last executing test programs: 7.104680644s ago: executing program 3 (id=5713): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000a, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x8001, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x9, 0xfffffffa, 0x9, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x10001, 0x0, 0x2, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x6, 0x0, 0x1, 0x0, 0x1000, 0xfffffff9, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x401, 0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffd, 0x0, 0x40000, 0x0, 0x20000, 0x2, 0x60, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x5, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4ff, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x107f, 0xa847, 0x2, 0x0, 0x4b7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0xe, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x3, 0x7, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0xb3c, 0x0, 0xfffffff6, 0x0, 0x573ecac7, 0x8, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x3, 0x0, 0xfffffffe, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x82, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x404, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x8, 0x800, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffefd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x4, 0x20000006}, {0xff, 0x2}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000280)={'wlan0\x00', 0xb002}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x810, r0, 0x775ff000) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r9, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x2000}, @l2tp={0x2, 0x0, @private=0xa010100, 0x2}, @ethernet={0x303, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, 0x9, 0x0, 0x0, 0x0, 0xff2, &(0x7f00000000c0)='lo\x00', 0x1c0ed06b, 0x8e2, 0x9}) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 6.641105235s ago: executing program 4 (id=5714): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000eb00000000000000040028000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000890000000800000002"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x8001, {0x0, 0x0, 0x0, 0x0, 0x8002, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x8001, {0x0, 0x0, 0x0, 0x0, 0x8002, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b595000000000000f2000a000000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c00001400"], 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h'], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc) (async) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x83, &(0x7f0000000040)={0x21, 0x0, 0x1, 0x1}, &(0x7f0000000080)=0x10) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, 0x0, 0xfffffffffffffd6a) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, 0x0, 0xfffffffffffffd6a) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmmsg$inet(r8, &(0x7f0000001c00)=[{{&(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}, {{&(0x7f0000000600)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x2, 0xc014) (async) sendmmsg$inet(r8, &(0x7f0000001c00)=[{{&(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}, {{&(0x7f0000000600)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x2, 0xc014) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) (async) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) write(r7, &(0x7f0000000080)="0b000300010001", 0x7) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 6.320702469s ago: executing program 1 (id=5717): close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000950000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x1, 0x2}, 0x20) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r1 = socket$inet(0x2, 0x2, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40089}, 0x40) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x1, 0xfffffffd}]}, 0x10) (async) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x3, 0x9, 0x0, 0x7fff}, 0x20) (async) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) sendmmsg(r3, &(0x7f0000008940)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r3], 0x108}}], 0x2, 0xc040) (async) bpf$PROG_LOAD(0x5, 0x0, 0x40) 6.155996867s ago: executing program 1 (id=5718): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) close(0x4) 5.845328041s ago: executing program 1 (id=5720): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) unshare(0x60600) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500005c0000000000019078ac1e0001ac1414aa05009078e00000e04000000000000000002f0000000000007f000001830300070700ac1e0001861f000000000706954d2dd4020fad4cfc1e0204ba2a000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffff45530000000800"/24], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000002c40)=[{&(0x7f00000003c0)=""/196, 0xc4}, {0x0}], 0x2) socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x84dd0c9487bc799f, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'bridge_slave_1\x00', 0x400}) socket$kcm(0x2, 0xa, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000ff07000009"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d000000ff0f0000040000000600000001000000", @ANYRES32=r3], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r8, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={r8}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x7fff, r9}, 0x38) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 5.624421975s ago: executing program 4 (id=5721): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000b80)=ANY=[@ANYBLOB="180200000900000000000000000000008500000007000000850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = socket$kcm(0x10, 0xa, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x150, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {0xa}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x1f, 0x10, 0x80, 0x8, 0xe, 0x8, 0x2}}, @TCA_RED_STAB={0x104}, @TCA_RED_EARLY_DROP_BLOCK={0x8}]}}]}, 0x150}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x11}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x11, 0x2, 0x1, 0x0, '*@+^}/.\a^/,-\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x84}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r5, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000240), 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0xc096}, 0x20000050) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5c0000002d006bcd9e3fe3dc6e48ab31086b87033c0000001f03000000000000040014000d000aaf0d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e1ff46bd3bf574b7c1f6f585862b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r7, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x110, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_EEE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 5.186436059s ago: executing program 2 (id=5722): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2e, 0x2, 0x6, {0xc, @sctp_ip6_spec={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4e24, 0x8, 0x7}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@local, @private=0xa010101, 0x0, 0x5}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x6, 0x5, [0x6, 0x6]}, 0xff, 0xffffffff}}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701feffffff00000000018f0000040042801400018008000200", @ANYRES32=0x0, @ANYBLOB="08001400", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 5.122892078s ago: executing program 2 (id=5723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000070000001000000095"], 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x997}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0xf0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 'gre0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a00000000046c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c0002801800028008000100fffffffd0900020073797a320000000014000000110001"], 0x11c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a2000000002"], 0x48}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa440800450000740000000000019078ac1e0001ac1414aa706fe8c9b96d0c019078e00000e0460000000067000000110000ac1414aae0000001830389070300443c00030a01012f00000000ac1414aa00000000ac1414bb00000000ac1414bb000000007f00000100000000ac14142b00000800e0000002000000000000"], 0x0) r6 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a5e720000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a4485219443ad6fe9b3ec7ca209abfdb3cd6f52462f16665a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r9, 0x0, 0xc, &(0x7f00000000c0)="e0", 0x1) getsockopt$inet_opts(r9, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="400000000d0a01080000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c00018006000100ffd700000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 4.984636407s ago: executing program 2 (id=5724): bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x11, 0x2020}, 0x20) bpf$MAP_CREATE(0x600000000000000, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xffffff08}, @NFTA_LOG_PREFIX={0x7, 0x2, 0x1, 0x0, '@/\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0xad724fc17f5eaadc}, 0x4054) 3.447311021s ago: executing program 4 (id=5725): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x29, 0xff, 0xf6, 0x9, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc01d567d4daa91ac, 0x10, 0x6, 0xc4}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'erspan0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x45d66db8198e1e5a, 0x80, 0x1, 0x9, {{0xb, 0x4, 0x1, 0x0, 0x2c, 0x64, 0x0, 0xe8, 0x2f, 0x0, @private=0xa010102, @multicast1, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xdb, [@local]}, @end, @generic={0x7, 0xa, "1ff2ec6423e66c7f"}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x29, 0xff, 0xf6, 0x9, 0x65, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc01d567d4daa91ac, 0x10, 0x6, 0xc4}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'erspan0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x45d66db8198e1e5a, 0x80, 0x1, 0x9, {{0xb, 0x4, 0x1, 0x0, 0x2c, 0x64, 0x0, 0xe8, 0x2f, 0x0, @private=0xa010102, @multicast1, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xdb, [@local]}, @end, @generic={0x7, 0xa, "1ff2ec6423e66c7f"}]}}}}}) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40800) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863330021e934a0a6e934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) (async) 3.419277288s ago: executing program 2 (id=5726): r0 = socket$netlink(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmsg$AUDIT_USER(r2, 0x0, 0x2040080) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x8, 0x32}, 0x0, @in=@private=0xa0100ee, 0x0, 0x0, 0x0, 0xb7, 0x7fffffff, 0xfffffffe}}, 0xe8) (async) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000480)=0x9, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) (async, rerun: 64) r5 = socket$unix(0x1, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {0x4}, {}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) (async) sendmsg$ETHTOOL_MSG_STATS_GET(r0, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f00000004c0)={0x324, r4, 0x825, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_STATS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STATS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @ETHTOOL_A_STATS_SRC={0x8}, @ETHTOOL_A_STATS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_STATS_GROUPS={0xf8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xec, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5198}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'ns/cgroup\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}]}, {0xfffffdc0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ':{!-*\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '(,[\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0xffffffffffffffa6, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfa}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffc}]}, @ETHTOOL_A_STATS_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xcb1d05cfe240b9b4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @ETHTOOL_A_STATS_GROUPS={0xbc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa2, 0x4, "59e96dcc998e11b5679486d082529ef6957b1eae43c165e39c3652ebc2e66a980c6c03f2baa7b97ef953039a32ed6eaf30f18cb7c6871ebfd2c9e98b0168f3398511b93c27720b8e9aee2e5d656f8804c17a663c459548c7f793ade28f93a39d82b1c31cd4edd63b0320598882d3ba87aa46edab1997be38291bbf5503f32f7a36cf548c370c9e94aeac2d0562d33658661df9ed2cd026b95e5a725c80c5"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x4000040}, 0x40010) (async) r8 = socket(0x8, 0x4, 0x10) setsockopt$RDS_GET_MR(r8, 0x114, 0x2, 0x0, 0x0) 3.386117946s ago: executing program 0 (id=5727): syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@link_local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@end]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffe, 0x0, 0x4}}}}}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3.381763001s ago: executing program 3 (id=5728): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = socket(0x22, 0x1, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x480, 0x0, 0x0) 3.248292874s ago: executing program 1 (id=5729): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4008010}, 0x840) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 3.062183613s ago: executing program 3 (id=5730): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/28], 0x48) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) close(0x4) 2.96192494s ago: executing program 4 (id=5731): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x7, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x37}, 0x60) getsockopt$inet_buf(r0, 0x118, 0x4, 0x0, &(0x7f0000000000)=0x7) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000040), 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x0, 0x1000000, 0xffffffff, 0x288, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x230, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x2ba810b9, 0x39, 0x0, 0x0, 0x80000000, 0x3, 0x7}, {0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x1, 0x5, 0xfffffffa, 'syz1\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0x3, 0x4, 0x2c7, 0x80000001, 0x1, 0x2, 0x100]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3d8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="441000002f00090025bd7000000000000400000008000c0002000000261016"], 0x1044}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0xe12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="5400000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003002c0012800b00010067726574617000001c00028008000700e000000108000100", @ANYRES32=r4, @ANYBLOB="050008000300000008000a00", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x804) 2.658236786s ago: executing program 0 (id=5732): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r3, 0x60ed8, 0x5ea41}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}, @IFLA_BRPORT_VLAN_TUNNEL={0x5, 0x1d, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5d483d84d6925a46}, 0x200088c2) pread64(r1, &(0x7f0000000000), 0x0, 0x7) 2.655140314s ago: executing program 3 (id=5733): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000dc0)={0x2, 0x4e24, @remote}, 0x10, 0x0}, 0x4000080) r0 = socket(0x840000000002, 0x1, 0x100) sendmsg$FOU_CMD_DEL(r0, &(0x7f000000a180)={0x0, 0x0, &(0x7f000000a140)={0x0}, 0x1, 0x0, 0x0, 0x20044090}, 0x24000804) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000088500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES64=r2, @ANYRES64=r2, @ANYBLOB="d3848fdcb3f61be3a204df1fd7d33bd0d58f"], 0x134}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01", @ANYRES16=r4], 0xf4}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001700010026bd7000ffdbdf250b00000008000100ff"], 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', r5, 0x2f, 0x3, 0x8, 0x8, 0x36, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x18, 0x7, 0x3, 0x3}}) syz_emit_ethernet(0x27, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb88a848008100300088ca8dad2aae2392120e3fc275c82bfb8f5713876856022cd264abbe4b98"], 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 2.216561921s ago: executing program 0 (id=5734): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@private1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) (rerun: 64) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private0}}, &(0x7f0000000440)=0xe8) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001340)={0x0, 0x0, 0x0}, &(0x7f0000001380)=0xc) sendmmsg$unix(r4, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@rights={{0x18, 0x1, 0x1, [r5, r5]}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0x50, 0x40800}}], 0x1, 0x0) r9 = getgid() setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000ac0)=@filter={'filter\x00', 0xe, 0x4, 0x568, [0x0, 0x200000000480, 0x20000000073c, 0x200000000852], 0x0, &(0x7f0000000000), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x3, 0x10, 0x1, 'dummy0\x00', 'hsr0\x00', 'vlan0\x00', 'veth0\x00', @random="8d24902c4672", [0xff, 0x0, 0xff], @multicast, [0x0, 0x0, 0xff, 0xff, 0xff], 0xae, 0xf6, 0x16e, [@devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x7, 0x10, 0x0, 0x8, 0x2}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"a5dc20125bed576492a1a57f5168679ade9b90be9a7573a3e047211d07e8"}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x1, 0x8, 0x6, 0x1, 0x0, "7b905bf6c2988db33d47ad1e826e0850ccc9ed504fba21b2016f13e871433ebcda47554238cfc50355057dd437ffb980abb43fb2f21193c04a58bf2128467327"}}}}, {0x11, 0x14, 0x11, 'batadv0\x00', 'netpci0\x00', 'veth0_to_bond\x00', 'rose0\x00', @empty, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @empty, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0x9e, 0xee, 0x11e, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x9}}}], [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x1000, {0x2}}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x5}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x9, 0x30, 0xa00, 'xfrm0\x00', 'ip_vti0\x00', 'gre0\x00', 'geneve1\x00', @empty, [0x0, 0x0, 0xff, 0xff, 0xff], @multicast, [0xff, 0x0, 0xff, 0xff, 0xff], 0xb6, 0xb6, 0xe6, [@limit={{'limit\x00', 0x0, 0x20}, {{0x72, 0xf8b2, 0x5, 0x6ba, 0x1c, 0x8}}}], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x10b}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x1, [{0x9, 0x4, 0x8847, 'veth0_vlan\x00', 'team_slave_1\x00', 'bridge0\x00', 'macvlan1\x00', @empty, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0xff, 0x0, 0xff, 0xff], 0xee, 0xee, 0x166, [@owner={{'owner\x00', 0x0, 0x18}, {{r2, r3, r8, r9, 0x1, 0x4}}}, @devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x1, 0x200, 0xff, 0xf790, 0x4}}}], [], @common=@nflog={'nflog\x00', 0x50, {{0x9e9, 0x8, 0xfff9, 0x0, 0x0, "ec9852f21eaebae17c4cd1d0619d15c787e01fc658b335d369c6ad68b6e3a626a69f244500cb5bc1e7ed4c7b73adf968dd7c22ca63ae962d5826df199319288d"}}}}]}]}, 0x5e0) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000200)={0x1c, r10, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x810) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000300)={0x0, 0x10, 0x7}, 0x8) (rerun: 64) 2.146118278s ago: executing program 1 (id=5735): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000003000000000000000001000061100800000000007b0ae0ff0000000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4e}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 1.931534402s ago: executing program 3 (id=5736): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r2, 0x0, 0x15, &(0x7f0000000000)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000030000009f54ffff0000000095"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e86dd6000000000180601fe800000000000871f24f449bee7be6f00000000bbfe800000000000000000000000000026c79af4d48ba754b885e4b5715ae30a8745b22243", @ANYRES32=0x0, @ANYRES32=0x41424344, @ANYBLOB="601800099078000004020000"], 0x0) 1.928127833s ago: executing program 4 (id=5737): r0 = socket(0xb, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.816046494s ago: executing program 1 (id=5738): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) (async) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) r8 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r8, &(0x7f0000000040)={0x27, r7, 0xffffffde, 0x4}, 0x10) (async) connect$nfc_raw(r8, &(0x7f0000000040)={0x27, r7, 0xffffffde, 0x4}, 0x10) write$nci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES16], 0x14) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0xf, 0xfffff034}, {0x48, 0xe7, 0x0, 0xb928}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) (async) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0xf, 0xfffff034}, {0x48, 0xe7, 0x0, 0xb928}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x74, r2, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x4c800}, 0x881) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x74, r2, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x4c800}, 0x881) ioctl$sock_ifreq(r9, 0x8920, &(0x7f0000000140)={'tunl0\x00', @ifru_settings={0x3, 0x7, @sync=&(0x7f0000000100)={0x1, 0x700000, 0x7}}}) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) (async) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) writev(r11, &(0x7f00000003c0)=[{&(0x7f00000000c0)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000040)='\x00\x00', 0x2}], 0x2) socket$inet6_udp(0xa, 0x2, 0x0) (async) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'gre0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x791, 0x8, 0x9, 0xa, {{0x5, 0x4, 0x1, 0x15, 0x14, 0x64, 0x0, 0x7, 0x29, 0x0, @multicast1, @remote}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r13, 0x2f, 0x2, 0x6, 0x9, 0x48, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7, 0x7, 0x7, 0x830b}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r13, 0x2f, 0x2, 0x6, 0x9, 0x48, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7, 0x7, 0x7, 0x830b}}) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) (async) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) 1.621337297s ago: executing program 2 (id=5739): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newtfilter={0x1c8, 0x2c, 0x609, 0x40, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0xf, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x198, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x9}, @TCA_FLOW_XOR={0x8, 0x7, 0xed97}, @TCA_FLOW_XOR={0x8, 0x7, 0x6}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x3, 0xfffb}}, @TCA_FLOW_EMATCHES={0x16c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xfffa}, {0x2, 0x0, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x4806}, {0x40, 0xea4, 0x2, 0x0, 0x6, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x0, 0x1, 0xb64}, {0x0, 0xd, 0x81, 0x4, 0x9, 0x1}}}, @TCF_EM_META={0xc, 0x5, 0x0, 0x0, {{0x5, 0x4, 0x200}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0xf4, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0xff, 0x9, 0xe86}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_CONTAINER={0x2c, 0x1, 0x0, 0x0, {{0xfff7, 0x0, 0xe}, "eb5c2c1f7f8b8146ab1aea8e19fe13e89f93511e162216c6e2406694b62c"}}, @TCF_EM_META={0xb0, 0x3, 0x0, 0x0, {{0x4dc, 0x4, 0xfffe}, [@TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_INT=0xfffffffd, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="044a42c57ba547d2226d", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0xa, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="3aac"]}, @TCA_EM_META_RVALUE={0x16, 0x3, [@TCF_META_TYPE_VAR="228c9b12605b965aff9b", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x40, 0x2}, {0xab11, 0x9, 0x1}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR="2a98871fbc4bc48129", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xf198, 0x5, 0x2}, {0xfcd, 0x2, 0x1}}}, @TCA_EM_META_LVALUE={0x23, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="ef54", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x40007, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR='o']}]}}]}]}]}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 1.610714679s ago: executing program 3 (id=5740): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x7}, 0xe) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xfffffffffffffead, 0x2, {0xb, "0000000000020400000000000b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000001940), r4) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (rerun: 64) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001d80)={0x20, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xb, @none, 0xfdff}, 0xe) 1.556404132s ago: executing program 4 (id=5741): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x4008093) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc8, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xd}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x80000001}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x346}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x24, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}, [@typed={0xc, 0x17, 0x0, 0x0, @u64=0x8}, @typed={0x4, 0x1d}]}, 0x24}, 0x1, 0x0, 0x0, 0x42914}, 0x4c000) 1.53685749s ago: executing program 2 (id=5742): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=0x0, @ANYRESDEC=0x0, @ANYRES16=0x0], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x28, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf4}}, 0x0) getpeername$netlink(r0, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000280)=@ethtool_link_settings={0x27, 0x0, 0xfe, 0x0, 0x0, 0x0, 0xa, 0x0, 0xfa, 0x4, [0x0, 0x80000001, 0x0, 0x0, 0x400000, 0xffbfffff, 0x2000133f, 0x120], [0x7, 0x6, 0x9]}}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300), 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000051}, 0x4040000) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r11, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="160000005600010602"], 0x1c}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r10) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x5c, r12, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "bf6e3d7de779872f0b8fa15bf788c991fb8325200000000000000000"}}]}]}, 0x5c}}, 0x0) recvfrom$inet(r5, &(0x7f0000000500)=""/25, 0x19, 0x2, &(0x7f0000000600)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a00000004a1a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000", 0x6c}], 0x1}, 0x0) 1.447218163s ago: executing program 0 (id=5743): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) close(0x4) 1.136421877s ago: executing program 0 (id=5744): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xffffffff}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x5}]}}]}, 0x40}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000000)={0x1}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000440000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) (async, rerun: 32) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000540)=""/229, 0xe5}], 0x1}, 0x40010002) (async, rerun: 32) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r4, &(0x7f00000007c0)}, 0x20) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) (async, rerun: 64) r5 = openat$cgroup_ro(r2, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (rerun: 64) write$tun(r5, &(0x7f0000000340)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8816ec", "de0000006deed7f21d74bc440900", "9884f958", "fc4bd6b33a9b93ca"}, 0x28) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@local, @multicast1, 0x0}, &(0x7f0000000300)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000440)={'gretap0\x00', r6, 0x80, 0x10, 0x6, 0x3026, {{0x23, 0x4, 0x3, 0x4, 0x8c, 0x66, 0x0, 0xf8, 0x2f, 0x0, @rand_addr=0x64010102, @private=0xa010100, {[@timestamp_prespec={0x44, 0x54, 0x3e, 0x3, 0xe, [{@remote, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x2}, {@empty, 0x9}, {@remote, 0x2}, {@broadcast, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x8}, {@empty, 0x14f}, {@loopback, 0x7}, {@rand_addr=0x64010101, 0xa2}]}, @end, @ssrr={0x89, 0x7, 0xe9, [@local]}, @generic={0x44, 0x9, "c8dc846b793654"}, @noop, @timestamp_prespec={0x44, 0xc, 0xa6, 0x3, 0x9, [{@multicast2, 0x13}]}, @end, @ra={0x94, 0x4}]}}}}}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x52}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r7, 0x20, &(0x7f00000001c0)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, &(0x7f0000000000)=""/89, 0x59}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) recvfrom(r2, &(0x7f0000002800)=""/4060, 0xfdc, 0x156, 0x0, 0x0) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000140)="58ddb0", 0x3}], 0x1) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) 0s ago: executing program 0 (id=5745): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRES8, @ANYRES16=r0, @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040090) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYRES16=r1, @ANYRES64=0x0, @ANYBLOB="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", @ANYRES16=r2], &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x22}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = openat$cgroup_ro(r6, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x16, '\x00', 0x0, @sched_cls=0x2f, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendfile(r7, r8, 0x0, 0xffffffff000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3f713da207af717f0c5093ff374fab062388a190874c355b0eafe13bf7a448a6201a662ed21e005abcb3c5631ca5988d2b1300b0ce34e71b26da95cf1c197aa39b8ba4d92d44738fa0a1d763966ff31f8cfc10bf7ab052f41834", @ANYRES16=r9, @ANYBLOB="7961fdffffff0004000000000000000099006c910000e02425a0af74e42b92d4c3b9adf5bfc424a4484b7b9ce94379d9edc4229361d1c68a489b6c9b349923dd4979a8cd2d50803d4a17fd197be907317cc24664b3fa328d7c5359c8037e1e9dc55703cd4c0e83cd20bc50285d697570b3828de9c44e6886c73ff36721fc1db017c42ac6b892ac1d"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NFT_BATCH(r6, &(0x7f0000000f00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a68020000060a05000000000000000000020000060900020073797a310000000018020480340001800b00010074756e6e656c000024000280080002400000000f080002400000000e0800034000000000080002400000000d6c0101800a000100696e6e65720000005c0102801c0105800e000100696d6d6564696174650000000801028054000280050001006e00000048000280080003400000000308000180ffffffff08000340000000020900020073797a300000000008000340000000010900020073797a31000000000900020073797a3200000000080001400000000344000280400002800900020073797a310000000008000340000000010900020073797a3100000000080003400000000408000180ffffffff0900020073797a310000000008000140000000124c0002802400028008000180fffffffb08000180ffffffff080001800000000008000340000000012400028008000340000000040900020073797a30000000000900020073797a30000000000800014000000004080001400000000e080002400000005808000140000000001c000580090001006d657461000000000c000280080003400000000d08000340000000000800044000000029140001800e000100627974656f72646572000000100001800b0001007461726765740000100001800a0001006d617463680000000c00018008000100636d70003400018011000100666c6f775f6f66666c6f6164000000001c0002800900010073797a31000000000900010073797a310000000018000480140001800e000100627974656f726465720000000900010073797a31000000000c000340000000000000000530000000090a010a000000000000b100010000010c001040000000000000000208000c40000007ff080007400000002840000000030a010100000000000000000000000a140004800800014000000003080002407d279ef808000b4000000003080007006e61740008000a400000000408020000160a01020000000000000000020000090900020073797a32000000000c00054000000000000000030900010073797a30000000000c00054000000000000000059000038008000140000000007c0003801400010067726530000000000000000000000000140001006970766c616e300000000000000000001400010064716d6d79300000000000000000000014000100766c616e31000000000000000000000014000100687372300000000000000000000000001400010073797a6b616c6c65723100000000000008000140000000000800074000000000140103807c0003801400010064766d7270300000000000000000000014000100776c616e3100000000000000000000001400010067656e65766530000000000000000000140001006e657470636930000000000000000000140001007663616e300000000000000000000000140001007465616d5f736c6176655f3000000000080002400000000908000140000000007c0003801400010076657468315f746f5f627269646765001400010070696d726567000000000000000000001400010073797a5f74756e0000000000000000001400010063616966300000000000000000000000140001006970766c616e31000000000000000000140001006272696467655f736c6176655f31000008000240000000050900010073797a30000000000900020073797a310000000050010000030a0103000000000000000003000007c5000c0087b61fffa34d2b2bbf5b3d95f83247b61a2d1e18043225300c5c10091535372da3126401221dedd5eeb5a1cedc4c7a106039316e2f68b3f9533800abe37a19d550a8f482babb2eb4c60fcafe042cb43001164778a1d1f62d14d4267832c30a13882cbfb07c1989b1d716b00176a382a34c3acf362cdf86299fabb1db0827cf2abe90118dbc5e114955110d631d960172b7e89799c3374fe777fadf89b392e2770d9e58320a524896a44cb878468202e2b04ed0da4e6c63bd9d663be5a4264b1ce50000000c000240000000000000000308000540fffffffe08000a40000000005800048008000140000000021400030068737230000000000000000000000000140003006261746164765f736c6176655f3000000800014000000000080002401f1ade7a1400030073697430000000000000000000000000140000001100010000000000000000000100000a"], 0x658}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x20008004) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x29, 0x5, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) write$cgroup_pressure(r10, &(0x7f0000000140)={'full', 0x20, 0x0, 0x20, 0x10}, 0x2f) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) kernel console output (not intermixed with test programs): : Caught tx_queue_len zero misconfig [ 650.270476][T24335] syzkaller0: left promiscuous mode [ 650.270499][T24335] syzkaller0: left allmulticast mode [ 650.320324][T24344] __nla_validate_parse: 69 callbacks suppressed [ 650.320345][T24344] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4511'. [ 650.320359][T24344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4511'. [ 650.329150][T24335] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4508'. [ 650.771344][T24374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4520'. [ 650.820967][T24376] bond6: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 650.843022][T24376] bond6 (unregistering): Released all slaves [ 651.047066][T24385] netlink: 'syz.3.4522': attribute type 1 has an invalid length. [ 651.047089][T24385] netlink: 'syz.3.4522': attribute type 2 has an invalid length. [ 651.074110][T24390] veth0: entered promiscuous mode [ 651.138259][T24390] veth0: left promiscuous mode [ 651.291988][T24406] xt_TCPMSS: Only works on TCP SYN packets [ 651.301839][T24399] warn_alloc: 2 callbacks suppressed [ 651.301860][T24399] syz.3.4528: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 651.301974][T24399] CPU: 1 UID: 0 PID: 24399 Comm: syz.3.4528 Not tainted syzkaller #0 PREEMPT(full) [ 651.302014][T24399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 651.302025][T24399] Call Trace: [ 651.302033][T24399] [ 651.302040][T24399] dump_stack_lvl+0xe8/0x150 [ 651.302077][T24399] warn_alloc+0x24d/0x270 [ 651.302098][T24399] ? kasan_save_track+0x4f/0x80 [ 651.302117][T24399] ? kasan_save_track+0x3e/0x80 [ 651.302139][T24399] ? __pfx_warn_alloc+0x10/0x10 [ 651.302155][T24399] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 651.302178][T24399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.302210][T24399] __vmalloc_node_range_noprof+0x127/0x1540 [ 651.302265][T24399] ? rcu_is_watching+0x16/0xb0 [ 651.302293][T24399] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 651.302321][T24399] ? __kmalloc_cache_noprof+0x321/0x600 [ 651.302341][T24399] ? __kmalloc_cache_noprof+0x14d/0x600 [ 651.302357][T24399] ? xskq_create+0x56/0x220 [ 651.302509][T24399] xskq_create+0x148/0x220 [ 651.302533][T24399] ? xsk_init_queue+0x8a/0xe0 [ 651.302554][T24399] xsk_init_queue+0x8a/0xe0 [ 651.302578][T24399] xsk_setsockopt+0x52a/0x960 [ 651.302601][T24399] ? __pfx_xsk_setsockopt+0x10/0x10 [ 651.302622][T24399] ? __pfx_aa_sk_perm+0x10/0x10 [ 651.302688][T24399] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 651.302714][T24399] ? __pfx_xsk_setsockopt+0x10/0x10 [ 651.302732][T24399] do_sock_setsockopt+0x17c/0x1b0 [ 651.302760][T24399] __x64_sys_setsockopt+0x13d/0x1b0 [ 651.302789][T24399] do_syscall_64+0x166/0x520 [ 651.302811][T24399] ? trace_irq_disable+0x3b/0x140 [ 651.302830][T24399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.302849][T24399] ? clear_bhb_loop+0x70/0xc0 [ 651.302887][T24399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.302906][T24399] RIP: 0033:0x7f36ca39e159 [ 651.302926][T24399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.302942][T24399] RSP: 002b:00007f36cb27e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 651.302962][T24399] RAX: ffffffffffffffda RBX: 00007f36ca625fa0 RCX: 00007f36ca39e159 [ 651.302976][T24399] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 651.302986][T24399] RBP: 00007f36ca43506b R08: 0000000000000004 R09: 0000000000000000 [ 651.302998][T24399] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.303010][T24399] R13: 00007f36ca626038 R14: 00007f36ca625fa0 R15: 00007ffdfaae4d18 [ 651.303042][T24399] [ 651.440718][T24409] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4528'. [ 651.455546][T24399] Mem-Info: [ 651.455562][T24399] active_anon:5943 inactive_anon:5 isolated_anon:0 [ 651.455562][T24399] active_file:18 inactive_file:43575 isolated_file:0 [ 651.455562][T24399] unevictable:0 dirty:107 writeback:0 [ 651.455562][T24399] slab_reclaimable:12029 slab_unreclaimable:110032 [ 651.455562][T24399] mapped:29589 shmem:523 pagetables:1559 [ 651.455562][T24399] sec_pagetables:0 bounce:0 [ 651.455562][T24399] kernel_misc_reclaimable:0 [ 651.455562][T24399] free:1271692 free_pcp:11387 free_cma:0 [ 651.455632][T24399] Node 0 active_anon:23772kB inactive_anon:20kB active_file:72kB inactive_file:174100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118356kB dirty:428kB writeback:0kB shmem:2092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16912kB pagetables:6072kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 651.455682][T24399] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 651.455731][T24399] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 651.455784][T24399] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 651.455818][T24399] Node 0 DMA32 free:1133772kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23772kB inactive_anon:20kB active_file:72kB inactive_file:174100kB unevictable:0kB writepending:428kB zspages:0kB present:3129332kB managed:2546920kB mlocked:0kB bounce:0kB free_pcp:45548kB local_pcp:27556kB free_cma:0kB [ 651.455872][T24399] lowmem_reserve[]: 0 0 0 0 0 [ 651.455903][T24399] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 651.455952][T24399] lowmem_reserve[]: 0 0 0 0 0 [ 651.455983][T24399] Node 1 Normal free:3937636kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 651.456035][T24399] lowmem_reserve[]: 0 0 0 0 0 [ 651.456066][T24399] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 651.456172][T24399] Node 0 DMA32: 1777*4kB (UE) 1073*8kB (UE) 730*16kB (UME) 1487*32kB (UME) 761*64kB (UME) 532*128kB (UM) 414*256kB (UME) 289*512kB (UM) 200*1024kB (UME) 8*2048kB (UME) 114*4096kB (UM) = 1133836kB [ 651.456319][T24399] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 651.461982][T24399] Node 1 Normal: 5*4kB (UM) 4*8kB (UM) 5*16kB (UM) 3*32kB (UM) 6*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 960*4096kB (UM) = 3937636kB [ 651.462126][T24399] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 651.462141][T24399] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 651.462156][T24399] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 651.462170][T24399] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 651.462184][T24399] 44112 total pagecache pages [ 651.462203][T24399] 0 pages in swap cache [ 651.462209][T24399] Free swap = 124996kB [ 651.462217][T24399] Total swap = 124996kB [ 651.462224][T24399] 2097051 pages RAM [ 651.462230][T24399] 0 pages HighMem/MovableOnly [ 651.462236][T24399] 428705 pages reserved [ 651.462243][T24399] 0 pages cma reserved [ 651.639061][T24407] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 651.845317][T24410] syzkaller0: entered promiscuous mode [ 651.845344][T24410] syzkaller0: entered allmulticast mode [ 652.147360][T24423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4532'. [ 652.189417][T24422] syzkaller0: entered promiscuous mode [ 652.189439][T24422] syzkaller0: entered allmulticast mode [ 652.482481][T24469] netlink: 'syz.2.4537': attribute type 1 has an invalid length. [ 652.482501][T24469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4537'. [ 652.508308][T24469] netlink: 'syz.2.4537': attribute type 1 has an invalid length. [ 652.522105][T24472] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 652.584071][T24469] 8021q: adding VLAN 0 to HW filter on device bond7 [ 652.612430][T24488] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 652.628444][T24488] bond7: (slave batadv1): making interface the new active one [ 652.630907][T24488] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 652.686663][T24474] bond7: (slave veth4): Enslaving as an active interface with a down link [ 652.699361][T24469] netlink: 3596 bytes leftover after parsing attributes in process `syz.2.4537'. [ 652.747066][T24503] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4538'. [ 652.881821][T24526] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 655.147159][T24426] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 656.378916][T24711] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4552'. [ 656.414980][T24691] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4549'. [ 657.111700][T24739] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 657.168434][T24741] netlink: 'syz.4.4561': attribute type 26 has an invalid length. [ 657.424434][T24755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4563'. [ 657.940125][T24777] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4567'. [ 657.942936][T24781] IPv6: addrconf: prefix option has invalid lifetime [ 657.958665][T24781] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4569'. [ 658.100971][T24787] netlink: 'syz.2.4573': attribute type 10 has an invalid length. [ 658.101122][T24787] veth0_vlan: left promiscuous mode [ 658.125332][T24787] team0: Device veth0_vlan failed to register rx_handler [ 658.247418][T24785] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 658.288717][T24797] netlink: 'syz.1.4574': attribute type 11 has an invalid length. [ 658.572641][T24806] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4576'. [ 658.720716][T24806] IPVS: Error connecting to the multicast addr [ 659.027261][T24821] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4579'. [ 659.131754][T24828] xt_addrtype: ipv6 does not support BROADCAST matching [ 659.184770][T24818] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4578'. [ 659.264100][T24831] tipc: Enabling of bearer rejected, already enabled [ 659.325207][T24837] netlink: 'syz.0.4583': attribute type 1 has an invalid length. [ 659.325226][T24837] netlink: 'syz.0.4583': attribute type 2 has an invalid length. [ 659.502037][T24845] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4585'. [ 659.506652][T24842] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 659.720619][T24847] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 659.752428][T24852] syzkaller0: entered promiscuous mode [ 659.752444][T24852] syzkaller0: entered allmulticast mode [ 659.970078][T24866] netlink: 'syz.1.4588': attribute type 2 has an invalid length. [ 659.970101][T24866] netlink: 'syz.1.4588': attribute type 8 has an invalid length. [ 659.970113][T24866] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4588'. [ 665.395040][T24883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4593'. [ 665.396118][T24892] netlink: 'syz.0.4595': attribute type 1 has an invalid length. [ 665.396135][T24892] netlink: 'syz.0.4595': attribute type 2 has an invalid length. [ 665.690448][T24907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4601'. [ 665.838544][T24914] netlink: 'syz.2.4604': attribute type 16 has an invalid length. [ 665.838568][T24914] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4604'. [ 666.188458][T24921] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4606'. [ 667.074984][T24962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4611'. [ 667.136135][T24963] netlink: 'syz.1.4614': attribute type 1 has an invalid length. [ 667.248254][T24968] macvlan0: entered promiscuous mode [ 667.571579][T24981] smc: net device lo applied user defined pnetid SYZ2 [ 667.576777][T24981] smc: net device lo erased user defined pnetid SYZ2 [ 667.744976][T24990] bridge0: port 1(bond0) entered blocking state [ 667.745147][T24990] bridge0: port 1(bond0) entered disabled state [ 667.745333][T24990] bond0: entered allmulticast mode [ 667.752572][T24990] bond0: entered promiscuous mode [ 667.770617][ T12] tipc: Subscription rejected, illegal request [ 667.848806][T24990] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4620'. [ 667.928839][T25004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4624'. [ 667.987016][T25007] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4620'. [ 668.153408][T24990] hsr_slave_1 (unregistering): left promiscuous mode [ 668.174630][T24993] tipc: Invalid UDP bearer configuration [ 668.174658][T24993] tipc: Enabling of bearer rejected, failed to enable media [ 668.766594][T25036] openvswitch: netlink: IP tunnel dst address not specified [ 669.112138][T25012] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 669.406903][T25068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4638'. [ 669.795021][T25088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4645'. [ 670.844723][T25116] netlink: 'syz.2.4649': attribute type 1 has an invalid length. [ 670.844745][T25116] netlink: 'syz.2.4649': attribute type 2 has an invalid length. [ 670.911452][T25120] ip_tables: iptables: counters copy to user failed while replacing table [ 670.925064][T25118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4652'. [ 670.969150][T25127] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4653'. [ 670.969174][T25127] openvswitch: netlink: Flow key attr not present in new flow. [ 671.018133][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018168][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018190][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018213][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018235][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018257][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018278][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018299][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018321][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018413][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018438][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018459][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018482][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018504][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018543][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018565][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018588][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018610][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018632][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018653][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018674][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018696][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018717][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018739][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018760][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018792][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018814][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018836][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018857][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018879][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018901][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018923][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018945][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018967][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.018990][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.019012][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.019035][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.019058][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.019080][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.019103][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.019125][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.019180][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.019203][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.019224][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.019246][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.019268][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.019288][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.019309][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.019332][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.019354][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.019376][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.019398][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.019420][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.019442][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.019464][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.019484][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.019505][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.019526][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.019548][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.019569][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.019591][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.019613][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.027253][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.027284][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.027307][T25126] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20002 [ 671.605208][T25142] syzkaller0: entered promiscuous mode [ 671.605231][T25142] syzkaller0: entered allmulticast mode [ 672.339521][T25152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4661'. [ 672.339557][T25152] netlink: 'syz.3.4661': attribute type 5 has an invalid length. [ 672.339569][T25152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4661'. [ 672.392548][T25154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4661'. [ 672.392586][T25154] netlink: 'syz.3.4661': attribute type 5 has an invalid length. [ 672.392598][T25154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4661'. [ 672.490438][T25155] netlink: zone id is out of range [ 672.490453][T25155] netlink: zone id is out of range [ 672.490462][T25155] netlink: zone id is out of range [ 672.490469][T25155] netlink: zone id is out of range [ 672.490476][T25155] netlink: zone id is out of range [ 672.490483][T25155] netlink: zone id is out of range [ 672.490494][T25155] netlink: zone id is out of range [ 672.543858][ T1110] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.543902][ T1110] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.543932][ T1110] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.543963][ T1110] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.603190][T25159] netlink: 'syz.1.4663': attribute type 16 has an invalid length. [ 672.603212][T25159] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4663'. [ 672.825089][T25163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4667'. [ 672.845361][T25176] netlink: 'syz.1.4669': attribute type 1 has an invalid length. [ 672.845385][T25176] netlink: 'syz.1.4669': attribute type 2 has an invalid length. [ 672.880500][T25164] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4667'. [ 672.901562][T25181] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4667'. [ 675.701878][T25163] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 676.191658][T25239] netlink: 'syz.2.4683': attribute type 8 has an invalid length. [ 676.312212][T25245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4686'. [ 676.404328][T25245] tipc: Enabling of bearer rejected, failed to enable media [ 676.474691][T25249] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 676.475413][T25249] netlink: 'syz.2.4688': attribute type 1 has an invalid length. [ 676.475430][T25249] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4688'. [ 676.591172][T25253] hsr0: entered promiscuous mode [ 676.610571][T25253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4691'. [ 676.623491][T25256] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4690'. [ 676.636622][T25254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4691'. [ 676.676555][T25260] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4690'. [ 676.698639][T25254] hsr_slave_0: left promiscuous mode [ 676.719503][T25254] hsr0 (unregistering): left promiscuous mode [ 677.406622][T25297] syzkaller1: entered promiscuous mode [ 677.406645][T25297] syzkaller1: entered allmulticast mode [ 677.495621][T25307] tipc: Enabling of bearer rejected, failed to enable media [ 677.497370][T25307] bridge0: port 1(syz_tun) entered blocking state [ 677.497560][T25307] bridge0: port 1(syz_tun) entered disabled state [ 677.497814][T25307] syz_tun: entered allmulticast mode [ 677.500483][T25307] bridge0: port 1(syz_tun) entered blocking state [ 677.500594][T25307] bridge0: port 1(syz_tun) entered forwarding state [ 677.506506][T25307] net_ratelimit: 1707 callbacks suppressed [ 677.506524][T25307] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 677.688482][T25313] netlink: 'syz.1.4704': attribute type 16 has an invalid length. [ 677.688507][T25313] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4704'. [ 677.780749][T25316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4706'. [ 677.810747][T25316] netlink: 'syz.1.4706': attribute type 1 has an invalid length. [ 677.810768][T25316] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4706'. [ 677.854581][T25318] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4707'. [ 678.028361][T25303] netlink: zone id is out of range [ 678.028451][T25303] netlink: zone id is out of range [ 678.028459][T25303] netlink: zone id is out of range [ 678.028779][T25303] netlink: zone id is out of range [ 678.029101][T25303] netlink: zone id is out of range [ 678.029111][T25303] netlink: zone id is out of range [ 678.029148][T25303] netlink: zone id is out of range [ 678.034426][T25303] netlink: zone id is out of range [ 678.034440][T25303] netlink: zone id is out of range [ 678.175446][T25332] netlink: 'syz.4.4712': attribute type 1 has an invalid length. [ 678.175468][T25332] netlink: 'syz.4.4712': attribute type 2 has an invalid length. [ 678.369029][T25342] xt_TPROXY: Can be used only with -p tcp or -p udp [ 678.586093][T25352] netlink: 'syz.3.4715': attribute type 30 has an invalid length. [ 678.609793][T25352] vxlan1: entered promiscuous mode [ 678.609818][T25352] vxlan1: entered allmulticast mode [ 678.624910][T25361] netlink: 'syz.3.4715': attribute type 30 has an invalid length. [ 678.659131][T25361] vxlan1: entered promiscuous mode [ 678.659154][T25361] vxlan1: entered allmulticast mode [ 678.966273][T25373] netlink: 'syz.4.4725': attribute type 16 has an invalid length. [ 679.000408][T25376] netlink: 'syz.2.4726': attribute type 1 has an invalid length. [ 679.060337][T25372] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 679.738831][T25411] syzkaller0: entered promiscuous mode [ 679.738852][T25411] syzkaller0: entered allmulticast mode [ 679.829914][T25420] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20003 [ 681.540773][T25518] __nla_validate_parse: 11 callbacks suppressed [ 681.540804][T25518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4761'. [ 681.605205][T25520] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20003 [ 681.963084][T25535] syz_tun: entered allmulticast mode [ 682.011607][T25538] dvmrp6: entered allmulticast mode [ 682.149828][ T12] IPVS: starting estimator thread 0... [ 682.234489][T25548] IPVS: using max 34 ests per chain, 81600 per kthread [ 682.336838][T25531] syz_tun: left allmulticast mode [ 682.438586][T25561] validate_nla: 1 callbacks suppressed [ 682.438608][T25561] netlink: 'syz.3.4772': attribute type 1 has an invalid length. [ 682.438620][T25561] netlink: 'syz.3.4772': attribute type 2 has an invalid length. [ 682.535849][T25560] netlink: 'syz.2.4773': attribute type 49 has an invalid length. [ 682.677453][T25575] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4775'. [ 682.736159][T25577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4775'. [ 682.864131][T25560] ip6gretap0: entered promiscuous mode [ 682.864155][T25560] ip6gretap0: entered allmulticast mode [ 682.898913][T25566] dummy0: left promiscuous mode [ 682.916236][T25572] hsr_slave_0: left promiscuous mode [ 682.982176][T25579] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4777'. [ 682.992325][T25579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4777'. [ 683.621651][T25603] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4780'. [ 683.679152][T25613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4780'. [ 684.092376][T25631] netlink: 'syz.4.4784': attribute type 1 has an invalid length. [ 684.092398][T25631] netlink: 'syz.4.4784': attribute type 2 has an invalid length. [ 684.126213][T25633] netlink: 'syz.2.4786': attribute type 4 has an invalid length. [ 684.222587][T25638] net_ratelimit: 21 callbacks suppressed [ 684.222609][T25638] ip_tables: iptables: counters copy to user failed while replacing table [ 684.375487][T25642] geneve0: entered promiscuous mode [ 684.428524][T25642] geneve0: left promiscuous mode [ 684.588887][T25655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.678578][T25655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.768153][T25658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.104463][T25676] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4793'. [ 685.132149][T25676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4793'. [ 685.132181][T25676] netlink: 'syz.4.4793': attribute type 5 has an invalid length. [ 685.132192][T25676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4793'. [ 685.171405][T25676] netlink: 'syz.4.4793': attribute type 5 has an invalid length. [ 685.182930][T22689] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.183657][T22687] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.183691][T22687] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.183720][T22687] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 685.192416][T25676] netlink: 'syz.4.4793': attribute type 5 has an invalid length. [ 685.224724][T25676] netlink: 'syz.4.4793': attribute type 5 has an invalid length. [ 685.675141][T25711] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 686.150535][T25726] geneve2: entered promiscuous mode [ 686.419676][T25744] sctp: [Deprecated]: syz.1.4810 (pid 25744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 686.419676][T25744] Use struct sctp_sack_info instead [ 686.419731][T25744] sctp: [Deprecated]: syz.1.4810 (pid 25744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 686.419731][T25744] Use struct sctp_sack_info instead [ 686.419769][T25744] sctp: [Deprecated]: syz.1.4810 (pid 25744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 686.419769][T25744] Use struct sctp_sack_info instead [ 686.419806][T25744] sctp: [Deprecated]: syz.1.4810 (pid 25744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 686.419806][T25744] Use struct sctp_sack_info instead [ 686.419842][T25744] sctp: [Deprecated]: syz.1.4810 (pid 25744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 686.419842][T25744] Use struct sctp_sack_info instead [ 686.419879][T25744] sctp: [Deprecated]: syz.1.4810 (pid 25744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 686.419879][T25744] Use struct sctp_sack_info instead [ 686.419916][T25744] sctp: [Deprecated]: syz.1.4810 (pid 25744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 686.419916][T25744] Use struct sctp_sack_info instead [ 686.419953][T25744] sctp: [Deprecated]: syz.1.4810 (pid 25744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 686.419953][T25744] Use struct sctp_sack_info instead [ 686.419990][T25744] sctp: [Deprecated]: syz.1.4810 (pid 25744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 686.419990][T25744] Use struct sctp_sack_info instead [ 686.420027][T25744] sctp: [Deprecated]: syz.1.4810 (pid 25744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 686.420027][T25744] Use struct sctp_sack_info instead [ 686.422558][T25746] sctp: [Deprecated]: syz.1.4810 (pid 25746) Use of struct sctp_assoc_value in delayed_ack socket option. [ 686.422558][T25746] Use struct sctp_sack_info instead [ 686.422591][T25746] sctp: [Deprecated]: syz.1.4810 (pid 25746) Use of struct sctp_assoc_value in delayed_ack socket option. [ 686.422591][T25746] Use struct sctp_sack_info instead [ 686.422613][T25746] sctp: [Deprecated]: syz.1.4810 (pid 25746) Use of struct sctp_assoc_value in delayed_ack socket option. [ 686.422613][T25746] Use struct sctp_sack_info instead [ 686.422634][T25746] sctp: [Deprecated]: syz.1.4810 (pid 25746) Use of struct sctp_assoc_value in delayed_ack socket option. [ 686.422634][T25746] Use struct sctp_sack_info instead [ 686.422656][T25746] sctp: [Deprecated]: syz.1.4810 (pid 25746) Use of struct sctp_assoc_value in delayed_ack socket option. [ 686.422656][T25746] Use struct sctp_sack_info instead [ 686.422676][T25746] sctp: [Deprecated]: syz.1.4810 (pid 25746) Use of struct sctp_assoc_value in delayed_ack socket option. [ 686.422676][T25746] Use struct sctp_sack_info instead [ 686.551349][T25747] __nla_validate_parse: 6 callbacks suppressed [ 686.551367][T25747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4811'. [ 686.563406][T25746] sctp: [Deprecated]: syz.1.4810 (pid 25746) Use of struct sctp_assoc_value in delayed_ack socket option. [ 686.563406][T25746] Use struct sctp_sack_info instead [ 686.563436][T25746] sctp: [Deprecated]: syz.1.4810 (pid 25746) Use of struct sctp_assoc_value in delayed_ack socket option. [ 686.563436][T25746] Use struct sctp_sack_info instead [ 686.563458][T25746] sctp: [Deprecated]: syz.1.4810 (pid 25746) Use of struct sctp_assoc_value in delayed_ack socket option. [ 686.563458][T25746] Use struct sctp_sack_info instead [ 686.563685][T25746] sctp: [Deprecated]: syz.1.4810 (pid 25746) Use of struct sctp_assoc_value in delayed_ack socket option. [ 686.563685][T25746] Use struct sctp_sack_info instead [ 686.689194][T25744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4810'. [ 686.720312][T25747] bond5: entered promiscuous mode [ 686.720379][T25747] bond5: entered allmulticast mode [ 686.722268][T25747] 8021q: adding VLAN 0 to HW filter on device bond5 [ 686.837441][T25752] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 687.005240][T25767] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 687.008721][T25767] bond5 (unregistering): Released all slaves [ 687.141084][ T30] hid-generic 0005:4C4A:4152.0001: unknown main item tag 0x0 [ 687.152824][T25782] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4817'. [ 687.201050][ T30] hid-generic 0005:4C4A:4152.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 687.214899][T25774] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4817'. [ 687.416628][T25790] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4819'. [ 688.579284][T25828] xfrm0: mtu less than device minimum [ 688.695208][T25828] team0: MTU too low for tipc bearer [ 688.695246][T25828] tipc: Enabling of bearer rejected, failed to enable media [ 690.852212][T25860] lo: left promiscuous mode [ 690.876566][T25860] tunl0: left promiscuous mode [ 690.899718][T25860] gre0: left promiscuous mode [ 690.971331][T25860] 0ªî{X¹¦: left allmulticast mode [ 691.142455][T25860] erspan0: left promiscuous mode [ 691.159961][T25860] ip_vti0: left promiscuous mode [ 691.174433][T25860] ip6_vti0: left promiscuous mode [ 691.180674][T25860] sit0: left promiscuous mode [ 691.265473][T25860] ip6tnl0: left promiscuous mode [ 691.268280][T25860] ip6gre0: left promiscuous mode [ 691.324702][T25860] bridge0: port 1(syz_tun) entered disabled state [ 691.326303][T25860] ip6gretap0: left promiscuous mode [ 691.329946][T25860] bridge0: left promiscuous mode [ 691.746571][T25860] veth1_vlan: left allmulticast mode [ 692.026074][T25860] veth3: left allmulticast mode [ 692.046906][T25860] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 692.046951][T25860] ipvlan2: left allmulticast mode [ 692.067527][T25860] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 692.067590][T25860] ipvlan3: left allmulticast mode [ 692.067604][T25860] macvlan1: left allmulticast mode [ 692.120399][T25860] batman_adv: batadv0: Interface deactivated: macvlan2 [ 692.238290][T25860] bond3: left promiscuous mode [ 692.238307][T25860] bridge4: left promiscuous mode [ 692.339092][T25860] bond4: left promiscuous mode [ 692.339112][T25860] bond4: left allmulticast mode [ 692.454366][T25860] geneve2: left promiscuous mode [ 692.462287][T25862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4833'. [ 692.465891][T22687] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 692.465924][T22687] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.465964][T22687] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 692.465985][T22687] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.466018][T22687] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 692.466040][T22687] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.466070][T22687] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 692.466092][T22687] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.817854][T25904] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4845'. [ 692.870003][T25905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4843'. [ 692.915690][T25908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4843'. [ 692.953562][T25906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4846'. [ 694.003682][T25957] IPv6: sit3: Disabled Multicast RS [ 694.209839][T25962] No such timeout policy "syz1" [ 694.379469][T25970] validate_nla: 4 callbacks suppressed [ 694.379488][T25970] netlink: 'syz.1.4856': attribute type 29 has an invalid length. [ 694.379501][T25970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4856'. [ 694.379523][T25970] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 694.572292][T25982] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4859'. [ 694.893479][T25994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4862'. [ 694.914378][T25994] 8021q: VLANs not supported on nlmon0 [ 694.953737][T25998] netlink: 'syz.0.4863': attribute type 1 has an invalid length. [ 694.953760][T25998] netlink: 'syz.0.4863': attribute type 6 has an invalid length. [ 694.953772][T25998] netlink: 'syz.0.4863': attribute type 3 has an invalid length. [ 695.218658][T25998] bond6 (unregistering): Released all slaves [ 695.267680][T26016] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4866'. [ 695.785398][T26039] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4869'. [ 695.852575][T26040] vti0: entered promiscuous mode [ 695.869743][T26049] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 696.132888][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 696.244981][T26063] macvlan0: left promiscuous mode [ 696.283920][T26063] netlink: 'syz.0.4877': attribute type 1 has an invalid length. [ 696.283950][T26063] netlink: 'syz.0.4877': attribute type 2 has an invalid length. [ 696.712006][T26084] syzkaller0: entered promiscuous mode [ 696.712028][T26084] syzkaller0: entered allmulticast mode [ 696.995977][T26099] netlink: 'syz.0.4886': attribute type 1 has an invalid length. [ 697.126681][T26099] 8021q: adding VLAN 0 to HW filter on device bond6 [ 697.351228][T26116] 8021q: adding VLAN 0 to HW filter on device bond7 [ 697.434376][T26116] bond7 (unregistering): Released all slaves [ 697.549994][T26139] __nla_validate_parse: 1 callbacks suppressed [ 697.550016][T26139] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4894'. [ 697.550118][T26139] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4894'. [ 697.698155][T26141] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 697.699911][T26140] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 698.151314][T26160] netlink: 'syz.3.4900': attribute type 5 has an invalid length. [ 698.410678][T26174] Cannot find map_set index 4 as target [ 699.078657][T26206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4910'. [ 699.258509][T26214] netlink: 'syz.2.4912': attribute type 1 has an invalid length. [ 699.258529][T26214] netlink: 'syz.2.4912': attribute type 2 has an invalid length. [ 699.398913][T26218] gre3: entered allmulticast mode [ 699.429168][T26218] team_slave_0: entered allmulticast mode [ 699.776997][T26249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4922'. [ 699.777551][T26249] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4922'. [ 700.226295][T26268] vxcan0: entered allmulticast mode [ 700.360618][T26282] netlink: 388 bytes leftover after parsing attributes in process `syz.1.4925'. [ 700.483733][T26284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4925'. [ 700.483768][T26284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4925'. [ 702.605380][T26235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 703.319795][T26311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4927'. [ 703.357148][T26314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4928'. [ 703.357320][T26312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4927'. [ 703.359058][T26311] openvswitch: netlink: IPv4 tunnel dst address is zero [ 703.505835][T26323] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4932'. [ 703.528841][T26329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4932'. [ 703.530169][T26328] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4932'. [ 703.535182][T26324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4932'. [ 703.562187][T26320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4931'. [ 703.562206][T26320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4931'. [ 703.840591][T26340] syzkaller0: entered promiscuous mode [ 703.840614][T26340] syzkaller0: entered allmulticast mode [ 703.846135][T26341] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4934'. [ 704.363585][T26361] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 704.416534][T26364] netlink: 'syz.4.4941': attribute type 10 has an invalid length. [ 705.973643][T26421] netlink: 'syz.2.4953': attribute type 8 has an invalid length. [ 706.005124][T26421] veth1_to_team: entered promiscuous mode [ 706.007395][T26421] gretap0: entered promiscuous mode [ 706.025041][T26421] veth1_to_team: left promiscuous mode [ 706.050048][T26421] gretap0: left promiscuous mode [ 706.192173][T26423] openvswitch: netlink: Message has 8 unknown bytes. [ 706.192208][T26423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 706.530656][T26438] netlink: 'syz.2.4958': attribute type 10 has an invalid length. [ 706.531051][T26438] netlink: 'syz.2.4958': attribute type 10 has an invalid length. [ 707.007764][T26457] lo: entered promiscuous mode [ 707.033595][T26457] tunl0: entered promiscuous mode [ 707.055408][T26457] gre0: entered promiscuous mode [ 707.089458][T26457] gretap0: entered promiscuous mode [ 707.111462][T26457] erspan0: entered promiscuous mode [ 707.135047][T26457] ip_vti0: entered promiscuous mode [ 707.165836][T26457] ip6_vti0: entered promiscuous mode [ 707.192885][T26457] sit0: entered promiscuous mode [ 707.219197][T26457] ip6tnl0: entered promiscuous mode [ 707.228483][T26457] ip6gre0: entered promiscuous mode [ 707.251825][T26457] ip6gretap0: entered promiscuous mode [ 707.346312][T26457] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.346817][T26457] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.352334][T26457] bridge0: entered promiscuous mode [ 707.635274][T26457] vcan0: entered promiscuous mode [ 707.699059][T26457] bond0: entered promiscuous mode [ 707.699082][T26457] bond_slave_1: entered promiscuous mode [ 707.738744][T26457] team0: entered promiscuous mode [ 707.738766][T26457] team_slave_0: entered promiscuous mode [ 707.738948][T26457] team_slave_1: entered promiscuous mode [ 707.816136][T26457] dummy0: entered promiscuous mode [ 707.864068][T26457] nlmon0: entered promiscuous mode [ 707.866660][T26457] vxcan0: entered promiscuous mode [ 707.894569][T26457] vxcan1: entered promiscuous mode [ 707.908283][T26457] veth0: entered promiscuous mode [ 707.960042][T26457] veth1: entered promiscuous mode [ 707.985877][T26457] wg0: entered promiscuous mode [ 708.006667][T26457] wg1: entered promiscuous mode [ 708.008776][T26457] wg2: entered promiscuous mode [ 708.031080][T26457] veth0_to_bridge: entered promiscuous mode [ 708.080468][T26457] veth1_to_bridge: entered promiscuous mode [ 708.169972][T26457] veth1_to_bond: entered promiscuous mode [ 708.249282][T26457] veth0_to_team: entered promiscuous mode [ 708.271841][T26457] veth1_to_team: entered promiscuous mode [ 708.303232][T26457] veth0_to_batadv: entered promiscuous mode [ 708.315399][T26457] batadv_slave_0: entered promiscuous mode [ 708.330163][T26457] veth1_to_batadv: entered promiscuous mode [ 708.345423][T26457] batadv_slave_1: entered promiscuous mode [ 708.360746][T26457] xfrm0: entered promiscuous mode [ 708.378342][T26457] veth0_to_hsr: entered promiscuous mode [ 708.419089][T26457] veth1_to_hsr: entered promiscuous mode [ 708.441299][T26457] hsr0: entered promiscuous mode [ 708.452049][T26457] veth1_virt_wifi: entered promiscuous mode [ 708.468440][T26457] veth0_virt_wifi: entered promiscuous mode [ 708.487807][T26457] virt_wifi0: entered promiscuous mode [ 708.534607][T26457] vlan1: entered promiscuous mode [ 708.550974][T26457] macvlan0: entered promiscuous mode [ 708.551326][T26457] macvlan1: entered promiscuous mode [ 708.567956][T26457] ipvlan0: entered promiscuous mode [ 708.582475][T26457] ipvlan1: entered promiscuous mode [ 708.642610][T26457] macvtap0: entered promiscuous mode [ 708.649524][T26457] geneve0: entered promiscuous mode [ 708.665918][T26457] geneve1: entered promiscuous mode [ 708.681265][T26457] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 708.699232][T26457] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 708.721077][T26457] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 708.741337][T26457] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 708.755690][T26457] mac80211_hwsim hwsim44 wlan0: entered promiscuous mode [ 708.761141][T26457] mac80211_hwsim hwsim44 nicvf0: entered promiscuous mode [ 708.770917][T26457] gtp0: entered promiscuous mode [ 708.786700][T26457] bridge1: entered promiscuous mode [ 708.798663][T26457] ip6gretap1: entered promiscuous mode [ 708.800099][T26457] ip6erspan0: entered promiscuous mode [ 708.800224][T26457] bond1: entered promiscuous mode [ 708.800340][T26457] vlan2: entered promiscuous mode [ 708.800734][T26457] dvmrp1: entered promiscuous mode [ 708.838445][T26457] ip6tnl1: entered promiscuous mode [ 708.842493][T26457] : entered promiscuous mode [ 708.869846][T26457] mac80211_hwsim hwsim56 wlan1: entered promiscuous mode [ 708.875063][T26457] sit1: entered promiscuous mode [ 708.906835][T26457] bridge2: entered promiscuous mode [ 708.907110][T26457] ipvlan2: entered promiscuous mode [ 708.990509][T26457] bond3: entered promiscuous mode [ 708.994362][T26457] ip6gretap2: entered promiscuous mode [ 709.004801][T26457] bond4: entered promiscuous mode [ 709.009449][T26457] syztnl0: entered promiscuous mode [ 709.009608][T26457] gre1: entered promiscuous mode [ 709.050304][T26457] sit2: entered promiscuous mode [ 709.149995][T26457] bridge3: entered promiscuous mode [ 709.150094][T26457] bond5: entered promiscuous mode [ 709.164518][T26457] macvlan2: entered promiscuous mode [ 709.220917][T26457] sit3: entered promiscuous mode [ 709.228313][T26457] bond6: entered promiscuous mode [ 709.245069][T26484] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 709.303740][T26501] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 709.371760][T26506] veth8: entered allmulticast mode [ 709.422999][ T50] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.423042][ T50] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.423076][ T50] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.423099][ T50] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.423129][ T50] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.423151][ T50] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.423181][ T50] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.423204][ T50] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.400947][T26571] __nla_validate_parse: 68 callbacks suppressed [ 710.400968][T26571] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4979'. [ 710.524171][T26569] syzkaller0: entered promiscuous mode [ 710.524194][T26569] syzkaller0: entered allmulticast mode [ 711.006665][T26598] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4984'. [ 711.019441][T26598] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4984'. [ 711.045403][T26598] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4984'. [ 711.297188][T26605] x_tables: unsorted entry at hook 1 [ 711.459099][T26608] xt_CT: No such helper "netbios-ns" [ 711.962401][T26646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4991'. [ 712.032437][T26636] IPVS: Error connecting to the multicast addr [ 712.032571][T26636] IPVS: Unknown mcast interface:  [ 712.032595][T26636] IPVS: Unknown mcast interface:  [ 712.032615][T26636] IPVS: Unknown mcast interface:  [ 712.032635][T26636] IPVS: Unknown mcast interface:  [ 712.032653][T26636] IPVS: Unknown mcast interface:  [ 712.032673][T26636] IPVS: Unknown mcast interface:  [ 712.034747][T26636] IPVS: Unknown mcast interface:  [ 712.034769][T26636] IPVS: Unknown mcast interface:  [ 712.034785][T26636] IPVS: Unknown mcast interface:  [ 712.034802][T26636] IPVS: Unknown mcast interface:  [ 712.034819][T26636] IPVS: Unknown mcast interface:  [ 712.034836][T26636] IPVS: Unknown mcast interface:  [ 712.034852][T26636] IPVS: Unknown mcast interface:  [ 712.034869][T26636] IPVS: Unknown mcast interface:  [ 712.034886][T26636] IPVS: Unknown mcast interface:  [ 712.034902][T26636] IPVS: Unknown mcast interface:  [ 712.034920][T26636] IPVS: Unknown mcast interface:  [ 712.034938][T26636] IPVS: Unknown mcast interface:  [ 712.034955][T26636] IPVS: Unknown mcast interface:  [ 712.034972][T26636] IPVS: Unknown mcast interface:  [ 712.034989][T26636] IPVS: Unknown mcast interface:  [ 712.050627][T26636] IPVS: Unknown mcast interface:  [ 712.050682][T26636] IPVS: Unknown mcast interface:  [ 712.050700][T26636] IPVS: Unknown mcast interface:  [ 712.050717][T26636] IPVS: Unknown mcast interface:  [ 712.050735][T26636] IPVS: Unknown mcast interface:  [ 712.050751][T26636] IPVS: Unknown mcast interface:  [ 712.050768][T26636] IPVS: Unknown mcast interface:  [ 712.050784][T26636] IPVS: Unknown mcast interface:  [ 712.050799][T26636] IPVS: Unknown mcast interface:  [ 712.050815][T26636] IPVS: Unknown mcast interface:  [ 712.050832][T26636] IPVS: Unknown mcast interface:  [ 712.059157][T26646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 712.367532][T26657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4993'. [ 712.406428][T26657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4993'. [ 712.406750][T26657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4993'. [ 712.409516][T26657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4993'. [ 712.409884][T26657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4993'. [ 712.537706][T26661] netlink: 'syz.0.4994': attribute type 16 has an invalid length. [ 712.649471][T26669] netlink: 'syz.2.4996': attribute type 1 has an invalid length. [ 712.774468][T26669] bond8: entered promiscuous mode [ 712.774900][T26669] 8021q: adding VLAN 0 to HW filter on device bond8 [ 712.921541][T26678] 8021q: adding VLAN 0 to HW filter on device bond8 [ 712.922053][T26678] bond8: (slave gre3): The slave device specified does not support setting the MAC address [ 712.922075][T26678] bond8: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 712.983773][T26685] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 713.009138][T26678] bond8: (slave gre3): making interface the new active one [ 713.021923][T26678] gre3: entered promiscuous mode [ 713.038104][T26678] bond8: (slave gre3): Enslaving as an active interface with an up link [ 713.075189][T26682] bond8 (unregistering): (slave gre3): Releasing backup interface [ 713.075218][T26682] gre3: left promiscuous mode [ 713.105214][T26682] bond8 (unregistering): Released all slaves [ 713.273797][T26673] dummy0 speed is unknown, defaulting to 1000 [ 713.468273][T26713] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 713.511068][T26708] syzkaller0: entered promiscuous mode [ 713.511084][T26708] syzkaller0: entered allmulticast mode [ 717.386406][T26723] __nla_validate_parse: 4 callbacks suppressed [ 717.386426][T26723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5004'. [ 717.386439][T26723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5004'. [ 717.386452][T26723] tc_dump_action: action bad kind [ 717.386495][T26673] wg2 speed is unknown, defaulting to 1000 [ 717.715687][T26741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5011'. [ 717.900402][T26751] netlink: 1319 bytes leftover after parsing attributes in process `syz.0.5012'. [ 718.227928][T26765] xt_hashlimit: size too large, truncated to 1048576 [ 718.433920][T26768] bond8: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 718.437699][T26768] bond8 (unregistering): Released all slaves [ 719.111508][T26785] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 719.185559][T26792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5025'. [ 719.210802][T26792] bond0: Device is already in use. [ 719.318963][T26800] tipc: Enabled bearer , priority 0 [ 719.344678][T26813] ip_tables: iptables: counters copy to user failed while replacing table [ 719.350630][T26813] netlink: 'syz.4.5031': attribute type 1 has an invalid length. [ 719.405785][T26814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5030'. [ 719.474448][T26817] ip_tables: iptables: counters copy to user failed while replacing table [ 719.625829][T26820] ip_tables: iptables: counters copy to user failed while replacing table [ 719.664532][T26824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5034'. [ 720.206938][T26832] vlan3: entered promiscuous mode [ 720.499776][T26852] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5042'. [ 720.522398][T26852] macsec1: entered promiscuous mode [ 720.744219][T26868] netlink: 'syz.3.5048': attribute type 10 has an invalid length. [ 720.774693][T26868] netlink: 'syz.3.5048': attribute type 10 has an invalid length. [ 721.914322][T26926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5062'. [ 721.966153][T26929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5064'. [ 722.237809][T26932] team_slave_0: left allmulticast mode [ 722.303199][T26932] ip6tnl1: left allmulticast mode [ 722.303329][T26932] macvlan2: left allmulticast mode [ 722.428724][T26932] bond5: left promiscuous mode [ 722.428747][T26932] bond5: left allmulticast mode [ 722.439256][T26932] vti0: left promiscuous mode [ 722.447666][T26932] gre3: left allmulticast mode [ 722.574281][ T1110] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.574326][ T1110] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.574359][ T1110] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.574392][ T1110] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 722.622154][T26947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 722.647039][T26958] : entered promiscuous mode [ 722.735816][T26962] x_tables: unsorted entry at hook 1 [ 722.797269][T26966] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20000 [ 722.927680][T26974] netlink: 'syz.0.5076': attribute type 4 has an invalid length. [ 722.997922][T26978] __nla_validate_parse: 1 callbacks suppressed [ 722.997940][T26978] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5075'. [ 723.000895][T26977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5077'. [ 723.035768][T26977] lo: left promiscuous mode [ 723.036143][T26977] tunl0: left promiscuous mode [ 723.036304][T26977] gre0: left promiscuous mode [ 723.036445][T26977] gretap0: left promiscuous mode [ 723.037808][T26977] ip_vti0: left promiscuous mode [ 723.037988][T26977] ip6_vti0: left promiscuous mode [ 723.038124][T26977] sit0: left promiscuous mode [ 723.038899][T26977] ip6tnl0: left promiscuous mode [ 723.039048][T26977] ip6gre0: left promiscuous mode [ 723.039198][T26977] ip6gretap0: left promiscuous mode [ 723.039418][T26977] bridge0: left promiscuous mode [ 723.039576][T26977] vcan0: left promiscuous mode [ 723.039742][T26977] bond0: left promiscuous mode [ 723.040768][T26977] team0: left promiscuous mode [ 723.041436][T26977] dummy0: left promiscuous mode [ 723.042172][T26977] nlmon0: left promiscuous mode [ 723.042357][T26977] vxcan0: left promiscuous mode [ 723.085127][T26977] vxcan1: left promiscuous mode [ 723.085343][T26977] veth0: left promiscuous mode [ 723.085547][T26977] veth1: left promiscuous mode [ 723.085745][T26977] wg0: left promiscuous mode [ 723.085939][T26977] wg1: left promiscuous mode [ 723.158039][T26977] wg2: left promiscuous mode [ 723.158237][T26977] veth0_to_bridge: left promiscuous mode [ 723.158502][T26977] veth1_to_bridge: left promiscuous mode [ 723.158732][T26977] veth1_to_bond: left promiscuous mode [ 723.158855][T26977] bond_slave_1: left promiscuous mode [ 723.158986][T26977] veth0_to_team: left promiscuous mode [ 723.159118][T26977] team_slave_0: left promiscuous mode [ 723.159244][T26977] veth1_to_team: left promiscuous mode [ 723.159373][T26977] team_slave_1: left promiscuous mode [ 723.159510][T26977] veth0_to_batadv: left promiscuous mode [ 723.159687][T26977] batadv_slave_0: left promiscuous mode [ 723.159821][T26977] veth1_to_batadv: left promiscuous mode [ 723.159954][T26977] batadv_slave_1: left promiscuous mode [ 723.160098][T26977] xfrm0: left promiscuous mode [ 723.160269][T26977] veth0_to_hsr: left promiscuous mode [ 723.160522][T26977] veth1_to_hsr: left promiscuous mode [ 723.160821][T26977] hsr0: left promiscuous mode [ 723.160962][T26977] veth1_virt_wifi: left promiscuous mode [ 723.161108][T26977] veth0_virt_wifi: left promiscuous mode [ 723.210054][T26977] virt_wifi0: left promiscuous mode [ 723.210939][T26977] vlan0: left promiscuous mode [ 723.211269][T26977] vlan1: left promiscuous mode [ 723.215524][T26977] macvlan0: left promiscuous mode [ 723.215718][T26977] macvlan1: left promiscuous mode [ 723.215876][T26977] ipvlan0: left promiscuous mode [ 723.217265][T26977] ipvlan1: left promiscuous mode [ 723.217747][T26977] macvtap0: left promiscuous mode [ 723.222068][T26977] geneve1: left promiscuous mode [ 723.222290][T26977] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 723.222436][T26977] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 723.222572][T26977] netdevsim netdevsim0 netdevsim2: left promiscuous mode [ 723.228250][T26977] netdevsim netdevsim0 netdevsim3: left promiscuous mode [ 723.228458][T26977] mac80211_hwsim hwsim44 wlan0: left promiscuous mode [ 723.228628][T26977] mac80211_hwsim hwsim44 nicvf0: left promiscuous mode [ 723.228803][T26977] gtp0: left promiscuous mode [ 723.236072][T26977] bridge1: left promiscuous mode [ 723.236273][T26977] ip6gretap1: left promiscuous mode [ 723.236408][T26977] ip6erspan0: left promiscuous mode [ 723.236554][T26977] bond1: left promiscuous mode [ 723.236692][T26977] vlan2: left promiscuous mode [ 723.236704][T26977] geneve0: left promiscuous mode [ 723.240792][T26977] dvmrp1: left promiscuous mode [ 723.245026][T26977] bond2: left promiscuous mode [ 723.245379][T26977] ip6tnl1: left promiscuous mode [ 723.245393][T26977] ip6tnl1: left allmulticast mode [ 723.245544][T26977] ipip0: left promiscuous mode [ 723.245678][T26977] : left promiscuous mode [ 723.245816][T26977] mac80211_hwsim hwsim56 wlan1: left promiscuous mode [ 723.246008][T26977] sit1: left promiscuous mode [ 723.246158][T26977] bridge2: left promiscuous mode [ 723.246303][T26977] ipvlan2: left promiscuous mode [ 723.246470][T26977] geneve2: left promiscuous mode [ 723.278721][T26977] bond3: left promiscuous mode [ 723.278859][T26977] ip6gretap2: left promiscuous mode [ 723.278975][T26977] bond4: left promiscuous mode [ 723.279101][T26977] syztnl0: left promiscuous mode [ 723.279220][T26977] gre1: left promiscuous mode [ 723.279338][T26977] sit2: left promiscuous mode [ 723.279456][T26977] bridge3: left promiscuous mode [ 723.280373][T26977] bond5: left promiscuous mode [ 723.280502][T26977] macvlan2: left promiscuous mode [ 723.288803][T26977] sit3: left promiscuous mode [ 723.288965][T26977] bond6: left promiscuous mode [ 723.699513][T26996] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5079'. [ 723.714608][T26996] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5079'. [ 723.780980][T27005] netlink: 'syz.1.5082': attribute type 1 has an invalid length. [ 723.858400][T27005] 8021q: adding VLAN 0 to HW filter on device bond6 [ 723.895160][T27007] bond6: (slave geneve3): making interface the new active one [ 723.896634][T27007] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 724.007711][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.027754][T27024] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 724.046846][ T1110] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.046927][ T1110] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.046959][ T1110] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.133392][T27015] syzkaller0: entered promiscuous mode [ 724.133416][T27015] syzkaller0: entered allmulticast mode [ 724.166778][T27015] tipc: Enabled bearer , priority 0 [ 724.189518][T27015] tipc: Resetting bearer [ 724.255432][T27015] tipc: Disabling bearer [ 724.297633][T27035] syzkaller0: entered promiscuous mode [ 724.297655][T27035] syzkaller0: entered allmulticast mode [ 724.426627][T27042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5089'. [ 724.426673][T27042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5089'. [ 724.505948][T27046] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5094'. [ 724.509870][T27046] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 724.529140][T27046] 1ªî{X¹¦: entered allmulticast mode [ 724.532063][T27046] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 724.558582][T27045] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 724.558614][T27045] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 724.558647][T27045] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 724.558832][T27048] syzkaller0: entered promiscuous mode [ 724.558848][T27048] syzkaller0: entered allmulticast mode [ 724.622089][T27045] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 724.940147][T27062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5099'. [ 724.940184][T27062] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5099'. [ 725.050093][T27068] netlink: 'syz.4.5098': attribute type 39 has an invalid length. [ 725.712005][T27117] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 726.361820][T27138] tipc: Resetting bearer [ 726.521058][T27153] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 726.681558][T27162] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5125'. [ 726.765340][T27154] netlink: 'syz.0.5123': attribute type 8 has an invalid length. [ 726.799843][T27159] FAULT_INJECTION: forcing a failure. [ 726.799843][T27159] name failslab, interval 1, probability 0, space 0, times 0 [ 726.799875][T27159] CPU: 1 UID: 0 PID: 27159 Comm: syz.1.5124 Not tainted syzkaller #0 PREEMPT(full) [ 726.799894][T27159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 726.799905][T27159] Call Trace: [ 726.799913][T27159] [ 726.799921][T27159] dump_stack_lvl+0xe8/0x150 [ 726.799953][T27159] should_fail_ex+0x410/0x560 [ 726.799979][T27159] should_failslab+0xa8/0x100 [ 726.800003][T27159] __kmalloc_cache_noprof+0xa3/0x600 [ 726.800023][T27159] ? tc_chain_notify+0x25f/0x2e0 [ 726.800141][T27159] ? tcf_proto_create+0x65/0x330 [ 726.800158][T27159] ? tcf_proto_create+0x65/0x330 [ 726.800182][T27159] tcf_proto_create+0x65/0x330 [ 726.800205][T27159] tc_new_tfilter+0x13a6/0x1810 [ 726.800254][T27159] ? __pfx_tc_new_tfilter+0x10/0x10 [ 726.800295][T27159] ? lock_acquire+0x115/0x350 [ 726.800349][T27159] ? __pfx_tc_new_tfilter+0x10/0x10 [ 726.800372][T27159] rtnetlink_rcv_msg+0x802/0xc00 [ 726.800464][T27159] ? netlink_sendmsg+0x5d4/0xb40 [ 726.800512][T27159] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 726.800534][T27159] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 726.800556][T27159] ? __lock_acquire+0x747/0x2de0 [ 726.800586][T27159] netlink_rcv_skb+0x226/0x4a0 [ 726.800642][T27159] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 726.800663][T27159] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 726.800700][T27159] ? netlink_deliver_tap+0x2e/0x1b0 [ 726.800724][T27159] ? netlink_deliver_tap+0x2e/0x1b0 [ 726.800755][T27159] netlink_unicast+0x7bd/0x940 [ 726.800800][T27159] netlink_sendmsg+0x813/0xb40 [ 726.800825][T27159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 726.800849][T27159] ? apparmor_socket_sendmsg+0x98/0x360 [ 726.800872][T27159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 726.800886][T27159] sock_sendmsg_nosec+0x13a/0x180 [ 726.800908][T27159] ____sys_sendmsg+0x54e/0x850 [ 726.800936][T27159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 726.800969][T27159] ? import_iovec+0x73/0xa0 [ 726.801035][T27159] ___sys_sendmsg+0x2a5/0x360 [ 726.801058][T27159] ? __lock_acquire+0x747/0x2de0 [ 726.801082][T27159] ? __pfx____sys_sendmsg+0x10/0x10 [ 726.801138][T27159] ? __fget_files+0x2a/0x420 [ 726.801161][T27159] ? __fget_files+0x3a2/0x420 [ 726.801195][T27159] __x64_sys_sendmsg+0x1b1/0x290 [ 726.801222][T27159] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 726.801268][T27159] do_syscall_64+0x166/0x520 [ 726.801292][T27159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.801311][T27159] ? clear_bhb_loop+0x70/0xc0 [ 726.801343][T27159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.801362][T27159] RIP: 0033:0x7f7a5379e159 [ 726.801380][T27159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.801395][T27159] RSP: 002b:00007f7a545b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 726.801415][T27159] RAX: ffffffffffffffda RBX: 00007f7a53a25fa0 RCX: 00007f7a5379e159 [ 726.801429][T27159] RDX: 0000000000008080 RSI: 00002000000001c0 RDI: 000000000000000a [ 726.801441][T27159] RBP: 00007f7a545b2090 R08: 0000000000000000 R09: 0000000000000000 [ 726.801454][T27159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.801465][T27159] R13: 00007f7a53a26038 R14: 00007f7a53a25fa0 R15: 00007ffc86b0a8d8 [ 726.801496][T27159] [ 726.845460][T27154] veth1_to_team: entered promiscuous mode [ 726.847785][T27154] gretap0: entered promiscuous mode [ 726.884234][T27154] veth1_to_team: left promiscuous mode [ 726.886584][T27154] gretap0: left promiscuous mode [ 727.116124][T27176] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 727.212514][T27175] veth0_to_team (unregistering): left promiscuous mode [ 727.338540][T27184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 727.540124][T27186] syzkaller0: entered promiscuous mode [ 727.540150][T27186] syzkaller0: entered allmulticast mode [ 727.561824][T27195] netlink: 'syz.3.5135': attribute type 16 has an invalid length. [ 728.267209][T27207] __nla_validate_parse: 3 callbacks suppressed [ 728.267230][T27207] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5136'. [ 732.169134][T27225] FAULT_INJECTION: forcing a failure. [ 732.169134][T27225] name failslab, interval 1, probability 0, space 0, times 0 [ 732.169167][T27225] CPU: 0 UID: 0 PID: 27225 Comm: syz.4.5140 Not tainted syzkaller #0 PREEMPT(full) [ 732.169187][T27225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 732.169197][T27225] Call Trace: [ 732.169205][T27225] [ 732.169213][T27225] dump_stack_lvl+0xe8/0x150 [ 732.169243][T27225] should_fail_ex+0x410/0x560 [ 732.169270][T27225] should_failslab+0xa8/0x100 [ 732.169296][T27225] __kmalloc_cache_noprof+0xa3/0x600 [ 732.169317][T27225] ? basic_change+0x2e1/0xfc0 [ 732.169452][T27225] ? basic_change+0x2e1/0xfc0 [ 732.169483][T27225] basic_change+0x2e1/0xfc0 [ 732.169509][T27225] ? lock_acquire+0x115/0x350 [ 732.169537][T27225] ? __pfx_basic_change+0x10/0x10 [ 732.169583][T27225] tc_new_tfilter+0x1222/0x1810 [ 732.169644][T27225] ? __pfx_tc_new_tfilter+0x10/0x10 [ 732.169685][T27225] ? lock_acquire+0x115/0x350 [ 732.169713][T27225] ? __pfx_tc_new_tfilter+0x10/0x10 [ 732.169738][T27225] rtnetlink_rcv_msg+0x802/0xc00 [ 732.169759][T27225] ? netlink_sendmsg+0x5d4/0xb40 [ 732.169781][T27225] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 732.169800][T27225] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 732.169822][T27225] ? __lock_acquire+0x747/0x2de0 [ 732.169942][T27225] netlink_rcv_skb+0x226/0x4a0 [ 732.169984][T27225] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 732.170007][T27225] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 732.170044][T27225] ? netlink_deliver_tap+0x2e/0x1b0 [ 732.170070][T27225] ? netlink_deliver_tap+0x2e/0x1b0 [ 732.170101][T27225] netlink_unicast+0x7bd/0x940 [ 732.170140][T27225] netlink_sendmsg+0x813/0xb40 [ 732.170165][T27225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 732.170191][T27225] ? apparmor_socket_sendmsg+0x98/0x360 [ 732.170215][T27225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 732.170231][T27225] sock_sendmsg_nosec+0x13a/0x180 [ 732.170253][T27225] ____sys_sendmsg+0x54e/0x850 [ 732.170280][T27225] ? __pfx_____sys_sendmsg+0x10/0x10 [ 732.170310][T27225] ? import_iovec+0x73/0xa0 [ 732.170334][T27225] ___sys_sendmsg+0x2a5/0x360 [ 732.170356][T27225] ? __lock_acquire+0x747/0x2de0 [ 732.170381][T27225] ? __pfx____sys_sendmsg+0x10/0x10 [ 732.170445][T27225] ? __fget_files+0x2a/0x420 [ 732.170470][T27225] ? __fget_files+0x3a2/0x420 [ 732.170526][T27225] __x64_sys_sendmsg+0x1b1/0x290 [ 732.170556][T27225] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 732.170604][T27225] do_syscall_64+0x166/0x520 [ 732.170629][T27225] ? trace_irq_disable+0x3b/0x140 [ 732.170648][T27225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.170668][T27225] ? clear_bhb_loop+0x70/0xc0 [ 732.170693][T27225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.170713][T27225] RIP: 0033:0x7fe295f9e159 [ 732.170734][T27225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.170750][T27225] RSP: 002b:00007fe296e2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 732.170772][T27225] RAX: ffffffffffffffda RBX: 00007fe296225fa0 RCX: 00007fe295f9e159 [ 732.170786][T27225] RDX: 0000000000008080 RSI: 00002000000001c0 RDI: 000000000000000a [ 732.170799][T27225] RBP: 00007fe296e2c090 R08: 0000000000000000 R09: 0000000000000000 [ 732.170811][T27225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.170823][T27225] R13: 00007fe296226038 R14: 00007fe296225fa0 R15: 00007ffc5d48e6d8 [ 732.170855][T27225] [ 732.486724][T27231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.754216][T27251] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5148'. [ 732.754369][T27251] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5148'. [ 732.784430][T27232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5141'. [ 732.876607][T27257] netlink: 'syz.1.5149': attribute type 16 has an invalid length. [ 732.876631][T27257] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5149'. [ 732.999445][T27260] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5150'. [ 733.577063][T27277] FAULT_INJECTION: forcing a failure. [ 733.577063][T27277] name failslab, interval 1, probability 0, space 0, times 0 [ 733.577095][T27277] CPU: 1 UID: 0 PID: 27277 Comm: syz.0.5156 Not tainted syzkaller #0 PREEMPT(full) [ 733.577117][T27277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 733.577129][T27277] Call Trace: [ 733.577137][T27277] [ 733.577145][T27277] dump_stack_lvl+0xe8/0x150 [ 733.577178][T27277] should_fail_ex+0x410/0x560 [ 733.577206][T27277] should_failslab+0xa8/0x100 [ 733.577232][T27277] __kmalloc_cache_noprof+0xa3/0x600 [ 733.577254][T27277] ? basic_change+0x2e1/0xfc0 [ 733.577279][T27277] ? basic_change+0x2e1/0xfc0 [ 733.577310][T27277] basic_change+0x2e1/0xfc0 [ 733.577338][T27277] ? lock_acquire+0x115/0x350 [ 733.577366][T27277] ? __pfx_basic_change+0x10/0x10 [ 733.577410][T27277] tc_new_tfilter+0x1222/0x1810 [ 733.577468][T27277] ? __pfx_tc_new_tfilter+0x10/0x10 [ 733.577512][T27277] ? lock_acquire+0x115/0x350 [ 733.577547][T27277] ? __pfx_tc_new_tfilter+0x10/0x10 [ 733.577573][T27277] rtnetlink_rcv_msg+0x802/0xc00 [ 733.577595][T27277] ? netlink_sendmsg+0x5d4/0xb40 [ 733.577614][T27277] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 733.577636][T27277] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 733.577660][T27277] ? __lock_acquire+0x747/0x2de0 [ 733.577690][T27277] netlink_rcv_skb+0x226/0x4a0 [ 733.577717][T27277] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 733.577742][T27277] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 733.577782][T27277] ? netlink_deliver_tap+0x2e/0x1b0 [ 733.577809][T27277] ? netlink_deliver_tap+0x2e/0x1b0 [ 733.577842][T27277] netlink_unicast+0x7bd/0x940 [ 733.577889][T27277] netlink_sendmsg+0x813/0xb40 [ 733.577917][T27277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 733.577944][T27277] ? apparmor_socket_sendmsg+0x98/0x360 [ 733.577968][T27277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 733.577984][T27277] sock_sendmsg_nosec+0x13a/0x180 [ 733.578007][T27277] ____sys_sendmsg+0x54e/0x850 [ 733.578036][T27277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 733.578068][T27277] ? import_iovec+0x73/0xa0 [ 733.578095][T27277] ___sys_sendmsg+0x2a5/0x360 [ 733.578119][T27277] ? __lock_acquire+0x747/0x2de0 [ 733.578142][T27277] ? __pfx____sys_sendmsg+0x10/0x10 [ 733.578202][T27277] ? __fget_files+0x2a/0x420 [ 733.578226][T27277] ? __fget_files+0x3a2/0x420 [ 733.578260][T27277] __x64_sys_sendmsg+0x1b1/0x290 [ 733.578289][T27277] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 733.578337][T27277] do_syscall_64+0x166/0x520 [ 733.578361][T27277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.578380][T27277] ? clear_bhb_loop+0x70/0xc0 [ 733.578404][T27277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.578424][T27277] RIP: 0033:0x7f0bb1d9e159 [ 733.578442][T27277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.578458][T27277] RSP: 002b:00007f0bb2ba1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 733.578479][T27277] RAX: ffffffffffffffda RBX: 00007f0bb2025fa0 RCX: 00007f0bb1d9e159 [ 733.578493][T27277] RDX: 0000000000008080 RSI: 00002000000001c0 RDI: 000000000000000a [ 733.578506][T27277] RBP: 00007f0bb2ba1090 R08: 0000000000000000 R09: 0000000000000000 [ 733.578518][T27277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.578529][T27277] R13: 00007f0bb2026038 R14: 00007f0bb2025fa0 R15: 00007fff2f96a748 [ 733.578560][T27277] [ 733.980352][T27293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5163'. [ 733.980377][T27293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5163'. [ 734.004879][T27293] netlink: 'syz.0.5163': attribute type 30 has an invalid length. [ 734.004899][T27293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5163'. [ 734.004924][T27293] bond0: option arp_missed_max: invalid value (0) [ 734.004940][T27293] bond0: option arp_missed_max: allowed values 1 - 255 [ 734.115362][T27302] netlink: 'syz.4.5167': attribute type 1 has an invalid length. [ 734.149708][T27302] bond7: entered promiscuous mode [ 734.150238][T27302] 8021q: adding VLAN 0 to HW filter on device bond7 [ 734.184135][T27302] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5167'. [ 734.208668][T27309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5169'. [ 734.232002][T27302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5167'. [ 734.275572][T27302] bond7: entered allmulticast mode [ 734.334411][T27317] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5170'. [ 734.334433][T27317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5170'. [ 734.346684][T27317] tipc: Enabling of bearer rejected, already enabled [ 734.523484][T27326] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5173'. [ 734.607664][T27325] netlink: 'syz.0.5171': attribute type 16 has an invalid length. [ 734.607688][T27325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5171'. [ 735.879888][T27364] IPVS: Error connecting to the multicast addr [ 736.360508][T27388] netlink: 'syz.2.5188': attribute type 16 has an invalid length. [ 736.641723][T27399] netlink: 'syz.4.5195': attribute type 21 has an invalid length. [ 736.642034][T27396] gretap0: entered promiscuous mode [ 736.657921][T27396] siw: device registration error -23 [ 736.665589][T27396] 0ªî{X¹¦: renamed from gretap0 [ 736.679709][T27396] 0ªî{X¹¦: left promiscuous mode [ 736.679730][T27396] 0ªî{X¹¦: entered allmulticast mode [ 736.686078][T27396] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 736.734152][T27403] netlink: 'syz.1.5196': attribute type 1 has an invalid length. [ 736.881902][T27415] lo: entered promiscuous mode [ 736.882082][T27415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 736.883574][T27414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 737.401408][T27433] dummy0 speed is unknown, defaulting to 1000 [ 737.842378][T27450] netlink: 'syz.3.5203': attribute type 10 has an invalid length. [ 738.083144][T27450] syz_tun: entered promiscuous mode [ 738.201409][T27436] SET target dimension over the limit! [ 738.202227][ T5715] s`z1: Port: 1 Link DOWN [ 738.232619][T27433] wg2 speed is unknown, defaulting to 1000 [ 738.462459][T27472] netlink: 'syz.3.5209': attribute type 1 has an invalid length. [ 738.477894][T27473] netlink: 'syz.4.5207': attribute type 1 has an invalid length. [ 738.749907][T27486] xt_CT: No such helper "syz1" [ 738.779237][T27494] netlink: zone id is out of range [ 738.779254][T27494] netlink: zone id is out of range [ 738.779263][T27494] netlink: zone id is out of range [ 738.779269][T27494] netlink: zone id is out of range [ 738.779275][T27494] netlink: zone id is out of range [ 738.779282][T27494] netlink: zone id is out of range [ 738.779293][T27494] netlink: zone id is out of range [ 738.850127][T27473] bridge1: entered promiscuous mode [ 738.901300][T27488] gretap0: left allmulticast mode [ 739.041106][T27488] syz_tun: left promiscuous mode [ 739.180092][T27488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 739.262619][T27488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 739.331565][T27476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 739.559011][T27497] __nla_validate_parse: 17 callbacks suppressed [ 739.559032][T27497] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5213'. [ 739.560005][T27497] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5213'. [ 739.573963][T27497] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5213'. [ 739.579215][T27497] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5213'. [ 739.579698][T27497] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5213'. [ 739.581677][T27497] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5213'. [ 739.590506][T27497] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5213'. [ 739.600270][T27497] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5213'. [ 739.600854][T27497] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5213'. [ 739.601333][T27497] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5213'. [ 739.744448][T27488] batman_adv: batadv0: Interface deactivated: macvtap1 [ 739.934276][T27488] bond4: left promiscuous mode [ 740.013906][T27488] tipc: Resetting bearer [ 740.034385][T27488] mac80211_hwsim hwsim39 syzkaller0: left promiscuous mode [ 740.034412][T27488] mac80211_hwsim hwsim39 syzkaller0: left allmulticast mode [ 740.365931][T22686] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.365965][T22686] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.366075][T22686] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.366098][T22686] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.366131][T22686] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.366154][T22686] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.366187][T22686] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.366209][T22686] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.486417][ T4940] block nbd1: Receive control failed (result -32) [ 740.489867][ T5620] block nbd0: Receive control failed (result -32) [ 741.004430][T27534] netlink: 'syz.2.5221': attribute type 1 has an invalid length. [ 741.960805][T27577] ip6tnl2: entered promiscuous mode [ 741.960827][T27577] ip6tnl2: entered allmulticast mode [ 742.280732][T27592] net_ratelimit: 500 callbacks suppressed [ 742.280753][T27592] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 742.749817][T27619] netlink: 'syz.3.5248': attribute type 34 has an invalid length. [ 742.828250][T27622] netlink: 'syz.3.5249': attribute type 2 has an invalid length. [ 742.828272][T27622] netlink: 'syz.3.5249': attribute type 1 has an invalid length. [ 742.875512][T27625] syz.0.5246: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 742.875582][T27625] CPU: 0 UID: 0 PID: 27625 Comm: syz.0.5246 Not tainted syzkaller #0 PREEMPT(full) [ 742.875604][T27625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 742.875616][T27625] Call Trace: [ 742.875624][T27625] [ 742.875634][T27625] dump_stack_lvl+0xe8/0x150 [ 742.875669][T27625] warn_alloc+0x24d/0x270 [ 742.875690][T27625] ? kasan_save_track+0x4f/0x80 [ 742.875710][T27625] ? kasan_save_track+0x3e/0x80 [ 742.875733][T27625] ? __pfx_warn_alloc+0x10/0x10 [ 742.875750][T27625] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 742.875776][T27625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.875818][T27625] __vmalloc_node_range_noprof+0x127/0x1540 [ 742.875870][T27625] ? rcu_is_watching+0x16/0xb0 [ 742.875900][T27625] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 742.875928][T27625] ? __kmalloc_cache_noprof+0x321/0x600 [ 742.875949][T27625] ? __kmalloc_cache_noprof+0x14d/0x600 [ 742.875968][T27625] ? xskq_create+0x56/0x220 [ 742.875996][T27625] xskq_create+0x148/0x220 [ 742.876018][T27625] ? xsk_init_queue+0x8a/0xe0 [ 742.876042][T27625] xsk_init_queue+0x8a/0xe0 [ 742.876075][T27625] xsk_setsockopt+0x52a/0x960 [ 742.876099][T27625] ? __pfx_xsk_setsockopt+0x10/0x10 [ 742.876121][T27625] ? __pfx_aa_sk_perm+0x10/0x10 [ 742.876155][T27625] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 742.876181][T27625] ? __pfx_xsk_setsockopt+0x10/0x10 [ 742.876204][T27625] do_sock_setsockopt+0x17c/0x1b0 [ 742.876234][T27625] __x64_sys_setsockopt+0x13d/0x1b0 [ 742.876264][T27625] do_syscall_64+0x166/0x520 [ 742.876288][T27625] ? trace_irq_disable+0x3b/0x140 [ 742.876308][T27625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.876328][T27625] ? clear_bhb_loop+0x70/0xc0 [ 742.876353][T27625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.876373][T27625] RIP: 0033:0x7f0bb1d9e159 [ 742.876391][T27625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.876407][T27625] RSP: 002b:00007f0bafff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 742.876427][T27625] RAX: ffffffffffffffda RBX: 00007f0bb2026180 RCX: 00007f0bb1d9e159 [ 742.876442][T27625] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d [ 742.876454][T27625] RBP: 00007f0bb1e3506b R08: 0000000000000004 R09: 0000000000000000 [ 742.876467][T27625] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.876479][T27625] R13: 00007f0bb2026218 R14: 00007f0bb2026180 R15: 00007fff2f96a748 [ 742.876512][T27625] [ 742.884111][T27625] Mem-Info: [ 742.884128][T27625] active_anon:9124 inactive_anon:5 isolated_anon:0 [ 742.884128][T27625] active_file:18 inactive_file:43638 isolated_file:0 [ 742.884128][T27625] unevictable:5 dirty:95 writeback:0 [ 742.884128][T27625] slab_reclaimable:12560 slab_unreclaimable:111321 [ 742.884128][T27625] mapped:33498 shmem:3398 pagetables:1594 [ 742.884128][T27625] sec_pagetables:0 bounce:0 [ 742.884128][T27625] kernel_misc_reclaimable:0 [ 742.884128][T27625] free:1264105 free_pcp:13458 free_cma:0 [ 742.884180][T27625] Node 0 active_anon:36496kB inactive_anon:20kB active_file:72kB inactive_file:174352kB unevictable:20kB isolated(anon):0kB isolated(file):0kB mapped:133992kB dirty:380kB writeback:0kB shmem:13592kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17688kB pagetables:6212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 742.884232][T27625] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 742.884278][T27625] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 742.884332][T27625] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 742.884368][T27625] Node 0 DMA32 free:1103428kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:36496kB inactive_anon:20kB active_file:72kB inactive_file:174352kB unevictable:20kB writepending:380kB zspages:0kB present:3129332kB managed:2546920kB mlocked:20kB bounce:0kB free_pcp:53832kB local_pcp:14612kB free_cma:0kB [ 742.884424][T27625] lowmem_reserve[]: 0 0 0 0 0 [ 742.884457][T27625] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 742.884507][T27625] lowmem_reserve[]: 0 0 0 0 0 [ 742.884540][T27625] Node 1 Normal free:3937632kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 742.884607][T27625] lowmem_reserve[]: 0 0 0 0 0 [ 742.884642][T27625] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 742.884744][T27625] Node 0 DMA32: 3*4kB (UE) 278*8kB (UE) 574*16kB (UME) 1004*32kB (UM) 792*64kB (UME) 520*128kB (UM) 400*256kB (UME) 289*512kB (UM) 206*1024kB (UM) 11*2048kB (UME) 112*4096kB (UM) = 1103388kB [ 742.884883][T27625] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 742.884973][T27625] Node 1 Normal: 6*4kB (UM) 5*8kB (UM) 6*16kB (UM) 4*32kB (UM) 7*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 960*4096kB (UM) = 3937632kB [ 742.885118][T27625] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 742.885134][T27625] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 742.885150][T27625] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 742.885166][T27625] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 742.885181][T27625] 47075 total pagecache pages [ 742.885189][T27625] 0 pages in swap cache [ 742.885196][T27625] Free swap = 124996kB [ 742.885203][T27625] Total swap = 124996kB [ 742.885210][T27625] 2097051 pages RAM [ 742.885217][T27625] 0 pages HighMem/MovableOnly [ 742.885224][T27625] 428705 pages reserved [ 742.885231][T27625] 0 pages cma reserved [ 743.880244][T27634] tap0: tun_chr_ioctl cmd 1074025692 [ 744.217164][T27665] netlink: 'syz.4.5263': attribute type 16 has an invalid length. [ 744.447909][T27673] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 744.719053][T27675] __nla_validate_parse: 18 callbacks suppressed [ 744.719083][T27675] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5267'. [ 745.645437][T27726] vlan0: entered promiscuous mode [ 745.666502][T27722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5275'. [ 745.824277][T27724] netlink: 'syz.1.5277': attribute type 1 has an invalid length. [ 745.839454][T27736] netlink: 'syz.2.5279': attribute type 16 has an invalid length. [ 745.839476][T27736] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5279'. [ 746.354968][T22676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.354989][T22676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.456876][T27754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5283'. [ 746.476759][T27756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5282'. [ 746.824111][T27765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5286'. [ 746.824282][T27765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5286'. [ 747.034990][T27776] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 747.042562][T27776] bond7 (unregistering): Released all slaves [ 747.411263][T27788] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 747.411294][T27788] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 747.434812][T27788] tipc: Resetting bearer [ 748.120823][T27828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5303'. [ 748.446609][T27804] Can't find ip_set type [ 748.450673][T27801] Can't find ip_set type [ 748.828134][T27848] syzkaller0: entered promiscuous mode [ 748.828165][T27848] syzkaller0: entered allmulticast mode [ 749.052478][T27863] netlink: 'syz.3.5309': attribute type 1 has an invalid length. [ 749.079627][T18953] hid-generic 0005:046D:0009.0002: item fetching failed at offset 0/1 [ 749.081908][T18953] hid-generic 0005:046D:0009.0002: probe with driver hid-generic failed with error -22 [ 749.093213][T27866] syzkaller0: entered promiscuous mode [ 749.093233][T27866] syzkaller0: entered allmulticast mode [ 749.186267][ T31] audit: type=1804 audit(1790219667.116:18): pid=27873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5311" name="/newroot/434/cgroup.controllers" dev="tmpfs" ino=2250 res=1 errno=0 [ 749.186491][ T31] audit: type=1800 audit(1790219667.116:19): pid=27873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5311" name="cgroup.controllers" dev="tmpfs" ino=2250 res=0 errno=0 [ 749.801994][T27897] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5317'. [ 749.988750][T27905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5320'. [ 749.989604][T27905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5320'. [ 749.989636][T27905] netlink: 'syz.2.5320': attribute type 7 has an invalid length. [ 749.989647][T27905] netlink: 'syz.2.5320': attribute type 8 has an invalid length. [ 749.989658][T27905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5320'. [ 750.018828][T27906] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 750.041682][T27907] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5320'. [ 750.183649][T27913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5322'. [ 750.274480][T27911] xt_CT: No such helper "snmp" [ 750.428254][T27924] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5323'. [ 751.756174][T27961] netlink: 'syz.2.5332': attribute type 16 has an invalid length. [ 751.756198][T27961] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.5332'. [ 751.811424][T27967] bond9: option updelay: invalid value (18446744073709518847) [ 751.811448][T27967] bond9: option updelay: allowed values 0 - 2147483647 [ 751.829571][T27967] bond9 (unregistering): Released all slaves [ 751.951123][T27970] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5334'. [ 752.100198][T27972] mac80211_hwsim hwsim39 syzkaller0: left promiscuous mode [ 752.100227][T27972] mac80211_hwsim hwsim39 syzkaller0: left allmulticast mode [ 752.100604][T27972] tipc: Resetting bearer [ 752.170551][T27989] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5338'. [ 753.925859][T27947] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 754.430677][T28017] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 754.430705][T28017] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 754.430920][T28017] tipc: Resetting bearer [ 754.647413][T28039] netlink: 'syz.3.5351': attribute type 16 has an invalid length. [ 755.041706][T28049] __nla_validate_parse: 4 callbacks suppressed [ 755.041741][T28049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5354'. [ 755.068181][T28049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5354'. [ 755.260046][T28054] openvswitch: netlink: Duplicate or invalid key (type 0). [ 755.260390][T28054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5356'. [ 755.260409][T28054] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5356'. [ 755.260424][T28054] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5356'. [ 755.654394][T28069] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5361'. [ 755.654732][T28069] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5361'. [ 755.654828][T28069] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5361'. [ 755.657472][T28069] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5361'. [ 755.657590][T28069] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5361'. [ 755.998474][T28106] netlink: 'syz.3.5366': attribute type 1 has an invalid length. [ 756.225744][T28117] netlink: 'syz.2.5369': attribute type 1 has an invalid length. [ 756.329003][T28117] 8021q: adding VLAN 0 to HW filter on device bond9 [ 756.564869][T28135] netlink: 'syz.0.5372': attribute type 16 has an invalid length. [ 756.918392][T28159] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 757.231707][T28178] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 757.231724][T28178] IPv6: NLM_F_CREATE should be set when creating new route [ 757.231775][T28178] IPv6: NLM_F_CREATE should be set when creating new route [ 757.231800][T28178] IPv6: NLM_F_CREATE should be set when creating new route [ 757.270041][T28178] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 757.438119][T28188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 757.814549][T28201] bridge: RTM_NEWNEIGH with invalid ether address [ 757.981144][T28211] netlink: 'syz.4.5395': attribute type 2 has an invalid length. [ 758.096699][T27100] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x2c [ 758.329247][T28242] netlink: 'syz.3.5402': attribute type 1 has an invalid length. [ 758.692371][T28242] bond5: (slave veth9): Enslaving as an active interface with a down link [ 758.761145][T28252] bond5: (slave veth11): Enslaving as an active interface with a down link [ 758.779289][T28254] 8021q: adding VLAN 0 to HW filter on device bond5 [ 758.945370][T28277] netlink: 'syz.1.5409': attribute type 1 has an invalid length. [ 758.980695][T28277] 8021q: adding VLAN 0 to HW filter on device bond8 [ 759.028664][T28277] bond8: (slave veth7): Enslaving as an active interface with a down link [ 759.298868][T28302] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 759.468170][T28302] 8021q: adding VLAN 0 to HW filter on device bond9 [ 759.499626][T28311] bond9: entered promiscuous mode [ 759.499651][T28311] bond9: entered allmulticast mode [ 759.656566][T28302] macvlan3: entered promiscuous mode [ 759.656591][T28302] macvlan3: entered allmulticast mode [ 759.959901][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.959940][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.959963][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.959987][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960009][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960032][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960055][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960078][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960100][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960123][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960146][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960168][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960190][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960211][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960232][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960255][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960276][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960299][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960322][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960343][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960366][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960388][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960420][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960443][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960465][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960487][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960509][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960531][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960554][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960575][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960597][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960619][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960654][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960702][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960724][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960747][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960769][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960791][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960814][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960836][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960858][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960880][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960902][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960924][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960947][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.960996][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.961018][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.961041][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.961076][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.961100][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.961121][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.961142][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.961165][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.961187][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.961210][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.961232][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.961254][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.961277][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.961300][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.961323][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.961346][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.961369][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 759.961391][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 760.091009][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 760.091041][T28335] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 760.483776][T28350] __nla_validate_parse: 41 callbacks suppressed [ 760.483795][T28350] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5424'. [ 760.483817][T28350] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 760.485542][T28357] netlink: 'syz.0.5425': attribute type 2 has an invalid length. [ 760.943191][T28381] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 761.234967][T28392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5431'. [ 761.242392][T28392] macvtap1: entered promiscuous mode [ 761.242412][T28392] ip6gretap0: entered promiscuous mode [ 761.242569][T28392] macvtap1: entered allmulticast mode [ 761.242578][T28392] ip6gretap0: entered allmulticast mode [ 761.279035][T28392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5431'. [ 761.281632][T28392] ip6gretap0: left allmulticast mode [ 761.281657][T28392] ip6gretap0: left promiscuous mode [ 761.281925][T28392] macvtap1: left promiscuous mode [ 761.281940][T28392] macvtap1: left allmulticast mode [ 763.414046][T28350] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 764.069443][T28432] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5442'. [ 764.504458][T28458] bridge0: port 3(veth0) entered blocking state [ 764.504560][T28458] bridge0: port 3(veth0) entered disabled state [ 764.504723][T28458] veth0: entered allmulticast mode [ 764.508266][T28458] veth0: entered promiscuous mode [ 764.611094][T28462] syzkaller0: entered promiscuous mode [ 764.611117][T28462] syzkaller0: entered allmulticast mode [ 764.627220][T28463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5450'. [ 764.627242][T28463] netlink: 'syz.0.5450': attribute type 1 has an invalid length. [ 764.744833][T28466] x_tables: duplicate underflow at hook 3 [ 764.761969][T28466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5452'. [ 764.880685][T28476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5456'. [ 765.364207][T28500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5464'. [ 765.500192][T28509] syzkaller0: entered promiscuous mode [ 765.500215][T28509] syzkaller0: entered allmulticast mode [ 765.558986][T28515] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5470'. [ 765.616212][T28520] ip_tables: iptables: counters copy to user failed while replacing table [ 765.771108][T28525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5473'. [ 766.323519][T28529] dummy0 speed is unknown, defaulting to 1000 [ 766.678096][T28549] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5479'. [ 766.721612][T28529] wg2 speed is unknown, defaulting to 1000 [ 766.735309][T28546] rdma_rxe: rxe_newlink: failed to add wg2 [ 766.951098][T28561] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 766.951132][T28561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 767.486155][T28574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 767.707163][T28588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5490'. [ 767.918632][T28602] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 767.939185][T28605] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 768.187282][T28619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5495'. [ 768.254735][T28628] netlink: 'syz.1.5497': attribute type 1 has an invalid length. [ 768.254757][T28628] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5497'. [ 768.254771][T28628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5497'. [ 768.281253][T28576] syzkaller1: entered promiscuous mode [ 768.281273][T28576] syzkaller1: entered allmulticast mode [ 768.446345][T28641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5500'. [ 768.446385][T28641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5500'. [ 768.467736][T28638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5500'. [ 768.882225][T28658] 1ªî{X¹¦: left allmulticast mode [ 768.912334][T28661] netlink: 'syz.2.5506': attribute type 21 has an invalid length. [ 768.912359][T28661] IPv6: NLM_F_CREATE should be specified when creating new route [ 768.974033][T28665] netlink: 'syz.2.5506': attribute type 1 has an invalid length. [ 768.974701][T28665] openvswitch: netlink: Flow key attr not present in new flow. [ 768.983005][T10763] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.983061][T10763] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.983093][T10763] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.983123][T10763] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.219377][T28673] openvswitch: netlink: Flow key attr not present in new flow. [ 769.513964][T28692] 0·: renamed from hsr0 [ 769.516124][T28692] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 769.516138][T28692] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 769.517988][T28692] 0·: entered allmulticast mode [ 769.518001][T28692] hsr_slave_0: entered allmulticast mode [ 769.518011][T28692] hsr_slave_1: entered allmulticast mode [ 769.518928][T28692] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 770.400239][T28726] syzkaller1: entered promiscuous mode [ 770.400263][T28726] syzkaller1: entered allmulticast mode [ 770.560923][T28752] netlink: 'syz.3.5532': attribute type 10 has an invalid length. [ 770.577528][T28752] netlink: 'syz.3.5532': attribute type 10 has an invalid length. [ 770.609550][ T4940] Bluetooth: hci4: unexpected event 0x04 length: 0 < 10 [ 770.644714][T28763] __nla_validate_parse: 15 callbacks suppressed [ 770.644735][T28763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5536'. [ 770.644923][T28759] netlink: 'syz.4.5536': attribute type 4 has an invalid length. [ 770.667920][T28761] openvswitch: netlink: IP tunnel dst address not specified [ 770.683771][T28759] netlink: 'syz.4.5536': attribute type 4 has an invalid length. [ 770.848141][T28774] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5540'. [ 770.920072][T28776] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5541'. [ 771.070454][T28781] siw: device registration error -23 [ 771.070749][T28785] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5545'. [ 771.070914][T28785] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5545'. [ 771.071010][T28785] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5545'. [ 771.071107][T28785] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5545'. [ 771.071200][T28785] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5545'. [ 771.071350][T28785] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5545'. [ 771.071445][T28785] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5545'. [ 771.129253][T28781] netlink: 'syz.2.5543': attribute type 10 has an invalid length. [ 771.206592][T28781] geneve2: entered promiscuous mode [ 771.206609][T28781] geneve2: entered allmulticast mode [ 771.235262][T28791] syzkaller0: entered promiscuous mode [ 771.235278][T28791] syzkaller0: entered allmulticast mode [ 772.054036][T28840] netlink: 'syz.3.5552': attribute type 3 has an invalid length. [ 772.061072][T28842] netlink: 'syz.1.5554': attribute type 3 has an invalid length. [ 772.169792][T28850] xt_CT: No such helper "netbios-ns" [ 772.939390][T28880] netlink: Setting conntrack mark requires 'commit' flag. [ 772.939422][T28880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.221948][T28890] dummy0 speed is unknown, defaulting to 1000 [ 774.696528][T28890] wg2 speed is unknown, defaulting to 1000 [ 775.755125][T28966] 8021q: adding VLAN 0 to HW filter on device bond11 [ 775.826916][T28966] bond11 (unregistering): Released all slaves [ 776.677512][T28996] __nla_validate_parse: 29 callbacks suppressed [ 776.677532][T28996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5588'. [ 776.677546][T28996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5588'. [ 776.678181][T28996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5588'. [ 776.678195][T28996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5588'. [ 776.870797][T29005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5589'. [ 776.930969][T29006] netlink: 173 bytes leftover after parsing attributes in process `syz.3.5589'. [ 777.071773][T29016] netlink: 198796 bytes leftover after parsing attributes in process `syz.2.5590'. [ 777.071801][T29016] netlink: 'syz.2.5590': attribute type 2 has an invalid length. [ 777.106032][T29005] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5589'. [ 777.140962][T29005] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 777.377441][T29024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5587'. [ 777.572193][T29036] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5594'. [ 777.832035][T29049] siw: device registration error -23 [ 778.228934][T28895] udevd[28895]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 778.275183][T28895] udevd[28895]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 778.293260][T29065] syzkaller1: entered promiscuous mode [ 778.293281][T29065] syzkaller1: entered allmulticast mode [ 778.421680][T29069] xt_policy: output policy not valid in PREROUTING and INPUT [ 779.955369][T29147] nbd3: detected capacity change from 0 to 63 [ 779.955704][T29148] nbd: nbd3 already in use [ 779.982186][ T4940] block nbd3: Receive control failed (result -104) [ 780.359437][T29161] syzkaller0: entered promiscuous mode [ 780.359460][T29161] syzkaller0: entered allmulticast mode [ 780.870401][T29151] vlan2: entered allmulticast mode [ 781.524010][T29189] x_tables: duplicate underflow at hook 1 [ 781.650575][T29193] netlink: 'syz.3.5639': attribute type 12 has an invalid length. [ 781.706675][T29199] __nla_validate_parse: 15 callbacks suppressed [ 781.706697][T29199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5641'. [ 781.820004][T29195] bridge_slave_0: left allmulticast mode [ 781.820031][T29195] bridge_slave_0: left promiscuous mode [ 781.820241][T29195] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.867221][T29195] bridge_slave_1: left allmulticast mode [ 781.867248][T29195] bridge_slave_1: left promiscuous mode [ 781.867481][T29195] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.919346][T29197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5640'. [ 782.040722][T29212] can: request_module (can-proto-0) failed. [ 782.215987][T29199] ip_tables: iptables: counters copy to user failed while replacing table [ 782.820642][T29205] bridge0: port 1(syz_tun) entered blocking state [ 782.820713][T29205] bridge0: port 1(syz_tun) entered forwarding state [ 782.835941][T29205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.837048][T29205] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.839958][T29205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.906764][T29205] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 782.906781][T29205] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 782.909851][T29205] veth1_vlan: left promiscuous mode [ 782.910558][T29205] veth0_vlan: left promiscuous mode [ 782.914057][T29205] veth0_vlan: entered promiscuous mode [ 782.921707][T29205] veth1_vlan: entered promiscuous mode [ 782.936478][T29205] geneve0: left promiscuous mode [ 782.940919][T29205] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 782.942421][T29205] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 782.966073][T29205] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 782.969222][T29205] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 783.015522][T29205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 783.026972][T29205] batman_adv: batadv0: Interface activated: ipvlan2 [ 783.027865][T29205] batman_adv: batadv0: Interface activated: ipvlan3 [ 783.030442][T29205] 8021q: adding VLAN 0 to HW filter on device bond2 [ 783.032800][T29205] geneve0: entered promiscuous mode [ 783.037937][T29205] batman_adv: batadv0: Interface activated: macvlan2 [ 783.159555][T29205] 8021q: adding VLAN 0 to HW filter on device bond3 [ 783.179545][T29223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 783.265869][T29205] 8021q: adding VLAN 0 to HW filter on device bond4 [ 783.287830][T29205] 8021q: adding VLAN 0 to HW filter on device bond5 [ 783.290185][T29205] 8021q: adding VLAN 0 to HW filter on device bond6 [ 783.343685][T29205] 8021q: adding VLAN 0 to HW filter on device bond7 [ 783.347731][T29205] 8021q: adding VLAN 0 to HW filter on device bond8 [ 783.411767][T29212] 0·: left allmulticast mode [ 783.411791][T29212] hsr_slave_0: left allmulticast mode [ 783.411806][T29212] hsr_slave_1: left allmulticast mode [ 783.468511][T29212] bond7: left promiscuous mode [ 783.468536][T29212] bond7: left allmulticast mode [ 783.487518][T29212] bond9: left promiscuous mode [ 783.487542][T29212] bond9: left allmulticast mode [ 783.498403][T27100] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 783.498435][T27100] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.548596][T27100] bond8: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 783.549042][T27100] bond8: (slave veth7): making interface the new active one [ 783.571150][T27100] bond8: active interface up! [ 783.686998][ T1513] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 783.687031][ T1513] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.687066][ T1513] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 783.687097][ T1513] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.687130][ T1513] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 783.687152][ T1513] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.849411][T29232] syzkaller0: entered promiscuous mode [ 783.849428][T29232] syzkaller0: entered allmulticast mode [ 784.381757][T29267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 784.434717][T29267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 784.490521][T29270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 784.741454][T29285] netlink: 26 bytes leftover after parsing attributes in process `syz.0.5664'. [ 784.770513][T29287] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5665'. [ 784.978243][T29300] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5669'. [ 785.121926][T29308] vlan3: entered promiscuous mode [ 785.121949][T29308] macvlan0: entered promiscuous mode [ 785.407368][T29317] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.464359][T29328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5672'. [ 785.528622][T29332] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5673'. [ 785.528645][T29332] netlink: 468 bytes leftover after parsing attributes in process `syz.4.5673'. [ 785.780948][T29317] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 785.858483][T29328] bond6: entered allmulticast mode [ 785.942992][T29333] tipc: Resetting bearer [ 786.405516][T29359] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 786.465638][T29370] netlink: 'syz.2.5683': attribute type 1 has an invalid length. [ 786.467925][T29368] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 786.722388][T29379] xt_LOG: prefix is not null-terminated [ 787.081537][T29405] syzkaller0: entered promiscuous mode [ 787.081565][T29405] syzkaller0: entered allmulticast mode [ 787.491550][T29419] x_tables: duplicate underflow at hook 1 [ 787.491633][T29419] x_tables: duplicate underflow at hook 1 [ 787.492486][T29419] x_tables: duplicate underflow at hook 1 [ 787.492574][T29419] x_tables: duplicate underflow at hook 1 [ 787.519553][T29419] x_tables: duplicate underflow at hook 1 [ 787.519662][T29419] x_tables: duplicate underflow at hook 1 [ 787.519735][T29419] x_tables: duplicate underflow at hook 1 [ 787.519806][T29419] x_tables: duplicate underflow at hook 1 [ 787.519956][T29419] x_tables: duplicate underflow at hook 1 [ 787.520031][T29419] x_tables: duplicate underflow at hook 1 [ 791.800407][T29437] bond0: left promiscuous mode [ 791.800775][T29437] bridge0: port 1(bond0) entered disabled state [ 791.815064][T29437] bond2: (slave gretap1): Releasing active interface [ 791.818284][T29437] bond3: (slave ip6gre1): Releasing backup interface [ 791.821619][T29437] bond7: (slave batadv1): Releasing active interface [ 791.821639][T29437] bond7: (slave batadv1): the permanent HWaddr of slave - 8e:61:a5:49:59:eb - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 791.884037][T29437] bond7: (slave veth4): Releasing active interface [ 791.919158][T29441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5701'. [ 792.114003][T29455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5705'. [ 792.116521][T29452] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5703'. [ 792.238103][T29452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5703'. [ 792.239442][T29469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5707'. [ 792.239454][T29469] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5707'. [ 792.239461][T29469] tc_dump_action: action bad kind [ 792.239636][T29453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5703'. [ 792.240508][T29452] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5703'. [ 792.261448][T29455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5705'. [ 792.311461][T29452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.319525][T29471] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5708'. [ 793.230415][T29516] netlink: 'syz.2.5716': attribute type 10 has an invalid length. [ 793.651966][ T1513] pimreg9: left allmulticast mode [ 794.422750][T29549] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 795.515710][ T1513] gretap0 (unregistering): left promiscuous mode [ 795.570879][ T1513] bond7 (unregistering): (slave geneve3): Releasing active interface [ 795.625655][ T1513] bond9 (unregistering): (slave bridge0): Releasing active interface [ 795.625678][ T1513] bond9 (unregistering): (slave bridge0): the permanent HWaddr of slave - be:c7:38:cb:d4:75 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 795.630150][ T1513] bond9 (unregistering): (slave bridge6): Releasing active interface [ 795.661686][ T1513] bond9 (unregistering): (slave bridge7): Releasing active interface [ 795.688597][ T1513] bond9 (unregistering): (slave bridge8): Releasing active interface [ 795.692594][ T1513] bond9 (unregistering): (slave bridge9): Releasing active interface [ 795.718634][ T1513] bond9 (unregistering): (slave bridge10): Releasing active interface [ 795.731414][ T1513] bond9 (unregistering): (slave bridge11): Releasing active interface [ 795.754069][ T1513] bond9 (unregistering): (slave bridge12): Releasing active interface [ 795.781448][ T1513] bond0 (unregistering): Released all slaves [ 795.795899][ T1513] bond1 (unregistering): (slave veth3): Releasing active interface [ 795.797012][ T1513] bond1 (unregistering): (slave veth5): Releasing active interface [ 795.798155][ T1513] bond1 (unregistering): (slave veth7): Releasing active interface [ 795.798766][ T1513] bond1 (unregistering): Released all slaves [ 795.844794][ T1513] bond2 (unregistering): Released all slaves [ 795.864031][ T1513] bond3 (unregistering): (slave veth19): Releasing active interface [ 795.869345][ T1513] bond3 (unregistering): Released all slaves [ 795.899322][ T1513] bond4 (unregistering): (slave veth21): Releasing active interface [ 795.901458][ T1513] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 795.902047][ T1513] bond4 (unregistering): Released all slaves [ 795.935808][ T1513] bond5 (unregistering): Released all slaves [ 795.950136][ T1513] bond6 (unregistering): Released all slaves [ 795.967412][ T1513] bond7 (unregistering): Released all slaves [ 795.996038][ T1513] bond8 (unregistering): Released all slaves [ 796.010747][ T1513] bond9 (unregistering): Released all slaves [ 796.033169][T18940] wg2 speed is unknown, defaulting to 1000 [ 796.033195][T18940] syz2: Port: 1 Link DOWN [ 796.286205][ T1513] : left promiscuous mode [ 796.704451][T29587] netlink: 'syz.4.5731': attribute type 11 has an invalid length. [ 796.758866][T29589] netlink: 'syz.4.5731': attribute type 1 has an invalid length. [ 797.078556][T29589] 8021q: adding VLAN 0 to HW filter on device bond10 [ 797.079027][ T1513] tipc: Disabling bearer [ 797.079143][ T1513] tipc: Disabling bearer [ 797.079284][ T1513] tipc: Left network mode [ 797.112783][T29572] __nla_validate_parse: 4 callbacks suppressed [ 797.112802][T29572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5726'. [ 797.274460][T29572] tipc: Resetting bearer [ 797.527094][T29572] tipc: Disabling bearer [ 798.149622][T29636] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5740'. [ 798.716312][ T1513] veth1_to_team: left promiscuous mode [ 798.736629][ T1513] hsr_slave_0: left promiscuous mode [ 798.760546][ T1513] hsr_slave_1: left promiscuous mode [ 798.803780][ T1513] veth1_macvtap: left promiscuous mode [ 798.803816][ T1513] veth0_macvtap: left promiscuous mode [ 798.804091][ T1513] veth1_vlan: left promiscuous mode [ 798.804118][ T1513] veth0_vlan: left promiscuous mode [ 799.560226][ T1168] smbdirect: ib_dev[syz2] removed [ 799.626555][ T1110] smc: removing ib device syz0 [ 799.665209][ T6507] infiniband syz0: ib_query_port failed (-19) [ 799.697882][ T1110] [ 799.700302][ T1110] ====================================================== [ 799.707308][ T1110] WARNING: possible circular locking dependency detected [ 799.714330][ T1110] syzkaller #0 Not tainted [ 799.718733][ T1110] ------------------------------------------------------ [ 799.725746][ T1110] kworker/u8:8/1110 is trying to acquire lock: [ 799.731942][ T1110] ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 799.741797][ T1110] [ 799.741797][ T1110] but task is already holding lock: [ 799.749159][ T1110] ffffffff8f802040 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 799.758004][ T1110] [ 799.758004][ T1110] which lock already depends on the new lock. [ 799.758004][ T1110] [ 799.768406][ T1110] [ 799.768406][ T1110] the existing dependency chain (in reverse order) is: [ 799.777416][ T1110] [ 799.777416][ T1110] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 799.784666][ T1110] __mutex_lock+0x19d/0x1550 [ 799.789796][ T1110] get_device_parent+0x16f/0x3a0 [ 799.795529][ T1110] device_add+0x2d4/0xb80 [ 799.800394][ T1110] device_create+0x269/0x300 [ 799.805513][ T1110] msr_device_create+0x33/0x50 [ 799.810862][ T1110] cpuhp_invoke_callback+0x434/0x810 [ 799.816707][ T1110] cpuhp_thread_fun+0x362/0x780 [ 799.822169][ T1110] smpboot_thread_fn+0x565/0xa70 [ 799.827627][ T1110] kthread+0x38b/0x480 [ 799.832229][ T1110] ret_from_fork+0x514/0xb70 [ 799.837336][ T1110] ret_from_fork_asm+0x1a/0x30 [ 799.842626][ T1110] [ 799.842626][ T1110] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 799.850282][ T1110] cpuhp_thread_fun+0x127/0x780 [ 799.855670][ T1110] smpboot_thread_fn+0x565/0xa70 [ 799.861140][ T1110] kthread+0x38b/0x480 [ 799.865810][ T1110] ret_from_fork+0x514/0xb70 [ 799.870914][ T1110] ret_from_fork_asm+0x1a/0x30 [ 799.876202][ T1110] [ 799.876202][ T1110] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 799.883923][ T1110] cpus_read_lock+0x42/0x160 [ 799.889559][ T1110] static_key_slow_inc+0x12/0x30 [ 799.895052][ T1110] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 799.901387][ T1110] nbd_genl_foreach_sock+0x265/0x450 [ 799.907199][ T1110] nbd_genl_reconfigure+0xbbb/0x1040 [ 799.913032][ T1110] genl_family_rcv_msg_doit+0x233/0x340 [ 799.919127][ T1110] genl_rcv_msg+0x614/0x7a0 [ 799.924164][ T1110] netlink_rcv_skb+0x226/0x4a0 [ 799.929465][ T1110] genl_rcv+0x28/0x40 [ 799.933967][ T1110] netlink_unicast+0x7bd/0x940 [ 799.939439][ T1110] netlink_sendmsg+0x813/0xb40 [ 799.944719][ T1110] sock_sendmsg_nosec+0x13a/0x180 [ 799.950342][ T1110] ____sys_sendmsg+0x54e/0x850 [ 799.955622][ T1110] ___sys_sendmsg+0x2a5/0x360 [ 799.960830][ T1110] __x64_sys_sendmsg+0x1b1/0x290 [ 799.966298][ T1110] do_syscall_64+0x166/0x520 [ 799.971425][ T1110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.977846][ T1110] [ 799.977846][ T1110] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 799.985518][ T1110] __mutex_lock+0x19d/0x1550 [ 799.990652][ T1110] nbd_queue_rq+0x373/0xff0 [ 799.995676][ T1110] blk_mq_dispatch_rq_list+0x499/0x1990 [ 800.001838][ T1110] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 800.008736][ T1110] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 800.015234][ T1110] blk_mq_run_work_fn+0x16c/0x300 [ 800.020797][ T1110] process_scheduled_works+0xc3d/0x1630 [ 800.026900][ T1110] worker_thread+0xa47/0xfb0 [ 800.032028][ T1110] kthread+0x38b/0x480 [ 800.036692][ T1110] ret_from_fork+0x514/0xb70 [ 800.041792][ T1110] ret_from_fork_asm+0x1a/0x30 [ 800.047078][ T1110] [ 800.047078][ T1110] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 800.054283][ T1110] __mutex_lock+0x19d/0x1550 [ 800.059397][ T1110] nbd_queue_rq+0xc1/0xff0 [ 800.064323][ T1110] blk_mq_dispatch_rq_list+0x499/0x1990 [ 800.070393][ T1110] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 800.077235][ T1110] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 800.083754][ T1110] blk_mq_run_work_fn+0x16c/0x300 [ 800.089306][ T1110] process_scheduled_works+0xc3d/0x1630 [ 800.095551][ T1110] worker_thread+0xa47/0xfb0 [ 800.100764][ T1110] kthread+0x38b/0x480 [ 800.105345][ T1110] ret_from_fork+0x514/0xb70 [ 800.110455][ T1110] ret_from_fork_asm+0x1a/0x30 [ 800.115744][ T1110] [ 800.115744][ T1110] -> #5 (set->srcu){.+.+}-{0:0}: [ 800.122867][ T1110] __synchronize_srcu+0xc9/0x2f0 [ 800.128427][ T1110] elevator_switch+0x1e8/0x7b0 [ 800.133820][ T1110] elevator_change+0x2fa/0x480 [ 800.139111][ T1110] elevator_set_default+0x375/0x440 [ 800.144822][ T1110] blk_register_queue+0x3f3/0x4e0 [ 800.150517][ T1110] __add_disk+0x6b8/0xdb0 [ 800.155368][ T1110] add_disk_fwnode+0x100/0x3a0 [ 800.160647][ T1110] nbd_dev_add+0x733/0xb60 [ 800.165616][ T1110] nbd_init+0x168/0x1f0 [ 800.170500][ T1110] do_one_initcall+0x250/0x870 [ 800.175803][ T1110] do_initcall_level+0x10a/0x1a0 [ 800.181380][ T1110] do_initcalls+0x59/0xa0 [ 800.186298][ T1110] kernel_init_freeable+0x29d/0x3e0 [ 800.192040][ T1110] kernel_init+0x22/0x1d0 [ 800.196988][ T1110] ret_from_fork+0x514/0xb70 [ 800.202114][ T1110] ret_from_fork_asm+0x1a/0x30 [ 800.207411][ T1110] [ 800.207411][ T1110] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 800.215584][ T1110] __mutex_lock+0x19d/0x1550 [ 800.220876][ T1110] elevator_change+0x1af/0x480 [ 800.226264][ T1110] elevator_set_none+0xb5/0x140 [ 800.231636][ T1110] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 800.238793][ T1110] nbd_start_device+0x189/0xb30 [ 800.244527][ T1110] nbd_genl_connect+0x167d/0x1cd0 [ 800.250082][ T1110] genl_family_rcv_msg_doit+0x233/0x340 [ 800.256149][ T1110] genl_rcv_msg+0x614/0x7a0 [ 800.261252][ T1110] netlink_rcv_skb+0x226/0x4a0 [ 800.266535][ T1110] genl_rcv+0x28/0x40 [ 800.271034][ T1110] netlink_unicast+0x7bd/0x940 [ 800.276322][ T1110] netlink_sendmsg+0x813/0xb40 [ 800.281613][ T1110] sock_sendmsg_nosec+0x13a/0x180 [ 800.287158][ T1110] ____sys_sendmsg+0x54e/0x850 [ 800.292553][ T1110] ___sys_sendmsg+0x2a5/0x360 [ 800.297776][ T1110] __x64_sys_sendmsg+0x1b1/0x290 [ 800.303337][ T1110] do_syscall_64+0x166/0x520 [ 800.308476][ T1110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.314886][ T1110] [ 800.314886][ T1110] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 800.323573][ T1110] blk_alloc_queue+0x544/0x690 [ 800.328858][ T1110] __blk_mq_alloc_disk+0x194/0x390 [ 800.334487][ T1110] nbd_dev_add+0x494/0xb60 [ 800.339419][ T1110] nbd_init+0x168/0x1f0 [ 800.344351][ T1110] do_one_initcall+0x250/0x870 [ 800.349632][ T1110] do_initcall_level+0x10a/0x1a0 [ 800.355177][ T1110] do_initcalls+0x59/0xa0 [ 800.360128][ T1110] kernel_init_freeable+0x29d/0x3e0 [ 800.365859][ T1110] kernel_init+0x22/0x1d0 [ 800.370726][ T1110] ret_from_fork+0x514/0xb70 [ 800.375826][ T1110] ret_from_fork_asm+0x1a/0x30 [ 800.381113][ T1110] [ 800.381113][ T1110] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 800.388313][ T1110] fs_reclaim_acquire+0x71/0x100 [ 800.393853][ T1110] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 800.400181][ T1110] alloc_inode+0xb8/0x1b0 [ 800.405116][ T1110] iget_locked+0x131/0x6a0 [ 800.410083][ T1110] kernfs_get_inode+0x4f/0x770 [ 800.415379][ T1110] kernfs_get_tree+0x5cd/0x980 [ 800.420669][ T1110] vfs_get_tree+0x92/0x2a0 [ 800.425616][ T1110] do_new_mount+0x319/0xdc0 [ 800.430649][ T1110] __se_sys_mount+0x31d/0x420 [ 800.435932][ T1110] do_syscall_64+0x166/0x520 [ 800.441049][ T1110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.447634][ T1110] [ 800.447634][ T1110] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 800.455625][ T1110] down_write+0x96/0x200 [ 800.460672][ T1110] kernfs_remove_by_name_ns+0x4e/0x140 [ 800.466662][ T1110] device_links_driver_bound+0x4ab/0x1440 [ 800.472907][ T1110] driver_bound+0xd8/0x2e0 [ 800.477848][ T1110] really_probe+0x774/0xae0 [ 800.483041][ T1110] __driver_probe_device+0x1e8/0x360 [ 800.488960][ T1110] driver_probe_device+0x4f/0x240 [ 800.494893][ T1110] __device_attach_driver+0x270/0x410 [ 800.500787][ T1110] bus_for_each_drv+0x258/0x2f0 [ 800.506253][ T1110] __device_attach+0x2c4/0x450 [ 800.511531][ T1110] device_initial_probe+0xa1/0xd0 [ 800.517095][ T1110] bus_probe_device+0x12a/0x220 [ 800.522497][ T1110] device_add+0x7d7/0xb80 [ 800.527430][ T1110] faux_device_create_with_groups+0x1a5/0x2b0 [ 800.534088][ T1110] regulator_dummy_init+0x19/0x40 [ 800.539706][ T1110] regulator_init+0xca/0x110 [ 800.544827][ T1110] do_one_initcall+0x250/0x870 [ 800.550120][ T1110] do_initcall_level+0x10a/0x1a0 [ 800.555599][ T1110] do_initcalls+0x59/0xa0 [ 800.560456][ T1110] kernel_init_freeable+0x29d/0x3e0 [ 800.566171][ T1110] kernel_init+0x22/0x1d0 [ 800.571021][ T1110] ret_from_fork+0x514/0xb70 [ 800.576135][ T1110] ret_from_fork_asm+0x1a/0x30 [ 800.581425][ T1110] [ 800.581425][ T1110] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 800.590017][ T1110] __lock_acquire+0x164c/0x2de0 [ 800.595390][ T1110] lock_acquire+0x115/0x350 [ 800.600505][ T1110] down_read+0x4a/0x330 [ 800.605479][ T1110] kernfs_remove+0x35/0x80 [ 800.610515][ T1110] __kobject_del+0xe0/0x310 [ 800.615704][ T1110] kobject_del+0x45/0x60 [ 800.620481][ T1110] cleanup_glue_dir+0x1a3/0x220 [ 800.626094][ T1110] device_del+0x77d/0x8f0 [ 800.630947][ T1110] cdev_device_del+0x27/0xf0 [ 800.636053][ T1110] ib_umad_kill_port+0xf2/0x310 [ 800.641743][ T1110] ib_umad_remove_one+0x160/0x270 [ 800.647483][ T1110] remove_client_context+0xb9/0x1e0 [ 800.653334][ T1110] disable_device+0x137/0x330 [ 800.658632][ T1110] __ib_unregister_device+0x2c9/0x400 [ 800.664733][ T1110] ib_unregister_work+0x19/0x30 [ 800.670171][ T1110] process_scheduled_works+0xc3d/0x1630 [ 800.676336][ T1110] worker_thread+0xa47/0xfb0 [ 800.681736][ T1110] kthread+0x38b/0x480 [ 800.686322][ T1110] ret_from_fork+0x514/0xb70 [ 800.691698][ T1110] ret_from_fork_asm+0x1a/0x30 [ 800.697173][ T1110] [ 800.697173][ T1110] other info that might help us debug this: [ 800.697173][ T1110] [ 800.707396][ T1110] Chain exists of: [ 800.707396][ T1110] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 800.707396][ T1110] [ 800.720865][ T1110] Possible unsafe locking scenario: [ 800.720865][ T1110] [ 800.728354][ T1110] CPU0 CPU1 [ 800.733720][ T1110] ---- ---- [ 800.739080][ T1110] lock(gdp_mutex); [ 800.743059][ T1110] lock(cpuhp_state-up); [ 800.749921][ T1110] lock(gdp_mutex); [ 800.756348][ T1110] rlock(&root->kernfs_supers_rwsem); [ 800.761810][ T1110] [ 800.761810][ T1110] *** DEADLOCK *** [ 800.761810][ T1110] [ 800.769940][ T1110] locks held by kworker/u8:8/1110: 4, last CPU#1: [ 800.776352][ T1110] #0: ffff88801b75c940 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 800.787756][ T1110] #1: ffffc90005117c40 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 800.801241][ T1110] #2: ffff88807719c730 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x279/0x400 [ 800.812735][ T1110] #3: ffffffff8f802040 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 800.822153][ T1110] [ 800.822153][ T1110] stack backtrace: [ 800.828057][ T1110] CPU: 1 UID: 0 PID: 1110 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 800.837552][ T1110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 800.847715][ T1110] Workqueue: ib-unreg-wq ib_unregister_work [ 800.853649][ T1110] Call Trace: [ 800.856933][ T1110] [ 800.859951][ T1110] dump_stack_lvl+0xe8/0x150 [ 800.864569][ T1110] print_circular_bug+0x2e2/0x300 [ 800.869611][ T1110] check_noncircular+0x12f/0x150 [ 800.874646][ T1110] __lock_acquire+0x164c/0x2de0 [ 800.879547][ T1110] lock_acquire+0x115/0x350 [ 800.884329][ T1110] ? kernfs_remove+0x35/0x80 [ 800.888940][ T1110] down_read+0x4a/0x330 [ 800.893370][ T1110] ? kernfs_remove+0x35/0x80 [ 800.897975][ T1110] kernfs_remove+0x35/0x80 [ 800.902423][ T1110] __kobject_del+0xe0/0x310 [ 800.906946][ T1110] kobject_del+0x45/0x60 [ 800.911283][ T1110] cleanup_glue_dir+0x1a3/0x220 [ 800.916136][ T1110] device_del+0x77d/0x8f0 [ 800.920763][ T1110] ? __pfx_device_del+0x10/0x10 [ 800.925625][ T1110] ? xa_load+0x60/0x210 [ 800.929866][ T1110] cdev_device_del+0x27/0xf0 [ 800.934464][ T1110] ib_umad_kill_port+0xf2/0x310 [ 800.939345][ T1110] ib_umad_remove_one+0x160/0x270 [ 800.944460][ T1110] ? __pfx_ib_umad_remove_one+0x10/0x10 [ 800.952012][ T1110] remove_client_context+0xb9/0x1e0 [ 800.957239][ T1110] disable_device+0x137/0x330 [ 800.961921][ T1110] ? __pfx_disable_device+0x10/0x10 [ 800.967119][ T1110] ? lock_acquire+0x115/0x350 [ 800.971799][ T1110] ? process_scheduled_works+0x97a/0x1630 [ 800.977631][ T1110] __ib_unregister_device+0x2c9/0x400 [ 800.983021][ T1110] ? rcu_is_watching+0x16/0xb0 [ 800.987785][ T1110] ? process_scheduled_works+0x97a/0x1630 [ 800.993512][ T1110] ib_unregister_work+0x19/0x30 [ 800.998454][ T1110] process_scheduled_works+0xc3d/0x1630 [ 801.004270][ T1110] ? __pfx_process_scheduled_works+0x10/0x10 [ 801.010274][ T1110] ? assign_work+0x3cf/0x5d0 [ 801.014883][ T1110] worker_thread+0xa47/0xfb0 [ 801.019482][ T1110] kthread+0x38b/0x480 [ 801.023539][ T1110] ? __pfx_worker_thread+0x10/0x10 [ 801.028732][ T1110] ? __pfx_kthread+0x10/0x10 [ 801.033310][ T1110] ret_from_fork+0x514/0xb70 [ 801.037893][ T1110] ? __pfx_ret_from_fork+0x10/0x10 [ 801.043020][ T1110] ? __switch_to+0xc89/0x1420 [ 801.047728][ T1110] ? __pfx_kthread+0x10/0x10 [ 801.052309][ T1110] ret_from_fork_asm+0x1a/0x30 [ 801.057079][ T1110] [ 801.093234][T29626] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 801.095749][ T1110] smbdirect: ib_dev[syz0] removed [ 801.107912][T29622] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 801.170311][T29653] netlink: 'syz.4.5741': attribute type 23 has an invalid length. [ 801.222638][T29653] ieee80211 phy75: Selected rate control algorithm 'minstrel_ht' [ 801.657372][ T1513] IPVS: stop unused estimator thread 0...