last executing test programs: 3.257353792s ago: executing program 4 (id=4238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$l2tp(0x2, 0x2, 0x73) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x1ff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05032200d1fd1400000f4788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.253830458s ago: executing program 3 (id=4239): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x98db, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) (async) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) (async) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0f38658c432ae1d6778795efa7a386131cdfd6db9d693b149573b69e324dd518", "80f20b589ea815d390be3440806a3dfd", {"68e77bdc832e437bb8b8deadbfca96d4", "8ce907f941ed51d4a10806ad01d87602"}}}}}}}}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000440)={{0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x81}, {0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}, 0xc}, 0xffffffffffffffff, {[0x5, 0x72, 0x1, 0x0, 0x0, 0x1, 0x7fff]}}, 0x5c) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x801, 0x5) setsockopt$inet6_int(r4, 0x29, 0x16, 0x0, 0x0) (async) r5 = socket(0x2, 0x2, 0x1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x84) (async, rerun: 32) pwritev(r6, 0x0, 0x0, 0x0, 0x5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x4c, 0x0, 0x0) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70100000200000085000000a600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) r11 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="1c00000020007fafb72d13b2a4a2719302000000030b43026c262369", 0x1c}], 0x1}, 0x0) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x6, 0x0, r10, 0x3, '\x00', r8, r12, 0x1, 0x5}, 0x50) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r8}, 0x94) (async, rerun: 64) syz_emit_ethernet(0x2d2, &(0x7f0000000700)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x298, 0x3a, 0x0, @private0, @mcast2, {[@routing={0x5c, 0x4, 0x0, 0xa, 0x0, [@local, @private0]}, @fragment={0x0, 0x0, 0x4c, 0x0, 0x0, 0x3, 0x66}, @dstopts={0x62, 0x26, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @jumbo={0xc2, 0x4, 0xb}, @generic={0xc4, 0xf6, "a24692ba48cb97268ff9833857f1747c58cffdd214e401418e3e7c31fa15a898c995cd1a4462199bc9b7dba91606c997b88b68d20aadbed4ac07b3a185fc849d806934e8c9aacbf1e5b565593f1c7191f8a5cbad237e20e33a7a8d5479f1c3397d9cf5c22772756d3d9afa787e453ea9b59e0b4aeb65d6efe710dfe7d45347f3a9199ad415d191b74ff7884432cff5d28989f96d1c5d640c5fedcee36d4e448c52b877e49cbbdc453e4d0119e8d0240e956f55d2e9bb792113c8aa0437ccfdf808edc914432035119154a9e1985be165bc1d01ede492824d545829b557a9dab17711d3fa18472d94974df4b9394300690f43d1676b8c"}, @calipso={0x7, 0x18, {0x0, 0x4, 0x9, 0xfafe, [0xfffffffffffffc01, 0x2e]}}, @ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0x9}, @enc_lim={0x4, 0x1, 0x8}]}, @srh={0x3a, 0x8, 0x4, 0x4, 0x1, 0x40, 0xb7b, [@private1, @private1, @remote, @mcast2]}], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x30}, @local, [@dstopts={0x3b, 0x12, '\x00', [@generic={0x40, 0x7d, "50921e232613690b81047b03f1ee10119be32aadbb8196e1dbfe35c442e15465058b9be45b8deb43c09251e3ddf98d0d8486f4bed0c5991d527845438753c88ec4c6e0610cef5db7e737211df733f77a97c44723b583eafc57ee01201b2f4f51109573ac58f41240dfe79938d6d6a681aa3e50a5c92335fc9d02ccfb88"}, @jumbo={0xc2, 0x4, 0x3}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}], "fafb17c133d11e59bb99c35bdfcf89f5"}}}}}}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv4_delroute={0x1c, 0x19, 0x100, 0x70bd2c, 0x25dfdbfb, {0x2, 0xa8, 0x14, 0x2, 0xfc, 0x0, 0xfd, 0x0, 0x3700}}, 0x1c}}, 0x0) 3.105804556s ago: executing program 1 (id=4241): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300030c0000002abd7000fbcbdf2502000900080000000000000000000000030006000000000002004e22e0000002000000000000000002000100000000000000070300000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x400c0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003940)=@newtfilter={0xa8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x74, 0x2, [@TCA_MATCHALL_ACT={0x70, 0x2, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x1, 0x1000, 0x3, 0x1, {0x9b, 0x0, 0x40, 0x1, 0x80}, {0x0, 0x0, 0x40, 0x8001, 0x0, 0x8}, 0x3, 0x8001, 0xcbd}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$X25_QBITINCL(r8, 0x106, 0x1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0xc8, 0x8, 0xe0, 0x5803, 0x240, 0x2e8, 0x2e8, 0x240, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) 2.929419408s ago: executing program 3 (id=4242): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x4) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, 0x0, 0x4001) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f00000000c0)=""/82, &(0x7f0000000140)=0x52) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2.83720457s ago: executing program 4 (id=4243): sendmsg$key(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x1120}}, 0x4044024) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000e0300000000000000000000000000000105002d1a40b100000000000000000003000000000100000002000000000000000061"], 0x0, 0x53}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'netpci0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x4c, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, &(0x7f00000001c0)=0x1c) ioctl$int_in(r3, 0x5421, &(0x7f00000000c0)=0x6) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000119000001000000000000000002001406ff000000001a000068e68073786ae5392a92"], 0x1c}}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x4f24, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bbc, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000040)="0d000000010001", 0x7) r9 = socket$packet(0x11, 0x2, 0x300) r10 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14, 0x800) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x205, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05032200d1fd140000004788031c09102c28", 0x12, 0x4, &(0x7f0000000200)={0x11, 0xc, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r12, 0xa01, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x72}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 2.237804893s ago: executing program 3 (id=4248): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_emit_ethernet(0x42, &(0x7f0000000000)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x20, 0x0, @opaque="0026a4742457609863e1685417ed43c32b8df661c289da30"}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000002640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000040), &(0x7f0000000200)=r1}, 0x20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/30, 0x1f) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001800)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x2c8d0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000580)={&(0x7f0000000440)="0f3439e831657b", &(0x7f0000000480)=""/91, &(0x7f0000000500)="1e184edaeb2e5122c09c6dd40ad501efdbef4b60ef", &(0x7f0000000540)="beb4d52c51c3d61e055b07b8db6dc50af51be3b0d96c53797b5ecbe66cfe5ec303455891eafe7fb7ccf511294ccd50d193de5954727f", 0x6, r2}, 0x38) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x3}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x70bd27, 0x25dfdbfc, {0x1}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xc, 0xa}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r11, 0x25, 0x1b, @val=@netfilter={0x7, 0x1, 0x5, 0x1}}, 0x20) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="01002dbd7000ffdbdf255300000008000300", @ANYRES32=r13], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x44) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$sock_ifreq(r5, 0x8927, &(0x7f0000000000)={'pimreg\x00', @ifru_ivalue=0x8000}) 2.173430619s ago: executing program 1 (id=4249): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x150, 0x10, 0x1, 0x1, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x1234, 0x32}, @in6=@empty, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x34ff, 0xa}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "000102030405060708090a0b0c0d0e0f00010203"}}]}, 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newpolicy={0xfc, 0x13, 0x1, 0x2, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x32}, 0xa, @in6=@empty, 0x34ff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x11) sendmmsg(r1, &(0x7f0000002140)=[{{&(0x7f0000000040)=@phonet={0x23, 0x9, 0x1, 0x91}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="304af27290cd635b4f335375c4d8", 0xe}, {&(0x7f0000001980)="1b8603e84fc4018a09216fc343815240001967cdd1ec57802baafbc4eb6ba96aef3834d398c8c87a71372086ea994818f5784e50cae114d47c029c96551102d41c91e79632b9f090d581f44a0d121cf098aaa40456dab62bbe131cc8014f3a2f478839430b4c8d12ca976b3418094bf7fb87789d068b7b876236b7c9e969ca7be53b80e74565534bb8694c413a3ce9a43ed52c0a5e9f47ec02", 0x99}, {&(0x7f0000001a40)="54327948dc27f31850d6c06ddd875b9bbc06c177cb866ecfe9af7231cc2bfc1fffb4637a06f26f749ff862d4828aa5240cbb8dad0221825cf30f402996ac7ad6dd444dc3fc9fe4960def666b9baa895564a6f86a2fd461e51c6af4cd53377c81ba1e38c8389a308b823aa7309b7d52eebf66ee3a9ae04269912bfca106960eb9828f9b20bde90f2d30501593a31a248e31ba3330b841792be342818b58c844068210f10acb962c", 0xa7}, {&(0x7f0000001b00)="04ced257e1628bed53a8", 0xa}], 0x5, &(0x7f0000001cc0)=[{0x28, 0x110, 0x5c, "e1d5ea542c2856c10f93d7b4419ce9d20c723fd0cbcbd6d6"}, {0xd0, 0x110, 0xd0a, "a62e8e7d7e12f13cf853485bfa0a2dd10e110af911dc631155e2b65cae0b4936c3f9e3c0dfd1a84c27e455f4633fb2006bc17a0265553177b8440caff1c554ecfd606faffb0a41033fcced35a84e87ad5b07eff7b32ac6e4fb62b3b6d2db83ad558523c67ac523d0d48d09cb4379b647b09ab6b0bfad2946eabc08050f8a979e35bde913c989bb66bd878c5b57672a4cfdc69b51e687a52fe969ef63887ac52d21914b3aed06889da5e4c7ee9800f004068ab923603650f23ffe1678e164"}, {0xf0, 0x107, 0x9, "25646a3f4315a6ae074e6a9de37e44ef8d3e7ce10bdbe754ff25d03c56efd6b2ac25b58c41e415fdcfee77670d240347589192883dba1d07b974b7de071b46f81c4de46d4d8c1d3abcda87f7ab34681ccb8c89adfd21fb650fe6adc49fed51e887147b1201608da10f3937e4cb0bc9b0c8fc125760fc0de4478fbaf5932744dec3fa9d4fb3d04a11bcd6f3b61917651418b3f4f7adbb43d7e5140544b411e7ac75bc3af3543f5d4f7f105ebefbde79990a9393e79b8c3ec531cbbd6532e60a109c626d3696ce62625a5aeebab61f2005e11a73c62c2c2d747d"}, {0x10, 0xc, 0xfffffffc}], 0x1f8}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000002000)="fe50043d88c3baf4ef53e5d734a3b7221d8b2641a7ed81ad9f5452e295cc675f82bfb376ac81bda39264efbc6c65982007da04e15273af3f97fcc210c6616d584fcf84d0411d112649012a279950e1d7484f98e3d6ad0878c5c5ef154302130e260b98273ec600b876edd40f7808d141e143ddc28839162128f0c77af039ada72d14699c194e25ea852cb3", 0x8b}, {&(0x7f00000020c0)="b7a1af4ff63fe574185d6e550432721f41ae591aa8e6e06cf4ad8c54f045f4fc97d78d790367ade0e058c03ccd5f92de", 0x30}], 0x2}}], 0x2, 0x42051) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000300)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff03000000000000000000000000000000000000000000000000000000000000000100"/89], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000500)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f", 0x40, 0x4000000, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 2.080631368s ago: executing program 4 (id=4252): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x10, 0xffeff024}, {0x6, 0x0, 0x83, 0xfffffffd}]}, 0x10) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x3}}}]}, 0x38}}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x7}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="01000000020000000400000004"], 0x48) close(0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000240)=@ethtool_perm_addr}) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r15) sendmsg$NLBL_MGMT_C_LISTDEF(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r16, @ANYBLOB="010027ca7000ff9b060000080000"], 0x14}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4048890) 1.985240199s ago: executing program 0 (id=4253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async) sendmmsg$inet6(r1, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f00000007c0)="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", 0x1b5}, {&(0x7f0000000380)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88cf1b612298d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e519e8", 0xa7}, {&(0x7f0000000440)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f00000024c0)="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", 0xbd5}, {&(0x7f0000000500)="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", 0x12a}], 0x5}}], 0x1, 0x40c0) (async, rerun: 32) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) (async, rerun: 32) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000780)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/63, 0x3f}, &(0x7f0000000300)=0x40) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r4}, 0x20) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r4, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="98000000", @ANYRES16=r8, @ANYBLOB="00042abd7000fbdbdf250400000008000200000000006c00018014000400ff020000000000000000000000000001080006000800000014000400fe8000000000000000000000000000aa060005004e2200001400040000000000000000000000ffffffffffff1400040000000000000000000000ffffac1414bb08000700", @ANYRES32=r9, @ANYBLOB="0500050000000000080003000300000079be42b6604fde4a793fd503d320457c59ebf3348ebf8b95b70a427e106ce5b9068978b616e4f796c827946db5812d0ef6ab09c3dd153edb2c2d4c1484542e7e3ed6b958f7cee065176eb1d8a866cb981dad9d55fa3db5fa990d066dbaf01bc6486d91eea915e6390dbe386818490d10f6ebcc3733f59f4044afe4c12e71f89e970c01a654f4a897ae2e2ff1730075257bc5da1dba08df408034b4670dfbb0c37c64926bc47b4605dc13014d6bbe63bb3a0fe8dbd55c2bd06c591054192e2ae780aa26644c426143ef"], 0x98}, 0x1, 0x0, 0x0, 0x24040801}, 0x4000) (async, rerun: 32) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f8343fe0d53db903cbe1e2197e3d", 0x3a}], 0x1) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0x2}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0xd2f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) 1.654455612s ago: executing program 2 (id=4255): r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x46}, @NFTA_SET_EXPR={0x3c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}]}}}]}], {0x14, 0x10}}, 0xc0}, 0x1, 0x0, 0x0, 0x810}, 0xc4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="303ac3c7", @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES64=r3], 0x8c}}, 0x4000014) 1.587455457s ago: executing program 0 (id=4256): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x453, 0x21a, 0x70bd2d, 0x25dfdbfb, "3ab6f2437ec5ea971b24dc2174b31c74b8d391621ad0265286c2b2addeb30c2ae7c7006a2261b6d9d625cd4c660c687f6cd2b3c7aac23fca5d4c3c9224378812ffbe03545011300bc83c1440459311cf814ead6948074cf74f6a440631dd1ac2dd", ["", "", "", "", ""]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x84) socketpair(0x2, 0x6, 0x96e8, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x21c, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcdd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x59ce9c3d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5f2d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xc8ae, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @mcast2, 0xffff}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x10, @remote, 0x401}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7c}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x8041}, 0x40020) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x6}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x5c}}, 0x0) 1.507826919s ago: executing program 4 (id=4257): r0 = socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x49}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r4, @ANYBLOB="94e40700100c000064001280110001006272696467655f736c617665000000004c0005800800030001000000050021000000000005001b000000000005000c000100000008002200", @ANYRES32=r2], 0x84}}, 0x200088c2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x3, 0x0, 0x0, 0x61800, 0x30, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000d00)=0x205a, 0x4) recvfrom$packet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000004c0)="08000000ea5afb9b", 0x8, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x5, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x100}}]}, 0x24}}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x74, r9, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x0, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x0, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x74}}, 0x20000000) 1.469246396s ago: executing program 2 (id=4258): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x4020940d, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42118, 0x42002}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x665}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}]}}}]}, 0x48}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x80, 0x7800, 0x9, 0x100, {{0x7, 0x4, 0x1, 0x1, 0x1c, 0x65, 0x0, 0xf8, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @end]}}}}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)=@getsa={0x200, 0x12, 0x400, 0x70bd29, 0x25dfdbfe, {@in6=@empty, 0x4d6, 0x2, 0x32}, [@sa={0xe4, 0x6, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 0x4e24, 0x9, 0x2, 0xa0, 0x80, 0x0, r3, r4}, {@in=@multicast2, 0x4d3, 0x3c}, @in=@local, {0x7ff, 0x3, 0x2, 0x1000, 0x1, 0x9, 0x40000000000000, 0x3}, {0x9c30, 0x3ff, 0x2, 0xbb}, {0xc0000, 0x6, 0x10}, 0x70bd27, 0x3505, 0x2, 0x3, 0x8, 0xc0}}, @sec_ctx={0xe7, 0x8, {0xe3, 0x8, 0x1, 0x80, 0xdb, "409a55ce4454cd3e9f4c819c9fecd57b7d13189854fb113340de9aa02f3f02575d583ddfd41b821edd1f64198adeb423a83e14bc4320ac2aa0251d8f9104e2a4fdb569533b6356d9268f76690e2294ad9fddddd9b6f75a13c372675c1d0c86bc16114f45a2ae75f571c2c1356bfec8f37b6f79614a16a0b46313b00085568f9ed05becfbaba3c003299e19158690478ff995a3bd9ac5b1df01181ae5181deae640f393a70fd10b1cd988e06eedae027e7977edb4e3e53b151df0af74b837bb48f97be676f7726ab0cb1d8e7dd18329ce1654dcf69357520edbbbca"}}, @offload={0xc, 0x1c, {r1, 0x1}}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.45745085s ago: executing program 0 (id=4259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0xfffffeca, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_USERDATA={0xba, 0xc, "f15df7aacbac3a8a3044ba01ef5faf8dc2e6748c2e5db72e81a00f5ea6851a298704cf64ddad9c28e031614200a79640111fd07079d18817e54e67751dad86595cf0e72de3d9466b6996cc58ec0a6e37a90d8aafa5f4b933a829dc8b226d1fb0bc1e62b45493a8ad3c142f53adfb2db3a61abbacea7e7424f0d1d1d2cbf72a7ab3944eec1ac94ba0bfac18a2742b54c06c08015c8f37351747c20c1b2e11ea5a70256f320c15a92fc3bfde8be443b7e314427243e55e554b99e67f5c1ef0946a772b44456a355165c8012bb1d4705bd7a06e12e8477139523fbe8754ce7a15d1c2896dd88e7a0ef5a5aa0a33"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x150}, 0x1, 0x0, 0x0, 0x890}, 0x4000000) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="80010000100001000000000000000000ac574400000000000000007f000001000000000000000000000000000000000000000002000000000a00ff8000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000006c000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x180}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FSGROWFSDATA(r2, 0x4010586e, &(0x7f0000000280)={0x5, 0x9}) (async) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x100000) (async, rerun: 32) unshare(0x20080) (rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd2d, 0x25dfdbfc, {0x2, 0x20, 0x7b, 0xcb, r6}, [@IFA_FLAGS={0x8, 0x8, 0x30}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, @IFA_FLAGS={0x8, 0x8, 0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x105}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x0) 1.276709925s ago: executing program 2 (id=4260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x20000886}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x20000886}, 0x0) (async) 1.17426745s ago: executing program 3 (id=4261): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000900000000000119078000000000000000000004e22007c907804000000000000000000f27fc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002543f0b3894ef49400"/158], 0x0) 1.097019454s ago: executing program 0 (id=4262): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d1400bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000002030104fa00000000000000000000000800034000000000080004400000000008000540000000000800010001"], 0x34}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002d9eef847044f450740000000000900010073797a300000000014000000060a0104000000000000000001000000140000001100010000000000000000000000000a"], 0x9c}}, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1f8}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xffe, 0x0, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f0000000040)={0x1f, @none}, 0x8) listen(r7, 0x1) (async) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r8, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r8, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x1e}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000008) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1a) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) 964.597508ms ago: executing program 1 (id=4263): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x27, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1], 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x40c0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0xffffffffffffff1a}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x0, 0x1, 0x1, 0x0, 0x19}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002c40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x16}]}}}]}]}], {0x14}}, 0x80}}, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) (async) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) (async) pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000280)="00214717a78d70e8a36f7fa8543c2d9a43a4356d27e0", 0x16}], 0x1, 0x20000002, 0x0) (async) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000180)="844228b9a3b616228a60ab7d0e7ffc910807287bd1709f3e2a47e1d1209b5b3f7102e8bf81e920687df1fa94fda42eb7ade696a0f3895367c3d100d2d820031aef99c730bccf52710ea542f9bcdc5cb3f4116f07c8eed26fc566a0588b6b92", 0x5f}, {&(0x7f0000000340)="33b7ceec11029103e3be9990619c8f737b9f0b255b48ee84b718dbf29a7cca952c3990d2e116405ee761d89a6daa1881f2346a9d1123d80c982900ae5d217b9354f4eccc3893f5ad90e36d05d357263b70c97b7728507c8ba1ab379d519d65407ef5fa4e73e46724b4bc6b229641d50753b931fd1f2855449da317d7eebb3b4cf0ad76628ddd49b4e76ef22deb098618eac6dfe04d8834166c4745f6c2e1129059b9c77a75a4e23c418c76ea926aa4563a300e2453a7", 0xb6}, {&(0x7f0000000400)="5f567e1c4b486a57c9f8434aa14cce8b12fd3dc67ac26be11218c15711b96635238d376cdc43c6cd67bb091940940b90b8515ab5618da024a536f68143db612d72de36926c6ddb141261b3cf7c4cdf717d5a8f9cbd1ded57ed48de953f30ee2731ee37dfd2bb88cbb72460c0a5c75f122ce8ac6ca0bb643484a54cc2e5ca1f92c37821aeb4d2011439bc3f08d35b82fc5df8c634dc86d136b8fac49f4ed056df8f1878fb6d13299114abd297529b02d6545530f5c407cfe2f05e3fe5695a4dcb12525b5d442ff4a39c127884f744a5f62ee598eaa8ef5fe12e86a29c8091cb67a40b0d2ab39bee3ba0e7f19a172e9b3a", 0xf0}], 0x3, 0x4, 0x8) (async) ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000240)=0x1) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x11) 733.599155ms ago: executing program 3 (id=4264): r0 = socket(0x80000000000000a, 0x2, 0x0) close(r0) syz_emit_ethernet(0xd6, &(0x7f0000000540)={@local, @random="15687efec3d2", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0xa0, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x3c, 0x0, 0x0, 0x1}, @srh={0x2f, 0x0, 0x4, 0x25, 0x0, 0x0, 0x100}, @dstopts, @srh={0x2c, 0xa, 0x4, 0x10c1, 0x2, 0x68, 0x6, [@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @empty, @loopback]}]}}}}}}}, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b02"], 0x0, 0x4a}, 0x20) 603.417666ms ago: executing program 0 (id=4265): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newsa={0xf8, 0x1a, 0x1, 0x0, 0x25dfdbfd, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8, 0x23, 0xd19}]}, 0xf8}}, 0x20000000) (async) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="cf702e8cf675aaaaaaaaaabb86dd6000000000303afffe880000000000000000000000000001ff0200000000000000000000000000018900907800000000fe800000000000000000000000000000fe8000000000000000000000000000000201703b744dc5fba6d1c926a15925a4ced71c90528587"], 0x0) 601.404361ms ago: executing program 2 (id=4266): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x5d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) 520.591439ms ago: executing program 1 (id=4267): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000300), &(0x7f0000000400)=0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f90786401010000000000248065"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x34, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) recvmsg$can_j1939(r3, 0x0, 0x2) sendmsg$can_j1939(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r4, 0x0, {0x1, 0xff, 0x3}}, 0x18, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4008080) r6 = socket(0x400000000010, 0x3, 0x0) write(r6, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r7}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x11, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100008000000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r8, 0x58, &(0x7f0000000440)}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FD={0x8, 0x1, r11}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r12, 0x8919, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x0, 0xf, 0x0, &(0x7f00000003c0)="3eb5d4b44fa73cc4c14018d7a3da66", 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 452.601539ms ago: executing program 4 (id=4268): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0xd0, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0xbc, 0x1, [@m_skbedit={0xb8, 0x16, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0x1}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0x9}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xa}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0xc20, 0x6, 0xb923, 0x7}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x8, 0x5, 0x9, 0x2}}]}, {0x43, 0x6, "037ae13fb395724b0ce4cf7e08be779ab7543ab0a7de05fd052533d5182a2658ee418035d620874250513ab3558f0f72aa5598b0a1b49a18349676f66c86be"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmmsg$sock(r1, &(0x7f0000003e80)=[{{&(0x7f0000000000)=@sco={0x1f, @none}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="e6a28437c1ba386d764a8a70125fea54c2b58a9035b089cac8135e07c7b399c50bc700eb648050543b2d61c762afefa47771e2fbcf801ec73f996c4f48a88ad71fc77073b9f680eb10a6ce83bc2e034bcb65ea1f62ab425fc71fa505b6711c29861fef261272a87285a77de7e74c34a8642aebf5109ee5c7559d387dcdbcbf5a20c21291ad16ed52a78c208c81f516c11f3cc1b8d6d3304702b5a5ae3f6bcaef9903bf807868492ff85ceb38b23a00fe92c724dabcaf5b13f482f785", 0xbc}, {&(0x7f0000001500)="768b96441947b0a11f25403412b5326d1263696198a9eaf6a63d37082c217c8c9ba60cda48a35ec1a59f3c9bfab4ba4ddd86f7daeaa0a15f565d81c117233bc82cc307bfc0fc9bd18b2948fed4886f47b5a5546a1541a93a432de117a25c", 0x5e}, {&(0x7f0000001580)="435d8b89b799102716b0c64369383b72bd95ede2990fac1b3616f2e75d9abdb3f3a53e505c887020fa85071c6790d1c0666796d2833d95f961e855988fa3e25a488a34a4e295fb4e6f51aae9a2538ab932f135912741dbde0c96ab7572a111fe112da0657dec8a", 0x67}, {&(0x7f0000001600)="c39fa50153fab5d4c474000bac45fe431b5a846b714c0f6b2d99a58434b6cf43942684241216265a9fc85a5b9c5c9814db41e44894f5413327c5ed1cdf727eb1977042d0eba88bcb4d78e2e4cb05e99b27f64a4bc64b3db7467e315277b971df35381d6d49918a06e2ca2f441d27b27b6cb144f2e44127ff3066a39dbdfcd5fd0948d82f760c7524608f4858790901cf1d4bf1ef4a4c627d732f3d917b67f9fa7860010638f9b296f54e48c58d5b2549920d01ba34101d90743948376cad892f8187ff363f60661a572d3cc56ccee8381c4cf73c4cb863eb9e578cbbaa0c43eb5967f77af8a410d31b69556c5fc361ce58719d3c19968032dd9a117795160b6d5d0e246245886ff42970e59cb4c955d87b0b472fd973c126487e6a80f6bdecccc6d78988b63db1fa8a8f44e8e4fcd675494b97a04e98361581b13b03cd210416fcc28d19f1f81f2c293864d2e33510b62f642c022b0c6a9e5dfa8fcf3673920a28a8ec610ce687ff701d526199796f168e74a4e85ce2954a865a32797416839db41feb44f076084bdaec16ffb0b17ecd82bcac37a602a2ba3da83fea789e4936e2d27d5e02aeb6c3151c193337b99f02279add8ea2de058cdf98ac096a2d98c14446c74e97bb07f77a14daa78ec92f4a47a5c3c762026725da54c90d509617e60da4bb3ff1f10ccd00e001c7ffd7ee5b8eb62bd1e13b029b5dd202669376742811c2aad8aed72c6e1576a9bd93cc2dfd54bba8e216392eae4485f856bcae4f5df4e39b19ef40da58f8cbbb007957a54165567b6ce2ffc7e69f6d254036534d805eeb9e225a808a6ba7a8f316e1dab8af8c6f639e170326c092a724ee8e4f61d355d46680fde1e12f125e053b1535b6ae64ac135ead1c51b59816a2861869bc033d1298b6ff833d3412e0b6cfd50d2a5edf9867803a32aa3011c709f6712f62153dc58d98e032cdf032208c0bef6139712d2d1e44aa3f65fd42466f90eda999d43b4407261f2ce4e8570fdcca301da805728839ac8fbfbb375e1eb297a463c6399320d439d3d827c7b423ac431751663432fe93068b536f7ffc3e717d2ff9d267bc90bc63cb93d2f7eaa59790c2b9c00636127cdee8cc67a1a75dae156b1cfbae8554f2e7427c5385dc814a6525a5e66ba9ec1fe8d1522b78b08587660dbd43fea95cd17411f2d3e250f5da85039821a5f2fc28b8b8dab36705b820882dec4815beb0d1a92787f750317743d8b7e327dcde9d0340f3bf0729ae7ddefbf802017d85ee34ca9b5f17dc44ddfe8682eede064ed4b3e64f3599bfe64ee484f0d92327206db159795a5ed3687599ed2b82e5927a6ac7b9a44bd02beac2f0c37e826c6219198e2b2b313ed61b94a8090a5cbf2748df2d6409b4776a43898850e0b4bb5c245ecc2a23980b9524741d6248233149f53f577a3c76926570f40d24e161874806af5c95b44217859c1572a936cefcf901991e5e42d020b18f96af02bd5a7a044cfe61139af0c3e2b582053cde9a674354481b54e9aaa12ed9a68f9bfb3c8bf30f652b10dade202c59b14c863dfb18d2b4d42eb2af138e30b4535b6efb77c033679cd5d78fe548c8deaf76b4555bea9cd16693e7e256363cd529ceff8607401bbf7ab6f380ce17fff46a7e58539e4366d3015a17c96345b74a6a1d34dacf6e3df2edf60d66d9a04067d964c55ea989b096830cc95ca01af17a8d64273d8c553b66e1ebc59a857ae289effe06f83430d00e2d783b487ce6d7ecbd1bc072c75ffc39e1962ce847e9894bf9585d5d0b129af48cdf075ccec81d5c2e6a8f92ab396f0e83d738ac0a66c586fcfffd851bd2b47525f406d51a405acc0ba65f52cfa2373e09c03d8b26b977c06b60e01f665fec8c85aaf0d355282100671aa99fa5d3fa632882ef2d1172565186e9a6ed6170bef1a36bb764495d1c6aca2e7c7f1062d4627138f946820a78d64ce41d27bc7df646e47bbda3f686f0258cc4e2d0500a6ff1c34ed66435db12bd208ef4a46d72e907df628746ab47c7857bd08b15979cecc3a4756b0a9c4596ac24ef20ccfc7560391aa6afe81a41a6f9886192b2a6bf4760672c335054f04c69be651c0a646934d96a21de84a1ae296068ebf708fab2b6be43f7149a60592bb4ea449daf51cdaed1edc8e6618206cfd82f7e493781323207a6e55861bba23192f61c9511783db3dad63c7c837d35508777c07d80f27eebce04501f3814f05bee7415b0bb12f6eb176b6dcaf20291fd0148bb4194dac2844b59b0ce89deea4d961dca63ccd1efc93abba3be65bf76e24a5faacb0775aa776e4e391ff97ccefa32dc74654a7b0a636e80cf7aca6633990f854ea278a2c0caf5a7f715ae67d83c722ac9a37c38945eb70c1838800563b5b94dbc8a303061824e33f03c6666d7a078d2020e862e6951c1f257257e99cdfae90892eb988c2fdcfd0ef1359431e22055703cb6ee9c4390aef44f0f898690c67537bdec234b8029ae8f5ea1ac9ba1a293dec03f954c6185b8195bc177e017a395d11e1e6c1e8ebf9cc8fa2fc002c36ea83df5dcf2c131c8b6137042f97cac1dbef71d592267b3a494c59bd601fe5fbf3f857db8b2b1c28c19473f999c1febdd18093587771b0f30ccae985611db8cdcf75aa6184ca675b7102a600c9c52fb477b00ad5c0e0540fd4c12f350c8cb85fcdf495d30e7d9291f9d62540e3939d69b06d83cc734edb3486c2fbe5ba183ddf40570656e08d88f4d509f97cb6bd688d9a48cd369495033f7873afb4549f25bb53ba2f3a9eba1ee5325baea5585c382426ba74e811ee903cbc2f9eb9da78811a347cd26baa7168375c178cc952c1b2107ad1a520d07f80b3454fccab34465994ee6042b625a963488081017a44df362261e6369d6d63238252a2e84655dbd76c4c885f2eb1ae27fc8d94277e24902a9bcf60acfa783b1099230e347c096e9c815db241328be8b9b8c0fb5a41f78af27c0272b7d86b3646881d0115bdaf9f54aa0c75da7e4d845cae11d9494fad817aa640c75a4de997ed97c5ef683c2c83f838e3d9896bed54cb91ad4898e77cdfe1c0d739fc7dd2265c5f824ee828d232a94c50f1b89f7d92bd9cab4daf9b15d3280df3dc0b1fa49ca5cdaa7006e21a955231ef66fefa03a381a6db32bf86105bfd5a614e66efa1e95185ca25fd9e3d154beb51fdf0d99fd294d724c9274b504db222129966f9e5c67e0781cb98d7afc0557933176becf459b57c3416c344ab9a81b539ba28e5c93bc1883bbf84c7d0b2594dbf92071f0053f83fa17815302fe2bb860cc5a708b784abf7cd7cb780c132b22ff2d32c0be44c642b78680f2d14727af3d4d991136743eb5491c6d5751bb1a52ba9ee86a12d214ea209b2bd2d3bb1099e072e67c1403670466a917c354fc9b8653a10251969fcb478f90ce387c3e745c42855bf1b82689f14ee0705f8f752dbd5c93f1587a8fe5f2de3f63871eac0e07adce45a20113e95ba5794d300b8de90f7839e4d9fda0be826c05080d0b73a59d9f1fa4ccfea67b356680a77bc12c8abcb5f0721655d448b5b5bff76d131da7efc48e5ba64286b171baa10bed1539e1d027918f047876ebb53018b484f85185defb2005df07207993defe3cb17d3d155d57f58e4c7afd82103e3da54dd2418e67ff8347a290d9080b46f3021ffb8b10ceff2ef21517a1fbc080f4a360a4273532d01a803fc8b650fb96b350333737e175964279fb6ccda8c6bd593312a4441d41711e08be40450b39154e1f91309132d4616565d197f6822fdea920fa0d57a6587c5d71aad548a85d7873d88fcf66068a37679984af44c11500048490d83f9dede48710780bdff767c2ef9b3e8014f7afce0b762a7b46ddca793a0d470923384e1bedddc2737c7a3be06288cad54af634da37b663a14b5f950aef0e1e49c049972f54b85039bb9a40d9a34184913db26dffdf1753806d5f7b26949abc4b48bac10ee842894d43d3c55c3187d52e4e75a4d56a10a61a3f3ae74709f69eb73d13bb723e64896b1016deb29d17891f27ff4386de90e0a0b9267a57d868b823d7ad31f8969e90717e8174dd39821e5daa7ec86446d84f85640e143c03e89becdf53341039d1d58f28e52c81b6a6b11dc9d8f83a9290f8c480c8065097a221905b4992a1bcd5f049e1b5fe06a9212d0e3879a585af1d2fee9b8b5fe3f865a9d6f61544d8d178d0f8edf90a326e5bd54bf292588cccf2224a20c91702eec26ef991aed821b5878a2de24b447390fe6243a4a98bef1d3f74613ec40acbae9b040849a639ba35296f892a3dae767b4f9e94777da52a21ad32df1ead78803d2b6031a044603c4582196669c905f573c5a64a345732faf2c1402a0cc540ca643e9249d3eb15c479360e4c9575a067ee85b8ca41f9c8ace555ba5eb3c6cc9ea90b2aa6c717c4d1e185d267512be01c63c67df205a8d5c3879a16075c34b28d91bd7b70e2897ae96a26df70fef8ed1279b466d9013daa2a9f854bd31139236a260479f2ab31d87c813421d1cd8b0ff953b69eada02a49c193d1ec9145a135f2aa0ac654436b49bf06eee6e63f962213342b9de1b86bac8651cde59da1b4b7646680001a69330376948b3367565adf66217ff2ff2c660f3d86871e80af1229ee948b0bb9eafd25e860c714bd0a9b3c7da43d6a6b0fd4dea053b9d8b34a403db2fa0b27de3264622c3a99b911d68670681b7cab75284f136bb270fe5f4434424003bacec982827320d7b435bca447a5a3532e13dc4007c64c7addd75aac2b7f90750dcf7813d9291d64358e75f8f4a06fdf2e9c68583417a4e9340540c7cd5275b72011c5adc6b6bd0510e859da2291e31467ebcae6875ee4f910401eaae53ff709176ca3edbdb0e88e28f05ce9f0ebc082af24a0f2eeb8b60c62d4dbf747e3e7620bda755bd222e05f24436b13ba7e6e75c86770d30ccf909756744bf453d325fcd0187d34ec7be557275c0e82cd356e0b179ecaf3616d95078c4fb3305caa7608430f4e49bf07cc1377d1ff35ae18d30fc29943338f82d50690b6af486a7f34e34e14618153acaf1923b2c6ad5572ac0dcf561a708af02e1f5de4d9dbee885e2b89763d240071c8f23c9de1ab89a8d33e65fe73720d72905f4b167480ae13543e58375d8379c1fc75e96602975aa1fae014a146f6b9034aca9615ad237074de9b405f3cacb8705c27029b6f0acdc2c63a5d6a461de0c0a87f453af41e1bedf521a7b1bfb6fb4bd81b085cd5934b4d2e7cc1e2ad9cb569963d4886a422b58e95ccac56ebb7b7c0993bdfc92606d86447aee0fedf1d3095a97a752b9fa0c548102cf0394af94df539b677c67243e1654cda62aa1abbdf171b6ba3fa6d47a6385c72840a49fbcbdeeeca285d1c3f3f56fe2da6f0b07893809b9dff0816a16ba1c3ddd616ddae7d4f89c3ec76f5466a7eb45f802fcccc2ddafd7cfec0537a64bad82d0de9bf4d740185ba52c53a33bb55aade1d89a2a4343ef75010bc4df3d4773d5f4a1fe87098f5d35873092010bd2bb792a9c34631611a15b64e9db142d50c9b0608f2d4aa58e53ee384a8ec3393d98f5a47b6878bc02423cc2562dfa44c0dc5810926ecc99000985cb502de3bc4be40243483f1c77c48c5b5f362090013dcc33b4c3af686c5d2cdcbccbe7e98c3256ec36814af20cf5ba9ce411f91f3594d1b67bfa6aba5d3ee9bb963ce06c231a85c7817ba1fd15832ef4af795705883d96f64460697d76bc8a6435cffe35e3367ba0c9625fd38b381ea519f0355642327b80a071c4b839b73dfbfe06b1bd120d916", 0x1000}, {&(0x7f0000002600)="eae97e0ee7df38376b491a907a8478fd64b948123124d90c4320b0d3c5f0cbd8dc21ba0908110a06f597de315eeeed6cd361ac00516f2110f2fc0ca787fff88e5378f36dfb630f", 0x47}, {&(0x7f0000002680)="8ff10f05a60a4499dd11333868154a07b4811a6b5d22635e9b87059bc75d84dbbcf10419d084da88fc88165f6a070d684c204c2b7f7d98fa3b215fe47329838c4e18fc995b91076b8979beaf1cf5f963a10ebcd7dd9231af8a109d64e179e1ef0da1c0af23a4c167912b82ab69b12a5eb51f8879d205c38b667c6ee1f457ed21b027ca0329d7701a1c31", 0x8a}, {&(0x7f0000002740)="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", 0x1000}, {&(0x7f0000003f80)="b6df654d3aa42981627a1ffb1350eb05e3725d8d8bed11ec6171ba6ea59d49bc583e5c87b133cdb8d5c400511a8d9c3ee2e9708fd9cf789f48671bafad65f675835c2043231853854e7d7de458dd8e21f2870ce46750a9896686fa2769715112d061527b7113bfd30d8be8e37a0f8cf53c0f290f5dbe519c6356d5de95102ec6406e0ce485cbd7b9b10708d275ca86bbceccadc67dda2fbbfc62ec77cdc84f095f6d09d91a22b686e1c60e0cea81e8fb5552a9bcaf03c7f3f4a6cc0a58f0f0890cdfb429bd728feaa63b5aaadfd62b34d18a1e62025d703e5fdc4a34f09fc8753b", 0xe1}, {&(0x7f0000004080)="0014f74404b234589de560adea3fe6d42f3fb5dc787f7662d8328787694aeee3b00d28f7306000e818b79b590e", 0x2d}, {&(0x7f00000040c0)="0460797d9bce0fcf20d5764886f1c65a7b85c630105b876088951c574c9252a221adf8ae25f160ad5c7619dbaccaa72d0aa51331c9deac9daa8100f976087ef3d3a02f735232ef4875b90090707908c2a4306ef162f27b71ae3199aca07a2e0d32d5b42aa5bcfb72abb780dc06dae6c76a6a494f9133f11d9389d89eab95703dadab2c0c9c392a04ddf56e126f18fda2659ba0308a5436e44fa0aa6c5f6c2c5ef24bacb33a0e530d1cb24cb55c435c2626c674fd2dda81e9d19581356b4824030e65175ce7fc6e39be1252fabbc4ae", 0xcf}], 0xb, &(0x7f00000037c0)=[@txtime={{0x18, 0x1, 0x3d, 0xff}}, @txtime={{0x18, 0x1, 0x3d, 0x10001}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}, @mark={{0x14, 0x1, 0x24, 0x20000}}, @txtime={{0x18, 0x1, 0x3d, 0xa}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xfffffffc}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000003}}, @mark={{0x14, 0x1, 0x24, 0x101}}], 0xf0}}, {{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f00000038c0)="7ae8ef8f3db81a2bf734cdcbc3a7ffcc2727be1380a39e05543433c1ff18025b10ebcbdb5d1c95fd16c26ad5b3bc7a60509ec28f4f036bb3a1804c19f26efd9607671adc6e899c32a67ed91aa9cd8378e8eb331889fb44a581383ddbf59a42e4f14894b57c42345426c89258d5dbaf32ee4b9b4d9bf592e260241bc794253210c5578ba0ba3e7acb2057ead44b6e799e61555e790f78fd9accbb97176024a2d8388892e350f83c1c90b2a8b4039899cd2cfc1952ad10db907bd81e2ff8b758ef665d2cafed0d1adc65c817d298054b5a", 0xd0}], 0x1}}, {{&(0x7f0000003a00)=@hci={0x1f, 0x1, 0x4}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003a80)="26c3f330e3cedde477165434592ea1aa03d401719960f201301c92bd6926e0121d4082bbeb3bee21e78a5fee489b5d34e183a24ffb589a365c0a6ba0852bd09579793eee44fb6eb2bea7a2838f33b6ed107c2d7042c7215341e785f2209bf8bbf3668ab0292aa9407df2110c3a0b7b42eb728852fd27d3591f00022fac38c4533e7e50b88921573171fa591da033346aae3763d647129462b5bbda953c5b38ec8cda2d9ac402cbb536ce664fccc438c4", 0xb0}, {&(0x7f0000003b40)="4ca5e1140fff313bcb8e56b82eab9e4100b074e03729e3f6e5373dfb1b3cd6430184bbb34383bb3fe320c8c8c07d88cffce21ff9ef313b84adc4575726466a702d9b7369b725d5541a6c95b025c2265c810d53fc", 0x54}], 0x2, &(0x7f0000003c00)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x800}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0xa8}}, {{&(0x7f0000003cc0)=@hci={0x1f, 0x2, 0x66f50dcd7774446e}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000003d40)="014f8680b6c0c81d47d98bf47786c8275b8ea9ccbbb664a16ad1af6f89c73d704f10", 0x22}, {&(0x7f0000003d80)="5b0d8bfef5cf9b48b5f3c870e5540230c8266034e28723fb0b7fa38cb44a31f49f1dc600ce57d3f7d7d3e11c560cbe5518318afcb42d8cff10c8cbcc61ed097d6a1671353ae5da1dc73c9045e13b444ee4a8a5ccfd5633df14327ccf86f324bb2fb9cdb5b4b37a8ad1b8a6e3e782e8b1bb2dc425dad780d2b1987e0b97284c4d0c195e6a71d16c64155c721bb25d073bc083566e95721be3f8e084e43c4e", 0x9e}], 0x2}}], 0x4, 0xc31) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x34004000) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000080), 0x4) close(0x3) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 433.840023ms ago: executing program 0 (id=4269): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x7ffffffe, 0x1}}}, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf251400000008001d00", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4044) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000140)="44c856ccd4156b8b506731a30b487078662af47d986ce23c36f1db255f442897492ecdbe820eb354325a68fd08512fe367ae493d16c62f4d5218a8a642561c39039fbb0cc8d78af5533404846c1cc941d194176a6d92b634308660f31f4036c70f950e1852ef23cc76de912dc244e4c613f4e428b932d9932aacdf551df768473164c0c99995a5b9e8e0442339de6565b6f63d055721b215913c50a275218028bf821959fc70930b79ab5aa8c371313f5fc9da4f95740349b47d02ea0eeb5faeb2f1588a9da2e8ed7c7c686d997a030e46", 0xd1) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0000000290001"], 0xa0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000600050003"], 0x24}}, 0x0) 344.777239ms ago: executing program 2 (id=4270): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) (async, rerun: 32) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 32) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0xffffff1f, 0x70bd27, 0x1, {0x0, 0x0, 0x0, r2, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x2}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x4}, @IFLA_GTP_LOCAL={0x8, 0x7, @broadcast}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 342.717832ms ago: executing program 3 (id=4271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000680)="2a637c1b8b3894ec89aaef510a473f", 0xf}], 0x2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000100)=0xe) bind$can_j1939(r4, &(0x7f0000000180)={0x1d, r3, 0x2, {0x1, 0x1, 0x5}, 0xfd}, 0x18) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0x1, {0x0, 0x1, 0x2}, 0xfd}, 0x18) close(0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2d, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x82}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x96d160c200d1a4a7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x4040) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 180.59936ms ago: executing program 1 (id=4272): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x21, 0x0, @l2={'eth', 0x3a, 'ipvlan1\x00'}}}}}, 0x34}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000600)="00112233445566778899", 0xa, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) read(r0, 0x0, 0x0) 59.311118ms ago: executing program 2 (id=4273): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x2, 0x200000000000001, 0x0) (async) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$sock(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001840)}, 0x40c0) (async) sendmsg$sock(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001840)}, 0x40c0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) (async) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newsa={0x160, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x0, 0x4e25, 0x7, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x4d3, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a06000000"}}, @tfcpad={0x8, 0x16, 0x2}]}, 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) recvmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)}, 0x2040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x100, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3ff, 0x4000000, 0x0, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x100, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3ff, 0x4000000, 0x0, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x50}}, 0x0) 664.438µs ago: executing program 4 (id=4274): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="370000006a64561500000000", @ANYRES32=0x0, @ANYBLOB="2a8dbb2408e8ee4d13ace18a04ff88a9ee04ea711e83f1493453200c9c458e4819f28a99b980edb811c03d12f619cce454f40f68a0d216989098e29f81683c912d784ade4c3fc2d9cd2622ea2db4feac3f6c83a7e9a0a077c281ceec77e4e7330c70a3b31b451caeac52769e6a89060000001c6905bcae5296ca97a2e80e008569e6ff038f1e3a699965d2a7c1c0dad8548ceb1a98b9763a06532e1704b43dc84345178d74dbb39f3abc1c855b759b319004f352d9afd5235bf044747246fb4673184970060047599ed9b23023d66bdf86a0537373417ecf02f97ce375f2110a794233c14b44e410490a5e82a9d41f57a8d9ca64a9078b8c9f644c243c81c4a7151415d2075b6c480847d0d93283b49a047e5585398dd39bc11ab2b02ac72ff8fa5b2ff6b92fb660975ea04be6613d978dde26d6a421f53f67bf7d8908db12c1f870aaa0de463605c39fc9d98d556f340dfb257ef41777dfe6835e6149a48f2cee9be361f9d7d55fdcbf30bfc7dd7280c174f90e3a6f56db2a4063fb0a", @ANYRES64=0x0], 0x20) sendto$inet(r0, &(0x7f0000000180)="c2fa0ca402bd4d11ed404a7fa591fb564449dbd0b1afb4b6fb8de763fd79dba8223e38496cff997c727c7d8a4e64743b82bb6741b8be62756ff6400c090f6c2e51d5e11278944753fb73f7d6ac49b929e542148da1baca63fa7f1caf3254", 0x5e, 0x20008000, &(0x7f00000002c0)={0x2, 0x4e20, @private=0xa010100}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112ce000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000152c0005800c0001007061796c6f6164001c00028008000340000000e1080004400000008b08000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000152c0005800c0001007061796c6f6164001c00028008000340000000e1080004400000008b08000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="200029bd7000fcdbdf251200000008000300", @ANYRES32=0x0, @ANYBLOB="3400810005000100f600000005000200e0000000050001000200000000058001000100000005000100040000000504c2000b0000000800a400020000000500e400010000001000bd000f00080001000700100008000500e4000100"/100], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="200029bd7000fcdbdf251200000008000300", @ANYRES32=0x0, @ANYBLOB="3400810005000100f600000005000200e0000000050001000200000000058001000100000005000100040000000504c2000b0000000800a400020000000500e400010000001000bd000f00080001000700100008000500e4000100"/100], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4) 0s ago: executing program 1 (id=4275): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x50, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44840}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'vxcan1\x00', @remote}) kernel console output (not intermixed with test programs): 8][T16129] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 50232 - 0 [ 385.598488][T16369] netlink: zone id is out of range [ 385.605631][T16369] netlink: zone id is out of range [ 385.610873][T16369] netlink: zone id is out of range [ 385.616404][T16369] netlink: zone id is out of range [ 385.629693][T16369] netlink: zone id is out of range [ 385.638385][T16369] netlink: zone id is out of range [ 385.649424][T16369] netlink: zone id is out of range [ 385.661227][T16369] netlink: zone id is out of range [ 385.672963][T16369] netlink: zone id is out of range [ 385.687841][T16369] netlink: zone id is out of range [ 385.988259][T16381] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 386.013924][T16381] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 386.033903][T16381] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 386.105876][T16129] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 386.148209][T16129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 386.209102][T16129] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 386.252790][T16129] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 386.284523][T16129] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 386.306253][T16129] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 386.324476][T16394] __nla_validate_parse: 71 callbacks suppressed [ 386.324497][T16394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2847'. [ 386.333925][T16391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2846'. [ 386.342041][T16129] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 386.386896][T16129] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 386.477853][T16391] 8021q: adding VLAN 0 to HW filter on device bond14 [ 386.570116][T16398] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 386.771835][T16420] syzkaller0: entered promiscuous mode [ 386.778738][T16420] syzkaller0: entered allmulticast mode [ 386.847269][ T5629] Bluetooth: hci5: command tx timeout [ 386.894522][T16425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2854'. [ 386.923599][T16129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.041696][T16129] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.116137][T11326] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.123487][T11326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.174217][T11326] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.181504][T11326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.384018][T16443] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2858'. [ 388.327941][T16453] bond15 (unregistering): Released all slaves [ 388.403880][T16469] bridge4: entered promiscuous mode [ 388.416731][T16469] bridge4: entered allmulticast mode [ 388.698201][T16482] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2864'. [ 388.729190][T16482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2864'. [ 388.773688][T16491] xt_nat: multiple ranges no longer supported [ 388.925317][ T5629] Bluetooth: hci5: command tx timeout [ 389.307481][T16520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2869'. [ 390.203075][T16129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.225531][T16539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2873'. [ 390.301438][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2874'. [ 390.484830][T16539] 8021q: adding VLAN 0 to HW filter on device bond17 [ 390.523272][T16557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2873'. [ 390.587853][T16539] bond17 (unregistering): Released all slaves [ 390.826944][T16129] veth0_vlan: entered promiscuous mode [ 390.887691][T16129] veth1_vlan: entered promiscuous mode [ 390.915761][T16570] bond0: invalid NS target :: specified for addition [ 390.929860][T16570] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 390.955260][T16571] xt_cgroup: invalid path, errno=-2 [ 391.004070][T16129] veth0_macvtap: entered promiscuous mode [ 391.049753][T16129] veth1_macvtap: entered promiscuous mode [ 391.143051][T16129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.174190][T16129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.386095][ T3315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.437197][T16592] erspan0: entered promiscuous mode [ 391.445734][T16592] erspan0: entered allmulticast mode [ 391.485803][T11321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.509949][T11321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.626887][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.649417][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.749742][T11326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.750121][ T62] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.771760][T11326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.020207][T16620] __nla_validate_parse: 3 callbacks suppressed [ 392.020229][T16620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2897'. [ 392.051247][T16620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2897'. [ 392.118690][T16619] lo: entered promiscuous mode [ 392.142349][T16619] tunl0: entered promiscuous mode [ 392.172683][T16619] gre0: entered promiscuous mode [ 392.209779][T16619] gretap0: entered promiscuous mode [ 392.226760][T16619] erspan0: entered promiscuous mode [ 392.240753][T16619] ip_vti0: entered promiscuous mode [ 392.258660][ T9] lo speed is unknown, defaulting to 1000 [ 392.262091][T16625] validate_nla: 59 callbacks suppressed [ 392.262108][T16625] netlink: 'syz.4.2899': attribute type 5 has an invalid length. [ 392.432983][T16634] netlink: 'syz.2.2901': attribute type 1 has an invalid length. [ 392.494971][T16634] 8021q: adding VLAN 0 to HW filter on device bond15 [ 392.573703][T16645] bond15: (slave gretap7): making interface the new active one [ 392.590545][T16645] bond15: (slave gretap7): Enslaving as an active interface with an up link [ 393.056627][T16670] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2913'. [ 393.079584][T16670] netlink: 'syz.1.2913': attribute type 1 has an invalid length. [ 393.098928][T16671] syzkaller1: entered promiscuous mode [ 393.113065][T16671] syzkaller1: entered allmulticast mode [ 393.318001][T16687] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2918'. [ 393.343891][T16685] xt_hashlimit: overflow, try lower: 3/0 [ 393.374319][T16687] veth7: entered allmulticast mode [ 393.417637][T16690] bond3: (slave veth0_to_bond): Releasing active interface [ 393.426136][T16690] veth0_to_bond: left promiscuous mode [ 393.431961][T16690] veth0_to_bond: left allmulticast mode [ 393.634318][T16701] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2922'. [ 393.851269][T16716] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2926'. [ 393.862374][T16716] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2926'. [ 394.044396][T16722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2927'. [ 394.192097][T16729] gretap1: entered promiscuous mode [ 394.241745][T16731] tipc: Enabling of bearer rejected, media not registered [ 394.924295][T16760] net_ratelimit: 497 callbacks suppressed [ 394.924314][T16760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.954407][T16764] netlink: 'syz.2.2941': attribute type 1 has an invalid length. [ 394.963228][T16762] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 395.125459][T16764] 8021q: adding VLAN 0 to HW filter on device bond16 [ 395.189065][T16774] xt_TCPMSS: Only works on TCP SYN packets [ 395.242129][T16767] bond16: (slave geneve5): making interface the new active one [ 395.267083][T16767] bond16: (slave geneve5): Enslaving as an active interface with an up link [ 395.304006][T11322] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 395.341435][T11322] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 395.377304][T11322] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 395.550927][T16787] netlink: 'syz.4.2948': attribute type 1 has an invalid length. [ 395.572421][T16787] nbd: error processing sock list [ 396.494630][T16832] bond15: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 396.509300][T16832] bond15 (unregistering): Released all slaves [ 396.543390][T16842] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2965'. [ 396.554352][T16842] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2965'. [ 397.359384][T16888] tipc: Started in network mode [ 397.364538][T16888] tipc: Node identity 2ec8ea64cb03, cluster identity 4711 [ 397.372772][T16888] tipc: Enabled bearer , priority 0 [ 397.538723][T16894] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2980'. [ 397.584757][T16888] syzkaller0: entered promiscuous mode [ 397.602791][T16888] syzkaller0: entered allmulticast mode [ 397.615996][T16888] tipc: Resetting bearer [ 397.692202][T16896] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap8 [ 397.722587][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 397.734850][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 397.745668][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 397.758091][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 397.770195][T16896] gretap8: default qdisc (pfifo_fast) fail, fallback to noqueue [ 397.778601][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 397.787842][T16896] gretap8: entered promiscuous mode [ 397.793758][T16896] gretap8: entered allmulticast mode [ 397.828057][T16886] tipc: Resetting bearer [ 399.812916][ T5629] Bluetooth: hci4: command tx timeout [ 400.149095][T16886] tipc: Disabling bearer [ 400.161628][T16912] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2980'. [ 400.337126][ T5748] tipc: Node number set to 3855346276 [ 400.682801][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2988'. [ 401.069836][T16901] virt_wifi0 speed is unknown, defaulting to 1000 [ 401.090385][T16901] lo speed is unknown, defaulting to 1000 [ 401.418555][T16983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2996'. [ 401.886150][ T5629] Bluetooth: hci4: command tx timeout [ 402.051598][T17031] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3007'. [ 402.184591][T17029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3008'. [ 402.193864][T17029] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3008'. [ 402.250511][T16901] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.265365][T16901] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.277843][T16901] bridge_slave_0: entered allmulticast mode [ 402.296699][T16901] bridge_slave_0: entered promiscuous mode [ 402.341410][T16901] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.353728][T16901] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.361943][T16901] bridge_slave_1: entered allmulticast mode [ 402.370432][T16901] bridge_slave_1: entered promiscuous mode [ 402.427956][T16901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.456766][T16901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.522201][T16901] team0: Port device team_slave_0 added [ 402.552692][T16901] team0: Port device team_slave_1 added [ 402.647073][T16901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.660577][T16901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.733441][T16901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.010897][T16901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.082175][T16901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.209072][T16901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.310361][T17084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3017'. [ 403.378569][T16901] hsr_slave_0: entered promiscuous mode [ 403.388957][T16901] hsr_slave_1: entered promiscuous mode [ 403.396681][T16901] debugfs: 'hsr0' already exists in 'hsr' [ 403.403563][T16901] Cannot create hsr debugfs directory [ 403.438805][T17089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3019'. [ 403.523034][T17093] tipc: New replicast peer: 255.255.255.255 [ 403.530287][T17093] tipc: Enabled bearer , priority 10 [ 403.575945][T17096] FAULT_INJECTION: forcing a failure. [ 403.575945][T17096] name failslab, interval 1, probability 0, space 0, times 1 [ 403.604562][T17096] CPU: 0 UID: 0 PID: 17096 Comm: syz.3.3021 Not tainted syzkaller #0 PREEMPT(full) [ 403.604592][T17096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 403.604605][T17096] Call Trace: [ 403.604613][T17096] [ 403.604622][T17096] dump_stack_lvl+0xe8/0x150 [ 403.604735][T17096] should_fail_ex+0x40c/0x560 [ 403.604819][T17096] should_failslab+0xa8/0x100 [ 403.604883][T17096] __kmalloc_cache_noprof+0xa8/0x660 [ 403.604925][T17096] ? nfnetlink_rcv+0x1021/0x28c0 [ 403.605044][T17096] ? nfnetlink_rcv+0x1021/0x28c0 [ 403.605072][T17096] nfnetlink_rcv+0x1021/0x28c0 [ 403.605143][T17096] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 403.605198][T17096] ? netlink_deliver_tap+0x2e/0x1b0 [ 403.605275][T17096] ? netlink_deliver_tap+0x2e/0x1b0 [ 403.605298][T17096] ? netlink_deliver_tap+0x2e/0x1b0 [ 403.605327][T17096] netlink_unicast+0x7bb/0x940 [ 403.605360][T17096] netlink_sendmsg+0x813/0xb40 [ 403.605394][T17096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.605423][T17096] ? aa_sock_msg_perm+0xf1/0x1b0 [ 403.605491][T17096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.605513][T17096] sock_sendmsg_nosec+0x13a/0x180 [ 403.605604][T17096] ____sys_sendmsg+0x54e/0x850 [ 403.605630][T17096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 403.605664][T17096] ? import_iovec+0x73/0xa0 [ 403.605695][T17096] ___sys_sendmsg+0x2a5/0x360 [ 403.605717][T17096] ? __lock_acquire+0x683/0x2cf0 [ 403.605780][T17096] ? __pfx____sys_sendmsg+0x10/0x10 [ 403.605843][T17096] ? __fget_files+0x2a/0x420 [ 403.605888][T17096] ? __fget_files+0x3a2/0x420 [ 403.605927][T17096] __x64_sys_sendmsg+0x1b1/0x290 [ 403.605952][T17096] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 403.606005][T17096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.606051][T17096] do_syscall_64+0x174/0x580 [ 403.606158][T17096] ? trace_irq_disable+0x3b/0x140 [ 403.606206][T17096] ? clear_bhb_loop+0x40/0x90 [ 403.606231][T17096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.606252][T17096] RIP: 0033:0x7fe2f239e019 [ 403.606272][T17096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.606289][T17096] RSP: 002b:00007fe2f3293028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.606311][T17096] RAX: ffffffffffffffda RBX: 00007fe2f2625fa0 RCX: 00007fe2f239e019 [ 403.606326][T17096] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 403.606338][T17096] RBP: 00007fe2f3293090 R08: 0000000000000000 R09: 0000000000000000 [ 403.606351][T17096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.606363][T17096] R13: 00007fe2f2626038 R14: 00007fe2f2625fa0 R15: 00007ffc9e54ec98 [ 403.606395][T17096] [ 403.926568][T17100] netlink: 'syz.1.3023': attribute type 10 has an invalid length. [ 403.971175][ T5629] Bluetooth: hci4: command tx timeout [ 404.015844][T17098] erspan0: left promiscuous mode [ 404.170588][T17098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.232422][T17098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.347146][T17098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.373391][T17098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.395797][T17098] veth1_macvtap: left promiscuous mode [ 404.403084][T17098] veth0_macvtap: left promiscuous mode [ 404.410479][T17098] veth0_macvtap: entered promiscuous mode [ 404.418487][T17098] veth1_macvtap: entered promiscuous mode [ 404.436191][T17098] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 404.449410][T17098] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 404.458854][T17098] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 404.469493][T17098] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 404.492083][T17098] 8021q: adding VLAN 0 to HW filter on device bond1 [ 404.504607][T17098] 8021q: adding VLAN 0 to HW filter on device bond2 [ 404.549184][T17098] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 404.566527][T17098] erspan0: entered promiscuous mode [ 404.574365][T17098] 8021q: adding VLAN 0 to HW filter on device bond3 [ 404.655801][T12269] bridge0: port 3(vlan1) entered blocking state [ 404.663383][T12269] bridge0: port 3(vlan1) entered forwarding state [ 404.713870][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.722253][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.746461][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.753732][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.755501][T17124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3028'. [ 404.839222][ T5748] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 404.908202][T16901] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.945808][T16901] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 404.971504][T16901] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.025652][T16901] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 405.046073][T16901] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 405.058976][T17140] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3032'. [ 405.110656][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 405.136191][ T5748] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 405.147931][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 405.167549][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.179728][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.188936][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 405.199811][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.211819][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.222181][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 405.236468][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 405.351528][T17150] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3033'. [ 405.499301][T16901] bond0: (slave netdevsim1): Releasing backup interface [ 405.527137][T16901] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.546829][T16901] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 405.561421][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 405.571825][T16901] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.583669][T16901] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 405.592747][T17155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3036'. [ 405.594574][T16901] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 405.615270][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 406.047388][ T5629] Bluetooth: hci4: command tx timeout [ 407.695447][ T169] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.707861][ T169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.717256][ T169] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 407.732296][T17156] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3036'. [ 407.745791][ T169] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.764767][ T169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.784219][ T169] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 407.912166][T16901] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.923274][T16901] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 407.944815][T16901] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.970561][T16901] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 408.008856][T16901] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 408.182890][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 408.444137][T17178] ip6erspan1: entered promiscuous mode [ 408.760025][T17187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.780696][T16901] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 408.834864][T16901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 408.860516][T16901] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 408.907548][T17192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3043'. [ 408.921720][T16901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 408.970605][T17196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3043'. [ 409.099918][T17199] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3046'. [ 409.184529][T16901] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 409.219014][T16901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 409.244408][T16901] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 409.288645][T16901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 409.307385][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 409.325244][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 409.926863][T16901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.030489][T16901] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.072218][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.079514][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.178542][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.185808][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.207886][ T9] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 410.207904][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 410.253754][T17236] netlink: 5768 bytes leftover after parsing attributes in process `syz.1.3058'. [ 410.292629][T17236] openvswitch: netlink: Flow actions attr not present in new flow. [ 410.632825][ T5641] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 410.760995][ T5641] CPU: 0 UID: 0 PID: 5641 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 410.761025][ T5641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 410.761036][ T5641] Call Trace: [ 410.761044][ T5641] [ 410.761053][ T5641] dump_stack_lvl+0xe8/0x150 [ 410.761088][ T5641] dump_header+0xd3/0x4b0 [ 410.761143][ T5641] oom_kill_process+0x3ab/0x970 [ 410.761181][ T5641] out_of_memory+0x1064/0x1480 [ 410.761200][ T5641] ? try_charge_memcg+0xbca/0x1590 [ 410.761262][ T5641] ? __pfx_out_of_memory+0x10/0x10 [ 410.761281][ T5641] ? do_raw_spin_unlock+0xf5/0x210 [ 410.761317][ T5641] try_charge_memcg+0xc74/0x1590 [ 410.761364][ T5641] ? __pfx_try_charge_memcg+0x10/0x10 [ 410.761389][ T5641] ? percpu_ref_tryget+0x15/0x180 [ 410.761440][ T5641] ? charge_memcg+0x20/0x2b0 [ 410.761471][ T5641] charge_memcg+0x19c/0x2b0 [ 410.761499][ T5641] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 410.761526][ T5641] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 410.761557][ T5641] swap_cache_alloc_folio+0x4de/0x990 [ 410.761600][ T5641] swap_cache_read_folio+0x44/0x120 [ 410.761627][ T5641] swap_cluster_readahead+0x3a0/0x640 [ 410.761658][ T5641] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 410.761697][ T5641] ? get_vma_policy+0x27b/0x3c0 [ 410.761730][ T5641] swapin_readahead+0x19a/0xc10 [ 410.761757][ T5641] ? swap_table_get+0x1e/0x260 [ 410.761779][ T5641] ? swap_table_get+0x1e/0x260 [ 410.761803][ T5641] ? __pfx_swapin_readahead+0x10/0x10 [ 410.761836][ T5641] ? swap_table_get+0x1e/0x260 [ 410.761857][ T5641] ? swap_table_get+0x1e/0x260 [ 410.761874][ T5641] ? swap_table_get+0x1e/0x260 [ 410.761896][ T5641] ? swap_table_get+0x216/0x260 [ 410.761918][ T5641] ? swap_cache_get_folio+0x2e7/0x2f0 [ 410.761948][ T5641] do_swap_page+0x455/0x5060 [ 410.761984][ T5641] ? __pte_offset_map+0x29/0x240 [ 410.762015][ T5641] ? __lock_acquire+0x683/0x2cf0 [ 410.762042][ T5641] ? do_swap_page+0x124/0x5060 [ 410.762064][ T5641] ? __pfx_do_swap_page+0x10/0x10 [ 410.762083][ T5641] ? __pte_offset_map+0x1ae/0x240 [ 410.762109][ T5641] ? pte_offset_map_rw_nolock+0xea/0x160 [ 410.762136][ T5641] handle_mm_fault+0x124c/0x3080 [ 410.762174][ T5641] ? handle_mm_fault+0xec/0x3080 [ 410.762217][ T5641] ? __pfx_handle_mm_fault+0x10/0x10 [ 410.762236][ T5641] ? lock_vma_under_rcu+0x45a/0x500 [ 410.762291][ T5641] do_user_addr_fault+0xa4d/0x1340 [ 410.762351][ T5641] ? trace_page_fault_user+0x84/0x1e0 [ 410.762383][ T5641] exc_page_fault+0x6a/0xc0 [ 410.762456][ T5641] asm_exc_page_fault+0x26/0x30 [ 410.762475][ T5641] RIP: 0033:0x7f46c5a6bf57 [ 410.762494][ T5641] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 60 98 ee 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 59 97 ee 00 48 01 d1 39 7c 24 [ 410.762511][ T5641] RSP: 002b:00007ffffd1a75a0 EFLAGS: 00010206 [ 410.762537][ T5641] RAX: 0000001b34724000 RBX: 000000000000072c RCX: 0000000000064190 [ 410.762550][ T5641] RDX: 0000000003085927 RSI: 00007ffffd1a7630 RDI: 0000000000000006 [ 410.762562][ T5641] RBP: 00007ffffd1a75dc R08: 000000000b918898 R09: 3fffffffffffffff [ 410.762575][ T5641] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 410.762587][ T5641] R13: 00000000000927c0 R14: 0000000000063c5e R15: 00007ffffd1a7630 [ 410.762619][ T5641] [ 410.927804][ T5641] memory: usage 307200kB, limit 307200kB, failcnt 474 [ 411.165274][ T5641] memory+swap: usage 307296kB, limit 9007199254740988kB, failcnt 0 [ 411.173804][ T5641] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 411.204926][ T5641] Memory cgroup stats for /syz4: [ 411.206013][ T5641] cache 0 [ 411.238330][ T5641] rss 0 [ 411.250563][ T5641] rss_huge 0 [ 411.279275][T17267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3065'. [ 411.348731][ T5641] shmem 0 [ 411.360622][ T5641] mapped_file 0 [ 411.380108][ T5641] dirty 0 [ 411.400097][ T5641] writeback 0 [ 411.420453][ T5641] workingset_refault_anon 10 [ 411.453809][ T5641] workingset_refault_file 1 [ 411.472431][ T5641] swap 98304 [ 411.498006][ T5641] swapcached 176128 [ 411.509596][ T5641] pgpgin 71052 [ 411.523888][ T5641] pgpgout 71043 [ 411.547274][ T5641] pgfault 121687 [ 411.556070][ T5641] pgmajfault 5 [ 411.572868][ T5641] inactive_anon 28672 [ 411.591554][ T5641] active_anon 8192 [ 411.609708][ T5641] inactive_file 0 [ 411.624888][ T5641] active_file 0 [ 411.640444][ T5641] unevictable 0 [ 411.647595][ T5641] hierarchical_memory_limit 314572800 [ 411.666003][ T5641] hierarchical_memsw_limit 9223372036854771712 [ 411.672255][ T5641] total_cache 0 [ 411.687726][ T5641] total_rss 0 [ 411.692631][ T5641] total_rss_huge 0 [ 411.700067][ T5641] total_shmem 0 [ 411.720863][ T5641] total_mapped_file 0 [ 411.740003][ T5641] total_dirty 0 [ 411.753216][ T5641] total_writeback 0 [ 411.779050][ T5641] total_workingset_refault_anon 10 [ 411.809481][ T5641] total_workingset_refault_file 1 [ 411.835790][ T5641] total_swap 98304 [ 411.852296][ T5641] total_swapcached 176128 [ 411.877074][ T5641] total_pgpgin 71052 [ 411.891152][ T5641] total_pgpgout 71043 [ 411.912898][ T5641] total_pgfault 121687 [ 411.930576][T17287] netlink: 'syz.3.3072': attribute type 2 has an invalid length. [ 411.938693][ T5641] total_pgmajfault 5 [ 411.956062][ T5641] total_inactive_anon 28672 [ 411.960845][T17287] netlink: 'syz.3.3072': attribute type 2 has an invalid length. [ 411.969285][ T5641] total_active_anon 8192 [ 411.974722][ T5641] total_inactive_file 0 [ 411.988568][ T5641] total_active_file 0 [ 412.003553][ T5641] total_unevictable 0 [ 412.026328][ T5641] anon_cost 0 [ 412.037502][ T5641] file_cost 0 [ 412.052028][ T5641] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3037,pid=17159,uid=0 [ 412.123981][ T5641] Memory cgroup out of memory: Killed process 17159 (syz.4.3037) total-vm:98604kB, anon-rss:1248kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 412.486628][T16901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.523454][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3077'. [ 412.544820][T17299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3076'. [ 412.664413][T17303] bond10: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 412.680353][T17303] bond10 (unregistering): Released all slaves [ 412.872814][T16901] veth0_vlan: entered promiscuous mode [ 412.920970][T17314] netlink: 'syz.3.3081': attribute type 12 has an invalid length. [ 412.967352][T17314] netlink: 'syz.3.3081': attribute type 29 has an invalid length. [ 412.992959][T17314] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3081'. [ 413.010233][T17314] netlink: 59 bytes leftover after parsing attributes in process `syz.3.3081'. [ 413.036610][T17318] xt_cgroup: invalid path, errno=-2 [ 413.067675][T17314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3081'. [ 413.094014][T17319] bond17: invalid ARP target 0.0.0.0 specified for addition [ 413.105502][T17314] openvswitch: netlink: Flow key attribute not present in set flow. [ 413.112198][T17319] bond17: option arp_ip_target: invalid value (0) [ 413.138834][T17319] bond17 (unregistering): Released all slaves [ 413.183961][T16901] veth1_vlan: entered promiscuous mode [ 413.321119][T16901] veth0_macvtap: entered promiscuous mode [ 413.364359][T16901] veth1_macvtap: entered promiscuous mode [ 413.476542][T16901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.523615][T16901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.626528][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.661017][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.726761][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 413.755158][ T3291] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.812160][T17344] netlink: 'syz.4.3092': attribute type 9 has an invalid length. [ 413.814871][ T3291] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.166342][T17344] vcan1: entered promiscuous mode [ 414.172569][T17344] vcan1: entered allmulticast mode [ 414.304099][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.326224][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.361943][T17359] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 414.401673][T17359] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 414.500837][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.534339][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.799851][T17387] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 415.046496][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.107219][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.542685][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 415.562344][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 415.577144][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 415.588355][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 415.596539][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 416.325293][T17439] __nla_validate_parse: 3 callbacks suppressed [ 416.325324][T17439] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3113'. [ 416.325482][T17440] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3113'. [ 416.436627][T17439] bond1: (slave veth0): Device is not bonding slave [ 416.443484][T17439] bond1: option active_slave: invalid value (veth0) [ 416.463673][T17439] bond1 (unregistering): Released all slaves [ 416.560559][T17440] bond1: (slave veth0): Device is not bonding slave [ 416.567446][T17440] bond1: option active_slave: invalid value (veth0) [ 416.580952][T17440] bond1 (unregistering): Released all slaves [ 416.589626][T17417] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 416.692985][T17406] virt_wifi0 speed is unknown, defaulting to 1000 [ 416.717994][T17406] lo speed is unknown, defaulting to 1000 [ 416.754720][T17454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3116'. [ 416.904106][T17454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3116'. [ 417.127193][T17472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3122'. [ 417.181171][T17472] bond0: (slave bond_slave_1): Releasing backup interface [ 417.264107][T17478] netlink: 'syz.3.3125': attribute type 18 has an invalid length. [ 417.274328][T17478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3125'. [ 417.396073][T17478] netlink: 'syz.3.3125': attribute type 18 has an invalid length. [ 417.412283][T17478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3125'. [ 417.650451][ T5629] Bluetooth: hci0: command tx timeout [ 417.805266][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 417.880717][T17406] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.892646][T17406] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.902550][T17406] bridge_slave_0: entered allmulticast mode [ 417.913472][T17406] bridge_slave_0: entered promiscuous mode [ 418.258761][T17519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3132'. [ 418.485213][T17512] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 418.582662][T17406] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.606269][T17406] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.621384][T17406] bridge_slave_1: entered allmulticast mode [ 418.642920][T17406] bridge_slave_1: entered promiscuous mode [ 418.725434][T17406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.779547][T17406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.948898][T17406] team0: Port device team_slave_0 added [ 418.970944][T17406] team0: Port device team_slave_1 added [ 419.059069][T17542] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3140'. [ 419.074624][T17406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.087931][T17542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3140'. [ 419.089870][T17406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.128767][T17406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.154557][T17542] netlink: 'syz.4.3140': attribute type 1 has an invalid length. [ 419.182231][T17542] netlink: 'syz.4.3140': attribute type 2 has an invalid length. [ 419.220084][T17542] vlan3: entered promiscuous mode [ 419.225841][T17542] bridge0: entered promiscuous mode [ 419.246118][T17406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.262079][T17406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.306105][T17406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.334712][T17552] kthread_run failed with err -4 [ 419.480708][T17406] hsr_slave_0: entered promiscuous mode [ 419.488205][T17406] hsr_slave_1: entered promiscuous mode [ 419.498322][T17406] debugfs: 'hsr0' already exists in 'hsr' [ 419.504117][T17406] Cannot create hsr debugfs directory [ 419.534195][T17566] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 419.549173][T17566] batman_adv: batadv0: Adding interface: gretap2 [ 419.556083][T17566] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.592489][T17566] batman_adv: batadv0: Interface activated: gretap2 [ 419.727675][ T5629] Bluetooth: hci0: command 0x041b tx timeout [ 420.252374][T17406] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.284763][T17406] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.309571][T17406] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 420.554026][T17406] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.569364][T17406] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.581032][T17406] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 420.762676][T17406] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.781735][T17406] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.792916][T17406] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 420.948104][T17622] netlink: 'syz.0.3163': attribute type 4 has an invalid length. [ 420.971126][T17622] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 421.242966][T17634] xt_hashlimit: size too large, truncated to 1048576 [ 421.637004][T17406] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 421.677817][T17406] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.697190][T17406] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 421.730909][T17406] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.752603][T17406] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 421.801311][T17406] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.805723][ T5629] Bluetooth: hci0: command 0x041b tx timeout [ 421.817761][T17406] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 421.837979][T17406] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 422.086940][T17406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.095331][T17669] __nla_validate_parse: 5 callbacks suppressed [ 422.095352][T17669] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3171'. [ 422.123915][T17670] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3172'. [ 422.137063][T17670] tipc: Invalid UDP bearer configuration [ 422.137129][T17670] tipc: Enabling of bearer rejected, failed to enable media [ 422.220085][T17406] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.256969][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.264204][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.311591][ T3291] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.318866][ T3291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.486217][T17686] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 422.673677][T17700] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3179'. [ 422.707545][T17702] netlink: 'syz.1.3180': attribute type 1 has an invalid length. [ 422.732820][T17699] netlink: 'syz.4.3181': attribute type 1 has an invalid length. [ 422.734140][T17702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3180'. [ 422.794283][T17699] bond10: entered promiscuous mode [ 422.804084][T17699] 8021q: adding VLAN 0 to HW filter on device bond10 [ 422.916955][T17699] bond10: (slave bridge8): making interface the new active one [ 422.925568][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 422.942212][T17699] bridge8: entered promiscuous mode [ 422.955444][T17699] bond10: (slave bridge8): Enslaving as an active interface with an up link [ 423.309100][T17725] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3187'. [ 423.570762][T17742] Unsupported ieee802154 address type: 0 [ 423.718067][T17406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.887033][ T5629] Bluetooth: hci0: command 0x041b tx timeout [ 423.891293][T17406] veth0_vlan: entered promiscuous mode [ 424.014929][T17406] veth1_vlan: entered promiscuous mode [ 424.086238][T17755] erspan0: entered promiscuous mode [ 424.383427][T17778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3202'. [ 424.389860][T17406] veth0_macvtap: entered promiscuous mode [ 424.394575][T17778] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3202'. [ 424.402561][T17780] sctp: [Deprecated]: syz.3.3201 (pid 17780) Use of int in max_burst socket option deprecated. [ 424.402561][T17780] Use struct sctp_assoc_value instead [ 424.431022][T17406] veth1_macvtap: entered promiscuous mode [ 424.444795][T17780] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 424.471380][T17406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.509994][T17406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.620427][T11326] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.669294][T17792] netlink: 'syz.0.3205': attribute type 8 has an invalid length. [ 424.691478][T11326] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.961280][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.978505][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.997304][T17801] netlink: 'syz.0.3207': attribute type 21 has an invalid length. [ 425.026380][T17801] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3207'. [ 425.054416][T17801] netlink: 'syz.0.3207': attribute type 5 has an invalid length. [ 425.068850][T17801] netlink: 'syz.0.3207': attribute type 6 has an invalid length. [ 425.095809][T17801] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3207'. [ 425.186510][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.243968][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.255925][ T3291] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.288409][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.391122][T17816] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3211'. [ 425.965734][ T5629] Bluetooth: hci0: command 0x041b tx timeout [ 426.007830][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 426.024085][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 426.036388][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 426.052343][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 426.061100][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 426.902877][T17840] virt_wifi0 speed is unknown, defaulting to 1000 [ 426.913990][T17840] lo speed is unknown, defaulting to 1000 [ 427.219757][T17875] __nla_validate_parse: 3 callbacks suppressed [ 427.219863][T17875] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3229'. [ 427.219901][T17876] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3228'. [ 427.424631][T17881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3230'. [ 427.436113][T17883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3232'. [ 427.455290][T17881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3230'. [ 427.467139][T17883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3232'. [ 427.518096][T17881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3230'. [ 427.525292][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.537645][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.547162][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.556080][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.567167][T17881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3230'. [ 427.677579][T17895] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3234'. [ 427.760443][T17901] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3234'. [ 427.786226][T17895] openvswitch: netlink: Flow actions attr not present in new flow. [ 427.958585][T17922] tap0: tun_chr_ioctl cmd 1074025672 [ 427.967891][T17922] tap0: ignored: set checksum disabled [ 428.033142][T17840] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.060189][T17913] netlink: 'syz.4.3238': attribute type 11 has an invalid length. [ 428.074307][T17840] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.096867][T17840] bridge_slave_0: entered allmulticast mode [ 428.118790][T17840] bridge_slave_0: entered promiscuous mode [ 428.126744][ T5629] Bluetooth: hci1: command tx timeout [ 428.141369][T17929] netlink: 'syz.1.3241': attribute type 32 has an invalid length. [ 428.161645][T17840] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.173316][T17929] netlink: 'syz.1.3241': attribute type 12 has an invalid length. [ 428.183594][T17840] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.191651][T17840] bridge_slave_1: entered allmulticast mode [ 428.202353][T17840] bridge_slave_1: entered promiscuous mode [ 428.355653][T17929] bond1: option primary_reselect: invalid value (255) [ 428.371975][T17929] bond1 (unregistering): Released all slaves [ 428.451812][T17840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.484526][T17840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.637767][T17840] team0: Port device team_slave_0 added [ 428.676195][T17840] team0: Port device team_slave_1 added [ 428.746473][T17840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.760426][T17840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.795972][T17840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.824598][T17840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.834581][T17840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.866827][T17840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.120641][T17840] hsr_slave_0: entered promiscuous mode [ 429.140411][T17840] hsr_slave_1: entered promiscuous mode [ 429.149357][T17840] debugfs: 'hsr0' already exists in 'hsr' [ 429.161632][T17840] Cannot create hsr debugfs directory [ 429.450540][T17968] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 429.526539][T17977] Bluetooth: MGMT ver 1.23 [ 429.852446][T17840] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.029728][T17840] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.140516][T17840] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.173333][T17995] tipc: Started in network mode [ 430.183477][T17995] tipc: Node identity 62587b884dc1, cluster identity 4711 [ 430.204174][T17995] tipc: Enabled bearer , priority 0 [ 430.211398][ T5629] Bluetooth: hci1: command tx timeout [ 430.217873][T17996] tipc: Resetting bearer [ 430.241830][T17840] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.312306][T17999] tipc: Disabling bearer [ 430.319755][T18004] netlink: 'syz.4.3267': attribute type 1 has an invalid length. [ 430.471478][T18004] 8021q: adding VLAN 0 to HW filter on device bond11 [ 430.497455][T18007] bond11: (slave geneve5): making interface the new active one [ 430.508693][T18007] bond11: (slave geneve5): Enslaving as an active interface with an up link [ 430.574716][T18013] tipc: Enabled bearer , priority 10 [ 430.831243][T17840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 430.870907][T17840] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 430.918908][T17840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 430.920433][T18023] virt_wifi0 speed is unknown, defaulting to 1000 [ 430.960369][T17840] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 430.997017][T18023] lo speed is unknown, defaulting to 1000 [ 430.998236][T17840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 431.017043][T17840] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 431.049371][T18032] netlink: 'syz.1.3275': attribute type 1 has an invalid length. [ 431.090008][T17840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 431.106397][T17840] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 431.112427][T18034] ipt_REJECT: TCP_RESET invalid for non-tcp [ 431.217539][T18040] openvswitch: netlink: IP tunnel dst address not specified [ 431.243229][T18040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.296978][T18043] openvswitch: netlink: IP tunnel dst address not specified [ 431.305417][T18043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.553616][T18050] netlink: 'syz.4.3280': attribute type 12 has an invalid length. [ 431.570258][ T5629] Bluetooth: hci0: command 0x041b tx timeout [ 431.643881][T18057] syzkaller0: entered promiscuous mode [ 431.660050][T18057] syzkaller0: entered allmulticast mode [ 431.732802][ T24] tipc: Node number set to 798587784 [ 432.026024][T17840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.110211][T17840] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.148768][ T3291] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.155999][ T3291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.179941][ T5735] IPVS: starting estimator thread 0... [ 432.210390][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.217778][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.287221][ T5629] Bluetooth: hci1: command tx timeout [ 432.298611][T18088] IPVS: using max 24 ests per chain, 57600 per kthread [ 432.474400][T18096] syzkaller0: entered promiscuous mode [ 432.480088][T18096] syzkaller0: entered allmulticast mode [ 432.493574][T18099] __nla_validate_parse: 7 callbacks suppressed [ 432.493650][T18099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3293'. [ 432.561841][T18099] netlink: 'syz.0.3293': attribute type 1 has an invalid length. [ 432.597090][T18103] netlink: 'syz.1.3294': attribute type 3 has an invalid length. [ 432.611781][T18103] openvswitch: netlink: Actions may not be safe on all matching packets [ 433.134460][T18122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3298'. [ 433.225582][T18125] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3299'. [ 433.264913][T18128] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3300'. [ 433.805355][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 433.908221][T18161] netlink: 'syz.2.3307': attribute type 1 has an invalid length. [ 434.382829][ T5629] Bluetooth: hci1: command tx timeout [ 436.040867][T18161] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 436.049479][T17840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.216536][T18168] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3310'. [ 436.260812][T17840] veth0_vlan: entered promiscuous mode [ 436.307228][T18168] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3310'. [ 436.312681][T17840] veth1_vlan: entered promiscuous mode [ 436.463035][T17840] veth0_macvtap: entered promiscuous mode [ 436.522329][T17840] veth1_macvtap: entered promiscuous mode [ 436.643111][T17840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.775159][T17840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.875541][ T267] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.971299][ T3291] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.030788][ T3291] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.084299][ T3291] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.134439][T18214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3319'. [ 437.184136][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.217867][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.444008][ T3291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.464217][ T3291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.522623][T18230] netlink: 'syz.0.3324': attribute type 1 has an invalid length. [ 437.523735][T18231] netlink: 'syz.0.3324': attribute type 1 has an invalid length. [ 437.684263][T18230] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 437.688703][T18231] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 437.791052][T18232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3323'. [ 438.086689][T18256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3328'. [ 438.147758][T18262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.162586][T18256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3328'. [ 438.183473][T18263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.217709][T18262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.452139][T18272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3335'. [ 438.918970][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 438.942429][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 438.951416][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 438.964739][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 438.975928][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 439.846046][T18325] syzkaller1: entered promiscuous mode [ 439.864836][T18325] syzkaller1: entered allmulticast mode [ 440.148165][T18341] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 440.261857][T18286] virt_wifi0 speed is unknown, defaulting to 1000 [ 440.351349][T18286] lo speed is unknown, defaulting to 1000 [ 440.434520][T18349] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3357'. [ 440.437997][T18352] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3357'. [ 440.563588][T18352] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 440.669905][T18349] bond1 (unregistering): Released all slaves [ 440.801997][T18366] virt_wifi0 speed is unknown, defaulting to 1000 [ 440.828488][T18366] lo speed is unknown, defaulting to 1000 [ 440.847432][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 441.086529][ T50] Bluetooth: hci2: command tx timeout [ 441.152974][T18381] netlink: zone id is out of range [ 441.186157][T18381] netlink: zone id is out of range [ 441.208669][T18381] netlink: zone id is out of range [ 441.256476][T18381] netlink: zone id is out of range [ 441.280449][T18381] netlink: set zone limit has 4 unknown bytes [ 441.589767][T18391] lo speed is unknown, defaulting to 1000 [ 441.758293][T18391] lo speed is unknown, defaulting to 1000 [ 441.828694][T18391] lo speed is unknown, defaulting to 1000 [ 442.066533][T18286] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.082083][T18286] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.100314][T18286] bridge_slave_0: entered allmulticast mode [ 442.120921][T18286] bridge_slave_0: entered promiscuous mode [ 442.182230][T18286] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.201734][T18286] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.218164][T18286] bridge_slave_1: entered allmulticast mode [ 442.238383][T18286] bridge_slave_1: entered promiscuous mode [ 442.390741][T18286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.408023][T18286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.569288][T18286] team0: Port device team_slave_0 added [ 442.604305][T18286] team0: Port device team_slave_1 added [ 442.706277][T18286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.713590][T18391] infiniband syz1: set active [ 442.721000][T18391] infiniband syz1: added lo [ 442.726122][T18286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.761226][T18391] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 442.796992][T18391] infiniband syz1: Couldn't open port 1 [ 442.816181][T18286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.842292][T18391] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 442.864206][T18286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.873445][T18286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.900183][T18391] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 442.919461][T18391] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 442.932018][T18286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.946206][T17342] lo speed is unknown, defaulting to 1000 [ 443.061594][T18391] RDS/IB: syz1: added [ 443.078199][T18391] smc: adding ib device syz1 with port count 1 [ 443.094616][T18391] smc: ib device syz1 port 1 has no pnetid [ 443.107836][T18286] hsr_slave_0: entered promiscuous mode [ 443.114840][T18286] hsr_slave_1: entered promiscuous mode [ 443.124738][T18286] debugfs: 'hsr0' already exists in 'hsr' [ 443.131664][T18286] Cannot create hsr debugfs directory [ 443.159541][T18391] lo speed is unknown, defaulting to 1000 [ 443.177771][ T50] Bluetooth: hci2: command tx timeout [ 443.225480][ T9] lo speed is unknown, defaulting to 1000 [ 443.689691][T18426] netlink: 'syz.3.3378': attribute type 1 has an invalid length. [ 443.863818][T18426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3378'. [ 443.940088][T18286] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.959330][T18286] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.970625][T18286] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 444.023759][T18426] bridge1: entered promiscuous mode [ 444.070648][T18391] lo speed is unknown, defaulting to 1000 [ 444.178007][T18286] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.209127][T18286] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.263237][T18286] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 444.541934][T18286] bond0: (slave netdevsim1): Releasing backup interface [ 444.574516][T18286] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.605527][T18286] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.626193][T18286] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 444.638501][T18449] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3384'. [ 444.829771][T18286] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.853751][T18286] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.864871][T18286] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 444.877592][T18451] netlink: 'syz.0.3385': attribute type 5 has an invalid length. [ 444.906331][T18391] lo speed is unknown, defaulting to 1000 [ 445.245849][ T50] Bluetooth: hci2: command tx timeout [ 445.455808][T18286] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 445.514134][T18286] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 445.544394][T18286] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 445.596623][T18286] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 445.616229][T18286] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 445.629508][T18464] netlink: 'syz.3.3390': attribute type 5 has an invalid length. [ 445.640231][T18286] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 445.660952][T18391] lo speed is unknown, defaulting to 1000 [ 445.670675][T18461] syzkaller0: entered promiscuous mode [ 445.685582][T18461] syzkaller0: entered allmulticast mode [ 445.706667][T18286] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 445.722166][T18286] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 446.031632][T18286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.085829][T18286] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.122097][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.129414][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.175050][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.182294][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.266448][T18391] lo speed is unknown, defaulting to 1000 [ 446.803524][T18489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3394'. [ 446.982562][T18391] lo speed is unknown, defaulting to 1000 [ 447.327548][ T50] Bluetooth: hci2: command tx timeout [ 447.553469][T18512] netlink: 'syz.3.3400': attribute type 29 has an invalid length. [ 447.600262][T18286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.675383][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.714473][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.750322][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.782602][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.964163][T18391] lo speed is unknown, defaulting to 1000 [ 448.378193][T18534] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3406'. [ 448.646036][T18286] veth0_vlan: entered promiscuous mode [ 448.691101][T18286] veth1_vlan: entered promiscuous mode [ 448.800523][T18286] veth0_macvtap: entered promiscuous mode [ 448.859302][T18391] lo speed is unknown, defaulting to 1000 [ 448.869884][T18286] veth1_macvtap: entered promiscuous mode [ 448.892886][T18541] bridge0: port 3(veth1_to_bridge) entered blocking state [ 448.924166][T18541] bridge0: port 3(veth1_to_bridge) entered disabled state [ 448.950392][T18541] veth1_to_bridge: entered allmulticast mode [ 448.974662][T18541] veth1_to_bridge: entered promiscuous mode [ 448.991278][T18541] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 449.025801][T18541] bridge0: port 3(veth1_to_bridge) entered blocking state [ 449.033197][T18541] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 449.103005][T18286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.147694][T18286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.328031][ T1172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.590671][ T3291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.626379][ T3291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.646075][ T1172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.744289][ T3291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.752585][T18391] lo speed is unknown, defaulting to 1000 [ 449.771874][ T3291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.780067][ T169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.825570][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.907560][T18570] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3416'. [ 449.936800][T18571] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3416'. [ 450.112754][T18577] sock: sock_set_timeout: `syz.4.3337' (pid 18577) tries to set negative timeout [ 450.189484][T18583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3419'. [ 450.682599][T18600] netlink: 'syz.3.3424': attribute type 1 has an invalid length. [ 450.715740][T18391] lo speed is unknown, defaulting to 1000 [ 450.813131][T18600] 8021q: adding VLAN 0 to HW filter on device bond2 [ 450.857444][T18602] bond2: (slave veth0_to_bond): making interface the new active one [ 450.868012][T18602] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 450.904838][T18606] sctp: [Deprecated]: syz.4.3426 (pid 18606) Use of int in maxseg socket option. [ 450.904838][T18606] Use struct sctp_assoc_value instead [ 450.958781][T18600] bond2: entered promiscuous mode [ 450.982321][T18600] veth0_to_bond: entered promiscuous mode [ 451.012724][T18600] bond2: entered allmulticast mode [ 451.057531][T18600] veth0_to_bond: entered allmulticast mode [ 451.147865][T18602] macvlan2: entered promiscuous mode [ 451.163595][T18602] macvlan2: entered allmulticast mode [ 451.194298][T18602] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 451.225884][T18602] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 451.542784][T18618] xt_cgroup: invalid path, errno=-2 [ 451.781986][T18624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3433'. [ 451.898156][T18624] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 451.941847][T18624] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 451.965275][T18624] gretap1: entered promiscuous mode [ 451.989047][T18624] gretap1: entered allmulticast mode [ 452.539299][T18634] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 453.211481][T18673] netlink: 'syz.2.3444': attribute type 1 has an invalid length. [ 453.255432][T18673] netlink: 'syz.2.3444': attribute type 4 has an invalid length. [ 453.298982][T18673] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3444'. [ 453.435588][T18681] netlink: 'syz.0.3447': attribute type 10 has an invalid length. [ 453.464551][T18681] openvswitch: netlink: Flow key attr not present in new flow. [ 454.261985][T18707] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 454.456157][T18714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.534484][T18714] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3457'. [ 455.096422][T18737] netlink: 'syz.2.3464': attribute type 1 has an invalid length. [ 455.162385][T18741] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3466'. [ 455.309209][T18754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3468'. [ 455.445741][T18752] bridge0: port 3(veth1_to_bridge) entered disabled state [ 455.453243][T18752] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.461037][T18752] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.588546][T18752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.603855][T18752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.617443][T18764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3470'. [ 455.668128][T18763] netlink: 'syz.1.3470': attribute type 6 has an invalid length. [ 455.721972][T18752] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 455.830087][T18756] 8021q: adding VLAN 0 to HW filter on device bond3 [ 455.843137][T18756] bond0: (slave bond3): Enslaving as an active interface with an up link [ 455.901472][T18748] bridge2: entered promiscuous mode [ 455.946381][T18748] bond1: (slave bridge2): making interface the new active one [ 455.985557][T18748] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 456.027936][ T267] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.057783][ T267] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.058953][T18772] netlink: 'syz.3.3472': attribute type 1 has an invalid length. [ 456.083634][T18770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3473'. [ 456.100806][ T267] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.131686][ T267] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.141834][T18770] block nbd0: reconnected socket [ 456.183600][ T267] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.192673][ T50] block nbd0: Receive control failed (result -32) [ 456.202927][T18767] No such timeout policy "syz0" [ 456.282421][ T267] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.413959][T18772] bond4: entered promiscuous mode [ 456.437741][T18772] 8021q: adding VLAN 0 to HW filter on device bond4 [ 456.496241][T18786] bridge0: port 3(ipvlan2) entered blocking state [ 456.503006][T18786] bridge0: port 3(ipvlan2) entered disabled state [ 456.510633][T18786] ipvlan2: entered allmulticast mode [ 456.516631][T18786] bridge0: entered allmulticast mode [ 456.526843][T18786] ipvlan2: left allmulticast mode [ 456.532245][T18786] bridge0: left allmulticast mode [ 456.571734][T18776] 8021q: adding VLAN 0 to HW filter on device bond4 [ 456.575122][T18789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3478'. [ 456.580613][T18790] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3476'. [ 456.601742][T18776] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 456.612708][T18776] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 456.627886][T18776] bond4: (slave ip6gre1): making interface the new active one [ 456.637823][T18776] ip6gre1: entered promiscuous mode [ 456.644370][T18776] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 456.654260][T18787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3476'. [ 456.671859][T18787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3476'. [ 456.681471][T18787] netlink: 'syz.4.3476': attribute type 3 has an invalid length. [ 456.691750][T18784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3476'. [ 456.745483][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.761385][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.972834][T18805] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3482'. [ 457.120916][T18812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.149881][T18805] IPv6: NLM_F_CREATE should be specified when creating new route [ 457.593015][T18837] syzkaller0: entered promiscuous mode [ 457.612749][T18837] syzkaller0: entered allmulticast mode [ 457.693773][T18844] netlink: 'syz.0.3493': attribute type 7 has an invalid length. [ 457.714560][T18847] netlink: 'syz.0.3493': attribute type 7 has an invalid length. [ 457.724134][T18844] netlink: 'syz.0.3493': attribute type 8 has an invalid length. [ 457.733062][T18847] netlink: 'syz.0.3493': attribute type 8 has an invalid length. [ 458.067889][T18875] netlink: 'syz.0.3497': attribute type 1 has an invalid length. [ 458.428607][T18875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 458.528043][T18881] syzkaller1: entered allmulticast mode [ 460.038224][T18954] netlink: 'syz.3.3521': attribute type 4 has an invalid length. [ 460.833765][T19000] xt_l2tp: v2 sid > 0xffff: 1114112 [ 461.107809][T19020] xt_HMARK: spi-set and port-set can't be combined [ 461.228050][T19025] __nla_validate_parse: 21 callbacks suppressed [ 461.228074][T19025] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3536'. [ 461.258250][T19029] netlink: 2744 bytes leftover after parsing attributes in process `syz.3.3539'. [ 461.605802][T19040] syzkaller0: entered promiscuous mode [ 461.611992][T19040] syzkaller0: entered allmulticast mode [ 464.580545][T19056] bridge0: port 3(ipvlan2) entered blocking state [ 464.595667][T19056] bridge0: port 3(ipvlan2) entered disabled state [ 464.603117][T19056] ipvlan2: entered allmulticast mode [ 464.637006][T19056] bridge0: entered allmulticast mode [ 464.679688][T19056] ipvlan2: left allmulticast mode [ 464.694698][T19056] bridge0: left allmulticast mode [ 464.782489][T19070] xt_cgroup: invalid path, errno=-2 [ 465.250383][T19101] netlink: 'syz.3.3557': attribute type 1 has an invalid length. [ 465.280666][T19105] tipc: Failed to remove unknown binding: 66,0,0/0:1729334187/1729334188 [ 465.337606][T19105] tipc: Failed to remove unknown binding: 66,0,0/0:1729334187/1729334188 [ 465.374099][T19105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3558'. [ 465.378723][T19101] 8021q: adding VLAN 0 to HW filter on device bond5 [ 465.411132][T19107] bond5: (slave geneve2): making interface the new active one [ 465.421511][T19107] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 465.824867][T19124] syzkaller0: entered promiscuous mode [ 465.856490][T19124] syzkaller0: entered allmulticast mode [ 466.320220][T19154] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 466.343535][T19154] netlink: 'syz.3.3572': attribute type 1 has an invalid length. [ 466.446186][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 466.462147][T19157] IPv6: NLM_F_CREATE should be specified when creating new route [ 468.654421][T19155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3570'. [ 468.666878][T19154] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 468.878763][T19168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3575'. [ 469.162715][T19187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3580'. [ 469.553071][T19208] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3587'. [ 470.077599][T19229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3593'. [ 470.263527][T19242] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 470.804289][T19264] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3603'. [ 471.122966][T19275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3608'. [ 471.152620][T19275] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3608'. [ 471.599279][T19302] netlink: 'syz.3.3617': attribute type 1 has an invalid length. [ 471.621275][T19302] netlink: 'syz.3.3617': attribute type 2 has an invalid length. [ 472.079575][T19319] bond2: option resend_igmp: invalid value (32767) [ 472.103266][T19319] bond2: option resend_igmp: allowed values 0 - 255 [ 472.114552][T19319] bond2 (unregistering): Released all slaves [ 472.200587][T19315] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3623'. [ 472.289540][T19326] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3627'. [ 475.262421][T19374] __nla_validate_parse: 1 callbacks suppressed [ 475.262443][T19374] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3639'. [ 475.297239][T19374] openvswitch: netlink: Flow key attr not present in new flow. [ 475.478829][T19388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3639'. [ 475.790564][T19390] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.798405][T19390] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.921167][T19407] IPv6: NLM_F_CREATE should be specified when creating new route [ 475.978315][T19390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.994336][T19390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.193093][T19414] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3650'. [ 476.241861][T19414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3650'. [ 476.255946][T11322] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.274683][T11322] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.290679][T11322] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.315507][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.390168][T19421] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3652'. [ 476.727084][T19439] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3656'. [ 476.760792][T19442] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3657'. [ 476.776963][T19442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3657'. [ 477.007620][T19449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3660'. [ 477.020134][T19450] syzkaller1: entered promiscuous mode [ 477.028908][T19450] syzkaller1: entered allmulticast mode [ 477.134485][T19450] virt_wifi0 speed is unknown, defaulting to 1000 [ 477.168926][T19450] lo speed is unknown, defaulting to 1000 [ 477.190681][T19450] lo speed is unknown, defaulting to 1000 [ 477.325884][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 477.709082][T19483] SET target dimension over the limit! [ 477.792101][T19489] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 477.840863][T19489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3669'. [ 478.299009][T19498] tipc: Trying to set illegal importance in message [ 478.437535][T19502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.502458][T19506] netlink: 'syz.0.3674': attribute type 10 has an invalid length. [ 478.521071][T19506] geneve2: entered promiscuous mode [ 478.527899][T19506] geneve2: entered allmulticast mode [ 478.556073][ T3371] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.567136][ T3371] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.576768][ T3371] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.587216][ T3371] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.005155][T19540] xt_addrtype: ipv6 does not support BROADCAST matching [ 480.531305][T19477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 480.854553][T19560] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 480.901951][T19560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.958125][T19571] netlink: 'syz.3.3693': attribute type 1 has an invalid length. [ 480.980655][T19556] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 481.007706][T19556] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 481.007745][T12269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.150775][T19556] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 481.173938][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.193217][T19556] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 481.276968][T19556] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 481.292660][T19556] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 481.385390][T19588] netlink: 'syz.0.3698': attribute type 1 has an invalid length. [ 481.398889][T19584] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 481.514005][T19588] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 481.547719][T19556] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 481.584587][T19556] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 481.717730][T19556] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 481.730056][T19606] syzkaller0: entered promiscuous mode [ 481.736963][T19556] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 481.746493][T19606] syzkaller0: entered allmulticast mode [ 482.053396][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.159115][T19621] __nla_validate_parse: 10 callbacks suppressed [ 482.159136][T19621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3706'. [ 482.235906][T11322] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.263076][T11322] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.295429][T11322] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.318110][T11322] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.481832][T19638] 8021q: VLANs not supported on ip6tnl0 [ 482.558205][T19639] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 482.765749][T17342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.898171][T19651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.911173][T19651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.947492][T19656] syzkaller0: entered promiscuous mode [ 482.953073][T19656] syzkaller0: entered allmulticast mode [ 483.092334][ T9641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.231716][T19675] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3720'. [ 483.459571][T19684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3722'. [ 483.890414][T19708] syzkaller0: entered promiscuous mode [ 483.919277][T19708] syzkaller0: entered allmulticast mode [ 484.077340][T19717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.292801][T19719] bridge0: port 2(bridge_slave_1) entered listening state [ 484.350647][T19719] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.708644][ T9641] lo speed is unknown, defaulting to 1000 [ 484.743945][T19752] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3741'. [ 485.157081][T19756] virt_wifi0 speed is unknown, defaulting to 1000 [ 485.194106][T19756] lo speed is unknown, defaulting to 1000 [ 485.230607][T19756] lo speed is unknown, defaulting to 1000 [ 485.523377][T19774] syzkaller0: entered promiscuous mode [ 485.548772][T19774] syzkaller0: entered allmulticast mode [ 485.616017][T19776] 8021q: adding VLAN 0 to HW filter on device bond2 [ 485.692191][T19786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3751'. [ 485.838739][T19795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3753'. [ 485.872829][T19795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3753'. [ 485.908299][T19789] bond3: entered promiscuous mode [ 485.935473][T17342] net_ratelimit: 41 callbacks suppressed [ 485.935495][T17342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.979878][T19805] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3755'. [ 486.046109][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.138714][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.195693][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.205300][ T9641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.685177][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.927752][T19828] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3760'. [ 486.975817][T19828] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3760'. [ 487.246547][ T9641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.563861][T19862] syzkaller0: entered promiscuous mode [ 487.591622][T19862] syzkaller0: entered allmulticast mode [ 487.725053][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.906044][T19880] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 487.943313][T19880] team0: No ports can be present during mode change [ 487.953892][T19881] __nla_validate_parse: 2 callbacks suppressed [ 487.953909][T19881] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3772'. [ 488.070676][T19893] xt_SECMARK: invalid mode: 9 [ 488.079406][T19893] tipc: Started in network mode [ 488.086128][T19893] tipc: Node identity e0000001, cluster identity 4711 [ 488.111866][T19893] tipc: Enabling of bearer rejected, failed to enable media [ 488.286870][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.288545][T19903] IPVS: set_ctl: invalid protocol: 98 100.1.1.1:20000 [ 488.384548][T19908] --map-set only usable from mangle table [ 488.523866][T19917] syzkaller0: entered promiscuous mode [ 488.530069][T19917] syzkaller0: entered allmulticast mode [ 488.732263][T19922] syzkaller0: entered promiscuous mode [ 488.751763][T19922] syzkaller0: entered allmulticast mode [ 488.763971][T19923] 0: reclassify loop, rule prio 0, protocol 800 [ 488.993425][T19934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3789'. [ 489.202655][T19947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3792'. [ 489.366061][T19958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3793'. [ 489.572592][T19962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3795'. [ 489.697878][T19965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3796'. [ 490.399994][T19994] ip6gre1: entered promiscuous mode [ 490.454794][T19994] netlink: 'syz.4.3805': attribute type 1 has an invalid length. [ 490.465848][T19999] netlink: 'syz.2.3806': attribute type 10 has an invalid length. [ 490.501828][T19994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 490.559235][T19997] bond1: (slave geneve2): making interface the new active one [ 490.573536][T19997] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 490.597930][T11322] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 490.628168][T19994] netlink: 512 bytes leftover after parsing attributes in process `syz.4.3805'. [ 490.678081][T11322] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 490.701826][T11322] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 490.734573][T11322] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 490.823678][T20016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3809'. [ 490.979112][T20020] netlink: 'syz.4.3811': attribute type 1 has an invalid length. [ 491.220815][T20035] syzkaller0: entered promiscuous mode [ 491.235378][T20035] syzkaller0: entered allmulticast mode [ 491.406017][ C1] net_ratelimit: 5 callbacks suppressed [ 491.406037][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.423545][ T9641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.468527][T20048] netlink: 'syz.0.3820': attribute type 2 has an invalid length. [ 491.476970][T20048] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3820'. [ 491.487142][T20045] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3819'. [ 491.537925][T20048] : entered promiscuous mode [ 491.635492][T20056] syzkaller1: entered promiscuous mode [ 491.658110][T20056] syzkaller1: entered allmulticast mode [ 491.885475][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.217834][T20089] vxcan1: entered allmulticast mode [ 492.389988][ T188] IPVS: starting estimator thread 0... [ 492.432245][T20096] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 492.460501][ T9641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.491716][T20096] bond3 (unregistering): Released all slaves [ 492.505221][T20102] IPVS: using max 24 ests per chain, 57600 per kthread [ 492.804799][T20110] netlink: 'syz.2.3838': attribute type 1 has an invalid length. [ 492.869004][T20110] 8021q: adding VLAN 0 to HW filter on device bond3 [ 492.962191][T20112] netlink: 'syz.4.3839': attribute type 32 has an invalid length. [ 492.970250][T20112] __nla_validate_parse: 5 callbacks suppressed [ 492.970265][T20112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3839'. [ 493.000791][T20110] bond3: (slave gretap1): making interface the new active one [ 493.009938][T20110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.022253][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.036024][T20110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.044732][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.054165][T20110] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 493.068954][T20112] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 493.134504][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.154407][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.293855][T20121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3840'. [ 493.608454][T20132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3843'. [ 493.702044][T20138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3845'. [ 493.874688][T20141] netlink: 'syz.0.3846': attribute type 13 has an invalid length. [ 494.659303][T20158] smbdirect: ib_dev[syz2] removed [ 494.902411][T20167] netlink: 'syz.0.3854': attribute type 49 has an invalid length. [ 494.928448][T20165] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3853'. [ 494.929002][T20167] netlink: 'syz.0.3854': attribute type 49 has an invalid length. [ 494.977850][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.003564][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.021641][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.054901][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.073086][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.084839][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.100555][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.111421][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.125901][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.142764][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.162855][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.202509][T20177] vlan4: entered promiscuous mode [ 495.218371][T20177] geneve1: entered promiscuous mode [ 495.242415][T20177] vlan4: entered allmulticast mode [ 495.279379][T20177] geneve1: entered allmulticast mode [ 495.299561][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.313082][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.346529][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.376104][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.386253][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.411816][T20183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3858'. [ 495.422194][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.453832][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.486864][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.509758][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.554906][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.576566][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.594875][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.606896][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.619594][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.629606][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.661091][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.688743][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.726150][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.756194][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.807522][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.849455][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.880490][T20169] tipc: Enabling of bearer rejected, failed to enable media [ 495.914726][T20204] netlink: 'syz.0.3863': attribute type 15 has an invalid length. [ 496.125542][T20213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3867'. [ 496.170646][T20210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3865'. [ 496.184686][T20210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3865'. [ 496.451682][T20229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3872'. [ 496.617173][ T9641] net_ratelimit: 29 callbacks suppressed [ 496.617195][ T9641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.894558][T20243] 8021q: adding VLAN 0 to HW filter on device bond4 [ 497.087545][T20255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.098310][T20255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.112994][T20255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.167313][T17342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.179586][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.232337][T20251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.267018][T20251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.558696][T11322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.565868][T20271] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 498.084611][T20294] syzkaller0: entered promiscuous mode [ 498.101316][T20294] syzkaller0: entered allmulticast mode [ 498.246997][T20298] netlink: 'syz.2.3891': attribute type 2 has an invalid length. [ 498.261908][T20298] __nla_validate_parse: 9 callbacks suppressed [ 498.261932][T20298] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3891'. [ 498.703115][T20309] netlink: 'syz.4.3895': attribute type 13 has an invalid length. [ 499.260984][T20326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3897'. [ 499.599143][T20338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3899'. [ 499.625615][T20338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3899'. [ 499.798349][T20337] sock: sock_timestamping_bind_phc: sock not bind to device [ 499.851701][T20343] sock: sock_timestamping_bind_phc: sock not bind to device [ 499.953604][T20351] syzkaller0: entered promiscuous mode [ 499.972991][T20345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3903'. [ 499.984587][T20359] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3906'. [ 499.986290][T20351] syzkaller0: entered allmulticast mode [ 500.036936][T20359] netlink: 'syz.2.3906': attribute type 7 has an invalid length. [ 500.051316][T20345] netlink: 'syz.0.3903': attribute type 8 has an invalid length. [ 500.067303][T20359] netlink: 'syz.2.3906': attribute type 8 has an invalid length. [ 500.110021][T20359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3906'. [ 500.222777][T20365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3907'. [ 500.274058][T20368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3907'. [ 500.278231][T20359] erspan0: entered promiscuous mode [ 500.330800][T20359] gretap0: entered promiscuous mode [ 500.379063][T20359] erspan0: left promiscuous mode [ 500.393713][T20359] gretap0: left promiscuous mode [ 500.549293][T20381] veth0_macvtap: Caught tx_queue_len zero misconfig [ 500.691910][T20386] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3910'. [ 500.943097][T20401] netlink: 'syz.2.3917': attribute type 10 has an invalid length. [ 501.012202][T20403] netlink: 'syz.3.3918': attribute type 1 has an invalid length. [ 501.035039][T20403] netlink: 'syz.3.3918': attribute type 2 has an invalid length. [ 501.121673][T20408] pimreg: entered allmulticast mode [ 501.188021][T20410] xt_CT: You must specify a L4 protocol and not use inversions on it [ 501.199828][T20405] syzkaller0: entered promiscuous mode [ 501.234162][T20405] syzkaller0: entered allmulticast mode [ 501.351105][T20414] syzkaller0: entered promiscuous mode [ 501.367105][T20414] syzkaller0: entered allmulticast mode [ 501.704271][T20441] syzkaller0: entered promiscuous mode [ 501.736581][T20441] syzkaller0: entered allmulticast mode [ 501.805846][ T24] net_ratelimit: 21 callbacks suppressed [ 501.805867][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.968288][T17342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.047760][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.058181][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.125196][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.512271][T20489] netlink: 'syz.3.3943': attribute type 1 has an invalid length. [ 502.689341][T20498] nbd: socks must be embedded in a SOCK_ITEM attr [ 502.814080][T20489] netlink: 'syz.3.3943': attribute type 2 has an invalid length. [ 502.845626][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.013554][T20507] bridge3: entered promiscuous mode [ 503.046861][T20507] bond7: (slave bridge3): making interface the new active one [ 503.071577][T20507] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 503.114525][T20519] syzkaller0: entered promiscuous mode [ 503.129285][T20519] syzkaller0: entered allmulticast mode [ 503.165495][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.225858][T11323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.234712][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.578606][T20539] __nla_validate_parse: 7 callbacks suppressed [ 503.578625][T20539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3956'. [ 503.689463][T20541] bond5: Unable to set down delay as MII monitoring is disabled [ 503.733562][T20541] bond5 (unregistering): Released all slaves [ 503.892497][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.400864][T20568] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3965'. [ 504.564688][T20574] netlink: 'syz.3.3967': attribute type 1 has an invalid length. [ 504.710534][T20575] macvlan2: entered promiscuous mode [ 504.720978][T20585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3970'. [ 504.733073][T20575] macvlan2: entered allmulticast mode [ 504.752157][T20575] bond9: entered promiscuous mode [ 504.763094][T20575] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 504.786154][T20575] bond9: left promiscuous mode [ 505.105706][T20608] netlink: 'syz.2.3975': attribute type 1 has an invalid length. [ 505.141251][T20613] netlink: 'syz.1.3974': attribute type 13 has an invalid length. [ 506.005888][T20652] ip6tnl0: Caught tx_queue_len zero misconfig [ 506.130935][T20656] sctp: [Deprecated]: syz.3.3990 (pid 20656) Use of int in max_burst socket option deprecated. [ 506.130935][T20656] Use struct sctp_assoc_value instead [ 506.334368][T20664] vlan0: entered promiscuous mode [ 506.345753][T20664] hsr0: entered promiscuous mode [ 506.359448][T20664] vlan0: entered allmulticast mode [ 506.374728][T20664] hsr0: entered allmulticast mode [ 506.386959][T20664] hsr_slave_0: entered allmulticast mode [ 506.393349][T20664] hsr_slave_1: entered allmulticast mode [ 506.691498][T20687] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 507.001690][T20700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4003'. [ 507.044746][ T24] net_ratelimit: 14 callbacks suppressed [ 507.044765][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.405412][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.415185][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.424420][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.458427][T20723] netlink: 'syz.1.4010': attribute type 1 has an invalid length. [ 507.460517][T20726] netlink: 'syz.1.4010': attribute type 1 has an invalid length. [ 507.486671][T20720] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 507.496427][T20726] netlink: 'syz.1.4010': attribute type 2 has an invalid length. [ 507.510142][T20723] netlink: 'syz.1.4010': attribute type 2 has an invalid length. [ 507.527512][T20725] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 507.697120][ T3371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.705708][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.708223][T20734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4014'. [ 508.046717][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.262701][T20767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4022'. [ 508.285253][T20767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4022'. [ 508.407806][T20776] netlink: 'syz.2.4025': attribute type 1 has an invalid length. [ 508.417368][T20777] netlink: 'syz.2.4025': attribute type 1 has an invalid length. [ 508.426005][T20776] netlink: 'syz.2.4025': attribute type 4 has an invalid length. [ 508.433959][T20777] netlink: 'syz.2.4025': attribute type 4 has an invalid length. [ 508.442682][T20776] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4025'. [ 508.460203][T20777] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4025'. [ 508.472359][T20778] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4024'. [ 508.492710][T20781] netlink: 'syz.2.4025': attribute type 1 has an invalid length. [ 508.532514][T20781] netlink: 'syz.2.4025': attribute type 4 has an invalid length. [ 508.836226][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.844761][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.088976][ T9641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.107615][T20810] syzkaller0: entered promiscuous mode [ 509.124714][T20810] syzkaller0: entered allmulticast mode [ 509.225353][T20817] __nla_validate_parse: 1 callbacks suppressed [ 509.225376][T20817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4033'. [ 509.276847][T20821] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4037'. [ 509.306636][T20819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4036'. [ 509.332260][T20819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4036'. [ 509.512167][T20830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4041'. [ 509.563746][T20831] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4041'. [ 509.642476][T20830] 8021q: adding VLAN 0 to HW filter on device bond10 [ 510.122214][T20854] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4048'. [ 510.751235][T20881] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 510.802414][T20881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4057'. [ 511.280446][T20904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4065'. [ 511.341761][T20906] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 511.590719][T20924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4066'. [ 511.629332][T20924] bridge3: entered promiscuous mode [ 511.640875][T20924] bond5: (slave bridge3): making interface the new active one [ 511.649510][T20924] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 511.662514][T20920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.673628][T20920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.703437][T20920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.711949][T20920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.977528][T20939] bridge_slave_0: left allmulticast mode [ 511.991912][T20939] bridge_slave_0: left promiscuous mode [ 512.014626][T20939] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.059006][T20939] bridge_slave_1: left allmulticast mode [ 512.077296][T20939] bridge_slave_1: left promiscuous mode [ 512.091175][T20939] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.120269][T20939] bond0: (slave bond_slave_0): Releasing backup interface [ 512.162343][T20939] bond0: (slave bond_slave_1): Releasing backup interface [ 512.190532][T20939] team0: Port device team_slave_0 removed [ 512.233514][T20939] team0: Port device team_slave_1 removed [ 512.245695][T11323] net_ratelimit: 23 callbacks suppressed [ 512.245718][T11323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.252122][T20939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.259965][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.267955][T20939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.290802][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.300120][T20939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.309002][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.311830][T20939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.328790][T20939] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 512.410101][T20953] bond11: Removing last arp target with arp_interval on [ 512.548774][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.566735][T17342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.606791][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.149662][T20998] xt_hashlimit: size too large, truncated to 1048576 [ 513.176012][T17342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.178940][T20998] xt_hashlimit: max too large, truncated to 1048576 [ 513.205508][T20998] xt_hashlimit: invalid rate [ 513.328249][T12269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.359943][T21005] bond4: Removing last ns target with arp_interval on [ 513.469483][T21015] bond0: entered promiscuous mode [ 513.476701][T21015] bond_slave_0: entered promiscuous mode [ 513.483637][T21015] bond_slave_1: entered promiscuous mode [ 513.510610][T21015] batadv0: entered promiscuous mode [ 513.522751][T21015] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 513.539717][T21015] bond0: left promiscuous mode [ 513.555845][T21015] bond_slave_0: left promiscuous mode [ 513.563682][T21015] bond_slave_1: left promiscuous mode [ 513.574333][T21015] batadv0: left promiscuous mode [ 513.619852][T21020] xt_hashlimit: size too large, truncated to 1048576 [ 513.938049][T21036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.960796][T21033] xt_CT: You must specify a L4 protocol and not use inversions on it [ 513.990361][T21041] validate_nla: 1 callbacks suppressed [ 513.990383][T21041] netlink: 'syz.4.4107': attribute type 1 has an invalid length. [ 514.041438][T21036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.108158][T21039] bond0: entered promiscuous mode [ 514.115454][T21039] bond_slave_0: entered promiscuous mode [ 514.129517][T21039] bond_slave_1: entered promiscuous mode [ 514.150143][T21039] bond0: entered allmulticast mode [ 514.168443][T21039] bond_slave_0: entered allmulticast mode [ 514.190945][T21039] bond_slave_1: entered allmulticast mode [ 514.223723][T21039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.280457][T11323] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 514.319218][T11323] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 514.409210][T11323] bond0: now running without any active interface! [ 514.418973][T21052] __nla_validate_parse: 10 callbacks suppressed [ 514.418995][T21052] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4111'. [ 514.468400][T21062] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4115'. [ 514.483144][T21054] syzkaller0: entered promiscuous mode [ 514.495504][T21054] syzkaller0: entered allmulticast mode [ 514.608685][T21068] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4117'. [ 514.816012][T21081] syzkaller0: entered promiscuous mode [ 514.834903][T21081] syzkaller0: entered allmulticast mode [ 514.923187][T21087] netlink: 'syz.0.4122': attribute type 2 has an invalid length. [ 514.933049][T21087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4122'. [ 514.967866][T21091] lo: Caught tx_queue_len zero misconfig [ 515.162870][T21099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4127'. [ 515.193006][T21099] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4127'. [ 515.215532][T21099] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4127'. [ 515.241200][T21105] syzkaller0: entered promiscuous mode [ 515.256613][T21105] syzkaller0: entered allmulticast mode [ 515.280745][T21107] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4129'. [ 515.322253][T21104] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 515.550360][T21118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4133'. [ 515.561719][T21117] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4132'. [ 516.786960][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.818242][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.866177][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.885399][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.517085][T12269] net_ratelimit: 14 callbacks suppressed [ 517.517104][T12269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.638437][T21210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.696110][T21210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.719790][T21210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.752115][T21212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.803141][T21212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.877495][T11322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.887080][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.078314][T21225] team0: Caught tx_queue_len zero misconfig [ 518.289429][T21197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.298579][T21232] 8021q: adding VLAN 0 to HW filter on device bond3 [ 518.361017][ T30] audit: type=1804 audit(1785599914.315:5): pid=21237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4168" name="/newroot/265/cgroup.controllers" dev="tmpfs" ino=1370 res=1 errno=0 [ 518.383998][ T188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.393398][T21232] bond0: (slave bond3): Enslaving as an active interface with an up link [ 518.470944][ T30] audit: type=1800 audit(1785599914.365:6): pid=21237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4168" name="cgroup.controllers" dev="tmpfs" ino=1370 res=0 errno=0 [ 518.924870][T21260] netlink: 'syz.4.4175': attribute type 1 has an invalid length. [ 519.076018][T21260] bond4: entered promiscuous mode [ 519.082608][T21260] 8021q: adding VLAN 0 to HW filter on device bond4 [ 519.102194][T21277] bridge0: Caught tx_queue_len zero misconfig [ 519.152110][T21273] 8021q: adding VLAN 0 to HW filter on device bond4 [ 519.192089][T21273] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 519.210945][T21273] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 519.227285][T21273] bond4: (slave ip6gre2): making interface the new active one [ 519.236575][T21273] ip6gre2: entered promiscuous mode [ 519.244125][T21273] bond4: (slave ip6gre2): Enslaving as an active interface with an up link [ 519.400372][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.441306][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.496399][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.535251][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.589226][T21290] __nla_validate_parse: 11 callbacks suppressed [ 519.589248][T21290] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4185'. [ 519.839776][T21303] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 519.902481][T21305] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4189'. [ 520.475836][T21324] nbd6: detected capacity change from 0 to 63 [ 520.498025][ T50] block nbd6: Receive control failed (result -32) [ 520.502557][ T4957] block nbd6: Send control failed (result -32) [ 520.513136][ T4957] block nbd6: Request send failed, requeueing [ 520.534146][ T4957] block nbd6: Dead connection, failed to find a fallback [ 520.543638][ T4957] block nbd6: shutting down sockets [ 520.549895][ T4957] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 520.563150][ T4957] Buffer I/O error on dev nbd6, logical block 0, async page read [ 520.575250][ T4957] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 520.586109][ T4957] Buffer I/O error on dev nbd6, logical block 1, async page read [ 520.600033][ T4957] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 520.613989][ T4957] Buffer I/O error on dev nbd6, logical block 2, async page read [ 520.623607][ T4957] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 520.633229][ T4957] Buffer I/O error on dev nbd6, logical block 3, async page read [ 520.643284][ T4957] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 520.653011][ T4957] Buffer I/O error on dev nbd6, logical block 0, async page read [ 520.660965][ T4957] Buffer I/O error on dev nbd6, logical block 1, async page read [ 520.668835][ T4957] Buffer I/O error on dev nbd6, logical block 2, async page read [ 520.676745][ T4957] Buffer I/O error on dev nbd6, logical block 3, async page read [ 520.688257][ T4957] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 520.697874][ T4957] Buffer I/O error on dev nbd6, logical block 0, async page read [ 520.705852][ T4957] Buffer I/O error on dev nbd6, logical block 1, async page read [ 520.716881][ T4957] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 520.729910][ T4957] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 520.730112][T21306] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4189'. [ 520.739860][ T4957] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 520.741952][ T4957] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 520.742180][T12399] ldm_validate_partition_table(): Disk read failed. [ 520.742825][T12399] Dev nbd6: unable to read RDB block 0 [ 520.745328][T12399] nbd6: unable to read partition table [ 520.861003][T12399] ldm_validate_partition_table(): Disk read failed. [ 520.876779][T12399] Dev nbd6: unable to read RDB block 0 [ 520.895956][T12399] nbd6: unable to read partition table [ 521.242551][ T9641] IPVS: starting estimator thread 0... [ 521.269227][T21344] syzkaller0: entered promiscuous mode [ 521.280299][T21344] syzkaller0: entered allmulticast mode [ 521.345943][T21345] IPVS: using max 27 ests per chain, 64800 per kthread [ 521.489327][T21348] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 522.309934][T21385] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4214'. [ 522.516688][T21400] x_tables: unsorted underflow at hook 4 [ 522.685428][ T9641] net_ratelimit: 34 callbacks suppressed [ 522.685450][ T9641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.765706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.775364][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.041619][T21430] Cannot find del_set index 4 as target [ 523.061208][T21431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.153651][T21435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4228'. [ 523.208672][T21437] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 523.508530][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.517301][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.730990][ T9641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.797081][T21458] netlink: 'syz.2.4237': attribute type 2 has an invalid length. [ 523.827606][T21458] netlink: 'syz.2.4237': attribute type 2 has an invalid length. [ 523.879378][T21461] syzkaller0: entered promiscuous mode [ 523.886480][T21461] syzkaller0: entered allmulticast mode [ 523.890833][T17342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.046238][T17342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.178656][T21477] macvtap0: entered allmulticast mode [ 524.216247][T21477] veth0_macvtap: entered allmulticast mode [ 524.268330][T21479] netlink: 'syz.3.4242': attribute type 1 has an invalid length. [ 524.403244][T21487] netlink: 'syz.3.4242': attribute type 10 has an invalid length. [ 524.411496][T21487] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4242'. [ 524.449495][T21479] 8021q: adding VLAN 0 to HW filter on device bond14 [ 524.532624][T21484] bond14: (slave dummy0): making interface the new active one [ 524.582626][T21484] bond14: (slave dummy0): Enslaving as an active interface with an up link [ 524.637926][T11322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.646530][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.681557][T21487] dummy0: entered promiscuous mode [ 524.706082][T21487] bond14: (slave dummy0): Releasing active interface [ 524.788556][T21505] tipc: Enabling of bearer rejected, failed to enable media [ 525.002046][T21514] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4249'. [ 525.266465][T21523] syzkaller0: entered promiscuous mode [ 525.275865][T21535] IPv6: NLM_F_CREATE should be specified when creating new route [ 525.299033][T21523] syzkaller0: entered allmulticast mode [ 525.313157][T21535] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 525.320589][T21535] IPv6: NLM_F_CREATE should be set when creating new route [ 525.552470][ T30] audit: type=1107 audit(1785599921.505:7): pid=21545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':¶òC~Åê—$Ü!t³t¸Ó‘bÐ&R†Â²­Þ³ *çÇ' [ 525.694335][T21552] xt_hashlimit: size too large, truncated to 1048576 [ 525.718286][T21558] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4259'. [ 525.736844][T21550] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4257'. [ 526.158493][T21579] bond0 (unregistering): Released all slaves [ 526.258189][T21587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4262'. [ 526.313840][T21591] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4263'. [ 526.316283][T21588] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4262'. [ 526.567331][T21603] netlink: 'syz.1.4267': attribute type 3 has an invalid length. [ 526.597340][T21597] 8021q: adding VLAN 0 to HW filter on device bond15 [ 526.604548][T21603] netlink: 666 bytes leftover after parsing attributes in process `syz.1.4267'. [ 526.785525][T11321] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.797242][T21612] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4268'. [ 526.820156][T11321] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.823411][T21612] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4268'. [ 526.844382][T21614] tipc: Started in network mode [ 526.851987][T21614] tipc: Node identity e67636301593, cluster identity 4711 [ 526.852502][T21617] netlink: 'syz.2.4270': attribute type 1 has an invalid length. [ 526.860119][T21614] tipc: Enabled bearer , priority 0 [ 526.911684][T21610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4269'. [ 526.939308][T21609] syzkaller0: entered promiscuous mode [ 526.946579][T21609] syzkaller0: entered allmulticast mode [ 526.952875][T21609] tipc: Resetting bearer [ 526.963820][T21617] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 527.092931][T21608] tipc: Resetting bearer [ 527.138282][T11321] [ 527.140674][T11321] ====================================================== [ 527.147718][T11321] WARNING: possible circular locking dependency detected [ 527.154764][T11321] syzkaller #0 Not tainted [ 527.159622][T11321] ------------------------------------------------------ [ 527.166739][T11321] kworker/u8:14/11321 is trying to acquire lock: [ 527.173063][T11321] ffffffff8ec848e0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x6a/0x610 [ 527.183630][T11321] [ 527.183630][T11321] but task is already holding lock: [ 527.191103][T11321] ffff88805257ee60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 527.200881][T11321] [ 527.200881][T11321] which lock already depends on the new lock. [ 527.200881][T11321] [ 527.212152][T11321] [ 527.212152][T11321] the existing dependency chain (in reverse order) is: [ 527.221167][T11321] [ 527.221167][T11321] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 527.229164][T11321] lock_sock_nested+0x41/0x100 [ 527.234486][T11321] __inet6_bind+0x301/0xf30 [ 527.239569][T11321] mptcp_bind+0x110/0x1d0 [ 527.244494][T11321] __sys_bind+0x2e3/0x410 [ 527.249380][T11321] __x64_sys_bind+0x7a/0x90 [ 527.254413][T11321] do_syscall_64+0x174/0x580 [ 527.259720][T11321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.266143][T11321] [ 527.266143][T11321] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 527.274002][T11321] lock_sock_nested+0x41/0x100 [ 527.279292][T11321] inet_shutdown+0x6a/0x390 [ 527.284451][T11321] nbd_mark_nsock_dead+0x2cb/0x550 [ 527.290466][T11321] recv_work+0x1cee/0x1e10 [ 527.295426][T11321] process_scheduled_works+0xa8e/0x14e0 [ 527.301531][T11321] worker_thread+0xa47/0xfb0 [ 527.306642][T11321] kthread+0x388/0x470 [ 527.311330][T11321] ret_from_fork+0x514/0xb70 [ 527.316491][T11321] ret_from_fork_asm+0x1a/0x30 [ 527.321778][T11321] [ 527.321778][T11321] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 527.329429][T11321] __mutex_lock+0x19d/0x1550 [ 527.334849][T11321] nbd_queue_rq+0x373/0x1150 [ 527.339978][T11321] blk_mq_dispatch_rq_list+0x499/0x1990 [ 527.346194][T11321] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 527.353337][T11321] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 527.359848][T11321] blk_mq_run_work_fn+0x16c/0x300 [ 527.365415][T11321] process_scheduled_works+0xa8e/0x14e0 [ 527.371493][T11321] worker_thread+0xa47/0xfb0 [ 527.376641][T11321] kthread+0x388/0x470 [ 527.381255][T11321] ret_from_fork+0x514/0xb70 [ 527.386376][T11321] ret_from_fork_asm+0x1a/0x30 [ 527.391753][T11321] [ 527.391753][T11321] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 527.399058][T11321] __mutex_lock+0x19d/0x1550 [ 527.404175][T11321] nbd_queue_rq+0xc1/0x1150 [ 527.409296][T11321] blk_mq_dispatch_rq_list+0x499/0x1990 [ 527.415456][T11321] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 527.422319][T11321] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 527.428826][T11321] blk_mq_run_work_fn+0x16c/0x300 [ 527.434547][T11321] process_scheduled_works+0xa8e/0x14e0 [ 527.440725][T11321] worker_thread+0xa47/0xfb0 [ 527.446057][T11321] kthread+0x388/0x470 [ 527.450858][T11321] ret_from_fork+0x514/0xb70 [ 527.456199][T11321] ret_from_fork_asm+0x1a/0x30 [ 527.461521][T11321] [ 527.461521][T11321] -> #3 (set->srcu){.+.+}-{0:0}: [ 527.468654][T11321] __synchronize_srcu+0xc9/0x2f0 [ 527.474160][T11321] elevator_switch+0x1e8/0x7b0 [ 527.479453][T11321] elevator_change+0x2fa/0x480 [ 527.484741][T11321] elevator_set_default+0x375/0x440 [ 527.490466][T11321] blk_register_queue+0x3f3/0x4e0 [ 527.496012][T11321] __add_disk+0x6cb/0xe30 [ 527.500867][T11321] add_disk_fwnode+0x100/0x3a0 [ 527.506244][T11321] nbd_dev_add+0x733/0xb60 [ 527.511217][T11321] nbd_init+0x15f/0x1e0 [ 527.515977][T11321] do_one_initcall+0x250/0x870 [ 527.521269][T11321] do_initcall_level+0x10a/0x1a0 [ 527.526753][T11321] do_initcalls+0x59/0xa0 [ 527.531948][T11321] kernel_init_freeable+0x29d/0x3e0 [ 527.537678][T11321] kernel_init+0x1d/0x1d0 [ 527.542724][T11321] ret_from_fork+0x514/0xb70 [ 527.547841][T11321] ret_from_fork_asm+0x1a/0x30 [ 527.553219][T11321] [ 527.553219][T11321] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 527.561133][T11321] __mutex_lock+0x19d/0x1550 [ 527.566253][T11321] elevator_change+0x1af/0x480 [ 527.571633][T11321] elevator_set_none+0xb5/0x140 [ 527.577010][T11321] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 527.583343][T11321] nbd_start_device+0x189/0xb30 [ 527.588806][T11321] nbd_genl_connect+0x1597/0x1c10 [ 527.594443][T11321] genl_family_rcv_msg_doit+0x233/0x340 [ 527.600707][T11321] genl_rcv_msg+0x614/0x7a0 [ 527.605747][T11321] netlink_rcv_skb+0x226/0x4a0 [ 527.611230][T11321] genl_rcv+0x28/0x40 [ 527.615753][T11321] netlink_unicast+0x7bb/0x940 [ 527.621039][T11321] netlink_sendmsg+0x813/0xb40 [ 527.626325][T11321] sock_sendmsg_nosec+0x13a/0x180 [ 527.631875][T11321] ____sys_sendmsg+0x54e/0x850 [ 527.637165][T11321] ___sys_sendmsg+0x2a5/0x360 [ 527.642456][T11321] __x64_sys_sendmsg+0x1b1/0x290 [ 527.647921][T11321] do_syscall_64+0x174/0x580 [ 527.653211][T11321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.659627][T11321] [ 527.659627][T11321] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 527.668242][T11321] blk_alloc_queue+0x544/0x690 [ 527.673557][T11321] __blk_mq_alloc_disk+0x194/0x390 [ 527.679189][T11321] nbd_dev_add+0x494/0xb60 [ 527.684910][T11321] nbd_init+0x15f/0x1e0 [ 527.689602][T11321] do_one_initcall+0x250/0x870 [ 527.695018][T11321] do_initcall_level+0x10a/0x1a0 [ 527.700594][T11321] do_initcalls+0x59/0xa0 [ 527.705442][T11321] kernel_init_freeable+0x29d/0x3e0 [ 527.711432][T11321] kernel_init+0x1d/0x1d0 [ 527.716289][T11321] ret_from_fork+0x514/0xb70 [ 527.721706][T11321] ret_from_fork_asm+0x1a/0x30 [ 527.727145][T11321] [ 527.727145][T11321] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 527.734379][T11321] __lock_acquire+0x1520/0x2cf0 [ 527.739779][T11321] lock_acquire+0x106/0x350 [ 527.744829][T11321] fs_reclaim_acquire+0x71/0x100 [ 527.750295][T11321] kmem_cache_alloc_node_noprof+0x6a/0x610 [ 527.756629][T11321] __alloc_skb+0x1d7/0x7a0 [ 527.761715][T11321] tcp_send_active_reset+0x8a/0x550 [ 527.768182][T11321] __tcp_close+0x462/0xec0 [ 527.773120][T11321] tcp_close+0x28/0x110 [ 527.777796][T11321] inet_release+0x143/0x190 [ 527.782819][T11321] sock_release+0x85/0x150 [ 527.787770][T11321] rds_tcp_accept_one+0x62c/0xd40 [ 527.793426][T11321] rds_tcp_accept_worker+0x1d/0x70 [ 527.799067][T11321] process_scheduled_works+0xa8e/0x14e0 [ 527.805569][T11321] worker_thread+0xa47/0xfb0 [ 527.810776][T11321] kthread+0x388/0x470 [ 527.815371][T11321] ret_from_fork+0x514/0xb70 [ 527.820575][T11321] ret_from_fork_asm+0x1a/0x30 [ 527.825862][T11321] [ 527.825862][T11321] other info that might help us debug this: [ 527.825862][T11321] [ 527.836166][T11321] Chain exists of: [ 527.836166][T11321] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 527.836166][T11321] [ 527.849304][T11321] Possible unsafe locking scenario: [ 527.849304][T11321] [ 527.856761][T11321] CPU0 CPU1 [ 527.862204][T11321] ---- ---- [ 527.867562][T11321] lock(k-sk_lock-AF_INET6); [ 527.872245][T11321] lock(sk_lock-AF_INET6); [ 527.879269][T11321] lock(k-sk_lock-AF_INET6); [ 527.886469][T11321] lock(fs_reclaim); [ 527.890455][T11321] [ 527.890455][T11321] *** DEADLOCK *** [ 527.890455][T11321] [ 527.898593][T11321] 4 locks held by kworker/u8:14/11321: [ 527.904069][T11321] #0: ffff888032bee140 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 527.915575][T11321] #1: ffffc9000d917c40 ((work_completion)(&rtn->rds_tcp_accept_w)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 527.928468][T11321] #2: ffff88803cc58e60 (&rtn->rds_tcp_accept_lock){+.+.}-{4:4}, at: rds_tcp_accept_one+0xb3/0xd40 [ 527.939283][T11321] #3: ffff88805257ee60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 527.948601][T11321] [ 527.948601][T11321] stack backtrace: [ 527.954489][T11321] CPU: 0 UID: 0 PID: 11321 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 527.954508][T11321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 527.954519][T11321] Workqueue: krdsd rds_tcp_accept_worker [ 527.954543][T11321] Call Trace: [ 527.954550][T11321] [ 527.954558][T11321] dump_stack_lvl+0xe8/0x150 [ 527.954581][T11321] print_circular_bug+0x2e1/0x300 [ 527.954599][T11321] check_noncircular+0x12e/0x150 [ 527.954617][T11321] __lock_acquire+0x1520/0x2cf0 [ 527.954640][T11321] ? lockdep_unlock+0x5d/0xd0 [ 527.954658][T11321] ? __lock_acquire+0x13e8/0x2cf0 [ 527.954684][T11321] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 527.954703][T11321] lock_acquire+0x106/0x350 [ 527.954723][T11321] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 527.954743][T11321] ? napi_skb_cache_get+0x151/0x7d0 [ 527.954758][T11321] ? lock_acquire+0x106/0x350 [ 527.954779][T11321] fs_reclaim_acquire+0x71/0x100 [ 527.954799][T11321] ? kmem_cache_alloc_node_noprof+0x6a/0x610 [ 527.954817][T11321] kmem_cache_alloc_node_noprof+0x6a/0x610 [ 527.954835][T11321] ? local_lock_release+0x9c/0x160 [ 527.954848][T11321] ? __alloc_skb+0x189/0x7a0 [ 527.954861][T11321] ? __alloc_skb+0x1d7/0x7a0 [ 527.954874][T11321] ? __alloc_skb+0x1d7/0x7a0 [ 527.954889][T11321] __alloc_skb+0x1d7/0x7a0 [ 527.954905][T11321] tcp_send_active_reset+0x8a/0x550 [ 527.954925][T11321] __tcp_close+0x462/0xec0 [ 527.954950][T11321] tcp_close+0x28/0x110 [ 527.954968][T11321] inet_release+0x143/0x190 [ 527.954982][T11321] sock_release+0x85/0x150 [ 527.955003][T11321] rds_tcp_accept_one+0x62c/0xd40 [ 527.955027][T11321] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 527.955050][T11321] ? rcu_is_watching+0x15/0xb0 [ 527.955064][T11321] ? process_scheduled_works+0xa20/0x14e0 [ 527.955082][T11321] rds_tcp_accept_worker+0x1d/0x70 [ 527.955103][T11321] process_scheduled_works+0xa8e/0x14e0 [ 527.955130][T11321] ? __pfx_process_scheduled_works+0x10/0x10 [ 527.955149][T11321] ? assign_work+0x3cf/0x5d0 [ 527.955167][T11321] worker_thread+0xa47/0xfb0 [ 527.955203][T11321] kthread+0x388/0x470 [ 527.955224][T11321] ? __pfx_worker_thread+0x10/0x10 [ 527.955241][T11321] ? __pfx_kthread+0x10/0x10 [ 527.955262][T11321] ret_from_fork+0x514/0xb70 [ 527.955285][T11321] ? __pfx_ret_from_fork+0x10/0x10 [ 527.955306][T11321] ? __switch_to+0xc89/0x1420 [ 527.955325][T11321] ? __pfx_kthread+0x10/0x10 [ 527.955346][T11321] ret_from_fork_asm+0x1a/0x30 [ 527.955365][T11321] [ 528.207213][ T24] net_ratelimit: 16 callbacks suppressed [ 528.207234][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.222662][T11321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.393781][T21608] tipc: Disabling bearer [ 528.405422][T11321] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.423306][T21627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.438374][T21630] IPv6: sit1: Disabled Multicast RS [ 528.446302][ T5813] tipc: Node number set to 4091885104 [ 528.466970][ T3315] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.995603][T11321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.003920][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.245489][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.965475][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.105162][T11322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.113445][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.286767][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.215262][T11322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.365892][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 533.405563][ T9641] net_ratelimit: 6 callbacks suppressed [ 533.405594][ T9641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.445456][ T3315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.453781][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.645973][T17342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.456012][ T9641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.565577][ T3315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.573838][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.495361][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.685455][T11321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.693814][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog