last executing test programs: 2.279510738s ago: executing program 0 (id=11474): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x38, 0x2, 0x6, 0x5, 0x0, 0x2000000, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x0) (async, rerun: 64) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000800)={&(0x7f0000000680), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0x1, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x4}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4081}, 0x4008009) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r4, 0x8b1b, &(0x7f0000000000)={'wlan0\x00', @broadcast}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400001fd64db75c56f4f4000008000000000d00"], 0x14}}, 0x0) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c00028018000380100001800800010009000000040003"], 0x48}}, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) socket$kcm(0x29, 0xa, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async) r9 = socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r2) (async) sendmsg$key(r9, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e80)={'dvmrp1\x00'}) (async, rerun: 64) sendmsg$sock(r9, &(0x7f0000000340)={&(0x7f0000000400)=@vsock={0x28, 0x0, 0x72c9723f7d030137, @my=0x1}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000480)="0245297ec41750c3fb4ebb4dd817045a99249030dfb42a6fec15cc0b43f1630db24ddb475dd16f1d04cecdf3626b78e393834920a75f8515a4d5702f8df82950d4e33bf5594f6f639d77935ba771d9935a0e4a969930dda6bde42d40e68d6581e6c2069a7ecd62fbf4c8d30bb34ce991b3c604c26717373a2fd78f58b90a8955efcc2ea9437b90c66154cc54a16176e33e843d230aa70ed523ce5e2fd9d29a0fb2620984332075f825f5f291d4ef1b731c0eb68fca186726282af87e00d9c935d47bd7351b5114f1fadbc9a39fc49df7198fbf01bef085483a9058503ffea941fd554affcddbd7bc87d4b2a6b99d79dcc0cd", 0xf2}, {&(0x7f0000000580)="d82d40c465c9f10032f8aed57abe2d9691ea8557ab5d6dd56b13f5616ef5bdd807de38a9fa4f70e06f05de01559e2fd309cf01b4d14ee63c4d9ce52afcbd6500c02768bfe5dc40393f35fffc61b64f946ef77ad538142c66d6e3072ce0e31170639dcf4dcb2ee3c7e1d187fe2b4d15371feb3e888a78c2e7c366e15382ac4f843d2ba802a10e1bd492335bf7135942fd0ee0db9f96c1fcf53ef7d59d7575aa43fdc960801ecd23229db79b034b325dbf38089e54f9f00b4cf1b2b07696a6d0b19020826a53b0e8e4cf72c0cf83e2162b38e20214", 0xd4}, {&(0x7f0000000c80)="9c248cfe23790a8cc8d047012ad6270f0f8483fc3efea1feaabdc5c497128621f427e09f3c5073b2363c784705ee0388e7201e21bd2df80dba42f59270ffe08b69718dcb8a3cb97c898629eb507a724e8d0013ad9da638d0db60ed0a71ff66eb08ea3311c29bd87b80f91b5c059792fe491e5d4a4b2f4a19b5ae40dc8bc0a69ed8e96a4c1f8696c283a5ad94a638fd856c24c8e64c565fa728c126981e091907fbcc3b6bab8e5c2dc9618ed8545595bbb34ad1192e2eca0a20f45a2f77d095", 0xbf}, {&(0x7f0000000d40)="75c7de413301a1832485b110c64ef51f8ecbb9d86bcffab36167d7137a7494fb3111aa4ee1cb8d9cdfc583823ad698b27399727d31259e148c154a3d5e6335cd602587d3454a2e637311daa371", 0x4d}], 0x4, &(0x7f0000000dc0)=[@mark={{0x14, 0x1, 0x24, 0x83f8}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xe056}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0xadbf}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0xc0}, 0x40) (rerun: 64) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000000, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000012000000650000040002809aedf171c71d24b235eda48eb492b40800456b", @ANYRES32=r11, @ANYBLOB], 0x3c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="e8030000", @ANYRES16=r6, @ANYBLOB="08002dbd7000fbdbdf254000000054000180080003000200000008000300010003000000080003000300000008000100000000000000", @ANYRES32=r11, @ANYBLOB="14000200766574683000000000000000000000001400020070696d72656731000000000000000000c400028004000100bc000500000aaaa35da004149d660ea358501dc39c12ed2ed6630f6e01cf79a2f7d22d394a61c71a849664c17b6cb0c1ae3ae579be1008e1444724df3f431c880304b5f9c86a435f393f613dde4126f21abeabb320fa934d43e82e92b91ca52e7a6b8ea8c05a47b70be7c68e8b527824d51804b9153c4d5d5fcb60336492411051c914f2d453924a49704d869581ce72758116e19ea01735e153d94d775e8e913bc21c1d351491a38a6b5bca2972c7f7bf548f3db8dd269e9840a4c8bc020280c00103804c00018006000200640000000900020073797a30000000000b00020027252b29272a00000900020073797a30000000000900020073797a300000000008000100010000000400030004000300480001800900020021f8212f00000000080001005c3800000900020073797a30000000000900020073797a300000000004000300080001003600000004000300040003000400030004000180340001800900020073797a30000000000900020073797a3000000000040003000900020073797a300000000005000200000000005c000180040003000900020073797a3000000000080001000900000008000100070000000900020073797a30000000002300020000000000004fa6e9b22c30670d9ba55758b6a3ceb73d4b9bc31d1e1826761f0008000200402a7d00340001800900020073797a30000000000900020073797a300000000008000100030000000e000200405c2f213a2c2d2d230000000400018010000180040003000500020000000000240001800800010008000000040003000a0002005b2e5b21250000000800010010000000280001800900020073797a3000000000080001000a0000000d0001000500000006000200400000002000050065303b7bc278705bd3dc673ebe5cf09700ca22c7f01f2aa899a744c99c000500f36fb0d3d5a94fa7d99d2e1a0b9704e82a88eb1142785c55ae6ac3e0486907aca0b63a05359ef5bb60ddf75696973121a85c93b79bcc663da16648426c313c974105b4c7fe126b679378551b0aff7f25f73ff76865d64e8f0f56e208f527d06c0f3115b93e888885a92aa519da0b9c67d5219fe6f4b90bc5c743841751c479a8fbcedd93b80163dafe80d8d37dcd71f517bcf51567c053643c0004003a4966654afe86967548afc3f8ed16fab0207442867cdd9244b0a5f03f705ffeaa639ea36086b675170e320a10fad3386f6cb0935943c7e8"], 0x3e8}, 0x1, 0x0, 0x0, 0xe055}, 0x0) 2.065813666s ago: executing program 2 (id=11480): r0 = socket$rxrpc(0x21, 0x2, 0xa) socket$kcm(0x21, 0x0, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x20) close(0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r4, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) poll(&(0x7f0000000080)=[{r0}, {r0}], 0x2, 0xf45) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x50000, 0x0) 1.997916405s ago: executing program 0 (id=11481): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/uts\x00') ioctl$XFS_IOC_GET_RESBLKS(r2, 0x80105873, &(0x7f0000000200)) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) r3 = openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, r3, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) write$cgroup_subtree(r1, 0x0, 0xfe33) 1.746477658s ago: executing program 1 (id=11490): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f00000001c0)={0x7, 0x7, 0x1}, &(0x7f0000000200)=0x28) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000100)={0x2c, "4c7a3ec9c4961461eb036eb71420eb5c671547338d4a8cd12ba9562733bd5efdab1474c3d798b2873c5b12d01a25a296375fc878d94a3d1e15fb626ffe7821d3662d9bd8ec059c7dc9e7e18700db0198e188a7b55e16fddd7b8f8e54347a7d358267d8a6720555b6b908f59bb7faa3a61568472b48ea0a809ea80d133dee191d"}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_bond\x00', &(0x7f0000000240)=@ethtool_gfeatures={0x3a, 0x4, [{}, {}, {}, {}]}}) write(r0, &(0x7f0000000000)="1e50302f20a864a286aabe6ee01ee071aab2534d8650bdf8cf652b0016463c259b732fcd97d81e14b5af692f1e4f292667e430be56c90a10b844ce845e04e7e9279afd02ead4d6278a84a73bff4464f70f8317f3f8704f395d0b7e6f436bf04b70bed2af1568ec73c46282181671dd4f599f4307713c016e358bb268d87a1af03f7459d5c2054c328ba74e68b2a9f4e08d3c1f518e28820abd6d030b4a2d3f243d0765d52ed4e9201256b23557e189d3be59df41b80243f8a2884c957f34274f8ec4c671a8420e44b0a7ed55c13d35452c172021dc68", 0xd6) 1.525578193s ago: executing program 1 (id=11492): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x9, 0x1, 0x3, 0x8, 0x4}, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(r0, 0x5460, 0x20000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x800) accept4(r2, 0x0, 0x0, 0x80800) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 1.506235506s ago: executing program 3 (id=11494): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x800002, 0x0, 0x0, 0x3}}, 0x2e) close(0x4) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0xc8, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x74, 0x2, [@TCA_HTB_INIT={0xf}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}]}}, @qdisc_kind_options=@q_fq_codel={{}, {0x0, 0x2, [@TCA_FQ_CODEL_INTERVAL]}}]}, 0xc8}}, 0x0) getsockname(r0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x800002, 0x0, 0x0, 0x3}}, 0x2e) (async) close(0x4) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0xc8, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x74, 0x2, [@TCA_HTB_INIT={0xf}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}]}}, @qdisc_kind_options=@q_fq_codel={{}, {0x0, 0x2, [@TCA_FQ_CODEL_INTERVAL]}}]}, 0xc8}}, 0x0) (async) getsockname(r0, 0x0, 0x0) (async) 1.503066322s ago: executing program 1 (id=11495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x28}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000040)=r1, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x44, &(0x7f00000000c0), 0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x1, r9, 0x7, r6}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={r1, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0xa, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f0000000c80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000fc0), &(0x7f0000000d00), 0x8, 0xad, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1e, 0x15, &(0x7f0000000a00)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0xa2}, @alu={0x4, 0x0, 0x4, 0x4, 0x7, 0xfffffffffffffeed, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x3695}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @alu={0x7, 0x0, 0x4, 0x1, 0x7, 0x287d12be9e650cd, 0x4}, @generic={0x8, 0x5, 0x4, 0x4, 0x40}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], &(0x7f0000000640)='syzkaller\x00', 0x6, 0x60, &(0x7f0000000ac0)=""/96, 0x41000, 0x2, '\x00', r9, @fallback=0xc, r2, 0x8, &(0x7f0000000b40)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x9, 0x819, 0x788}, 0x10, r10, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000ec0)=[{0x0, 0x4, 0x8, 0x7}], 0x10, 0x7}, 0x94) r11 = socket$inet_sctp(0x2, 0x1, 0x84) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000000000)={r13, 0x44e9}, &(0x7f0000000040)=0x8) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080211000001080211000000080211000200000000000000000000006400010000020100000000000000"], 0x2e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x60, 0xe1, &(0x7f00000001c0)="66e930362c35a19e2c0fd7ee93e15014a1c1e0ffa44cb5fae2e2b945069df979b576c26ac62833f4582117c7e0775a4e7d80c03637ae389e0000000000000000b0e183d815da685b6400000000000000899763fe677ce5e8bad4322c9650f493", &(0x7f0000000240)=""/225, 0xfffffffb, 0x0, 0xe1, 0xb4, &(0x7f0000000340)="b2f63b9cb29caf70e8c3e65fbdd6b0718e4d654d76e637a6a47e628c6e935bf6a71a61bc29d750cecbc7728453ba48180e44d3840b3c978c70afd5f96084e6a808453afa02508d0ae97e91b4829d1c3d81204d6af3ee890b25518da24b8aa106e89a1978282386ffa9424d78938c4d4ecfbb4b75b9e7b502f67398a9d5b0314a0dd8cbdaf3a3e158e217dd1f065509342ce789a17b550ee0782b33151bad89ab6cf15e1f4a8ef79bff5d5ea421769b700085e545db18ad9d39ab9c9035300ef833f60b0625125d7a693aeafee9157bfce5c9d50aaa2156f172504a7a96261ab630", &(0x7f0000000480)="cc09d4d7ead250e6a5b29d385d19a2b2064240b8331bfdb792b40061889c59648bd3c7df5e77ff9940004b2fffec85c27f31668d8dc5eca60f259b1494c90430e33566cfdf57e86d70cee46f9909436d1aa789e3964179bdfccdae9798c156c93a0c1d3365f3870ffe02a90d2b84b5383dafdc79a9077f128be91317f6d2a4013e04b743336af44f6ac566ee4fd8a27af3db160774f2afeafff01f54bf60bb60a1ce04d3683332453631747f258b3e774dfe1f54", 0x2, 0x0, 0x8}, 0x50) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}}, 0x0) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x18, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [@alu={0x7, 0x0, 0x6, 0x4, 0x5, 0xfffffffffffffff0, 0x4}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20040886) 1.361751846s ago: executing program 3 (id=11497): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000000000000000008510"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000001840)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0xe4) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x1, @empty, 0x9}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000100000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbf07000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.340860265s ago: executing program 3 (id=11499): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x5, 0x1, 0xffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xe, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3f8, 0x8, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80c4}, 0x20000044) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0x4, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) close(r5) close(r4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c0000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.178036154s ago: executing program 4 (id=11501): gettid() r0 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socketpair(0x2a, 0x8000f, 0xffff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@local, @dev, 0x0}, &(0x7f0000000080)=0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x4, 0x0, 0xffff}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x200, 0xfffffff5, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x59808, 0x55007}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xfffffff7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4890) 1.157884391s ago: executing program 3 (id=11502): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff000000007110bd000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@remote}, 0x14) pipe(&(0x7f0000000000)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff000000007110bd000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) (async) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@remote}, 0x14) (async) 1.1565856s ago: executing program 2 (id=11503): r0 = socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000120000000000000060"], 0xfce) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000280)="f79b7e1b45f0499467cc60320b112a3aa2466235e926e67942aae9075ba4322a5dfdd55d53a5b9b40a142fd852f2e7db288bc46b7b8d266fb37122156de620207f99c4e485e13f718336737d7c79515d5fdbce82c3fd28102e2151d0f84eea727ffe7ef9a535a65ce5e2adb69870c6698d10739707f5934aa0ca339de8646588db6eb2fdbf81ca4aaf06cec7c18835dea646e54ed5bd74d6f5112576a16b258ac1602883ae210a79eee7294d878ff73b40a1d3facf1acc18894bd437ea804f4cb7365d12605ce5d1cfe2fdd439b9f0f9f7fead5ac3d7bec2ac2f32f0dd71c309ae39769ceba1ec006a21935ab4be1c41", 0xf0}, {&(0x7f0000000900)="ff269ce1a116cef65669a330419bad9338e8cb6adec71ccc67ebbfaa0a5bedcb442ee3d2d8806ab1644d1613a73848825cacf296367be9ebd0030b91105bafcb27bf51ee68cb1e740b912f07aabfd3a3c3ee5037259dffb02b3bcc509218ca053736c24b0c225a29af0b2f825c46cf409af58d4fa14f27db1e22d05e2693a80118b1f108456ed2baa925d6f8703b6dfe0ba4ea665edced06753a", 0x9a}, {&(0x7f0000000380)="9b7cbd23297335e3657093cfdae46d5865c0cb032bc250c3aec472f1fb96c273a49c2df26b9e7dbcb1ff4237e16f107912b3e67f96cca74fa079b3400f131aa9c5538895435396c56cc329589ffdebeebce7473d2de40892fc8d66d3424d333ad22377be65f4f8f281dee63f5dd4a854198b7b14333f448bf1d14ce5c898cc432c5ac07a87550feea04889263f02ec167c087279d51674c74080bfafed0f9d0f1e6bab48f71046436a3a6520d7f05392dfacb7", 0xb3}, {&(0x7f0000000740)="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"/434, 0x1b2}, {&(0x7f0000002240)="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"/4101, 0x1005}, {&(0x7f00000005c0)="4fb0a5a4b11dc884e0056af47b09c924732334ecf0f785c3b742569658d427b55c10e44be0c7b104292fe151baf00c6520bb174544f40f4f4f6f0524badff3b9087d47a5e363cbf11c0e3771987b57849e6393eb324ff2d46c44dfcc3027f8bf7482d66bc83266d841cec5c383c218c89014ee24f008b708aefaa9654418585b24d6461ff5a4bad42604bc40080cda055363b1f3545216d4eeff431b1b3d99730c4283028d750a9b66223170e901a2baa03f4c820a91dfc9b470ad1201fce60cadecd5a4787f63d721414468d86c0ca6ba28785d341545b1aaeb23c375eeb5c45bbf1f5bd2a629c5dcf1", 0xea}], 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d575c625d46}, 0x4) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x14, r6, 0x731, 0x0, 0x25dfdbfb, {0x38}}, 0x14}, 0x1, 0x2}, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x6, 0x4) (async) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000f40)={0x34, 0x13, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8c0}, 0x20008080) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xb9, &(0x7f000000cf3d)=""/185, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1.124730807s ago: executing program 0 (id=11504): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a0000000000006f0000000005001b003a00000008000300", @ANYRESOCT], 0x2c}}, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000400000004001d000800098004"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r3, &(0x7f0000000500)="240000001e005f02141f00fffffffff801000000080000000000000008000902009ea5b1", 0x24) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f0000000000)={0x0, 0x0}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write(r2, &(0x7f0000001680)="59f42b9582901156660657e82c602f6254601c7ab720d1207155c69e4e07999ee4ae480155b6646818f0ec1a2a435df46b57d1080724c8728abaa1cb9649354d49eaabb7f00110de66a8accc73d480aec37af964ce843a71333e7de5af70d9abde01bcfceb5de0baab952c91b31fe3198978e60d66ce320a5637786bfd6ac8984437dfc13e4b493a76fecf36d4846b3899dd4324a2ee0997aabd1326fabb84c79c9c47883d7cc484b27a6b37ad57b133e2095fbcaa2933463c191d317216c47eae02f1c55bb55bc81d8ec46f1c31bbe166ddc1f4b70b6ad5ba66f836c7b085e1b28904bc4379660985a505fe1bf5f365f946d94e00b6d6a0af5870360be906ef857f19c86cc6e218220e768744ee72ce80cde3ac1a73a26c4b603dd3a77e86b06bb18e929030be67733ae8a24903527a0574796a2120250b1e870cac4628e3e1bf27a8c8d7bcc61e15de490a93961f700d73b743baa3dd2639ca76d75c8f16e96b2f16d2be20ec2b80eeb37583ddca98e4c7f0e63262d24d9af1a62c748e01066845d1ad9f48a5d651c334ce6f6d7bde31a6dcb25f58052159db188a4bd68ac9b693716502cfbec11cc33b7d4aea37efaf852016acec46e31ad3ea1ae192f7f82fea45a39134e011bcf7f2925367ebe02c9d5fd591603b8c2cb8b3d53662a55ea087433f90d55e7f795ead69e48ea99c7452872cdb42a17dd19d7b5cd9d41c23779ad5fdaa557f0962f18cada636d91cfa1b51771f60a47e7cf4207536ef2ea59acd3a68ffa6dfbfd411373a18fb1fb1624add629fe9b663b2ebe19bb4575f880963f8e9b0568bc0f775e148e140ef0a40c9d97acce35779ea1ebc0757967d796438083ad4ccfa442d91b2a2388bf26a4a88aacdf38f415e81468d027c1d7bae472dc8469c97caeb3e860cd16fd2836c5d3a4dd8d168ba3090f38fcb17a5bbc5c8dc5ecdb370366bca06a78c5ecc854d44aff840ea3c40f2ff99a8eaed249516f16b810c748ca7f17846659d3ac4ac807016f8ab71c33f37483463f0fc1bff30170c5f9d20db9bb28bfbef875aa19a3e3ce3abe52e996d093c8d84a72568564639bcdbc5a99fc653f83dd429b48a08ff2cd7567f26dd9cbb228023ffc46bb5871febe1ac2d7b29c10d41643ca6f1d195835bc1f2746a7c9926cd47feeb9edcd13b660621db06f33c08b7eafd91a8bd58cee2b1f89f86f73a1967aced31e82f748a5a914641aefc7a8861a601f6c965fd4647e423ad763946a46a655a20be3b5d1cd81a3bfdb2f6b49869e8d606cf988122c197ea67c2a2e9724a3253f953b44294060225959786cf0fd9fe23613715c838802019709196703640dd031c74b6f07d5a81b660d767c0e0b20f2cc7b7bd7adde251b46e47da41e31e73da2c3bcb14c641c397f3179991fa7c03d25d77f931d6f4bebff626fcf58ea4853a5ee46b50d1ad49adb5ec5a89cc780acf915c5805cb5ad387b1f082e127e257b5bbab8338ea727ae7b406ee58b314127666af4be2257ec1730d69085579c0179a9e4b50711cc79b51c7d2eaf6f8d3362c8c953b5124c393e1637c84c4d98413c3d1adcc34f3a4e05c4e1e8f592ca51552230b052a90dcd1b1a7e52d786ea8d6dcf0256fffca81b0e4ca8d360e57dba57e553f709da7f93aba25b415a8a07a049d2d6557a1e41baa4741f2839a5f54921493e95ef50b6e81ce09ed1071eecce055b9deb0790141baf5e56bd5c301e8e2158f0edf007827277545a135e8066eb58b49436505a7a628ee4c383218c7f0f0e2adafa8294e131a94ffae4829858a471a78193cc20e35c1712f2c92c6fb3630e407e332afffcaed33e9f5df5a227562f8f427724a704d66471458e2fb288c80917a672cf44ee21eebabf43e378d16050e9165e063ee851ce24ea81b93506848713c38898c54c7acc9eb34db27837c7b5c95e2db750dff883d802ad07c02aeadc74ddaadf90b4a240639eadab1da4fa4d9bdd99224167188fe2dd0a73abad2e47dcdc1baf25b8b73254f46275cdb9fda911c3111ac04ae1a16c018f11e5f8a779645eabe268496144ace382d9c010b41c4fcc25ee94f9db4c37d056798d295cdd61f1fdcf7c1e564686b1fb1792e664203d4ca6bfbd8926325273c55cd52ef44bb5be1c488c63f9090b1ef22a563f943ea3661f13c305039b02c867e580283ada9528de175432f4e3202c59dc806d9394d59bdd4af0981804d0a51b6bf0d31a12aafb1a1502cc202d48fee9ac51a9b66adcd467cf23611791203448639b390e963868b97b657ac4412084a9daa37d6a3a656a7895b3a9e7562b646bda89f8e4c0db8eee8a7cfe1863a2d030bf75f5a646972d112976b8532d80d28438dc6ecc60a8909bbb8a2d7e49567352621fbd16d83c81d32d7b9f6dd3bf7393c1f3012cb67265882356f988f7e9244ddcba2724d4943121fb1cb64f263695d925a41175d65cf01edeec5204f5ca9ab7ed541a871bdfc8e1ea77972ca2ef5a12d0954d4e59843456813f5134c88d93ce4f648578c7120b382a9a47187d183348981f9f60dd6d39456fdaab21f439d3df76d24e3d867870307e2b6fd24349dd7899eb0e9efc85b38be4cd730f6c6ef3f3abc2dc2bdeb6e15b649f755b14e0dc20761b50a7e135c7570ca0650a679c04b6d0bc3fbab617cc34da6ec191d733f9a1199e068baab8a8857892627d15e5795a0e01d028640352b3859f535299a930ffe3483dfebdfd19fc561798a71ddcc4b60d0a4cbfb5870696da93dbfb9333d83c976894343aabb52aa879f66bfc86fd361c09cac6e604901cd9035f7d510a862c1df79503a9b23f00b2afcef6a2c4e430f6caae6f01b3e622603604d1f7c2d51e539a825253e7fb6817932ed9719751cfe09a82f6501c954f16cc10f290da0cb5b4480bfedd25cded9073fb8bb560ab0d18b8c3aba0a99327da69b5f769c4805d5c902f2baf78664fbc9c81b6690534f51b805f3ecc493c73497df3a561e02450d8cab727d19cd339e7d8987e5633e2f676a5bf8f4b4754eb2a01b3f01d2ff3fa3708e70a4fdee5e3890d53a4b2039dc62187319b513685e38600ba775dbb00d55ae12bf2d36f2d77c641bf709b8892dd518d0ea8db9254d91fb72f39c7421528413608d2f81e30820c45682d2c17edb2d014c2dea995245aee42514c8750f2d7b004fe8b9274f32a99c71bb310314b4592039ddbaad6c368777b02ec7785491d1d65970f17a25f91ac9da44e386b25372e00a15a8ee5cb18d3b7010288f53b23b2e1b74968b594c8a6005518ebc527d96fdb7ce0930e47b90a56b311c24b39c0b13a2ea9f890c862043c6eabb1f47c7db167273afb686a50b743b93495b328059a68cea8b2f09fbdb29aa2cc22f5be73b55e338e49ecc50dc42ee11596898c7b0606069cfc849cb4c5c533a829f0ff7acc85367d82c01f641ee8efa6ee9f8c37b120163e2114b27ab0f91026d641beaca8370d0ab9b4ca82173b9cd46167a918f8b224efdea2e9518974c196d5dc08f5d480f0ceeab4431ae0cde73f5115b8f740d6906d87422a9ced40cf773200bb00d9903d629ef53878b9ed19a56c51312e8dd0025bc8b4c32970101220b94c4b46175a254c961e392a358889378210a7bcafc244ec0644106392da12fd99762b473d8da89d5e08d26dcc058da61361f135d0f4ef16a2c21f0a68c94d65d6a68c309b5f99306ddeb32898091e666e9702d00833c98b22f6d071f3e61d3adbf77308901d5f1ec5584fb689c39d43a62fbb62bbc15d10b407ca6571bfba967641969523c9b1b7368fac772e7bcc9d7cba4e5c0afba0e5f5f90fcbf0909f48ac139497b8006ee2776d980be8b49e72070a9287776f5eee978ceeb26aafb9f318545e1fbea8417037238e03633d74dec6d9c64ffecb8b309dd097cc184472a942feebea8e8271f1a41d25a09d97b81d3232e605e1f59300d1bc6cfeba796db53e0f2e82bb9c78ddee2d9de2d0af49d972de748c8c202d1d6ac6a0457f9da5a55f6fc387c16290ee712aaefea5e416aa5e8c5deb5c2c094b1241236c34d7b8ade76eb793397ed089ed663a96757ba5c4eb2fc399a6226ea0d2bd706fb63c5746d193ce20e0b99e5870ee0fb438f4e89630172b25ea5766b7d46a10f5b6dedc7918ce091b3e38a1f02f0bc0d4bc24d18ce1b00247cf4263ba47fee1a0a38d278e91f9280fc32226ac4e5049b70fb9d534fbc4293ef076b921e3171b4a969b80c177b58e57e5bafd98cb5c9ab2e14bb5507c94cf6425c5353df4d3e853d896d5aecfb64492c535391df0bd34a6b507fb5148cf269d0aa4b0a3166687e699bdbe9e6ee0ef8e3cfef05cb59c4e743a574ddf1cd7181744e07c5770d77f275792361fb58bd4590d7cef17c1bdd1811356dd06cb1867146e61d02820abb78c4f755b58bb198d278b898e98404ab9dd594e8d24ff189d45633bda994eb09faaa6979c6f012675daf3cb7ef4cf1bd7a5e83f73d95779407df3259594ac8151a28e5bf2721c6b5e58a392e4b4b0b6d7dcfb4484ffeb1a03ea101d4f44b23e06399df98ab8237df0ada76882c1890b1779b9c1f3961594c930339cbd59931ed24d9d2ce4a13c7edcc95c4f957e7a32cda51e23df26f123184a1942cba1a095b20c62abe22b921339f32de77c7bbd914b06df952452691e124f8e761b2f06f07935475440a774dd56eead79872800be62609b383fc5a9017856fd9bdd97e9a45ea923f44a66237af6d6cf8650b37b0edad254dc70fce97bcbc31498bd8cf86989f9d586001ff5a6f2e596d0638445564c552407828d8b911f7f2d2e8a5054ad397446c6f3bb241dab48d1ec19c8c6ec936059e0711f4d75b3020b20e8e9cb6f5157439de4d3492af111d0840416bf4b70078694f6510e6a56ba74bcedf6f5d4130cb4b3e27c5e92ad4d68e0a73cbafcd48ba543be75d7e70796d00609558f096addb61108c529e3c5a9e9d1e52e47a2c30b4275c314b85794b710b2f769d88b388483faacf7f50a4e5672bb32eaad716a7e314428c3eba45b09459191c46aaf41fe93f713b64b911dd571b512698f50b788ef1c894c7b9e0c4755569b7a3f2bf8f8fc1bf9a77b37596e01eb34a8e474573fe4d944c6faf2df2c9bf4b455876352b3793a7b40b32e1e91085db6be3a3d003ef1c0d748ef2c340d8a478379eacd3ce602e2a5e17e6b2f4c6e2d7b4ffc932173cb949610923c34e0395e338a903603fb028000269b11dec07efa48ba979ce064ae1094afeba03f5f83b0bc34b276c7cf7ce1fdb16a8b91d24403552e41afb17c4b41d8d184ebe810794389e5ed4aa77b2341a2cfac5dc20b624efac86166bf530d39ea603e7a51b8df7f7681af9945415734f7df7016a0485a0567b810a06833c908ea8801f8e45e73c20ff528b3ab0877cbfc4c31dc420261c8632acf82190bb0878d395b04c151623f0eb57851ae44a5d3cdb5bb48675896fad505bd0cd1172cdb42eada937162a0cd8cd53ea680c9dbd704e6da34e60d04186071f6c26a32489d8ce46ed57d9d07138ccdbeb362579342685c16360ad177117f94284d3dd81e42a84ef2e6c21ce84bb554e44b3c456815fac99b9902f4769a01ae997b1858c7738ce9a256e4e3593c7731142196c5faae309a46de85d63fe734f19afecbfbc6ff7f795279facf00de53b9db7b23f8334f0d0cff3034b9fc930c40c280baf16b9450f0355f5fdd2c5b28b637c2bdf2e0f20d238b3f8c324ce38635dd2f90dbe65d95f649c6d12505380c5d9c33bd2ce7ab85491aaf365d3f2afebae1fd4f504c2", 0x1000) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x7c, r5, 0x1, 0x3, 0x25dfdc01, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x58, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39504fca}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x28db}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d38}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8645}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x334b862d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc09f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27097c6f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43a14095}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x204a}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00', @ANYRES16=r7, @ANYBLOB="020326bd7000fcdbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r6, @ANYRES32=0x0, @ANYRES8=r6], 0x40}}, 0x0) 1.108708564s ago: executing program 4 (id=11505): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x1000004, 0x8}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940001000000fcffc50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940001000000fcffc50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="08009f000600000008002600b409000005005201"], 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0x20, 0x9, 0x2, 0x2c, @ipv4={'\x00', '\xff\xff', @local}, @empty, 0x8090, 0x20, 0x7, 0x7fff}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0x20, 0x9, 0x2, 0x2c, @ipv4={'\x00', '\xff\xff', @local}, @empty, 0x8090, 0x20, 0x7, 0x7fff}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000640), r1) (async) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000640), r1) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r8, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048040}, 0x8080) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x6, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5f5e0ff}, @call]}, &(0x7f0000000000)='GPL\x00', 0xc, 0xe2, &(0x7f00000001c0)=""/226, 0x0, 0x0, '\x00', r6, 0x25, r9}, 0x94) 982.476377ms ago: executing program 3 (id=11506): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xee, 0x0, &(0x7f0000000540)="7f8ed762c61399908490a073a2bef073af2686068b636a2f0908a797c53837a89f042198718c1876f9a373f3c9dcd74d454a5fe59b3d0ba9e265a39ea99ec80139f0779ed8d461bfa5f27d996ae1a732d33ce4c3d55431d669654dce0c72f9b765067be63d3a20d2af05bdd6837d36af8b059c144e7dde6be6203d653a9cbbc067a158b726d0c1a21b536893838ecf5b71da03936b6f1e278af6db30ebb79f461336a0be1a9ad3aeb582c8d7725813c2e2bd2fab1541a9b3c0f42c5fa5c56a5ce1b79131be260dcbc4c7d0c5ecae496f3a3dc2c2c133ba6c8648896a8304507ba093f880166ab07f8351ba1ff013", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x178, 0x1a, 0x633, 0x70bd28, 0x25dfdbfd, {{@in=@dev={0xac, 0x14, 0x14, 0x42}, @in=@multicast2, 0x0, 0x0, 0x4e23, 0x8001, 0x0, 0x20}, {@in=@rand_addr=0x64010101, 0x0, 0x32}, @in=@empty, {0x323, 0x0, 0x0, 0xfffffffffffffffd, 0xc, 0x92be, 0x6}, {0x0, 0x40000, 0x0, 0x3}, {0xfffffffb, 0x3, 0xca09}, 0x70bd29, 0x3502, 0x2, 0x0, 0x0, 0x10}, [@encap={0x1c, 0x4, {0x1, 0x4e21, 0xfffc, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in6=@mcast2}}, @replay_thresh={0x8, 0xb, 0x1}]}, 0x178}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x54, r6, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}]}, 0x54}, 0x1, 0x0, 0x0, 0x40400d4}, 0x40000) close(r2) 970.32913ms ago: executing program 0 (id=11507): r0 = socket(0x2b, 0x80801, 0x1) mmap(&(0x7f0000966000/0x4000)=nil, 0x4000, 0x0, 0x812, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x5, 0x7ee, [0x200000000200, 0x0, 0x0, 0x200000000584, 0x200000000838], 0x0, &(0x7f0000000080), &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x11, 0x1, 0x6005, 'veth0_to_hsr\x00', 'batadv_slave_0\x00', 'veth0_to_hsr\x00', 'veth0_to_hsr\x00', @broadcast, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, [0x0, 0xff, 0x0, 0xff], 0x12e, 0x166, 0x196, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz0\x00', 0x8000}}}, @rateest={{'rateest\x00', 0x0, 0x48}, {{'wlan0\x00', 'veth1_virt_wifi\x00', 0x30, 0x0, 0x101, 0xe131, 0x1, 0x6, {0xfffffffffffffffd}, {0x7}}}}], [@snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffe}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x3}}}}, {0x3, 0x4, 0x80f3, 'pim6reg1\x00', 'bond_slave_0\x00', 'gretap0\x00', 'rose0\x00', @multicast, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0xff], 0x116, 0x186, 0x1be, [@stp={{'stp\x00', 0x0, 0x48}, {{0x0, {0x1e, 0x2, 0xf801, @remote, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0x5, 0x3, 0xe, 0x4, @local, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x4e24, 0x4e20, 0x44a, 0x7, 0x0, 0x9, 0x1, 0x8, 0xff2, 0xda0}, 0x814, 0x60}}}, @cluster={{'cluster\x00', 0x0, 0x10}, {{0x5, 0x3, 0x6, 0x1}}}], [@snat={'snat\x00', 0x10, {{@link_local, 0xfffffffffffffffd}}}, @arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, 0xffffffffffffffff}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x5, 0x8, 0x88b5, 'sit0\x00', 'vcan0\x00', 'veth1_to_bond\x00', 'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @local, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0x10e, 0x10e, 0x146, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0xb}, {0x1}], 0x0, 0x1}}}, @arp={{'arp\x00', 0x0, 0x38}, {{0xffff, 0x6, 0x2, @private=0xa010101, 0xffffffff, @dev={0xac, 0x14, 0x14, 0x2f}, 0xffffff00, @broadcast, [0x0, 0x4b149188fa6358ac, 0xff, 0x0, 0x0, 0xff], @local, [], 0x2, 0x73}}}], [], @arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, 0xfffffffffffffffd}}}}, {0x5, 0x8, 0x8884, 'syzkaller1\x00', 'xfrm0\x00', 'macsec0\x00', 'syzkaller1\x00', @broadcast, [0xff, 0x0, 0x0, 0xff, 0x0, 0x7f], @local, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x9e, 0x106, 0x13e, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x3}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}, @snat={'snat\x00', 0x10, {{@empty, 0x10}}}], @snat={'snat\x00', 0x10, {{@broadcast, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x1, [{0x3, 0x5, 0x3, 'team_slave_1\x00', 'wg1\x00', 'wg0\x00', 'vcan0\x00', @local, [0xff, 0xff, 0x0, 0x7f, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0x0, 0x0, 0x1fe], 0x11e, 0x14e, 0x186, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'wg1\x00', 'team0\x00', 0x10, 0x1, 0x1, 0x6, 0x5, 0x200, {0x28}, {0x3}}}}, @statistic={{'statistic\x00', 0x0, 0x18}, {{0x1, 0x0, 0xe, 0xf66, 0x0, {0x4}}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}], @arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}, 0xfffffffffffffffd}}}}]}]}, 0x866) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, &(0x7f0000000180)) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @empty, 0xfffffffe}, 0x1c) poll(&(0x7f0000001140)=[{r0, 0x702}], 0x1, 0x6) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) 899.126577ms ago: executing program 2 (id=11508): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYRES64=r1, @ANYRES64=r2, @ANYRES32=r2], 0x48}}, 0x0) 822.541236ms ago: executing program 0 (id=11509): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3, @ANYBLOB="75561b8a941a695bb559f0e49dda567d361ed285d35cf41893f87fb6448499d5fafca4a708dcdecc"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 814.291356ms ago: executing program 1 (id=11510): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r0, 0x100000000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000001340)="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", 0x1042}, {&(0x7f0000000300)="9b364acaa018d77f8143825708d8", 0xe}], 0x2, 0xa) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000420000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, &(0x7f0000000000)={0x0, 0x0}, 0x10) 729.115911ms ago: executing program 2 (id=11511): bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000003c0)={"eabb11ff2b9976618466e6256698a350", 0x0, 0x0, {0x5}, {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYRES64=r0, @ANYRESHEX, @ANYRESHEX=0x0], 0x38}}, 0x4004) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x680000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'batadv_slave_1\x00', 0x1}) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) (async, rerun: 64) r6 = socket$inet(0xa, 0x0, 0x86) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) (async) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100)=0x8) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080000000000ffdbdf250100000024000680060005004e24000008000700", @ANYRES32=0x0, @ANYBLOB="5d6bdf2c", @ANYRES32=0x0, @ANYBLOB="000005004e220000"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x200008c0) (rerun: 32) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB="010027bd7000fedbdf25020000000800020005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000010) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYRESOCT=r2], &(0x7f0000000080)='GPL\x00'}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x6, 0xb}, {0xa, 0x8}, {0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5c2bc254}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x6, 0xf}, {0xffff, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x240400e0}, 0x4811) r10 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r11], 0x2c}}, 0x808) 625.937855ms ago: executing program 4 (id=11512): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x4e21}, {@in=@empty, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x8}, {}, {}, 0x0, 0x3502, 0xa}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd29, 0x70bd25, 0x70bd25, 0x70bd27, 0xcc}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x158}}, 0x1000) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000611060000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000400)={{r1, &(0x7f0000000040)='\x00', 0x100, &(0x7f0000000100)={@_ha_fsid={[0x8]}, {0x4, 0x1, 0x9, 0x3}}, 0x700, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x6}, 0x2, &(0x7f00000003c0)=[{0x3, 0xff, &(0x7f00000001c0)='GPL\x00', &(0x7f0000000200)="f4d7ce1232659585ecbaacc283d32bfae7b548da2d42f88d52287037cb025586c73336a54fab42dc50a98e35cd9a9d88364b827bb5f97bb6b91a4665b767524d7c645f303306b6c4a5096b0669d047e28fac279e2f565a6649653aa6d810776dcb63a1473797477c70aff98b1e64cbe737980147d662f45403aff237ee6e25b5dce20f86b31b5d9c2c38976f235772f8eee1b69414ecd16bce91b9ac7a563691cc6c0d7ff849e00507ec20b0ba0e7ddc7f13d0ec58fccefdfd0e44d33e6b3d3b635095812774a3bcd715fee67bf4fe12ee371b67eb3e6d1b0bbfae5b7c54451cc420afe6788c7345ed8bca", 0xeb, 0x24}, {0x1, 0x2, &(0x7f0000000300)='\x00', &(0x7f0000000340)="194cc47413e61347fca6e83b91e21cc24d16863aea51a61eee5d59cf9c931a8fdf93911242e7354b34aa273af008895baa7edee73453615d1b4ea2d7b439f739e8bff05c4d376afe25a67cc4644ffe061b551c98b59164ef139adb491c0b2374c98c1f6b1177c871463c0338fec2b2d0ed1b5384dcbc9bb9fee44192fa02c262", 0x80, 0x10}]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x40, 0xc1, 0xd4ce, 0x8, {{0xe, 0x4, 0x1, 0x37, 0x38, 0x65, 0x0, 0x9, 0x2f, 0x0, @private=0xa010102, @multicast1, {[@rr={0x7, 0x1f, 0x80, [@dev={0xac, 0x14, 0x14, 0x36}, @local, @multicast2, @private=0xa010101, @local, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @end, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000005c0)={'gre0\x00', &(0x7f0000000540)={'gretap0\x00', r3, 0x10, 0x7800, 0x101, 0x8001, {{0xe, 0x4, 0x0, 0x4, 0x38, 0x64, 0x0, 0x1, 0x4, 0x0, @local, @multicast2, {[@generic={0x88, 0x12, "795354eb0a9c87254f44d5d52e88812e"}, @rr={0x7, 0xb, 0x6c, [@rand_addr=0x64010101, @local]}, @noop, @ra={0x94, 0x4, 0x5998}]}}}}}) 568.208118ms ago: executing program 1 (id=11513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x690700, 0x0) close(r6) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3aa}]}}]}, 0x44}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 470.681418ms ago: executing program 2 (id=11514): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) (async) sendmsg$NL80211_CMD_GET_INTERFACE(r0, 0x0, 0x91) (async, rerun: 32) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, 0x0, 0x40001) (rerun: 32) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async, rerun: 64) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000780)=0xc7da, 0x4) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xfffb}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0x3}, {0x0, 0xfff1}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x2, 0x87, 0x3ff, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x14, 0x8000, 0x4fb3, 0x57}}) (async, rerun: 64) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000340)={0x0, @local, @remote}, &(0x7f0000000380)=0xc) (async, rerun: 64) r8 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r9 = socket$unix(0x1, 0x5, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x4, 0xc}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'gretap0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0xa635, 0xfffffff7, {{0x23, 0x4, 0x2, 0x33, 0x8c, 0x64, 0x0, 0x3, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@generic={0x19a, 0xd, "4503f80f1eb27c0435d8cb"}, @cipso={0x86, 0x3d, 0xffffffffffffffff, [{0x5, 0x12, "940103395b6e4d1d3e2c2264034091ab"}, {0x1, 0xe, "71ea52c459259e81498f8c33"}, {0x2, 0x11, "3bd5d812996abc7d653fc3692c11fc"}, {0x2, 0x2}, {0x0, 0x4, "3f8a"}]}, @rr={0x7, 0x2b, 0x2a, [@private=0xa010100, @multicast1, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @multicast2, @loopback, @multicast1]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x160, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x1000c800}, 0x4000) (async) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000ac0)=@get={0x1, 0x0, 0x3}) (async) listen(r3, 0x5) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) recvfrom(r12, 0x0, 0x0, 0x40002043, 0x0, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010126bd70000000400000000000d300030052018ec75b6018d1dad7563678b5db35a00b15c9cc140c6e0883385e575aafc48668ad46190b11c66ca94aa6f5780b94ef0f85d470609f881a6df9cfc93b1314361822f15a62a2278f65d4fbba76f0e3d6c8223b150ec630e9b6bf8efa67b210b83c19750ce75febe2", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4008080) (rerun: 64) 399.475289ms ago: executing program 4 (id=11515): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2000000000000075, &(0x7f0000000080)=[{0x46b, 0xff, 0x7, 0x7fff}, {0xf, 0x6, 0x5b, 0x8}, {0x1ff, 0x1, 0xe9, 0xf4}, {0x2, 0x6, 0xd, 0x7}, {0x6, 0xe, 0xf6, 0xfffffffe}, {0x5, 0xe4, 0x8, 0x1}, {0x1000, 0x5, 0x4, 0xd1}]}, 0x10) 246.590292ms ago: executing program 4 (id=11516): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500a587b411700100000000003c0002802c0001"], 0x98}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x804) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x93, 0x93, 0x7, [@datasec={0x1, 0x5, 0x0, 0xf, 0x1, [{0x4, 0x4, 0x1}, {0x4, 0x19, 0x1}, {0x5, 0x7, 0x3}, {0x3, 0x4, 0xb}, {0x1, 0x0, 0x101}], "c0"}, @datasec={0x1, 0x4, 0x0, 0xf, 0x2, [{0x3, 0x9, 0x5}, {0x2, 0x7, 0x4}, {0x4, 0xfffff801, 0x80}, {0x2}], "fc41"}, @fwd={0x4}]}, {0x0, [0x61, 0x0, 0x0, 0x30, 0x5f]}}, &(0x7f00000006c0)=""/95, 0xb3, 0x5f, 0x0, 0x1}, 0x28) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000008c0)={r1, &(0x7f00000007c0)='#)\xb7\x00', 0x40000, &(0x7f0000000800)={@align=0x9, {0xe500, 0x7, 0xfc000000, 0x1}}, 0x6, &(0x7f0000000840), &(0x7f0000000880)=0x9}) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x814) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000080), 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000900), 0x8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1f, 0x80, 0x27c0, 0x5, 0x8003, 0xffffffffffffffff, 0x51749b9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4, 0x0, @value=r8}, 0x50) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r11) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "db"}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x29, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000600000000000000ffffffff1869000004000000000000000700008000000000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000183700000200000000000000000000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x1, 0xf5, &(0x7f0000000500)=""/245, 0x40f00, 0x10, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x3, 0x9, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r5, r8, r9, r10, r11], 0x0, 0x10, 0x7}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 233.612846ms ago: executing program 0 (id=11517): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) connect$unix(r1, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) read$alg(r1, &(0x7f0000000100)=""/16, 0x10) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r5, 0x200, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x4850) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0, 0x4d, 0x0, 0xfffffff0, 0x400002}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 97.932542ms ago: executing program 1 (id=11518): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, 0x0, 0x0) (async) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)="e1e604d58c63e449fad226b71aa1c22c648b6d88e5654c87cf4618e2f76c34ba9a324e1eabfef5883f98e3b1f037779da424a51166f32f344dd60ec0e511dd4b8088388db4b8bd1cb5da09db6b3b1e93db11ac7aa98ecbbfba383af0612d1c8f58551c1886a22d60266b796b9e5c79387742dcd515196efde63941982809d7b2f8e749dfaf124e484a551a4a689c263537c39306f84bf88c4820ebf61473f48cc65cd975c3fcf254fe2c7217cd50ac1b739bb7047dbe3662c761c136e8b9f3788b178f3369069ffb9f79cca731bd", 0xce}, {&(0x7f0000000280)="138d2da105b3164dc9d1cb", 0xb}], 0x2}, 0x40000) (async) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x21, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) r4 = accept4$llc(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000500)=0x10, 0x80000) bind$llc(r4, &(0x7f0000000540)={0x1a, 0x108, 0x80, 0xd5, 0x6, 0x6, @remote}, 0x10) 97.432832ms ago: executing program 3 (id=11519): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000b00000040000580070001"], 0x54}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x81, @empty, 0x4}], 0x1c) sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x15, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @loopback}, 0x1c) 73.329143ms ago: executing program 4 (id=11520): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r3) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010000d042abd70f8ffffffffffffff00", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010004"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r5, r7, 0x25, 0x0, @val=@netkit}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@bridge_newneigh={0x2c, 0x1c, 0x114236db3b607435, 0x70bd25, 0x25dfd3fe, {0x2, 0x0, 0x0, r8, 0x80, 0xa2, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @loopback}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) r9 = socket$kcm(0xa, 0x922000000003, 0x11) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="78000000100003040000000000000000000074003f448716aae521b8a46e3b6ab6db27c426349d0336d9c9ddf423c878ec76eae605b6db1978f1854d712918f11f1280e48082dcf01c5d60454dbcf4c75a8be2b45eacdb7d58fd2cf01e6bf068e336afd6887f7603b60f69bdb0e99aeb8c501b77f78aaaca2252755ac2e2a640bb2492326c54b895d65c68d79be2f00145be2d43378746d52278a9", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470014c00028008000100", @ANYRESOCT=r9, @ANYRESHEX=r9, @ANYRES8=0x0, @ANYRES8=r1], 0x78}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r3) (async) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010000d042abd70f8ffffffffffffff00", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010004"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) (async) socket(0x10, 0x803, 0x8) (async) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r5, r7, 0x25, 0x0, @val=@netkit}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@bridge_newneigh={0x2c, 0x1c, 0x114236db3b607435, 0x70bd25, 0x25dfd3fe, {0x2, 0x0, 0x0, r8, 0x80, 0xa2, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @loopback}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) (async) socket$kcm(0xa, 0x922000000003, 0x11) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="78000000100003040000000000000000000074003f448716aae521b8a46e3b6ab6db27c426349d0336d9c9ddf423c878ec76eae605b6db1978f1854d712918f11f1280e48082dcf01c5d60454dbcf4c75a8be2b45eacdb7d58fd2cf01e6bf068e336afd6887f7603b60f69bdb0e99aeb8c501b77f78aaaca2252755ac2e2a640bb2492326c54b895d65c68d79be2f00145be2d43378746d52278a9", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470014c00028008000100", @ANYRESOCT=r9, @ANYRESHEX=r9, @ANYRES8=0x0, @ANYRES8=r1], 0x78}}, 0x0) (async) 0s ago: executing program 2 (id=11521): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[], 0x0, 0x37}, 0x28) socket$tipc(0x1e, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000740)={{0x1, 0x1, 0x7, 0x0, 0x8001}, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}]}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/180, 0xb4}], 0x1, 0x9, 0x4) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): 57551][ T3563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.574883][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9510'. [ 936.617457][ T3563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.906272][ T8701] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 936.931830][ T8701] bond2 (unregistering): Released all slaves [ 936.960136][ T8529] vxcan1 speed is unknown, defaulting to 1000 [ 937.016685][ T8711] netlink: 'syz.1.9515': attribute type 1 has an invalid length. [ 937.041038][ T8711] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9515'. [ 937.206854][ T8721] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9518'. [ 937.370916][ T8734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 937.425449][ T8529] vxcan1 speed is unknown, defaulting to 1000 [ 937.484272][ T5830] Bluetooth: hci4: command 0x0419 tx timeout [ 937.498145][ T8741] netlink: 'syz.4.9523': attribute type 62 has an invalid length. [ 937.855058][ T8529] vxcan1 speed is unknown, defaulting to 1000 [ 938.375704][ T5202] IPVS: starting estimator thread 0... [ 938.386285][ T8779] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20004 [ 938.401882][ T8777] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 938.433391][ T8775] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 938.444718][ T8779] IPVS: sh: FWM 3 0x00000003 - no destination available [ 938.473612][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 938.526567][ T8780] IPVS: using max 30 ests per chain, 72000 per kthread [ 938.548990][ T8779] IPVS: sh: FWM 3 0x00000003 - no destination available [ 938.558982][ T3564] hsr_slave_0: left promiscuous mode [ 938.573240][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 938.573926][ T3564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.778425][ T3564] team0 (unregistering): Port device team_slave_1 removed [ 938.793672][ T3564] team0 (unregistering): Port device team_slave_0 removed [ 938.964974][ T8790] hsr_slave_0 (unregistering): left promiscuous mode [ 939.070120][ T8802] sctp: [Deprecated]: syz.4.9542 (pid 8802) Use of struct sctp_assoc_value in delayed_ack socket option. [ 939.070120][ T8802] Use struct sctp_sack_info instead [ 939.385072][ T8819] netlink: 'syz.2.9549': attribute type 5 has an invalid length. [ 939.556905][ T5830] Bluetooth: hci4: command 0x0419 tx timeout [ 939.579466][ T8828] netlink: 'syz.1.9553': attribute type 1 has an invalid length. [ 939.604466][ T8821] syzkaller0: entered promiscuous mode [ 939.610923][ T8821] syzkaller0: entered allmulticast mode [ 939.704729][ T8836] netlink: 'syz.0.9552': attribute type 4 has an invalid length. [ 939.765300][ T8844] netlink: 'syz.0.9552': attribute type 4 has an invalid length. [ 939.794759][ T8845] __nla_validate_parse: 13 callbacks suppressed [ 939.794782][ T8845] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9556'. [ 940.011028][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9558'. [ 940.836717][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 940.844802][ C1] lec:lec_tx_timeout: lec0 [ 941.473126][ T3564] IPVS: stop unused estimator thread 0... [ 941.527623][ T8857] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 941.860176][ T8877] netlink: 'syz.2.9562': attribute type 15 has an invalid length. [ 942.090928][ T8892] netlink: 'syz.3.9566': attribute type 4 has an invalid length. [ 942.299169][ T8892] syzkaller0: entered promiscuous mode [ 942.310566][ T8892] syzkaller0: entered allmulticast mode [ 942.480894][ T8910] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9572'. [ 942.493398][ T8910] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9572'. [ 944.387386][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9573'. [ 944.397198][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9573'. [ 944.406084][ T8911] netlink: 'syz.2.9573': attribute type 3 has an invalid length. [ 944.431241][ T8921] xfrm1: entered allmulticast mode [ 944.533283][ T8935] openvswitch: netlink: IP tunnel dst address not specified [ 944.578187][ T8937] nbd: couldn't find a device at index 0 [ 944.715785][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9584'. [ 944.777800][ T8956] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9586'. [ 945.033154][ T8979] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 945.083148][ T8983] veth1_to_bond: entered allmulticast mode [ 945.102146][ T8983] veth1_to_bond: left allmulticast mode [ 945.322056][ T9008] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9601'. [ 945.336864][ T9005] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9599'. [ 945.369637][ T9008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9601'. [ 945.405267][ T9012] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9601'. [ 945.407958][ T9013] syzkaller1: entered promiscuous mode [ 945.422442][ T9013] syzkaller1: entered allmulticast mode [ 945.437329][ T9012] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9601'. [ 945.464463][ T9022] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9604'. [ 945.534413][ T9026] openvswitch: netlink: Message has 8 unknown bytes. [ 945.596103][ T9026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 945.711065][ T9043] smc: net device wlan0 erased user defined pnetid SYZ0 [ 945.750032][ T9041] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9611'. [ 945.789129][ T9043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9610'. [ 970.901787][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9613'. [ 970.904369][ T9063] netlink: 'syz.4.9617': attribute type 1 has an invalid length. [ 970.915117][ T9058] netlink: zone id is out of range [ 970.942734][ T9063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 970.950193][ T9058] netlink: zone id is out of range [ 970.973012][ T9062] IPv4: Oversized IP packet from 172.20.20.24 [ 970.980733][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 970.987378][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 971.028173][ T9063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 971.041238][ T9063] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 971.053074][ T9063] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 971.099230][ T9067] veth3: entered promiscuous mode [ 971.114994][ T9067] bond1: (slave veth3): Enslaving as an active interface with a down link [ 971.125840][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9619'. [ 971.287750][ T9058] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.431761][ T9058] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.439412][ T9099] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 971.668743][ T9058] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.710742][ T9111] bond_slave_1: mtu less than device minimum [ 971.818384][ T9058] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.877879][ T9120] tipc: Enabled bearer , priority 0 [ 971.971332][ T9120] syzkaller0: entered promiscuous mode [ 971.987498][ T9120] syzkaller0: entered allmulticast mode [ 971.993944][ T9120] tipc: Resetting bearer [ 972.019432][ T9128] bond2: option resend_igmp: invalid value (268435462) [ 972.026983][ T9128] bond2: option resend_igmp: allowed values 0 - 255 [ 972.035412][ T9128] bond2 (unregistering): Released all slaves [ 972.158814][ T9124] bond2: option fail_over_mac: invalid value (16) [ 972.180058][ T9124] bond2 (unregistering): Released all slaves [ 972.296108][ T3563] tipc: Resetting bearer [ 972.316155][ T9130] syzkaller0: entered promiscuous mode [ 972.322563][ T9130] syzkaller0: entered allmulticast mode [ 972.331995][ T9134] tipc: Started in network mode [ 972.338212][ T9134] tipc: Node identity 1ae6307c29af, cluster identity 4711 [ 972.345720][ T9134] tipc: Enabled bearer , priority 0 [ 972.364613][ T9118] tipc: Resetting bearer [ 972.770106][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9638'. [ 972.795499][ T9152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9638'. [ 974.154801][ T9118] tipc: Disabling bearer [ 974.164647][ T9129] tipc: Resetting bearer [ 974.184919][ T9129] tipc: Disabling bearer [ 974.224247][ T5908] tipc: Node number set to 860434556 [ 974.224354][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9638'. [ 974.242816][ T3559] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 974.267204][ T9152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9638'. [ 974.300464][ T3559] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 974.322973][ T3559] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 974.398070][ T3559] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 974.413692][ T3559] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.436313][ T9158] bridge0: port 1(syz_tun) entered blocking state [ 974.444358][ T9158] bridge0: port 1(syz_tun) entered disabled state [ 974.466779][ T9158] syz_tun: entered allmulticast mode [ 974.480884][ T9158] syz_tun: entered promiscuous mode [ 974.501778][ T3560] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.511004][ T3560] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.600250][ T3564] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.625533][ T9166] syzkaller1: entered promiscuous mode [ 974.632443][ T9166] syzkaller1: entered allmulticast mode [ 974.698107][ T9176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9647'. [ 974.728944][ T9178] xt_hashlimit: size too large, truncated to 1048576 [ 975.059555][ T9186] netlink: 'syz.1.9649': attribute type 7 has an invalid length. [ 975.088107][ T9193] netlink: 'syz.4.9651': attribute type 23 has an invalid length. [ 977.098028][ T9218] netlink: 'syz.3.9658': attribute type 20 has an invalid length. [ 977.106096][ T9218] IPv6: NLM_F_CREATE should be specified when creating new route [ 977.163436][ T9223] nbd: nbd2 already in use [ 977.170717][ T9223] block nbd2: NBD_DISCONNECT [ 977.190885][ T9223] block nbd2: Send disconnect failed -32 [ 977.229521][ T9224] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 977.264629][ T9223] veth1_macvtap: left promiscuous mode [ 977.299193][ T3563] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.331176][ T3563] bridge_slave_0: left allmulticast mode [ 977.337446][ T3563] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.392452][ T3563] veth9: left allmulticast mode [ 977.409843][ T3563] veth9: left promiscuous mode [ 977.425165][ T3563] bridge6: port 1(veth9) entered disabled state [ 978.091574][ T3563] dvmrp0 (unregistering): left allmulticast mode [ 978.221838][ T9276] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9669'. [ 978.433927][ T9281] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9669'. [ 978.581388][ T3563]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 978.592119][ T3563]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 978.602805][ T3563]  (unregistering): Released all slaves [ 978.617232][ T3563] bond1 (unregistering): (slave lo): Releasing backup interface [ 978.625589][ T3563] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 978.640211][ T3563] bond1 (unregistering): Released all slaves [ 978.653801][ T3563] bond2 (unregistering): (slave team_slave_0): Releasing backup interface [ 978.664176][ T3563] bond2 (unregistering): Released all slaves [ 978.679765][ T3563] bond3 (unregistering): Released all slaves [ 978.693593][ T3563] bond4 (unregistering): Released all slaves [ 978.707404][ T3563] bond5 (unregistering): (slave veth5): Releasing active interface [ 978.720872][ T3563] bond5 (unregistering): Released all slaves [ 978.733749][ T3563] bond6 (unregistering): Released all slaves [ 978.749575][ T3563] bond0 (unregistering): Released all slaves [ 978.763789][ T3563] bond7 (unregistering): Released all slaves [ 978.779280][ T3563] bond8 (unregistering): Released all slaves [ 978.792632][ T3563] bond9 (unregistering): Released all slaves [ 978.831674][ T9249] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 978.841561][ T9253] netlink: 'syz.3.9661': attribute type 29 has an invalid length. [ 978.872565][ T9256] bridge3: entered promiscuous mode [ 978.878213][ T9256] bridge3: entered allmulticast mode [ 979.028670][ T3563] : left promiscuous mode [ 979.086563][ T9285] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 979.098312][ T9284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9670'. [ 979.107802][ T9284] netlink: 'syz.1.9670': attribute type 1 has an invalid length. [ 979.133953][ T9284] netlink: 'syz.1.9670': attribute type 2 has an invalid length. [ 979.146960][ T9284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9670'. [ 979.178455][ T9290] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9672'. [ 979.234362][ T9290] bond0 (unregistering): Released all slaves [ 979.366800][ T3563] tipc: Left network mode [ 979.699379][ T9320] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9682'. [ 979.744220][ T9322] netlink: 'syz.2.9683': attribute type 21 has an invalid length. [ 979.769755][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9683'. [ 979.951969][ T9332] netlink: 'syz.1.9686': attribute type 13 has an invalid length. [ 980.016943][ T9332] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9686'. [ 980.063678][ T9332] syz_tun: refused to change device tx_queue_len [ 980.105999][ T9344] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9688'. [ 980.115959][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9687'. [ 980.602013][ T3563] hsr_slave_0: left promiscuous mode [ 980.611152][ T3563] hsr_slave_1: left promiscuous mode [ 980.628351][ T3563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 980.635766][ T3563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 980.670344][ T3563] veth0_macvtap: left allmulticast mode [ 980.676277][ T3563] veth1_macvtap: left promiscuous mode [ 980.683907][ T3563] veth0_macvtap: left promiscuous mode [ 980.742218][ T9385] Cannot find del_set index 4 as target [ 980.784736][ T3563] pimreg3 (unregistering): left allmulticast mode [ 981.093735][ T9383] netlink: 'syz.4.9700': attribute type 4 has an invalid length. [ 981.274476][ T9399] netlink: 'syz.3.9705': attribute type 13 has an invalid length. [ 981.321585][ T9399] veth0_macvtap: left promiscuous mode [ 981.359697][ T9399] macvtap0: entered allmulticast mode [ 981.369176][ T9399] macvtap0: refused to change device tx_queue_len [ 981.642965][ T9421] mac80211_hwsim hwsim113 : renamed from wlan1 (while UP) [ 981.726855][ T9426] netlink: 'syz.1.9714': attribute type 5 has an invalid length. [ 981.861966][ T9433] netlink: 'syz.1.9715': attribute type 1 has an invalid length. [ 981.961195][ T9440] IPv6: sit1: Disabled Multicast RS [ 982.027395][ T9437] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 982.051349][ T9437] bond2: (slave lo): Enslaving as an active interface with an up link [ 982.087901][ T9437] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 982.161162][ T9445] wireguard1: entered promiscuous mode [ 982.183669][ T9445] wireguard1: entered allmulticast mode [ 982.250939][ T9445] team0: Device wireguard1 is of different type [ 982.312953][ T9460] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 982.325309][ T9460] bond2 (unregistering): Released all slaves [ 982.633866][ T9471] Cannot find set identified by id 0 to match [ 982.645142][ T9469] validate_nla: 3 callbacks suppressed [ 982.645160][ T9469] netlink: 'syz.3.9725': attribute type 1 has an invalid length. [ 982.834801][ T9489] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20000 [ 982.857015][ T9486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 982.974302][ T9500] tipc: Started in network mode [ 982.989630][ T9500] tipc: Node identity , cluster identity 4711 [ 982.996094][ T9500] tipc: Failed to set node id, please configure manually [ 983.004634][ T9500] tipc: Enabling of bearer rejected, failed to enable media [ 983.013456][ T9503] netlink: 'syz.3.9734': attribute type 1 has an invalid length. [ 983.229425][ T9521] netlink: 'syz.3.9738': attribute type 11 has an invalid length. [ 983.388353][ T9534] netlink: 'syz.3.9745': attribute type 2 has an invalid length. [ 983.400993][ T9534] syzkaller1: entered promiscuous mode [ 983.424369][ T9534] syzkaller1: entered allmulticast mode [ 983.494858][ T9542] __nla_validate_parse: 24 callbacks suppressed [ 983.494878][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9747'. [ 983.544448][ T9534] netlink: 766 bytes leftover after parsing attributes in process `syz.3.9745'. [ 983.809932][ T9564] netlink: 'syz.4.9756': attribute type 7 has an invalid length. [ 983.838968][ T9564] netlink: 140 bytes leftover after parsing attributes in process `syz.4.9756'. [ 983.902843][ T9567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9756'. [ 983.905398][ T9569] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.9757'. [ 983.939729][ T9569] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 983.949811][ T9574] batadv1: entered allmulticast mode [ 983.981994][ T9576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9760'. [ 984.058756][ T9578] batadv1: entered allmulticast mode [ 984.168001][ T9595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9765'. [ 984.222685][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9767'. [ 984.240995][ T9599] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.9768'. [ 984.275443][ T9597] netlink: 'syz.3.9767': attribute type 1 has an invalid length. [ 984.988114][ T9623] bond2: option all_slaves_active: invalid value (222) [ 985.019767][ T9623] bond2 (unregistering): Released all slaves [ 985.128218][ T9637] netlink: 830 bytes leftover after parsing attributes in process `syz.4.9778'. [ 985.247705][ T3565] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 985.278329][ T3565] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 985.297174][ T3565] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 985.319235][ T3565] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 985.367603][ T9647] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 985.645372][ T9664] vxcan2: entered promiscuous mode [ 985.935673][ T9691] netlink: 'syz.3.9798': attribute type 1 has an invalid length. [ 985.964375][ T9681] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 986.019154][ T9681] syzkaller0: entered promiscuous mode [ 986.035351][ T9681] syzkaller0: entered allmulticast mode [ 986.078366][ T9702] nbd: must specify a size in bytes for the device [ 986.296262][ T9726] openvswitch: netlink: Flow key attr not present in new flow. [ 986.308248][ T9727] xt_l2tp: invalid flags combination: 0 [ 986.477978][ T9734] netlink: 'syz.1.9811': attribute type 11 has an invalid length. [ 986.561646][ T9744] vlan3: entered promiscuous mode [ 986.569603][ T9744] geneve1: entered promiscuous mode [ 986.575594][ T9744] vlan3: entered allmulticast mode [ 986.580981][ T9744] geneve1: entered allmulticast mode [ 986.612954][ T9750] IPv6: sit1: Disabled Multicast RS [ 986.630492][ T9750] sit1: entered allmulticast mode [ 986.647276][ T9756] sctp: [Deprecated]: syz.1.9817 (pid 9756) Use of struct sctp_assoc_value in delayed_ack socket option. [ 986.647276][ T9756] Use struct sctp_sack_info instead [ 986.895384][ T9767] syzkaller1: entered promiscuous mode [ 986.946645][ T9767] syzkaller1: entered allmulticast mode [ 987.064310][ T9776] xt_limit: Overflow, try lower: 604147548/4200216962 [ 987.591791][ T9805] vxcan1 speed is unknown, defaulting to 1000 [ 987.772414][ T9829] nbd: illegal input index -8454144 [ 987.915663][ T9835] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 988.025696][ T9840] team0: No ports can be present during mode change [ 988.482671][ T9866] netlink: 'syz.3.9849': attribute type 1 has an invalid length. [ 988.504721][ T9866] __nla_validate_parse: 20 callbacks suppressed [ 988.504744][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9849'. [ 988.528877][ T9866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 988.549507][ T9866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 988.785330][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9856'. [ 988.821166][ T9890] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9857'. [ 988.835272][ T9890] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.842983][ T9890] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.911941][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9858'. [ 988.937288][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9858'. [ 989.000622][ T9900] netlink: 'syz.3.9860': attribute type 3 has an invalid length. [ 989.009943][ T9897] team0 (unregistering): Port device team_slave_0 removed [ 989.024616][ T9900] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9860'. [ 989.034685][ T9900] nbd: must specify at least one socket [ 989.039627][ T9897] team0 (unregistering): Port device team_slave_1 removed [ 989.131624][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9865'. [ 989.154503][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9865'. [ 989.398936][ T9928] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 989.434479][ T9929] xt_connbytes: Forcing CT accounting to be enabled [ 989.638141][ T9944] netlink: 'syz.2.9875': attribute type 12 has an invalid length. [ 989.659554][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9876'. [ 989.729934][ T9957] netlink: 'syz.4.9878': attribute type 9 has an invalid length. [ 989.738556][ T3553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.808519][ T9955] netlink: 'syz.3.9879': attribute type 1 has an invalid length. [ 989.905028][ T9969] netlink: 'syz.0.9882': attribute type 33 has an invalid length. [ 989.927314][ T9969] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9882'. [ 990.122470][ T9990] veth1_macvtap: left promiscuous mode [ 990.147071][ T9990] macsec0: entered promiscuous mode [ 990.170864][ T9990] macsec0: entered allmulticast mode [ 990.282189][ T3552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.292564][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.305929][T22567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.356239][ T9996] veth1_macvtap: entered promiscuous mode [ 990.363684][ T9996] veth1_macvtap: entered allmulticast mode [ 990.372351][ T9996] macsec0: left promiscuous mode [ 990.377631][ T9996] macsec0: left allmulticast mode [ 990.382673][ T9996] veth1_macvtap: left allmulticast mode [ 990.412094][T10005] netlink: 'syz.3.9891': attribute type 30 has an invalid length. [ 990.861875][ T3553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.011860][T10041] vlan0: entered allmulticast mode [ 991.022196][T10041] mac80211_hwsim hwsim112 wlan0: entered allmulticast mode [ 991.102546][T10056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.112389][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.155415][T10057] xt_SECMARK: invalid mode: 9 [ 991.638199][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.656224][T10050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.666316][T22575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.802441][T10111] pimreg: entered allmulticast mode [ 991.835594][T10115] netlink: 'syz.0.9928': attribute type 2 has an invalid length. [ 992.099162][T10129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 992.127592][T10136] netlink: 'syz.0.9931': attribute type 1 has an invalid length. [ 992.173108][ T3550] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 992.190733][ T3556] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 992.211134][ T3556] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 992.222694][ T3556] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 992.462825][T10162] IPv6: sit1: Disabled Multicast RS [ 992.515348][T10169] syzkaller1: entered promiscuous mode [ 992.526767][T10169] syzkaller1: entered allmulticast mode [ 992.775522][T10192] netlink: 'syz.2.9944': attribute type 1 has an invalid length. [ 992.926835][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 993.171097][T10211] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 993.333972][T10243] vlan4: entered allmulticast mode [ 993.420712][T10242] vlan4: entered allmulticast mode [ 993.498817][T10260] netlink: 'syz.0.9963': attribute type 1 has an invalid length. [ 993.516777][T10260] __nla_validate_parse: 36 callbacks suppressed [ 993.516797][T10260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9963'. [ 993.658122][T10268] syzkaller1: entered promiscuous mode [ 993.663627][T10268] syzkaller1: entered allmulticast mode [ 994.023286][T10296] netlink: 'syz.0.9975': attribute type 1 has an invalid length. [ 994.033280][T10296] netlink: 760 bytes leftover after parsing attributes in process `syz.0.9975'. [ 994.189905][T10300] netlink: 7 bytes leftover after parsing attributes in process `syz.0.9976'. [ 994.218422][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9979'. [ 994.444483][T10328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9984'. [ 994.454927][T10331] netlink: 'syz.0.9982': attribute type 2 has an invalid length. [ 994.480534][T10331] netlink: 244 bytes leftover after parsing attributes in process `syz.0.9982'. [ 994.506558][T10326] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9981'. [ 994.570768][T10335] bond2: (slave lo): Releasing backup interface [ 994.589797][T10335] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 994.655607][T10343] netlink: 'syz.0.9987': attribute type 15 has an invalid length. [ 994.661141][T10335] bridge_slave_0: left allmulticast mode [ 994.669318][T10343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9987'. [ 994.681710][T10344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 994.705904][T10335] bridge_slave_0: left promiscuous mode [ 994.726741][T10349] netlink: 'syz.0.9987': attribute type 15 has an invalid length. [ 994.748508][T10335] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.763600][T10349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9987'. [ 994.816843][T10335] bridge_slave_1: left allmulticast mode [ 994.839597][T10335] bridge_slave_1: left promiscuous mode [ 994.840520][ T10] net_ratelimit: 12 callbacks suppressed [ 994.840535][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.849874][T10335] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.893301][T10335] bond0: (slave bond_slave_0): Releasing backup interface [ 994.930436][T10335] bond0: (slave bond_slave_1): Releasing backup interface [ 994.972514][T10335] team0: Port device team_slave_0 removed [ 995.007200][T10335] team0: Port device team_slave_1 removed [ 995.014291][T10335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 995.023064][T10335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 995.034593][T10335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 995.043282][T10335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 995.053484][T10335] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 995.186878][T10363] netlink: 1128 bytes leftover after parsing attributes in process `syz.4.9991'. [ 995.327822][ T3552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.356969][T10378] netlink: 'syz.3.9996': attribute type 1 has an invalid length. [ 995.365081][T10379] netlink: 'syz.3.9996': attribute type 1 has an invalid length. [ 995.384140][T10379] netlink: 'syz.3.9996': attribute type 2 has an invalid length. [ 995.392319][T10378] netlink: 'syz.3.9996': attribute type 2 has an invalid length. [ 995.401063][T10379] netlink: 'syz.3.9996': attribute type 1 has an invalid length. [ 995.471356][T10381] ipt_rpfilter: unknown options [ 995.567184][T10389] openvswitch: netlink: Flow actions attr not present in new flow. [ 995.615629][T10393] bridge0: port 3(ipvlan2) entered blocking state [ 995.623954][T10393] bridge0: port 3(ipvlan2) entered disabled state [ 995.631444][T10393] ipvlan2: entered allmulticast mode [ 995.639949][T10393] bridge0: entered allmulticast mode [ 995.649105][T10393] ipvlan2: left allmulticast mode [ 995.654163][T10393] bridge0: left allmulticast mode [ 995.764149][T10403] 8021q: adding VLAN 0 to HW filter on device bond4 [ 995.781077][T10403] bond3: (slave bond4): making interface the new active one [ 995.789382][T10403] bond3: (slave bond4): Enslaving as an active interface with an up link [ 995.816494][T10391] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 995.885792][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.903776][ T10] IPVS: starting estimator thread 0... [ 996.016795][T10414] IPVS: using max 27 ests per chain, 64800 per kthread [ 996.036991][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.046243][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.055324][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.162284][T10421] syzkaller1: entered promiscuous mode [ 996.170777][T10421] syzkaller1: entered allmulticast mode [ 996.179766][T10421] openvswitch: netlink: Missing valid actions attribute. [ 996.189302][T10421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 997.446246][T10501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 997.477134][T10501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 997.760165][T10501] bond1: left promiscuous mode [ 997.765394][T10501] bond1: left allmulticast mode [ 997.774522][T10501] bridge0: left allmulticast mode [ 997.862278][ T3556] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.885910][ T3556] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.906337][ T3556] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.916233][ T3556] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.925415][ T3556] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.936453][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 997.944515][ C1] lec:lec_tx_timeout: lec0 [ 997.944563][ T3556] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.949257][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 997.965434][ T3556] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.976017][ T3556] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.034212][T10521] sctp: [Deprecated]: syz.2.10042 (pid 10521) Use of struct sctp_assoc_value in delayed_ack socket option. [ 998.034212][T10521] Use struct sctp_sack_info instead [ 998.062794][T10527] sctp: [Deprecated]: syz.2.10042 (pid 10527) Use of struct sctp_assoc_value in delayed_ack socket option. [ 998.062794][T10527] Use struct sctp_sack_info instead [ 998.100638][T10529] IPv6: sit1: Disabled Multicast RS [ 998.109931][T10529] sit1: entered allmulticast mode [ 998.345236][T10544] vcan0: tx address claim with dlc 0 [ 998.430848][ T3552] tipc: Subscription rejected, illegal request [ 998.548509][T10554] __nla_validate_parse: 17 callbacks suppressed [ 998.548529][T10554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10052'. [ 998.578122][T10559] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10054'. [ 998.771447][T10566] bond1: option miimon: invalid value (18446744073709551585) [ 998.789209][T10566] bond1: option miimon: allowed values 0 - 2147483647 [ 998.810633][T10566] bond1 (unregistering): Released all slaves [ 998.931540][T10574] validate_nla: 8 callbacks suppressed [ 998.931559][T10574] netlink: 'syz.4.10057': attribute type 32 has an invalid length. [ 998.946950][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10057'. [ 998.979635][T10574] bond3: option coupled_control: invalid value (109) [ 998.988499][T10574] bond3 (unregistering): Released all slaves [ 999.017348][T10577] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 999.025364][T10577] team0: Device macvlan2 is already an upper device of the team interface [ 999.139370][T10581] netlink: 2 bytes leftover after parsing attributes in process `syz.4.10060'. [ 999.178025][T10582] sch_fq: defrate 0 ignored. [ 999.275485][T10587] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 999.293033][T10587] bond2 (unregistering): Released all slaves [ 999.329589][T10582] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10059'. [ 999.345873][T10594] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10059'. [ 999.433227][T10605] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 999.447205][T10603] tipc: Enabled bearer , priority 0 [ 999.499281][T10603] syzkaller0: entered promiscuous mode [ 999.515066][T10603] syzkaller0: entered allmulticast mode [ 999.522024][T10603] tipc: Resetting bearer [ 999.551847][T10603] netlink: 11 bytes leftover after parsing attributes in process `syz.3.10064'. [ 999.567050][T10618] xt_ipcomp: unknown flags 1D [ 999.567423][T10603] netlink: 11 bytes leftover after parsing attributes in process `syz.3.10064'. [ 999.581055][T10617] xt_ipcomp: unknown flags 1D [ 999.582801][T10618] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.10068'. [ 999.596003][T10603] netlink: 11 bytes leftover after parsing attributes in process `syz.3.10064'. [ 999.609827][T10602] tipc: Resetting bearer [ 1000.522018][ T5880] net_ratelimit: 17 callbacks suppressed [ 1000.522047][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.937599][ T3553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.305110][T10602] tipc: Disabling bearer [ 1001.358955][T10639] bridge0: port 3(batadv1) entered blocking state [ 1001.365587][T10639] bridge0: port 3(batadv1) entered disabled state [ 1001.390646][T10639] batadv1: entered allmulticast mode [ 1001.398309][T10639] batadv1: entered promiscuous mode [ 1001.573099][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.749689][T10672] netlink: 'syz.1.10085': attribute type 1 has an invalid length. [ 1001.778278][T10674] netlink: 'syz.1.10085': attribute type 1 has an invalid length. [ 1001.842413][ T3556] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1001.853496][ T3556] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1001.900454][T10674] bond1: entered promiscuous mode [ 1001.926249][T10674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1002.010013][T10681] bond1: (slave bridge2): making interface the new active one [ 1002.018089][T10681] bridge2: entered promiscuous mode [ 1002.025188][T10681] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1002.048264][ T3551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.245784][T10701] syzkaller0: entered promiscuous mode [ 1002.253025][T10701] syzkaller0: entered allmulticast mode [ 1002.263548][T10703] veth0: entered promiscuous mode [ 1002.438573][T10514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.507062][T10705] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1002.616583][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.966379][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1002.974492][ C1] lec:lec_tx_timeout: lec0 [ 1003.022497][T10730] netlink: 'syz.4.10100': attribute type 1 has an invalid length. [ 1003.048457][T10730] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1003.093484][T10730] bond3: (slave geneve2): making interface the new active one [ 1003.102948][T10730] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1003.114188][T10702] veth0: left promiscuous mode [ 1003.124179][T22399] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1003.133637][T22399] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1003.167826][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.180350][ T3551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.217502][T22399] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1003.250192][T22399] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1003.481438][T10752] gretap0: entered promiscuous mode [ 1003.660622][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.851116][T10782] siw: device registration error -23 [ 1003.861084][T10784] netlink: 'syz.1.10113': attribute type 39 has an invalid length. [ 1004.034633][T10793] netlink: 'syz.4.10116': attribute type 1 has an invalid length. [ 1004.118928][T10793] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1004.259950][T10809] bond2: option fail_over_mac: invalid value (16) [ 1004.282421][T10809] bond2 (unregistering): Released all slaves [ 1004.332318][ T3550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.461984][T10832] __nla_validate_parse: 6 callbacks suppressed [ 1004.462002][T10832] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10127'. [ 1004.479002][T10832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10127'. [ 1004.488146][T10832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10127'. [ 1004.500405][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10127'. [ 1004.541242][T10836] netlink: 'syz.0.10129': attribute type 2 has an invalid length. [ 1004.549726][T10836] netlink: 100 bytes leftover after parsing attributes in process `syz.0.10129'. [ 1005.246805][ T5141] Bluetooth: hci2: command 0x0401 tx timeout [ 1005.717043][T10513] net_ratelimit: 5 callbacks suppressed [ 1005.717060][T10513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.546953][ T3551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.756740][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.767962][T10513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.030845][T10796] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1007.210687][T10845] gretap0: left promiscuous mode [ 1007.258843][T10852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10135'. [ 1007.301839][T10845] netlink: 'syz.4.10133': attribute type 2 has an invalid length. [ 1007.367007][T10852] bond2: entered promiscuous mode [ 1007.373296][T10852] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1007.405299][T10855] bridge4: entered promiscuous mode [ 1007.411525][T10855] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 1007.449798][T10852] macvlan2: entered promiscuous mode [ 1007.457911][T10852] macvlan2: entered allmulticast mode [ 1007.464222][T10852] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 1007.511435][T10874] netlink: 'syz.4.10139': attribute type 10 has an invalid length. [ 1007.536935][T10861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10137'. [ 1007.554490][T10878] Cannot find add_set index 1 as target [ 1007.589014][T10866] xt_ecn: cannot match TCP bits for non-tcp packets [ 1007.637080][ T5202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.652274][ T3550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.797922][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.869378][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10146'. [ 1007.891965][T10899] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10145'. [ 1007.922921][T10899] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10145'. [ 1008.163821][T10912] netlink: 'syz.0.10151': attribute type 12 has an invalid length. [ 1008.225205][T10923] netlink: 'syz.1.10152': attribute type 16 has an invalid length. [ 1008.273574][T10925] hsr_slave_0: left promiscuous mode [ 1008.296765][T10925] hsr_slave_1: left promiscuous mode [ 1008.299502][ T5202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.516643][ T5202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.806797][ T3551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.128799][T10989] netlink: 'syz.2.10168': attribute type 1 has an invalid length. [ 1009.579944][T11011] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1009.647901][T11011] bond2: (slave lo): Enslaving as an active interface with an up link [ 1009.694119][T11026] tipc: Enabling of bearer rejected, failed to enable media [ 1009.706246][T11032] __nla_validate_parse: 15 callbacks suppressed [ 1009.706267][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10183'. [ 1009.754252][T11032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10183'. [ 1009.782635][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10183'. [ 1009.801400][T11032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10183'. [ 1009.874461][T11040] bond3: entered allmulticast mode [ 1009.894049][T11040] netlink: 80 bytes leftover after parsing attributes in process `syz.3.10185'. [ 1010.110864][T11051] xt_connbytes: Forcing CT accounting to be enabled [ 1010.260476][T11067] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10193'. [ 1010.350128][T11070] netlink: 204 bytes leftover after parsing attributes in process `syz.4.10195'. [ 1010.380895][T11075] netlink: 'syz.3.10194': attribute type 1 has an invalid length. [ 1010.396521][T11075] netlink: 212 bytes leftover after parsing attributes in process `syz.3.10194'. [ 1010.809075][T11100] netlink: 'syz.3.10204': attribute type 23 has an invalid length. [ 1010.918279][ T10] net_ratelimit: 6 callbacks suppressed [ 1010.918299][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.936571][T11111] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20001 [ 1010.957883][T11113] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10208'. [ 1010.992934][T11112] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10208'. [ 1011.045215][T11119] netlink: 'syz.4.10209': attribute type 1 has an invalid length. [ 1011.056964][ T3552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.088831][T11119] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1011.097058][T11121] netlink: 'syz.4.10209': attribute type 10 has an invalid length. [ 1011.098419][T11118] syzkaller0: entered promiscuous mode [ 1011.111096][T11118] syzkaller0: entered allmulticast mode [ 1011.163892][T10514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.239915][ T5830] block nbd2: Receive control failed (result -1) [ 1011.283771][T11127] tipc: Enabling of bearer rejected, failed to enable media [ 1011.359756][T11133] netlink: 'syz.1.10215': attribute type 1 has an invalid length. [ 1011.377691][T11133] netlink: 'syz.1.10215': attribute type 2 has an invalid length. [ 1011.415570][T11133] netlink: 'syz.1.10215': attribute type 1 has an invalid length. [ 1011.460187][T11133] netlink: 'syz.1.10215': attribute type 1 has an invalid length. [ 1011.553135][T11144] syzkaller1: entered promiscuous mode [ 1011.597462][T11144] syzkaller1: entered allmulticast mode [ 1011.636674][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.677979][T11151] netlink: 'syz.2.10220': attribute type 1 has an invalid length. [ 1011.966724][T10513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.168039][T10050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.318767][T11197] nbd: couldn't find a device at index 0 [ 1012.635963][T11221] openvswitch: netlink: IPv4 tun info is not correct [ 1012.694535][T11222] bridge6: port 1(veth0_to_bond) entered blocking state [ 1012.715933][T11222] bridge6: port 1(veth0_to_bond) entered disabled state [ 1012.724923][T11222] veth0_to_bond: entered allmulticast mode [ 1012.733255][T11222] veth0_to_bond: entered promiscuous mode [ 1012.968414][T11236] FAULT_INJECTION: forcing a failure. [ 1012.968414][T11236] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1012.986591][T11236] CPU: 0 UID: 0 PID: 11236 Comm: syz.0.10250 Not tainted syzkaller #0 PREEMPT(full) [ 1012.986616][T11236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1012.986627][T11236] Call Trace: [ 1012.986634][T11236] [ 1012.986646][T11236] dump_stack_lvl+0xe8/0x150 [ 1012.986678][T11236] should_fail_ex+0x412/0x560 [ 1012.986704][T11236] _copy_from_user+0x2d/0xb0 [ 1012.986727][T11236] ___sys_sendmsg+0x1c6/0x360 [ 1012.986757][T11236] ? __pfx____sys_sendmsg+0x10/0x10 [ 1012.986815][T11236] ? __fget_files+0x2a/0x420 [ 1012.986840][T11236] ? __fget_files+0x3a0/0x420 [ 1012.986871][T11236] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1012.986897][T11236] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1012.986929][T11236] ? __pfx_ksys_write+0x10/0x10 [ 1012.986959][T11236] do_syscall_64+0x14d/0xf80 [ 1012.986985][T11236] ? trace_irq_disable+0x3b/0x150 [ 1012.987010][T11236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.987028][T11236] ? clear_bhb_loop+0x40/0x90 [ 1012.987050][T11236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.987067][T11236] RIP: 0033:0x7f149579c629 [ 1012.987085][T11236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1012.987100][T11236] RSP: 002b:00007f14966a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1012.987119][T11236] RAX: ffffffffffffffda RBX: 00007f1495a15fa0 RCX: 00007f149579c629 [ 1012.987131][T11236] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 1012.987143][T11236] RBP: 00007f14966a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1012.987154][T11236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1012.987165][T11236] R13: 00007f1495a16038 R14: 00007f1495a15fa0 R15: 00007ffcf306f198 [ 1012.987194][T11236] [ 1013.356680][T10513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.396767][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.413310][ T3551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.727179][T11251] nbd: nbd64 already in use [ 1013.761014][T11259] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 1014.039354][T11276] syzkaller0: entered promiscuous mode [ 1014.045597][T11276] syzkaller0: entered allmulticast mode [ 1014.054777][T11276] veth0: entered promiscuous mode [ 1014.181875][T11261] udevd[11261]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1014.192523][T11287] validate_nla: 5 callbacks suppressed [ 1014.192541][T11287] netlink: 'syz.1.10264': attribute type 11 has an invalid length. [ 1014.250647][T11274] veth0: left promiscuous mode [ 1014.477421][T11303] gretap0: entered promiscuous mode [ 1014.491776][T11303] gretap0: left promiscuous mode [ 1014.743002][T11324] netlink: 'syz.2.10275': attribute type 1 has an invalid length. [ 1014.754841][T11324] __nla_validate_parse: 16 callbacks suppressed [ 1014.754853][T11324] netlink: 184 bytes leftover after parsing attributes in process `syz.2.10275'. [ 1014.951637][T11334] netlink: 'syz.1.10278': attribute type 58 has an invalid length. [ 1014.984114][T11334] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10278'. [ 1015.161444][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10285'. [ 1015.215503][T11359] netlink: 116 bytes leftover after parsing attributes in process `syz.0.10287'. [ 1015.355186][T11368] netlink: 472 bytes leftover after parsing attributes in process `syz.1.10289'. [ 1015.435315][T11378] netlink: 'syz.1.10289': attribute type 21 has an invalid length. [ 1015.443712][T11378] IPv6: NLM_F_CREATE should be specified when creating new route [ 1015.452054][T11378] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1015.459324][T11378] IPv6: NLM_F_CREATE should be set when creating new route [ 1015.466615][T11378] IPv6: NLM_F_CREATE should be set when creating new route [ 1015.473846][T11378] IPv6: NLM_F_CREATE should be set when creating new route [ 1015.477083][ T5141] Bluetooth: hci3: command 0x0406 tx timeout [ 1015.517340][T11378] netlink: 'syz.1.10289': attribute type 21 has an invalid length. [ 1015.545869][T11378] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1015.783324][T11404] netlink: 45 bytes leftover after parsing attributes in process `syz.0.10298'. [ 1015.950130][T11419] ip6t_srh: unknown srh match flags 5F28 [ 1015.963636][T11420] net_ratelimit: 7 callbacks suppressed [ 1015.963659][T11420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.979241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.028922][T11426] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10306'. [ 1016.080501][T11427] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10306'. [ 1016.080758][T11426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.097155][T11426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.102731][T11430] netlink: 164 bytes leftover after parsing attributes in process `syz.1.10307'. [ 1016.115041][T11427] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.122324][T11427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1016.129887][T11427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.137098][T11427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1016.142221][T11434] openvswitch: netlink: Key type 31 is not supported [ 1016.184830][T11427] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10306'. [ 1016.227459][T11427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.234810][T11427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.501848][T11454] syzkaller0: entered promiscuous mode [ 1016.508832][T11454] syzkaller0: entered allmulticast mode [ 1016.515528][T11461] nbd: couldn't find a device at index 0 [ 1016.524086][T10513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.542894][T11461] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1016.852305][ T3550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.242598][ T5202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.556683][T10513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.880329][T10514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.960676][ T3552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.517325][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.688191][T11502] sctp: [Deprecated]: syz.4.10333 (pid 11502) Use of int in maxseg socket option. [ 1018.688191][T11502] Use struct sctp_assoc_value instead [ 1018.747276][T11508] sctp: [Deprecated]: syz.4.10333 (pid 11508) Use of int in maxseg socket option. [ 1018.747276][T11508] Use struct sctp_assoc_value instead [ 1018.753182][T11503] vxcan1 speed is unknown, defaulting to 1000 [ 1018.967003][T11531] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1019.060001][T11535] netlink: 'syz.4.10339': attribute type 1 has an invalid length. [ 1019.134383][T11535] bond6: entered promiscuous mode [ 1019.140244][T11535] bond6: entered allmulticast mode [ 1019.145950][T11535] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1019.171850][T11542] nbd: couldn't find a device at index 0 [ 1019.261124][T11539] netlink: 'syz.0.10341': attribute type 2 has an invalid length. [ 1019.270680][T11539] netlink: 'syz.0.10341': attribute type 8 has an invalid length. [ 1019.382382][T11550] tipc: Started in network mode [ 1019.390883][T11550] tipc: Node identity 8e26a8fc5b47, cluster identity 4711 [ 1019.398959][T11550] tipc: Enabled bearer , priority 0 [ 1019.438044][T11557] Cannot find add_set index 5 as target [ 1019.502548][T11554] syzkaller0: entered promiscuous mode [ 1019.508317][T11554] syzkaller0: entered allmulticast mode [ 1019.514752][T11554] tipc: Resetting bearer [ 1019.561984][T11564] netlink: 'syz.3.10347': attribute type 15 has an invalid length. [ 1019.581118][ T3552] tipc: Resetting bearer [ 1019.607279][T11554] tipc: Resetting bearer [ 1019.865262][T11573] __nla_validate_parse: 5 callbacks suppressed [ 1019.865283][T11573] netlink: 165 bytes leftover after parsing attributes in process `syz.2.10351'. [ 1021.297051][ T3556] net_ratelimit: 6 callbacks suppressed [ 1021.297071][ T3556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.526873][T11554] tipc: Disabling bearer [ 1021.535418][T11564] mac80211_hwsim hwsim107 : renamed from wlan1 (while UP) [ 1021.599620][T10514] tipc: Node number set to 3579947260 [ 1021.718394][T10513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.727518][T11588] netlink: 'syz.4.10355': attribute type 16 has an invalid length. [ 1021.727634][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.735621][T11588] netlink: 'syz.4.10355': attribute type 17 has an invalid length. [ 1021.989037][T11588] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1022.201193][T11612] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10363'. [ 1022.364503][T11623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10367'. [ 1022.374820][T11625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10367'. [ 1022.386809][T11626] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10368'. [ 1022.399453][T11627] netlink: 'syz.4.10366': attribute type 1 has an invalid length. [ 1022.417236][T22399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.425782][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10366'. [ 1022.442303][T11626] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1022.443059][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10366'. [ 1022.462638][T11627] netlink: 'syz.4.10366': attribute type 2 has an invalid length. [ 1022.518596][T11627] netlink: 'syz.4.10366': attribute type 2 has an invalid length. [ 1022.527028][T11627] netlink: 'syz.4.10366': attribute type 2 has an invalid length. [ 1022.543794][T11637] netlink: 58 bytes leftover after parsing attributes in process `syz.1.10369'. [ 1022.692791][T11642] netlink: 'syz.2.10370': attribute type 3 has an invalid length. [ 1022.702127][T11644] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10371'. [ 1022.727484][T11642] netlink: 244 bytes leftover after parsing attributes in process `syz.2.10370'. [ 1022.759658][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.865698][T11657] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1023.365897][T11681] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1023.534044][T11694] bond6: entered promiscuous mode [ 1023.539702][T11694] bond6: entered allmulticast mode [ 1023.545756][T11694] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1023.559168][ T3552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.565127][T11694] erspan1: entered allmulticast mode [ 1023.579306][T11694] bond6: (slave erspan1): making interface the new active one [ 1023.587128][T11694] erspan1: entered promiscuous mode [ 1023.593993][T11694] bond6: (slave erspan1): Enslaving as an active interface with an up link [ 1023.786197][T11715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1023.816776][T10513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.871317][T11719] tipc: Started in network mode [ 1023.886464][T11719] tipc: Node identity a2c52488407a, cluster identity 4711 [ 1023.896794][T11719] tipc: Enabled bearer , priority 11 [ 1023.972196][T11719] wireguard0: entered promiscuous mode [ 1023.980088][T11719] wireguard0: entered allmulticast mode [ 1023.989265][T11719] team0: Device wireguard0 is of different type [ 1024.123130][T11729] IPv6: sit3: Disabled Multicast RS [ 1024.135756][T11729] sit3: entered allmulticast mode [ 1024.219959][T11735] x_tables: duplicate underflow at hook 1 [ 1024.447078][T11752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1024.623235][T11765] validate_nla: 2 callbacks suppressed [ 1024.623266][T11765] netlink: 'syz.2.10408': attribute type 1 has an invalid length. [ 1024.642691][T11765] netlink: 'syz.2.10408': attribute type 1 has an invalid length. [ 1024.653655][T11765] netlink: 'syz.2.10408': attribute type 8 has an invalid length. [ 1024.788267][T11782] netlink: 'syz.3.10413': attribute type 1 has an invalid length. [ 1024.811084][T11783] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 1024.959414][T11791] __nla_validate_parse: 13 callbacks suppressed [ 1024.959433][T11791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10417'. [ 1024.975283][T11791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10417'. [ 1024.985642][T11791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10417'. [ 1025.018903][T11798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10420'. [ 1025.042093][ T5908] tipc: Node number set to 3804177544 [ 1025.059345][T11797] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10419'. [ 1025.125091][T11805] netlink: 'syz.1.10420': attribute type 1 has an invalid length. [ 1025.141083][T11805] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10420'. [ 1025.168761][T11807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10423'. [ 1025.245423][T11815] netlink: 'syz.0.10425': attribute type 21 has an invalid length. [ 1025.272746][T11813] netlink: 10 bytes leftover after parsing attributes in process `syz.2.10424'. [ 1025.286193][T11818] netlink: 'syz.4.10426': attribute type 1 has an invalid length. [ 1025.304836][T11815] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10425'. [ 1025.321522][T11820] netlink: 80 bytes leftover after parsing attributes in process `syz.3.10427'. [ 1025.404677][T11818] bond7: entered promiscuous mode [ 1025.413582][T11818] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1025.436247][T11822] bond7: (slave bridge6): making interface the new active one [ 1025.444015][T11822] bridge6: entered promiscuous mode [ 1025.451483][T11822] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 1025.552715][T11832] macvtap1: entered promiscuous mode [ 1025.572612][T11832] vlan0: entered promiscuous mode [ 1025.579827][T11832] macvtap1: entered allmulticast mode [ 1025.589675][T11832] vlan0: entered allmulticast mode [ 1025.595002][T11832] veth0_vlan: entered allmulticast mode [ 1025.633841][T11840] netlink: 'syz.4.10431': attribute type 83 has an invalid length. [ 1026.544217][T11889] net_ratelimit: 7 callbacks suppressed [ 1026.544275][T11889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.567929][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.592612][T11889] tipc: Enabled bearer , priority 10 [ 1026.616999][T11891] syz_tun: entered allmulticast mode [ 1026.669726][T11890] syz_tun: left allmulticast mode [ 1026.677795][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.849215][T11901] vxcan1 speed is unknown, defaulting to 1000 [ 1026.912143][ T3550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.921661][T10513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.946965][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.245894][T11935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.317711][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.331840][T11939] openvswitch: netlink: Flow key attr not present in new flow. [ 1027.381135][T11939] veth0: entered promiscuous mode [ 1027.436210][T11909] vxcan1 speed is unknown, defaulting to 1000 [ 1027.476808][ T5141] Bluetooth: hci4: command 0x0419 tx timeout [ 1027.477800][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.518623][T11939] veth0: left promiscuous mode [ 1027.873118][T11970] syzkaller1: entered promiscuous mode [ 1027.882256][T11970] syzkaller1: entered allmulticast mode [ 1027.908151][T11973] syzkaller0: entered promiscuous mode [ 1027.921894][T11973] syzkaller0: entered allmulticast mode [ 1027.939616][T11970] x_tables: unsorted underflow at hook 1 [ 1028.038010][T11980] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1028.111772][T11982] SET target dimension over the limit! [ 1028.243905][T11987] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20001 [ 1028.869595][T12024] netlink: 'syz.1.10493': attribute type 1 has an invalid length. [ 1028.982907][T12024] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1029.140531][T12024] bond2: (slave gretap1): making interface the new active one [ 1029.154362][T12024] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1029.705176][T12069] netlink: 'syz.2.10506': attribute type 1 has an invalid length. [ 1029.821129][T12069] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1029.872949][T12084] bond7: (slave geneve3): making interface the new active one [ 1029.883271][T12084] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 1029.947434][ T3550] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.968352][ T3550] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.013071][T12094] tipc: Enabling of bearer rejected, failed to enable media [ 1030.025416][T12086] tipc: Enabling of bearer rejected, failed to enable media [ 1030.053031][ T3550] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.053943][T12102] netlink: 'syz.1.10517': attribute type 10 has an invalid length. [ 1030.068814][ T3550] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.314119][T12126] __nla_validate_parse: 21 callbacks suppressed [ 1030.314144][T12126] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10524'. [ 1030.513350][T12133] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1030.851473][ T6787] Bluetooth: hci5: command 0x0419 tx timeout [ 1030.972710][T12162] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1030.980035][T12162] IPv6: NLM_F_CREATE should be set when creating new route [ 1030.987296][T12162] IPv6: NLM_F_CREATE should be set when creating new route [ 1030.995479][T12162] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1031.213723][T12172] syzkaller0: entered promiscuous mode [ 1031.223206][T12172] syzkaller0: entered allmulticast mode [ 1031.562841][T12194] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10545'. [ 1031.575431][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10545'. [ 1031.646918][ C1] net_ratelimit: 14 callbacks suppressed [ 1031.646964][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.121727][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.279065][ T5830] Bluetooth: hci4: command 0x0419 tx timeout [ 1032.576647][ T3553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.677171][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.168081][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.283014][T12208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.327240][T12213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10549'. [ 1033.463245][T12202] vxcan1 speed is unknown, defaulting to 1000 [ 1033.470571][T12213] netlink: 'syz.4.10549': attribute type 1 has an invalid length. [ 1033.479247][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10549'. [ 1033.677147][T22399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.727017][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.883753][T10514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.898518][T12238] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1033.905951][T12238] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1034.145024][T12253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1034.435733][T12278] netlink: 'syz.4.10570': attribute type 1 has an invalid length. [ 1034.445088][T12278] netlink: 16179 bytes leftover after parsing attributes in process `syz.4.10570'. [ 1034.521090][T12282] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10573'. [ 1034.684762][T12292] netlink: 'syz.1.10575': attribute type 21 has an invalid length. [ 1035.083946][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10585'. [ 1035.103554][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10585'. [ 1035.295827][T12336] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10591'. [ 1035.303283][ T5908] IPVS: starting estimator thread 0... [ 1035.322318][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10590'. [ 1035.333242][T12336] veth0_to_team: entered promiscuous mode [ 1035.341567][T12336] veth0_to_team: left promiscuous mode [ 1035.357274][T12342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10590'. [ 1035.372389][T12342] netlink: 2 bytes leftover after parsing attributes in process `syz.4.10590'. [ 1035.390805][T12347] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10590'. [ 1035.398382][T12342] bridge_slave_0: entered allmulticast mode [ 1035.406939][T12342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10590'. [ 1035.419290][T12342] netlink: 2 bytes leftover after parsing attributes in process `syz.4.10590'. [ 1035.436883][T12340] IPVS: using max 36 ests per chain, 86400 per kthread [ 1035.582152][T12359] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1035.785854][T12384] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10601'. [ 1035.813666][T12383] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10601'. [ 1035.886298][T12374] netlink: 294 bytes leftover after parsing attributes in process `syz.1.10598'. [ 1035.905958][T12388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10602'. [ 1035.984676][T12396] sctp: [Deprecated]: syz.2.10604 (pid 12396) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1035.984676][T12396] Use struct sctp_sack_info instead [ 1036.207205][T12415] ipt_ECN: cannot use operation on non-tcp rule [ 1036.285711][T12421] sctp: [Deprecated]: syz.0.10610 (pid 12421) Use of int in maxseg socket option. [ 1036.285711][T12421] Use struct sctp_assoc_value instead [ 1036.541783][T12442] geneve2: entered promiscuous mode [ 1036.578364][T12442] geneve2: entered allmulticast mode [ 1036.585424][T12454] netlink: 'syz.0.10620': attribute type 6 has an invalid length. [ 1036.704591][T12461] net_ratelimit: 8 callbacks suppressed [ 1036.704612][T12461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1036.770131][T12455] bond3: entered promiscuous mode [ 1036.779554][T12472] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 1036.794909][T12472] nbd: couldn't find a device at index 0 [ 1036.809627][T12463] bond0: entered promiscuous mode [ 1036.814747][T12463] bond_slave_0: entered promiscuous mode [ 1036.821356][T12463] bond_slave_1: entered promiscuous mode [ 1036.837207][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.879338][T12471] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1036.916908][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.953259][T12475] tipc: Enabled bearer , priority 0 [ 1036.989313][T12475] syzkaller0: entered promiscuous mode [ 1036.995312][T12475] syzkaller0: entered allmulticast mode [ 1037.023796][T12483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1037.048566][T22399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.073289][T12486] erspan0: entered promiscuous mode [ 1037.083746][T12474] tipc: Resetting bearer [ 1037.090034][T10514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.182414][T12474] tipc: Disabling bearer [ 1037.325807][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.337434][T12498] xt_hashlimit: overflow, try lower: 3/0 [ 1037.647628][T12525] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1037.749381][T12527] netlink: 'syz.4.10645': attribute type 1 has an invalid length. [ 1037.761341][T12527] netlink: 'syz.4.10645': attribute type 2 has an invalid length. [ 1037.782296][T12527] netlink: 'syz.4.10645': attribute type 1 has an invalid length. [ 1037.792365][T12527] netlink: 'syz.4.10645': attribute type 3 has an invalid length. [ 1037.877176][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.888322][T12533] netlink: 'syz.3.10647': attribute type 1 has an invalid length. [ 1037.924534][T12533] syzkaller0: entered promiscuous mode [ 1037.930411][T12533] syzkaller0: entered allmulticast mode [ 1037.948240][T12533] tipc: Enabled bearer , priority 0 [ 1038.128356][T12532] tipc: Resetting bearer [ 1038.177261][ T3552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.231988][T12532] tipc: Disabling bearer [ 1038.273242][T12552] netlink: 'syz.0.10653': attribute type 1 has an invalid length. [ 1038.428851][T12559] syzkaller0: entered promiscuous mode [ 1038.434397][T12559] syzkaller0: entered allmulticast mode [ 1038.452283][T12562] xt_hashlimit: size too large, truncated to 1048576 [ 1038.811848][T12587] netlink: 'syz.4.10664': attribute type 2 has an invalid length. [ 1039.039716][T12599] syzkaller1: entered promiscuous mode [ 1039.045241][T12599] syzkaller1: entered allmulticast mode [ 1039.058437][T12599] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 1039.548547][T12631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1039.563880][T12631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1039.573456][T12631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1039.581413][T12631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1039.936226][T12649] netlink: 'syz.1.10686': attribute type 3 has an invalid length. [ 1039.965575][T12649] netlink: 'syz.1.10686': attribute type 1 has an invalid length. [ 1040.549980][T12697] sctp: [Deprecated]: syz.0.10701 (pid 12697) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1040.549980][T12697] Use struct sctp_sack_info instead [ 1040.589558][T12697] __nla_validate_parse: 57 callbacks suppressed [ 1040.589572][T12697] netlink: 228 bytes leftover after parsing attributes in process `syz.0.10701'. [ 1040.641949][T12701] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1040.644898][T12703] Cannot find del_set index 4 as target [ 1040.676139][T12701] bond4: (slave lo): Enslaving as an active interface with an up link [ 1040.688476][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10701'. [ 1040.742908][T12698] bond4: option mode: unable to set because the bond device has slaves [ 1040.842640][T12717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10709'. [ 1040.911322][T12721] siw: device registration error -23 [ 1040.935128][T12722] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10709'. [ 1040.948627][T12722] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10709'. [ 1041.077401][ T5141] Bluetooth: hci1: command 0x0406 tx timeout [ 1041.105827][T12736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10715'. [ 1041.193816][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10717'. [ 1041.232447][T12743] netlink: 54 bytes leftover after parsing attributes in process `syz.0.10716'. [ 1041.256943][T12742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10717'. [ 1041.278306][T12743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10716'. [ 1041.301290][T12742] geneve4: entered promiscuous mode [ 1041.306692][T12742] geneve4: entered allmulticast mode [ 1041.317100][ T3551] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1041.325740][ T3551] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1041.369456][ T3551] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1041.417336][ T3551] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1042.908294][T12839] net_ratelimit: 18 callbacks suppressed [ 1042.908317][T12839] openvswitch: netlink: Key type 5408 is out of range max 32 [ 1042.977706][T22399] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20002 - 0 [ 1042.998197][T22399] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20002 - 0 [ 1043.016772][T22399] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20002 - 0 [ 1043.038045][T22399] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20002 - 0 [ 1043.127428][T12845] validate_nla: 5 callbacks suppressed [ 1043.127452][T12845] netlink: 'syz.4.10750': attribute type 25 has an invalid length. [ 1043.178379][T12845] tipc: Can't bind to reserved service type 2 [ 1043.394177][T12852] syzkaller0: entered promiscuous mode [ 1043.402643][T12852] syzkaller0: entered allmulticast mode [ 1043.581120][T12868] netlink: 'syz.3.10758': attribute type 1 has an invalid length. [ 1043.720426][T12880] sctp: [Deprecated]: syz.2.10763 (pid 12880) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1043.720426][T12880] Use struct sctp_sack_info instead [ 1043.741847][T12880] sctp: [Deprecated]: syz.2.10763 (pid 12880) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1043.741847][T12880] Use struct sctp_sack_info instead [ 1043.771776][T12883] openvswitch: netlink: IP tunnel dst address not specified [ 1043.816309][ T3556] wlan1: Trigger new scan to find an IBSS to join [ 1044.532654][T12916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.557734][T12916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.731944][T12928] bridge8: entered promiscuous mode [ 1044.758859][T12928] bridge8: entered allmulticast mode [ 1046.681201][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.836621][ T3556] wlan1: Trigger new scan to find an IBSS to join [ 1046.848907][T12966] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YNx' does not exist [ 1047.554667][T13008] netlink: 'syz.2.10802': attribute type 4 has an invalid length. [ 1047.568929][T13008] __nla_validate_parse: 21 callbacks suppressed [ 1047.568950][T13008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10802'. [ 1047.607266][T13011] xt_addrtype: ipv6 does not support BROADCAST matching [ 1047.620960][T13011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1047.761791][T22399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.780446][T13023] netlink: 788 bytes leftover after parsing attributes in process `syz.2.10804'. [ 1047.800483][T13024] 9: renamed from lo [ 1047.921415][T13026] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10807'. [ 1047.938718][T13026] netlink: 'syz.1.10807': attribute type 4 has an invalid length. [ 1048.187674][T13026] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1048.247759][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.336898][ T5202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.415814][T13048] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1048.436797][ T5202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.628299][ T5202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.691413][ T5202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.772877][T13070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.839925][T13073] delete_channel: no stack [ 1048.967953][T10514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.031413][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.037167][T13084] IPv6: NLM_F_CREATE should be specified when creating new route [ 1049.083782][T13086] sit3: entered promiscuous mode [ 1049.107520][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.122170][T13086] sit3: entered allmulticast mode [ 1049.371978][T13103] netlink: 'syz.2.10829': attribute type 3 has an invalid length. [ 1049.409429][T13110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10831'. [ 1049.673290][T13128] netlink: 'syz.4.10836': attribute type 11 has an invalid length. [ 1049.781400][T13132] netlink: 'syz.0.10839': attribute type 3 has an invalid length. [ 1049.801677][T13134] netlink: 'syz.3.10840': attribute type 1 has an invalid length. [ 1049.840673][T13130] IPv6: Can't replace route, no match found [ 1049.882753][T13134] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1049.915408][T13138] vlan4: entered promiscuous mode [ 1049.920974][T13138] bond5: entered promiscuous mode [ 1049.928466][T13143] netlink: 92 bytes leftover after parsing attributes in process `syz.2.10842'. [ 1049.928837][T13138] vlan4: entered allmulticast mode [ 1049.943627][T13138] bond5: entered allmulticast mode [ 1049.974862][T13134] bond5: (slave bridge7): making interface the new active one [ 1049.982668][T13134] bridge7: entered promiscuous mode [ 1049.988914][T13143] netlink: 92 bytes leftover after parsing attributes in process `syz.2.10842'. [ 1049.999969][T13134] bridge7: entered allmulticast mode [ 1050.007113][T13134] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 1050.143057][T13148] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20002 [ 1050.247972][T13159] netlink: 'syz.0.10847': attribute type 4 has an invalid length. [ 1050.377053][T13167] netlink: 84 bytes leftover after parsing attributes in process `syz.1.10850'. [ 1050.400757][T13176] tipc: Enabling of bearer rejected, failed to enable media [ 1050.411156][T13174] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.10852'. [ 1050.425290][T13174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10852'. [ 1050.430882][T13167] netlink: 84 bytes leftover after parsing attributes in process `syz.1.10850'. [ 1050.881598][T13209] netlink: 'syz.3.10864': attribute type 10 has an invalid length. [ 1050.907326][T13209] macvtap0: left allmulticast mode [ 1051.175139][T13229] vxcan1 speed is unknown, defaulting to 1000 [ 1051.704133][T13258] syzkaller1: entered promiscuous mode [ 1051.735256][T13258] syzkaller1: entered allmulticast mode [ 1051.876549][T13272] netlink: 'syz.1.10882': attribute type 1 has an invalid length. [ 1052.019237][T13221] vxcan1 speed is unknown, defaulting to 1000 [ 1052.041490][T13273] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1052.055343][T13273] bond4: (slave vxcan5): Setting fail_over_mac to active for active-backup mode [ 1052.069108][T13273] bond4: (slave vxcan5): making interface the new active one [ 1052.077545][T13273] bond4: (slave vxcan5): Enslaving as an active interface with an up link [ 1052.309354][T13301] netlink: 'syz.3.10890': attribute type 1 has an invalid length. [ 1052.598699][T13308] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.605974][T13308] bridge0: port 2(bridge_slave_1) entered listening state [ 1052.613499][T13308] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.620852][T13308] bridge0: port 1(bridge_slave_0) entered listening state [ 1052.814570][T13327] __nla_validate_parse: 6 callbacks suppressed [ 1052.814591][T13327] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10897'. [ 1053.162752][T13337] bond5: option min_links: invalid value (18446744073709551614) [ 1053.196667][T13337] bond5: option min_links: allowed values 0 - 2147483647 [ 1053.217969][T13337] bond5 (unregistering): Released all slaves [ 1053.385583][T13321] mpoa:mpoad_close: () going down [ 1053.533166][T13353] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10904'. [ 1053.535060][T13357] netlink: 'syz.3.10903': attribute type 1 has an invalid length. [ 1053.560029][T13353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10904'. [ 1053.577200][T13357] netlink: 476 bytes leftover after parsing attributes in process `syz.3.10903'. [ 1053.605658][T13353] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10904'. [ 1053.624568][T13360] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10903'. [ 1053.633029][T13357] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.10903'. [ 1053.644165][T13353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10904'. [ 1053.673796][T13353] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10904'. [ 1053.913744][T13374] net_ratelimit: 6 callbacks suppressed [ 1053.913757][T13374] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1054.077378][T13376] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10909'. [ 1054.260298][ T3556] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.280821][ T3556] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 1054.306591][ T3556] netdevsim netdevsim2 netdevsim0: unset [1, 2] type 2 family 0 port 20002 - 0 [ 1054.337756][ T3556] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.347125][ T3556] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 1054.355924][ T3556] netdevsim netdevsim2 netdevsim1: unset [1, 2] type 2 family 0 port 20002 - 0 [ 1054.381591][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 1054.410242][T13386] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1054.528259][ T3556] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.540457][ T3556] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 1054.551731][ T3556] netdevsim netdevsim2 netdevsim2: unset [1, 2] type 2 family 0 port 20002 - 0 [ 1054.562850][ T3556] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.578645][ T3556] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 1054.588491][ T3556] netdevsim netdevsim2 netdevsim3: unset [1, 2] type 2 family 0 port 20002 - 0 [ 1054.925137][T13407] netlink: 'syz.4.10919': attribute type 9 has an invalid length. [ 1055.144606][T13424] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1055.169576][T13424] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1055.214469][T13424] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1055.229104][T13429] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1055.250640][T13424] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1055.300034][T13424] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1055.338761][T13424] bridge12: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1055.360711][T13424] bridge13: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1055.395126][T13438] bond6: entered promiscuous mode [ 1055.402979][T13438] bond6: entered allmulticast mode [ 1055.408809][T13438] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1055.422320][T13424] bridge14: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1055.442749][T13424] bridge15: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1055.472036][T13424] bridge16: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1055.500820][T13424] bridge17: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1055.528324][T13424] bridge18: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1055.557380][T13424] bridge19: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1055.618163][T13424] bridge20: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1055.652026][T13424] bridge21: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1055.675729][T13424] bridge22: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1055.724809][T13424] bridge23: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1055.769704][T13424] bridge24: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1055.823747][T13424] bridge25: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1055.890722][T13424] bridge26: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1055.924107][T13424] bridge27: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1055.942988][T13454] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1055.971702][T13424] bridge28: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1056.243979][T13484] netlink: 'syz.2.10943': attribute type 10 has an invalid length. [ 1056.320599][T13491] netlink: 'syz.2.10943': attribute type 10 has an invalid length. [ 1056.548004][T13502] xt_TCPMSS: Only works on TCP SYN packets [ 1056.793926][T13511] netlink: 'syz.3.10953': attribute type 1 has an invalid length. [ 1056.962755][T13515] tipc: Enabling of bearer rejected, failed to enable media [ 1057.347462][T13537] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1057.356200][T13537] team0: Port device batadv2 added [ 1057.418554][T13535] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1057.428643][T13535] team0: Port device batadv3 added [ 1057.549208][T13553] tc_dump_action: action bad kind [ 1057.614054][T13557] bridge29: entered promiscuous mode [ 1057.633012][T13557] bridge29: entered allmulticast mode [ 1057.644904][T13548] vxcan1 speed is unknown, defaulting to 1000 [ 1057.664476][T13555] openvswitch: netlink: Multiple metadata blocks provided [ 1057.675958][T13555] netlink: 'syz.3.10968': attribute type 1 has an invalid length. [ 1057.762522][T13555] team0: Port device team_slave_0 removed [ 1057.975226][T13573] __nla_validate_parse: 14 callbacks suppressed [ 1057.975311][T13573] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10973'. [ 1058.051402][T13575] netlink: 'syz.2.10975': attribute type 30 has an invalid length. [ 1058.084715][T13577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10976'. [ 1058.095885][T13573] delete_channel: no stack [ 1058.213800][T13593] netlink: 'syz.3.10978': attribute type 1 has an invalid length. [ 1058.290906][T13601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10978'. [ 1058.317569][T13601] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10978'. [ 1058.378283][T13602] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.10981'. [ 1058.392303][T13598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10979'. [ 1058.421819][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10979'. [ 1058.431342][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10979'. [ 1058.667688][T13621] netlink: 'syz.2.10985': attribute type 29 has an invalid length. [ 1058.697215][T13625] netlink: 'syz.2.10985': attribute type 29 has an invalid length. [ 1058.708623][T13621] netlink: 500 bytes leftover after parsing attributes in process `syz.2.10985'. [ 1058.722989][T13625] netlink: 500 bytes leftover after parsing attributes in process `syz.2.10985'. [ 1058.827000][T13629] netlink: 'syz.2.10988': attribute type 3 has an invalid length. [ 1058.867319][T13631] x_tables: duplicate underflow at hook 1 [ 1059.754900][T13647] sctp: [Deprecated]: syz.4.10992 (pid 13647) Use of int in maxseg socket option. [ 1059.754900][T13647] Use struct sctp_assoc_value instead [ 1059.785042][T13647] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1059.796664][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5410 ms [ 1059.804762][ C1] lec:lec_tx_timeout: lec0 [ 1059.809722][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1061.413071][T13607] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1061.782726][T13677] FAULT_INJECTION: forcing a failure. [ 1061.782726][T13677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1061.803490][T13677] CPU: 1 UID: 0 PID: 13677 Comm: syz.2.11000 Not tainted syzkaller #0 PREEMPT(full) [ 1061.803514][T13677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1061.803524][T13677] Call Trace: [ 1061.803531][T13677] [ 1061.803537][T13677] dump_stack_lvl+0xe8/0x150 [ 1061.803566][T13677] should_fail_ex+0x412/0x560 [ 1061.803589][T13677] _copy_to_user+0x31/0xb0 [ 1061.803614][T13677] simple_read_from_buffer+0xe1/0x170 [ 1061.803644][T13677] proc_fail_nth_read+0x1bb/0x230 [ 1061.803669][T13677] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1061.803694][T13677] ? rw_verify_area+0x2a6/0x4d0 [ 1061.803708][T13677] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1061.803728][T13677] vfs_read+0x20c/0xa70 [ 1061.803744][T13677] ? fdget_pos+0x246/0x320 [ 1061.803768][T13677] ? __pfx___mutex_lock+0x10/0x10 [ 1061.803785][T13677] ? __pfx_vfs_read+0x10/0x10 [ 1061.803810][T13677] ? __fget_files+0x2a/0x420 [ 1061.803835][T13677] ? __fget_files+0x3a0/0x420 [ 1061.803854][T13677] ? __fget_files+0x2a/0x420 [ 1061.803882][T13677] ksys_read+0x150/0x270 [ 1061.803902][T13677] ? __pfx_ksys_read+0x10/0x10 [ 1061.803931][T13677] do_syscall_64+0x14d/0xf80 [ 1061.803954][T13677] ? trace_irq_disable+0x3b/0x150 [ 1061.803976][T13677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.803994][T13677] ? clear_bhb_loop+0x40/0x90 [ 1061.804012][T13677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.804030][T13677] RIP: 0033:0x7f4c13d5cece [ 1061.804048][T13677] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1061.804063][T13677] RSP: 002b:00007f4c14bebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1061.804081][T13677] RAX: ffffffffffffffda RBX: 00007f4c14bec6c0 RCX: 00007f4c13d5cece [ 1061.804093][T13677] RDX: 000000000000000f RSI: 00007f4c14bec0a0 RDI: 0000000000000004 [ 1061.804103][T13677] RBP: 00007f4c14bec090 R08: 0000000000000000 R09: 0000000000000000 [ 1061.804113][T13677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1061.804123][T13677] R13: 00007f4c14016038 R14: 00007f4c14015fa0 R15: 00007fffacbbcd08 [ 1061.804149][T13677] [ 1062.195684][T13685] netlink: 'syz.3.11004': attribute type 3 has an invalid length. [ 1062.326700][T13699] xt_HMARK: proto mask must be zero with L3 mode [ 1062.345609][T13697] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1062.378571][T13697] bond5 (unregistering): Released all slaves [ 1062.542678][T13713] syzkaller0: entered promiscuous mode [ 1062.569347][T13713] syzkaller0: entered allmulticast mode [ 1062.612496][T13713] wireguard0: entered promiscuous mode [ 1062.630810][T13713] wireguard0: entered allmulticast mode [ 1062.660307][T13713] team0: Device wireguard0 is of different type [ 1062.811351][T13735] netlink: 'syz.1.11019': attribute type 1 has an invalid length. [ 1062.908320][T13743] netlink: 'syz.1.11020': attribute type 12 has an invalid length. [ 1062.917961][T13743] netlink: 'syz.1.11020': attribute type 29 has an invalid length. [ 1062.987729][T13747] lo: entered allmulticast mode [ 1063.100434][T13749] lo: left allmulticast mode [ 1063.129499][T13760] __nla_validate_parse: 12 callbacks suppressed [ 1063.129518][T13760] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11024'. [ 1063.203540][T13766] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 1063.281206][T13771] netlink: 'syz.0.11028': attribute type 2 has an invalid length. [ 1063.317408][T13774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11029'. [ 1063.360850][T13774] bond9: option xmit_hash_policy: invalid value (64) [ 1063.370157][T13774] bond9 (unregistering): Released all slaves [ 1063.545447][T13787] "syz.3.11032" (13787) uses obsolete ecb(arc4) skcipher [ 1063.769433][T13799] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11035'. [ 1063.789150][T13803] netlink: 'syz.4.11034': attribute type 13 has an invalid length. [ 1063.802811][T13803] netlink: 'syz.4.11034': attribute type 17 has an invalid length. [ 1063.840667][T13805] netlink: 'syz.4.11034': attribute type 1 has an invalid length. [ 1063.924181][T13803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1063.990260][T13805] bond9: entered promiscuous mode [ 1063.995544][T13805] bond9: entered allmulticast mode [ 1064.002400][T13805] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1064.022530][T13815] netlink: 'syz.1.11039': attribute type 164 has an invalid length. [ 1064.025392][T13807] erspan2: entered allmulticast mode [ 1064.032322][T13816] netlink: 'syz.1.11039': attribute type 164 has an invalid length. [ 1064.044250][T13807] bond9: (slave erspan2): making interface the new active one [ 1064.044302][T13807] erspan2: entered promiscuous mode [ 1064.047935][T13807] bond9: (slave erspan2): Enslaving as an active interface with an up link [ 1064.306042][T13833] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1064.338701][T13831] syzkaller0: entered promiscuous mode [ 1064.344798][T13831] syzkaller0: entered allmulticast mode [ 1064.538291][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11049'. [ 1064.692672][T13854] : renamed from bond0 (while UP) [ 1064.793107][T13861] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.11053'. [ 1064.826658][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1064.834731][ C1] lec:lec_tx_timeout: lec0 [ 1064.840998][T13861] netlink: ct family unspecified [ 1064.892251][T13861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11053'. [ 1064.937624][T13868] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.11057'. [ 1064.961237][T13872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11058'. [ 1064.995775][T13872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11058'. [ 1065.006149][T13872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11058'. [ 1065.222068][T13861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1065.271047][T13888] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1065.946620][T13930] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 1067.797599][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1067.804836][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1068.119557][T13885] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1068.338010][T13946] __nla_validate_parse: 2 callbacks suppressed [ 1068.338032][T13946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11073'. [ 1068.342884][T13941] validate_nla: 5 callbacks suppressed [ 1068.342903][T13941] netlink: 'syz.1.11074': attribute type 1 has an invalid length. [ 1068.388557][T13941] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11074'. [ 1068.429994][T13934] tc_dump_action: action bad kind [ 1068.602446][T13960] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11079'. [ 1068.638335][T13964] netlink: 'syz.4.11080': attribute type 29 has an invalid length. [ 1068.648254][T13960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11079'. [ 1068.667602][T13964] IPVS: length: 24 != 4728 [ 1068.694085][T13964] netlink: 'syz.4.11080': attribute type 4 has an invalid length. [ 1068.737029][T13964] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1068.981789][T13987] bond0: entered allmulticast mode [ 1068.988006][T13987] bond_slave_0: entered allmulticast mode [ 1068.993862][T13987] bond_slave_1: entered allmulticast mode [ 1069.003559][T13981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11083'. [ 1069.281110][T14010] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1069.405747][T14014] vxcan1 speed is unknown, defaulting to 1000 [ 1069.429841][T14024] netlink: 144 bytes leftover after parsing attributes in process `syz.3.11097'. [ 1069.442018][T14009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11092'. [ 1069.452340][T14009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11092'. [ 1069.560281][T14029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11098'. [ 1069.569293][T14030] netlink: 'syz.2.11100': attribute type 1 has an invalid length. [ 1069.619568][T14036] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.11099'. [ 1069.775584][T14030] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1070.068137][ T3553] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1070.095212][ T3553] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1070.104701][ T3553] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1070.147229][T14069] xt_hashlimit: max too large, truncated to 1048576 [ 1070.201950][T14056] syzkaller1: entered promiscuous mode [ 1070.208440][T14056] syzkaller1: entered allmulticast mode [ 1070.290215][T14069] xt_CT: No such helper "syz1" [ 1070.305333][ T3553] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1070.701861][T14089] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1070.743246][T14090] netlink: 'syz.1.11110': attribute type 1 has an invalid length. [ 1070.768386][T14086] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1070.844372][T14090] bond0: entered promiscuous mode [ 1070.897425][T14090] bond0: entered allmulticast mode [ 1070.919463][T14090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.980144][T14095] erspan2: entered allmulticast mode [ 1071.028122][T14095] bond0: (slave erspan2): making interface the new active one [ 1071.047891][T14095] erspan2: entered promiscuous mode [ 1071.072062][T14095] bond0: (slave erspan2): Enslaving as an active interface with an up link [ 1071.178498][T14107] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1071.197845][T14108] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1071.981018][T14172] ksmbd: Unknown IPC event: 3, ignore. [ 1072.370987][T14193] syzkaller0: entered promiscuous mode [ 1072.396903][T14193] syzkaller0: entered allmulticast mode [ 1072.427276][T14202] syzkaller0: entered promiscuous mode [ 1072.432781][T14202] syzkaller0: entered allmulticast mode [ 1072.444072][T14204] netlink: 'syz.1.11139': attribute type 23 has an invalid length. [ 1072.857889][T14226] netlink: 'syz.4.11150': attribute type 1 has an invalid length. [ 1072.979493][T14237] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1073.083703][T14247] netlink: 'syz.1.11155': attribute type 1 has an invalid length. [ 1073.148356][T14252] netlink: 'syz.0.11157': attribute type 28 has an invalid length. [ 1073.163039][T14252] netlink: 'syz.0.11157': attribute type 3 has an invalid length. [ 1073.190300][T14247] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1073.198858][T14253] bond5: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1073.233801][T14256] bond9: entered promiscuous mode [ 1073.239410][T14256] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1073.264746][T14257] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1073.321907][T14260] netlink: 'syz.2.11158': attribute type 11 has an invalid length. [ 1073.332883][T14254] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1073.347723][T14254] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.382578][T14256] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1073.391591][T14256] bond9: (slave sit4): The slave device specified does not support setting the MAC address [ 1073.433875][T14256] bond9: (slave sit4): Error -95 calling set_mac_address [ 1073.485928][T14254] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1073.500037][T14254] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.536569][T10050] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1073.654256][T14254] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1073.665036][ T3553] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1073.677367][T14254] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.705933][ T3553] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1073.716131][ T3553] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1073.758570][T14254] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1073.784275][T14254] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.827342][ T3550] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1073.858237][ T3556] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1073.866101][ T3556] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1073.987824][ T3556] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1074.009068][ T3556] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1074.037427][ T3550] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1074.058455][T14292] syzkaller0: entered promiscuous mode [ 1074.067543][T14292] syzkaller0: entered allmulticast mode [ 1074.083204][T14294] __nla_validate_parse: 29 callbacks suppressed [ 1074.083223][T14294] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11166'. [ 1074.146170][ T3556] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1074.157173][ T3556] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.184212][T14297] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11166'. [ 1074.193726][T14301] xt_HMARK: spi-set and port-set can't be combined [ 1074.239800][ T3556] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1074.249821][ T3556] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.311535][T14309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11171'. [ 1074.371443][ T3550] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1074.380604][ T3550] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.404455][ T3550] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1074.430555][ T3550] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.449110][T14317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11171'. [ 1074.575018][T14324] netlink: 72 bytes leftover after parsing attributes in process `syz.3.11175'. [ 1074.585365][T14324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11175'. [ 1074.703210][T14336] netlink: 9 bytes leftover after parsing attributes in process `syz.0.11179'. [ 1077.150102][T14299] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1077.484307][T14365] vxcan1 speed is unknown, defaulting to 1000 [ 1077.548998][T14373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11189'. [ 1077.572601][T14375] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.11187'. [ 1077.644434][T14378] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11188'. [ 1077.660546][T14377] netlink: 'syz.1.11190': attribute type 1 has an invalid length. [ 1077.868830][T14387] erspan2: entered allmulticast mode [ 1077.945178][T14368] vxcan1 speed is unknown, defaulting to 1000 [ 1078.176272][T14406] IPVS: set_ctl: invalid protocol: 33 100.1.1.0:20003 [ 1078.418286][T14384] vxcan1 speed is unknown, defaulting to 1000 [ 1078.626719][ T141] net_ratelimit: 93 callbacks suppressed [ 1078.626738][ T141] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1078.666988][ T141] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1078.678024][ T141] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1078.797266][ T3553] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1078.821195][ T3553] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1078.897799][T14425] syzkaller1: entered promiscuous mode [ 1078.903409][T14425] syzkaller1: entered allmulticast mode [ 1078.957044][T10050] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1078.987535][T10050] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1079.027039][T10050] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1079.046490][T10050] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1079.077564][T10050] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1079.262332][T14449] netlink: 'syz.0.11211': attribute type 2 has an invalid length. [ 1079.288141][T14443] syzkaller1: entered promiscuous mode [ 1079.296542][T14443] syzkaller1: entered allmulticast mode [ 1079.649471][T14472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1079.901351][T14485] __nla_validate_parse: 5 callbacks suppressed [ 1079.901372][T14485] netlink: 280 bytes leftover after parsing attributes in process `syz.4.11221'. [ 1079.957882][ T3551] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1080.025181][T14489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11223'. [ 1080.080575][T14487] syzkaller0: entered promiscuous mode [ 1080.086099][T14487] syzkaller0: entered allmulticast mode [ 1080.225369][T14499] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1081.486772][ T5830] Bluetooth: hci4: command 0x0419 tx timeout [ 1081.879613][T14501] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.11226'. [ 1081.889682][T14501] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.11226'. [ 1082.148904][T14522] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11232'. [ 1082.171710][T14523] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11232'. [ 1082.262927][T14537] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.11234'. [ 1082.811253][T14567] netlink: 'syz.2.11241': attribute type 3 has an invalid length. [ 1083.050965][T14585] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11247'. [ 1083.156917][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1083.164462][ C0] bridge0: topology change detected, propagating [ 1083.171567][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1083.178829][ C0] bridge0: topology change detected, propagating [ 1083.493221][T14608] syzkaller0: entered promiscuous mode [ 1083.499057][T14608] syzkaller0: entered allmulticast mode [ 1083.545331][T14611] netlink: 'syz.3.11253': attribute type 4 has an invalid length. [ 1083.567742][T14611] netlink: 'syz.3.11253': attribute type 4 has an invalid length. [ 1083.695560][ T3552] net_ratelimit: 155 callbacks suppressed [ 1083.695582][ T3552] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1083.722487][ T3552] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1083.837025][ T3556] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1083.847036][ T3556] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1083.956969][ T3556] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1083.965322][ T3556] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1084.077124][ T141] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1084.085672][ T141] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1084.199437][T10050] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1084.207263][T10050] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1085.111495][T14518] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1085.348015][T14645] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 1085.367287][T14638] syzkaller1: entered promiscuous mode [ 1085.383206][T14638] syzkaller1: entered allmulticast mode [ 1085.501569][T14653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11262'. [ 1085.627613][T14664] netlink: 'syz.1.11265': attribute type 1 has an invalid length. [ 1085.668956][T14664] netlink: 'syz.1.11265': attribute type 2 has an invalid length. [ 1085.678641][T14664] netlink: 'syz.1.11265': attribute type 1 has an invalid length. [ 1085.695269][T14664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11265'. [ 1085.712204][T14664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11265'. [ 1086.209808][T14710] netlink: 'syz.4.11277': attribute type 61 has an invalid length. [ 1086.226719][T14710] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11277'. [ 1086.393044][T14723] syzkaller0: entered promiscuous mode [ 1086.399800][T14723] syzkaller0: entered allmulticast mode [ 1086.870909][T14754] xt_TCPMSS: Only works on TCP SYN packets [ 1087.102850][T14764] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11288'. [ 1087.280805][T14779] IPVS: set_ctl: invalid protocol: 149 100.1.1.2:20003 [ 1087.355195][T14782] tipc: Enabling of bearer rejected, already enabled [ 1087.661802][T14797] nbd: must specify a size in bytes for the device [ 1088.044906][T14829] syzkaller0: entered promiscuous mode [ 1088.060595][T14829] syzkaller0: entered allmulticast mode [ 1088.117923][T14835] syzkaller0: left promiscuous mode [ 1088.123362][T14835] syzkaller0: left allmulticast mode [ 1088.365677][T14851] "syz.2.11306" (14851) uses obsolete ecb(arc4) skcipher [ 1088.521119][T14858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11307'. [ 1088.768622][ T3552] net_ratelimit: 106 callbacks suppressed [ 1088.768645][ T3552] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1088.806883][ T3550] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1088.818085][ T3550] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1088.909200][T14883] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11314'. [ 1088.975388][ T3550] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1088.997000][ T3550] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1089.095217][T14902] netlink: 'syz.2.11316': attribute type 1 has an invalid length. [ 1089.126538][ T3550] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1089.153117][ T3551] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1089.169824][ T3551] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1089.287573][ T3556] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1089.300867][ T3556] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1089.417451][T14919] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11322'. [ 1089.445913][T14921] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 1089.997197][T14954] veth7: entered allmulticast mode [ 1089.999917][T14960] netlink: 27 bytes leftover after parsing attributes in process `syz.0.11336'. [ 1090.034165][T14960] netlink: 'syz.0.11336': attribute type 12 has an invalid length. [ 1090.114527][T14960] bond6: option primary_reselect: invalid value (255) [ 1090.121957][T14968] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.11338'. [ 1090.139448][T14960] bond6 (unregistering): Released all slaves [ 1090.271220][T14969] bond10: entered promiscuous mode [ 1090.287784][T14969] bond10: entered allmulticast mode [ 1090.301395][T14969] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1090.457923][T14990] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1090.533855][T14995] ipt_ECN: cannot use operation on non-tcp rule [ 1090.704442][T15008] xt_hashlimit: size too large, truncated to 1048576 [ 1090.757694][T15012] : renamed from vxcan1 (while UP) [ 1091.035917][T15023] bond6: invalid ARP target 0.0.0.0 specified for addition [ 1091.044406][T15023] bond6: option arp_ip_target: invalid value (0) [ 1091.057592][T15023] bond6 (unregistering): Released all slaves [ 1091.097442][T15026] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1091.288822][T15030] syzkaller0: entered promiscuous mode [ 1091.305372][T15030] syzkaller0: entered allmulticast mode [ 1091.320722][T15052] __nla_validate_parse: 4 callbacks suppressed [ 1091.320743][T15052] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11364'. [ 1091.628182][T15070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1091.870598][T15083] IPVS: set_ctl: invalid protocol: 108 172.30.1.2:20004 [ 1091.944874][T15086] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11374'. [ 1092.029902][T15091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11372'. [ 1093.679611][T15103] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1093.813401][T15116] netlink: 540 bytes leftover after parsing attributes in process `syz.0.11380'. [ 1093.837816][T15109] netlink: 80 bytes leftover after parsing attributes in process `syz.2.11378'. [ 1093.847037][T10050] net_ratelimit: 144 callbacks suppressed [ 1093.847056][T10050] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1093.861975][T10050] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1093.977632][ T3551] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1093.985439][ T3551] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1094.081252][T15127] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11383'. [ 1094.099562][T15127] nbd: must specify at least one socket [ 1094.131054][T15139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11386'. [ 1094.149836][T10050] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1094.168219][T15127] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1094.176576][T10050] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1094.223103][T15142] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11387'. [ 1094.232789][ T141] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1094.233867][T15142] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11387'. [ 1094.278631][T10050] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1094.306080][T15139] syzkaller1: entered promiscuous mode [ 1094.311773][ T3551] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1094.322349][T15139] syzkaller1: entered allmulticast mode [ 1094.472352][T15167] netlink: 'syz.2.11391': attribute type 2 has an invalid length. [ 1094.731039][T15182] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.11398'. [ 1094.924372][T15197] netlink: 'syz.4.11404': attribute type 4 has an invalid length. [ 1095.045248][T15208] netlink: 'syz.3.11406': attribute type 1 has an invalid length. [ 1095.088515][T15205] bond9: entered allmulticast mode [ 1095.109801][T15205] syz_tun: left allmulticast mode [ 1095.114891][T15205] syz_tun: left promiscuous mode [ 1095.120852][T15205] bridge0: port 1(syz_tun) entered disabled state [ 1095.166292][T15205] bond0: (slave bond_slave_0): Releasing backup interface [ 1095.174868][T15205] bond_slave_0: left promiscuous mode [ 1095.185595][T15205] bond0: (slave bond_slave_1): Releasing backup interface [ 1095.194293][T15205] bond_slave_1: left promiscuous mode [ 1095.213326][T15205] team0: Port device team_slave_0 removed [ 1095.224944][T15205] team0: Port device team_slave_1 removed [ 1095.231843][T15205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1095.391505][T15218] tipc: Enabled bearer , priority 0 [ 1095.489594][T15233] netlink: 'syz.4.11411': attribute type 1 has an invalid length. [ 1095.513069][T15233] netlink: 'syz.4.11411': attribute type 3 has an invalid length. [ 1095.608036][T15218] syzkaller0: entered promiscuous mode [ 1095.613571][T15218] syzkaller0: entered allmulticast mode [ 1095.635342][ T5202] vxcan1 speed is unknown, defaulting to 1000 [ 1095.642921][T15236] netlink: 'syz.2.11413': attribute type 32 has an invalid length. [ 1095.740573][T15236] bond11: option coupled_control: invalid value (52) [ 1095.778332][T15236] bond11 (unregistering): Released all slaves [ 1095.959858][T15252] bond4: option mode: unable to set because the bond device has slaves [ 1096.055944][T15263] veth5: entered allmulticast mode [ 1096.077436][T15219] tipc: Resetting bearer [ 1096.168896][T15219] tipc: Disabling bearer [ 1096.303269][T15281] tipc: Enabling of bearer rejected, failed to enable media [ 1096.465215][T15272] vxcan1 speed is unknown, defaulting to 1000 [ 1097.232761][T15323] __nla_validate_parse: 5 callbacks suppressed [ 1097.232780][T15323] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11436'. [ 1097.331924][T15324] syzkaller1: entered promiscuous mode [ 1097.363713][T15324] syzkaller1: entered allmulticast mode [ 1097.670187][T15316] syzkaller1: entered promiscuous mode [ 1097.701777][T15316] syzkaller1: entered allmulticast mode [ 1097.803594][T10050] wlan1: Trigger new scan to find an IBSS to join [ 1098.140750][T15370] netlink: 'syz.2.11449': attribute type 1 has an invalid length. [ 1098.231486][T15379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11451'. [ 1098.251735][T15367] tipc: Enabled bearer , priority 0 [ 1098.280436][T15370] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1098.414809][T15367] syzkaller0: entered promiscuous mode [ 1098.421527][T15367] syzkaller0: entered allmulticast mode [ 1098.428483][T15367] tipc: Resetting bearer [ 1098.514715][T15364] tipc: Resetting bearer [ 1098.866406][T10050] net_ratelimit: 151 callbacks suppressed [ 1098.866427][T10050] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1098.911853][ T3551] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1098.947684][ T141] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1098.971876][ T3553] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1099.006760][ T141] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1099.026457][ T141] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1099.047180][ T141] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1099.071593][ T3553] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1099.097269][ T3553] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1099.116943][T10050] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1100.600162][T15364] tipc: Disabling bearer [ 1100.838451][ T3553] wlan1: Trigger new scan to find an IBSS to join [ 1100.840166][T15436] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11464'. [ 1100.862312][T15436] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11464'. [ 1100.962212][T15441] IPv6: NLM_F_CREATE should be specified when creating new route [ 1100.971567][T15440] netlink: 248 bytes leftover after parsing attributes in process `syz.0.11465'. [ 1101.018708][T15444] tipc: New replicast peer: 255.255.255.255 [ 1101.025389][T15444] tipc: Enabled bearer , priority 10 [ 1101.047391][T15451] netlink: 'syz.2.11467': attribute type 3 has an invalid length. [ 1101.059904][T15440] netlink: 'syz.0.11465': attribute type 83 has an invalid length. [ 1101.087865][T15440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11465'. [ 1101.139452][T15458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11465'. [ 1101.279117][T15461] syzkaller1: entered promiscuous mode [ 1101.284689][T15461] syzkaller1: entered allmulticast mode [ 1101.393977][T15473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11471'. [ 1101.603398][T15484] netlink: 'syz.4.11476': attribute type 1 has an invalid length. [ 1101.621339][T15484] netlink: 220 bytes leftover after parsing attributes in process `syz.4.11476'. [ 1101.628175][T15491] netlink: 830 bytes leftover after parsing attributes in process `syz.3.11477'. [ 1101.633684][T15484] netlink: 'syz.4.11476': attribute type 2 has an invalid length. [ 1101.678852][T15484] netlink: 'syz.4.11476': attribute type 1 has an invalid length. [ 1101.893980][T15513] veth0: entered promiscuous mode [ 1101.903781][T15512] veth0: left promiscuous mode [ 1102.065989][T15519] syzkaller1: entered promiscuous mode [ 1102.071754][T15519] syzkaller1: entered allmulticast mode [ 1102.082283][T15519] syzkaller1: left promiscuous mode [ 1102.089518][T15519] syzkaller1: left allmulticast mode [ 1102.285500][T15536] __nla_validate_parse: 6 callbacks suppressed [ 1102.285517][T15536] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11494'. [ 1102.378494][T15537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1102.431819][T15547] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11498'. [ 1102.493291][T15552] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11500'. [ 1102.510447][T15552] netlink: 388 bytes leftover after parsing attributes in process `syz.4.11500'. [ 1102.811474][T15572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11505'. [ 1102.834443][T15575] netlink: 'syz.3.11506': attribute type 32 has an invalid length. [ 1102.943647][T15583] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11508'. [ 1102.979257][T15585] xt_hashlimit: size too large, truncated to 1048576 [ 1103.770107][T15623] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11519'. [ 1103.788214][T15627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11520'. [ 1103.813710][ C0] [ 1103.816066][ C0] ================================ [ 1103.821146][ C0] WARNING: inconsistent lock state [ 1103.826238][ C0] syzkaller #0 Not tainted [ 1103.830624][ C0] -------------------------------- [ 1103.835705][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 1103.842534][ C0] kworker/u8:13/10050 [HC0[0]:SC1[3]:HE1:SE0] takes: [ 1103.849184][ C0] ffff88808c908260 (k-sk_lock-AF_INET6){+.?.}-{0:0}, at: inet6_getname+0x15d/0x650 [ 1103.858465][ C0] {SOFTIRQ-ON-W} state was registered at: [ 1103.864153][ C0] lock_acquire+0xf0/0x2e0 [ 1103.868633][ C0] lock_sock_nested+0x48/0x100 [ 1103.873462][ C0] tcp_sock_set_nodelay+0x2a/0x180 [ 1103.878637][ C0] rds_tcp_listen_init+0x168/0x410 [ 1103.883811][ C0] rds_tcp_init_net+0x154/0x380 [ 1103.888720][ C0] ops_init+0x35c/0x5c0 [ 1103.892940][ C0] register_pernet_operations+0x343/0x830 [ 1103.898722][ C0] register_pernet_device+0x2a/0x80 [ 1103.903981][ C0] rds_tcp_init+0xcf/0x170 [ 1103.908460][ C0] do_one_initcall+0x250/0x8d0 [ 1103.913288][ C0] do_initcall_level+0x104/0x190 [ 1103.918291][ C0] do_initcalls+0x59/0xa0 [ 1103.922687][ C0] kernel_init_freeable+0x2a6/0x3e0 [ 1103.927946][ C0] kernel_init+0x1d/0x1d0 [ 1103.932339][ C0] ret_from_fork+0x51e/0xb90 [ 1103.936994][ C0] ret_from_fork_asm+0x1a/0x30 [ 1103.941832][ C0] irq event stamp: 3576996 [ 1103.946226][ C0] hardirqs last enabled at (3576996): [] _raw_spin_unlock_irqrestore+0x30/0x80 [ 1103.956791][ C0] hardirqs last disabled at (3576995): [] _raw_spin_lock_irqsave+0x1a/0x60 [ 1103.966927][ C0] softirqs last enabled at (3576888): [] __dev_queue_xmit+0x274/0x38a0 [ 1103.976812][ C0] softirqs last disabled at (3576889): [] do_softirq+0x76/0xd0 [ 1103.985909][ C0] [ 1103.985909][ C0] other info that might help us debug this: [ 1103.993941][ C0] Possible unsafe locking scenario: [ 1103.993941][ C0] [ 1104.001365][ C0] CPU0 [ 1104.004619][ C0] ---- [ 1104.007871][ C0] lock(k-sk_lock-AF_INET6); [ 1104.012524][ C0] [ 1104.015957][ C0] lock(k-sk_lock-AF_INET6); [ 1104.020783][ C0] [ 1104.020783][ C0] *** DEADLOCK *** [ 1104.020783][ C0] [ 1104.028899][ C0] 12 locks held by kworker/u8:13/10050: [ 1104.034414][ C0] #0: ffff888028c28948 ((wq_completion)krds_cp_wq#31/0){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1104.046134][ C0] #1: ffffc90003687c40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1104.058884][ C0] #2: ffff88808c908fa0 (k-sk_lock-AF_INET6){+.?.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 1104.068857][ C0] #3: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: inet6_csk_xmit+0x110/0x6c0 [ 1104.078220][ C0] #4: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_xmit+0x283/0x1980 [ 1104.087154][ C0] #5: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 1104.096257][ C0] #6: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3eb/0x1950 [ 1104.105815][ C0] #7: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb+0x102/0xc50 [ 1104.115437][ C0] #8: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 1104.124109][ C0] #9: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_input+0x23/0x270 [ 1104.132967][ C0] #10: ffff88808c9081e0 (k-slock-AF_INET6/1){+.-.}-{3:3}, at: tcp_v6_rcv+0x2577/0x2f60 [ 1104.142721][ C0] #11: ffff88808c908408 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x113/0x9a0 [ 1104.152787][ C0] [ 1104.152787][ C0] stack backtrace: [ 1104.158670][ C0] CPU: 0 UID: 0 PID: 10050 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 1104.158684][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1104.158693][ C0] Workqueue: krds_cp_wq#31/0 rds_send_worker [ 1104.158712][ C0] Call Trace: [ 1104.158719][ C0] [ 1104.158726][ C0] dump_stack_lvl+0xe8/0x150 [ 1104.158742][ C0] print_usage_bug+0x28b/0x2e0 [ 1104.158758][ C0] mark_lock_irq+0x410/0x420 [ 1104.158773][ C0] mark_lock+0x115/0x190 [ 1104.158785][ C0] __lock_acquire+0x689/0x2cf0 [ 1104.158798][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1104.158814][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1104.158829][ C0] lock_acquire+0xf0/0x2e0 [ 1104.158840][ C0] ? inet6_getname+0x15d/0x650 [ 1104.158853][ C0] lock_sock_nested+0x48/0x100 [ 1104.158866][ C0] ? inet6_getname+0x15d/0x650 [ 1104.158876][ C0] inet6_getname+0x15d/0x650 [ 1104.158885][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1104.158896][ C0] rds_tcp_conn_slots_available+0x288/0x470 [ 1104.158909][ C0] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1104.158923][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1104.158938][ C0] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1104.158949][ C0] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 1104.158961][ C0] ? NF_HOOK+0x336/0x3c0 [ 1104.158974][ C0] ? ip6_input+0x16a/0x270 [ 1104.158987][ C0] ? ip_sabotage_in+0x1e1/0x270 [ 1104.158999][ C0] ? rds_recv_hs_exthdrs+0xd1/0x7c0 [ 1104.159010][ C0] ? __napi_poll+0xae/0x340 [ 1104.159021][ C0] ? net_rx_action+0x627/0xf70 [ 1104.159032][ C0] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 1104.159043][ C0] ? __dev_queue_xmit+0x1e6c/0x38a0 [ 1104.159058][ C0] ? ip6_xmit+0x1149/0x1980 [ 1104.159069][ C0] ? __tcp_transmit_skb+0x249b/0x43e0 [ 1104.159085][ C0] ? __tcp_push_pending_frames+0x97/0x380 [ 1104.159096][ C0] ? tcp_sock_set_cork+0x186/0x2e0 [ 1104.159106][ C0] ? rds_send_xmit+0x207e/0x28d0 [ 1104.159116][ C0] ? process_scheduled_works+0xb02/0x1830 [ 1104.159129][ C0] ? worker_thread+0xa50/0xfc0 [ 1104.159140][ C0] ? kthread+0x388/0x470 [ 1104.159149][ C0] ? ret_from_fork+0x51e/0xb90 [ 1104.159163][ C0] rds_recv_incoming+0x9f6/0x12d0 [ 1104.159180][ C0] ? __pfx_rds_recv_incoming+0x10/0x10 [ 1104.159192][ C0] ? skb_copy_bits+0x7e5/0x8f0 [ 1104.159207][ C0] rds_tcp_data_recv+0x7f1/0xa40 [ 1104.159222][ C0] __tcp_read_sock+0x196/0x970 [ 1104.159257][ C0] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 1104.159268][ C0] rds_tcp_data_ready+0x369/0x9a0 [ 1104.159279][ C0] ? __pfx_sock_def_readable+0x10/0x10 [ 1104.159289][ C0] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 1104.159300][ C0] ? tcp_grow_window+0x4fc/0xc50 [ 1104.159313][ C0] tcp_data_queue+0x1e2e/0x5e50 [ 1104.159333][ C0] ? tcp_urg+0x106/0x410 [ 1104.159345][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 1104.159358][ C0] ? __pfx_tcp_urg+0x10/0x10 [ 1104.159370][ C0] ? ktime_get+0x45/0x200 [ 1104.159379][ C0] ? seqcount_lockdep_reader_access+0xe0/0x100 [ 1104.159388][ C0] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 1104.159403][ C0] tcp_rcv_established+0xf45/0x2740 [ 1104.159421][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1104.159434][ C0] ? ip6_dst_check+0xe2/0x7e0 [ 1104.159446][ C0] ? ip6_dst_check+0x5e3/0x7e0 [ 1104.159456][ C0] ? __pfx_ip6_dst_check+0x10/0x10 [ 1104.159467][ C0] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 1104.159482][ C0] tcp_v6_rcv+0x2653/0x2f60 [ 1104.159499][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 1104.159508][ C0] ? nf_nat_ipv6_fn+0xf3/0x2f0 [ 1104.159520][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1104.159530][ C0] ? raw6_local_deliver+0x116/0x950 [ 1104.159546][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 1104.159554][ C0] ip6_protocol_deliver_rcu+0xa73/0x1600 [ 1104.159574][ C0] ip6_input_finish+0x191/0x370 [ 1104.159589][ C0] NF_HOOK+0x336/0x3c0 [ 1104.159602][ C0] ? ip6_dst_check+0xe2/0x7e0 [ 1104.159612][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1104.159625][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1104.159638][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1104.159653][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1104.159669][ C0] ip6_input+0x16a/0x270 [ 1104.159682][ C0] ? ip6_input+0x23/0x270 [ 1104.159695][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1104.159707][ C0] ip_sabotage_in+0x1e1/0x270 [ 1104.159718][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 1104.159728][ C0] nf_hook_slow+0xc5/0x220 [ 1104.159744][ C0] NF_HOOK+0x21f/0x3c0 [ 1104.159756][ C0] ? skb_orphan+0xaf/0xd0 [ 1104.159770][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1104.159782][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1104.159794][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1104.159809][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1104.159827][ C0] ? netif_receive_skb+0x102/0xc50 [ 1104.159838][ C0] netif_receive_skb+0x278/0xc50 [ 1104.159850][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 1104.159864][ C0] ? br_netif_receive_skb+0x126/0x190 [ 1104.159876][ C0] NF_HOOK+0xa4/0x3a0 [ 1104.159886][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 1104.159897][ C0] ? NF_HOOK+0xfa/0x3a0 [ 1104.159906][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1104.159917][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 1104.159929][ C0] ? br_pass_frame_up+0x275/0x420 [ 1104.159940][ C0] br_handle_frame_finish+0x14b2/0x1b40 [ 1104.159951][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1104.159966][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1104.159979][ C0] ? ip6t_do_table+0x113/0x1560 [ 1104.159993][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 1104.160004][ C0] ? nf_hook_slow+0x176/0x220 [ 1104.160016][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1104.160026][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 1104.160038][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1104.160048][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1104.160058][ C0] ? nf_nat_ipv6_in+0x203/0x2c0 [ 1104.160070][ C0] br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 1104.160081][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1104.160094][ C0] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 1104.160105][ C0] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 1104.160116][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1104.160127][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1104.160138][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 1104.160149][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1104.160159][ C0] br_handle_frame+0x1277/0x1510 [ 1104.160173][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1104.160184][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1104.160197][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1104.160207][ C0] __netif_receive_skb_core+0x98f/0x31a0 [ 1104.160218][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1104.160236][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1104.160251][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1104.160263][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1104.160274][ C0] ? ip6_input+0x226/0x270 [ 1104.160286][ C0] ? ip6_input+0x23/0x270 [ 1104.160300][ C0] ? NF_HOOK+0x336/0x3c0 [ 1104.160312][ C0] ? __pfx___sock_wfree+0x10/0x10 [ 1104.160328][ C0] ? lock_acquire+0xf0/0x2e0 [ 1104.160340][ C0] ? process_backlog+0x3eb/0x1950 [ 1104.160351][ C0] ? process_backlog+0x3eb/0x1950 [ 1104.160362][ C0] ? process_backlog+0x3eb/0x1950 [ 1104.160373][ C0] process_backlog+0x76d/0x1950 [ 1104.160388][ C0] __napi_poll+0xae/0x340 [ 1104.160398][ C0] ? skb_defer_free_flush+0x233/0x260 [ 1104.160410][ C0] net_rx_action+0x627/0xf70 [ 1104.160421][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1104.160439][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1104.160454][ C0] ? try_to_wake_up+0x7fc/0x1390 [ 1104.160466][ C0] handle_softirqs+0x22a/0x870 [ 1104.160478][ C0] ? do_softirq+0x76/0xd0 [ 1104.160491][ C0] ? __dev_queue_xmit+0x274/0x38a0 [ 1104.160504][ C0] do_softirq+0x76/0xd0 [ 1104.160516][ C0] [ 1104.160520][ C0] [ 1104.160523][ C0] __local_bh_enable_ip+0xf8/0x130 [ 1104.160535][ C0] ? __dev_queue_xmit+0x274/0x38a0 [ 1104.160549][ C0] __dev_queue_xmit+0x1e6c/0x38a0 [ 1104.160568][ C0] ? __dev_queue_xmit+0x274/0x38a0 [ 1104.160581][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1104.160594][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1104.160608][ C0] ? neigh_resolve_output+0x438/0x750 [ 1104.160621][ C0] ? eth_header+0x11b/0x200 [ 1104.160635][ C0] ? __asan_memcpy+0x40/0x70 [ 1104.160660][ C0] ? ip6_output+0x126/0x550 [ 1104.160672][ C0] ip6_output+0x340/0x550 [ 1104.160684][ C0] ip6_xmit+0x1149/0x1980 [ 1104.160698][ C0] ? ip6_xmit+0x283/0x1980 [ 1104.160709][ C0] ? __pfx_ip6_xmit+0x10/0x10 [ 1104.160723][ C0] ? __pfx_ip6_dst_check+0x10/0x10 [ 1104.160736][ C0] inet6_csk_xmit+0x3bd/0x6c0 [ 1104.160746][ C0] ? inet6_csk_xmit+0x110/0x6c0 [ 1104.160754][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 1104.160763][ C0] __tcp_transmit_skb+0x249b/0x43e0 [ 1104.160781][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 1104.160796][ C0] ? tcp_small_queue_check+0x1c1/0x3b0 [ 1104.160809][ C0] tcp_write_xmit+0x16e8/0x6980 [ 1104.160831][ C0] __tcp_push_pending_frames+0x97/0x380 [ 1104.160844][ C0] tcp_sock_set_cork+0x186/0x2e0 [ 1104.160853][ C0] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 1104.160865][ C0] rds_send_xmit+0x207e/0x28d0 [ 1104.160884][ C0] ? __pfx_rds_send_xmit+0x10/0x10 [ 1104.160898][ C0] rds_send_worker+0x7d/0x2e0 [ 1104.160910][ C0] ? process_scheduled_works+0xa25/0x1830 [ 1104.160922][ C0] process_scheduled_works+0xb02/0x1830 [ 1104.160940][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1104.160953][ C0] ? assign_work+0x3d5/0x5e0 [ 1104.160965][ C0] worker_thread+0xa50/0xfc0 [ 1104.160982][ C0] kthread+0x388/0x470 [ 1104.160991][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1104.161003][ C0] ? __pfx_kthread+0x10/0x10 [ 1104.161011][ C0] ret_from_fork+0x51e/0xb90 [ 1104.161024][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1104.161035][ C0] ? __switch_to+0xc7d/0x1450 [ 1104.161046][ C0] ? __pfx_kthread+0x10/0x10 [ 1104.161055][ C0] ret_from_fork_asm+0x1a/0x30 [ 1104.161073][ C0] [ 1105.109682][ C0] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 1105.118430][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 10050, name: kworker/u8:13 [ 1105.127788][ C0] preempt_count: 303, expected: 0 [ 1105.132784][ C0] RCU nest depth: 7, expected: 0 [ 1105.137704][ C0] INFO: lockdep is turned off. [ 1105.142433][ C0] Preemption disabled at: [ 1105.142438][ C0] [] __dev_queue_xmit+0x281/0x38a0 [ 1105.153418][ C0] CPU: 0 UID: 0 PID: 10050 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 1105.153431][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1105.153439][ C0] Workqueue: krds_cp_wq#31/0 rds_send_worker [ 1105.153457][ C0] Call Trace: [ 1105.153463][ C0] [ 1105.153470][ C0] dump_stack_lvl+0xe8/0x150 [ 1105.153485][ C0] __might_resched+0x378/0x4d0 [ 1105.153499][ C0] ? __dev_queue_xmit+0x281/0x38a0 [ 1105.153514][ C0] lock_sock_nested+0x5d/0x100 [ 1105.153526][ C0] inet6_getname+0x15d/0x650 [ 1105.153538][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1105.153549][ C0] rds_tcp_conn_slots_available+0x288/0x470 [ 1105.153562][ C0] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1105.153577][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1105.153590][ C0] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1105.153602][ C0] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 1105.153613][ C0] ? NF_HOOK+0x336/0x3c0 [ 1105.153626][ C0] ? ip6_input+0x16a/0x270 [ 1105.153638][ C0] ? ip_sabotage_in+0x1e1/0x270 [ 1105.153649][ C0] ? rds_recv_hs_exthdrs+0xd1/0x7c0 [ 1105.153661][ C0] ? __napi_poll+0xae/0x340 [ 1105.153671][ C0] ? net_rx_action+0x627/0xf70 [ 1105.153682][ C0] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 1105.153693][ C0] ? __dev_queue_xmit+0x1e6c/0x38a0 [ 1105.153707][ C0] ? ip6_xmit+0x1149/0x1980 [ 1105.153718][ C0] ? __tcp_transmit_skb+0x249b/0x43e0 [ 1105.153732][ C0] ? __tcp_push_pending_frames+0x97/0x380 [ 1105.153743][ C0] ? tcp_sock_set_cork+0x186/0x2e0 [ 1105.153753][ C0] ? rds_send_xmit+0x207e/0x28d0 [ 1105.153764][ C0] ? process_scheduled_works+0xb02/0x1830 [ 1105.153776][ C0] ? worker_thread+0xa50/0xfc0 [ 1105.153788][ C0] ? kthread+0x388/0x470 [ 1105.153797][ C0] ? ret_from_fork+0x51e/0xb90 [ 1105.153810][ C0] rds_recv_incoming+0x9f6/0x12d0 [ 1105.153823][ C0] ? __pfx_rds_recv_incoming+0x10/0x10 [ 1105.153835][ C0] ? skb_copy_bits+0x7e5/0x8f0 [ 1105.153849][ C0] rds_tcp_data_recv+0x7f1/0xa40 [ 1105.153864][ C0] __tcp_read_sock+0x196/0x970 [ 1105.153874][ C0] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 1105.153886][ C0] rds_tcp_data_ready+0x369/0x9a0 [ 1105.153896][ C0] ? __pfx_sock_def_readable+0x10/0x10 [ 1105.153906][ C0] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 1105.153918][ C0] ? tcp_grow_window+0x4fc/0xc50 [ 1105.153930][ C0] tcp_data_queue+0x1e2e/0x5e50 [ 1105.153948][ C0] ? tcp_urg+0x106/0x410 [ 1105.153961][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 1105.153975][ C0] ? __pfx_tcp_urg+0x10/0x10 [ 1105.153987][ C0] ? ktime_get+0x45/0x200 [ 1105.153996][ C0] ? seqcount_lockdep_reader_access+0xe0/0x100 [ 1105.154006][ C0] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 1105.154021][ C0] tcp_rcv_established+0xf45/0x2740 [ 1105.154039][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1105.154053][ C0] ? ip6_dst_check+0xe2/0x7e0 [ 1105.154063][ C0] ? ip6_dst_check+0x5e3/0x7e0 [ 1105.154074][ C0] ? __pfx_ip6_dst_check+0x10/0x10 [ 1105.154085][ C0] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 1105.154097][ C0] tcp_v6_rcv+0x2653/0x2f60 [ 1105.154153][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 1105.154163][ C0] ? nf_nat_ipv6_fn+0xf3/0x2f0 [ 1105.154174][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1105.154183][ C0] ? raw6_local_deliver+0x116/0x950 [ 1105.154198][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 1105.154207][ C0] ip6_protocol_deliver_rcu+0xa73/0x1600 [ 1105.154227][ C0] ip6_input_finish+0x191/0x370 [ 1105.154241][ C0] NF_HOOK+0x336/0x3c0 [ 1105.154254][ C0] ? ip6_dst_check+0xe2/0x7e0 [ 1105.154264][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1105.154278][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1105.154291][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1105.154304][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1105.154320][ C0] ip6_input+0x16a/0x270 [ 1105.154334][ C0] ? ip6_input+0x23/0x270 [ 1105.154347][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1105.154360][ C0] ip_sabotage_in+0x1e1/0x270 [ 1105.154370][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 1105.154380][ C0] nf_hook_slow+0xc5/0x220 [ 1105.154394][ C0] NF_HOOK+0x21f/0x3c0 [ 1105.154406][ C0] ? skb_orphan+0xaf/0xd0 [ 1105.154420][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1105.154432][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1105.154445][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1105.154458][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1105.154472][ C0] ? netif_receive_skb+0x102/0xc50 [ 1105.154482][ C0] netif_receive_skb+0x278/0xc50 [ 1105.154494][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 1105.154505][ C0] ? br_netif_receive_skb+0x126/0x190 [ 1105.154516][ C0] NF_HOOK+0xa4/0x3a0 [ 1105.154526][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 1105.154537][ C0] ? NF_HOOK+0xfa/0x3a0 [ 1105.154547][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1105.154558][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 1105.154570][ C0] ? br_pass_frame_up+0x275/0x420 [ 1105.154581][ C0] br_handle_frame_finish+0x14b2/0x1b40 [ 1105.154591][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1105.154606][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1105.154619][ C0] ? ip6t_do_table+0x113/0x1560 [ 1105.154632][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 1105.154643][ C0] ? nf_hook_slow+0x176/0x220 [ 1105.154655][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1105.154666][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 1105.154678][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1105.154688][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1105.154699][ C0] ? nf_nat_ipv6_in+0x203/0x2c0 [ 1105.154711][ C0] br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 1105.154722][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1105.154735][ C0] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 1105.154747][ C0] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 1105.154758][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1105.154769][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1105.154780][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 1105.154792][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1105.154802][ C0] br_handle_frame+0x1277/0x1510 [ 1105.154815][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1105.154826][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1105.154838][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1105.154848][ C0] __netif_receive_skb_core+0x98f/0x31a0 [ 1105.154860][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1105.154873][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1105.154888][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1105.154901][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1105.154911][ C0] ? ip6_input+0x226/0x270 [ 1105.154924][ C0] ? ip6_input+0x23/0x270 [ 1105.154937][ C0] ? NF_HOOK+0x336/0x3c0 [ 1105.154949][ C0] ? __pfx___sock_wfree+0x10/0x10 [ 1105.154965][ C0] ? lock_acquire+0xf0/0x2e0 [ 1105.154977][ C0] ? process_backlog+0x3eb/0x1950 [ 1105.154988][ C0] ? process_backlog+0x3eb/0x1950 [ 1105.155000][ C0] ? process_backlog+0x3eb/0x1950 [ 1105.155011][ C0] process_backlog+0x76d/0x1950 [ 1105.155026][ C0] __napi_poll+0xae/0x340 [ 1105.155036][ C0] ? skb_defer_free_flush+0x233/0x260 [ 1105.155047][ C0] net_rx_action+0x627/0xf70 [ 1105.155059][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1105.155074][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1105.155089][ C0] ? try_to_wake_up+0x7fc/0x1390 [ 1105.155100][ C0] handle_softirqs+0x22a/0x870 [ 1105.155118][ C0] ? do_softirq+0x76/0xd0 [ 1105.155131][ C0] ? __dev_queue_xmit+0x274/0x38a0 [ 1105.155144][ C0] do_softirq+0x76/0xd0 [ 1105.155156][ C0] [ 1105.155160][ C0] [ 1105.155163][ C0] __local_bh_enable_ip+0xf8/0x130 [ 1105.155175][ C0] ? __dev_queue_xmit+0x274/0x38a0 [ 1105.155189][ C0] __dev_queue_xmit+0x1e6c/0x38a0 [ 1105.155206][ C0] ? __dev_queue_xmit+0x274/0x38a0 [ 1105.155219][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1105.155233][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1105.155247][ C0] ? neigh_resolve_output+0x438/0x750 [ 1105.155259][ C0] ? eth_header+0x11b/0x200 [ 1105.155272][ C0] ? __asan_memcpy+0x40/0x70 [ 1105.155292][ C0] ? ip6_output+0x126/0x550 [ 1105.155303][ C0] ip6_output+0x340/0x550 [ 1105.155315][ C0] ip6_xmit+0x1149/0x1980 [ 1105.155328][ C0] ? ip6_xmit+0x283/0x1980 [ 1105.155340][ C0] ? __pfx_ip6_xmit+0x10/0x10 [ 1105.155354][ C0] ? __pfx_ip6_dst_check+0x10/0x10 [ 1105.155366][ C0] inet6_csk_xmit+0x3bd/0x6c0 [ 1105.155376][ C0] ? inet6_csk_xmit+0x110/0x6c0 [ 1105.155384][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 1105.155393][ C0] __tcp_transmit_skb+0x249b/0x43e0 [ 1105.155411][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 1105.155427][ C0] ? tcp_small_queue_check+0x1c1/0x3b0 [ 1105.155440][ C0] tcp_write_xmit+0x16e8/0x6980 [ 1105.155462][ C0] __tcp_push_pending_frames+0x97/0x380 [ 1105.155475][ C0] tcp_sock_set_cork+0x186/0x2e0 [ 1105.155484][ C0] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 1105.155495][ C0] rds_send_xmit+0x207e/0x28d0 [ 1105.155515][ C0] ? __pfx_rds_send_xmit+0x10/0x10 [ 1105.155529][ C0] rds_send_worker+0x7d/0x2e0 [ 1105.155542][ C0] ? process_scheduled_works+0xa25/0x1830 [ 1105.155554][ C0] process_scheduled_works+0xb02/0x1830 [ 1105.155572][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1105.155585][ C0] ? assign_work+0x3d5/0x5e0 [ 1105.155598][ C0] worker_thread+0xa50/0xfc0 [ 1105.155616][ C0] kthread+0x388/0x470 [ 1105.155624][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1105.155636][ C0] ? __pfx_kthread+0x10/0x10 [ 1105.155645][ C0] ret_from_fork+0x51e/0xb90 [ 1105.155658][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1105.155669][ C0] ? __switch_to+0xc7d/0x1450 [ 1105.155680][ C0] ? __pfx_kthread+0x10/0x10 [ 1105.155689][ C0] ret_from_fork_asm+0x1a/0x30 [ 1105.155707][ C0]