last executing test programs: 6.099184856s ago: executing program 0 (id=3620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbf7, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4000}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000850}, 0x20044004) 5.920356131s ago: executing program 0 (id=3623): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) ppoll(&(0x7f0000000000)=[{r2}, {r1, 0xf401}], 0x2, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000480)={0x68000005}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x6, 0xb35, 0x6c, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x20, 0x2, 0x8}}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0xfff0, 0x5, 0x7, 0x402, r2, 0x3, '\x00', r3, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0x9}, 0x50) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x8c, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x36}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x12}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4048080}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) write$cgroup_pid(r8, &(0x7f0000000000), 0xffffff98) r9 = socket(0x11, 0x2, 0x0) splice(r9, 0x0, r8, 0x0, 0x6, 0xa) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00', 0x7fff}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0x7, @empty, 0x3}, @in6={0xa, 0x4e22, 0xf, @private0, 0x3ff}, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1}], 0x90) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.747773472s ago: executing program 4 (id=3643): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x23, 0x5, 0x0) (async) r2 = socket$kcm(0x23, 0x5, 0x0) listen(r2, 0x800) close(0x3) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000003b80)={0x14, r3, 0x309, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000003b80)={0x14, r3, 0x309, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, 0x0, &(0x7f0000000000)=0xa0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) 4.652183017s ago: executing program 4 (id=3644): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2, 0x9, 0x1, 0x3, 0x11, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x6e6bb1, 0x1, {0x6, 0x3c, 0x5, 0x10, 0x0, 0x8, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x2f}}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x4, 0x40, 0xb5, 0x3}, @sadb_ident={0x2, 0xb, 0x779, 0x0, 0x84d}, @sadb_address={0x1, 0x6, 0x6c, 0x80, 0x0, @in={0x2, 0x4e20, @empty}}]}, 0x88}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffc, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x6, 0xc}, {}, {0xa, 0xe}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x40010) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) getsockopt$TIPC_NODE_RECVQ_DEPTH(r9, 0x10f, 0x83, &(0x7f0000000240), &(0x7f0000000280)=0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002cc0)=@newtaction={0x488, 0x30, 0xffff, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xfffffff8, 0x0, 0x0, 0x100, 0x20000, 0x733f, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xcff, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x5, 0x0, 0x8000, 0x0, 0xf23fd53b, 0x0, 0x0, 0x2, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0xfffffffc, 0x0, 0xfff, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x80000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2000, 0x9c1, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0xc192dfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x8, 0x0, 0x1000, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0xad6, 0x0, 0x0, 0x5b3, 0x0, 0xfffff7fd, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x9, 0x1, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x5, 0xd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x1000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, 0x1, 0x0, 0x8, 0x0, 0x5, 0x0, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2e, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x1, 0x4, 0x80000004, 0x4, {0x5, 0x0, 0x8, 0x1, 0x7, 0x1f7}, {0x8, 0x0, 0x6, 0x800, 0x21ff}, 0x3, 0x82e, 0xa}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) ioctl$XFS_IOC_FSCOUNTS(r9, 0x80205871, &(0x7f0000000340)) r11 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r11, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000016c0)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x101, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1830000075000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000003000000850000000600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000180100002020692500000000002020207b1af8ff00000000bfe79c000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xf8, &(0x7f0000000100)=""/248, 0x0, 0x2c}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114700000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 4.571135514s ago: executing program 3 (id=3647): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x3ff, 0xd365, 0x1, 0x40000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4.394048599s ago: executing program 1 (id=3649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, 0x0, 0x0) listen(r3, 0x6) socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40800) r5 = socket$inet(0x2, 0x2000000000003, 0x2) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f00000001c0)={@broadcast, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="060000080000000071112400000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x1c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xd8a}, @TCA_TBF_BURST={0x8, 0x6, 0x1}, @TCA_TBF_PBURST={0x8, 0x7, 0xf1f}]}}]}, 0x48}}, 0x20040084) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0xcc, 0x2c, 0xd27, 0x170bd2c, 0x2001, {0x0, 0x0, 0x0, r10, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x9c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x88, 0x9, 0x0, 0x1, [@m_csum={0x84, 0x1, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x0, 0xc9d, 0xd155}, 0x5f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0x9, 0x7, 0x4, 0x9}, 0x2}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xebd, 0x2, 0x2, 0x4}, 0xe}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r8) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r9, 0x8982, &(0x7f00000000c0)={0x7, 'rose0\x00', {0x9}}) 4.163891752s ago: executing program 3 (id=3652): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xe2f168f134f2b15c}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x2, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xfffffffb}, @CTA_EXPECT_ZONE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4011}, 0x40448c8) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000140)={0xe0c, 0x1, 0x5, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [{{0x254, 0x1, {{0x2, 0xfffffff8}, 0xa6, 0x7, 0x8, 0x3, 0xd, 'syz0\x00', "3c98a906c0d0f3fb44880cebbd300e905f389cfce65a54c000765f6a3253232d", "194e0ccb9d11b92be88deab2790b36b54c47d4dcde368d65b19fe3c279708522", [{0x9, 0x6, {0x3, 0x3}}, {0x4, 0xca4, {0x0, 0x3}}, {0x7, 0x0, {0x1, 0x7}}, {0x5, 0x4, {0x22c40c9aed39ca14, 0xfffffff9}}, {0x3, 0x100, {0x2, 0x7f}}, {0x2, 0x30a, {0x2, 0xb0d0}}, {0x1, 0xfffc, {0x3, 0x9}}, {0x9, 0x8, {0x0, 0x8}}, {0xe5, 0x7, {0x0, 0x8}}, {0x1210, 0xcfe, {0x0, 0x5}}, {0x1, 0x200, {0x2, 0x1}}, {0x2, 0x7fff, {0x3, 0xc5}}, {0x6, 0xa, {0x3, 0x7}}, {0xff80, 0x8000, {0x2, 0xfffffffe}}, {0x8, 0x3, {0x1, 0x7}}, {0xfff8, 0x5, {0x3, 0x800}}, {0x5, 0x3, {0x0, 0xa}}, {0x6, 0xd, {0x3, 0x9}}, {0x2b2b, 0x3, {0x0, 0x3}}, {0x8224, 0x69, {0x0, 0x6}}, {0x35f, 0x742b, {0x0, 0x10}}, {0x5, 0xd, {0x3, 0x9}}, {0xff, 0xf07b, {0x2, 0xd0}}, {0x304d, 0x9, {0x3, 0x10000}}, {0x80, 0x4, {0x1, 0x7}}, {0x4, 0x2, {0x3, 0x8}}, {0x3, 0x90, {0x0, 0xf}}, {0x2, 0xfffb, {0x1, 0x3}}, {0xffff, 0x800, {0x0, 0xad}}, {0x1, 0x26f, {0x3, 0x2}}, {0x0, 0x7, {0x3, 0x6}}, {0x0, 0xb, {0x0, 0x8}}, {0x4, 0x8, {0x2, 0x7}}, {0x0, 0x5, {0x3, 0x5ff7f5f9}}, {0x4, 0x3, {0x2}}, {0x0, 0x0, {0x3, 0x3}}, {0x7, 0x4, {0x1, 0x40}}, {0x9c, 0x5e0, {0x1, 0x3}}, {0x9, 0x4ca, {0x1, 0x3dc4}}, {0x26, 0xfff, {0x1, 0x20000000}}]}}}, {{0x254, 0x1, {{0x0, 0x40}, 0x7, 0x2, 0xfffe, 0x7, 0x1, 'syz0\x00', "3754fa8463e6436f5b8e2f3c19c4c20d09ca189c8c9b6dff5dabf258413b013f", "1df495065728d76f0aa1994e01b747cd6ffaa68ffeffad883452e2482da383fd", [{0x5, 0x8001, {0x1, 0xd7}}, {0xecba, 0x5, {0x2, 0x52}}, {0x1, 0x400, {0x3, 0x7}}, {0xff8c, 0x8001, {0x0, 0x6}}, {0xfffc, 0x5777, {0x0, 0x7}}, {0x3, 0x8000, {0x3, 0x5}}, {0xfffe, 0x12a3, {0x0, 0x2}}, {0x3, 0x0, {0x2, 0x1}}, {0x77, 0xc5, {0x0, 0xfffffffb}}, {0x6, 0x1c, {0x0, 0x7}}, {0x100, 0x4000, {0x1, 0x5}}, {0x7, 0x6, {0x2, 0x2}}, {0x2, 0x8, {0x3, 0x4}}, {0xff, 0xe, {0x2, 0x401}}, {0xc1d, 0xe56, {0x2, 0x9}}, {0x0, 0x101, {0x3, 0xa9e}}, {0xf2f2, 0x5, {0x3, 0x3}}, {0x1000, 0x70, {0x1, 0x80000001}}, {0xe226, 0x2, {0x2, 0x8}}, {0xe9d, 0x1, {0x2, 0x401}}, {0x3800, 0xffff, {0x2, 0x5}}, {0x6d18, 0x0, {0x2, 0x6}}, {0x68c, 0x8be, {0x1, 0x800}}, {0x1, 0x5c0, {0x1, 0x1}}, {0x3c, 0x9, {0x3, 0x101}}, {0xfc00, 0xffff, {0x2, 0x7}}, {0xfff, 0x1ff, {0x2, 0x78}}, {0x5c20, 0x0, {0x2, 0xffff8001}}, {0x8, 0x2, {0x3, 0x8}}, {0x2, 0x6, {0x0, 0x1}}, {0x0, 0x4, {0x3, 0x8001}}, {0x1, 0xef7b, {0x3, 0x80000001}}, {0x60c1, 0x9, {0x1, 0xe00}}, {0x8, 0x8, {0x3, 0xff}}, {0xd, 0xffff, {0x0, 0x5}}, {0x4, 0x1}, {0x81, 0x8, {0x3, 0x9}}, {0x40, 0x2, {0x1, 0x5}}, {0xaf9, 0x7, {0x3, 0x9}}, {0x2, 0xe, {0x2, 0xfffffff5}}]}}}, {{0x254, 0x1, {{0x3, 0x4}, 0x4, 0x1, 0x2, 0x7fff, 0xc, 'syz1\x00', "24fe4e4b045833f8eba3467d241828b233ed48c3b05c591077832ff0cc1fe586", "cf706f7139590c0d62c87e725b3a9dd38fabdfb16d9ef14a78e681fd8e24d65f", [{0xb2, 0x1000, {0x1, 0x4b6}}, {0x200, 0x3, {0x1, 0x1bf3f1ff}}, {0xa6c6, 0x5, {0x0, 0x8}}, {0x75, 0xc, {0x3, 0x7}}, {0x1ec, 0xc, {0x2, 0x7}}, {0x7, 0x2, {0x0, 0x6}}, {0x2, 0x3, {0x2, 0x9}}, {0xffcd, 0x1, {0x3, 0xc}}, {0x6, 0x9, {0x3, 0xb}}, {0x3, 0xcf, {0x1, 0x8}}, {0xff, 0x80, {0x0, 0x1ff}}, {0xb, 0x4, {0x2, 0x2}}, {0x7, 0x3, {0x0, 0x7}}, {0x81, 0x2, {0x0, 0xeb}}, {0xc6, 0xe}, {0xfff7, 0x3, {0x3, 0x4}}, {0xfcf0, 0x7, {0x1, 0x10001}}, {0x8, 0x4000, {0x1, 0xa5}}, {0x78, 0x5, {0x3, 0xfb3d}}, {0xfff0, 0xff, {0x3, 0x1}}, {0xae, 0xffff, {0x3, 0x8}}, {0x100, 0x8, {0x1, 0x7}}, {0x8000, 0x111, {0x0, 0x8}}, {0x6, 0xfff, {0x3, 0x3}}, {0x1, 0x1, {0x0, 0xffffffff}}, {0x909a, 0xfff9, {0x2, 0xf}}, {0x1, 0xe, {0x1, 0x5bcba472}}, {0xeb, 0x7, {0x1, 0x80000001}}, {0x4, 0x100, {0x2, 0xaf}}, {0x2, 0x9, {0x0, 0xaf}}, {0x8001, 0x7ff, {0x3, 0x6aec}}, {0x5, 0x56d, {0x3, 0x20}}, {0x8001, 0x0, {0x1, 0x6}}, {0x5, 0x1, {0x3, 0x9}}, {0xf, 0x1, {0x1, 0x5}}, {0x10, 0x2, {0x0, 0x5}}, {0x8c, 0x6, {0x3, 0xfffffff0}}, {0x0, 0x3, {0x1}}, {0x3, 0xd037, {0x2, 0xcd}}, {0x4, 0x5, {0x3, 0x8}}]}}}, {{0x254, 0x1, {{0x3, 0x3}, 0x7, 0xd, 0xfffa, 0x1, 0xe, 'syz0\x00', "cbdf34f56aa76482b714fca1d5d0f11bf7d206cf481449a2dfb9da66a691d1cd", "290797955e0653fe11d5fca0dbc97cee719e1b1de1bbf125c03c1e894efb1592", [{0x7c, 0x0, {0x2, 0x7}}, {0xf7fc, 0x4, {0x3, 0x5}}, {0x5, 0x7fff, {0x1}}, {0x8001, 0x80, {0x3}}, {0x2, 0x7fff, {0x1, 0x9}}, {0x80, 0xf, {0x2, 0xa0000}}, {0x42, 0xec, {0x2}}, {0x3ff, 0xfff7, {0x1, 0x6}}, {0x1, 0x9, {0x0, 0x400}}, {0x9, 0x5, {0x2, 0x2}}, {0x3, 0xfff, {0x3, 0x3}}, {0x400, 0x9, {0x1, 0x1255c00}}, {0x8, 0x1ff, {0x3, 0xfffffffd}}, {0x9, 0x1, {0x1, 0xad6}}, {0x8001, 0x0, {0x0, 0x1f15}}, {0x81, 0xe, {0x0, 0x8}}, {0x1000, 0x1c06, {0x3, 0xd300}}, {0x1, 0xfff0, {0x2, 0x2}}, {0x2, 0x0, {0x3, 0xfffffffe}}, {0x3, 0x4, {0x3, 0x4}}, {0xd17, 0x1000, {0x3, 0x3}}, {0x0, 0x6, {0x873f3608cd7377ba, 0x569}}, {0x0, 0x0, {0x0, 0x4}}, {0x3, 0x5000, {0x2, 0x81}}, {0x6, 0x7fff, {0x0, 0xffff4bb9}}, {0x0, 0x9, {0x2, 0x1}}, {0x6, 0xf3ad, {0x3, 0x9}}, {0xe0, 0x8, {0x2}}, {0xfffe, 0xaf79, {0x2, 0x3}}, {0x3, 0x7, {0x2, 0x1}}, {0x2, 0x7, {0x3, 0x6}}, {0x7fff, 0x8001, {0x3, 0x6}}, {0x0, 0x8, {0x3}}, {0x3ff, 0x0, {0x2, 0x6}}, {0xf, 0x3, {0x3, 0x6}}, {0x7, 0xfffc, {0x2, 0x2}}, {0x7, 0x2, {0x0, 0x575e}}, {0x5, 0x7, {0x2, 0xff}}, {0x6dc, 0x3, {0x1, 0x92}}, {0x4e, 0xfff8, {0x3, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x10001}, 0x3, 0x1, 0x4, 0x3, 0x24, 'syz1\x00', "dadf0edb1d23f7780000d27457504e49b6eb2f39be82b09c3a258618275edf57", "bc0cc7dd426f710f29dd4b39b4719aaea6b8208eb147a685ff363d7bd9facc6a", [{0x400, 0x4, {0x3, 0x800}}, {0xfa4, 0x9, {0x3, 0x3}}, {0x9, 0xfffc, {0x2, 0x5}}, {0x800, 0x80, {0x1, 0x1}}, {0x800, 0xeffc, {0x3, 0x3}}, {0x7, 0x4, {0x3, 0xffffffff}}, {0x6, 0x80, {0x2, 0x7ff}}, {0x2, 0x5, {0x0, 0x59beb246}}, {0x1, 0x55f7, {0x0, 0xa6c2e8d}}, {0x3, 0x34d, {0x1, 0x9}}, {0x3, 0x1, {0x1, 0x100}}, {0x8, 0xa000, {0x1, 0x3}}, {0x101, 0x5, {0x3, 0x6}}, {0x3, 0x8000, {0x1}}, {0xd, 0x20f, {0x3, 0x4}}, {0x0, 0x5, {0x2, 0x40}}, {0x79, 0x0, {0x2, 0x2}}, {0x957, 0x7c1d, {0x3, 0x4}}, {0x5, 0x9, {0x0, 0x81}}, {0x7, 0x8001, {0x3, 0x6d5}}, {0x5, 0x5c, {0x2, 0x2}}, {0x1ff, 0x81, {0x1, 0x2}}, {0x9, 0x6, {0x2, 0x3ff}}, {0x2, 0xf5, {0x1, 0x9}}, {0x10, 0x1ff, {0x0, 0x700}}, {0x6, 0x8, {0x1, 0x400}}, {0x3, 0x6, {0x3, 0x8}}, {0x8, 0x9, {0x3, 0x8}}, {0xfeff, 0x8, {0x0, 0x7}}, {0x9, 0x67b, {0x1, 0x7fffffff}}, {0x7f, 0x8001, {0x2, 0x7}}, {0x4, 0x1ab, {0x0, 0xab}}, {0x3, 0xfffc, {0x2, 0xd5}}, {0x5, 0x9, {0x2, 0x3}}, {0x2, 0x0, {0x1}}, {0x5, 0xfa, {0x3, 0x7}}, {0x8, 0x8, {0x0, 0x7}}, {0x6, 0x8, {0x1, 0x917}}, {0xff, 0x400, {0x3, 0xad4f}}, {0x6, 0x81, {0x3}}]}}}, {{0x254, 0x1, {{0x3, 0x8001}, 0x68, 0xf8, 0xc, 0x2, 0x21, 'syz1\x00', "a05f222bb083e5f6d750db52ac9ab14a1f1193888213e5493c0dad0560fd133c", "11065c8f7f7c2e0068926c75bd4c9bf53fb0ef62b4619e0da1c262f40b3e7468", [{0xd, 0x3, {0x0, 0x6}}, {0x1, 0x401, {0x0, 0x9}}, {0xfcf, 0x1000, {0x1, 0x1}}, {0x8, 0x81, {0x2, 0x4}}, {0x7, 0xff, {0x1, 0x7f}}, {0x7, 0x8, {0x2, 0x3000000}}, {0x7ff, 0x4, {0x2, 0x4}}, {0x1, 0x2, {0x1, 0x8}}, {0x2d64, 0xfe5b, {0x1, 0xa}}, {0xfff7, 0x40, {0x0, 0xc}}, {0x2, 0xff, {0x3, 0x5}}, {0x100, 0x8, {0x0, 0x6}}, {0x7, 0x2, {0x3, 0x5}}, {0x3, 0xd329, {0x3, 0x7fffffff}}, {0x3, 0x8, {0x0, 0x3b70855}}, {0x7ff, 0x1, {0x0, 0xf}}, {0x1000, 0x0, {0x1, 0x8}}, {0x0, 0x9, {0x1, 0x16d96eaf}}, {0x80, 0x6, {0x3, 0x7}}, {0x4, 0x9, {0x2, 0x8}}, {0x3ff, 0x7, {0x0, 0x2}}, {0x6, 0x8, {0x0, 0x9}}, {0x26, 0x6, {0x2, 0x1}}, {0x0, 0x3, {0x2}}, {0x9, 0x2, {0x3, 0x4}}, {0x9d05, 0x0, {0x2, 0x40}}, {0x4, 0x8, {0x1, 0x1}}, {0x4, 0x800, {0x2}}, {0x3, 0x2, {0x2, 0x7}}, {0x40, 0xb, {0x1, 0x6e}}, {0x9, 0x0, {0x0, 0x401}}, {0xffff, 0x580, {0x0, 0x2}}, {0x7, 0x1ff, {0x1, 0x5}}, {0x2, 0xc, {0x0, 0x3}}, {0x40, 0x9, {0x1, 0x5}}, {0x4, 0xa, {0x1, 0x200}}, {0x6040, 0x0, {0x2, 0x200}}, {0xa822, 0x100, {0x2, 0x4}}, {0x9f85, 0x9ca2, {0x2, 0x4}}, {0x9, 0x5, {0x2, 0x8}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x6c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xe}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, 0xb, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000801) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x68, 0x3, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x40080) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x9, 0x3, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x120, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x3, &(0x7f0000001380), {[{{@ip={@rand_addr=0x64010102, @rand_addr=0x64010101, 0xff, 0xffffff00, 'netdevsim0\x00', 'wg2\x00', {}, {0xff}, 0x32, 0x1, 0x40}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x218) syz_emit_ethernet(0x102a, &(0x7f0000001600)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @val={@void, {0x8100, 0x4}}, {@mpls_mc={0x8848, {[{0x20d, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xa4, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x200}], @generic="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"}}}}, &(0x7f0000002640)={0x1, 0x1, [0xb47, 0x6b9, 0x534, 0xe61]}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair(0x10, 0x800, 0xffffffff, &(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000026c0)="7b89c0d165ad5b73ce66d48528b66e192f7c487b3ceb80", 0x17) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002740), r3) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f00000029c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002980)={&(0x7f0000002780)={0x1fc, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x22c4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf9be}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1e2f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_NODE={0x34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x19, 0x3, "f49dcdc24d74d3dd8fc333c8ca7e25dd4a988ca788"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa28}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20000080}, 0x64000841) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002a40), r3) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000002e00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002a80)={0x314, r6, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x13, 0xf9, "8bd36b09372b5cbb43dbd0b21aebeb"}, @NL80211_ATTR_FILS_ERP_REALM={0x39, 0xfa, "54b6b1ced014ee27c67a01867d2282f28d81e664f61c00f5a4d4cbc1470563abcea88db7e767588ebb95dc4aaa7b834f54b88bcd2a"}, @NL80211_ATTR_FILS_ERP_REALM={0x1a, 0xfa, "04edf33cd35b126d829ba5c88d2f6c753c51585881ca"}, @NL80211_ATTR_FILS_ERP_REALM={0x85, 0xfa, "b1b9ba79ce99ffda4b9db5b5c482426b744b6ab89741ac2c9ec401c773b151f22f63b128ccbd3aa75dc9ea7a64a0ebe9d3bd5f7dfa04df0a0c0d3b43fec4673b65b06e04c7699ac63f9b3c6ee521ee6ac11eed28077002c2fbdd6dfe6310579e5b9ce932892a8db04018c5e1e67a9cf43990369ecb46dcd60fccab7f22bd6ffc0c"}, @NL80211_ATTR_FILS_ERP_RRK={0xa4, 0xfc, "63083da3ec12c91022d05733b10ffc1db6c8e4d649c5c83322d5085061cdd90d40e817ec26f3b1161111ce2734b067879e4c0b44a0cbaad18da1a17a1d775255749cf874a25324e3a23076af344d3c414ef46f41650aa44f0c5a9ed70d03710dce4c8e2d13b2d659d4d3884c92d97720984cab7eb8ad8eda94bd485ed2ada3f5c8ed0f02262443e89f23bcd6921dfe2e8d8746b7ac484a59b91e893f0785598f"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "7bd0170cae"}], @NL80211_ATTR_IE={0x15b, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_b}}, @dsss={0x3, 0x1, 0x70}, @challenge={0x10, 0x1, 0x7a}, @dsss={0x3, 0x1, 0xb3}, @peer_mgmt={0x75, 0x16, {0x0, 0x7, @void, @val=0x1f, @val="980a3da7aef11cd64aabcced5ffe599b"}}, @ibss={0x6, 0x2, 0x3c}, @fast_bss_trans={0x37, 0xb6, {0xf3, 0x5, "fec77ca14392729c2f3235a7db43f107", "c3d57c20b1457eb4966b29aeb0cb18442fdde9caf5d03e48b736cc154c230306", "fc0166e762994d8889d089976bec1d0a07d6f4fc5a2f42b20dde430845662bcc", [{0x1, 0x2, "bfcc"}, {0x4, 0x22, "ef828974bfbf1e8fab6f5956ed025d4c89c17d015b3749e54fd026e7566ef5661c41"}, {0x1, 0x18, "5c30d36e94b0a2e874b4668ab101ddde75b80621ef504485"}, {0x4, 0x14, "a9fe6837038b01b9f7ac2ef78e008e3d65d89feb"}, {0x3, 0xa, "8920cda975363177c50b"}]}}, @random={0x2, 0x47, "8e9add55cefe16680794bdc84416f1bfe2a2450edb464a3c935903806e3ed4af02392c2c0f4759db36f671d0e4492813f65ae3b9b1fe8491b4077992036a8dbf076974e0191073"}, @rann={0x7e, 0x15, {{0x0, 0x68}, 0x3, 0xd, @device_b, 0x1, 0x5, 0x5}}, @chsw_timing={0x68, 0x4, {0x4, 0x8}}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x20040891}, 0x40000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002ec0)={0xffffffffffffffff, 0x58, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000002f80)={'syztnl0\x00', &(0x7f0000002f00)={'gre0\x00', r7, 0x8, 0x60, 0xcc1, 0x32d3, {{0x12, 0x4, 0x2, 0x3a, 0x48, 0x68, 0x0, 0x79, 0x2f, 0x0, @multicast2, @local, {[@lsrr={0x83, 0xb, 0xba, [@remote, @loopback]}, @generic={0x94, 0xf, "392b4eaee074b4336b2d7c0080"}, @ssrr={0x89, 0x17, 0xb6, [@remote, @private=0xa010100, @empty, @loopback, @multicast1]}]}}}}}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003000), r4) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000003100)={&(0x7f0000002fc0), 0xc, &(0x7f00000030c0)={&(0x7f0000003040)={0x60, r9, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x20}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x28}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x60}}, 0x4080) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x5c, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@device_b}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000003280)) r10 = bpf$ITER_CREATE(0x21, &(0x7f00000032c0), 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000003380)={'syztnl1\x00', &(0x7f0000003300)={'ip6_vti0\x00', r8, 0x2f, 0x8, 0x7, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x1, 0x7, 0x80000000}}) ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f00000033c0)={0x0, 0x1a}) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000003440), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000003500)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000034c0)={&(0x7f0000003480)={0x24, r11, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x1}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x5f}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003540)={'wlan1\x00'}) setsockopt$MRT6_ASSERT(r3, 0x29, 0xcf, &(0x7f0000003580)=0x1, 0x4) 3.941791554s ago: executing program 3 (id=3654): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000240)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x12, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a00000000", @ANYRES32=r2], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 3.828287823s ago: executing program 4 (id=3655): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) unshare(0x2c020400) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000600), 0x5, r4}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r7 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r8) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010123010000340200000300000018000180130001006b74683a73797a6b616c6c6572300000"], 0x2c}}, 0x0) write(r6, &(0x7f0000000500)="ffffffffffff02000000000188ca50c0003c00000000020000010000000100000200"/74, 0x4a) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x12, r5, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{&(0x7f0000000240)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001b80)}}], 0x1, 0x240880d1) r11 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000640)=[@in6={0xa, 0x4e24, 0x8, @mcast1, 0x6}], 0x1c) sendmsg$nl_route(r5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3400000011000500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300626174616476300000000000000000007d6c73db27a08975c65cdf3b611077c197f8a9a0"], 0x34}}, 0x0) 2.806098726s ago: executing program 0 (id=3656): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in={{0x2, 0x4e22, @rand_addr=0x64010101}}, 0x0, 0x0, 0x26, 0x0, "f859ac88a6c576c711c67849db77733b6ca545093c86ef9a18ae0e417666cacace7d479a66421a2ca9fc5d298759758d45d9e74be0ed82d5c8a4ad145c5c1fcd8697776c966c40fd82d804ba650159e5"}, 0x7d) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x8, {}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x72e1}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010800040000000000f60a00000008000300", @ANYRES32=r9, @ANYBLOB="24005080110001004abee33908f8eef16f162471f4000000040006000500020005"], 0x40}}, 0x0) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0xa, r6}, 0x10) recvmmsg(r2, &(0x7f000000a340)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xce}], 0x2, 0x30100, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r10 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(r10, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) 1.631845553s ago: executing program 1 (id=3657): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_delrule={0x60, 0x21, 0x1, 0x70bd27, 0x25dfdbfc, {0xa, 0x10, 0x10, 0x9c, 0x5, 0x0, 0x0, 0x4}, [@FRA_DST={0x14, 0x1, @empty}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'syz_tun\x00'}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x1}, @FRA_SRC={0x14, 0x2, @loopback}]}, 0x60}}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) close(0x3) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="009c700000771f5af026ca1d856bcd9a00000000000000000000000000aace0643283b2bf0b1bcf71926963c5a92a3512eab3027cc30237d65bc37c7e5cbb4f5f2a65da54667a8167b3e0f6a3014802a002b613bea38660397fb6f0b43a589c11c70ac0478b0deb96b0e6e5a5a90b3697ab5052322958c39253befba66f197e8137e18c8c3033bc3dde2bc7bde2b505712", @ANYRES32=r5, @ANYBLOB="0c0099008100000021000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4010) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x2000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x2c}}, 0x0) 1.548049117s ago: executing program 3 (id=3658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r2 = socket$inet6(0xa, 0x3, 0x82) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x64}, @in=@local, 0x0, 0x100, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff3, 0x0, 0x1, 0xfffffffffffffffd}, {0xbad, 0x800000000000, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in=@remote, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x86, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x6c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_SSID={0xd, 0x34, @random='test_ssid'}]}, 0x6c}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r3, 0x5, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4004024}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x64}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20004004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000110a01"], 0x14}, 0x1, 0x0, 0x0, 0x19}, 0x20040054) nanosleep(&(0x7f0000000a00)={0x1}, 0x0) 1.544563357s ago: executing program 2 (id=3659): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) unshare(0x24020400) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x21c, 0x10, 0x801, 0x10000000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41028}, [@IFLA_CARRIER={0x5, 0x21, 0x3}, @IFLA_VF_PORTS={0x1f4, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "9ee2a97e7bf4ac9307ca45938bae9cb4"}]}, {0x78, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "8b9fb9dbf1bc9086995708a9f0c91e1a"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "decb144e50cb7cf0f5d5b1e4e67d25ce"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "70e21b0da86ba5b6746e26bea23ae198"}, @IFLA_PORT_PROFILE={0x8, 0x2, '&M\"\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_PROFILE={0x8, 0x2, 'GPL\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xfffffff8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d503f448a043fd927ce1239acf9c228b"}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xa}, @IFLA_PORT_VF={0x8, 0x1, 0x7fffffff}, @IFLA_PORT_PROFILE={0xf, 0x2, 'netdevsim0\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x8001}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ff219ac688ac527bd00cf7cf9c371cd3"}, @IFLA_PORT_PROFILE={0xb, 0x2, '$-**`]\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e507f9fb3e56c69da8ec55148155047c"}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a4d624b0016ca764ffc8322cb60eb86c"}, @IFLA_PORT_PROFILE={0x8, 0x2, 'GPL\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2693b95ea4eecea61b3168217ed531d1"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "db483af40b6c0214a5c4d29dfea2aa28"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4f}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8b5423ab09d8bd4455a2bb85518f2628"}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "cc9bf4df5ab553326a18fbe57d05037f"}, @IFLA_PORT_VF={0x8, 0x1, 0xffff8000}, @IFLA_PORT_VF={0x8, 0x1, 0xffff}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xff}, @IFLA_PORT_VF={0x8, 0x1, 0x101}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d7a200797c07d3aa63396a85c682c357"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "bf09feb59f55f2227862349731c4e3e2"}]}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x80801}, 0x180c0) 1.437286221s ago: executing program 1 (id=3660): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0x3, 0x2) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=0x1, 0xffffffffffffffff, 0x15, 0x6c}, 0x20) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) (async) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (rerun: 32) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r8, r8, 0x19, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x9f1e}}, 0x40) close(r9) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) (async, rerun: 32) r10 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r11 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r11, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r12, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r12}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) (async, rerun: 32) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r12}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}}, 0x0) (async, rerun: 32) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 1.320135467s ago: executing program 0 (id=3661): r0 = socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14, 0x4, 0x65bf, 0x9, 0x0, 0x1, 0xcafe}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000010c0)={@map=r3, 0xffffffffffffffff, 0x2c}, 0x20) syz_emit_ethernet(0x4a, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "8b0f00", 0x18, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0x1, 0x0, 0xffd, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 1.318672693s ago: executing program 4 (id=3662): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) pipe(&(0x7f0000000080)) socket(0x10, 0x5, 0x0) socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18c80f0006000010950000000000cb0d"], &(0x7f0000000140)='syzkaller\x00', 0x5, 0xa0, &(0x7f0000000200)=""/160, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_icmp(0x2, 0x2, 0x1) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 1.260784627s ago: executing program 2 (id=3663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xa930bb9f3fd061f1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x805}, 0x20000000) 1.174873214s ago: executing program 1 (id=3664): r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$FIOCLEX(r0, 0x5451) write(r0, &(0x7f0000000040)="c8c5caf8f3c0dc5121d2592d1779deddfdd32904b7b857b5a20c248ff80552953c459700978fa6a3c7c82c11ec0d03d8ab1b73547d65f3b2f694739f9f21db4186209f3a390b6efe53800a77d2dd68a33d83d39bdfd21ca9c69c149c7a0bfe2817b22aac78dc4f632523e546fa9b628a776be9b78317a123775e269f8427d3cd2cc032ad750375056751e3614b3f80afda4ee8080937b36071f9ed9c478e712a4a44349cf87f20d5682f45ce8367b0b213741af039996458eec237297d0753ae010ac1e4742e5d282a843eee87cd7a2c6f", 0xd1) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000140)={0x1, @remote, 0x4e23, 0x0, 'rr\x00', 0x9, 0x24ed, 0x41}, 0x2c) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)={0x2, 'macvlan0\x00', {0x7}, 0x7}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) getpeername$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @multicast2}, &(0x7f0000000300)=0x10) bind$alg(r1, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f00000003c0)={'HL\x00'}, &(0x7f0000000400)=0x1e) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000440)={'NETMAP\x00'}, &(0x7f0000000480)=0x1e) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x200100, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000580)={'tunl0\x00', @multicast}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000005c0)={0x644, 0x8, 0x7ff, 0xe}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'tunl0\x00', 0x0, 0x20, 0x8, 0x3, 0x9, {{0xf, 0x4, 0x1, 0x5, 0x3c, 0xe, 0x0, 0x7, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1e}, {[@timestamp_prespec={0x44, 0xc, 0xdf, 0x3, 0x8, [{@local, 0x9}]}, @ssrr={0x89, 0x13, 0xc7, [@broadcast, @multicast2, @rand_addr=0x64010100, @rand_addr=0x64010101]}, @timestamp={0x44, 0x8, 0x3e, 0x0, 0xe, [0x0]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0}, &(0x7f0000000780)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x29, 0x7f, 0x1, 0x8, 0x28, @local, @mcast1, 0x10, 0x1, 0x38, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000880)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001b00)={&(0x7f00000008c0)={0x122c, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0xcc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xc6, 0x4, "fb65a70d72d48e9c7d2d09d4d34f1ef4c207c84f8daaf257afbe9984afae0706aafe2afc99dfd4571ceb2af188de467c2df3641f7c11a3deb172582f737693244de26c7abd365717c2f6c6d77d825562a36626c844426717eb18b4efb39b45f73af6b034ba7bd426050d866a94d7b501fa4da4bce6c99ead7ab7e441ba172deba8bd37a4dbc35a38f4cc4e816eebe824e7dc7139659dfca54953847e7fcce1d83b0beb814d88f2e979765d517b4e7e8bdf72860404f957658fe148b4970098ca313e"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x10ec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '-}]#&/-.$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'tgr128\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x37, 0x4, "362bca68cce8025e7af72f5334163db15ed5b510768b198d3e66c17a9f0ba49b7f27d8dfb90de08b0691f4829745be671ed7d0"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x122c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004050) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r9, &(0x7f0000001b80), 0x8) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000001bc0)=0xb8ce, 0x4) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockname$inet6(r10, &(0x7f0000001c00)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000001c40)=0x1c) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001c80)={0x0, @empty, @multicast1}, &(0x7f0000001cc0)=0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000001d00), 0x40, 0x0) 1.048298149s ago: executing program 4 (id=3665): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newsa={0xf0, 0x10, 0x1, 0x70bc29, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x2c}}, 0xf0}}, 0x44050) unshare(0x20000400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x30001, 0x8, 0x1}, 0x50) socketpair$unix(0x1, 0xf68032c5accb0617, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000000800)={{r4, &(0x7f0000000000)='/\x00', 0x2000, &(0x7f0000000080)={@_ha_fsid={[0x2, 0x20000]}, {0x7, 0x7d63, 0x80000, 0x1423825e}}, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x7}, 0x4, &(0x7f0000000780)=[{0x2, 0x6, &(0x7f0000000200)='GPL\x00', &(0x7f0000000240)="7d02038e4acc23e3ada34ff0d93b31087d357d7405e8a0856fef4a2bfeefc52d510ac6b5211abf41b4eb9efb37895726c5016974643f9da3dae6f0386ec51bdd767c92c4d2182775e6dad71219aad7469912d0fbfc39c31481fb8432b9304e1ef582ca3e6644af5049c871a7cd22ede3e9ca4f4c1b0c6e7c9b55fc889250d1ed55c9928279876f540d4daa35479cd87384ec73", 0x93, 0x10}, {0x3, 0xfff, &(0x7f0000000300)='{#&$\x00', &(0x7f0000000340)="171b4a2231194870938483829327971c1b62aad3bd6763f33670f1a408189cbda3577680ff03f7340b0b898e37005442a59b6af8475d360d6bdeb7f20b31e392669f03aeff85d13d5af26ab9", 0x4c, 0xa}, {0x1, 0x101, &(0x7f0000000440)=',\x00', &(0x7f0000000580)="4ce67c591d5272d8e090ef36c1396490fdfbd0a0fb8ea81bf292d7adff982169896c9aa9ac002e1f447257562be7380e2d86001b4c03c1a1eb31e4ddfb4e976a8667eb5ef85d9fcfb6067f283dcd95e9d45724dc7af4847808603d132e990b09b4b74a5c10c1a5ed2460d8e03929392bd351f4d0624afd785743689bb62d369baadc42956017c17f2ea6b45a830b", 0x8e, 0x18}, {0x0, 0x3, &(0x7f0000000640)='\'k,\x00', &(0x7f0000000700)="ef516b5ed3580e2f071d2519c86301badf85f88d05d3962138a200dbe27db4ba18bf6c54f34bd5ddc895a225c9bc9882e605584d576e35f430e406d36c355e8c49a1b846406bcefb767686c2d50fbe240a0f51ffc809cad71d242f5a39e20321c13f054350e71175413953012d3285aa5382d4383e", 0x75, 0x8}]}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1d, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f0000000140)=0x100000, 0x4) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r11, 0x11b, 0x3, &(0x7f0000000200)=0x100000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r11, 0x11b, 0x6, &(0x7f0000000080)=0x1220040, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r11, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r11, &(0x7f0000000100)={0x2c, 0x0, r12}, 0x10) bind$xdp(r10, &(0x7f0000000240)={0x2c, 0x1, r12, 0x0, r11}, 0x10) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000050000000800000040"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, r13, 0x4}, 0x38) readv(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000a40)=""/99, 0x63}, {&(0x7f0000000ac0)=""/226, 0xe2}, {&(0x7f0000000bc0)=""/87, 0x57}, {&(0x7f0000000c40)=""/74, 0x4a}], 0x4) 981.926457ms ago: executing program 2 (id=3666): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)="d8000000150081044e81f782db44b9040a87080211000000040000a118000200e000000800000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab44dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d1688683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bbfe5a09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000884) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) 919.599005ms ago: executing program 1 (id=3667): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x8, @loopback, 0x8, 0x8}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)="91", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="100000000000000084"], 0x10}}], 0x2, 0x44000044) (async) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x8, @loopback, 0x8, 0x8}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)="91", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="100000000000000084"], 0x10}}], 0x2, 0x44000044) unshare(0x8000000) 716.313218ms ago: executing program 2 (id=3668): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r1 = openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0xa2ec9000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000100)={0x1, 0x1, 0x1000, 0x15, &(0x7f0000000000)="655692dbd8ec65839da77ba786214ece7f15ec05f2", 0x2, 0x0, &(0x7f00000000c0)="b02e"}) 664.512011ms ago: executing program 1 (id=3669): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x94}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r2, &(0x7f0000000280)=0x4) clock_gettime(0x2, &(0x7f0000000180)) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000380)=@in4={0x21, 0x0, 0x2, 0xffffffffffffff3d, {0x2, 0x5, @multicast2}}, 0x24) syz_emit_ethernet(0xbe, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x12, 0x0, 0x2, 0x11, 0x0, @private=0xa010102, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "e9341abb40d54cdc9d7c2ffc708c140d0ee4be61641b962fa9d5482fc658d45e", "032f02cddc015605efc65830245077ec34c1b54965cf0ea20bcfaa584ffb2f4b7cb2909017d74f21d8f16f6a54e896a3", "c40c3ba4b692bdcd1a6526dc6f00", {"4b03000000000000006c00000000c1c5", "9b4bec86557cf5cdd100000000000400"}}}}}}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000380), 0x0) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000140)="010000000d800089", 0x8) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/68, 0x44}, {0x0}], 0x2) 525.237301ms ago: executing program 3 (id=3670): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x3e8, 0x20, 0x70bd2a, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x41}, 0x20000014) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x800, 0x18}, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex=r1, 0x26, 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r2, r1, 0x25, 0x12, @val=@tcx={@void, @value=r0, @void, @void, r3}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) write(r4, &(0x7f0000000500)="bc285497", 0x4) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 358.33817ms ago: executing program 0 (id=3671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x10, 0x803, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x128, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x20044010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x61}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r4, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="7a3c0ebd1f05f2c3bfb255d062d77537caa689d335414b7dc672c01c37148221", 0x20}], 0x1}}], 0x1, 0x4000001) writev(r4, &(0x7f0000000180)=[{&(0x7f00000003c0)="13", 0x1}], 0x1) sendto$inet(r4, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 309.58095ms ago: executing program 2 (id=3672): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x153faadd}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008010}, 0x10000080) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffffd}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000280)='syzkaller0\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000300)="42fb658dcec25da7", 0x8}], 0x1, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_retopts={{0x54, 0x0, 0x7, {[@end, @lsrr={0x83, 0xb, 0x10, [@dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x34}]}, @timestamp_addr={0x44, 0x14, 0x31, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@local, 0xffffffff}]}, @ssrr={0x89, 0xf, 0x36, [@private=0xa010101, @remote, @remote]}, @ra={0x94, 0x4, 0x1}, @generic={0x44, 0xf, "7a3f49739239060326dce025bc"}]}}}], 0x110}, 0x4008001) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000540)={0x10001, 0xec, 0x6, 0x0, 0x4, 0x1, 0x1, 0x3}, &(0x7f0000000580)={0xc0e84b2, 0x4, 0x3ee, 0x7, 0x7010, 0xffff, 0x5}, &(0x7f00000005c0)={0xc, 0x1, 0x6, 0x8, 0x80000001, 0x1, 0x1, 0x8}, &(0x7f0000000640)={r3, r4+60000000}, &(0x7f00000006c0)={&(0x7f0000000680)={[0xfffffffffffffff8]}, 0x8}) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, 0x7, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r7, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x57}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8011}, 0x8000) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000980)={0x0, {{0x2, 0x4e23, @private=0xa010102}}}, 0x88) clock_gettime(0x2, &(0x7f0000000a40)) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r7, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44800}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, r0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="65a6d1984bc4"}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4002015}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000cc0), r9) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), r9) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000f80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d80)={0x1ac, r10, 0x52fba013543b3a68, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x65c}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaad}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbf}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaae}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3b9}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x41}, 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000002, 0x100010, r6, 0x80bbc000) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r5, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r11, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x20004000) socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r9) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0xc0, r13, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x39}}}}, [@chandef_params, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x29}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x80}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd0}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x266}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x35c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20008004}, 0x2000c000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 92.501202ms ago: executing program 4 (id=3673): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x70bd25, 0x2, {0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x42}, 0x4002810) r1 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) r7 = socket$inet(0x2, 0x1, 0x6) bind(r7, &(0x7f0000000300)=@in={0x2, 0x4908, @loopback}, 0x10) listen(r7, 0x5) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x2b}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) r8 = socket$inet(0x2, 0x1, 0x6) connect(r8, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x0) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x20, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40800) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x871a15abc695fa1d, 0x0, 0x25dfdbfc, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x5, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcc1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xe106, 0x5, 0x2, 0x9, 0xb3}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) 91.509251ms ago: executing program 3 (id=3674): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000640)={{0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x10000, &(0x7f00000000c0)={@align=0x5, {0x6, 0x7, 0x2, 0x6}}, 0x80000001, &(0x7f0000000100), &(0x7f0000000140)=0x1}, 0x6, &(0x7f0000000580)=[{0x1, 0x1, &(0x7f0000000180)='^!\x00', &(0x7f00000001c0)="3f4892a64d3bb57d632e8c27b54373988413f9c72462d1cfe389e5667b2b1c29520a90af7d2e6c", 0x27}, {0x1, 0x3, &(0x7f0000000200)='//&)\x00', &(0x7f0000000240), 0x0, 0x3a}, {0x2, 0x3, &(0x7f0000000280)='-+{-+]\\\x00', &(0x7f00000002c0)="bab88b6d2c718b80b74c37df52e0dfc809f27e18270d68a920f34121d07c749099175cbdf0a5eb6c7d3e4b4b5c6ddce50a2fbfcb00270e212a6786b51c0686943bd5dc9ae6d8c4e69aa8defb2496ba9d4a85eed51e191ffb6094d5712332f4d9f02b946d61b4e68f30ffd051", 0x6c, 0x28}, {0x3, 0x6, &(0x7f0000000340)='\xdb\x00', &(0x7f0000000380)="353c9900b19b8889269a0f05c01fa83e8e28e4ad2731db9cd7c8fdb13314c9bddc8a32f67da397b245a878b3024e3f791edaff146e7ed1fcd40378729ff1a5d6e42a9acba86e93e8296be418cd24e4977ec6f35a04253117b55eac225168f110fe21fdb32f890719b7b530c792b97437c22ca2826cc7", 0x76, 0x12}, {0x0, 0x7ff, &(0x7f0000000400)='\x00', &(0x7f0000000440)="bd377315c871df054a8037abc92b0dd43ae4499b8a5a65d599519448d3d24cb64326673030c6182bd84aef223d3ddc004335f238f55d82c6e0f44f460cff193a07f045c0ac52fb961128ef13f6485ea0e95ec4e042984d4bf06b4a4fa4622a578a4f4db9126960b2de1a38c3fcba1124524c4204ef17233cf6ef46fd86e0f5006f89ddc7202fccf04c4cb99e91feaaf05cc6c96f2296f534", 0x98, 0xa}, {0x0, 0x1, &(0x7f0000000500)='%)\x00', &(0x7f0000000540)="c747c3c5fdb9aae24d842bd28c27e8d9e3317659113a432d38b70e58aec8cf3536e5e87402eadd9ef5b5f7b62dc67c852b40563f4a", 0x35, 0x2}]}) recvmsg$can_bcm(r0, &(0x7f0000000cc0)={&(0x7f00000006c0)=@xdp, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000740)=""/237, 0xed}, {&(0x7f0000000840)=""/158, 0x9e}, {&(0x7f0000000900)=""/159, 0x9f}, {&(0x7f00000009c0)=""/126, 0x7e}, {&(0x7f0000000a40)=""/43, 0x2b}, {&(0x7f0000000a80)=""/167, 0xa7}, {&(0x7f0000000b40)=""/6, 0x6}, {&(0x7f0000000b80)=""/82, 0x52}], 0x8, &(0x7f0000000c80)=""/42, 0x2a}, 0x61) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000), 0x4) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000d00)={0x0, @hci={0x1f, 0x1, 0x4}, @nfc={0x27, 0x0, 0x0, 0x4}, @llc={0x1a, 0x337, 0x1b, 0xf, 0xa, 0x1, @local}, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x5, 0x401, 0x7f}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1e) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000640)={{0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x10000, &(0x7f00000000c0)={@align=0x5, {0x6, 0x7, 0x2, 0x6}}, 0x80000001, &(0x7f0000000100), &(0x7f0000000140)=0x1}, 0x6, &(0x7f0000000580)=[{0x1, 0x1, &(0x7f0000000180)='^!\x00', &(0x7f00000001c0)="3f4892a64d3bb57d632e8c27b54373988413f9c72462d1cfe389e5667b2b1c29520a90af7d2e6c", 0x27}, {0x1, 0x3, &(0x7f0000000200)='//&)\x00', &(0x7f0000000240), 0x0, 0x3a}, {0x2, 0x3, &(0x7f0000000280)='-+{-+]\\\x00', &(0x7f00000002c0)="bab88b6d2c718b80b74c37df52e0dfc809f27e18270d68a920f34121d07c749099175cbdf0a5eb6c7d3e4b4b5c6ddce50a2fbfcb00270e212a6786b51c0686943bd5dc9ae6d8c4e69aa8defb2496ba9d4a85eed51e191ffb6094d5712332f4d9f02b946d61b4e68f30ffd051", 0x6c, 0x28}, {0x3, 0x6, &(0x7f0000000340)='\xdb\x00', &(0x7f0000000380)="353c9900b19b8889269a0f05c01fa83e8e28e4ad2731db9cd7c8fdb13314c9bddc8a32f67da397b245a878b3024e3f791edaff146e7ed1fcd40378729ff1a5d6e42a9acba86e93e8296be418cd24e4977ec6f35a04253117b55eac225168f110fe21fdb32f890719b7b530c792b97437c22ca2826cc7", 0x76, 0x12}, {0x0, 0x7ff, &(0x7f0000000400)='\x00', &(0x7f0000000440)="bd377315c871df054a8037abc92b0dd43ae4499b8a5a65d599519448d3d24cb64326673030c6182bd84aef223d3ddc004335f238f55d82c6e0f44f460cff193a07f045c0ac52fb961128ef13f6485ea0e95ec4e042984d4bf06b4a4fa4622a578a4f4db9126960b2de1a38c3fcba1124524c4204ef17233cf6ef46fd86e0f5006f89ddc7202fccf04c4cb99e91feaaf05cc6c96f2296f534", 0x98, 0xa}, {0x0, 0x1, &(0x7f0000000500)='%)\x00', &(0x7f0000000540)="c747c3c5fdb9aae24d842bd28c27e8d9e3317659113a432d38b70e58aec8cf3536e5e87402eadd9ef5b5f7b62dc67c852b40563f4a", 0x35, 0x2}]}) (async) recvmsg$can_bcm(r0, &(0x7f0000000cc0)={&(0x7f00000006c0)=@xdp, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000740)=""/237, 0xed}, {&(0x7f0000000840)=""/158, 0x9e}, {&(0x7f0000000900)=""/159, 0x9f}, {&(0x7f00000009c0)=""/126, 0x7e}, {&(0x7f0000000a40)=""/43, 0x2b}, {&(0x7f0000000a80)=""/167, 0xa7}, {&(0x7f0000000b40)=""/6, 0x6}, {&(0x7f0000000b80)=""/82, 0x52}], 0x8, &(0x7f0000000c80)=""/42, 0x2a}, 0x61) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000), 0x4) (async) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000d00)={0x0, @hci={0x1f, 0x1, 0x4}, @nfc={0x27, 0x0, 0x0, 0x4}, @llc={0x1a, 0x337, 0x1b, 0xf, 0xa, 0x1, @local}, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x5, 0x401, 0x7f}) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) (async) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1e) (async) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) 88.277688ms ago: executing program 0 (id=3675): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)=r1}, 0x20) socket(0x1e, 0x2, 0x0) (async) r2 = socket(0x1e, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) epoll_create1(0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x2017be01}) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x2017be01}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)={0x40000000}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x12b100, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x4006, 0x2, 0x74, 0x500}, {0x7, 0xff, 0x6, 0xfa56}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x4006, 0x2, 0x74, 0x500}, {0x7, 0xff, 0x6, 0xfa56}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x8, 0x100000000}}}}}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000640)=ANY=[], 0x0) socket$netlink(0x10, 0x3, 0x14) (async) socket$netlink(0x10, 0x3, 0x14) pipe(&(0x7f0000000340)) (async) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r9, &(0x7f0000000140)=[{&(0x7f0000000180)='c', 0x1}], 0x1, 0x2) (async) vmsplice(r9, &(0x7f0000000140)=[{&(0x7f0000000180)='c', 0x1}], 0x1, 0x2) socket$unix(0x1, 0x1, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r10, 0x0) (async) listen(r10, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) 0s ago: executing program 2 (id=3676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x20}, 0x8) (async) sendto$inet6(r2, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000040)=0x4, 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) kernel console output (not intermixed with test programs): an2: entered allmulticast mode [ 433.116608][T17149] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 433.357326][T17156] syzkaller0: entered promiscuous mode [ 433.367946][T17156] syzkaller0: entered allmulticast mode [ 433.449126][T17169] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 433.523073][T17169] bond12 (unregistering): Released all slaves [ 435.296319][ T5712] net_ratelimit: 29 callbacks suppressed [ 435.296341][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.390562][T17172] __nla_validate_parse: 3 callbacks suppressed [ 435.390581][T17172] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2684'. [ 435.414633][T17176] tap0: tun_chr_ioctl cmd 1074025677 [ 435.420211][T17176] tap0: linktype set to 805 [ 435.425219][ T1012] bond0: (slave bridge2): failed to get link speed/duplex [ 435.544196][T17180] netlink: 'syz.3.2687': attribute type 4 has an invalid length. [ 435.555903][T17180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2687'. [ 435.591720][ T1155] bond0: (slave bridge2): failed to get link speed/duplex [ 435.641457][T17184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.650846][T17184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.659408][T17184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.715425][T17184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.741562][ T977] bond0: (slave bridge2): failed to get link speed/duplex [ 435.770887][T17184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.790455][T17184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.847322][T17186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2688'. [ 435.879016][T17191] Cannot find add_set index 2 as target [ 435.939253][T17181] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2686'. [ 435.972836][T17181] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2686'. [ 436.122834][T17200] x_tables: duplicate underflow at hook 1 [ 436.282008][T17197] syzkaller0: entered promiscuous mode [ 436.292305][T17197] syzkaller0: entered allmulticast mode [ 437.470493][T17231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2702'. [ 438.708075][T17246] veth1_to_bond: entered allmulticast mode [ 438.723481][T17246] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2704'. [ 438.844164][T17259] xt_hashlimit: size too large, truncated to 1048576 [ 438.894312][T17251] veth1_macvtap: left promiscuous mode [ 438.915772][T17251] veth0_macvtap: left promiscuous mode [ 438.942606][T17251] veth0_macvtap: entered promiscuous mode [ 438.961020][T17267] xt_hashlimit: size too large, truncated to 1048576 [ 438.967986][T17251] veth1_macvtap: entered promiscuous mode [ 439.006880][T17251] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 439.027791][T17251] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 439.038960][T17251] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 439.049348][T17251] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 439.092082][ T5712] geneve0: entered promiscuous mode [ 439.169537][T17246] veth1_to_bond: left allmulticast mode [ 439.202326][T17251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.368579][T17276] netlink: 'syz.2.2710': attribute type 10 has an invalid length. [ 439.385008][T17276] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2710'. [ 439.420328][T17272] syzkaller0: entered promiscuous mode [ 439.426537][T17272] syzkaller0: entered allmulticast mode [ 439.508688][T17284] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 439.560378][T17287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2711'. [ 439.582334][T17284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2712'. [ 440.093965][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.100332][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.493962][ T7530] net_ratelimit: 24 callbacks suppressed [ 440.493979][ T7530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.530941][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.567168][T17288] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 441.575836][T17288] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 441.584055][T17288] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 441.606262][T17295] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 441.810999][ T1155] bond0: (slave bridge2): failed to get link speed/duplex [ 441.828402][T17304] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2716'. [ 441.847331][T17304] netlink: 'syz.4.2716': attribute type 9 has an invalid length. [ 441.856737][T17304] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2716'. [ 441.866746][T17304] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2716'. [ 441.943559][ T1155] bond0: (slave bridge2): failed to get link speed/duplex [ 442.035494][T17308] 8021q: VLANs not supported on ip_vti0 [ 442.051348][T17317] netlink: 'syz.3.2720': attribute type 3 has an invalid length. [ 442.068760][T17317] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2720'. [ 442.103709][ T1155] bond0: (slave bridge2): failed to get link speed/duplex [ 442.167896][T17327] netlink: 'syz.4.2723': attribute type 1 has an invalid length. [ 442.264965][T17333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2724'. [ 442.339588][T17319] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 442.365796][T17319] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 442.398900][T17334] bond6: (slave bridge9): Enslaving as a backup interface with an up link [ 442.430764][ T13] bond0: (slave bridge2): failed to get link speed/duplex [ 442.448316][T17340] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2726'. [ 442.571612][ T96] bond0: (slave bridge2): failed to get link speed/duplex [ 442.830509][T17354] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2731'. [ 442.845740][T17352] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2729'. [ 443.154099][T17350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2730'. [ 443.162363][T17362] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2733'. [ 443.201950][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 443.245347][T17366] No such timeout policy "syz1" [ 443.309561][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 443.318526][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 443.326693][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 443.326797][T17361] lo: Caught tx_queue_len zero misconfig [ 443.346630][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 443.477640][T17361] netlink: 'syz.2.2733': attribute type 14 has an invalid length. [ 443.495010][T17367] netlink: 'syz.2.2733': attribute type 3 has an invalid length. [ 443.636506][ T5606] bond2: (slave syz_tun): Releasing active interface [ 443.922496][ T48] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.107628][T17383] ip6gre4: entered promiscuous mode [ 444.142259][T17383] ip6gre4: entered allmulticast mode [ 444.233383][ T48] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.381258][ T48] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.557550][ T48] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.817074][T17405] x_tables: unsorted entry at hook 3 [ 445.461064][ T5609] Bluetooth: hci5: command tx timeout [ 445.691251][ T5712] net_ratelimit: 13 callbacks suppressed [ 445.691271][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.842556][ T7527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.873442][ T1155] netdevsim netdevsim0 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.904050][ T1155] netdevsim netdevsim0 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.950727][ T1155] bond0: (slave bridge2): failed to get link speed/duplex [ 445.990720][ T1155] netdevsim netdevsim0 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.024360][ T1155] netdevsim netdevsim0 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.091151][ T13] bond0: (slave bridge2): failed to get link speed/duplex [ 446.210814][ T12] bond0: (slave bridge2): failed to get link speed/duplex [ 446.732700][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.811610][ T12] bond0: (slave bridge2): failed to get link speed/duplex [ 446.841196][T17363] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.859746][T17363] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.899165][T17363] bridge_slave_0: entered allmulticast mode [ 446.923681][T17363] bridge_slave_0: entered promiscuous mode [ 446.948059][T17363] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.970090][T17363] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.995705][T17363] bridge_slave_1: entered allmulticast mode [ 447.030403][T17363] bridge_slave_1: entered promiscuous mode [ 447.068836][T17475] Cannot find del_set index 3 as target [ 447.132329][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.160977][T17479] __nla_validate_parse: 3 callbacks suppressed [ 447.160994][T17479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2752'. [ 447.188786][T17363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.240438][T17363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.356084][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 447.389207][T17363] team0: Port device team_slave_0 added [ 447.409323][T17363] team0: Port device team_slave_1 added [ 447.447470][T17482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.457425][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.513674][T17363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.530806][ T5609] Bluetooth: hci5: command tx timeout [ 447.542062][T17363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.590783][T17363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.616060][T17363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.630738][T17363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.687505][T17363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.734765][T17492] netlink: 'syz.3.2756': attribute type 29 has an invalid length. [ 447.757653][T17492] netlink: 'syz.3.2756': attribute type 1 has an invalid length. [ 448.245687][ T48] bridge0: left allmulticast mode [ 448.294465][ T48] pimreg: left allmulticast mode [ 448.311336][ T48] dvmrp8: left allmulticast mode [ 448.317499][ T48] pimreg9: left allmulticast mode [ 448.989495][ T48] bond4 (unregistering): (slave gre1): Releasing backup interface [ 449.240292][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.275856][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.304439][ T48] bond0 (unregistering): Released all slaves [ 449.328036][ T48] bond1 (unregistering): Released all slaves [ 449.357323][T17535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2766'. [ 449.357343][ T48] bond2 (unregistering): Released all slaves [ 449.391469][ T48] bond3 (unregistering): Released all slaves [ 449.412928][ T48] bond4 (unregistering): Released all slaves [ 449.458986][ T48] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 449.475529][ T48] bond5 (unregistering): Released all slaves [ 449.515445][ T48] bond6 (unregistering): (slave veth5): Releasing active interface [ 449.523648][ T48] batadv1: entered promiscuous mode [ 449.536246][ T48] bond6 (unregistering): (slave batadv1): Releasing active interface [ 449.547145][ T48] bond6 (unregistering): Released all slaves [ 449.580359][ T48] bond7 (unregistering): Released all slaves [ 449.618457][T17363] hsr_slave_0: entered promiscuous mode [ 449.635020][ T5609] Bluetooth: hci5: command tx timeout [ 449.658788][T17363] hsr_slave_1: entered promiscuous mode [ 449.670288][T17363] debugfs: 'hsr0' already exists in 'hsr' [ 449.685996][T17363] Cannot create hsr debugfs directory [ 449.775293][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 449.866676][ T48] : left promiscuous mode [ 450.059134][T17544] syzkaller0: entered promiscuous mode [ 450.081610][T17544] syzkaller0: entered allmulticast mode [ 450.489396][T17566] block nbd0: reconnected socket [ 450.505484][T17566] nbd: socks must be embedded in a SOCK_ITEM attr [ 450.895287][ T5712] net_ratelimit: 17 callbacks suppressed [ 450.895307][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.298492][ T5609] block nbd0: Receive control failed (result -32) [ 451.694182][ T5609] Bluetooth: hci5: command tx timeout [ 451.934498][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.949211][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.751387][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 452.856306][T17588] gretap0: entered promiscuous mode [ 452.972408][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.068975][T17610] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2778'. [ 453.119912][T17612] netlink: 'syz.4.2779': attribute type 10 has an invalid length. [ 453.137602][T17610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.175768][T17612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2779'. [ 453.243340][T17622] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 453.404219][T17625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2781'. [ 453.438194][T17625] netlink: 356 bytes leftover after parsing attributes in process `syz.2.2781'. [ 453.463144][T17628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2781'. [ 453.478350][T17631] netlink: 'syz.3.2784': attribute type 1 has an invalid length. [ 453.500925][T17626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2781'. [ 453.814314][T17637] macvtap1: entered allmulticast mode [ 453.830117][T17639] netlink: 'syz.4.2783': attribute type 16 has an invalid length. [ 453.851433][ T977] bond0: (slave bridge2): failed to get link speed/duplex [ 453.962392][T17631] bond14: (slave bridge10): making interface the new active one [ 453.972228][T17631] bond14: (slave bridge10): Enslaving as an active interface with an up link [ 454.010989][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.119632][T17649] tipc: Enabling of bearer rejected, failed to enable media [ 454.166439][T17643] syzkaller1: entered promiscuous mode [ 454.196954][T17643] syzkaller1: entered allmulticast mode [ 454.383130][T17363] netdevsim netdevsim0 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.575966][ T8088] bond0: (slave bridge2): failed to get link speed/duplex [ 454.945251][T17700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.954250][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.039985][T17682] syzkaller0: entered promiscuous mode [ 455.050897][T17682] syzkaller0: entered allmulticast mode [ 455.152390][T17363] netdevsim netdevsim0 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.312427][T17713] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2793'. [ 455.323079][T17713] netlink: 'syz.4.2793': attribute type 7 has an invalid length. [ 455.331792][T17713] netlink: 'syz.4.2793': attribute type 8 has an invalid length. [ 455.339723][T17713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2793'. [ 456.097029][ T7765] net_ratelimit: 14 callbacks suppressed [ 456.097051][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.738891][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.135312][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.383659][T17363] netdevsim netdevsim0 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.503875][ T48] hsr_slave_0: left promiscuous mode [ 457.523084][ T48] hsr_slave_1: left promiscuous mode [ 457.541799][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.549310][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.575422][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.596936][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.689838][ T48] veth0_macvtap: left promiscuous mode [ 457.749269][T17736] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2797'. [ 457.776356][T17736] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2797'. [ 457.876194][T17742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.015797][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.170901][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.543648][T17363] netdevsim netdevsim0 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.621655][ T1155] bond0: (slave bridge2): failed to get link speed/duplex [ 458.825401][ T8088] bond0: (slave bridge2): failed to get link speed/duplex [ 458.833448][T17775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2800'. [ 459.160876][T17788] netlink: 'syz.3.2802': attribute type 8 has an invalid length. [ 459.198278][T17788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2802'. [ 459.213061][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.411707][ T8087] bond0: (slave bridge2): failed to get link speed/duplex [ 459.690042][T17805] netlink: 'syz.3.2805': attribute type 13 has an invalid length. [ 459.697081][ T48] IPVS: stop unused estimator thread 0... [ 459.754685][T17805] netlink: 'syz.3.2805': attribute type 17 has an invalid length. [ 459.911195][T17818] netlink: 'syz.2.2808': attribute type 4 has an invalid length. [ 459.914314][T17805] erspan0: refused to change device tx_queue_len [ 459.930381][T17820] netlink: 'syz.2.2808': attribute type 4 has an invalid length. [ 459.957861][T17820] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2808'. [ 459.978368][T17812] tap0: tun_chr_ioctl cmd 1074025677 [ 459.983258][T17818] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2808'. [ 460.015898][T17812] tap0: linktype set to 805 [ 460.123693][T17363] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 460.184177][T17363] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 460.202838][T17363] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 460.224944][T17363] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 460.236574][T17363] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 460.254138][T17363] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 460.266667][T17363] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 460.324530][T17363] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 460.445516][T17833] block nbd3: server does not support multiple connections per device. [ 460.478935][T17833] block nbd3: shutting down sockets [ 460.605661][T17833] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2811'. [ 460.708195][T17363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.747493][T17860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2816'. [ 460.774599][T17363] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.809586][ T977] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.816841][ T977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.839745][ T977] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.846971][ T977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.121510][ T8088] net_ratelimit: 11 callbacks suppressed [ 461.121528][ T8088] bond0: (slave bridge2): failed to get link speed/duplex [ 461.197526][T17833] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 461.229621][T17833] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 461.281392][ T12] bond0: (slave bridge2): failed to get link speed/duplex [ 461.297109][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.432503][ T8088] bond0: (slave bridge2): failed to get link speed/duplex [ 461.482403][T17883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2821'. [ 461.601057][ T1155] bond0: (slave bridge2): failed to get link speed/duplex [ 461.720814][ T8088] bond0: (slave bridge2): failed to get link speed/duplex [ 461.831976][T17900] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2825'. [ 461.883735][T17904] gretap4: entered allmulticast mode [ 461.913936][ T48] bond0: (slave bridge2): failed to get link speed/duplex [ 462.042860][ T1155] bond0: (slave bridge2): failed to get link speed/duplex [ 462.187724][T17922] pimreg: entered allmulticast mode [ 462.241179][ T8088] bond0: (slave bridge2): failed to get link speed/duplex [ 462.333960][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.488619][T17363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.548521][T17942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2836'. [ 462.705740][T17363] veth0_vlan: entered promiscuous mode [ 462.748842][T17363] veth1_vlan: entered promiscuous mode [ 462.836666][T17952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2838'. [ 462.854805][T17363] veth0_macvtap: entered promiscuous mode [ 462.899457][T17363] veth1_macvtap: entered promiscuous mode [ 463.004675][T17952] netlink: 'syz.1.2838': attribute type 1 has an invalid length. [ 463.009440][T17363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.083491][T17363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.298431][T17972] netlink: 'syz.1.2843': attribute type 11 has an invalid length. [ 463.311046][T17975] netlink: 'syz.1.2843': attribute type 11 has an invalid length. [ 463.361553][ T8088] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.380422][ T8088] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.561175][ T977] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.614291][ T977] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.808795][T17992] netlink: 'syz.1.2847': attribute type 1 has an invalid length. [ 463.828557][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.857097][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.002307][T17992] 8021q: adding VLAN 0 to HW filter on device bond6 [ 464.020821][T17995] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2848'. [ 464.086427][T17988] bond6: (slave veth0_to_bond): making interface the new active one [ 464.125095][T17988] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 464.246990][T17992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2847'. [ 464.263952][T17988] vcan0: entered allmulticast mode [ 464.336206][T18009] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2850'. [ 464.389031][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.416531][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.482529][T18009] netlink: 664 bytes leftover after parsing attributes in process `syz.4.2850'. [ 464.498471][T18009] netlink: 4362 bytes leftover after parsing attributes in process `syz.4.2850'. [ 464.514506][T18009] netlink: 37552 bytes leftover after parsing attributes in process `syz.4.2850'. [ 464.762975][T18021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2852'. [ 465.756419][T18062] ipt_REJECT: ECHOREPLY no longer supported. [ 465.770446][T18062] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 465.782296][T18066] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2862'. [ 465.879174][T18075] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2863'. [ 466.012557][T18080] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2864'. [ 466.250568][T18080] bond15 (unregistering): Released all slaves [ 466.331233][ T10] net_ratelimit: 26 callbacks suppressed [ 466.331252][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.396395][ T48] tipc: Subscription rejected, illegal request [ 466.464552][ T48] bond0: (slave bridge2): failed to get link speed/duplex [ 466.492098][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.596610][ T8088] bond0: (slave bridge2): failed to get link speed/duplex [ 466.742930][ T1155] bond0: (slave bridge2): failed to get link speed/duplex [ 467.081017][ T48] bond0: (slave bridge2): failed to get link speed/duplex [ 467.130899][T17853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.205256][T18108] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 467.262085][ T8088] bond0: (slave bridge2): failed to get link speed/duplex [ 467.392738][ T48] bond0: (slave bridge2): failed to get link speed/duplex [ 467.531506][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.484417][T18201] __nla_validate_parse: 2 callbacks suppressed [ 470.484438][T18201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2880'. [ 470.520721][T18201] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2880'. [ 470.540161][T18201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2880'. [ 470.570980][T18201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2880'. [ 470.605583][T18206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2878'. [ 470.678937][T18210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2878'. [ 471.085350][T18206] netlink: 'syz.0.2878': attribute type 2 has an invalid length. [ 471.130502][T18210] netlink: 'syz.0.2878': attribute type 2 has an invalid length. [ 471.391314][ T977] net_ratelimit: 7 callbacks suppressed [ 471.391334][ T977] bond0: (slave bridge2): failed to get link speed/duplex [ 471.550861][ T1155] bond0: (slave bridge2): failed to get link speed/duplex [ 471.683605][ T8081] bond0: (slave bridge2): failed to get link speed/duplex [ 471.704898][ T7530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.786665][T18245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2884'. [ 471.818485][ T48] bond0: (slave bridge2): failed to get link speed/duplex [ 471.835724][T18227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 471.868311][T18232] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 471.911314][T18250] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2885'. [ 471.950879][ T48] bond0: (slave bridge2): failed to get link speed/duplex [ 472.089294][ T48] bond0: (slave bridge2): failed to get link speed/duplex [ 472.119603][T18257] netlink: 'syz.3.2886': attribute type 1 has an invalid length. [ 472.213283][ T48] bond0: (slave bridge2): failed to get link speed/duplex [ 472.256795][T18257] bond15: entered promiscuous mode [ 472.283218][T18257] bond15: entered allmulticast mode [ 472.299261][T18257] 8021q: adding VLAN 0 to HW filter on device bond15 [ 472.343319][T18261] bridge11: entered promiscuous mode [ 472.349305][T18261] bridge11: entered allmulticast mode [ 472.356034][T18261] bond15: (slave bridge11): Enslaving as a backup interface with an up link [ 472.373932][ T48] bond15: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 472.408085][T18266] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 472.487823][T18266] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2888'. [ 472.523315][T18266] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2888'. [ 473.066452][T18291] bridge2: entered allmulticast mode [ 473.487920][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 473.502283][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 473.512253][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 473.526900][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 473.535165][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 474.306914][T18331] netlink: 'syz.0.2905': attribute type 10 has an invalid length. [ 474.714309][T18355] netlink: 'syz.1.2911': attribute type 1 has an invalid length. [ 475.414442][T18304] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.437099][T18304] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.445558][T18304] bridge_slave_0: entered allmulticast mode [ 475.454811][T18304] bridge_slave_0: entered promiscuous mode [ 475.464295][T18383] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 475.467660][T18304] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.484275][T18304] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.492137][T18304] bridge_slave_1: entered allmulticast mode [ 475.500031][T18304] bridge_slave_1: entered promiscuous mode [ 475.625879][ T5609] Bluetooth: hci0: command tx timeout [ 475.641275][T18392] netlink: 'syz.0.2914': attribute type 3 has an invalid length. [ 475.650424][T18392] netlink: 'syz.0.2914': attribute type 3 has an invalid length. [ 475.666058][T18304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.724164][T18304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.802650][T18402] __nla_validate_parse: 5 callbacks suppressed [ 475.802668][T18402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2917'. [ 475.956454][T18402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.965136][T18402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.975623][T18402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.986136][T18402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.995321][T18407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2918'. [ 476.006534][T18402] bond0: (slave batadv0): Releasing backup interface [ 476.028800][T18304] team0: Port device team_slave_0 added [ 476.197009][T18407] veth13: entered allmulticast mode [ 476.213867][T18304] team0: Port device team_slave_1 added [ 476.218565][T18419] netlink: 'syz.1.2921': attribute type 1 has an invalid length. [ 476.892086][ T7530] net_ratelimit: 27 callbacks suppressed [ 476.892108][ T7530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.693252][ T5609] Bluetooth: hci0: command tx timeout [ 477.935702][ T7530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.256980][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.330083][T18422] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 478.332144][ T48] bond0: (slave bridge2): failed to get link speed/duplex [ 478.371978][T18304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.385147][T18304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.459270][T18304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.512290][T18304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.548313][T18304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.592073][T18304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.881522][T18452] netlink: 'syz.4.2929': attribute type 12 has an invalid length. [ 478.901053][T18452] netlink: 'syz.4.2929': attribute type 29 has an invalid length. [ 478.909997][T18452] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2929'. [ 478.922012][T18452] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2929'. [ 478.942116][T18304] hsr_slave_0: entered promiscuous mode [ 478.949074][T18304] hsr_slave_1: entered promiscuous mode [ 478.956115][T18304] debugfs: 'hsr0' already exists in 'hsr' [ 478.962312][T18304] Cannot create hsr debugfs directory [ 478.973438][ T7530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.281716][ T96] bond0: (slave bridge2): failed to get link speed/duplex [ 479.291512][T17853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.432757][ T5762] bond0: (slave bridge2): failed to get link speed/duplex [ 479.495510][T18483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2936'. [ 479.620263][T18498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2937'. [ 479.634326][T18483] smc: net device vlan1 applied user defined pnetid SYZ2 [ 479.695639][ T13] bond0: (slave bridge2): failed to get link speed/duplex [ 479.771829][ T5609] Bluetooth: hci0: command tx timeout [ 479.968175][T18304] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.978896][T18304] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 479.994238][T18304] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.007340][T18304] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 480.036248][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.333778][T18517] vlan3: entered promiscuous mode [ 480.450032][T18523] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2940'. [ 480.521259][T18526] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2944'. [ 480.584337][T18527] xt_recent: Unsupported userspace flags (000000c5) [ 480.614761][T18304] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.628359][T18304] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 480.640197][T18304] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.652356][T18304] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 481.048244][T18304] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.123733][T18304] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 481.181924][T18304] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.209331][T18304] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 481.349842][T18537] ip6tnl1: entered allmulticast mode [ 481.375926][ T48] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 481.436240][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 481.445890][ T48] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 481.477358][T18541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2950'. [ 481.502428][T18541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2950'. [ 481.673145][T18304] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.733692][T18304] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 481.780519][T18304] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.818159][T18304] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 481.863077][ T5609] Bluetooth: hci0: command tx timeout [ 481.974387][T18556] netlink: 'syz.1.2952': attribute type 2 has an invalid length. [ 482.037400][T18556] netlink: 'syz.1.2952': attribute type 2 has an invalid length. [ 482.206897][ T7765] net_ratelimit: 5 callbacks suppressed [ 482.206917][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.214177][T18553] tipc: Started in network mode [ 482.250539][T18553] tipc: Node identity , cluster identity 4711 [ 482.257695][T18553] tipc: Failed to obtain node identity [ 482.264483][T18553] tipc: Enabling of bearer rejected, failed to enable media [ 482.279650][T18555] netlink: 'syz.0.2953': attribute type 3 has an invalid length. [ 482.287959][ T5762] bond0: (slave bridge2): failed to get link speed/duplex [ 482.297748][T18558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2953'. [ 482.331624][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.356623][T18555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2953'. [ 482.420860][ T36] bond0: (slave bridge2): failed to get link speed/duplex [ 482.491203][ T5719] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 482.518281][ T5719] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 482.590214][T18564] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2956'. [ 482.599685][T18564] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 482.609525][T18564] sctp: [Deprecated]: syz.2.2956 (pid 18564) Use of int in maxseg socket option. [ 482.609525][T18564] Use struct sctp_assoc_value instead [ 482.646924][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 482.653682][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 482.660299][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 482.666946][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 482.673567][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 482.680146][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 482.686778][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 482.693427][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 483.211726][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.449949][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069e1e800: rx timeout, send abort [ 483.905652][T18592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.960319][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069e1e800: abort rx timeout. Force session deactivation [ 483.981484][T18593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.993177][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.251663][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.045434][T18564] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 485.366521][T18605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2967'. [ 485.381458][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 485.423590][T18304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 485.465938][T18304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 485.496462][T18304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 485.556579][T18304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 485.579797][T18304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 485.624728][T18304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 485.634450][T18622] netlink: 'syz.0.2972': attribute type 49 has an invalid length. [ 485.661962][T18304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 485.690340][T18304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 485.801274][T18635] gretap0: entered promiscuous mode [ 485.957703][T18645] Bluetooth: MGMT ver 1.23 [ 485.970428][T18304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.004490][T18304] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.020007][T18646] netlink: 'syz.0.2975': attribute type 1 has an invalid length. [ 486.038020][T11623] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.045237][T11623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.065535][T18646] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2975'. [ 486.230538][T11623] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.237790][T11623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.443990][T18659] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2980'. [ 486.467592][T18659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2980'. [ 486.802410][ T96] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.833620][ T96] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.214980][T11623] net_ratelimit: 15 callbacks suppressed [ 487.214999][T11623] bond0: (slave bridge2): failed to get link speed/duplex [ 487.269487][T18701] netlink: 'syz.4.2988': attribute type 1 has an invalid length. [ 487.285386][T18703] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 487.302043][T18703] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 487.352217][T18701] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 487.352714][T18706] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 487.378619][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.389661][ T977] bond0: (slave bridge2): failed to get link speed/duplex [ 487.418489][T18304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.609275][T18304] veth0_vlan: entered promiscuous mode [ 487.643221][T18715] netlink: 'syz.4.2992': attribute type 1 has an invalid length. [ 487.651454][ T977] bond0: (slave bridge2): failed to get link speed/duplex [ 487.803845][T18715] bond7: entered promiscuous mode [ 487.815123][T18715] 8021q: adding VLAN 0 to HW filter on device bond7 [ 487.825620][T18304] veth1_vlan: entered promiscuous mode [ 487.846744][T18729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2995'. [ 487.873022][T18715] 8021q: adding VLAN 0 to HW filter on device bond7 [ 487.880189][T18715] bond7: (slave xfrm2): The slave device specified does not support setting the MAC address [ 487.893158][T18715] bond7: (slave xfrm2): Setting fail_over_mac to active for active-backup mode [ 487.906613][T18715] bond7: (slave xfrm2): making interface the new active one [ 487.915013][T18715] xfrm2: entered promiscuous mode [ 487.925982][T18715] xfrm2: left promiscuous mode [ 487.940282][T18729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2995'. [ 487.966609][T18724] tipc: Enabling of bearer rejected, failed to enable media [ 488.004205][T18724] pim6reg1: entered promiscuous mode [ 488.009719][T18724] pim6reg1: entered allmulticast mode [ 488.033287][ T977] bond0: (slave bridge2): failed to get link speed/duplex [ 488.076440][T18304] veth0_macvtap: entered promiscuous mode [ 488.088960][T18304] veth1_macvtap: entered promiscuous mode [ 488.126087][T18304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.161942][T18304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.210793][ T36] bond0: (slave bridge2): failed to get link speed/duplex [ 488.308531][ T977] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.350330][ T977] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.400874][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.412950][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.421213][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.436740][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.542225][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.563528][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.818076][ T977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.847175][ T977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.865008][T18752] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3002'. [ 488.969676][T18763] netlink: 'syz.1.3005': attribute type 1 has an invalid length. [ 488.999419][T18763] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3005'. [ 489.068629][T18769] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3007'. [ 489.232251][T18773] netlink: 'syz.3.2895': attribute type 10 has an invalid length. [ 489.302995][T18784] block nbd3: Unsupported socket: should be TCP or UNIX. [ 489.340441][T18788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3008'. [ 489.429941][T18782] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3008'. [ 489.714423][T18804] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 489.762462][T18804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3016'. [ 489.779089][T18804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3016'. [ 489.787321][T18801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3015'. [ 489.793732][T18804] netlink: 'syz.0.3016': attribute type 12 has an invalid length. [ 489.827532][T18804] netlink: 'syz.0.3016': attribute type 12 has an invalid length. [ 489.844860][ T48] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.866514][ T48] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.887826][ T48] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.898077][ T48] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.633132][T18843] sctp: [Deprecated]: syz.2.3026 (pid 18843) Use of int in max_burst socket option deprecated. [ 490.633132][T18843] Use struct sctp_assoc_value instead [ 490.717377][T16465] udevd[16465]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 491.060574][T18867] syzkaller0: entered promiscuous mode [ 491.066000][T18862] xt_CT: No such helper "netbios-ns" [ 491.078577][T18867] syzkaller0: entered allmulticast mode [ 491.162820][T18867] team0: Port device syz_tun added [ 491.762238][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 491.801143][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 491.824500][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 491.838313][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 491.850085][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 492.341554][T18879] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.349378][T18879] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.512323][ T30] audit: type=1804 audit(1787463346.055:7): pid=18921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3043" name="/newroot/48/cgroup.controllers" dev="tmpfs" ino=263 res=1 errno=0 [ 492.565418][ T30] audit: type=1800 audit(1787463346.085:8): pid=18921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3043" name="cgroup.controllers" dev="tmpfs" ino=263 res=0 errno=0 [ 492.589154][ T7531] net_ratelimit: 34 callbacks suppressed [ 492.589173][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.625269][T18879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.642700][T18879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.739454][T18933] netlink: 'syz.2.3044': attribute type 21 has an invalid length. [ 492.864140][ T96] bond0: (slave bridge2): failed to get link speed/duplex [ 492.891122][T11623] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.901703][T11623] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.167454][ T977] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.190419][ T977] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.210294][ T977] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 493.221149][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 493.308492][T18953] __nla_validate_parse: 10 callbacks suppressed [ 493.308511][T18953] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3047'. [ 493.369351][T18947] v: renamed from veth0_vlan [ 493.386806][T18948] ip6tnl0: Caught tx_queue_len zero misconfig [ 493.508927][T18955] tap0: tun_chr_ioctl cmd 1074025677 [ 493.514622][T18955] tap0: linktype set to 804 [ 493.609736][ T977] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.619848][T18750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.633550][ T977] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.665223][ T977] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 493.775557][T16465] udevd[16465]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 493.830007][ T977] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.841070][ T977] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.853180][ T977] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 493.891064][ T48] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.907623][ T48] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.931659][ T50] Bluetooth: hci3: command tx timeout [ 493.989637][ T977] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.000800][ T977] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.011139][ T977] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 494.082477][T11623] bond0: (slave bridge2): failed to get link speed/duplex [ 494.503636][ T48] bond0: (slave bridge2): failed to get link speed/duplex [ 494.512434][T18986] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3050'. [ 494.528329][ T7517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.651088][ T7764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.792363][T18996] netlink: 'syz.0.3053': attribute type 21 has an invalid length. [ 494.990157][T18996] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3053'. [ 495.056630][T19002] netlink: 'syz.0.3053': attribute type 6 has an invalid length. [ 495.076183][T19002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3053'. [ 495.199716][T19004] bond1: option miimon: invalid value (18446744073709551615) [ 495.209962][T19004] bond1: option miimon: allowed values 0 - 2147483647 [ 495.219508][T19004] bond1 (unregistering): Released all slaves [ 495.243700][ T5271] v: left promiscuous mode [ 495.277423][T19010] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.314560][T19010] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 495.383588][T19010] ip6gretap0: entered promiscuous mode [ 495.401801][T19010] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 495.431967][T19010] macvtap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 495.484641][T19010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 495.502866][T19010] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 495.564894][ T977] erspan0: left allmulticast mode [ 495.584251][ T977] erspan0: left promiscuous mode [ 495.598101][ T977] bridge0: port 3(erspan0) entered disabled state [ 495.623936][ T977] bridge_slave_1: left allmulticast mode [ 495.629677][ T977] bridge_slave_1: left promiscuous mode [ 495.641040][ T977] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.657336][ T977] bridge_slave_0: left allmulticast mode [ 495.670772][ T977] bridge_slave_0: left promiscuous mode [ 495.680921][ T977] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.691923][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.731783][ T977] veth7: left allmulticast mode [ 495.746752][ T977] veth7: left promiscuous mode [ 495.767545][ T977] bridge4: port 2(veth7) entered disabled state [ 495.819258][ T977] veth5: left allmulticast mode [ 495.826967][ T977] veth5: left promiscuous mode [ 495.835743][ T977] bridge4: port 1(veth5) entered disabled state [ 495.892280][ T977] dvmrp8: left allmulticast mode [ 496.014731][ T50] Bluetooth: hci3: command tx timeout [ 496.168885][T19036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3061'. [ 496.392571][ T977] bond3 (unregistering): (slave gretap1): Releasing active interface [ 496.418593][ T977] bond5 (unregistering): (slave gretap2): Releasing active interface [ 496.485948][ T977] bond1 (unregistering): (slave geneve2): Releasing active interface [ 496.593130][ T977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.605523][ T977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.624359][ T977] bond0 (unregistering): Released all slaves [ 496.636363][ T977] bond1 (unregistering): Released all slaves [ 496.655058][ T977] bond2 (unregistering): Released all slaves [ 496.671085][ T977] bond3 (unregistering): Released all slaves [ 496.686560][ T977] bond4 (unregistering): Released all slaves [ 496.703307][ T977] bond5 (unregistering): Released all slaves [ 496.720111][ T977] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 496.735495][ T977] bond6 (unregistering): Released all slaves [ 496.737446][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.765996][T18750] v: entered promiscuous mode [ 496.774761][T18750] batman_adv: batadv0: Interface activated: vlan0 [ 496.888379][ T1155] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.052133][T11623] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.075010][ T977] tipc: Disabling bearer [ 497.108316][ T977] tipc: Left network mode [ 497.183476][ T5762] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.221553][ T96] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.477507][T19059] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3064'. [ 497.521436][T18897] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.532188][T19059] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3064'. [ 497.561301][T18897] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.580451][T19065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3064'. [ 497.597108][T18897] bridge_slave_0: entered allmulticast mode [ 497.625467][T18897] bridge_slave_0: entered promiscuous mode [ 497.738132][T19073] netlink: 'syz.0.3067': attribute type 1 has an invalid length. [ 497.746591][T19072] netlink: 'syz.0.3067': attribute type 1 has an invalid length. [ 497.770812][T18897] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.778355][T18897] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.787997][T18750] net_ratelimit: 7 callbacks suppressed [ 497.788013][T18750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.791824][T19050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.813142][T18897] bridge_slave_1: entered allmulticast mode [ 497.821275][T18897] bridge_slave_1: entered promiscuous mode [ 497.939478][T19072] 8021q: adding VLAN 0 to HW filter on device bond1 [ 497.989229][T18897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.006971][ T48] netdevsim netdevsim1 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.027600][ T48] netdevsim netdevsim1 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.049620][T19049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.059723][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.075690][T18897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.097535][ T50] Bluetooth: hci3: command tx timeout [ 498.143176][T19081] veth1_to_bond: entered allmulticast mode [ 498.192532][T19081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3068'. [ 498.199853][T18897] team0: Port device team_slave_0 added [ 498.244066][T18897] team0: Port device team_slave_1 added [ 498.262236][ T96] netdevsim netdevsim1 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.479511][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 498.506865][T19080] veth1_to_bond: left allmulticast mode [ 498.516266][T18897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.523833][T18897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.560299][T18897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.615104][T18897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.644566][T18897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.719843][T18897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.750759][ T48] bond0: (slave bridge2): failed to get link speed/duplex [ 498.771414][ T48] netdevsim netdevsim1 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.811456][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.912802][T19099] netlink: 'syz.0.3073': attribute type 21 has an invalid length. [ 498.942882][ T48] bond0: (slave bridge2): failed to get link speed/duplex [ 498.958872][T19099] IPv6: NLM_F_CREATE should be specified when creating new route [ 499.002852][T19099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 499.010195][T19099] IPv6: NLM_F_CREATE should be set when creating new route [ 499.017528][T19099] IPv6: NLM_F_CREATE should be set when creating new route [ 499.024816][T19099] IPv6: NLM_F_CREATE should be set when creating new route [ 499.092616][T18897] hsr_slave_0: entered promiscuous mode [ 499.118133][T18897] hsr_slave_1: entered promiscuous mode [ 499.144558][T18897] debugfs: 'hsr0' already exists in 'hsr' [ 499.171874][T18897] Cannot create hsr debugfs directory [ 499.419649][ T977] hsr_slave_0: left promiscuous mode [ 499.447427][ T977] hsr_slave_1: left promiscuous mode [ 499.537863][ T977] v: left promiscuous mode [ 499.855618][ T7764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.171328][ T50] Bluetooth: hci3: command tx timeout [ 500.486996][T19154] ipt_REJECT: TCP_RESET invalid for non-tcp [ 500.498969][T19154] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.589301][T17853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.845597][ T977] team0 (unregistering): Port device team_slave_1 removed [ 500.872812][ T977] team0 (unregistering): Port device team_slave_0 removed [ 500.892876][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.961061][T19175] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3089'. [ 501.279808][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 501.329252][T19165] ip6gretap2: entered allmulticast mode [ 501.368073][T19165] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 501.387664][T19165] batman_adv: batadv0: Adding interface: ip6gretap2 [ 501.396671][T19165] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 501.420448][T19187] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3093'. [ 501.430105][T19165] batman_adv: batadv0: Interface activated: ip6gretap2 [ 501.446181][T19187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3093'. [ 501.533123][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.539509][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.984853][T19197] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3096'. [ 501.996786][ T977] IPVS: stop unused estimator thread 0... [ 502.156151][T18897] netdevsim netdevsim1 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.232171][T19188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3092'. [ 502.427014][T19207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3098'. [ 502.462571][T18897] netdevsim netdevsim1 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.472557][T19207] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3098'. [ 502.662149][ T50] block nbd3: Receive control failed (result -32) [ 502.774814][T18897] netdevsim netdevsim1 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.931560][T11623] net_ratelimit: 5 callbacks suppressed [ 502.931580][T11623] bond0: (slave bridge2): failed to get link speed/duplex [ 502.977756][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.093359][T18897] netdevsim netdevsim1 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.206567][T19231] pim6reg: entered allmulticast mode [ 503.240119][T19234] pim6reg: left allmulticast mode [ 503.382305][ T977] bond0: (slave bridge2): failed to get link speed/duplex [ 503.622446][T17853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.980831][ T48] bond0: (slave bridge2): failed to get link speed/duplex [ 504.013789][T18750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.092541][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.133493][T19269] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3109'. [ 504.162542][ T48] bond0: (slave bridge2): failed to get link speed/duplex [ 504.207118][T19271] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3110'. [ 504.217979][T19269] netlink: Only one type of NAT may be specified [ 504.235080][T19269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.301980][T19269] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3109'. [ 504.461297][T18897] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 504.524921][T18897] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 504.558997][T18897] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 504.613105][T18897] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 504.919886][T18897] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 504.938182][T18897] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 504.977904][T19300] bond0: entered promiscuous mode [ 505.012057][T19300] bond_slave_0: entered promiscuous mode [ 505.018240][T19300] bond_slave_1: entered promiscuous mode [ 505.077977][T19300] bond0: left promiscuous mode [ 505.089176][T19300] bond_slave_0: left promiscuous mode [ 505.106146][T19300] bond_slave_1: left promiscuous mode [ 505.159671][T18897] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 505.198288][T18897] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 505.627792][T18897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.701945][T18897] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.749895][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.757152][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.830056][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.837334][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.002771][T19336] syzkaller0: entered promiscuous mode [ 506.037958][T19336] syzkaller0: entered allmulticast mode [ 506.089353][T19336] tipc: Started in network mode [ 506.123980][T19336] tipc: Node identity ceff02b5802e, cluster identity 4711 [ 506.166497][T19336] tipc: Enabled bearer , priority 0 [ 506.227217][T19336] tipc: Resetting bearer [ 506.329139][T19348] __nla_validate_parse: 3 callbacks suppressed [ 506.329160][T19348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3125'. [ 506.355040][T19342] tipc: Resetting bearer [ 506.384801][T19342] tipc: Disabling bearer [ 507.434988][T19387] netlink: 'syz.0.3131': attribute type 2 has an invalid length. [ 507.496358][T19387] netlink: 'syz.0.3131': attribute type 8 has an invalid length. [ 507.512287][T18897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.534935][T19387] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3131'. [ 507.764036][T18897] veth0_vlan: entered promiscuous mode [ 507.822026][T18897] veth1_vlan: entered promiscuous mode [ 507.978280][T18897] veth0_macvtap: entered promiscuous mode [ 508.045544][T18897] veth1_macvtap: entered promiscuous mode [ 508.114510][T19413] sock: sock_timestamping_bind_phc: sock not bind to device [ 508.157753][T18897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.170984][ T7764] net_ratelimit: 21 callbacks suppressed [ 508.171001][ T7764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.249812][T18897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.452413][ T13] bond0: (slave bridge2): failed to get link speed/duplex [ 508.560851][ T1155] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.580109][ T1155] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.627639][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.642378][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.669303][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.710748][ T1155] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.811678][ T5762] bond0: (slave bridge2): failed to get link speed/duplex [ 508.857300][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.875845][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.905562][T19431] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3140'. [ 509.004097][T19409] bond0 (unregistering): Released all slaves [ 509.042082][T19411] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3135'. [ 509.100765][ T5762] bond0: (slave bridge2): failed to get link speed/duplex [ 509.182597][T19437] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3033'. [ 509.210801][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 509.219541][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.231485][ T96] bond0: (slave bridge2): failed to get link speed/duplex [ 509.372138][ T96] bond0: (slave bridge2): failed to get link speed/duplex [ 509.513044][ T96] bond0: (slave bridge2): failed to get link speed/duplex [ 509.665390][ T1155] bond0: (slave bridge2): failed to get link speed/duplex [ 509.693900][ T7517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.814004][ T5609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 509.832487][ T5609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 509.842229][ T5609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 509.854644][ T5609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 509.869021][ T5609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 510.184952][ T5607] team0: Port device syz_tun removed [ 511.442508][T19514] netlink: 'syz.3.3152': attribute type 15 has an invalid length. [ 511.529822][T19517] netlink: 'syz.3.3152': attribute type 4 has an invalid length. [ 511.663113][ T1155] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 511.830956][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 511.877524][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 511.930918][ T50] Bluetooth: hci4: command tx timeout [ 512.136332][T19527] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 512.172735][ T1155] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 512.860925][T19554] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.868665][T19554] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.981420][T19554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.999221][T19554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.037492][T19591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3164'. [ 513.071219][T19554] v: left promiscuous mode [ 513.116497][T19554] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 513.168129][T19554] bridge2: left allmulticast mode [ 513.177356][T19554] ip6tnl1: left allmulticast mode [ 513.367665][T19597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3165'. [ 513.390784][ T5712] net_ratelimit: 21 callbacks suppressed [ 513.390803][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.701793][T19600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3166'. [ 514.011151][ T50] Bluetooth: hci4: command tx timeout [ 514.020297][T19450] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.044128][T19450] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.064493][T19450] bridge_slave_0: entered allmulticast mode [ 514.073598][T19450] bridge_slave_0: entered promiscuous mode [ 514.089317][T19450] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.123805][T19450] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.149350][T19450] bridge_slave_1: entered allmulticast mode [ 514.179716][T19450] bridge_slave_1: entered promiscuous mode [ 514.210775][ T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.241090][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.268510][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.292690][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.412904][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.423143][ T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.463228][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.485903][T19637] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3172'. [ 514.558888][T19450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.604483][T19450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.642561][ T5762] bond0: (slave bridge2): failed to get link speed/duplex [ 514.655860][T19637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3172'. [ 514.781174][ T96] bond0: (slave bridge2): failed to get link speed/duplex [ 514.802209][T19450] team0: Port device team_slave_0 added [ 514.825142][T19450] team0: Port device team_slave_1 added [ 514.940391][T19450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.952807][T19450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.981007][T19450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.001351][ T1155] bond0: (slave bridge2): failed to get link speed/duplex [ 515.034596][T19450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.068159][T19450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.102853][T19450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.162720][ T96] bond0: (slave bridge2): failed to get link speed/duplex [ 515.316658][T19450] hsr_slave_0: entered promiscuous mode [ 515.339282][T19450] hsr_slave_1: entered promiscuous mode [ 515.358110][T19450] debugfs: 'hsr0' already exists in 'hsr' [ 515.388146][T19450] Cannot create hsr debugfs directory [ 515.419669][T19668] ip6erspan0: entered allmulticast mode [ 515.449513][T19676] wg1: Caught tx_queue_len zero misconfig [ 515.461099][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.499985][T19676] netlink: 'syz.2.3180': attribute type 1 has an invalid length. [ 515.538770][T19676] netlink: 'syz.2.3180': attribute type 4 has an invalid length. [ 515.564844][T19676] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3180'. [ 515.773001][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.863015][T19694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3184'. [ 515.872358][ T1155] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.872398][ T1155] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.872453][ T1155] bond0: (slave bridge2): failed to get link speed/duplex [ 516.055525][ T5762] tipc: Subscription rejected, illegal request [ 516.070001][T19450] netdevsim netdevsim4 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.091174][ T50] Bluetooth: hci4: command tx timeout [ 516.281898][T19450] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.355802][T19706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3187'. [ 516.390465][T19706] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3187'. [ 516.405685][T19706] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3187'. [ 516.440956][ T5762] bond0: (slave bridge2): failed to get link speed/duplex [ 516.527295][T19450] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.748182][T19450] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.398794][T19450] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 517.621133][T19450] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 517.695145][T19450] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 517.727726][T19450] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 517.758220][T19450] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 517.831316][T19450] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 517.909539][T19450] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 518.171611][ T50] Bluetooth: hci4: command tx timeout [ 518.245832][T19450] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 518.533516][ T1155] net_ratelimit: 9 callbacks suppressed [ 518.533537][ T1155] bond0: (slave bridge2): failed to get link speed/duplex [ 518.574754][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.702533][ T5762] bond0: (slave bridge2): failed to get link speed/duplex [ 518.822657][ T7517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.835203][T19450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.871136][ T1155] bond0: (slave bridge2): failed to get link speed/duplex [ 518.929328][T19450] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.983303][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.990492][ T5762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.034214][T19812] ip6tnl2: entered allmulticast mode [ 519.073067][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.080268][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.156520][T19818] 0: reclassify loop, rule prio 0, protocol 03 [ 519.211991][ T96] bond0: (slave bridge2): failed to get link speed/duplex [ 519.258615][T19450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 519.343038][T19826] __nla_validate_parse: 38 callbacks suppressed [ 519.343067][T19826] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3211'. [ 519.361538][ T96] bond0: (slave bridge2): failed to get link speed/duplex [ 519.628445][ T7764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.661557][ T977] bond0: (slave bridge2): failed to get link speed/duplex [ 519.816106][T19826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3211'. [ 519.841826][T19826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3211'. [ 520.703243][T19866] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3217'. [ 520.722194][T19450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.489355][T19897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3222'. [ 521.670061][T19450] veth0_vlan: entered promiscuous mode [ 521.737768][T19450] veth1_vlan: entered promiscuous mode [ 521.846615][T19450] veth0_macvtap: entered promiscuous mode [ 521.887531][T19450] veth1_macvtap: entered promiscuous mode [ 521.892017][T19904] netlink: 'syz.1.3224': attribute type 4 has an invalid length. [ 521.939528][T19906] netlink: 'syz.1.3224': attribute type 4 has an invalid length. [ 522.043998][T19450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.079528][T19450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.220777][ T96] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.265150][ T96] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.435303][ T1155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.487339][T19914] netlink: 'syz.1.3225': attribute type 1 has an invalid length. [ 522.506519][ T1155] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.615077][T19914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 522.649565][ T5762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.682169][T19914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3225'. [ 522.683270][ T5762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.726274][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.735561][T19914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3225'. [ 522.736689][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.117001][T19925] bridge_slave_0: left allmulticast mode [ 523.145051][T19925] bridge_slave_0: left promiscuous mode [ 523.170306][T19931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3227'. [ 523.176670][T19925] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.279989][T19925] bridge_slave_1: left allmulticast mode [ 523.333853][T19925] bridge_slave_1: left promiscuous mode [ 523.355536][T19925] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.411712][T19925] bond0: (slave bond_slave_0): Releasing backup interface [ 523.457420][T19925] bond0: (slave bond_slave_1): Releasing backup interface [ 523.608190][T19925] team0: Port device team_slave_0 removed [ 523.716340][T19925] team0: Port device team_slave_1 removed [ 523.771933][ T5712] net_ratelimit: 22 callbacks suppressed [ 523.771955][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.792187][T19925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.843658][T19925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.888610][T19925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.922718][T19925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.955738][T19925] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 524.162101][ T96] bond0: (slave bridge2): failed to get link speed/duplex [ 524.301234][ T5762] bond0: (slave bridge2): failed to get link speed/duplex [ 524.423558][T19970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3236'. [ 524.452228][ T13] bond0: (slave bridge2): failed to get link speed/duplex [ 524.584220][ T13] bond0: (slave bridge2): failed to get link speed/duplex [ 524.720779][ T96] bond0: (slave bridge2): failed to get link speed/duplex [ 524.774003][ T5609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 524.803281][ T5609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 524.813978][ T7764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.824247][ T5609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 524.850461][ T5609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 524.859289][ T5609] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 524.865430][ T48] bond0: (slave bridge2): failed to get link speed/duplex [ 524.902260][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.094421][T19992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3238'. [ 525.450256][T19992] vlan2: entered promiscuous mode [ 525.488616][T19992] gretap0: entered promiscuous mode [ 526.536218][T20056] sctp: [Deprecated]: syz.1.3250 (pid 20056) Use of int in max_burst socket option. [ 526.536218][T20056] Use struct sctp_assoc_value instead [ 526.693899][T20063] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3251'. [ 526.833079][T20061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3252'. [ 526.844357][T20063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3251'. [ 526.947593][T20070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3254'. [ 526.971998][ T50] Bluetooth: hci1: command tx timeout [ 526.992897][T20073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3254'. [ 527.007788][T20063] netlink: 'syz.3.3251': attribute type 12 has an invalid length. [ 527.608113][T20112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3261'. [ 527.624911][T20114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3261'. [ 527.639590][T19983] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.657920][T19983] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.671343][T19983] bridge_slave_0: entered allmulticast mode [ 527.703112][T19983] bridge_slave_0: entered promiscuous mode [ 527.723311][T19983] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.738173][T19983] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.763574][T19983] bridge_slave_1: entered allmulticast mode [ 527.793085][ T977] IPVS: starting estimator thread 0... [ 527.809325][T19983] bridge_slave_1: entered promiscuous mode [ 527.818179][T20122] IPVS: set_ctl: invalid protocol: 98 100.1.1.0:20004 [ 527.844397][T20101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3259'. [ 527.916068][T20124] IPVS: using max 27 ests per chain, 64800 per kthread [ 527.977076][T20132] netlink: 'syz.1.3265': attribute type 11 has an invalid length. [ 528.015721][T20132] netlink: 'syz.1.3265': attribute type 11 has an invalid length. [ 528.102507][T19983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.124730][T19983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.507603][T20139] ip6gretap0: entered promiscuous mode [ 528.523438][T20139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.532646][T20139] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.569041][T20139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.638386][T20139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.648267][T20139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.670437][T20139] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 528.685017][T20139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 528.707475][T20139] veth1_vlan: left promiscuous mode [ 528.714544][T20139] v: entered promiscuous mode [ 528.722287][T20139] veth1_vlan: entered promiscuous mode [ 528.765524][T20139] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 528.788563][T20139] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 528.797447][T20139] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 528.818685][T20139] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 528.866125][T20139] 8021q: adding VLAN 0 to HW filter on device bond1 [ 528.927449][ T96] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.940941][T20173] netlink: 'syz.1.3273': attribute type 1 has an invalid length. [ 528.949674][ T96] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.970977][ T7764] net_ratelimit: 16 callbacks suppressed [ 528.970994][ T7764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.997748][T20143] ipvlan2: entered promiscuous mode [ 529.012126][T20143] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 529.025412][T20143] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 529.036917][T20143] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 529.051013][ T50] Bluetooth: hci1: command tx timeout [ 529.167548][T19983] team0: Port device team_slave_0 added [ 529.179160][T20180] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20001 [ 529.190488][T19983] team0: Port device team_slave_1 added [ 529.215639][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.222942][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.276091][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.283295][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.646407][T19983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.662746][T19983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.709591][T19983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.748764][T19983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.767183][T19983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.799932][T19983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.873276][ T48] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.897288][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.931332][ T48] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.962498][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.011624][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.109394][T19983] hsr_slave_0: entered promiscuous mode [ 530.138354][T19983] hsr_slave_1: entered promiscuous mode [ 530.151939][T19983] debugfs: 'hsr0' already exists in 'hsr' [ 530.157814][T19983] Cannot create hsr debugfs directory [ 530.164639][ T96] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 530.188551][ T96] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 530.198623][T20218] syz_tun: entered allmulticast mode [ 530.204838][ T7517] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 530.214587][T20219] __nla_validate_parse: 5 callbacks suppressed [ 530.214605][T20219] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3282'. [ 530.360843][ T96] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.388490][ T96] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.403904][ T5719] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 530.447930][T20232] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3285'. [ 530.501540][T20239] netlink: 'syz.1.3285': attribute type 7 has an invalid length. [ 530.755631][ T5762] bond0: (slave bridge2): failed to get link speed/duplex [ 530.972837][ T7765] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 530.973177][ T7517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.051245][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.131143][ T50] Bluetooth: hci1: command tx timeout [ 532.100140][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.129137][T20294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3293'. [ 532.870756][ T36] bond0: (slave bridge2): failed to get link speed/duplex [ 532.924387][T20294] pim6reg1: entered allmulticast mode [ 532.961972][T19983] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.073743][ T977] bond0: (slave bridge2): failed to get link speed/duplex [ 533.115091][T19983] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.154884][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.214659][ T50] Bluetooth: hci1: command tx timeout [ 533.267097][T20315] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3295'. [ 533.317570][T20322] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3295'. [ 533.321182][ T977] bond0: (slave bridge2): failed to get link speed/duplex [ 533.355874][T19983] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.437957][T20320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3297'. [ 534.011034][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 534.012587][T17853] net_ratelimit: 3 callbacks suppressed [ 534.012648][T17853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.188525][T19983] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.207899][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.353739][ T5762] bond0: (slave bridge2): failed to get link speed/duplex [ 534.481885][ T977] bond0: (slave bridge2): failed to get link speed/duplex [ 534.665970][ T36] bond0: (slave bridge2): failed to get link speed/duplex [ 534.677514][T20342] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 534.891195][T20342] xt_CT: No such helper "netbios-ns" [ 535.002274][ T36] bond0: (slave bridge2): failed to get link speed/duplex [ 535.020797][T19983] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 535.046366][T19983] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 535.066063][T19983] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 535.084831][T19983] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 535.103520][T19983] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 535.126050][T19983] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 535.155189][T19983] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 535.179094][T19983] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 535.213077][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.261984][ T36] bond0: (slave bridge2): failed to get link speed/duplex [ 535.411147][ T977] bond0: (slave bridge2): failed to get link speed/duplex [ 535.541951][ T36] bond0: (slave bridge2): failed to get link speed/duplex [ 535.638271][T19983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.723108][T19983] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.777152][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.784414][ T5762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.925398][ T977] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.932645][ T977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.076840][T20409] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.142635][T20415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3313'. [ 536.300708][T20409] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.507311][T20409] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.763030][T20409] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.840391][T20447] syzkaller1: entered promiscuous mode [ 536.865094][T20447] syzkaller1: entered allmulticast mode [ 537.362334][ T8081] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.461360][ T8081] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.520816][ T8081] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.951194][ T5762] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.024922][T20489] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3324'. [ 538.527844][T20511] netlink: 'syz.4.3327': attribute type 15 has an invalid length. [ 538.554300][T20511] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3327'. [ 538.672514][T20521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3328'. [ 539.375507][ T5712] net_ratelimit: 16 callbacks suppressed [ 539.375529][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.092417][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.416658][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.950913][ T36] bond0: (slave bridge2): failed to get link speed/duplex [ 540.968072][T19983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.138990][T19983] veth0_vlan: entered promiscuous mode [ 541.196676][T19983] veth1_vlan: entered promiscuous mode [ 541.231321][ T36] bond0: (slave bridge2): failed to get link speed/duplex [ 541.239364][T20543] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 541.332990][T20550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3332'. [ 541.361736][ T5762] bond0: (slave bridge2): failed to get link speed/duplex [ 541.396270][T19983] veth0_macvtap: entered promiscuous mode [ 541.442358][T19983] veth1_macvtap: entered promiscuous mode [ 541.474091][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.496624][ T5762] bond0: (slave bridge2): failed to get link speed/duplex [ 541.518719][T20553] netlink: zone id is out of range [ 541.540380][T20553] netlink: zone id is out of range [ 541.555857][T20556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3336'. [ 541.585141][T19983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.635421][T19983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.808217][ T8081] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.844309][T20567] x_tables: duplicate underflow at hook 1 [ 541.850773][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 541.875573][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.924234][T20567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3338'. [ 541.937695][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.987080][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.033786][T20567] bridge_slave_1: left allmulticast mode [ 542.044434][T20567] bridge_slave_1: left promiscuous mode [ 542.050308][T20567] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.067032][T20567] bridge_slave_0: left allmulticast mode [ 542.093108][T20567] bridge_slave_0: left promiscuous mode [ 542.124635][T20567] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.208634][T20569] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3339'. [ 542.248459][T20588] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3341'. [ 542.386403][ T8081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.425632][ T8081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.501817][ T977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.558083][ T977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.717848][T20599] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3344'. [ 542.805983][T20609] Cannot find add_set index 1 as target [ 543.000209][T20616] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3346'. [ 543.071119][T20616] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3346'. [ 543.333346][T20639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3350'. [ 543.391787][T20642] syzkaller0: tun_chr_ioctl cmd 35108 [ 543.442861][T20642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3352'. [ 543.803842][T20642] xt_CT: No such helper "syz0" [ 543.950371][T20664] xfrm0: entered allmulticast mode [ 544.390971][ T8088] net_ratelimit: 20 callbacks suppressed [ 544.390992][ T8088] bond0: (slave bridge2): failed to get link speed/duplex [ 544.540760][ T8088] bond0: (slave bridge2): failed to get link speed/duplex [ 544.582428][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.619439][T20675] nbd4: detected capacity change from 0 to 63 [ 544.670105][T20683] netlink: 'syz.1.3359': attribute type 10 has an invalid length. [ 544.702675][T18181] bond0: (slave bridge2): failed to get link speed/duplex [ 544.831007][ T48] bond0: (slave bridge2): failed to get link speed/duplex [ 544.961169][ T48] bond0: (slave bridge2): failed to get link speed/duplex [ 545.007905][ T50] block nbd4: Receive control failed (result -104) [ 545.093479][ T977] bond0: (slave bridge2): failed to get link speed/duplex [ 545.118658][T20702] netlink: 'syz.3.3365': attribute type 18 has an invalid length. [ 545.168894][T20705] netlink: 'syz.3.3365': attribute type 18 has an invalid length. [ 545.181442][ T977] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 545.233120][ T977] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 545.300732][ T12] bond0: (slave bridge2): failed to get link speed/duplex [ 545.350722][ T48] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 545.392063][ T48] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 545.447607][ T12] bond0: (slave bridge2): failed to get link speed/duplex [ 545.591515][ T48] bond0: (slave bridge2): failed to get link speed/duplex [ 546.260421][T20731] xt_bpf: check failed: parse error [ 546.363270][T20731] veth3: entered allmulticast mode [ 546.464067][T20739] x_tables: duplicate underflow at hook 1 [ 546.655190][T20750] __nla_validate_parse: 11 callbacks suppressed [ 546.655208][T20750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3378'. [ 546.714348][T20753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3378'. [ 546.736937][T20753] netlink: 'syz.2.3378': attribute type 21 has an invalid length. [ 546.746325][T20746] syzkaller0: entered promiscuous mode [ 546.766253][T20746] syzkaller0: entered allmulticast mode [ 546.818385][T20756] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3379'. [ 547.362778][T20779] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3386'. [ 547.383652][T20779] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3386'. [ 547.582081][T20794] netlink: 'syz.0.3388': attribute type 2 has an invalid length. [ 547.610398][T20794] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3388'. [ 547.646154][T20794] : entered promiscuous mode [ 547.785237][T20808] FAULT_INJECTION: forcing a failure. [ 547.785237][T20808] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 547.831307][T20808] CPU: 1 UID: 0 PID: 20808 Comm: syz.3.3394 Not tainted syzkaller #0 PREEMPT(full) [ 547.831337][T20808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 547.831359][T20808] Call Trace: [ 547.831429][T20808] [ 547.831501][T20808] dump_stack_lvl+0xe8/0x150 [ 547.831635][T20808] should_fail_ex+0x410/0x560 [ 547.831771][T20808] _copy_to_user+0x31/0xb0 [ 547.831827][T20808] bpf_test_finish+0x52e/0x690 [ 547.831922][T20808] ? __pfx_bpf_test_finish+0x10/0x10 [ 547.831993][T20808] bpf_prog_test_run_skb+0x11fe/0x2230 [ 547.832078][T20808] ? __fget_files+0x3a2/0x420 [ 547.832140][T20808] ? __fget_files+0x2a/0x420 [ 547.832176][T20808] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 547.832212][T20808] bpf_prog_test_run+0x2c5/0x340 [ 547.832273][T20808] __sys_bpf+0xa22/0xd90 [ 547.832314][T20808] ? __pfx___sys_bpf+0x10/0x10 [ 547.832358][T20808] ? __fget_files+0x2a/0x420 [ 547.832408][T20808] ? ksys_write+0x242/0x270 [ 547.832460][T20808] ? __pfx_ksys_write+0x10/0x10 [ 547.832507][T20808] __x64_sys_bpf+0xba/0xd0 [ 547.832540][T20808] do_syscall_64+0x166/0x520 [ 547.832643][T20808] ? trace_irq_disable+0x3b/0x140 [ 547.832677][T20808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.832721][T20808] ? clear_bhb_loop+0x70/0xc0 [ 547.832748][T20808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.832771][T20808] RIP: 0033:0x7f0303d9e0d9 [ 547.832822][T20808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.832842][T20808] RSP: 002b:00007f0304c8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 547.832873][T20808] RAX: ffffffffffffffda RBX: 00007f0304025fa0 RCX: 00007f0303d9e0d9 [ 547.832889][T20808] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 547.832903][T20808] RBP: 00007f0304c8a090 R08: 0000000000000000 R09: 0000000000000000 [ 547.832917][T20808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.832930][T20808] R13: 00007f0304026038 R14: 00007f0304025fa0 R15: 00007fff3b103af8 [ 547.832966][T20808] [ 548.454734][T20820] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3400'. [ 548.494892][T20816] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3398'. [ 548.547040][T20820] syzkaller0: entered promiscuous mode [ 548.560858][T20820] syzkaller0: entered allmulticast mode [ 548.577050][T20816] syzkaller1: entered promiscuous mode [ 548.596006][T20816] syzkaller1: entered allmulticast mode [ 548.656975][T20826] netlink: 'syz.0.3401': attribute type 49 has an invalid length. [ 548.666842][T20827] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3401'. [ 548.845411][T20831] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3402'. [ 549.042669][T20836] tipc: Invalid UDP bearer configuration [ 549.042726][T20836] tipc: Enabling of bearer rejected, failed to enable media [ 549.505574][ T96] net_ratelimit: 35 callbacks suppressed [ 549.505606][ T96] bond0: (slave bridge2): failed to get link speed/duplex [ 549.595511][T20864] tipc: Can't bind to reserved service type 0 [ 549.664059][ T96] bond0: (slave bridge2): failed to get link speed/duplex [ 549.788505][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.801458][ T96] bond0: (slave bridge2): failed to get link speed/duplex [ 549.921375][ T977] bond0: (slave bridge2): failed to get link speed/duplex [ 550.041023][ T977] bond0: (slave bridge2): failed to get link speed/duplex [ 550.184095][T11623] bond0: (slave bridge2): failed to get link speed/duplex [ 550.310875][T11623] bond0: (slave bridge2): failed to get link speed/duplex [ 550.441041][ T12] bond0: (slave bridge2): failed to get link speed/duplex [ 550.568522][T20885] ip6erspan0: entered allmulticast mode [ 550.601021][T11623] bond0: (slave bridge2): failed to get link speed/duplex [ 550.991337][T20896] netlink: 'syz.2.3420': attribute type 1 has an invalid length. [ 552.929684][T20968] Bluetooth: MGMT ver 1.23 [ 553.149918][T20969] __nla_validate_parse: 3 callbacks suppressed [ 553.149937][T20969] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3441'. [ 553.289317][T20985] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 553.361240][T20992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3446'. [ 553.791433][T21007] bond1: option min_links: invalid value (18446744073709551612) [ 553.799126][T21007] bond1: option min_links: allowed values 0 - 2147483647 [ 553.808169][T21007] bond1 (unregistering): Released all slaves [ 554.551142][T11623] net_ratelimit: 38 callbacks suppressed [ 554.551163][T11623] bond0: (slave bridge2): failed to get link speed/duplex [ 554.691362][ T8088] bond0: (slave bridge2): failed to get link speed/duplex [ 554.801107][ T977] bond0: (slave bridge2): failed to get link speed/duplex [ 554.911103][ T977] bond0: (slave bridge2): failed to get link speed/duplex [ 554.976696][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.031128][ T8088] bond0: (slave bridge2): failed to get link speed/duplex [ 555.143207][ T977] bond0: (slave bridge2): failed to get link speed/duplex [ 555.261130][ T48] bond0: (slave bridge2): failed to get link speed/duplex [ 555.292074][ T7517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.371186][ T977] bond0: (slave bridge2): failed to get link speed/duplex [ 556.040234][T20973] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 556.295289][T21052] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3454'. [ 556.568859][T21075] netlink: 'syz.3.3459': attribute type 1 has an invalid length. [ 556.779441][T16465] udevd[16465]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 556.822418][T16465] udevd[16465]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 556.866580][T21091] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3462'. [ 556.956908][T21079] bond1: (slave geneve2): making interface the new active one [ 556.996639][T21079] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 557.151754][ T96] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 557.167889][ T96] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 557.177919][ T96] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 557.210809][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 557.222353][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 557.296457][T21109] x_tables: unsorted entry at hook 2 [ 559.648156][T21114] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3467'. [ 559.681447][T21121] batman_adv: batadv0: Adding interface: macvtap1 [ 559.688532][T21121] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.717639][T21121] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 559.733354][ T48] net_ratelimit: 18 callbacks suppressed [ 559.733374][ T48] bond0: (slave bridge2): failed to get link speed/duplex [ 559.828256][T21123] batman_adv: batadv0: Removing interface: macvtap1 [ 559.911049][ T48] bond0: (slave bridge2): failed to get link speed/duplex [ 560.051529][T21147] netlink: 'syz.2.3472': attribute type 16 has an invalid length. [ 560.071195][T21147] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.3472'. [ 560.178538][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.469229][T21165] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3478'. [ 561.221939][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.371521][ T7517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.387510][ T96] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.397593][ T7517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.411298][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.198046][T21141] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3472'. [ 562.257734][ T7765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.322740][T11623] bond0: (slave bridge2): failed to get link speed/duplex [ 562.430039][T21177] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3482'. [ 562.430116][T21175] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3482'. [ 562.973461][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 562.977314][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.991667][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.109439][T21214] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR [ 563.517349][T21236] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3492'. [ 563.896027][T21250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3494'. [ 563.951541][T21253] sch_fq: defrate 8 ignored. [ 564.128828][T21253] netlink: 'syz.2.3495': attribute type 2 has an invalid length. [ 564.187172][T21253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3495'. [ 564.511385][T21269] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3501'. [ 564.700816][T21291] __nla_validate_parse: 1 callbacks suppressed [ 564.700836][T21291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3506'. [ 564.792171][ T48] net_ratelimit: 18 callbacks suppressed [ 564.792191][ T48] bond0: (slave bridge2): failed to get link speed/duplex [ 564.941862][ T8088] bond0: (slave bridge2): failed to get link speed/duplex [ 565.060981][ T8088] bond0: (slave bridge2): failed to get link speed/duplex [ 565.086803][ T8088] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc9 [ 565.181181][ T8088] bond0: (slave bridge2): failed to get link speed/duplex [ 565.301020][ T8088] bond0: (slave bridge2): failed to get link speed/duplex [ 565.379839][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.431095][ T8088] bond0: (slave bridge2): failed to get link speed/duplex [ 565.541443][ T5762] bond0: (slave bridge2): failed to get link speed/duplex [ 565.650798][ T12] bond0: (slave bridge2): failed to get link speed/duplex [ 565.754634][T21304] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 565.764991][ T48] bond0: (slave bridge2): failed to get link speed/duplex [ 566.070014][T21355] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 566.265586][T21366] netlink: 'syz.4.3526': attribute type 1 has an invalid length. [ 566.342192][T21366] 8021q: adding VLAN 0 to HW filter on device bond2 [ 566.626527][T21387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3531'. [ 566.967600][T21397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3534'. [ 567.106342][T21390] 8021q: adding VLAN 0 to HW filter on device bond1 [ 567.436031][T21407] bond2: option tlb_dynamic_lb: invalid value (128) [ 567.443302][T21416] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3539'. [ 567.473290][T21407] bond2 (unregistering): Released all slaves [ 567.780942][T21422] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3543'. [ 568.271234][T21442] veth1_to_bond: entered allmulticast mode [ 568.302345][T21441] veth1_to_bond: left allmulticast mode [ 569.163864][T21469] netlink: 'syz.2.3555': attribute type 13 has an invalid length. [ 569.186982][T21469] netlink: 'syz.2.3555': attribute type 17 has an invalid length. [ 569.588122][T21488] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3557'. [ 569.694795][T21490] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3559'. [ 569.731025][T21490] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 569.743909][T21472] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.751744][T21472] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.079399][T21495] net_ratelimit: 26 callbacks suppressed [ 570.079419][T21495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.441890][T21472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.497321][T21472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.586883][ T7527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.756375][ T7764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.097116][T21469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.108773][T21469] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.121903][T21469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.149622][T21469] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.156898][T21469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.175494][T21469] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.182773][T21469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.206830][T21469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.217258][T21469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.228917][T21469] xfrm0: left allmulticast mode [ 571.254619][T21469] veth1_vlan: left promiscuous mode [ 571.261660][T21469] veth0_vlan: left promiscuous mode [ 571.268969][T21469] veth0_vlan: entered promiscuous mode [ 571.278287][T21469] veth1_vlan: entered promiscuous mode [ 571.290461][T21469] veth1_macvtap: left promiscuous mode [ 571.298017][T21469] veth0_macvtap: left promiscuous mode [ 571.305635][T21469] veth0_macvtap: entered promiscuous mode [ 571.320430][T21469] veth1_macvtap: entered promiscuous mode [ 571.334132][T21469] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 571.346782][T21469] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 571.362066][T21469] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 571.375873][T21469] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 571.398631][T21487] syzkaller0: entered promiscuous mode [ 571.412466][T21487] syzkaller0: entered allmulticast mode [ 571.517651][T21492] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 571.528457][T21494] batman_adv: batadv0: Adding interface: dummy0 [ 571.537698][T21494] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.566888][T21492] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 571.579838][T21492] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 571.598819][T21494] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 571.617152][T21509] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3562'. [ 571.759541][T21513] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3564'. [ 571.775154][T21515] dvmrp0: entered allmulticast mode [ 571.781141][ T48] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.800326][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.826892][ T48] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.874240][T21513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3564'. [ 571.918503][T21515] dvmrp1: entered allmulticast mode [ 571.939656][T21513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3564'. [ 571.959208][T21523] dvmrp0: left allmulticast mode [ 571.966044][T21519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3564'. [ 572.018633][T21523] dvmrp1: left allmulticast mode [ 572.092827][ T96] bond0: (slave bridge2): failed to get link speed/duplex [ 572.111777][ T977] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.128771][ T977] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.211498][ T96] bond0: (slave bridge2): failed to get link speed/duplex [ 572.350786][ T48] bond0: (slave bridge2): failed to get link speed/duplex [ 572.481245][ T5762] bond0: (slave bridge2): failed to get link speed/duplex [ 572.661586][ T48] bond0: (slave bridge2): failed to get link speed/duplex [ 572.811323][ T7531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.996283][T21564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3577'. [ 573.114889][T21546] syzkaller0: entered promiscuous mode [ 573.122375][T21546] syzkaller0: entered allmulticast mode [ 573.480815][T21587] netlink: 'syz.2.3582': attribute type 7 has an invalid length. [ 573.508638][T21587] netlink: 'syz.2.3582': attribute type 8 has an invalid length. [ 573.722168][T21598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3580'. [ 575.135186][ T4937] block nbd4: Possible stuck request ffff88802724e000: control (read@0,1024B). Runtime 30 seconds [ 575.150065][ T4937] block nbd4: Possible stuck request ffff88802724e1c0: control (read@1024,1024B). Runtime 30 seconds [ 575.161639][ T4937] block nbd4: Possible stuck request ffff88802724e380: control (read@2048,1024B). Runtime 30 seconds [ 575.173202][ T4937] block nbd4: Possible stuck request ffff88802724e540: control (read@3072,1024B). Runtime 30 seconds [ 575.943518][ T5712] net_ratelimit: 5 callbacks suppressed [ 575.943539][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.278131][T21574] kthread_run failed with err -4 [ 576.471415][ T12] bond0: (slave bridge2): failed to get link speed/duplex [ 576.499232][T21603] netlink: 'syz.0.3583': attribute type 3 has an invalid length. [ 576.602775][ T5762] bond0: (slave bridge2): failed to get link speed/duplex [ 576.653002][ T7517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.740659][ T12] bond0: (slave bridge2): failed to get link speed/duplex [ 576.871836][ T8088] bond0: (slave bridge2): failed to get link speed/duplex [ 576.978413][T18750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.010699][ T977] bond0: (slave bridge2): failed to get link speed/duplex [ 577.142120][ T977] bond0: (slave bridge2): failed to get link speed/duplex [ 577.204263][T21641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3592'. [ 577.238265][T21644] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3593'. [ 577.258514][T21641] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3592'. [ 577.281080][ T977] bond0: (slave bridge2): failed to get link speed/duplex [ 577.501364][T17989] udevd[17989]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 577.633562][T21645] syzkaller0: entered promiscuous mode [ 577.648227][T21645] syzkaller0: entered allmulticast mode [ 577.666877][T21654] xt_TCPMSS: Only works on TCP SYN packets [ 578.173316][T21670] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3598'. [ 580.105466][T21679] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3601'. [ 580.315885][T21685] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3604'. [ 580.350938][T21687] netlink: 'syz.4.3605': attribute type 8 has an invalid length. [ 580.542006][T21695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3608'. [ 580.552580][T21698] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3609'. [ 580.999699][T21711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3613'. [ 581.060593][ T977] net_ratelimit: 10 callbacks suppressed [ 581.060614][ T977] bond0: (slave bridge2): failed to get link speed/duplex [ 581.148160][T18750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.177118][T21711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.270755][ T977] bond0: (slave bridge2): failed to get link speed/duplex [ 581.401942][ T12] bond0: (slave bridge2): failed to get link speed/duplex [ 581.532200][ T8088] bond0: (slave bridge2): failed to get link speed/duplex [ 581.607211][T21747] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 581.653718][ T8088] bond0: (slave bridge2): failed to get link speed/duplex [ 581.773557][ T8088] bond0: (slave bridge2): failed to get link speed/duplex [ 581.901044][ T977] bond0: (slave bridge2): failed to get link speed/duplex [ 581.951518][T21774] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 582.096978][T21805] bond0: (slave bridge2): failed to get link speed/duplex [ 582.168066][T21804] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 582.189735][T21804] syzkaller1: linktype set to 773 [ 582.273746][T21816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3629'. [ 583.091615][T21863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3648'. [ 583.388525][T21877] x_tables: duplicate underflow at hook 3 [ 583.476944][T21873] syzkaller0: entered promiscuous mode [ 583.486625][T21873] syzkaller0: entered allmulticast mode [ 583.599993][T21886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3654'. [ 585.775869][T21888] batman_adv: batadv0: Adding interface: veth0 [ 585.782162][T21888] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.809989][T21888] batman_adv: batadv0: Interface activated: veth0 [ 585.839272][T21895] tipc: Enabling of bearer rejected, media not registered [ 585.860107][T21896] batman_adv: batadv0: Interface deactivated: veth0 [ 585.867654][T21896] batman_adv: batadv0: Removing interface: veth0 [ 586.087080][ T1012] net_ratelimit: 15 callbacks suppressed [ 586.087100][ T1012] bond0: (slave bridge2): failed to get link speed/duplex [ 586.291727][T21924] xt_hashlimit: size too large, truncated to 1048576 [ 586.321277][T21803] bond0: (slave bridge2): failed to get link speed/duplex [ 586.344778][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.451124][ T1012] bond0: (slave bridge2): failed to get link speed/duplex [ 586.584746][T21790] bond0: (slave bridge2): failed to get link speed/duplex [ 586.631123][T21937] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3666'. [ 586.711422][ T36] bond0: (slave bridge2): failed to get link speed/duplex [ 586.842148][ T62] bond0: (slave bridge2): failed to get link speed/duplex [ 587.001083][ T62] bond0: (slave bridge2): failed to get link speed/duplex [ 587.163331][T21788] bond0: (slave bridge2): failed to get link speed/duplex [ 587.331191][ T977] bond0: (slave bridge2): failed to get link speed/duplex [ 587.525350][T21973] sctp: [Deprecated]: syz.3.3674 (pid 21973) Use of int in max_burst socket option deprecated. [ 587.525350][T21973] Use struct sctp_assoc_value instead [ 587.566007][T21798] IPVS: starting estimator thread 0... [ 587.594590][T21974] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 587.603237][ C1] BUG: TASK stack guard page was hit at ffffc900048c7ff8 (stack is ffffc900048c8000..ffffc900048d0000) [ 587.603284][ C1] Oops: stack guard page: 0000 [#1] SMP KASAN PTI [ 587.603399][ C1] CPU: 1 UID: 0 PID: 21970 Comm: syz.4.3673 Not tainted syzkaller #0 PREEMPT(full) [ 587.603426][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 587.603440][ C1] RIP: 0010:rcu_is_watching+0x6/0xb0 [ 587.603490][ C1] Code: e8 ff a0 67 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 53 65 48 ff 05 cf f5 c3 11 e8 6a c7 2c 0a 89 c3 83 f8 08 73 [ 587.603510][ C1] RSP: 0018:ffffc900048c8000 EFLAGS: 00010297 [ 587.603532][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 587.603545][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb5a1e0 [ 587.603559][ C1] RBP: ffffffff89f35e73 R08: 0000000000000000 R09: 0000000000000000 [ 587.603574][ C1] R10: 0000000000000007 R11: ffffffff89f382d0 R12: 0000000000000002 [ 587.603588][ C1] R13: ffffffff8eb5a1e0 R14: 0000000000000000 R15: 0000000000000000 [ 587.603602][ C1] FS: 00007f217d3da6c0(0000) GS:ffff888125024000(0000) knlGS:0000000000000000 [ 587.603622][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 587.603637][ C1] CR2: ffffc900048c7ff8 CR3: 0000000029e06000 CR4: 00000000003526f0 [ 587.603657][ C1] Call Trace: [ 587.603665][ C1] [ 587.603674][ C1] lock_acquire+0x5f/0x350 [ 587.603727][ C1] ? nfnl_log_pernet+0x23/0x240 [ 587.603815][ C1] nfnl_log_pernet+0x3f/0x240 [ 587.603840][ C1] ? nfnl_log_pernet+0x23/0x240 [ 587.603867][ C1] nfulnl_log_packet+0xc3/0x2a40 [ 587.603899][ C1] ? __lock_acquire+0x683/0x2cf0 [ 587.603933][ C1] ? __pfx_nfulnl_log_packet+0x10/0x10 [ 587.603968][ C1] ? format_decode+0x635/0xda0 [ 587.604030][ C1] ? string+0x28a/0x2d0 [ 587.604061][ C1] ? widen_string+0x3b/0x2a0 [ 587.604093][ C1] ? string+0x28a/0x2d0 [ 587.604122][ C1] ? vsnprintf+0xe42/0xef0 [ 587.604155][ C1] ? __lock_acquire+0x683/0x2cf0 [ 587.604189][ C1] nf_log_packet+0x49a/0x650 [ 587.604251][ C1] ? nf_log_packet+0xef/0x650 [ 587.604278][ C1] ? unwind_next_frame+0x8f/0x2550 [ 587.604324][ C1] ? lock_acquire+0x106/0x350 [ 587.604354][ C1] ? __pfx_nf_log_packet+0x10/0x10 [ 587.604426][ C1] ? unwind_next_frame+0x8f/0x2550 [ 587.604448][ C1] ? ip_finish_output2+0xbda/0x10b0 [ 587.604515][ C1] nft_log_eval+0x2c4/0x3b0 [ 587.604594][ C1] nft_do_chain+0x48d/0x1b10 [ 587.604685][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 587.604720][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 587.604769][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 587.604826][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 587.604888][ C1] nft_do_chain_ipv4+0x195/0x290 [ 587.604946][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 587.604972][ C1] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 587.605004][ C1] ? iptable_mangle_hook+0x2dd/0x4c0 [ 587.605034][ C1] ? nf_nat_ipv4_local_fn+0x321/0x570 [ 587.605058][ C1] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 587.605090][ C1] nf_hook_slow+0xc5/0x220 [ 587.605117][ C1] ? NF_HOOK+0x9a/0x660 [ 587.605233][ C1] NF_HOOK+0x414/0x660 [ 587.605263][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 587.605291][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.605319][ C1] ? nf_conntrack_destroy+0x1e/0x2e0 [ 587.605349][ C1] ip_vs_nat_send_or_cont+0x69c/0x8d0 [ 587.605389][ C1] ip_vs_nat_xmit+0x76a/0xb40 [ 587.605421][ C1] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 587.605447][ C1] ? ip_vs_in_stats+0xc0/0x430 [ 587.605476][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 587.605504][ C1] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 587.605529][ C1] ip_vs_in_hook+0xe02/0x1c90 [ 587.605560][ C1] ? ip_vs_out_hook+0x99f/0x1030 [ 587.605585][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 587.605623][ C1] ? nf_nat_ipv4_local_fn+0x422/0x570 [ 587.605646][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 587.605673][ C1] nf_hook_slow+0xc5/0x220 [ 587.605705][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.605725][ C1] nf_hook+0x22a/0x3a0 [ 587.605747][ C1] ? nf_hook+0xa1/0x3a0 [ 587.605765][ C1] ? __pfx_nf_hook+0x10/0x10 [ 587.605841][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.605861][ C1] ? __ip_local_out+0x152/0x6a0 [ 587.605898][ C1] __ip_local_out+0x558/0x6a0 [ 587.605931][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.605953][ C1] ip_local_out+0x2a/0x190 [ 587.605975][ C1] ipvlan_process_v4_outbound+0x448/0x740 [ 587.606101][ C1] ? __pfx_ipvlan_process_v4_outbound+0x10/0x10 [ 587.606138][ C1] ? dst_release+0x79/0x1b0 [ 587.606234][ C1] ? skb_pull+0xb9/0x1d0 [ 587.606283][ C1] ipvlan_queue_xmit+0xabf/0x16b0 [ 587.606318][ C1] ipvlan_start_xmit+0x4a/0x130 [ 587.606352][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 587.606449][ C1] __dev_queue_xmit+0x14c0/0x3820 [ 587.606471][ C1] ? __bfs+0x153/0x290 [ 587.606507][ C1] ? check_noncircular+0xda/0x150 [ 587.606530][ C1] ? __dev_queue_xmit+0x29b/0x3820 [ 587.606554][ C1] ? lockdep_unlock+0x5c/0xd0 [ 587.606582][ C1] ? __lock_acquire+0x13e8/0x2cf0 [ 587.606630][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 587.606653][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 587.606695][ C1] ? ip_output+0x29f/0x450 [ 587.606725][ C1] ? ip_finish_output2+0x972/0x10b0 [ 587.606752][ C1] ip_finish_output2+0xbda/0x10b0 [ 587.606776][ C1] ? ip_finish_output2+0x3de/0x10b0 [ 587.606805][ C1] ip_output+0x29f/0x450 [ 587.606825][ C1] ? ip_output+0x5a/0x450 [ 587.606846][ C1] ? __pfx_ip_output+0x10/0x10 [ 587.606865][ C1] NF_HOOK+0x605/0x660 [ 587.606894][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 587.606922][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.606950][ C1] ? nf_conntrack_destroy+0x1e/0x2e0 [ 587.606981][ C1] ip_vs_nat_send_or_cont+0x69c/0x8d0 [ 587.607012][ C1] ip_vs_nat_xmit+0x76a/0xb40 [ 587.607043][ C1] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 587.607069][ C1] ? ip_vs_in_stats+0xc0/0x430 [ 587.607096][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 587.607124][ C1] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 587.607149][ C1] ip_vs_in_hook+0xe02/0x1c90 [ 587.607182][ C1] ? ip_vs_out_hook+0x99f/0x1030 [ 587.607209][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 587.607247][ C1] ? nf_nat_ipv4_local_fn+0x422/0x570 [ 587.607270][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 587.607299][ C1] nf_hook_slow+0xc5/0x220 [ 587.607325][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.607345][ C1] nf_hook+0x22a/0x3a0 [ 587.607366][ C1] ? nf_hook+0xa1/0x3a0 [ 587.607390][ C1] ? __pfx_nf_hook+0x10/0x10 [ 587.607425][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.607447][ C1] ? __ip_local_out+0x152/0x6a0 [ 587.607483][ C1] __ip_local_out+0x558/0x6a0 [ 587.607516][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.607538][ C1] ip_local_out+0x2a/0x190 [ 587.607559][ C1] ipvlan_process_v4_outbound+0x448/0x740 [ 587.607595][ C1] ? __pfx_ipvlan_process_v4_outbound+0x10/0x10 [ 587.607632][ C1] ? dst_release+0x79/0x1b0 [ 587.607655][ C1] ? skb_pull+0xb9/0x1d0 [ 587.607678][ C1] ipvlan_queue_xmit+0xabf/0x16b0 [ 587.607714][ C1] ipvlan_start_xmit+0x4a/0x130 [ 587.607748][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 587.607791][ C1] __dev_queue_xmit+0x14c0/0x3820 [ 587.607813][ C1] ? __bfs+0x153/0x290 [ 587.607848][ C1] ? check_noncircular+0xda/0x150 [ 587.607870][ C1] ? __dev_queue_xmit+0x29b/0x3820 [ 587.607911][ C1] ? lockdep_unlock+0x5c/0xd0 [ 587.607937][ C1] ? __lock_acquire+0x13e8/0x2cf0 [ 587.607968][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 587.607989][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 587.608023][ C1] ? ip_output+0x29f/0x450 [ 587.608045][ C1] ? ip_finish_output2+0x972/0x10b0 [ 587.608071][ C1] ip_finish_output2+0xbda/0x10b0 [ 587.608094][ C1] ? ip_finish_output2+0x3de/0x10b0 [ 587.608122][ C1] ip_output+0x29f/0x450 [ 587.608142][ C1] ? ip_output+0x5a/0x450 [ 587.608161][ C1] ? __pfx_ip_output+0x10/0x10 [ 587.608180][ C1] NF_HOOK+0x605/0x660 [ 587.608207][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 587.608234][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.608259][ C1] ? nf_conntrack_destroy+0x1e/0x2e0 [ 587.608289][ C1] ip_vs_nat_send_or_cont+0x69c/0x8d0 [ 587.608317][ C1] ip_vs_nat_xmit+0x76a/0xb40 [ 587.608347][ C1] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 587.608370][ C1] ? ip_vs_in_stats+0xc0/0x430 [ 587.608402][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 587.608429][ C1] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 587.608455][ C1] ip_vs_in_hook+0xe02/0x1c90 [ 587.608485][ C1] ? ip_vs_out_hook+0x99f/0x1030 [ 587.608511][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 587.608548][ C1] ? nf_nat_ipv4_local_fn+0x422/0x570 [ 587.608571][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 587.608598][ C1] nf_hook_slow+0xc5/0x220 [ 587.608623][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.608643][ C1] nf_hook+0x22a/0x3a0 [ 587.608664][ C1] ? nf_hook+0xa1/0x3a0 [ 587.608682][ C1] ? __pfx_nf_hook+0x10/0x10 [ 587.608716][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.608737][ C1] ? __ip_local_out+0x152/0x6a0 [ 587.608772][ C1] __ip_local_out+0x558/0x6a0 [ 587.608803][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.608824][ C1] ip_local_out+0x2a/0x190 [ 587.608844][ C1] ipvlan_process_v4_outbound+0x448/0x740 [ 587.608880][ C1] ? __pfx_ipvlan_process_v4_outbound+0x10/0x10 [ 587.608916][ C1] ? dst_release+0x79/0x1b0 [ 587.608939][ C1] ? skb_pull+0xb9/0x1d0 [ 587.608961][ C1] ipvlan_queue_xmit+0xabf/0x16b0 [ 587.608995][ C1] ipvlan_start_xmit+0x4a/0x130 [ 587.609029][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 587.609071][ C1] __dev_queue_xmit+0x14c0/0x3820 [ 587.609092][ C1] ? __bfs+0x153/0x290 [ 587.609126][ C1] ? check_noncircular+0xda/0x150 [ 587.609148][ C1] ? __dev_queue_xmit+0x29b/0x3820 [ 587.609171][ C1] ? lockdep_unlock+0x5c/0xd0 [ 587.609197][ C1] ? __lock_acquire+0x13e8/0x2cf0 [ 587.609228][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 587.609250][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 587.609286][ C1] ? ip_output+0x29f/0x450 [ 587.609308][ C1] ? ip_finish_output2+0x972/0x10b0 [ 587.609334][ C1] ip_finish_output2+0xbda/0x10b0 [ 587.609358][ C1] ? ip_finish_output2+0x3de/0x10b0 [ 587.609392][ C1] ip_output+0x29f/0x450 [ 587.609411][ C1] ? ip_output+0x5a/0x450 [ 587.609431][ C1] ? __pfx_ip_output+0x10/0x10 [ 587.609450][ C1] NF_HOOK+0x605/0x660 [ 587.609477][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 587.609504][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.609531][ C1] ? nf_conntrack_destroy+0x1e/0x2e0 [ 587.609560][ C1] ip_vs_nat_send_or_cont+0x69c/0x8d0 [ 587.609590][ C1] ip_vs_nat_xmit+0x76a/0xb40 [ 587.609620][ C1] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 587.609645][ C1] ? ip_vs_in_stats+0xc0/0x430 [ 587.609671][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 587.609697][ C1] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 587.609722][ C1] ip_vs_in_hook+0xe02/0x1c90 [ 587.609753][ C1] ? ip_vs_out_hook+0x99f/0x1030 [ 587.609779][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 587.609816][ C1] ? nf_nat_ipv4_local_fn+0x422/0x570 [ 587.609838][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 587.609865][ C1] nf_hook_slow+0xc5/0x220 [ 587.609891][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.609911][ C1] nf_hook+0x22a/0x3a0 [ 587.609930][ C1] ? nf_hook+0xa1/0x3a0 [ 587.609948][ C1] ? __pfx_nf_hook+0x10/0x10 [ 587.609982][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.610003][ C1] ? __ip_local_out+0x152/0x6a0 [ 587.610056][ C1] __ip_local_out+0x558/0x6a0 [ 587.610089][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.610111][ C1] ip_local_out+0x2a/0x190 [ 587.610131][ C1] ipvlan_process_v4_outbound+0x448/0x740 [ 587.610168][ C1] ? __pfx_ipvlan_process_v4_outbound+0x10/0x10 [ 587.610204][ C1] ? dst_release+0x79/0x1b0 [ 587.610228][ C1] ? skb_pull+0xb9/0x1d0 [ 587.610250][ C1] ipvlan_queue_xmit+0xabf/0x16b0 [ 587.610286][ C1] ipvlan_start_xmit+0x4a/0x130 [ 587.610320][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 587.610359][ C1] __dev_queue_xmit+0x14c0/0x3820 [ 587.610388][T21974] dvmrp1: linktype set to 776 [ 587.610377][ C1] ? __bfs+0x153/0x290 [ 587.610419][ C1] ? check_noncircular+0xda/0x150 [ 587.610491][ C1] ? __dev_queue_xmit+0x29b/0x3820 [ 587.610579][ C1] ? lockdep_unlock+0x5c/0xd0 [ 587.610664][ C1] ? __lock_acquire+0x13e8/0x2cf0 [ 587.610747][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 587.610804][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 587.610883][ C1] ? ip_output+0x29f/0x450 [ 587.610937][ C1] ? ip_finish_output2+0x972/0x10b0 [ 587.611006][ C1] ip_finish_output2+0xbda/0x10b0 [ 587.611060][ C1] ? ip_finish_output2+0x3de/0x10b0 [ 587.611132][ C1] ip_output+0x29f/0x450 [ 587.611183][ C1] ? ip_output+0x5a/0x450 [ 587.611235][ C1] ? __pfx_ip_output+0x10/0x10 [ 587.611286][ C1] NF_HOOK+0x605/0x660 [ 587.611357][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 587.611438][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.611504][ C1] ? nf_conntrack_destroy+0x1e/0x2e0 [ 587.611585][ C1] ip_vs_nat_send_or_cont+0x69c/0x8d0 [ 587.611668][ C1] ip_vs_nat_xmit+0x76a/0xb40 [ 587.611742][ C1] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 587.611803][ C1] ? ip_vs_in_stats+0xc0/0x430 [ 587.611867][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 587.611962][ C1] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 587.612041][ C1] ip_vs_in_hook+0xe02/0x1c90 [ 587.612111][ C1] ? ip_vs_out_hook+0x99f/0x1030 [ 587.612173][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 587.612264][ C1] ? nf_nat_ipv4_local_fn+0x422/0x570 [ 587.612320][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 587.612391][ C1] nf_hook_slow+0xc5/0x220 [ 587.612452][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.612501][ C1] nf_hook+0x22a/0x3a0 [ 587.612550][ C1] ? nf_hook+0xa1/0x3a0 [ 587.612591][ C1] ? __pfx_nf_hook+0x10/0x10 [ 587.612705][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.612757][ C1] ? __ip_local_out+0x152/0x6a0 [ 587.612841][ C1] __ip_local_out+0x558/0x6a0 [ 587.612929][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.612982][ C1] ip_local_out+0x2a/0x190 [ 587.613033][ C1] ipvlan_process_v4_outbound+0x448/0x740 [ 587.613116][ C1] ? __pfx_ipvlan_process_v4_outbound+0x10/0x10 [ 587.613217][ C1] ? dst_release+0x79/0x1b0 [ 587.613276][ C1] ? skb_pull+0xb9/0x1d0 [ 587.613341][ C1] ipvlan_queue_xmit+0xabf/0x16b0 [ 587.613454][ C1] ipvlan_start_xmit+0x4a/0x130 [ 587.613535][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 587.613637][ C1] __dev_queue_xmit+0x14c0/0x3820 [ 587.613687][ C1] ? __bfs+0x153/0x290 [ 587.613775][ C1] ? check_noncircular+0xda/0x150 [ 587.613826][ C1] ? __dev_queue_xmit+0x29b/0x3820 [ 587.613881][ C1] ? lockdep_unlock+0x5c/0xd0 [ 587.613937][ C1] ? __lock_acquire+0x13e8/0x2cf0 [ 587.614014][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 587.614059][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 587.614149][ C1] ? ip_output+0x29f/0x450 [ 587.614207][ C1] ? ip_finish_output2+0x972/0x10b0 [ 587.614270][ C1] ip_finish_output2+0xbda/0x10b0 [ 587.614329][ C1] ? ip_finish_output2+0x3de/0x10b0 [ 587.614411][ C1] ip_output+0x29f/0x450 [ 587.614461][ C1] ? ip_output+0x5a/0x450 [ 587.614504][ C1] ? __pfx_ip_output+0x10/0x10 [ 587.614553][ C1] NF_HOOK+0x605/0x660 [ 587.614629][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 587.614692][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.614782][ C1] ? nf_conntrack_destroy+0x1e/0x2e0 [ 587.614889][ C1] ip_vs_nat_send_or_cont+0x69c/0x8d0 [ 587.614964][ C1] ip_vs_nat_xmit+0x76a/0xb40 [ 587.615044][ C1] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 587.615108][ C1] ? ip_vs_in_stats+0xc0/0x430 [ 587.615172][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 587.615241][ C1] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 587.615303][ C1] ip_vs_in_hook+0xe02/0x1c90 [ 587.615385][ C1] ? ip_vs_out_hook+0x99f/0x1030 [ 587.615448][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 587.615542][ C1] ? nf_nat_ipv4_local_fn+0x422/0x570 [ 587.615601][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 587.615673][ C1] nf_hook_slow+0xc5/0x220 [ 587.615735][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.615786][ C1] nf_hook+0x22a/0x3a0 [ 587.615840][ C1] ? nf_hook+0xa1/0x3a0 [ 587.615883][ C1] ? __pfx_nf_hook+0x10/0x10 [ 587.615964][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.616016][ C1] ? __ip_local_out+0x152/0x6a0 [ 587.616099][ C1] __ip_local_out+0x558/0x6a0 [ 587.616194][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.616265][ C1] ip_local_out+0x2a/0x190 [ 587.616326][ C1] ipvlan_process_v4_outbound+0x448/0x740 [ 587.616419][ C1] ? __pfx_ipvlan_process_v4_outbound+0x10/0x10 [ 587.616502][ C1] ? dst_release+0x79/0x1b0 [ 587.616562][ C1] ? skb_pull+0xb9/0x1d0 [ 587.616621][ C1] ipvlan_queue_xmit+0xabf/0x16b0 [ 587.616700][ C1] ipvlan_start_xmit+0x4a/0x130 [ 587.616781][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 587.616881][ C1] __dev_queue_xmit+0x14c0/0x3820 [ 587.616900][ C1] ? __bfs+0x153/0x290 [ 587.616992][ C1] ? check_noncircular+0xda/0x150 [ 587.617051][ C1] ? __dev_queue_xmit+0x29b/0x3820 [ 587.617112][ C1] ? lockdep_unlock+0x5c/0xd0 [ 587.617176][ C1] ? __lock_acquire+0x13e8/0x2cf0 [ 587.617259][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 587.617312][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 587.617419][ C1] ? ip_output+0x29f/0x450 [ 587.617514][ C1] ? ip_finish_output2+0x972/0x10b0 [ 587.617596][ C1] ip_finish_output2+0xbda/0x10b0 [ 587.617676][ C1] ? ip_finish_output2+0x3de/0x10b0 [ 587.617749][ C1] ip_output+0x29f/0x450 [ 587.617801][ C1] ? ip_output+0x5a/0x450 [ 587.617864][ C1] ? __pfx_ip_output+0x10/0x10 [ 587.617918][ C1] NF_HOOK+0x605/0x660 [ 587.617981][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 587.618049][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.618118][ C1] ? nf_conntrack_destroy+0x1e/0x2e0 [ 587.618189][ C1] ip_vs_nat_send_or_cont+0x69c/0x8d0 [ 587.618262][ C1] ip_vs_nat_xmit+0x76a/0xb40 [ 587.618334][ C1] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 587.618424][ C1] ? ip_vs_in_stats+0xc0/0x430 [ 587.618497][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 587.618560][ C1] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 587.618622][ C1] ip_vs_in_hook+0xe02/0x1c90 [ 587.618697][ C1] ? ip_vs_out_hook+0x99f/0x1030 [ 587.618760][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 587.618857][ C1] ? nf_nat_ipv4_local_fn+0x422/0x570 [ 587.618906][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 587.618999][ C1] nf_hook_slow+0xc5/0x220 [ 587.619081][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.619131][ C1] nf_hook+0x22a/0x3a0 [ 587.619190][ C1] ? nf_hook+0xa1/0x3a0 [ 587.619233][ C1] ? __pfx_nf_hook+0x10/0x10 [ 587.619317][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.619369][ C1] ? __ip_local_out+0x152/0x6a0 [ 587.619469][ C1] __ip_local_out+0x558/0x6a0 [ 587.619545][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.619603][ C1] ip_local_out+0x2a/0x190 [ 587.619656][ C1] ipvlan_process_v4_outbound+0x448/0x740 [ 587.619747][ C1] ? __pfx_ipvlan_process_v4_outbound+0x10/0x10 [ 587.619840][ C1] ? dst_release+0x79/0x1b0 [ 587.619907][ C1] ? skb_pull+0xb9/0x1d0 [ 587.619960][ C1] ipvlan_queue_xmit+0xabf/0x16b0 [ 587.620048][ C1] ipvlan_start_xmit+0x4a/0x130 [ 587.620132][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 587.620236][ C1] __dev_queue_xmit+0x14c0/0x3820 [ 587.620288][ C1] ? __bfs+0x153/0x290 [ 587.620405][ C1] ? check_noncircular+0xda/0x150 [ 587.620453][ C1] ? __dev_queue_xmit+0x29b/0x3820 [ 587.620524][ C1] ? lockdep_unlock+0x5c/0xd0 [ 587.620598][ C1] ? __lock_acquire+0x13e8/0x2cf0 [ 587.620672][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 587.620724][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 587.620812][ C1] ? ip_output+0x29f/0x450 [ 587.620871][ C1] ? ip_finish_output2+0x972/0x10b0 [ 587.620936][ C1] ip_finish_output2+0xbda/0x10b0 [ 587.620994][ C1] ? ip_finish_output2+0x3de/0x10b0 [ 587.621063][ C1] ip_output+0x29f/0x450 [ 587.621105][ C1] ? ip_output+0x5a/0x450 [ 587.621161][ C1] ? __pfx_ip_output+0x10/0x10 [ 587.621209][ C1] NF_HOOK+0x605/0x660 [ 587.621275][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 587.621351][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.621421][ C1] ? __pfx_tcp_wfree+0x10/0x10 [ 587.621543][ C1] ? nf_conntrack_destroy+0x1e/0x2e0 [ 587.621570][ C1] ip_vs_nat_send_or_cont+0x69c/0x8d0 [ 587.621600][ C1] ip_vs_nat_xmit+0x76a/0xb40 [ 587.621686][ C1] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 587.621754][ C1] ? ip_vs_in_stats+0xc0/0x430 [ 587.621827][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 587.621902][ C1] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 587.621951][ C1] ip_vs_in_hook+0xe02/0x1c90 [ 587.622028][ C1] ? ip_vs_out_hook+0x99f/0x1030 [ 587.622098][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 587.622192][ C1] ? nf_nat_ipv4_local_fn+0x422/0x570 [ 587.622252][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 587.622323][ C1] nf_hook_slow+0xc5/0x220 [ 587.622385][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.622437][ C1] nf_hook+0x22a/0x3a0 [ 587.622488][ C1] ? nf_hook+0xa1/0x3a0 [ 587.622530][ C1] ? __pfx_nf_hook+0x10/0x10 [ 587.622620][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.622666][ C1] ? __ip_local_out+0x152/0x6a0 [ 587.622757][ C1] __ip_local_out+0x558/0x6a0 [ 587.622839][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.622883][ C1] ip_local_out+0x2a/0x190 [ 587.622928][ C1] ipvlan_process_v4_outbound+0x448/0x740 [ 587.623013][ C1] ? __pfx_ipvlan_process_v4_outbound+0x10/0x10 [ 587.623126][ C1] ? dst_release+0x79/0x1b0 [ 587.623200][ C1] ? skb_pull+0xb9/0x1d0 [ 587.623264][ C1] ipvlan_queue_xmit+0xabf/0x16b0 [ 587.623356][ C1] ipvlan_start_xmit+0x4a/0x130 [ 587.623449][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 587.623558][ C1] __dev_queue_xmit+0x14c0/0x3820 [ 587.623624][ C1] ? __dev_queue_xmit+0x29b/0x3820 [ 587.623686][ C1] ? __lock_acquire+0x683/0x2cf0 [ 587.623768][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 587.623822][ C1] ? __pfx_nf_confirm+0x10/0x10 [ 587.623939][ C1] ? ip_output+0x29f/0x450 [ 587.623993][ C1] ? ip_finish_output2+0x972/0x10b0 [ 587.624064][ C1] ip_finish_output2+0xbda/0x10b0 [ 587.624128][ C1] ? ip_finish_output2+0x3de/0x10b0 [ 587.624201][ C1] ip_output+0x29f/0x450 [ 587.624252][ C1] ? ip_output+0x5a/0x450 [ 587.624302][ C1] ? __pfx_ip_output+0x10/0x10 [ 587.624352][ C1] NF_HOOK+0x605/0x660 [ 587.624430][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 587.624519][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.624619][ C1] ip_vs_nat_send_or_cont+0x69c/0x8d0 [ 587.624693][ C1] ip_vs_nat_xmit+0x76a/0xb40 [ 587.624777][ C1] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 587.624830][ C1] ? ip_vs_in_stats+0xc0/0x430 [ 587.624885][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 587.624954][ C1] ? __pfx_ip_vs_nat_xmit+0x10/0x10 [ 587.625012][ C1] ip_vs_in_hook+0xe02/0x1c90 [ 587.625084][ C1] ? ip_vs_out_hook+0x99f/0x1030 [ 587.625145][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 587.625240][ C1] ? nf_nat_ipv4_local_fn+0x422/0x570 [ 587.625290][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 587.625357][ C1] nf_hook_slow+0xc5/0x220 [ 587.625425][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.625476][ C1] nf_hook+0x22a/0x3a0 [ 587.625525][ C1] ? nf_hook+0xa1/0x3a0 [ 587.625566][ C1] ? __pfx_nf_hook+0x10/0x10 [ 587.625636][ C1] ? __ip_local_out+0x152/0x6a0 [ 587.625722][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.625781][ C1] __ip_local_out+0x558/0x6a0 [ 587.625848][ C1] ? __pfx_dst_output+0x10/0x10 [ 587.625924][ C1] ip_local_out+0x2a/0x190 [ 587.625961][ C1] ? __ip_queue_xmit+0x65/0x1b10 [ 587.626015][ C1] __ip_queue_xmit+0x10df/0x1b10 [ 587.626075][ C1] ? __ip_queue_xmit+0x65/0x1b10 [ 587.626134][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 587.626185][ C1] __tcp_transmit_skb+0x2d18/0x47c0 [ 587.626273][ C1] ? rcu_is_watching+0x16/0xb0 [ 587.626335][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 587.626394][ C1] ? ktime_get+0x45/0x220 [ 587.626476][ C1] ? ktime_get+0x45/0x220 [ 587.626533][ C1] ? seqcount_lockdep_reader_access+0xea/0x100 [ 587.626628][ C1] tcp_connect+0x22e4/0x54e0 [ 587.626741][ C1] ? __pfx_tcp_connect+0x10/0x10 [ 587.626809][ C1] ? __asan_memset+0x22/0x50 [ 587.626876][ C1] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 587.626977][ C1] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 587.627099][ C1] ? sk_setup_caps+0x94f/0xbc0 [ 587.627213][ C1] ? sk_setup_caps+0x29/0xbc0 [ 587.627317][ C1] tcp_v4_connect+0x1051/0x1950 [ 587.627410][ C1] ? __pfx_tcp_v4_connect+0x10/0x10 [ 587.627490][ C1] __inet_stream_connect+0x258/0xe00 [ 587.627585][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 587.627639][ C1] ? lock_sock_nested+0x6a/0x100 [ 587.627702][ C1] ? __pfx___inet_stream_connect+0x10/0x10 [ 587.627765][ C1] ? inet_stream_connect+0x51/0xa0 [ 587.627828][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 587.627886][ C1] inet_stream_connect+0x66/0xa0 [ 587.627946][ C1] __sys_connect+0x316/0x450 [ 587.628029][ C1] ? __pfx___sys_connect+0x10/0x10 [ 587.628142][ C1] ? rcu_is_watching+0x16/0xb0 [ 587.628200][ C1] __x64_sys_connect+0x7a/0x90 [ 587.628292][ C1] do_syscall_64+0x166/0x520 [ 587.628352][ C1] ? trace_irq_disable+0x3b/0x140 [ 587.628431][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.628488][ C1] ? clear_bhb_loop+0x70/0xc0 [ 587.628547][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.628598][ C1] RIP: 0033:0x7f217c59e0d9 [ 587.628648][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.628696][ C1] RSP: 002b:00007f217d3da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 587.628762][ C1] RAX: ffffffffffffffda RBX: 00007f217c826090 RCX: 00007f217c59e0d9 [ 587.628802][ C1] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 000000000000000b [ 587.628834][ C1] RBP: 00007f217c635024 R08: 0000000000000000 R09: 0000000000000000 [ 587.628874][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.628914][ C1] R13: 00007f217c826128 R14: 00007f217c826090 R15: 00007ffe1f8a8a88 [ 587.628973][ C1] [ 587.629000][ C1] Modules linked in: [ 587.629049][ C1] ---[ end trace 0000000000000000 ]--- [ 587.629078][ C1] RIP: 0010:rcu_is_watching+0x6/0xb0 [ 587.629129][ C1] Code: e8 ff a0 67 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 53 65 48 ff 05 cf f5 c3 11 e8 6a c7 2c 0a 89 c3 83 f8 08 73 [ 587.629178][ C1] RSP: 0018:ffffc900048c8000 EFLAGS: 00010297 [ 587.629219][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 587.629250][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb5a1e0 [ 587.629281][ C1] RBP: ffffffff89f35e73 R08: 0000000000000000 R09: 0000000000000000 [ 587.629319][ C1] R10: 0000000000000007 R11: ffffffff89f382d0 R12: 0000000000000002 [ 587.629350][ C1] R13: ffffffff8eb5a1e0 R14: 0000000000000000 R15: 0000000000000000 [ 587.629390][ C1] FS: 00007f217d3da6c0(0000) GS:ffff888125024000(0000) knlGS:0000000000000000 [ 587.629440][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 587.629479][ C1] CR2: ffffc900048c7ff8 CR3: 0000000029e06000 CR4: 00000000003526f0 [ 587.629549][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 587.637983][ C1] Kernel Offset: disabled