298][T11688] bond8: option active_slave: invalid value (gre0) [ 206.249193][T11688] bond8 (unregistering): Released all slaves [ 206.332955][T11705] SET target dimension over the limit! [ 206.333523][T11697] tipc: Started in network mode [ 206.388893][T11697] tipc: Node identity 364593436ef2, cluster identity 4711 [ 206.396361][T11697] tipc: Enabled bearer , priority 0 [ 206.406013][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1600'. [ 206.406242][T11700] syzkaller0: entered promiscuous mode [ 206.448344][T11700] syzkaller0: entered allmulticast mode [ 206.545370][T11701] bond0: (slave bond_slave_1): Releasing backup interface [ 206.594721][T11722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1603'. [ 206.634852][T11721] tipc: Resetting bearer [ 206.660941][T11696] tipc: Resetting bearer [ 206.721207][T11696] tipc: Disabling bearer [ 206.781490][T11734] C: renamed from lo (while UP) [ 207.087646][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1609'. [ 207.526155][T11770] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 207.746692][T11786] tipc: Enabled bearer , priority 0 [ 207.784035][T11786] syzkaller0: entered promiscuous mode [ 207.814100][T11786] syzkaller0: entered allmulticast mode [ 207.874645][T11780] tipc: Resetting bearer [ 207.888621][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1624'. [ 207.926130][T11778] tipc: Resetting bearer [ 207.960337][T11778] tipc: Disabling bearer [ 208.735760][T11831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.982093][T11849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1635'. [ 209.282317][T11860] syzkaller0: entered promiscuous mode [ 209.288996][T11860] syzkaller0: entered allmulticast mode [ 209.327329][T11861] bond8: option lp_interval: invalid value (0) [ 209.334718][T11861] bond8: option lp_interval: allowed values 1 - 2147483647 [ 209.352196][T11861] bond8 (unregistering): Released all slaves [ 209.586637][T11879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1645'. [ 209.602519][T11883] netlink: 'syz.1.1647': attribute type 1 has an invalid length. [ 209.715609][T11887] netlink: 'syz.1.1649': attribute type 1 has an invalid length. [ 209.734891][T11885] tipc: Enabled bearer , priority 0 [ 209.743522][T11885] syzkaller0: entered promiscuous mode [ 209.745126][T11890] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1651'. [ 209.757884][T11885] syzkaller0: entered allmulticast mode [ 209.769750][T11894] netlink: 'syz.2.1650': attribute type 1 has an invalid length. [ 209.793814][T11885] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1648'. [ 209.845521][T11896] netlink: 'syz.3.1648': attribute type 21 has an invalid length. [ 210.070029][T11885] tipc: Resetting bearer [ 210.111915][T11884] tipc: Resetting bearer [ 210.136162][T11915] netlink: 'syz.1.1657': attribute type 2 has an invalid length. [ 210.182446][T11922] netlink: 'syz.2.1658': attribute type 23 has an invalid length. [ 210.192179][T11884] tipc: Disabling bearer [ 210.230118][T11915] netlink: 'syz.1.1657': attribute type 1 has an invalid length. [ 210.245229][T11915] netlink: 'syz.1.1657': attribute type 3 has an invalid length. [ 210.297293][T11915] NCSI netlink: No device for ifindex 813332851 [ 210.441862][T11935] netlink: 'syz.2.1661': attribute type 4 has an invalid length. [ 210.458945][T11938] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 210.486819][T11942] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 210.864005][T11979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.978247][T11986] netlink: 'syz.2.1669': attribute type 11 has an invalid length. [ 211.088426][T11989] macvlan3: entered promiscuous mode [ 211.100636][T11989] macvlan3: entered allmulticast mode [ 211.117731][T11989] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 211.192677][T12001] macvtap3: entered allmulticast mode [ 211.203368][T12001] veth0_macvtap: entered allmulticast mode [ 211.344948][T12006] openvswitch: netlink: Key type 98 is out of range max 32 [ 211.730810][T12037] netlink: 'syz.2.1682': attribute type 13 has an invalid length. [ 211.850887][T12048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.899946][T12037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.915919][T12037] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.928315][T12037] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.008698][T12057] __nla_validate_parse: 10 callbacks suppressed [ 212.008715][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1690'. [ 212.042415][T12057] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1690'. [ 212.146659][T12062] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 212.156977][T12061] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 212.275144][T12081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1692'. [ 212.402051][T12087] x_tables: duplicate underflow at hook 2 [ 212.613465][T12095] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 212.625292][T12095] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 212.655992][T12102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1699'. [ 212.668061][T12106] bond8: (slave bridge4): Enslaving as an active interface with a down link [ 212.772991][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1700'. [ 212.795496][T12111] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1700'. [ 212.953074][T12126] 8021q: VLANs not supported on sit0 [ 213.115755][T12134] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 213.129095][T12134] bond8 (unregistering): Released all slaves [ 213.147625][T12130] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 213.221971][T12133] pim6reg: entered allmulticast mode [ 213.404238][T12161] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1714'. [ 213.419369][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1713'. [ 213.419456][T12162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1713'. [ 213.440657][T12160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1713'. [ 213.454219][T12161] xt_cgroup: path and classid specified [ 213.775450][T12184] syzkaller1: entered promiscuous mode [ 213.781451][T12184] syzkaller1: entered allmulticast mode [ 213.791404][T12184] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 214.334726][T12214] nbd: must specify a size in bytes for the device [ 214.391930][T12214] nbd: must specify a size in bytes for the device [ 214.941527][T12252] syzkaller0: entered promiscuous mode [ 214.947044][T12252] syzkaller0: entered allmulticast mode [ 214.997318][T12252] tipc: Enabled bearer , priority 0 [ 215.025827][T12248] tipc: Resetting bearer [ 215.063629][T12248] tipc: Disabling bearer [ 215.089415][T12266] tipc: Enabling of bearer rejected, failed to enable media [ 215.262105][T12277] validate_nla: 6 callbacks suppressed [ 215.262122][T12277] netlink: 'syz.3.1749': attribute type 1 has an invalid length. [ 215.345750][T12277] 8021q: adding VLAN 0 to HW filter on device bond4 [ 215.364853][T12277] bond4: (slave geneve2): making interface the new active one [ 215.375415][T12277] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 215.944448][T12337] netlink: 'syz.2.1767': attribute type 4 has an invalid length. [ 215.985525][T12336] netlink: 'syz.2.1767': attribute type 4 has an invalid length. [ 216.574266][T12373] syzkaller0: entered promiscuous mode [ 216.580004][T12373] syzkaller0: entered allmulticast mode [ 216.591067][T12384] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 216.600653][T12381] syzkaller1: entered promiscuous mode [ 216.606273][T12381] syzkaller1: entered allmulticast mode [ 218.050650][T12400] __nla_validate_parse: 83 callbacks suppressed [ 218.050668][T12400] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1784'. [ 218.129567][T12410] netlink: 'syz.2.1786': attribute type 10 has an invalid length. [ 218.195147][T12413] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1786'. [ 218.205328][T12413] nbd: couldn't find a device at index 0 [ 218.210235][T12410] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 218.279314][T12410] tipc: Enabling of bearer rejected, failed to enable media [ 218.430979][T12428] xt_CT: You must specify a L4 protocol and not use inversions on it [ 218.572487][T12432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1793'. [ 218.649976][T12438] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1795'. [ 218.667598][T12438] netem: invalid attributes len -24 [ 218.673307][T12438] netem: change failed [ 218.797348][T12442] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1796'. [ 218.982527][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1801'. [ 219.014069][T12457] tipc: Enabled bearer , priority 0 [ 219.026950][T12455] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1801'. [ 219.037676][T12457] syzkaller0: entered promiscuous mode [ 219.047667][T12455] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1801'. [ 219.060393][T12457] syzkaller0: entered allmulticast mode [ 219.151892][T12457] tipc: Resetting bearer [ 219.170165][T12456] tipc: Resetting bearer [ 219.209760][T12456] tipc: Disabling bearer [ 219.253941][T12467] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1803'. [ 219.284961][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1805'. [ 219.451233][T12481] syzkaller0: entered promiscuous mode [ 219.469677][T12481] syzkaller0: entered allmulticast mode [ 219.511673][T12487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.599247][T12491] syzkaller0: entered promiscuous mode [ 219.604770][T12491] syzkaller0: entered allmulticast mode [ 219.887759][T12516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.914910][T12517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.795797][T12573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.861876][T12575] syzkaller0: entered promiscuous mode [ 220.874936][T12575] syzkaller0: entered allmulticast mode [ 220.918860][T12575] netlink: 'syz.3.1837': attribute type 1 has an invalid length. [ 221.135878][T12593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.480244][T12614] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 221.507421][T12617] netlink: 'syz.4.1850': attribute type 4 has an invalid length. [ 221.602899][T12617] x_tables: duplicate underflow at hook 3 [ 222.003846][T12651] syzkaller0: entered promiscuous mode [ 222.030081][T12651] syzkaller0: entered allmulticast mode [ 222.135078][ T5894] IPVS: starting estimator thread 0... [ 222.267909][T12666] IPVS: using max 35 ests per chain, 84000 per kthread [ 222.354663][T12681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.383561][T12685] netlink: 'syz.3.1869': attribute type 23 has an invalid length. [ 222.394186][T12685] netlink: 'syz.3.1869': attribute type 23 has an invalid length. [ 222.427067][T12685] netlink: 'syz.3.1869': attribute type 23 has an invalid length. [ 222.457747][T12685] netlink: 'syz.3.1869': attribute type 23 has an invalid length. [ 222.490548][T12685] netlink: 'syz.3.1869': attribute type 23 has an invalid length. [ 222.500135][T12685] netlink: 'syz.3.1869': attribute type 23 has an invalid length. [ 222.510489][T12685] netlink: 'syz.3.1869': attribute type 23 has an invalid length. [ 222.525041][T12685] netlink: 'syz.3.1869': attribute type 23 has an invalid length. [ 222.541580][T12696] veth0_to_bond: entered allmulticast mode [ 222.644804][ T2983] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.668074][ T2983] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.711711][ T2983] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.736783][ T2983] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.761923][T12701] tipc: Enabled bearer , priority 0 [ 222.771036][T12701] syzkaller0: entered promiscuous mode [ 222.776544][T12701] syzkaller0: entered allmulticast mode [ 222.812420][T12701] tipc: Resetting bearer [ 222.826753][T12710] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 (while UP) [ 222.869805][T12701] tipc: Resetting bearer [ 222.893722][T12701] tipc: Disabling bearer [ 223.175683][T12730] tipc: Enabled bearer , priority 0 [ 223.290926][T12730] syzkaller0: entered promiscuous mode [ 223.296467][T12730] syzkaller0: entered allmulticast mode [ 223.326621][T12730] tipc: Resetting bearer [ 223.434378][ T9474] tipc: Resetting bearer [ 223.519792][T12724] tipc: Resetting bearer [ 223.966870][T12775] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.096984][T12724] tipc: Disabling bearer [ 225.112654][T12777] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 225.113596][T12779] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 225.203244][T12800] __nla_validate_parse: 53 callbacks suppressed [ 225.203265][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1901'. [ 225.243774][T12800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1901'. [ 225.314325][T12809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1904'. [ 225.340535][T12808] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1904'. [ 225.358053][T12808] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1904'. [ 225.451740][T12816] IPVS: set_ctl: invalid protocol: 57 172.30.0.3:20002 [ 225.591166][T12831] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1911'. [ 225.606401][T12823] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1909'. [ 225.616223][T12831] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1911'. [ 225.943854][T12858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1920'. [ 225.946183][T12857] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1919'. [ 225.964345][T12858] gtp0: entered promiscuous mode [ 225.969621][T12858] gtp0: entered allmulticast mode [ 226.062585][T12866] team0: Device gtp1 is of different type [ 226.390893][T12881] sctp: [Deprecated]: syz.1.1927 (pid 12881) Use of int in maxseg socket option. [ 226.390893][T12881] Use struct sctp_assoc_value instead [ 226.503924][T12881] validate_nla: 35 callbacks suppressed [ 226.503943][T12881] netlink: 'syz.1.1927': attribute type 7 has an invalid length. [ 226.564921][T12894] netlink: 'syz.4.1930': attribute type 64 has an invalid length. [ 226.596093][T12896] lo: entered allmulticast mode [ 226.715058][T12898] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20000 [ 227.105731][T12935] IPVS: set_ctl: invalid protocol: 108 172.30.1.2:20004 [ 227.238671][T12943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.539415][T12942] netlink: 'syz.1.1949': attribute type 12 has an invalid length. [ 227.933419][T12988] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 228.066028][T13001] netlink: 'syz.3.1963': attribute type 1 has an invalid length. [ 228.603969][T13042] tipc: Cannot configure node identity twice [ 228.610936][T13042] tipc: Cannot configure node identity twice [ 228.723423][T13050] xt_addrtype: ipv6 does not support BROADCAST matching [ 228.870513][T13058] netlink: 'syz.1.1980': attribute type 1 has an invalid length. [ 228.962064][T13058] 8021q: adding VLAN 0 to HW filter on device bond4 [ 228.972207][T13058] bond0: (slave bond4): making interface the new active one [ 228.981525][T13058] bond0: (slave bond4): Enslaving as an active interface with an up link [ 229.404984][T13094] netlink: 'syz.4.1989': attribute type 1 has an invalid length. [ 229.590632][T13104] x_tables: duplicate underflow at hook 1 [ 229.668411][T13114] x_tables: duplicate underflow at hook 1 [ 229.732734][T13124] netlink: 'syz.3.1998': attribute type 1 has an invalid length. [ 229.796816][T13128] veth0_to_bond: entered allmulticast mode [ 230.236179][T13157] syzkaller0: entered allmulticast mode [ 231.042610][T13211] netlink: 'syz.2.2021': attribute type 1 has an invalid length. [ 231.102519][T13217] __nla_validate_parse: 18 callbacks suppressed [ 231.102536][T13217] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2021'. [ 231.141484][T13211] gretap2: entered promiscuous mode [ 231.466236][T13241] netlink: 'syz.2.2031': attribute type 16 has an invalid length. [ 231.477536][T13242] netlink: 'syz.2.2031': attribute type 16 has an invalid length. [ 231.485655][T13242] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2031'. [ 231.495217][T13241] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2031'. [ 232.050163][T13274] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2038'. [ 232.061391][T13275] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2038'. [ 232.090675][T13277] ip6gre2: entered promiscuous mode [ 232.096024][T13277] ip6gre2: entered allmulticast mode [ 232.108687][T13277] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2039'. [ 232.166606][T13281] netlink: 'syz.0.2040': attribute type 11 has an invalid length. [ 232.311813][T13291] netlink: 45 bytes leftover after parsing attributes in process `syz.3.2041'. [ 232.323236][T13289] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2043'. [ 232.544796][T13305] xt_HMARK: proto mask must be zero with L3 mode [ 232.570472][T13305] xt_CT: You must specify a L4 protocol and not use inversions on it [ 232.754467][T13325] x_tables: duplicate underflow at hook 3 [ 232.833656][T13328] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2054'. [ 232.853028][T13328] vlan1: entered allmulticast mode [ 232.861745][T13328] erspan0: entered allmulticast mode [ 232.886384][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.895908][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.908799][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.910774][T13333] tipc: Enabled bearer , priority 0 [ 232.928593][T13334] syzkaller0: entered promiscuous mode [ 232.934096][T13334] syzkaller0: entered allmulticast mode [ 232.962838][T13333] tipc: Enabling of bearer rejected, already enabled [ 232.998424][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.047598][T13345] sctp_getsockopt_maxburst: 23 callbacks suppressed [ 233.047618][T13345] sctp: [Deprecated]: syz.3.2059 (pid 13345) Use of int in max_burst socket option. [ 233.047618][T13345] Use struct sctp_assoc_value instead [ 233.089328][T13333] tipc: Resetting bearer [ 233.139538][T13333] tipc: Disabling bearer [ 233.218262][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.329959][T13359] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 233.628111][T13372] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2067'. [ 233.840934][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.250762][T13374] nbd: illegal input index 2958377 [ 234.306082][T13376] validate_nla: 2 callbacks suppressed [ 234.306101][T13376] netlink: 'syz.0.2069': attribute type 21 has an invalid length. [ 234.747141][T13380] netlink: 'syz.2.2070': attribute type 11 has an invalid length. [ 234.759720][T13380] netlink: 'syz.2.2070': attribute type 11 has an invalid length. [ 234.835924][T13376] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 234.861390][T13376] bond4 (unregistering): Released all slaves [ 234.915717][T13377] erspan0: entered promiscuous mode [ 235.683265][T13452] x_tables: duplicate underflow at hook 3 [ 235.894180][T13463] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 235.914242][T13463] bond4 (unregistering): Released all slaves [ 236.043923][T13475] IPv6: addrconf: prefix option has invalid lifetime [ 236.135576][T13477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.232792][T13479] bond6: option min_links: invalid value (18446744073709551614) [ 236.245033][T13482] __nla_validate_parse: 13 callbacks suppressed [ 236.245054][T13482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2100'. [ 236.262436][T13479] bond6: option min_links: allowed values 0 - 2147483647 [ 236.272310][T13479] bond6 (unregistering): Released all slaves [ 236.389792][T13484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2101'. [ 236.453518][T13489] netem: incorrect ge model size [ 236.458965][T13489] netem: change failed [ 236.491739][T13489] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 236.613965][T13495] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2104'. [ 236.799901][T13503] tipc: Enabled bearer , priority 0 [ 236.811287][T13503] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 236.844145][T13503] tipc: Resetting bearer [ 236.909548][T13502] tipc: Disabling bearer [ 237.108438][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.311364][T13538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2114'. [ 237.419805][T13540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2116'. [ 237.444210][T13540] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2116'. [ 237.598232][T13546] netlink: 'syz.1.2118': attribute type 1 has an invalid length. [ 237.643196][T13546] netlink: 'syz.1.2118': attribute type 10 has an invalid length. [ 237.688386][T13555] tipc: Enabling of bearer rejected, media not registered [ 238.060619][T13575] veth3: entered promiscuous mode [ 238.136880][T13566] veth5: entered promiscuous mode [ 238.182106][T13566] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 238.202102][T13566] bond4 (unregistering): Released all slaves [ 238.244144][T13590] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2129'. [ 238.253664][T13591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2128'. [ 238.270826][T13590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2129'. [ 238.455742][T13603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2134'. [ 238.510076][T13605] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 238.518227][T13603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.522969][T13605] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 238.613935][T13615] xt_HMARK: proto mask must be zero with L3 mode [ 238.825896][T13623] netlink: 'syz.3.2136': attribute type 1 has an invalid length. [ 238.837502][T13629] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 238.961579][T13638] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20003 [ 239.027535][T13642] netlink: 'syz.1.2146': attribute type 2 has an invalid length. [ 239.259595][T13668] netlink: 'syz.1.2154': attribute type 1 has an invalid length. [ 239.366265][T13669] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 239.378844][T13669] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 239.419174][T13680] xt_CONNSECMARK: invalid mode: 0 [ 239.420317][T13668] gretap2: entered promiscuous mode [ 239.431266][T13681] xt_CONNSECMARK: invalid mode: 0 [ 239.441016][T13668] bond6: (slave gretap2): making interface the new active one [ 239.451334][T13668] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 239.496925][T13668] macvlan3: entered promiscuous mode [ 239.532387][T13668] macvlan3: entered allmulticast mode [ 239.549048][T13668] bond6: entered promiscuous mode [ 239.555057][T13668] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 239.582100][T13668] bond6: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 239.598807][T13668] bond6: left promiscuous mode [ 239.861696][T13708] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 239.935989][T13720] veth0: entered promiscuous mode [ 240.014027][T13720] veth0: left promiscuous mode [ 240.112513][T13728] veth5: entered promiscuous mode [ 240.668154][T13773] netlink: 'syz.1.2186': attribute type 2 has an invalid length. [ 240.676222][T13773] netlink: 'syz.1.2186': attribute type 1 has an invalid length. [ 240.697614][T13777] netlink: 'syz.0.2185': attribute type 1 has an invalid length. [ 240.709371][T13773] netlink: 'syz.1.2186': attribute type 2 has an invalid length. [ 240.713622][T13777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.726101][T13773] netlink: 'syz.1.2186': attribute type 2 has an invalid length. [ 240.726119][T13773] netlink: 'syz.1.2186': attribute type 2 has an invalid length. [ 240.956778][T13796] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 240.994313][ T10] hid-generic 0005:0002:5508.0002: item fetching failed at offset 3/4 [ 241.004927][ T10] hid-generic 0005:0002:5508.0002: probe with driver hid-generic failed with error -22 [ 241.114041][T13808] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 241.127463][T13808] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 241.488169][T13831] xt_hashlimit: size too large, truncated to 1048576 [ 241.531439][T13839] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.666535][T13847] xt_limit: Overflow, try lower: 271964/0 [ 241.684347][T13847] __nla_validate_parse: 9 callbacks suppressed [ 241.684365][T13847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2209'. [ 241.755270][T13849] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 241.778302][T13851] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 241.966554][T13863] netlink: 'syz.1.2215': attribute type 1 has an invalid length. [ 241.986589][T13865] tipc: Enabling of bearer rejected, failed to enable media [ 242.066743][T13869] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2217'. [ 242.092514][T13875] netlink: 'syz.3.2219': attribute type 11 has an invalid length. [ 242.101867][T13875] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2219'. [ 242.146453][T13863] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2215'. [ 242.191573][T13873] veth3: entered promiscuous mode [ 242.197158][T13880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2219'. [ 242.353408][T13891] netlink: 'syz.2.2223': attribute type 4 has an invalid length. [ 242.362367][T13890] netlink: 'syz.2.2223': attribute type 4 has an invalid length. [ 242.391596][T13890] netlink: 'syz.2.2223': attribute type 4 has an invalid length. [ 242.534204][T13902] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2226'. [ 242.953968][T13914] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2230'. [ 243.002841][T13914] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 243.021872][T13914] 0ªî{X¹¦: entered allmulticast mode [ 243.027504][T13914] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 243.041791][T13919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2230'. [ 243.444130][T13946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.444194][T13944] netem: change failed [ 243.509618][T13941] tipc: New replicast peer: 255.255.255.255 [ 243.518990][T13941] tipc: Enabled bearer , priority 10 [ 243.525829][T13941] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2236'. [ 243.570701][T13955] netlink: 'syz.0.2241': attribute type 11 has an invalid length. [ 243.579177][T13955] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.2241'. [ 243.898147][T13990] nbd: socks must be embedded in a SOCK_ITEM attr [ 244.508245][T14029] xt_hashlimit: size too large, truncated to 1048576 [ 244.720575][T14035] syzkaller0: entered promiscuous mode [ 244.746839][T14035] syzkaller0: entered allmulticast mode [ 245.509644][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.649645][T14055] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 246.658315][T14060] gretap0: refused to change device tx_queue_len [ 246.674013][T14060] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 246.720869][T14069] tipc: Enabling of bearer rejected, failed to enable media [ 246.767407][T14091] __nla_validate_parse: 5 callbacks suppressed [ 246.767423][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2276'. [ 246.768616][T14089] xt_hashlimit: size too large, truncated to 1048576 [ 246.960343][T14099] bridge0: port 1(batadv1) entered blocking state [ 246.966922][T14099] bridge0: port 1(batadv1) entered disabled state [ 247.008174][T14099] batadv1: entered allmulticast mode [ 247.020060][T14099] batadv1: entered promiscuous mode [ 247.052630][T14106] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2281'. [ 247.157453][T14109] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 247.316518][T14124] xt_l2tp: invalid flags combination: 8 [ 247.360186][T14128] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2286'. [ 247.383526][T14128] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2286'. [ 247.394127][T14127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2287'. [ 247.422405][T14127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2287'. [ 247.432409][ T9474] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 247.441333][T14138] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2290'. [ 247.442051][ T9474] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 247.458025][T14139] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2290'. [ 247.612400][T14147] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2292'. [ 247.660315][T14147] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 247.938270][T14170] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2294'. [ 247.975908][T14170] openvswitch: netlink: Flow key attr not present in new flow. [ 248.247158][T14182] validate_nla: 2 callbacks suppressed [ 248.247177][T14182] netlink: 'syz.3.2298': attribute type 1 has an invalid length. [ 249.663149][T14201] netlink: 'syz.3.2302': attribute type 1 has an invalid length. [ 249.850426][T14203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.075819][T14219] netlink: 'syz.3.2309': attribute type 1 has an invalid length. [ 250.167166][T14219] 8021q: adding VLAN 0 to HW filter on device bond6 [ 250.222299][T14225] veth5: entered promiscuous mode [ 250.235723][T14225] bond6: (slave veth5): Enslaving as an active interface with an up link [ 250.246349][T14227] netlink: 'syz.1.2311': attribute type 21 has an invalid length. [ 250.259591][T14230] syzkaller0: entered promiscuous mode [ 250.265236][T14230] syzkaller0: entered allmulticast mode [ 250.276885][T14227] netlink: 'syz.1.2311': attribute type 21 has an invalid length. [ 250.289665][T14230] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 250.679542][T14258] xt_NFQUEUE: number of queues (16) out of range (got 65549) [ 250.857557][T14263] can: request_module (can-proto-4) failed. [ 251.165623][T14300] netlink: 'syz.3.2332': attribute type 1 has an invalid length. [ 251.300874][T14306] syzkaller0: create flow: hash 1211370527 index 2 [ 251.451857][ T3006] syzkaller0: tun_net_xmit 76 [ 251.461371][ T3006] syzkaller0: tun_net_xmit 48 [ 251.474896][T14298] syzkaller0: delete flow: hash 1211370527 index 2 [ 251.478317][ T49] syzkaller0: tun_net_xmit 76 [ 252.128077][T14345] __nla_validate_parse: 15 callbacks suppressed [ 252.128095][T14345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2346'. [ 252.144835][T14345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2346'. [ 253.305242][T14359] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 253.336532][T14360] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 253.640799][T14381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2355'. [ 253.674158][T14381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2355'. [ 253.683693][T14381] netlink: 'syz.2.2355': attribute type 14 has an invalid length. [ 253.692616][T14381] netlink: 'syz.2.2355': attribute type 13 has an invalid length. [ 253.775750][T14383] netlink: 'syz.3.2357': attribute type 29 has an invalid length. [ 253.789214][T14383] netlink: 'syz.3.2357': attribute type 29 has an invalid length. [ 253.813443][T14383] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2357'. [ 254.199384][T14409] bridge6: entered promiscuous mode [ 254.217280][T14409] bridge6: entered allmulticast mode [ 254.668586][T14442] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2370'. [ 254.738751][T14447] netlink: 'syz.1.2372': attribute type 24 has an invalid length. [ 254.809376][T14450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2373'. [ 254.844264][T14453] syz.0.2374 (14453) used obsolete PPPIOCDETACH ioctl [ 254.851072][T14448] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 254.865743][T14454] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2372'. [ 254.981748][T14450] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2373'. [ 255.010216][T14463] netlink: 'syz.3.2377': attribute type 23 has an invalid length. [ 255.046404][T14466] netlink: 'syz.1.2376': attribute type 10 has an invalid length. [ 255.063736][T14469] netlink: 'syz.4.2379': attribute type 8 has an invalid length. [ 255.072624][T14469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2379'. [ 255.125564][T14469] bond0: entered promiscuous mode [ 255.148413][T14469] bond_slave_0: entered promiscuous mode [ 255.157588][T14469] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 255.184891][T14469] team0: entered promiscuous mode [ 255.210780][T14469] team_slave_0: entered promiscuous mode [ 255.216747][T14469] team_slave_1: entered promiscuous mode [ 255.226900][T14469] gretap0: entered promiscuous mode [ 255.237068][T14469] bond0: left promiscuous mode [ 255.242833][T14469] bond_slave_0: left promiscuous mode [ 255.250238][T14469] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 255.257568][T14469] team0: left promiscuous mode [ 255.263278][T14469] team_slave_0: left promiscuous mode [ 255.272912][T14469] team_slave_1: left promiscuous mode [ 255.283552][T14469] gretap0: left promiscuous mode [ 255.329157][T14482] !€ÿ: renamed from bond_slave_0 [ 255.494552][T14492] netlink: 'syz.2.2384': attribute type 1 has an invalid length. [ 255.514771][T14492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.714995][T14499] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 255.979911][T14518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.013485][T14518] bond0: (slave rose0): Enslaving as an active interface with an up link [ 256.381711][T14542] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 257.461639][T14612] Unsupported ieee802154 address type: 0 [ 257.865088][T14638] __nla_validate_parse: 8 callbacks suppressed [ 257.865107][T14638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2422'. [ 258.045621][T14652] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2426'. [ 258.077393][T14655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2424'. [ 258.079229][T14652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2426'. [ 258.119591][T14658] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2426'. [ 258.222707][T14662] nbd: couldn't find device at index 0 [ 258.267032][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2429'. [ 258.292714][T14662] netlink: 'syz.0.2428': attribute type 1 has an invalid length. [ 258.311501][T14662] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 258.368710][T14671] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2430'. [ 258.466297][T14671] bond7 (unregistering): Released all slaves [ 258.589126][T14685] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 258.914849][T14704] netlink: 'syz.2.2436': attribute type 1 has an invalid length. [ 259.184812][T14685] veth0_to_bond: left allmulticast mode [ 259.297249][T14685] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 259.321158][T14698] netlink: 'syz.2.2436': attribute type 2 has an invalid length. [ 259.635305][T14729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2440'. [ 259.647721][T14729] block nbd1: Unsupported socket: should be TCP or UNIX. [ 259.756347][T14734] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2443'. [ 259.775136][T14736] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 259.863012][T14741] netlink: 'syz.1.2446': attribute type 9 has an invalid length. [ 260.165142][T14771] tipc: Enabling of bearer rejected, failed to enable media [ 260.236832][T14771] tipc: Enabling of bearer rejected, failed to enable media [ 260.459292][T14788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2459'. [ 260.500601][T14788] bond0: entered promiscuous mode [ 260.516205][T14788] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 260.524119][T14788] geneve1: entered promiscuous mode [ 260.531333][T14788] gretap0: entered promiscuous mode [ 260.539342][T14788] debugfs: 'hsr1' already exists in 'hsr' [ 260.545122][T14788] Cannot create hsr debugfs directory [ 260.557255][T14788] hsr1: entered promiscuous mode [ 260.748100][T14818] sctp: [Deprecated]: syz.0.2468 (pid 14818) Use of int in maxseg socket option. [ 260.748100][T14818] Use struct sctp_assoc_value instead [ 260.909381][T14826] netlink: 'syz.2.2470': attribute type 4 has an invalid length. [ 260.962536][T14832] xt_hashlimit: invalid interval [ 260.973420][T14830] syzkaller1: entered promiscuous mode [ 260.998009][T14830] syzkaller1: entered allmulticast mode [ 261.507955][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.710829][T14890] netlink: 'syz.2.2489': attribute type 1 has an invalid length. [ 261.894959][T14890] bond10: entered promiscuous mode [ 261.912146][T14890] macvlan3: entered promiscuous mode [ 261.932169][T14890] macvlan3: entered allmulticast mode [ 261.950595][T14890] bond10: entered allmulticast mode [ 261.966463][T14890] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 261.984653][T14890] bond10: left promiscuous mode [ 262.265371][T14921] bond10: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 262.285954][T14921] bond10 (unregistering): Released all slaves [ 262.616462][T14956] syzkaller1: entered promiscuous mode [ 262.665669][T14956] syzkaller1: entered allmulticast mode [ 262.737326][T14968] netlink: 'syz.0.2510': attribute type 10 has an invalid length. [ 263.106527][T14990] __nla_validate_parse: 13 callbacks suppressed [ 263.106544][T14990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2519'. [ 263.266554][T14996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2521'. [ 263.362518][T14980] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 263.438178][T15010] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2522'. [ 263.597437][T15018] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2524'. [ 263.621798][T15019] ip6t_srh: unknown srh match flags 5F28 [ 263.724544][T15022] syzkaller1: entered promiscuous mode [ 263.747513][T15022] syzkaller1: entered allmulticast mode [ 263.961069][T15044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2533'. [ 263.997706][T15046] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 264.016001][T15050] netlink: 'syz.3.2535': attribute type 1 has an invalid length. [ 264.076915][T15052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2536'. [ 264.092831][T15052] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2536'. [ 264.295318][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2540'. [ 264.340631][T15070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2541'. [ 264.417244][T15074] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2543'. [ 264.432872][T15074] unsupported nla_type 194 [ 264.793143][T15099] veth7: entered allmulticast mode [ 264.802700][T15098] tipc: Enabled bearer , priority 0 [ 264.819215][T15098] syzkaller0: entered promiscuous mode [ 264.832657][T15098] syzkaller0: entered allmulticast mode [ 264.880919][T15098] tipc: Resetting bearer [ 264.903205][T15109] netlink: 'syz.1.2556': attribute type 8 has an invalid length. [ 264.910289][T15111] netlink: 'syz.4.2558': attribute type 4 has an invalid length. [ 264.917359][T15109] bond0: entered promiscuous mode [ 264.925032][T15109] bond4: entered promiscuous mode [ 264.932708][T15109] bond0: left promiscuous mode [ 264.937593][T15109] bond4: left promiscuous mode [ 264.957176][T15097] tipc: Resetting bearer [ 264.977044][T15119] netlink: 'syz.4.2558': attribute type 4 has an invalid length. [ 265.011204][T15097] tipc: Disabling bearer [ 265.707993][T15122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.749623][T15122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.857518][T15122] tipc: Resetting bearer [ 266.153546][T15122] vlan0: left allmulticast mode [ 266.158655][T15122] veth0_vlan: left allmulticast mode [ 266.163954][T15122] vlan0: left promiscuous mode [ 266.229640][ T13] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.274717][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.314160][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 266.348010][ T13] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.383112][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.437934][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 266.481856][ T13] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.482204][T15163] netlink: 'syz.2.2566': attribute type 21 has an invalid length. [ 266.517397][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.541812][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 266.572820][ T13] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.610163][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.642540][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 266.949322][T15188] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 267.791168][T15256] IPVS: set_ctl: invalid protocol: 46 172.20.20.56:20004 [ 268.101583][T15277] tipc: Enabled bearer , priority 0 [ 268.155037][T15284] __nla_validate_parse: 13 callbacks suppressed [ 268.155055][T15284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2611'. [ 268.172890][T15284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2611'. [ 268.192965][T15274] tipc: Disabling bearer [ 268.198106][T15285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2610'. [ 268.212358][T15286] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2609'. [ 268.223143][T15285] 8021q: VLANs not supported on ipvlan1 [ 268.341244][T15291] netlink: 'syz.1.2613': attribute type 1 has an invalid length. [ 268.656532][T15316] dvmrp0: entered allmulticast mode [ 268.780377][T15326] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 268.826778][T15326] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 268.839029][T15330] syzkaller0: entered promiscuous mode [ 268.844539][T15330] syzkaller0: entered allmulticast mode [ 268.873006][T15330] netlink: 'syz.2.2627': attribute type 12 has an invalid length. [ 268.881218][T15330] netlink: 'syz.2.2627': attribute type 29 has an invalid length. [ 268.889700][T15330] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2627'. [ 268.922990][T15330] netlink: 59 bytes leftover after parsing attributes in process `syz.2.2627'. [ 268.966370][T15330] tipc: Enabled bearer , priority 0 [ 268.979389][T15342] netlink: 'syz.1.2630': attribute type 1 has an invalid length. [ 268.992847][T15329] tipc: Resetting bearer [ 269.032810][T15329] tipc: Disabling bearer [ 269.542646][T15385] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2645'. [ 269.556622][T15385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2645'. [ 269.681683][T15397] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2648'. [ 269.684471][T15385] syzkaller0: entered promiscuous mode [ 269.697664][T15385] syzkaller0: entered allmulticast mode [ 271.252856][T15425] pim6reg: entered allmulticast mode [ 271.258744][T15427] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2655'. [ 271.308289][T15430] bridge_slave_0: entered allmulticast mode [ 271.320343][T15425] netlink: 'syz.4.2653': attribute type 10 has an invalid length. [ 271.369248][T15425] bond0: (slave netdevsim0): Releasing backup interface [ 271.415972][T15425] batman_adv: batadv0: Adding interface: netdevsim0 [ 271.425911][T15425] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.454116][T15425] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 271.524963][T15441] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 271.593718][T15429] bridge_slave_0: left allmulticast mode [ 271.724568][T15464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.934908][T15479] geneve4: entered promiscuous mode [ 271.951454][T15479] geneve4: entered allmulticast mode [ 271.971240][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.009243][T15478] syzkaller0: entered promiscuous mode [ 272.032084][T15478] syzkaller0: entered allmulticast mode [ 272.047256][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.094545][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.116355][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.159849][T15492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.169277][T15492] [ 272.171623][T15492] ====================================================== [ 272.178638][T15492] WARNING: possible circular locking dependency detected [ 272.185673][T15492] syzkaller #0 Not tainted [ 272.190071][T15492] ------------------------------------------------------ [ 272.197071][T15492] syz.1.2669/15492 is trying to acquire lock: [ 272.203131][T15492] ffff888059fb9218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x22b7/0x3b50 [ 272.215304][T15492] [ 272.215304][T15492] but task is already holding lock: [ 272.222650][T15492] ffff888026715958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 272.232482][T15492] [ 272.232482][T15492] which lock already depends on the new lock. [ 272.232482][T15492] [ 272.242871][T15492] [ 272.242871][T15492] the existing dependency chain (in reverse order) is: [ 272.251870][T15492] [ 272.251870][T15492] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 272.260120][T15492] lock_acquire+0x120/0x360 [ 272.265135][T15492] _raw_spin_lock+0x2e/0x40 [ 272.270150][T15492] sch_direct_xmit+0x153/0x4b0 [ 272.275422][T15492] __dev_queue_xmit+0x1857/0x3b50 [ 272.280957][T15492] ip6_finish_output2+0xfb3/0x1480 [ 272.286585][T15492] ip6_output+0x340/0x550 [ 272.291423][T15492] NF_HOOK+0x9e/0x380 [ 272.295914][T15492] mld_sendpack+0x8d4/0xe60 [ 272.300937][T15492] mld_ifc_work+0x83e/0xd60 [ 272.305952][T15492] process_scheduled_works+0xae1/0x17b0 [ 272.312007][T15492] worker_thread+0x8a0/0xda0 [ 272.317103][T15492] kthread+0x711/0x8a0 [ 272.321681][T15492] ret_from_fork+0x4bc/0x870 [ 272.326779][T15492] ret_from_fork_asm+0x1a/0x30 [ 272.332049][T15492] [ 272.332049][T15492] -> #0 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}: [ 272.342382][T15492] validate_chain+0xb9b/0x2140 [ 272.347656][T15492] __lock_acquire+0xab9/0xd20 [ 272.352836][T15492] lock_acquire+0x120/0x360 [ 272.357842][T15492] _raw_spin_lock+0x2e/0x40 [ 272.362854][T15492] __dev_queue_xmit+0x22b7/0x3b50 [ 272.368384][T15492] ip6_finish_output2+0xfb3/0x1480 [ 272.374004][T15492] ip6_output+0x340/0x550 [ 272.378845][T15492] ip6_send_skb+0x1d5/0x390 [ 272.383860][T15492] icmp6_send+0x12c6/0x1940 [ 272.388865][T15492] ip6_link_failure+0x3b/0x4c0 [ 272.394132][T15492] ip_tunnel_xmit+0x175b/0x2390 [ 272.399493][T15492] __gre_xmit+0x19a/0x240 [ 272.404327][T15492] erspan_xmit+0xa04/0x1220 [ 272.409337][T15492] dev_hard_start_xmit+0x2d7/0x830 [ 272.414956][T15492] sch_direct_xmit+0x241/0x4b0 [ 272.420226][T15492] __qdisc_run+0xaa0/0x1540 [ 272.425235][T15492] __dev_queue_xmit+0x1056/0x3b50 [ 272.430766][T15492] ip6_finish_output2+0xfb3/0x1480 [ 272.436394][T15492] ip6_output+0x340/0x550 [ 272.441229][T15492] ip6_send_skb+0x1d5/0x390 [ 272.446239][T15492] udp_v6_send_skb+0xc17/0x1830 [ 272.451598][T15492] udpv6_sendmsg+0x1d62/0x2510 [ 272.456881][T15492] __sock_sendmsg+0xe5/0x270 [ 272.461996][T15492] ____sys_sendmsg+0x52d/0x830 [ 272.467284][T15492] ___sys_sendmsg+0x21f/0x2a0 [ 272.472471][T15492] __sys_sendmmsg+0x227/0x430 [ 272.477656][T15492] __x64_sys_sendmmsg+0xa0/0xc0 [ 272.483047][T15492] do_syscall_64+0xfa/0xfa0 [ 272.488119][T15492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.494516][T15492] [ 272.494516][T15492] other info that might help us debug this: [ 272.494516][T15492] [ 272.504746][T15492] Possible unsafe locking scenario: [ 272.504746][T15492] [ 272.512178][T15492] CPU0 CPU1 [ 272.517527][T15492] ---- ---- [ 272.522872][T15492] lock(&qdisc_xmit_lock_key#4); [ 272.527892][T15492] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 272.537523][T15492] lock(&qdisc_xmit_lock_key#4); [ 272.545110][T15492] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 272.552211][T15492] [ 272.552211][T15492] *** DEADLOCK *** [ 272.552211][T15492] [ 272.560336][T15492] 9 locks held by syz.1.2669/15492: [ 272.565517][T15492] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_send_skb+0x10f/0x390 [ 272.574821][T15492] #1: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 272.583864][T15492] #2: ffffffff8df3d700 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 272.593780][T15492] #3: ffff888026715958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 272.604040][T15492] #4: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: icmp6_send+0x1e9/0x1940 [ 272.613166][T15492] #5: ffff88802f120a20 (k-slock-AF_INET6){+.-.}-{3:3}, at: icmp6_send+0xc5c/0x1940 [ 272.622550][T15492] #6: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_send_skb+0x10f/0x390 [ 272.631768][T15492] #7: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 272.640810][T15492] #8: ffffffff8df3d700 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 272.650743][T15492] [ 272.650743][T15492] stack backtrace: [ 272.656617][T15492] CPU: 1 UID: 0 PID: 15492 Comm: syz.1.2669 Not tainted syzkaller #0 PREEMPT(full) [ 272.656633][T15492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 272.656653][T15492] Call Trace: [ 272.656660][T15492] [ 272.656667][T15492] dump_stack_lvl+0x189/0x250 [ 272.656687][T15492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.656704][T15492] ? __pfx__printk+0x10/0x10 [ 272.656719][T15492] ? print_lock_name+0xde/0x100 [ 272.656732][T15492] print_circular_bug+0x2ee/0x310 [ 272.656750][T15492] check_noncircular+0x134/0x160 [ 272.656768][T15492] validate_chain+0xb9b/0x2140 [ 272.656790][T15492] __lock_acquire+0xab9/0xd20 [ 272.656806][T15492] ? __dev_queue_xmit+0x22b7/0x3b50 [ 272.656820][T15492] lock_acquire+0x120/0x360 [ 272.656832][T15492] ? __dev_queue_xmit+0x22b7/0x3b50 [ 272.656847][T15492] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 272.656864][T15492] ? check_noncircular+0xe0/0x160 [ 272.656880][T15492] _raw_spin_lock+0x2e/0x40 [ 272.656896][T15492] ? __dev_queue_xmit+0x22b7/0x3b50 [ 272.656910][T15492] __dev_queue_xmit+0x22b7/0x3b50 [ 272.656928][T15492] ? __dev_queue_xmit+0x27b/0x3b50 [ 272.656946][T15492] ? neigh_resolve_output+0x438/0x750 [ 272.656965][T15492] ? __pfx___dev_queue_xmit+0x10/0x10 [ 272.656979][T15492] ? read_seqbegin+0x122/0x250 [ 272.656996][T15492] ? neigh_resolve_output+0x438/0x750 [ 272.657012][T15492] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.657030][T15492] ? read_seqbegin+0x1ac/0x250 [ 272.657051][T15492] ? __pfx_read_seqbegin+0x10/0x10 [ 272.657067][T15492] ? __local_bh_enable_ip+0x12d/0x1c0 [ 272.657081][T15492] ? eth_header+0x11b/0x200 [ 272.657095][T15492] ? __asan_memcpy+0x40/0x70 [ 272.657120][T15492] ip6_finish_output2+0xfb3/0x1480 [ 272.657144][T15492] ? __pfx_ip6_finish_output2+0x10/0x10 [ 272.657162][T15492] ? ip6_mtu+0x7d/0x490 [ 272.657177][T15492] ? ip6_mtu+0x38c/0x490 [ 272.657193][T15492] ? ip6_finish_output+0x2ef/0x4e0 [ 272.657209][T15492] ? ip6_output+0x126/0x550 [ 272.657225][T15492] ip6_output+0x340/0x550 [ 272.657241][T15492] ? ip6_send_skb+0x10f/0x390 [ 272.657258][T15492] ip6_send_skb+0x1d5/0x390 [ 272.657277][T15492] icmp6_send+0x12c6/0x1940 [ 272.657291][T15492] ? icmp6_send+0x1e9/0x1940 [ 272.657310][T15492] ? __pfx_icmp6_send+0x10/0x10 [ 272.657322][T15492] ? __lock_acquire+0xab9/0xd20 [ 272.657341][T15492] ? ip6_neigh_lookup+0x14e/0x470 [ 272.657355][T15492] ? ip6_neigh_lookup+0x14e/0x470 [ 272.657368][T15492] ? ip6_neigh_lookup+0x397/0x470 [ 272.657381][T15492] ? ip6_neigh_lookup+0x14e/0x470 [ 272.657395][T15492] ? __pfx_ip6_neigh_lookup+0x10/0x10 [ 272.657410][T15492] ip6_link_failure+0x3b/0x4c0 [ 272.657425][T15492] ip_tunnel_xmit+0x175b/0x2390 [ 272.657445][T15492] ? desc_read+0x1b8/0x3f0 [ 272.657459][T15492] ? ip_tunnel_xmit+0x110/0x2390 [ 272.657477][T15492] ? _prb_read_valid+0xa07/0xa90 [ 272.657491][T15492] ? console_flush_all+0x13a/0xb10 [ 272.657509][T15492] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 272.657526][T15492] ? gre_build_header+0x31c/0xa40 [ 272.657546][T15492] ? __pfx_gre_build_header+0x10/0x10 [ 272.657561][T15492] ? __console_unlock+0x14c/0x1a0 [ 272.657577][T15492] ? __pfx___console_unlock+0x10/0x10 [ 272.657592][T15492] ? __pfx_skb_network_protocol+0x10/0x10 [ 272.657607][T15492] __gre_xmit+0x19a/0x240 [ 272.657625][T15492] ? __pfx___gre_xmit+0x10/0x10 [ 272.657640][T15492] ? __asan_memset+0x22/0x50 [ 272.657656][T15492] ? erspan_build_header+0x19c/0x370 [ 272.657675][T15492] erspan_xmit+0xa04/0x1220 [ 272.657695][T15492] ? __pfx_erspan_xmit+0x10/0x10 [ 272.657712][T15492] ? __lock_acquire+0xab9/0xd20 [ 272.657727][T15492] dev_hard_start_xmit+0x2d7/0x830 [ 272.657747][T15492] sch_direct_xmit+0x241/0x4b0 [ 272.657769][T15492] ? __pfx_sch_direct_xmit+0x10/0x10 [ 272.657786][T15492] ? gred_dequeue+0x4a6/0x680 [ 272.657806][T15492] __qdisc_run+0xaa0/0x1540 [ 272.657828][T15492] __dev_queue_xmit+0x1056/0x3b50 [ 272.657843][T15492] ? register_lock_class+0x51/0x320 [ 272.657857][T15492] ? __dev_queue_xmit+0x27b/0x3b50 [ 272.657876][T15492] ? __pfx___dev_queue_xmit+0x10/0x10 [ 272.657891][T15492] ? read_seqbegin+0x122/0x250 [ 272.657907][T15492] ? neigh_resolve_output+0x438/0x750 [ 272.657924][T15492] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.657941][T15492] ? read_seqbegin+0x1ac/0x250 [ 272.657957][T15492] ? __pfx_read_seqbegin+0x10/0x10 [ 272.657974][T15492] ? __local_bh_enable_ip+0x12d/0x1c0 [ 272.657987][T15492] ? eth_header+0x11b/0x200 [ 272.658000][T15492] ? __asan_memcpy+0x40/0x70 [ 272.658023][T15492] ip6_finish_output2+0xfb3/0x1480 [ 272.658051][T15492] ? __pfx_ip6_finish_output2+0x10/0x10 [ 272.658069][T15492] ? ip6_mtu+0x7d/0x490 [ 272.658083][T15492] ? ip6_mtu+0x38c/0x490 [ 272.658099][T15492] ? ip6_finish_output+0x2ef/0x4e0 [ 272.658115][T15492] ? ip6_output+0x126/0x550 [ 272.658131][T15492] ip6_output+0x340/0x550 [ 272.658146][T15492] ? ip6_send_skb+0x10f/0x390 [ 272.658163][T15492] ip6_send_skb+0x1d5/0x390 [ 272.658182][T15492] udp_v6_send_skb+0xc17/0x1830 [ 272.658205][T15492] udpv6_sendmsg+0x1d62/0x2510 [ 272.658225][T15492] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 272.658244][T15492] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 272.658262][T15492] ? __pfx___might_resched+0x10/0x10 [ 272.658282][T15492] ? aa_sk_perm+0x81e/0x950 [ 272.658315][T15492] ? inet_send_prepare+0x5c/0x270 [ 272.658327][T15492] ? inet6_sendmsg+0xe4/0x120 [ 272.658342][T15492] __sock_sendmsg+0xe5/0x270 [ 272.658359][T15492] ____sys_sendmsg+0x52d/0x830 [ 272.658374][T15492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.658391][T15492] ? import_iovec+0x74/0xa0 [ 272.658408][T15492] ___sys_sendmsg+0x21f/0x2a0 [ 272.658422][T15492] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.658446][T15492] ? __fget_files+0x2a/0x420 [ 272.658458][T15492] ? __fget_files+0x3a0/0x420 [ 272.658473][T15492] __sys_sendmmsg+0x227/0x430 [ 272.658488][T15492] ? __pfx___sys_sendmmsg+0x10/0x10 [ 272.658505][T15492] ? __pfx_do_futex+0x10/0x10 [ 272.658532][T15492] __x64_sys_sendmmsg+0xa0/0xc0 [ 272.658546][T15492] do_syscall_64+0xfa/0xfa0 [ 272.658563][T15492] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.658580][T15492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.658593][T15492] ? clear_bhb_loop+0x60/0xb0 [ 272.658607][T15492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.658630][T15492] RIP: 0033:0x7f14de78f6c9 [ 272.658644][T15492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.658656][T15492] RSP: 002b:00007f14df5f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 272.658671][T15492] RAX: ffffffffffffffda RBX: 00007f14de9e5fa0 RCX: 00007f14de78f6c9 [ 272.658681][T15492] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 272.658690][T15492] RBP: 00007f14de811f91 R08: 0000000000000000 R09: 0000000000000000 [ 272.658698][T15492] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.658706][T15492] R13: 00007f14de9e6038 R14: 00007f14de9e5fa0 R15: 00007ffef9b442d8 [ 272.658722][T15492] [ 272.820627][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078278800: rx timeout, send abort [ 272.823428][T15492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.829121][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888078278800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 272.861121][T15492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.362807][T15492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.403991][T15492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.420920][T15492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.431569][T15492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.441929][T15492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.452890][T15492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog