last executing test programs: 28.277547911s ago: executing program 3 (id=9666): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x0, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x1) syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r0) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x810) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x810) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x8, 0x7800, 0x8, 0x4, {{0x58, 0x4, 0x3, 0x2, 0x160, 0x66, 0x0, 0x3, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}, {[@lsrr={0x83, 0x1b, 0x6d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @loopback, @private=0xa010101]}, @timestamp_prespec={0x44, 0x54, 0x93, 0x3, 0x1, [{@broadcast, 0x10000}, {@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff9}, {@remote}, {@multicast1, 0x3}, {@remote, 0xfffffffa}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xbd}, {@broadcast, 0xd}]}, @ra={0x94, 0x4}, @rr={0x7, 0x27, 0xc8, [@dev={0xac, 0x14, 0x14, 0x31}, @remote, @broadcast, @private=0xa010102, @rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0x17}, @local, @multicast1]}, @timestamp_addr={0x44, 0x2c, 0x87, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x4}, {@loopback, 0x8}, {@remote, 0x1000}, {@loopback, 0x1}, {@broadcast, 0xc}]}, @end, @timestamp={0x44, 0x20, 0x5e, 0x0, 0x4, [0x4, 0x2, 0x7, 0x1, 0xffffffff, 0x1000, 0x10001]}, @timestamp_addr={0x44, 0x44, 0xa9, 0x1, 0x0, [{@loopback, 0x80}, {@multicast2, 0x3}, {@multicast2, 0x7}, {@rand_addr=0x64010100, 0x6}, {@broadcast, 0x73cf}, {@local, 0x81}, {@empty, 0xffff8a42}, {@remote, 0x2}]}, @rr={0x7, 0x7, 0x9, [@remote]}, @timestamp={0x44, 0x18, 0x11, 0x0, 0x0, [0x40af, 0x1000, 0xc, 0x2, 0x1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x2f, 0xef, 0x8, 0x5, 0x1, @empty, @empty, 0x80, 0x8000, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x8, 0x2, 0x40, @rand_addr=' \x01\x00', @private2, 0x1, 0x40, 0x10, 0x80}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000680)=0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000880)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x160, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x84}, 0x40000) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000880)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x160, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x84}, 0x40000) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r2) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r2) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, r8, 0x20, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x10) (async) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, r8, 0x20, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x10) accept4$x25(0xffffffffffffffff, &(0x7f0000000a00), &(0x7f0000000a40)=0x12, 0x0) (async) r9 = accept4$x25(0xffffffffffffffff, &(0x7f0000000a00), &(0x7f0000000a40)=0x12, 0x0) ioctl$SIOCX25SCALLUSERDATA(r9, 0x89e5, &(0x7f0000000a80)={0x6d, "32ecc93d2e143a6ba71ce0497a53504c4f7d404d8777749ed2911623ceeac11f4721499f2dce56d69a2ccb9008f71b07bf28e1c7957664f790f873e03f83c04465274ec0790a7e99366632c95e0d6296eade403cf9ac7d814395747cae20671947867cb0e14ee01e41eeda520dd21872688d40edf6a4a9b40091928e2a2d2066"}) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b80), r0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r10, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x810) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), r2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000d80)={'syztnl1\x00', &(0x7f0000000d00)={'sit0\x00', r5, 0x7800, 0x7800, 0x3, 0x7fff, {{0xb, 0x4, 0x2, 0x33, 0x2c, 0x3b6, 0x0, 0x0, 0x29, 0x0, @private=0xa010101, @multicast1, {[@ssrr={0x89, 0x17, 0xb6, [@rand_addr=0x64010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000d80)={'syztnl1\x00', &(0x7f0000000d00)={'sit0\x00', r5, 0x7800, 0x7800, 0x3, 0x7fff, {{0xb, 0x4, 0x2, 0x33, 0x2c, 0x3b6, 0x0, 0x0, 0x29, 0x0, @private=0xa010101, @multicast1, {[@ssrr={0x89, 0x17, 0xb6, [@rand_addr=0x64010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, r11, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x44050) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000ec0), r2) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ec0), r2) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x34, r13, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040085}, 0x20008000) getpid() r14 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001000), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x28, r14, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000001) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001100)={0x5, {{0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3ff}}, 0x0, 0x2, [{{0xa, 0x4e24, 0x8c9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}, {{0xa, 0x4e23, 0x100, @private1, 0x5}}]}, 0x190) (async) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001100)={0x5, {{0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3ff}}, 0x0, 0x2, [{{0xa, 0x4e24, 0x8c9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}, {{0xa, 0x4e23, 0x100, @private1, 0x5}}]}, 0x190) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x120480}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x2c, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0xc, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x9, 0x1}}]}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x91) unshare(0x60000000) 25.729435512s ago: executing program 1 (id=9681): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x50) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) listen(r1, 0x50) close(0x4) 25.562367533s ago: executing program 2 (id=9682): r0 = socket(0x2b, 0xa, 0x5) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000200)='bridge0\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000f00)="9eb8a2", 0x3}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="1800"], 0x18}, 0x8080) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0) clock_gettime(0xffefff1f, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000000280)) 25.31101873s ago: executing program 1 (id=9685): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x6c}, {0x6}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x93, 0x17, &(0x7f00000001c0)="0b2b5833cd768ce7d99404429aba11cd306b34bf134c60e4de1a89ab60a48870a36dd7fcd1b687fff1b4f21eb153cd7ee86413d7e07876d8310185d0bed6372975a9f06ed86d763a6f6951654fc3581befef84b0ff6c21074f93eaaa29bcb32b557f3e5427567c06655b547e5a1c1387b4a3c29f7f7a1e69878020bb541a5026c35b37ae3a813422e9a3bd18fc754473d249fc", &(0x7f0000000280)=""/23, 0x7, 0x0, 0x53, 0x4a, &(0x7f00000002c0)="6990c665487b68cfbaf86c4494ebb614348df4995734af766e7c0c24bd21ca7c923079d636d436c3cc026a71f763dba5fa8d4d787be59498b574f743a6fc61de0da46849becd5ba279170fe1a898c9318d2d0b", &(0x7f0000000340)="8129e4ca0d15c9615df44860a20fab9b6164da1d172b9e6cc8b31073afd4ef00369f8b4a2f63f9011079b6bc8d3590ab0df27dfc3528bb11990c2a9fe31d34e3b809fe677edf1d6f8a94", 0x2, 0x0, 0x9c22}, 0x50) 25.310005034s ago: executing program 2 (id=9686): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x15}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @empty}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'geneve0\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x55}, 0x0, 0xd0, 0x100, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@cgroup0={{0x28}, {0x92e, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x1, 0x7}, {0x0, 0x3, 0x2}, 0xfffffff7, 0x1}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0x0, 0xff, 0xffffffff, 0xff000000], 'ip6gre0\x00', '\x00', {}, {}, 0x87, 0x2, 0x4}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x41, 0x6, {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x0, 0xbb, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@RTM_DELMDB={0x78, 0x55, 0x2, 0x70bd25, 0x25dfdbfd, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x3, 0x2, {@ip4=@dev={0xac, 0x14, 0x14, 0x39}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x4, {@ip4=@loopback, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x1, 0x0, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}, 0x8edd}}}]}, 0x78}}, 0x0) 25.049675623s ago: executing program 3 (id=9688): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001380)}, 0xe}], 0x1, 0x40000120, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x20, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x4000, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x6, r4, 0x0, r0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x14, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r2], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x1, '\x00', r4, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 24.978640919s ago: executing program 2 (id=9689): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x67, @multicast1, 0x5d3d, 0x2, 'wlc\x00', 0x9, 0x5, 0x21}, 0x2c) recvmmsg(r1, &(0x7f0000006040)=[{{&(0x7f0000000080)=@un=@abs, 0x80, &(0x7f0000001440)=[{&(0x7f0000000100)=""/216, 0xd8}, {&(0x7f0000000200)=""/201, 0xc9}, {&(0x7f0000000300)=""/126, 0x7e}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/32, 0x20}, {&(0x7f00000013c0)=""/76, 0x4c}], 0x6}, 0x7ae5}, {{&(0x7f00000014c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001540)=""/112, 0x70}, {&(0x7f00000015c0)=""/155, 0x9b}, {&(0x7f0000001680)}, {&(0x7f00000016c0)=""/50, 0x32}, {&(0x7f0000001700)=""/139, 0x8b}, {&(0x7f00000017c0)=""/86, 0x56}, {&(0x7f0000001840)=""/203, 0xcb}, {&(0x7f0000001940)=""/2, 0x2}, {&(0x7f0000001980)=""/89, 0x59}, {&(0x7f0000001a00)=""/126, 0x7e}], 0xa, &(0x7f0000001b40)=""/115, 0x73}, 0xc000}, {{&(0x7f0000001bc0)=@qipcrtr, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000001c40)=""/45, 0x2d}, {&(0x7f0000001c80)=""/38, 0x26}, {&(0x7f0000001cc0)=""/4096, 0x1000}], 0x3, &(0x7f0000002d00)=""/54, 0x36}, 0x37}, {{&(0x7f0000002d40)=@can, 0x80, &(0x7f0000003180)=[{&(0x7f0000002dc0)=""/94, 0x5e}, {&(0x7f0000002e40)=""/231, 0xe7}, {&(0x7f0000002f40)=""/105, 0x69}, {&(0x7f0000002fc0)=""/233, 0xe9}, {&(0x7f00000030c0)=""/186, 0xba}], 0x5, &(0x7f0000003200)=""/63, 0x3f}, 0x9}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000003240)=""/108, 0x6c}, {&(0x7f00000032c0)=""/144, 0x90}, {&(0x7f0000003380)=""/178, 0xb2}, {&(0x7f0000003440)=""/250, 0xfa}, {&(0x7f0000003540)=""/219, 0xdb}, {&(0x7f0000003640)=""/191, 0xbf}], 0x6, &(0x7f0000003780)=""/199, 0xc7}, 0x2}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000003880)=""/191, 0xbf}, {&(0x7f0000003940)=""/37, 0x25}, {&(0x7f0000003980)=""/38, 0x26}, {&(0x7f00000039c0)=""/111, 0x6f}], 0x4}, 0x7ba}, {{&(0x7f0000003a80)=@hci, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003b00)=""/21, 0x15}], 0x1}, 0x3}, {{&(0x7f0000003b80)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000005d00)=[{&(0x7f0000003c00)=""/244, 0xf4}, {&(0x7f0000003d00)=""/4096, 0x1000}, {&(0x7f0000004d00)=""/4096, 0x1000}], 0x3, &(0x7f0000005d40)=""/164, 0xa4}, 0x400}, {{&(0x7f0000005e00)=@phonet, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005e80)=""/170, 0xaa}], 0x1, &(0x7f0000005f80)=""/139, 0x8b}, 0x2}], 0x9, 0x0, &(0x7f0000006280)={0x77359400}) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000006380)={&(0x7f00000062c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000006340)={&(0x7f0000006300)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000064c0)={r3, &(0x7f00000063c0)='wlc\x00', 0x10000, &(0x7f0000006400)={@_ha_fsid={[0x4, 0x3]}, {0x4, 0x6, 0x33b, 0x7fffffff}}, 0x9, &(0x7f0000006440), &(0x7f0000006480)}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000065c0)={&(0x7f0000006500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000006580)={&(0x7f0000006540)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006640), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000006700)={&(0x7f0000006600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000066c0)={&(0x7f0000006680)={0x1c, r5, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x5a2bd795d7ca85b) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000006740)={'HL\x00'}, &(0x7f0000006780)=0x1e) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000006800), r3) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000069c0)={&(0x7f00000067c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000006980)={&(0x7f0000006840)={0x13c, r6, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x910}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x29}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x59}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3d}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xecd1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4084}, 0x4801) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000006a40), r4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000006b80)={&(0x7f0000006a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000006b40)={&(0x7f0000006a80)={0x90, r7, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x8000}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x800}, {0x5, 0x12, 0x1}}]}, 0x90}}, 0x4000000) sendmsg$kcm(r3, &(0x7f0000007200)={&(0x7f0000006bc0)=@llc={0x1a, 0x309, 0x3, 0x80, 0x5, 0x6e, @broadcast}, 0x80, &(0x7f0000006f40)=[{&(0x7f0000006c40)="d5727c49a955e5423499b66b7606fd12d174eed104de1c913e4d51937f8a6cdc05b0e4daeddc1ef17d5bb9cc9bf58af9ec2d366b55a806b67336f59b66fe7212b6d2d75cfcee7f62be92844565f8cda0e96c4d91976e4745df1d1bd27edd93a7596440942d975bfaaf11009e494c28c5e63cd1c2f37fc1d780297b26db12ad5f3d52c4943c821cf3754ab31eedb793ab648c8df88cf320c58f6dcec26be50fc59105a3631fa86412a5f7fbdfe42c7e4260723a9047aec8dc8b014f35c683abe2fc82e2a1edd257290d71", 0xca}, {&(0x7f0000006d40)="5a8762792a448197cc62b1fb626b76d734a0c35a64a7f2a7ba3a0033b88ad0fe50ba7b77c2702915a2721fe9fb8e056cbe528e9bd98c4f7f3b12ccc83d6e9ad9498508e97f67ed1ed45974b249357fdc7019546467c21af9e47edde8c35217b8d59b9ce9764bb89ec96883a16e5d4590da60b790e51c140799b27bbd58f981308d06ac03e6770a5c", 0x88}, {&(0x7f0000006e00)="cfe658e0882660fd2fd6eabffbd11e44c69e5772308ceec3f072e66d0135c0ed2178c82102bcfbf2b2da3118", 0x2c}, {&(0x7f0000006e40)="7a891b75910ed0898a0b068be8603cc9e944130c802dd01015719d48fbeb8f70bdcb98cccf4169e6690321238daa46c8f35d877362e4c66d05792e988adbc29f23a874ff70f8622c19ed66a43f462f40e6d4283af6e5c320d6f7dedac56b2451afea52e577dad3fb1abb16794be43e6fd31902617e824969a16b084a743e125ae0d4baf6c5e323495236c9fe0fc71bfd7b870d9db3296f52722b4ad873af733885962d88e329d59ea5508dd44d10dfcac7aa2032827c4b35bad6e4af9d573e7f2a87195d77bdaa4a6950355fbc3793fa922753052ee3f958dc1e802f215f420846c68552cee7863932721da7ef9e17635c911731d7", 0xf5}], 0x4, &(0x7f0000006f80)=[{0x58, 0x0, 0x80, "da4564178cb5e81fe84687c1e04568b17fb7dc9081e23f5ce26288d6e09f887bc9597178fa70fa82bf2fdf6932d550dae66a4aadd51040ce43b65024054077055d25bcaf0d8b5342"}, {0x38, 0x1ff, 0x9, "b631884627ad786e846385d667b88ceae01db814505dea998c205e7999f3495014ca15"}, {0xa8, 0x104, 0x8, "2207eee5e123f0bd488f0646d5196aebe21e450aedbf57260db0d1cb9c6fcc6f40112533e702a36018ca98f80af7807c084bdffd7f35f130d337c7ad7c460dc440c95d6825161ec9350f38e642dc84dff84960c2cf95eedf786901425c866d4ef5b9b6ba90fc042e3f00db9d993438a1d41df44b20e42feaad9739526abf8deb9db2a3c8aca61fd53f774446cd3bfd4d2173"}, {0xf8, 0x119, 0x7, "25d4edbe4ee70c6e6ed4a9e198d9f79fd16c7f2ab187779bee32599bd69b9901b2b4b1b785e5f262efce7f2879abff3d2d7463cb1bff17243cc2b5a9ab0c2fcc6ff79a5b1d8c4c67c93d0874f8be8ee021ab80c2f62849b578ea8856ba43539cae43ec23dfbb3cad9c3d78c60c180605f8ab2f7455c22b965ae194e81f75a8f3ac7959b11b22051a3327b53de92d87c9a97734389491c10f85cc797e3313e4530f834365ba781ef900e1b3747a3dd832b5c6ba4cd69baa32231bdb02ed7f626faf40eb4cfbf6c5e8d06d49174ecadb2c8d34fa1cc12e3e4de818e02e03dda62b2b6e8249809e"}, {0x20, 0x108, 0x9, "36195ce42a1cdc2ae10a1edd8089e1"}, {0x10, 0x84, 0x6}], 0x260}, 0x80) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000007240)=0x0) syz_open_procfs$namespace(r8, &(0x7f0000007280)='ns/mnt\x00') sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f00000073c0)={&(0x7f00000072c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000007380)={&(0x7f0000007300)={0x44, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x80) socket$kcm(0x29, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000007440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000007600)={&(0x7f0000007400), 0xc, &(0x7f00000075c0)={&(0x7f0000007480)={0x140, r5, 0x317, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1, 0x50}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xc}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x393}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x3da90f66c0a0f202}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e4}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x1}, 0x8000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000007640), 0x949200, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000076c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000007700)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000007740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000007800)={&(0x7f0000007680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000077c0)={&(0x7f0000007780)={0x40, r11, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x77}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000004}, 0x40089) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000007940)={&(0x7f0000007840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000007900)={&(0x7f0000007880)={0x6c, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x101}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x7]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x4004000) 24.977940699s ago: executing program 0 (id=9690): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd000071187c0000000000c3640000f10000007b0a00fe00000000850000002e00000079a00000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042800c00018006000600800a00000800028004"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000003a00), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a80)={&(0x7f0000003a40)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4014000}, 0x800) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010841000000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="072002000000000094002b80080003000300000008000100", @ANYRES32=r5, @ANYBLOB="08001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x20040090) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00022abd7000fddbdf251d00000008000300", @ANYRES32=r8, @ANYBLOB="2c0023800500050086bb0d0000000800150044000000060001007b00000006000100f30000000600100008000000"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x2000c958) 24.759538733s ago: executing program 4 (id=9691): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0xf5, 0xfffff010}, {0x6}]}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r2, 0x400442c8, 0x200000f3) 24.682468447s ago: executing program 1 (id=9692): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x28) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x1}]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) 24.54264064s ago: executing program 3 (id=9693): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001740), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001780)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x7f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x80) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20028840) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x34, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x31c, 0x2e, 0x1, 0x3, 0x25dfdbfc, "", [@nested={0x30b, 0x10f3, 0x0, 0x1, [@nested={0xc, 0xe5, 0x0, 0x1, [@typed={0x8, 0xda, 0x0, 0x0, @pid}]}, @nested={0x15d, 0x7f, 0x0, 0x1, [@generic="cc39cb9db042474549524889905886009171313736215baae9fdfd00355318c9977e4535d6b232b37dc0067392db2608b279505c77b74983531f58fce686effe61b609487abb81bc75d4e67ca3e055d72cb435ab6f1639ffd15c57dfcf7a0a6386e7afb30e5a0ce79b72d75913", @generic="f80bec69229f826d13775d03b15cc5d9882718098ed0675d1935b77f14e53e774732635edbf74182997ee5", @generic="8a1413e08e03a3389678ab2957a52405dabfa582c12516d13e7b20e21bec94abd3cc16f391bb36c846adb1a2dde9e7c38240b38b72f3f4f667a4f434dde0b0aeb0a2f56f7fd8eba140f139432ea7537f6f3f749d8dfca2af8f34aebbe449c0fda2131ad1c773103d88ebb282185baceaa3003f43f6993418a06f3f7a0a4a7342638a92486ebfdd5f632e95a74f510d67c3ea24374ce3676f13e058fe6d39426ccf2a0bf4c7e7ebab5b43d4756cbc7775fed402e1e066532afc62323a1bacacdf62"]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @generic="053b3a0b0a3176fa81d5dd205df77d46f70df08bc18894624e7bffe90164484395675b08b5cb590c676c2142be91e216739d0690e72a5925af7fb13fb2a4be76902e2211229172bd7c360f6d603e8eff61b35dd6ff34fe58dc5d3ba23ebb70b0d2f8d302084ad3e98ec61864d2cb9d0647451ab80d4f325eadc8d7ad364274f68cf6f7874b0d0c1b6442967dae092f893ad27643e311bc94a206618e9e36515064a0fab336692db34956ed512f98d73cf478601a5677008289970a674d1b41"]}]}, 0x31c}], 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x4101}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010000000000000000000a8080"], 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020000050027000700000008000a00", @ANYRES32=r10, @ANYBLOB="e233061d061c17535f6d97eaa27efd9a8c605daab25decc687d93bdc9b5037963c0c"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r12, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000880)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x68, r13, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x8, @link='broadcast-link\x00'}}}, ["", "", "", "", ""]}, 0x68}}, 0x1) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 24.485848553s ago: executing program 0 (id=9694): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x9c}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x90) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r2) (async) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f00000002c0)={0x140, r3, 0x1, 0x0, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x118, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2045}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4931672c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcbfb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2ffc}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc14}, @NLBL_CIPSOV4_A_MLSCATREM={0x3, 0xa, 0xc790}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdf6c}, @NLBL_CIPSOV4_A_MLSCATREM={0x0, 0xa, 0xec13}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x412b5741}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x347818a0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfd1c}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xcdd1a46}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdf96}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9c4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7149}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b30}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50e6e0d3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa00f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x647df484}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a507a06}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x70b3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x36e527ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24c2ee0d}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3891}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x490f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc2}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6bd9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ff47d34}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f7}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50402f15}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x292a}]}]}]}, 0x140}}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r4, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}}, 0xc8d1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b00010062726964676501000000028005002c0001000000050018000000050017000100"/60], 0x54}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, r8, 0x1, 0x70bd29, 0x25ffdbfc, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000005}, 0x240440c4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'erspan0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x7800, 0x8, 0xffff0000, 0xa, {{0x4c, 0x4, 0x0, 0x3, 0x130, 0x68, 0x0, 0x10, 0x4, 0x0, @rand_addr=0x64010102, @multicast2, {[@cipso={0x86, 0xb, 0x2, [{0x5, 0x5, "cc8304"}]}, @lsrr={0x83, 0x23, 0x62, [@private=0xa010101, @empty, @local, @dev={0xac, 0x14, 0x14, 0x40}, @remote, @multicast1, @rand_addr=0x64010101, @local]}, @generic={0x90, 0x2}, @timestamp_prespec={0x44, 0x2c, 0xbb, 0x3, 0x0, [{@broadcast, 0x3}, {@empty, 0x10001}, {@remote, 0x1}, {@empty, 0x3}, {@broadcast, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x84, 0x3, 0x9, [{@rand_addr=0x64010100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x400}, {@empty, 0x1000}, {@loopback, 0x20}]}, @timestamp_addr={0x44, 0x3c, 0xd1, 0x1, 0x4, [{@rand_addr=0x64010101, 0x5}, {@rand_addr=0x64010100, 0x4}, {@local, 0x200}, {@local}, {@empty, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@private=0xa010101, 0x7ff}]}, @lsrr={0x83, 0xf, 0x5, [@rand_addr=0x64010101, @local, @multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x89, 0x3, 0x5, [{@remote, 0x7}, {@rand_addr=0x64010102, 0x9}, {@private=0xa010100, 0xc}, {@multicast1, 0x86c3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@empty, 0x1}]}, @lsrr={0x83, 0x17, 0xe7, [@private=0xa010101, @private=0xa010100, @empty, @loopback, @broadcast]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000740)={'gretap0\x00', 0x0, 0x20, 0x87, 0x5, 0x9, {{0x19, 0x4, 0x3, 0x2, 0x64, 0x66, 0x0, 0x6, 0x4, 0x0, @broadcast, @local, {[@end, @ra={0x94, 0x4}, @generic={0x0, 0xd, "78241953f6daefa0d3afd9"}, @ssrr={0x89, 0x13, 0x2f, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @multicast1]}, @lsrr={0x83, 0x27, 0xc3, [@remote, @remote, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1, @broadcast, @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @ra={0x94, 0x4}]}}}}}) socket(0x400000000010, 0x3, 0x0) (async) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r15, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884) (async) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r15, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000840)={'vxcan1\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) (async) r17 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r17, 0x8933, &(0x7f0000000100)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r17, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r18, 0x409, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x128, r8, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x128, r8, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 24.362980048s ago: executing program 1 (id=9695): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f00000002c0)={@void, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @multicast1}, "0100000000000000"}}}}}, 0x32) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r4}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 24.091032663s ago: executing program 4 (id=9696): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000017c0)={r0, r0}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x20050800) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000006000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r2, 0x20, &(0x7f0000000640)={0x0, 0x0, 0x0, &(0x7f00000005c0)=""/87, 0x57}}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}, {&(0x7f0000000040)="4172d1a11b221427adb8c449c3fa79c3db18416e13491c241aa8c5e7ee8d6b6245aba68288bda3a935600027eca9"}], 0x1, 0x0, 0xffffffffffffffa1}, 0x0) 23.887601383s ago: executing program 2 (id=9697): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000020000114000000000000000002000000000000071f0000000500160011000000080001006401010108000b000900000008000200"], 0x48}, 0x1, 0x0, 0x0, 0x4008010}, 0x44890) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0xa, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) (async) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) socket$kcm(0xa, 0x5, 0x0) (async) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890c, &(0x7f0000000000)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1802, 0x0) socket(0x2c, 0x3, 0x40) (async) socket(0x2c, 0x3, 0x40) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r4, 0x4004743c, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@newspdinfo={0x24, 0x24, 0x800, 0x70bd27, 0x25dfdbfb, 0x94, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x24}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd26}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) (async) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000000800000000fcdbdf2500000000", @ANYRES32=r5, @ANYBLOB="000000002244000014000300766574683bf4ca908270e8dcf823e594a70879c97a696669"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 23.868980929s ago: executing program 0 (id=9698): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x10448) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYRESHEX=r4], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r6, r8, 0x25, 0x0, @val=@netkit={@void, @value=r6}}, 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x3f}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x3f}, 0x28) 23.646896292s ago: executing program 4 (id=9699): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x101, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x1, 0x7, 0x307, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xc}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x116f}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000900}, 0x10) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) 23.510063394s ago: executing program 1 (id=9700): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xa888, r12, 0x3e}, 0x80, &(0x7f0000000840)=[{&(0x7f00000024c0)='\'', 0x1}], 0x1}, 0x4) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000000)={0x8}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xb}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4, 0x27}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x260580e9}, 0x810) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x28) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="00a98f218304000200", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) socket(0x10, 0x3, 0x0) 23.274667521s ago: executing program 3 (id=9701): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001d000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x6000000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1b, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/387, @ANYRES32, @ANYBLOB="a68f9ed6b9b27b209c263197b6cdd36abd0b3789e606ce742dadee0702a338a7fda6951026997e83096bdddf6244714a31609cd11176313058bad204e650d6b1713cae6146", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 23.156888403s ago: executing program 0 (id=9702): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x40}}, 0x4040081) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f00000000c0)={0x7, 'wg1\x00', {0xffff7fff}, 0x7}) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x18, r3, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x4000) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1ec, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1695}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_BEARER={0x10c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x876}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @remote, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @remote, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8fe}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000}, 0x40) syz_emit_ethernet(0x2b, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@cipso={0x86, 0x6}]}}, "e9"}}}}, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x50, r1, 0x1bd9000) 23.141556234s ago: executing program 3 (id=9703): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff0000000000000000000000070000000000000000000000090000000000000000000000090400000000000000000000090600000001"], 0x0, 0x96}, 0x28) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x7, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async, rerun: 64) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xfffffffd}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async, rerun: 64) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x8002}}, {{0xa, 0xfffd, 0xea, @remote, 0xfffffffc}}}, 0x108) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000200)='{\x00', 0x2) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="b4050000200080066110480000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498909714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442e05d9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002add8b8ed61d995c1258ea2c22e218f2122a75d10d77aa735e3aa4988bc267d698cc01e56f8ed8b7877f8d217269ab71a634fed1261c399b31bc3f89f6d76816b9e08bed85b33c7cf8527b20ec14f462dad0e1cb64d49d4fa180e0cb32d9f84ffdb28286a810c1d10fdb67ee5148f8c21ddc16c9417570fb3b8c949a940967d71f6441c5f6dbd7fba76ec0bc54575ffea4ac586994450612a3b1080365753cd59300858929c24d40c4f5e6cde531a3be5fb86a50a77187aa095fdd8b3f959b4e47b2053cfafc22ca"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r4, r4, 0x2f}, 0x20) (async, rerun: 32) ioctl$XFS_IOC_FSBULKSTAT(r2, 0xc0205865, &(0x7f0000000b00)={&(0x7f0000000340)=0x7, 0x9, &(0x7f0000000700)=[{}, {}, {}, {}, {}], &(0x7f0000000ac0)}) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r4, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000003680)}, 0x40) (async) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000000)={0x84, @private=0xa010100, 0x4e20, 0x3, 'sed\x00', 0x3, 0x1, 0x5f}, 0x2c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32=r1, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) 23.079086024s ago: executing program 2 (id=9704): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x102, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4008011}, 0x800) (async) r1 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r2 = socket(0x2b, 0x1, 0x0) bind$can_j1939(r2, &(0x7f0000000300)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x1}, 0x3}, 0x18) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3ff, 0x4000000, 0x0, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 22.978998758s ago: executing program 4 (id=9705): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000340)={'HL\x00'}, &(0x7f0000000380)=0x1e) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2808006a9d006a46c20c21ac3c337059ac010003001000000000000c000200010000001500000004"], 0x28}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe800000000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x303}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r0, &(0x7f0000000000)='\'/\"!\x00', 0x200020, &(0x7f0000000080)={@align=0x7, {0x59, 0x8, 0x0, 0x5}}, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x7}) 22.80178936s ago: executing program 0 (id=9706): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000001000000000000000000000097000100ffffffff9500000000000000"], &(0x7f0000001a40)='GPL\x00', 0x7}, 0x94) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000200)={{r0, &(0x7f0000000000)='\x00', 0x2800, &(0x7f0000000040)={@align=0x3, {0x9, 0xfff, 0xffff, 0x41f}}, 0x0, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x9197}, 0x1, &(0x7f00000001c0)=[{0x3, 0x5, &(0x7f0000000100)=']\'/.)-{-\x00', &(0x7f0000000140)="77d50e04a65c2b30ce595209872e04583d9d53022a082c17a938575bcf3fffc3506a785d522eca3e6d41dca3650609ee3d15b9e2277388e5171273bf6b1d6889e8f46af55df71ccfe093c2f2bd3614ef98cb853abdf6f304ba6c62", 0x5b, 0x2}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x48010) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', r4, 0x2f, 0xff, 0x7, 0x9, 0x38, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8, 0x40, 0x99, 0x8}}) 22.761861877s ago: executing program 2 (id=9707): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$kcm(0xa, 0x1, 0x106) r2 = socket$inet6(0xa, 0x3, 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x100) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x12, 0x10001, 0x6b}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wlc\x00', 0x11, 0x4}, {@loopback, 0x4e23, 0x10000, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x0) sendmsg$netlink(r0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x11, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRESHEX=r1], 0xfc}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(r9, 0x0, 0x0) accept(r6, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f00000001c0)=0x80) 22.706920633s ago: executing program 1 (id=9708): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x34, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_LABELS_MASK={0x10, 0x17, [0x40, 0x7, 0x7]}, @CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x34}}, 0x1) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x1a0, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xfd}}, @TCA_RATE={0x6, 0x5, {0x4c}}, @TCA_RATE={0x6, 0x5, {0x0, 0xa6}}, @TCA_RATE={0x6, 0x5, {0x2c, 0xe}}, @qdisc_kind_options=@q_gred={{0x9}, {0x150, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0x7}, @TCA_GRED_MAX_P={0x8, 0x4, 0x4}, @TCA_GRED_PARMS={0x38, 0x1, {0x653a, 0x3, 0x8000, 0x3, 0x80000000, 0x8, 0xffffffff, 0x2, 0xfffffffa, 0x5, 0x7, 0x10, 0x0, 0x4, 0x4, 0x1}}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf07, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x7fffffff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8881}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000006ac0)=[{{&(0x7f00000034c0)={0xa, 0x4e22, 0x7, @loopback, 0xe}, 0x1c, 0x0, 0x0, &(0x7f0000003900)=[@rthdrdstopts={{0x18}}, @dstopts={{0x18, 0x29, 0x37, {0x950e04620a2148d0}}}], 0x30}}], 0x1, 0x20000020) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="02010000080000000000000000000000030005000000000002000000ac1414000000000000040000030006000000000002"], 0x40}}, 0x0) sendmsg$key(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x48c0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000019000000008020000000040005000000009b0610a33e8525cafd00000000000000"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f0000000040)={0x0, 0xe}, &(0x7f0000000080)=0x8) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000850600000000000000000000000076703cac5349d207b6005f4ea3d069844e5a56438b749d11331cb7dffd66d3d19b1d206eb262b1097e83667a1101ff17578c933cc050cfe85c13d4675dca556c7fce99b063", @ANYRES32=r10, @ANYRESDEC=r10], 0x3c}}, 0x0) r11 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r12, &(0x7f0000000100)={0x20000000}) shutdown(r12, 0x0) epoll_wait(r11, &(0x7f0000000280)=[{}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r12, &(0x7f0000000140)={0x2000200b}) 22.70367637s ago: executing program 4 (id=9709): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @none={0x3}}, 0x14, &(0x7f0000000100)={0x0, 0x1b}, 0x7}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 22.692551853s ago: executing program 3 (id=9710): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000004001a9109f3d3fe72d000000800000000008018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x101, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4d0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000700)={r1, &(0x7f0000000600)='\x00', 0x902, &(0x7f0000000640)={@align=0xfffffffffffffffe, {0x6, 0x3, 0x3, 0x7}}, 0xa9f, &(0x7f0000000680), &(0x7f00000006c0)=0x2fc8}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xcc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x12, 0xffffffff, 0x1, 0x0, 0x8108, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x31, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd6d}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x4, 0x0, 0x1, 0x3, 0x3, 0x8}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x85}, @generic={0x7, 0x2, 0x2, 0x4, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x52, 0x2d, &(0x7f0000000380)=""/45, 0x41100, 0x51, '\x00', r4, 0x1a, r5, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x0, 0x1ff, 0x9}, 0x10, 0x239f1, 0xffffffffffffffff, 0x6, &(0x7f0000000980)=[0x1, r6, r7, 0x1], &(0x7f00000009c0)=[{0x5, 0x3, 0x6, 0xe}, {0x0, 0x3, 0xa, 0x8}, {0x2, 0x3, 0x5, 0x4}, {0x0, 0x4, 0x3, 0xb}, {0x5, 0x1, 0xa, 0x6}, {0x2, 0x4, 0x0, 0x8}], 0x10, 0x8000}, 0x94) 21.804125919s ago: executing program 4 (id=9711): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x14, r1, 0x321, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x140048c0}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000180)=0x4) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r4, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/230, 0xa}], 0x1}, 0x2000000}], 0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002340)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x84004}, 0x20000080) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x4000000) 15.304629492s ago: executing program 0 (id=9712): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x8, 0x433, 0x9}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x2, 0xc, 0xe0000, 0x101, r2}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x70bd29, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 0s ago: executing program 32 (id=9708): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x34, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_LABELS_MASK={0x10, 0x17, [0x40, 0x7, 0x7]}, @CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x34}}, 0x1) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x1a0, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xfd}}, @TCA_RATE={0x6, 0x5, {0x4c}}, @TCA_RATE={0x6, 0x5, {0x0, 0xa6}}, @TCA_RATE={0x6, 0x5, {0x2c, 0xe}}, @qdisc_kind_options=@q_gred={{0x9}, {0x150, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "cfaaf28b8b11813a8305ffe32486dceda1b33022ebddcdd98bfe3daec97ddc9b444bbdc87e32c47db16b00e43817d7b6fb136ecfcb291ced352b9e946c56eaeb9657620a0b22d122a68e5934fda9ce90e6796eee54accff426c96e0fe3dde019ff689f096ae8801a48efe2b485be132480e088ac07f7cbc53049cde329b90f26d9d45f4eb63d111c3297ed7f2fd93e755ec9dd8b400b4e7f76e2fc838a6b8ef34b2247c9948e3e6d16dd7659f697d9bd4f0a6068dda832196bc60498baa5748483d1cb9d984f04c817c82838db36cae5f7e1fb56f21a3a6a96c5e178907265eb6490c7a1269d82a29c0f969fb27b4cef92cbced7a8a26684e9de46dce8b62753"}, @TCA_GRED_LIMIT={0x8, 0x5, 0x7}, @TCA_GRED_MAX_P={0x8, 0x4, 0x4}, @TCA_GRED_PARMS={0x38, 0x1, {0x653a, 0x3, 0x8000, 0x3, 0x80000000, 0x8, 0xffffffff, 0x2, 0xfffffffa, 0x5, 0x7, 0x10, 0x0, 0x4, 0x4, 0x1}}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf07, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x7fffffff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8881}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000006ac0)=[{{&(0x7f00000034c0)={0xa, 0x4e22, 0x7, @loopback, 0xe}, 0x1c, 0x0, 0x0, &(0x7f0000003900)=[@rthdrdstopts={{0x18}}, @dstopts={{0x18, 0x29, 0x37, {0x950e04620a2148d0}}}], 0x30}}], 0x1, 0x20000020) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="02010000080000000000000000000000030005000000000002000000ac1414000000000000040000030006000000000002"], 0x40}}, 0x0) sendmsg$key(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x48c0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000019000000008020000000040005000000009b0610a33e8525cafd00000000000000"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f0000000040)={0x0, 0xe}, &(0x7f0000000080)=0x8) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000850600000000000000000000000076703cac5349d207b6005f4ea3d069844e5a56438b749d11331cb7dffd66d3d19b1d206eb262b1097e83667a1101ff17578c933cc050cfe85c13d4675dca556c7fce99b063", @ANYRES32=r10, @ANYRESDEC=r10], 0x3c}}, 0x0) r11 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r12, &(0x7f0000000100)={0x20000000}) shutdown(r12, 0x0) epoll_wait(r11, &(0x7f0000000280)=[{}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_MOD(r11, 0x3, r12, &(0x7f0000000140)={0x2000200b}) kernel console output (not intermixed with test programs): 1949] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 646.814821][ T1947] batadv_slave_0: Caught tx_queue_len zero misconfig [ 647.059204][ T1965] syzkaller0: entered promiscuous mode [ 647.075662][ T1965] syzkaller0: entered allmulticast mode [ 647.377078][T21949] veth9: left promiscuous mode [ 647.424778][ T1999] netlink: 'syz.2.8316': attribute type 1 has an invalid length. [ 647.464853][ T2002] sctp: [Deprecated]: syz.0.8318 (pid 2002) Use of int in maxseg socket option. [ 647.464853][ T2002] Use struct sctp_assoc_value instead [ 647.535169][ T2004] bond5: (slave veth5): Enslaving as an active interface with a down link [ 647.550925][ T2002] Unsupported ieee802154 address type: 0 [ 647.566857][ T1999] 8021q: adding VLAN 0 to HW filter on device bond5 [ 647.577909][ T1999] netlink: 'syz.2.8316': attribute type 10 has an invalid length. [ 647.588710][ T1999] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.598315][ T1999] bond0: (slave team0): Enslaving as an active interface with an up link [ 647.682462][ T2014] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.8323'. [ 647.870883][ T2021] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 647.889252][ T2021] bond9 (unregistering): Released all slaves [ 647.916281][T21950] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 647.933624][ T2034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8327'. [ 647.949907][ T2034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8327'. [ 648.031606][ T2039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8330'. [ 648.042883][ T2038] netlink: 'syz.3.8331': attribute type 1 has an invalid length. [ 648.127526][ T2038] 8021q: adding VLAN 0 to HW filter on device bond2 [ 648.186095][ T2056] netlink: 'syz.0.8334': attribute type 83 has an invalid length. [ 648.358130][ T2049] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 648.394180][ T2057] bridge0: port 1(ipvlan0) entered blocking state [ 648.401936][ T2057] bridge0: port 1(ipvlan0) entered disabled state [ 648.409510][ T2057] ipvlan0: entered allmulticast mode [ 648.415035][ T2057] bridge0: entered allmulticast mode [ 648.423930][ T2057] ipvlan0: left allmulticast mode [ 648.429679][ T2057] bridge0: left allmulticast mode [ 648.544212][ T2070] openvswitch: netlink: Missing key (keys=40, expected=100) [ 648.661318][ T2083] netlink: 'syz.4.8344': attribute type 4 has an invalid length. [ 648.676525][ T2083] netlink: 'syz.4.8344': attribute type 4 has an invalid length. [ 648.833297][ T2089] syzkaller0: entered promiscuous mode [ 648.848259][ T2089] syzkaller0: entered allmulticast mode [ 648.854259][ T2094] netlink: 'syz.2.8346': attribute type 1 has an invalid length. [ 648.933606][ T2091] openvswitch: netlink: Multiple metadata blocks provided [ 649.018640][ T3370] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 649.384693][ T2135] openvswitch: netlink: IPv4 tun info is not correct [ 649.541423][ T2150] netlink: 'syz.0.8364': attribute type 1 has an invalid length. [ 649.569049][T21949] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 649.585162][ T2150] 8021q: adding VLAN 0 to HW filter on device bond9 [ 649.607301][ T2154] veth0: entered promiscuous mode [ 649.621368][ T2152] veth0: left promiscuous mode [ 649.744481][ T2161] netlink: 'syz.2.8367': attribute type 10 has an invalid length. [ 649.746658][ C1] vcan0: j1939_tp_rxtimer: 0xffff888034ca3400: rx timeout, send abort [ 649.775296][ T2162] team0: entered allmulticast mode [ 649.800600][ T2162] dummy0: entered allmulticast mode [ 649.824546][ T2162] bond0: (slave team0): Releasing backup interface [ 649.851357][ T2162] bridge0: port 1(team0) entered blocking state [ 649.860136][ T2162] bridge0: port 1(team0) entered disabled state [ 649.869797][ T2162] team0: entered promiscuous mode [ 649.874964][ T2162] dummy0: entered promiscuous mode [ 650.059493][ T2188] team0: left promiscuous mode [ 650.077131][ T2188] dummy0: left promiscuous mode [ 650.092639][ T2188] bridge0: port 1(team0) entered disabled state [ 650.146452][ T3370] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 650.162973][ T2188] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.193241][ T2196] openvswitch: netlink: IP tunnel dst address not specified [ 650.203106][ T2188] bond0: (slave team0): Enslaving as an active interface with an up link [ 650.260733][ C1] vcan0: j1939_tp_rxtimer: 0xffff888034ca3400: abort rx timeout. Force session deactivation [ 650.682409][ T2234] pim6reg1: entered promiscuous mode [ 650.693926][ T2234] pim6reg1: entered allmulticast mode [ 651.128430][ T2255] veth1_to_bond: Caught tx_queue_len zero misconfig [ 651.259298][T21949] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 651.316950][ T2263] dvmrp0: entered allmulticast mode [ 651.455086][ T2276] __nla_validate_parse: 16 callbacks suppressed [ 651.455109][ T2276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8401'. [ 651.550986][ T2281] openvswitch: netlink: Duplicate key (type 2). [ 651.568904][ T2280] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.8405'. [ 651.635076][ T2285] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8406'. [ 651.678498][ T2285] netlink: 196 bytes leftover after parsing attributes in process `syz.3.8406'. [ 651.750780][ T2294] nbd: couldn't find device at index 2958377 [ 651.975281][ T2310] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8414'. [ 652.050237][ T2316] validate_nla: 3 callbacks suppressed [ 652.050257][ T2316] netlink: 'syz.4.8417': attribute type 1 has an invalid length. [ 652.078230][ T2318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8418'. [ 652.093990][ T2319] netlink: 'syz.1.8416': attribute type 3 has an invalid length. [ 652.103937][ T2318] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8418'. [ 652.119353][ T2318] netlink: 165 bytes leftover after parsing attributes in process `syz.2.8418'. [ 652.269162][ T2330] tap0: tun_chr_ioctl cmd 1074025673 [ 652.304851][ T2332] tap0: tun_chr_ioctl cmd 1074025672 [ 652.310915][ T2332] tap0: ignored: set checksum disabled [ 652.342232][ T2337] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8423'. [ 652.367660][T21949] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 652.418951][ T2339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8425'. [ 652.639164][ T2356] netlink: 'syz.0.8430': attribute type 2 has an invalid length. [ 652.931805][ T2378] netlink: 'syz.0.8437': attribute type 10 has an invalid length. [ 652.970180][ T2378] netlink: 'syz.0.8437': attribute type 10 has an invalid length. [ 652.994948][ T2382] netlink: 'syz.2.8439': attribute type 2 has an invalid length. [ 653.092916][ T2390] netlink: 'syz.0.8441': attribute type 1 has an invalid length. [ 653.134926][ T2395] team0: entered promiscuous mode [ 653.142835][ T2395] team0: left promiscuous mode [ 653.165309][ T2390] macvlan4: entered promiscuous mode [ 653.172503][ T2390] macvlan4: entered allmulticast mode [ 653.179909][ T2390] bond10: entered promiscuous mode [ 653.186416][ T2390] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 653.195665][ T2390] bond10: left promiscuous mode [ 653.267578][ T2401] netlink: 'syz.3.8444': attribute type 49 has an invalid length. [ 653.387255][ T2407] syzkaller1: entered promiscuous mode [ 653.393892][ T2407] syzkaller1: entered allmulticast mode [ 653.475794][T29227] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 653.891686][ T2458] netlink: 'syz.2.8458': attribute type 10 has an invalid length. [ 653.979845][ T2463] bond9: option packets_per_slave: invalid value (18446744073709551615) [ 654.031098][ T2463] bond9: option packets_per_slave: allowed values 0 - 65535 [ 654.048301][ T2463] bond9 (unregistering): Released all slaves [ 654.159387][ T2479] veth0_macvtap: Caught tx_queue_len zero misconfig [ 654.437534][ T2511] nbd2: detected capacity change from 63 to 0 [ 654.464125][ T2511] block nbd2: reconnected socket [ 654.488615][ T2511] block nbd2: reconnected socket [ 654.519764][ T50] block nbd2: Receive control failed (result -32) [ 654.535766][ T5635] block nbd2: Receive control failed (result -32) [ 654.585912][T29227] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 654.621706][ T2535] netlink: 'syz.3.8476': attribute type 1 has an invalid length. [ 654.640029][ T3370] pim6reg: left allmulticast mode [ 655.051417][ T3370] bond5 (unregistering): (slave bridge10): Releasing active interface [ 655.097150][ T3370]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.117186][ T3370]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.130793][ T3370]  (unregistering): Released all slaves [ 655.147201][ T3370] bond1 (unregistering): Released all slaves [ 655.160553][ T3370] bond2 (unregistering): Released all slaves [ 655.173951][ T3370] bond3 (unregistering): Released all slaves [ 655.200451][ T3370] bond4 (unregistering): Released all slaves [ 655.214238][ T3370] bond0 (unregistering): Released all slaves [ 655.228383][ T3370] bond5 (unregistering): Released all slaves [ 655.332753][ T2540] ip6gretap0: entered promiscuous mode [ 655.358318][ T2540] ip6gretap0: entered allmulticast mode [ 655.391741][ T2540] bond3: (slave ip6gretap0): making interface the new active one [ 655.424964][ T2540] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 655.439559][ T2540] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 655.448672][ T2540] bond3: (slave ip6gretap0): Enslaving as an active interface with an up link [ 655.492559][ T3370] : left promiscuous mode [ 655.710958][T29227] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 656.280877][ T2648] SET target dimension over the limit! [ 656.405089][ T2643] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 656.413960][ T2643] bond4: option packets_per_slave: allowed values 0 - 65535 [ 656.425311][ T2643] bond4 (unregistering): Released all slaves [ 656.528370][ T2666] bond13: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 656.552618][ T2666] bond13 (unregistering): Released all slaves [ 656.781162][ T3370] hsr_slave_0: left promiscuous mode [ 656.807300][ T3370] hsr_slave_1: left promiscuous mode [ 656.818180][ T3370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.848779][ T3370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.884108][ T3370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.897992][T29231] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 656.911600][ T3370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.944513][ T3370] veth0_to_team: left promiscuous mode [ 656.959745][ T3370] veth0_macvtap: left promiscuous mode [ 656.974942][ T3370] veth1_vlan: left promiscuous mode [ 657.000069][ T3370] veth0_vlan: left promiscuous mode [ 657.245960][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 657.407853][ T3370] team0 (unregistering): Port device team_slave_1 removed [ 657.421768][ T3370] team0 (unregistering): Port device team_slave_0 removed [ 657.534011][ T2700] bridge5: entered promiscuous mode [ 657.540581][ T2700] bridge5: entered allmulticast mode [ 657.562912][ T2696] __nla_validate_parse: 15 callbacks suppressed [ 657.562934][ T2696] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8500'. [ 657.581970][ T2696] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8500'. [ 657.608460][ T2696] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8500'. [ 657.723464][ T2746] validate_nla: 1 callbacks suppressed [ 657.723486][ T2746] netlink: 'syz.0.8503': attribute type 1 has an invalid length. [ 657.862993][ T2759] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 657.926486][ T2761] macvtap1: entered allmulticast mode [ 658.026782][T29231] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 658.091549][ T2763] macvtap2: entered allmulticast mode [ 658.119481][ T2772] syzkaller0: entered promiscuous mode [ 658.139172][ T2779] Bluetooth: MGMT ver 1.23 [ 658.149621][ T2772] syzkaller0: entered allmulticast mode [ 658.160557][ T3370] IPVS: stop unused estimator thread 0... [ 658.167226][ T2779] lo speed is unknown, defaulting to 1000 [ 658.183750][ T2779] lo speed is unknown, defaulting to 1000 [ 658.202700][ T2779] lo speed is unknown, defaulting to 1000 [ 658.219090][ T2779] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 658.262186][ T2779] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 658.285374][ T2779] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 658.337618][ T2794] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 658.352825][ T2779] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 658.362148][ T2792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8513'. [ 658.383950][ T2795] netlink: 'syz.3.8514': attribute type 12 has an invalid length. [ 658.437484][ T2779] lo speed is unknown, defaulting to 1000 [ 658.468072][ T2779] lo speed is unknown, defaulting to 1000 [ 658.512974][ T2779] lo speed is unknown, defaulting to 1000 [ 658.558158][ T2779] lo speed is unknown, defaulting to 1000 [ 658.587993][ T2779] lo speed is unknown, defaulting to 1000 [ 658.594798][ T2779] lo speed is unknown, defaulting to 1000 [ 658.608082][ T2779] lo speed is unknown, defaulting to 1000 [ 658.615002][ T2779] lo speed is unknown, defaulting to 1000 [ 658.629403][ T2779] lo speed is unknown, defaulting to 1000 [ 658.658211][ T2779] lo speed is unknown, defaulting to 1000 [ 658.665207][ T2779] lo speed is unknown, defaulting to 1000 [ 658.696894][ T2779] lo speed is unknown, defaulting to 1000 [ 658.706180][ T2823] netlink: 'syz.0.8519': attribute type 1 has an invalid length. [ 658.847021][ T2824] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 658.884740][ T2849] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 658.900567][ T2849] IPv6: NLM_F_CREATE should be set when creating new route [ 658.907882][ T2849] IPv6: NLM_F_CREATE should be set when creating new route [ 659.022752][ T2870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8527'. [ 659.077191][ T2870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8527'. [ 659.147871][T29231] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 659.198651][ T2880] veth0_to_bond: entered allmulticast mode [ 659.250435][ T2880] netlink: 'syz.3.8529': attribute type 1 has an invalid length. [ 659.357161][T29230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.381860][T29230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.578166][ T2912] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.8537'. [ 659.611594][ T2912] openvswitch: netlink: Missing key (keys=40, expected=100) [ 659.639813][ T2914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8535'. [ 659.671251][ T2914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8535'. [ 659.798173][ T2929] bridge14: entered promiscuous mode [ 659.832342][ T2929] bridge14: entered allmulticast mode [ 659.895137][ T2933] netlink: 'syz.2.8540': attribute type 1 has an invalid length. [ 660.104065][ T2956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8545'. [ 660.120812][ T2960] netlink: 'syz.2.8546': attribute type 9 has an invalid length. [ 660.276182][T29230] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 660.345734][ T2966] nbd12: detected capacity change from 0 to 63 [ 660.360229][ T5635] block nbd12: Receive control failed (result -32) [ 660.361475][ T50] block nbd12: Receive control failed (result -32) [ 660.376405][T28421] block nbd12: Dead connection, failed to find a fallback [ 660.383733][T28421] block nbd12: shutting down sockets [ 660.390329][T28421] blk_print_req_error: 286 callbacks suppressed [ 660.390347][T28421] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 660.407018][T28421] buffer_io_error: 286 callbacks suppressed [ 660.407036][T28421] Buffer I/O error on dev nbd12, logical block 0, async page read [ 660.430551][T28421] I/O error, dev nbd12, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 660.444900][T28421] Buffer I/O error on dev nbd12, logical block 1, async page read [ 660.483566][T28421] I/O error, dev nbd12, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 660.529994][T28421] Buffer I/O error on dev nbd12, logical block 2, async page read [ 660.563835][T28421] I/O error, dev nbd12, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 660.592788][T28421] Buffer I/O error on dev nbd12, logical block 3, async page read [ 660.626109][T28421] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 660.650582][ T3000] lo: Caught tx_queue_len zero misconfig [ 660.666405][T28421] Buffer I/O error on dev nbd12, logical block 0, async page read [ 660.696416][T28421] I/O error, dev nbd12, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 660.720117][T28421] Buffer I/O error on dev nbd12, logical block 1, async page read [ 660.741815][T28421] I/O error, dev nbd12, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 660.753739][ T3009] veth0: entered promiscuous mode [ 660.777655][ T3009] openvswitch: netlink: Multiple metadata blocks provided [ 660.786980][T28421] Buffer I/O error on dev nbd12, logical block 2, async page read [ 660.815262][T28421] I/O error, dev nbd12, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 660.852373][T28421] Buffer I/O error on dev nbd12, logical block 3, async page read [ 660.898090][ T3009] veth0: left promiscuous mode [ 660.901599][T28421] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 660.914392][ T3021] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:20003 [ 660.949697][T28421] Buffer I/O error on dev nbd12, logical block 0, async page read [ 660.998937][T28421] I/O error, dev nbd12, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 661.031219][T28421] Buffer I/O error on dev nbd12, logical block 1, async page read [ 661.068912][T28421] ldm_validate_partition_table(): Disk read failed. [ 661.108729][T28421] Dev nbd12: unable to read RDB block 0 [ 661.147938][T28421] nbd12: unable to read partition table [ 661.198059][T28421] ldm_validate_partition_table(): Disk read failed. [ 661.231890][T28421] Dev nbd12: unable to read RDB block 0 [ 661.281546][T28421] nbd12: unable to read partition table [ 661.364496][ T3049] veth0_to_team: entered promiscuous mode [ 661.387727][ T3049] erspan0: entered promiscuous mode [ 661.407680][T21951] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 661.428496][ T3049] debugfs: 'hsr1' already exists in 'hsr' [ 661.438469][ T3049] Cannot create hsr debugfs directory [ 661.811292][ T3091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 662.429052][ T3143] syzkaller0: entered promiscuous mode [ 662.435740][ T3143] syzkaller0: entered allmulticast mode [ 662.537808][T29231] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 662.783256][ T3159] bridge12: the hash_elasticity option has been deprecated and is always 16 [ 662.815893][ T3156] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 662.833002][ T3165] __nla_validate_parse: 13 callbacks suppressed [ 662.833029][ T3165] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8600'. [ 662.895116][ T3165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8600'. [ 663.041490][ T3176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8603'. [ 663.077104][ T3176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8603'. [ 663.187134][ T3184] netlink: 'syz.4.8604': attribute type 21 has an invalid length. [ 663.233415][ T3190] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8606'. [ 663.262458][ T3185] netlink: 'syz.4.8604': attribute type 21 has an invalid length. [ 663.294928][ T3187] openvswitch: netlink: EtherType 50a is less than min 600 [ 663.428681][ T3201] netlink: 'syz.0.8607': attribute type 1 has an invalid length. [ 663.446082][ T3200] netlink: 'syz.0.8607': attribute type 1 has an invalid length. [ 663.458679][ T3200] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8607'. [ 663.468953][ T3202] netlink: 'syz.4.8608': attribute type 2 has an invalid length. [ 663.473939][ T3201] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8607'. [ 663.618669][ T3210] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8610'. [ 663.685826][T21949] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 663.738424][ T3228] lo: entered promiscuous mode [ 663.762614][ T3228] tunl0: entered promiscuous mode [ 663.788569][ T3228] gre0: entered promiscuous mode [ 663.855248][ T3238] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8612'. [ 663.880495][ T3228] gretap0: entered promiscuous mode [ 663.952180][ T3242] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.8616'. [ 664.008162][ T3228] erspan0: entered promiscuous mode [ 664.027171][ T3228] ip_vti0: entered promiscuous mode [ 664.129564][ T3218] bridge0: left promiscuous mode [ 664.174684][ T3246] xt_hashlimit: size too large, truncated to 1048576 [ 664.356749][ T3218] ipvlan0: left promiscuous mode [ 664.377245][ T3218] macsec0: left promiscuous mode [ 664.391498][ T3218] bridge1: left promiscuous mode [ 664.432161][ T3218] xfrm1: left promiscuous mode [ 664.548565][ T3218] 8021q: adding VLAN 0 to HW filter on device bond11 [ 664.559445][ T3218] veth0_to_team: entered promiscuous mode [ 664.568860][ T3218] 8021q: adding VLAN 0 to HW filter on device bond12 [ 664.594133][T30711] lo speed is unknown, defaulting to 1000 [ 664.703132][ T3254] mac80211_hwsim hwsim85 syzkaller0: left promiscuous mode [ 664.713976][ T3254] mac80211_hwsim hwsim85 syzkaller0: left allmulticast mode [ 664.723678][ T3254] tipc: Resetting bearer [ 664.830747][ T3264] netlink: 'syz.4.8620': attribute type 1 has an invalid length. [ 664.865858][T21949] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 665.355214][ T3291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 665.987144][T29227] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 666.059405][ T3350] x_tables: duplicate underflow at hook 2 [ 666.253719][ T3359] can: request_module (can-proto-0) failed. [ 666.284113][ T3364] bridge_slave_0: left allmulticast mode [ 666.323684][ T3364] bridge_slave_0: left promiscuous mode [ 666.356934][ T3364] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.384322][ T3364] bond8: (slave veth0_to_bond): Releasing active interface [ 666.412589][ T3364] bond0: (slave bond_slave_0): Releasing backup interface [ 666.431236][ T3364] bond_slave_0: left allmulticast mode [ 666.473737][ T3364] bond0: (slave bond_slave_1): Releasing backup interface [ 666.513584][ T3364] bond_slave_1: left allmulticast mode [ 666.571606][ T3364] team0: Port device team_slave_0 removed [ 666.651073][ T3364] team0: Port device team_slave_1 removed [ 666.680151][ T3364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.694567][ T3364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.720028][ T3364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.728182][ T3364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.741081][ T3364] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 666.774933][ T3368] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac14:14aa [ 666.799969][ T3373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.117094][T21951] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 667.187182][ T3412] netlink: 'syz.0.8661': attribute type 12 has an invalid length. [ 667.198511][ T3412] netlink: 'syz.0.8661': attribute type 11 has an invalid length. [ 667.302273][ T3414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.333449][ T3418] IPv6: sit2: Disabled Multicast RS [ 667.508676][ T3424] veth1_to_team: entered promiscuous mode [ 667.541675][ T3424] gretap0: entered promiscuous mode [ 667.559714][ T3424] debugfs: 'hsr1' already exists in 'hsr' [ 667.567806][ T3424] Cannot create hsr debugfs directory [ 667.585367][ T3424] hsr1: entered promiscuous mode [ 667.720158][ T3447] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 667.825818][ T3453] IPv6: NLM_F_REPLACE set, but no existing node found! [ 667.933675][ T3462] netlink: 'syz.4.8670': attribute type 32 has an invalid length. [ 667.952541][ T3462] __nla_validate_parse: 11 callbacks suppressed [ 667.952562][ T3462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8670'. [ 667.988240][ T3462] bond13: option coupled_control: invalid value (14) [ 667.998550][ T3462] bond13 (unregistering): Released all slaves [ 668.245672][T21949] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 668.287047][ T3488] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8683'. [ 668.522239][ T3499] xt_TCPMSS: Only works on TCP SYN packets [ 668.602201][ T3502] netlink: 'syz.0.8688': attribute type 8 has an invalid length. [ 668.611241][ T3503] netlink: 'syz.2.8689': attribute type 6 has an invalid length. [ 668.730875][ T3510] netlink: 'syz.0.8692': attribute type 1 has an invalid length. [ 668.748910][ T3510] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8692'. [ 668.881201][ T3521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8695'. [ 668.938248][ T3527] netlink: 'syz.4.8697': attribute type 39 has an invalid length. [ 668.948676][ T3528] netlink: 'syz.4.8697': attribute type 39 has an invalid length. [ 669.072278][ T3536] openvswitch: netlink: Unknown key attributes 2 [ 669.092181][ T3539] nbd: couldn't find a device at index 1048580 [ 669.220973][ T3551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8703'. [ 669.339644][ T3551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8703'. [ 669.362072][T21951] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 669.391951][ T3553] bond13 (unregistering): Released all slaves [ 669.535090][ T3568] netlink: 'syz.3.8709': attribute type 1 has an invalid length. [ 669.640144][ T3574] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 669.650105][ T3574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8710'. [ 669.668007][ T3575] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 669.702036][ T3568] veth5: entered promiscuous mode [ 669.731149][ T3586] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8710'. [ 669.744210][ T3568] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 669.755265][ T3575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8709'. [ 669.793295][ T3579] syzkaller0: entered promiscuous mode [ 669.813098][ T3579] syzkaller0: entered allmulticast mode [ 670.003840][ T3606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8717'. [ 670.058701][ T3603] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 670.201929][ T3619] netlink: 'syz.3.8722': attribute type 29 has an invalid length. [ 670.477132][T12133] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 670.500529][ T3636] can: request_module (can-proto-0) failed. [ 670.530400][ T3636] dummy0: left promiscuous mode [ 670.809357][ T3652] nbd: nbd0 already in use [ 670.863561][ T3664] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 670.944115][ T3666] syzkaller0: entered promiscuous mode [ 670.961981][ T3666] syzkaller0: entered allmulticast mode [ 671.008765][ T3670] netlink: 'syz.0.8737': attribute type 28 has an invalid length. [ 671.032735][ T3670] netlink: 'syz.0.8737': attribute type 3 has an invalid length. [ 671.270667][ T3679] tcf_pedit_act: 22 callbacks suppressed [ 671.270689][ T3679] tc action pedit offset must be on 32 bit boundaries [ 671.283304][ T3679] tc action pedit offset must be on 32 bit boundaries [ 671.290148][ T3679] tc action pedit offset must be on 32 bit boundaries [ 671.297001][ T3679] tc action pedit offset must be on 32 bit boundaries [ 671.303824][ T3679] tc action pedit offset must be on 32 bit boundaries [ 671.310686][ T3679] tc action pedit offset must be on 32 bit boundaries [ 671.317532][ T3679] tc action pedit offset must be on 32 bit boundaries [ 671.324333][ T3679] tc action pedit offset must be on 32 bit boundaries [ 671.331205][ T3679] tc action pedit offset must be on 32 bit boundaries [ 671.338075][ T3679] tc action pedit offset must be on 32 bit boundaries [ 671.344894][ T3679] TC_ACT_REPEAT abuse ? [ 671.605778][T29230] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 671.777606][ T3706] syzkaller0: entered promiscuous mode [ 671.785883][ T3706] syzkaller0: entered allmulticast mode [ 671.884394][ T3708] netlink: 'syz.4.8751': attribute type 5 has an invalid length. [ 671.915169][ T3714] syzkaller0: entered promiscuous mode [ 671.932549][ T3714] syzkaller0: entered allmulticast mode [ 672.642823][ T3758] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 672.714241][ T3761] syzkaller0: entered promiscuous mode [ 672.722017][ T3761] syzkaller0: entered allmulticast mode [ 672.746910][T12133] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 673.042449][ T3781] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 673.070356][ T3781] team0: Failed to send port change of device batadv2 via netlink (err -105) [ 673.123181][ T3781] team0: Failed to send options change via netlink (err -105) [ 673.146010][ T3781] team0: Port device batadv2 added [ 673.243186][ T3787] syzkaller1: entered promiscuous mode [ 673.287098][ T3787] syzkaller1: entered allmulticast mode [ 673.345324][ T3802] __nla_validate_parse: 22 callbacks suppressed [ 673.345349][ T3802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8780'. [ 673.520859][ T3813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8784'. [ 673.550362][ T3813] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8784'. [ 673.591233][ T3828] syzkaller0: entered promiscuous mode [ 673.611555][ T3828] syzkaller0: entered allmulticast mode [ 673.661935][ T3830] bond13: entered promiscuous mode [ 673.668098][ T3830] bond13: entered allmulticast mode [ 673.674056][ T3830] 8021q: adding VLAN 0 to HW filter on device bond13 [ 673.698957][ T3830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8789'. [ 673.750486][ T3843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8789'. [ 673.820031][ T3847] netlink: 112 bytes leftover after parsing attributes in process `syz.1.8787'. [ 673.872160][ T3826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8787'. [ 673.892587][T29227] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 673.926713][ T3850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8792'. [ 673.942891][ T3842] mac80211_hwsim hwsim85 syzkaller0: entered promiscuous mode [ 673.954079][ T3842] mac80211_hwsim hwsim85 syzkaller0: entered allmulticast mode [ 673.963693][ T3842] tipc: Resetting bearer [ 673.978201][ T3842] netlink: 1028 bytes leftover after parsing attributes in process `syz.0.8791'. [ 674.007135][ T3850] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8792'. [ 674.024427][ T3850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 674.109330][ T3852] syzkaller0: entered promiscuous mode [ 674.134346][ T3852] syzkaller0: entered allmulticast mode [ 674.216925][ T3858] validate_nla: 1 callbacks suppressed [ 674.216947][ T3858] netlink: 'syz.0.8795': attribute type 1 has an invalid length. [ 674.329865][ T3858] bond13: entered promiscuous mode [ 674.335834][ T3858] 8021q: adding VLAN 0 to HW filter on device bond13 [ 674.348673][ T3860] veth1_to_batadv: mtu less than device minimum [ 674.466192][ T3858] bond13: (slave bridge9): making interface the new active one [ 674.474035][ T3858] bridge9: entered promiscuous mode [ 674.487176][ T3858] bond13: (slave bridge9): Enslaving as an active interface with an up link [ 674.969680][ T3884] tunl0: left promiscuous mode [ 675.007012][T21950] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 675.024178][ T3884] erspan0: left allmulticast mode [ 675.285109][ T3884] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.381316][ T3930] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 675.465007][ T3884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 675.480077][ T3884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 675.536217][ T3884] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 675.608578][ T3884] bridge8: left promiscuous mode [ 675.613849][ T3884] bridge8: left allmulticast mode [ 675.628789][ T3884] gtp0: left allmulticast mode [ 675.634895][ T3884] bond8: left promiscuous mode [ 675.640500][ T3884] bridge10: left promiscuous mode [ 675.647780][ T3884] bond8: left allmulticast mode [ 675.652805][ T3884] bridge10: left allmulticast mode [ 675.662239][ T3884] vlan0: left allmulticast mode [ 675.667566][ T3884] bond0: left allmulticast mode [ 675.699448][T21949] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.737213][T21949] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.779037][T21949] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 675.831419][T21949] netdevsim netdevsim1 netdevsim0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 675.847254][T21949] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.877208][T21949] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.899325][T21949] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 675.910397][T21949] netdevsim netdevsim1 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 675.921601][T21949] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.933271][T21949] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.945263][T21949] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 675.973481][T21949] netdevsim netdevsim1 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 675.992627][T21949] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 676.013856][T21949] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.034298][T21949] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 676.060737][T21949] netdevsim netdevsim1 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 676.130349][ T3954] netlink: 'syz.1.8822': attribute type 1 has an invalid length. [ 676.152256][ T3954] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 676.167204][T29233] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 676.302784][ T3970] netlink: 'syz.1.8825': attribute type 1 has an invalid length. [ 676.694205][ T3997] netlink: 'syz.3.8835': attribute type 33 has an invalid length. [ 676.728413][ T3997] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 676.742560][ T3997] bond5 (unregistering): Released all slaves [ 676.822754][ T3995] can: request_module (can-proto-0) failed. [ 677.121627][ T4018] netlink: 'syz.4.8841': attribute type 1 has an invalid length. [ 677.224763][ T4032] netlink: 'syz.3.8844': attribute type 16 has an invalid length. [ 677.286185][T29231] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 677.305090][ T4038] netlink: 'syz.1.8847': attribute type 1 has an invalid length. [ 677.314593][ T4018] 8021q: adding VLAN 0 to HW filter on device bond14 [ 677.344497][ T4031] tunl0: entered promiscuous mode [ 677.359706][ T4031] netlink: 'syz.2.8843': attribute type 4 has an invalid length. [ 677.397629][ T4032] veth0_macvtap: entered allmulticast mode [ 678.280253][ T4105] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 678.402230][ T4111] "syz.1.8871" (4111) uses obsolete ecb(arc4) skcipher [ 678.416187][T21951] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 678.427460][ T4110] __nla_validate_parse: 26 callbacks suppressed [ 678.427480][ T4110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8870'. [ 678.670122][ T4133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8877'. [ 678.764822][ T4133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8877'. [ 679.050968][ T29] audit: type=1804 audit(1781844058.125:24): pid=4179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.8885" name="/newroot/598/cgroup.controllers" dev="tmpfs" ino=3062 res=1 errno=0 [ 679.093172][ T4181] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8881'. [ 679.099291][ T29] audit: type=1800 audit(1781844058.125:25): pid=4179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8885" name="cgroup.controllers" dev="tmpfs" ino=3062 res=0 errno=0 [ 679.143754][ T4180] vlan4: entered promiscuous mode [ 679.199326][ T4179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8885'. [ 679.217859][ T4179] netlink: 'syz.2.8885': attribute type 3 has an invalid length. [ 679.233045][ T4179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8885'. [ 679.242795][ T4179] netlink: 'syz.2.8885': attribute type 3 has an invalid length. [ 679.383617][ T4191] bond10: entered promiscuous mode [ 679.466677][ T4201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8889'. [ 679.477876][ T4205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8891'. [ 679.500772][ T4205] syzkaller0: entered promiscuous mode [ 679.509365][ T4205] syzkaller0: entered allmulticast mode [ 679.527907][ T4201] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8889'. [ 679.546372][T21951] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 679.560851][ T4201] netlink: 204 bytes leftover after parsing attributes in process `syz.2.8889'. [ 679.771121][ T4219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 679.924415][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 679.932978][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 679.943874][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 679.959789][ T5635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 679.973883][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 680.478324][ T4253] veth1_macvtap: left promiscuous mode [ 680.491632][ T4253] macsec0: entered promiscuous mode [ 680.502495][ T4253] macsec0: entered allmulticast mode [ 680.655849][T12133] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 680.692277][ T4227] xfrm0 speed is unknown, defaulting to 1000 [ 680.699868][ T4271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 680.722259][ T4227] xfrm0 speed is unknown, defaulting to 1000 [ 680.750693][ T4227] lo speed is unknown, defaulting to 1000 [ 681.309689][ T4306] netlink: 'syz.0.8914': attribute type 3 has an invalid length. [ 681.309990][ T4295] vlan1: entered allmulticast mode [ 681.319602][ T4306] netlink: 'syz.0.8914': attribute type 3 has an invalid length. [ 681.324483][ T4295] bridge_slave_0: entered allmulticast mode [ 681.336405][ T4306] netlink: 'syz.0.8914': attribute type 3 has an invalid length. [ 681.355186][ T4227] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.364247][ T4306] netlink: 'syz.0.8914': attribute type 3 has an invalid length. [ 681.376529][ T4227] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.390725][ T4227] bridge_slave_0: entered allmulticast mode [ 681.398736][ T4227] bridge_slave_0: entered promiscuous mode [ 681.402326][ T4306] netlink: 'syz.0.8914': attribute type 3 has an invalid length. [ 681.439275][ T4306] netlink: 'syz.0.8914': attribute type 3 has an invalid length. [ 681.447605][ T4306] netlink: 'syz.0.8914': attribute type 3 has an invalid length. [ 681.456372][ T4227] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.463737][ T4227] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.471653][ T4306] netlink: 'syz.0.8914': attribute type 3 has an invalid length. [ 681.480140][ T4227] bridge_slave_1: entered allmulticast mode [ 681.486979][ T4306] netlink: 'syz.0.8914': attribute type 3 has an invalid length. [ 681.497355][ T4227] bridge_slave_1: entered promiscuous mode [ 681.529631][ T4312] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 681.570018][ T4227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.611794][ T4227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.720791][ T4227] team0: Port device team_slave_0 added [ 681.751738][ T4227] team0: Port device team_slave_1 added [ 681.786608][T21951] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 681.881385][ T4227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.908142][ T4227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.951927][ T4227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.966959][ T4227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.974007][ T4227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.026100][ T4227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.047952][ T50] Bluetooth: hci0: command tx timeout [ 682.211787][ T4324] bond15: peer notification delay (25) is not a multiple of miimon (28933), value rounded to 0 ms [ 682.254009][ T4324] bond15: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 682.273665][ T4324] bond15 (unregistering): Released all slaves [ 682.297935][ T4342] xfrm1: entered promiscuous mode [ 682.303176][ T4342] xfrm1: entered allmulticast mode [ 682.600724][ T4227] hsr_slave_0: entered promiscuous mode [ 682.612397][ T4227] hsr_slave_1: entered promiscuous mode [ 682.621317][ T4227] debugfs: 'hsr0' already exists in 'hsr' [ 682.643995][ T4227] Cannot create hsr debugfs directory [ 682.930054][T21949] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 682.985015][ T4394] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 683.495095][ T4429] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 683.532976][ T4429] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 683.541968][ T4429] gretap3: entered promiscuous mode [ 683.550496][ T4429] gretap3: entered allmulticast mode [ 683.564552][ T4436] __nla_validate_parse: 84 callbacks suppressed [ 683.564573][ T4436] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8958'. [ 683.604041][ T4227] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 683.649967][ T4227] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 683.689612][ T4227] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 683.708645][ T4227] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 683.768142][ T4227] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 683.788466][ T4227] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 683.832867][ T4453] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 683.847418][ T4227] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 683.873919][ T4227] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 683.977787][ T4438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8959'. [ 684.037734][T21951] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 684.121624][ T4437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.137519][ T50] Bluetooth: hci0: command tx timeout [ 684.147110][ T4473] netlink: 51 bytes leftover after parsing attributes in process `syz.4.8966'. [ 684.155297][ T4227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.230647][ T4227] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.237938][ T4482] Bluetooth: MGMT ver 1.23 [ 684.257569][T29231] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.264758][T29231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.313628][T29231] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.320855][T29231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.512233][ T4491] syzkaller0: entered promiscuous mode [ 684.520275][ T4491] syzkaller0: entered allmulticast mode [ 684.876691][ T4509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8976'. [ 685.169563][T21949] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 685.406088][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 685.481346][ T4543] syzkaller0: entered promiscuous mode [ 685.491100][ T4543] syzkaller0: entered allmulticast mode [ 685.623232][ T4561] validate_nla: 59 callbacks suppressed [ 685.623256][ T4561] netlink: 'syz.4.8990': attribute type 12 has an invalid length. [ 685.767271][ T4561] bond16: option primary_reselect: invalid value (255) [ 685.791084][ T4561] bond16 (unregistering): Released all slaves [ 685.840914][ T4564] team0: Device is already in use. [ 685.951138][ T4227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.133498][ T4580] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8995'. [ 686.152677][ T4227] veth0_vlan: entered promiscuous mode [ 686.193896][ T4227] veth1_vlan: entered promiscuous mode [ 686.208037][ T50] Bluetooth: hci0: command tx timeout [ 686.297702][T29231] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 686.383271][ T4590] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 686.425689][ T4590] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 686.432861][ T4227] veth0_macvtap: entered promiscuous mode [ 686.461381][ T4590] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 686.489246][ T4227] veth1_macvtap: entered promiscuous mode [ 686.562986][ T4227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.617110][ T4227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.679739][T12133] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.707311][T12133] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.718075][T21950] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.769211][T21950] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.958827][T21950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.983121][T21950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.068659][T12133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.093697][T12133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.124260][ T4609] syzkaller0: entered promiscuous mode [ 687.142575][ T4609] syzkaller0: entered allmulticast mode [ 687.457049][T12133] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 687.491483][ T4621] bond1: Removing last ns target with arp_interval on [ 687.504766][ T4629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9005'. [ 687.556962][ T4619] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 687.744320][ T4624] syzkaller1: entered promiscuous mode [ 687.776167][ T4624] syzkaller1: entered allmulticast mode [ 688.227629][ T4653] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 688.289741][ T5635] Bluetooth: hci0: command tx timeout [ 688.295252][ T5635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 688.312360][ T5635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 688.321301][ T5635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 688.333848][ T5635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 688.342871][ T5635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 688.507913][ T4667] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.9014'. [ 688.566597][ T4667] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 688.636367][T21949] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 688.677929][ T4672] netlink: 'syz.0.9016': attribute type 1 has an invalid length. [ 688.717586][ T4672] netlink: 'syz.0.9016': attribute type 1 has an invalid length. [ 688.794200][T26317] bridge0: port 1(syz_tun) entered disabled state [ 688.851698][T26317] syz_tun (unregistering): left allmulticast mode [ 688.880808][T26317] syz_tun (unregistering): left promiscuous mode [ 688.900583][T26317] bridge0: port 1(syz_tun) entered disabled state [ 689.107652][ T4699] netlink: zone id is out of range [ 689.144270][ T4699] netlink: zone id is out of range [ 689.175279][ T4699] netlink: del zone limit has 4 unknown bytes [ 689.705243][ T4655] xfrm0 speed is unknown, defaulting to 1000 [ 689.730850][ T4731] netlink: 'syz.3.9028': attribute type 1 has an invalid length. [ 689.767714][ T4655] xfrm0 speed is unknown, defaulting to 1000 [ 689.775666][T12133] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 689.800286][ T4655] lo speed is unknown, defaulting to 1000 [ 689.800572][ T4731] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9028'. [ 690.446714][ T50] Bluetooth: hci2: command tx timeout [ 690.714555][ T4769] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9036'. [ 690.796371][ T4655] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.808804][ T4655] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.840164][ T4655] bridge_slave_0: entered allmulticast mode [ 690.865274][ T4655] bridge_slave_0: entered promiscuous mode [ 690.886190][ T4655] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.904184][ T4655] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.926202][T29227] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 690.940177][ T4655] bridge_slave_1: entered allmulticast mode [ 690.959098][ T4655] bridge_slave_1: entered promiscuous mode [ 691.062763][ T4655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.104639][ T4655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.181747][ T4655] team0: Port device team_slave_0 added [ 691.197572][ T4655] team0: Port device team_slave_1 added [ 691.274775][ T4655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.284290][ T4804] xt_CT: You must specify a L4 protocol and not use inversions on it [ 691.294914][ T4804] netlink: 11 bytes leftover after parsing attributes in process `syz.2.9043'. [ 691.307166][ T4805] netlink: 'syz.1.9042': attribute type 16 has an invalid length. [ 691.320900][ T4655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.349208][ T4655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.386875][ T4655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.402443][ T4655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.433285][ T4655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.454185][ T4801] xfrm0 speed is unknown, defaulting to 1000 [ 691.462469][ T4804] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9043'. [ 691.478820][ T4804] netlink: 6 bytes leftover after parsing attributes in process `syz.2.9043'. [ 691.503407][ T4801] xfrm0 speed is unknown, defaulting to 1000 [ 691.513073][ T4810] netlink: 'syz.3.9044': attribute type 4 has an invalid length. [ 691.523301][ T4801] lo speed is unknown, defaulting to 1000 [ 691.547670][ T4810] netlink: 'syz.3.9044': attribute type 4 has an invalid length. [ 691.649757][ T4655] hsr_slave_0: entered promiscuous mode [ 691.655683][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.703459][ T4655] hsr_slave_1: entered promiscuous mode [ 691.717037][ T4655] debugfs: 'hsr0' already exists in 'hsr' [ 691.735794][ T4655] Cannot create hsr debugfs directory [ 691.832920][ T4823] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9050'. [ 691.863791][ T4826] netlink: 'syz.0.9051': attribute type 1 has an invalid length. [ 691.875775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.885610][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.893974][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.902350][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.039439][T29233] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 692.243118][ T4655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 692.297995][ T4655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.316316][ T4655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 692.348783][ T4853] netlink: 'syz.2.9061': attribute type 10 has an invalid length. [ 692.384458][ T4853] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.428059][ T4853] bond0: (slave team0): Enslaving as an active interface with an up link [ 692.510610][ T4655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 692.530482][ T50] Bluetooth: hci2: command tx timeout [ 692.571108][ T4655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.585820][ T4655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 692.700040][ T4866] bond14 (unregistering): Released all slaves [ 692.738120][ T4878] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9069'. [ 692.751455][ T4881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9065'. [ 692.771841][ T4655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 692.796692][ T4655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.832529][ T4655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 692.891924][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9070'. [ 693.154661][ T4891] IPVS: Error connecting to the multicast addr [ 693.176713][T21950] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 693.382709][ T4901] netlink: 'syz.2.9073': attribute type 9 has an invalid length. [ 693.401821][ T4655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.422825][ T4898] netlink: 'syz.1.9075': attribute type 1 has an invalid length. [ 693.432076][ T4901] netlink: 'syz.2.9073': attribute type 6 has an invalid length. [ 693.440873][ T4655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.454416][ T4655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 693.459843][ T4898] netlink: 'syz.1.9075': attribute type 4 has an invalid length. [ 693.479626][ T4898] netlink: 9422 bytes leftover after parsing attributes in process `syz.1.9075'. [ 693.654847][ T4655] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 693.678795][ T4655] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 693.687701][ T4655] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 693.699529][ T4655] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 693.710818][ T4655] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 693.721315][ T4655] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 693.743706][ T4655] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 693.757079][ T4655] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 693.765075][ T4912] syzkaller1: entered promiscuous mode [ 693.773167][ T4912] syzkaller1: entered allmulticast mode [ 693.789140][ T4912] netlink: 'syz.2.9078': attribute type 1 has an invalid length. [ 693.811050][ T4922] net_ratelimit: 8 callbacks suppressed [ 693.811071][ T4922] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 693.887234][T30694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.915356][ T4655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.939117][ T4655] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.951870][T21950] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.959129][T21950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.980996][T12133] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.988223][T12133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.045910][T31026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.286721][T21949] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 694.605811][ T50] Bluetooth: hci2: command tx timeout [ 694.734992][ T4965] 8021q: adding VLAN 0 to HW filter on device bond5 [ 694.762149][ T4972] 8021q: adding VLAN 0 to HW filter on device bond11 [ 694.788006][ T4655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.940667][ T4972] __nla_validate_parse: 7 callbacks suppressed [ 694.940689][ T4972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9091'. [ 694.958485][ T4995] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9096'. [ 695.086478][T31026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.363793][ T5026] x_tables: duplicate underflow at hook 1 [ 695.408702][T21950] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 695.458726][ T5030] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.9103'. [ 695.499686][ T5030] netlink: 232 bytes leftover after parsing attributes in process `syz.2.9103'. [ 695.528323][ T4655] veth0_vlan: entered promiscuous mode [ 695.558045][ T4655] veth1_vlan: entered promiscuous mode [ 695.676570][ T4655] veth0_macvtap: entered promiscuous mode [ 695.711124][ T4655] veth1_macvtap: entered promiscuous mode [ 695.780319][ T4655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.818684][ T4655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.829484][ T5053] tipc: Enabling of bearer rejected, failed to enable media [ 695.848590][T29230] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.873336][T29230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.897226][T29230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.910126][ T5053] tipc: Enabling of bearer rejected, failed to enable media [ 695.930902][T29230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.058415][ T5064] x_tables: duplicate underflow at hook 2 [ 696.085740][T29227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.118550][T29227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.141772][T30702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.185359][ T5070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9113'. [ 696.233057][T29230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.253933][T29230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.292905][T29230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.303377][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.321426][T30702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.429881][ T5087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 696.442807][ T5081] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 696.465715][ T5088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9006'. [ 696.483215][ T5081] bond2: option packets_per_slave: allowed values 0 - 65535 [ 696.510158][ T5081] bond2 (unregistering): Released all slaves [ 696.519836][ T5091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9006'. [ 696.537059][T29231] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 696.552337][ T5089] validate_nla: 6 callbacks suppressed [ 696.552362][ T5089] netlink: 'syz.2.9118': attribute type 12 has an invalid length. [ 696.567097][ T5089] netlink: 'syz.2.9118': attribute type 29 has an invalid length. [ 696.575128][ T5089] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9118'. [ 696.588059][ T5089] netlink: 59 bytes leftover after parsing attributes in process `syz.2.9118'. [ 696.599381][ T5091] 8021q: VLANs not supported on gre0 [ 696.685719][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.696393][ T50] Bluetooth: hci2: command tx timeout [ 696.829830][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 696.838655][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 696.848001][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 696.868168][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 696.879454][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 697.163818][ T5119] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.9125'. [ 697.271723][ T5117] syzkaller0: entered promiscuous mode [ 697.285558][ T5117] syzkaller0: entered allmulticast mode [ 697.319969][ T5118] tipc: Resetting bearer [ 697.518440][ T5139] x_tables: duplicate underflow at hook 1 [ 697.675976][T21950] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 697.707241][ T5137] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 697.730861][ T5137] bond0: (slave lo): Error: Device can not be enslaved while up [ 697.885580][ T5103] xfrm0 speed is unknown, defaulting to 1000 [ 697.941925][ T5103] xfrm0 speed is unknown, defaulting to 1000 [ 697.998171][ T5103] lo speed is unknown, defaulting to 1000 [ 698.129969][ T5168] veth1_macvtap: left promiscuous mode [ 698.236879][ T5178] netlink: 'syz.1.9141': attribute type 39 has an invalid length. [ 698.273568][ T5176] netlink: 'syz.3.9140': attribute type 83 has an invalid length. [ 698.297759][ T5180] netlink: 'syz.4.9142': attribute type 1 has an invalid length. [ 698.816327][T29230] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 698.927613][ T50] Bluetooth: hci3: command tx timeout [ 698.996671][ T5212] netlink: 'syz.2.9149': attribute type 83 has an invalid length. [ 699.290982][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.333688][ T5103] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.348276][ T5103] bridge_slave_0: entered allmulticast mode [ 699.366550][ T5103] bridge_slave_0: entered promiscuous mode [ 699.402393][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.414800][ T5103] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.432546][ T5235] xt_NFQUEUE: number of total queues is 0 [ 699.440097][ T5103] bridge_slave_1: entered allmulticast mode [ 699.448529][ T5103] bridge_slave_1: entered promiscuous mode [ 699.510521][ T5103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.566714][T31026] net_ratelimit: 5 callbacks suppressed [ 699.566734][T31026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.628943][ T5103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.703834][ T5103] team0: Port device team_slave_0 added [ 699.723464][ T5103] team0: Port device team_slave_1 added [ 699.798841][ T5103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.823266][ T5103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.913544][ T5103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.966262][T29231] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 699.966630][T30694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.990239][ T5103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.013458][ T5103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.098425][ T5103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.302585][ T5103] hsr_slave_0: entered promiscuous mode [ 700.320662][ T5103] hsr_slave_1: entered promiscuous mode [ 700.335048][ T5103] debugfs: 'hsr0' already exists in 'hsr' [ 700.350052][ T5103] Cannot create hsr debugfs directory [ 700.371052][ T5266] syzkaller1: entered promiscuous mode [ 700.388579][ T5266] syzkaller1: entered allmulticast mode [ 700.419082][T29230] bond0: (slave bond_slave_0): interface is now down [ 700.443379][T29230] bond0: (slave bond_slave_1): interface is now down [ 700.523637][ T5289] __nla_validate_parse: 8 callbacks suppressed [ 700.523657][ T5289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9167'. [ 700.561748][ T5275] smc: net device team0 applied user defined pnetid SYZ2 [ 700.605714][T31026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.620652][ T5290] veth0_to_bond: left allmulticast mode [ 700.660469][ T5290] bond2: (slave veth0_to_bond): Releasing active interface [ 700.939845][ T5103] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.962103][ T5103] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.973562][ T5103] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 701.005571][ T50] Bluetooth: hci3: command tx timeout [ 701.094570][T29227] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 701.136171][ T5103] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 701.182690][ T5103] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.204738][ T5316] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.9175'. [ 701.209046][ T5103] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 701.257391][ T5315] netlink: 'syz.2.9177': attribute type 3 has an invalid length. [ 701.333472][ T5103] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 701.356598][ T5321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9178'. [ 701.382092][ T5103] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.439432][ T5103] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 701.548677][ T5103] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 701.587312][ T5103] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.610747][ T5103] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 701.657144][T31026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.703681][ T5326] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 701.724385][ T5326] syzkaller1: Refused to change device type [ 701.764211][ T5327] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 701.958572][ T5103] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 701.997224][ T5103] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 702.015338][ T5103] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 702.031354][ T5334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9183'. [ 702.044977][ T5103] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 702.061552][T29230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.072292][T30705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.083981][ T5335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9183'. [ 702.097798][ T5103] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 702.104899][T31026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.152106][ T5103] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 702.196436][ T5103] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 702.231937][ T5103] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 702.246688][T21950] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 702.269064][ T5338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9185'. [ 702.371192][ T5352] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9184'. [ 702.447595][ T5103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.487583][ T5355] netlink: 27 bytes leftover after parsing attributes in process `syz.1.9187'. [ 702.553111][ T5103] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.619187][T21949] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.626432][T21949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.659713][ T5365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9190'. [ 702.700681][ T5365] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9190'. [ 702.731189][T21949] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.738475][T21949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.762190][ T5365] Bluetooth: MGMT ver 1.23 [ 702.839756][ T5370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 702.892656][ T5371] netlink: 'syz.2.9191': attribute type 1 has an invalid length. [ 702.916871][ T5371] netlink: 'syz.2.9191': attribute type 1 has an invalid length. [ 702.927026][ T5371] netlink: 'syz.2.9191': attribute type 8 has an invalid length. [ 703.009282][ T1349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.018942][T29230] bond0: (slave bond_slave_0): interface is now down [ 703.039384][T29230] bond0: (slave bond_slave_1): interface is now down [ 703.065260][T29230] bond0: now running without any active interface! [ 703.078739][ T5388] netlink: 'syz.2.9196': attribute type 3 has an invalid length. [ 703.093713][ T5387] netlink: 'syz.2.9196': attribute type 3 has an invalid length. [ 703.100707][ T50] Bluetooth: hci3: command tx timeout [ 703.166938][T30702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.228866][ T5394] bridge1: entered allmulticast mode [ 703.254046][ T5397] netlink: 'syz.2.9199': attribute type 10 has an invalid length. [ 703.387957][T21951] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 703.631576][ T5103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.656362][ T5424] nbd: socks must be embedded in a SOCK_ITEM attr [ 703.713728][ T5103] veth0_vlan: entered promiscuous mode [ 703.763058][ T5103] veth1_vlan: entered promiscuous mode [ 703.865345][ T5103] veth0_macvtap: entered promiscuous mode [ 703.877635][ T5103] veth1_macvtap: entered promiscuous mode [ 703.932969][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.992692][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.013903][T21949] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.023686][T21949] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.057056][T21949] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.082740][T21949] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.347278][T21950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.384716][T21950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.461010][T29233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.478137][T29233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.528354][T12133] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 704.765796][ T5480] net_ratelimit: 4 callbacks suppressed [ 704.765817][ T5480] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 705.065145][ T5497] syzkaller0: entered promiscuous mode [ 705.080272][ T5497] syzkaller0: entered allmulticast mode [ 705.165879][ T50] Bluetooth: hci3: command tx timeout [ 705.222856][ T5505] syzkaller1: entered promiscuous mode [ 705.247039][T30702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.249967][ T5505] syzkaller1: entered allmulticast mode [ 705.652256][T21949] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 705.790318][ T5538] veth0: entered promiscuous mode [ 705.799689][ T5537] veth0: left promiscuous mode [ 705.823721][ T5539] geneve0: entered promiscuous mode [ 706.019584][ T5549] syzkaller0: entered promiscuous mode [ 706.025339][ T5549] syzkaller0: entered allmulticast mode [ 706.046873][T30694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.286718][T30703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.302834][ T5563] __nla_validate_parse: 10 callbacks suppressed [ 706.302856][ T5563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9246'. [ 706.356296][ T5563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9246'. [ 706.500919][ T5576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9250'. [ 706.518860][ T5576] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 706.551389][ T5576] team1: entered promiscuous mode [ 706.557873][ T5576] team1: entered allmulticast mode [ 706.716959][ T5607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9252'. [ 706.785601][ T3370] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 706.830163][ T5613] syzkaller0: entered promiscuous mode [ 706.836567][ T5613] syzkaller0: entered allmulticast mode [ 706.866532][ T5621] Cannot find add_set index 46338 as target [ 707.273710][ T5643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9262'. [ 707.310257][ T5641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9262'. [ 707.327451][T30703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.399086][ T5651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9264'. [ 707.411016][ T5651] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 707.579539][ T5664] sctp: [Deprecated]: syz.2.9269 (pid 5664) Use of int in max_burst socket option. [ 707.579539][ T5664] Use struct sctp_assoc_value instead [ 707.807384][ T3370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.817188][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.826085][T30703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.905612][T21949] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 708.212732][ T5673] syzkaller0: entered promiscuous mode [ 708.220208][ T5673] syzkaller0: entered allmulticast mode [ 708.643012][ T5678] netlink: 'syz.4.9274': attribute type 4 has an invalid length. [ 708.661804][ T5679] netlink: 'syz.4.9274': attribute type 4 has an invalid length. [ 708.828867][ T5695] netlink: 'syz.0.9279': attribute type 21 has an invalid length. [ 708.829016][ T5696] netlink: 'syz.0.9279': attribute type 21 has an invalid length. [ 708.841624][ T5695] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9279'. [ 708.857796][T30703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.859772][ T5696] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9279'. [ 709.011541][ T5702] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9280'. [ 709.021321][T29230] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 709.586489][ T5587] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 709.886784][T30703] net_ratelimit: 2 callbacks suppressed [ 709.886804][T30703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.017408][ T5749] sctp: [Deprecated]: syz.4.9289 (pid 5749) Use of int in max_burst socket option. [ 710.017408][ T5749] Use struct sctp_assoc_value instead [ 710.129066][T29233] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 710.313580][ T5768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 710.412805][ T5768] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 710.530140][ T5635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 710.539784][ T5635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 710.548946][ T5635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 710.563050][ T5635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 710.571081][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 710.930186][T30702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.172316][ T5818] wg2: Caught tx_queue_len zero misconfig [ 711.233702][ T5782] xfrm0 speed is unknown, defaulting to 1000 [ 711.252973][ T5782] xfrm0 speed is unknown, defaulting to 1000 [ 711.263973][ T5782] lo speed is unknown, defaulting to 1000 [ 711.277146][T21949] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 711.456366][ T5829] tipc: Started in network mode [ 711.462302][ T5829] tipc: Node identity 4e49e335482a, cluster identity 4711 [ 711.470945][ T5829] tipc: Enabled bearer , priority 0 [ 711.490593][ T5829] syzkaller0: entered promiscuous mode [ 711.523229][ T5829] syzkaller0: entered allmulticast mode [ 711.546961][ T5836] openvswitch: netlink: Key type 294 is out of range max 32 [ 711.684845][ T5837] tipc: Resetting bearer [ 711.838632][ T5849] xt_hashlimit: size too large, truncated to 1048576 [ 711.966999][T31026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.978928][ T5827] tipc: Resetting bearer [ 711.982997][ T5851] __nla_validate_parse: 8 callbacks suppressed [ 711.983057][ T5851] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9316'. [ 712.007135][ T5827] tipc: Disabling bearer [ 712.017044][ T5858] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9317'. [ 712.081159][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.103053][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.119498][ T5782] bridge_slave_0: entered allmulticast mode [ 712.127543][T21950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.139167][ T5782] bridge_slave_0: entered promiscuous mode [ 712.150945][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.162390][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.184385][ T5782] bridge_slave_1: entered allmulticast mode [ 712.204398][ T5782] bridge_slave_1: entered promiscuous mode [ 712.340070][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.361512][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.398048][T21949] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 712.427294][ T5782] team0: Port device team_slave_0 added [ 712.474572][ T5782] team0: Port device team_slave_1 added [ 712.519386][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.529851][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.560531][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.578494][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.605640][ T5635] Bluetooth: hci1: command tx timeout [ 712.614566][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.640107][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.656747][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.700538][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.732034][ T5887] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9326'. [ 712.840684][ T5782] hsr_slave_0: entered promiscuous mode [ 712.860394][ T5782] hsr_slave_1: entered promiscuous mode [ 712.868564][ T5782] debugfs: 'hsr0' already exists in 'hsr' [ 712.874413][ T5782] Cannot create hsr debugfs directory [ 712.959405][ T5907] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9330'. [ 712.995079][ T5905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9329'. [ 713.006098][T31026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.118758][ T5912] syzkaller0: entered promiscuous mode [ 713.126289][ T5912] syzkaller0: entered allmulticast mode [ 713.132129][ T5915] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9332'. [ 713.233403][ T5924] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9334'. [ 713.360866][T30694] IPVS: starting estimator thread 0... [ 713.372619][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9337'. [ 713.478527][ T5936] IPVS: using max 42 ests per chain, 100800 per kthread [ 713.533685][ T5946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9341'. [ 713.545229][ T137] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 713.573883][T21949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.583376][T30702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.592513][ T5946] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9341'. [ 713.640862][ T5951] gretap1: entered promiscuous mode [ 713.654641][ T5951] gretap1: entered allmulticast mode [ 713.664130][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 713.692578][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 713.718009][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 713.734737][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 713.774666][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 713.797307][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 713.806463][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.901636][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.908840][ T5977] netlink: 'syz.0.9348': attribute type 1 has an invalid length. [ 713.920987][ T5978] xt_hashlimit: size too large, truncated to 1048576 [ 714.012298][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 714.041139][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 714.080799][ T5973] ip6tnl0: entered promiscuous mode [ 714.174999][ T5979] bond1: (slave veth3): Enslaving as an active interface with a down link [ 714.189133][ T5968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 714.216232][ T5983] vlan2: entered allmulticast mode [ 714.229983][ T5983] bond0: entered allmulticast mode [ 714.239236][ T6000] netlink: 'syz.2.9355': attribute type 10 has an invalid length. [ 714.251276][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.259221][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.268740][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.298635][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.485265][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.559464][ T6019] netlink: 'syz.4.9362': attribute type 10 has an invalid length. [ 714.564471][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.614905][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.622123][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.676869][ T3370] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.684068][ T3370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.691664][ T5635] Bluetooth: hci1: command tx timeout [ 714.738722][T21949] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 715.056893][T29230] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.082947][T29230] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.104920][T29230] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.137240][T29230] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.669412][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 715.726542][T30703] net_ratelimit: 5 callbacks suppressed [ 715.726563][T30703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.828166][ T6084] dvmrp0: left allmulticast mode [ 715.871114][ T5782] veth0_vlan: entered promiscuous mode [ 715.887908][ T3370] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 715.912046][ T5782] veth1_vlan: entered promiscuous mode [ 716.059224][ T5782] veth0_macvtap: entered promiscuous mode [ 716.094555][ T5782] veth1_macvtap: entered promiscuous mode [ 716.161080][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.193658][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.237927][ T3370] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.266693][ T3370] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.301447][ T3370] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.338095][ T6103] xt_l2tp: missing protocol rule (udp|l2tpip) [ 716.342693][ T3370] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.484650][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.516936][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.580006][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.592679][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.767250][ T5635] Bluetooth: hci1: command tx timeout [ 716.772953][T30702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.948301][ T6144] syzkaller0: entered promiscuous mode [ 716.953999][ T6144] syzkaller0: entered allmulticast mode [ 717.026627][T21949] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 717.411061][ T3370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.716211][ T6196] netlink: 'syz.4.9414': attribute type 10 has an invalid length. [ 717.807169][T31026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.868303][ T6196] bond1: (slave veth0_to_bond): Releasing backup interface [ 717.889897][ T6200] __nla_validate_parse: 20 callbacks suppressed [ 717.889919][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9416'. [ 717.923999][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 717.931777][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 717.940029][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 717.948704][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 717.957594][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 718.132123][ T6201] syzkaller0: entered promiscuous mode [ 718.146612][T21949] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 718.155272][ T6201] syzkaller0: entered allmulticast mode [ 718.322650][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9420'. [ 718.447056][ T6228] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.454596][ T6228] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.493281][ T6228] bridge0: entered promiscuous mode [ 718.620781][ T6240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 718.820962][ T6251] syzkaller1: entered promiscuous mode [ 718.827435][ T6251] syzkaller1: entered allmulticast mode [ 718.844387][ T6251] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 718.853417][ T5635] Bluetooth: hci1: command tx timeout [ 718.859378][T31026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.915071][ T6205] xfrm0 speed is unknown, defaulting to 1000 [ 718.933701][ T6205] xfrm0 speed is unknown, defaulting to 1000 [ 718.956131][ T6205] lo speed is unknown, defaulting to 1000 [ 718.963920][ T6256] ipt_rpfilter: unknown options [ 719.142664][ T6264] syzkaller0: entered promiscuous mode [ 719.148602][ T6264] syzkaller0: entered allmulticast mode [ 719.255755][T21951] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 719.329141][T21951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.346332][T30708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.355096][T30703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.509553][ T6280] netlink: 'syz.1.9435': attribute type 10 has an invalid length. [ 719.545194][ T6280] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9435'. [ 719.558048][ T6284] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9437'. [ 719.583111][ T6280] team0: entered allmulticast mode [ 719.598947][ T6280] team_slave_0: entered allmulticast mode [ 719.622780][ T6280] team_slave_1: entered allmulticast mode [ 719.631298][ T6280] bridge0: port 3(team0) entered blocking state [ 719.639369][ T6280] bridge0: port 3(team0) entered disabled state [ 719.651028][ T6280] team0: entered promiscuous mode [ 719.656334][ T6280] team_slave_0: entered promiscuous mode [ 719.662309][ T6280] team_slave_1: entered promiscuous mode [ 719.669948][ T6280] bridge0: port 3(team0) entered blocking state [ 719.676393][ T6280] bridge0: port 3(team0) entered forwarding state [ 719.777027][ T6291] veth5: entered promiscuous mode [ 719.782882][ T6205] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.791013][ T6205] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.837065][ T6205] bridge_slave_0: entered allmulticast mode [ 719.856485][ T6205] bridge_slave_0: entered promiscuous mode [ 719.901309][ T6205] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.913322][ T6306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9442'. [ 719.924101][ T6205] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.934411][ T6205] bridge_slave_1: entered allmulticast mode [ 719.942819][ T6205] bridge_slave_1: entered promiscuous mode [ 720.000347][ T6205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.012929][ T6205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.047467][ T5635] Bluetooth: hci5: command tx timeout [ 720.059138][ T6205] team0: Port device team_slave_0 added [ 720.072924][ T6205] team0: Port device team_slave_1 added [ 720.109707][ T6205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.117431][ T6205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.146392][ T6205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.173799][ T6205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.185529][ T6205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.230709][ T6205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.301385][ T6205] hsr_slave_0: entered promiscuous mode [ 720.310530][ T6205] hsr_slave_1: entered promiscuous mode [ 720.317513][ T6205] debugfs: 'hsr0' already exists in 'hsr' [ 720.323317][ T6205] Cannot create hsr debugfs directory [ 720.336388][ T6314] syzkaller0: entered promiscuous mode [ 720.342156][ T6314] syzkaller0: entered allmulticast mode [ 720.367219][ T6316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9445'. [ 720.376560][ T6316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9445'. [ 720.397635][T29233] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 720.445841][T30702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.697572][ T5635] Bluetooth: hci0: command 0x0c1a tx timeout [ 720.703875][ T50] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 720.730806][ T6329] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9449'. [ 721.021168][ T6205] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.057549][ T6205] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.173661][ T6205] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.206167][ T6205] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.251602][ T6366] net_ratelimit: 1 callbacks suppressed [ 721.251624][ T6366] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 721.321300][ T6205] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.374416][ T6205] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.497634][T31026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.511251][ T137] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 721.546913][ T6205] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.560834][ T6205] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.593048][ T6378] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9462'. [ 721.756993][ T6205] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 721.795129][ T6205] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 721.812121][ T6391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9468'. [ 721.828174][ T6205] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 721.846839][ T6205] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 721.881635][ T6205] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 721.940223][ T6205] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 721.978856][ T6205] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 722.012960][ T6205] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 722.126354][ T50] Bluetooth: hci5: command tx timeout [ 722.223459][ T6205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.253839][ T6205] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.271850][T12133] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.279088][T12133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.304936][T12133] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.312145][T12133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.349967][T21951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.391543][T21951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.526288][T30703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.608111][ T6441] netlink: 'syz.2.9478': attribute type 1 has an invalid length. [ 722.688924][T21951] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 723.047067][ T6471] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9485'. [ 723.170309][T29227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.236669][ T6484] openvswitch: netlink: Message has 4 unknown bytes. [ 723.364054][ T6491] SET target dimension over the limit! [ 723.438214][ T6496] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.445455][ T6496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.453038][ T6496] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.460239][ T6496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.498395][ T6205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.567248][T30703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.633836][ T6205] veth0_vlan: entered promiscuous mode [ 723.655975][ T6205] veth1_vlan: entered promiscuous mode [ 723.719308][ T6508] veth1_to_bond: entered allmulticast mode [ 723.769734][ T6205] veth0_macvtap: entered promiscuous mode [ 723.802130][ T6508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9496'. [ 723.804906][ T6515] x_tables: duplicate underflow at hook 1 [ 723.820402][T21951] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 723.828242][ T6205] veth1_macvtap: entered promiscuous mode [ 723.830051][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9498'. [ 723.933064][ T6508] veth1_to_bond (unregistering): left allmulticast mode [ 723.942793][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 723.960893][ T6508] bond0: (slave bond_slave_1): Releasing backup interface [ 723.970957][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 723.985943][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.019806][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.087718][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.138313][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9502'. [ 724.156033][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.177803][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9503'. [ 724.187128][ T6528] netlink: 176 bytes leftover after parsing attributes in process `syz.0.9503'. [ 724.198698][ T6528] netlink: 'syz.0.9503': attribute type 5 has an invalid length. [ 724.207502][ T50] Bluetooth: hci5: command tx timeout [ 724.219883][ T6517] syzkaller0: entered promiscuous mode [ 724.226706][ T6517] syzkaller0: entered allmulticast mode [ 724.230370][ T6529] netlink: 256 bytes leftover after parsing attributes in process `syz.4.9502'. [ 724.249283][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.261811][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.273469][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.289066][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.303604][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.325306][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.338159][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.352650][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.364603][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.394089][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.408812][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.420356][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.434634][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.463768][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.477164][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.489629][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.512190][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.524947][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.538893][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.551321][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.601654][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.614255][T30703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.628178][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.640185][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.654362][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.668363][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.681317][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.700512][ T6535] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9505'. [ 724.710609][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.724397][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.738413][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.751566][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.769140][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.782819][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.795179][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.808057][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.828065][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.840986][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.862218][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.876632][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.888782][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.904412][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.917016][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.924214][ T6205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.935895][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.947776][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.962797][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.974027][T21950] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 725.023941][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.052186][ T6529] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.065087][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.087824][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.097148][T30703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.107164][T31026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.119917][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.132221][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.144748][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.158143][ T6205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 725.163976][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.179804][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.191575][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.204116][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.215681][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.217440][ T6539] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9506'. [ 725.232825][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.254615][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9506'. [ 725.267322][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.289392][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.300815][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.320737][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.334505][ T6529] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.385179][T29231] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.401072][ T6544] netlink: 'syz.0.9508': attribute type 21 has an invalid length. [ 725.412842][T29227] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.414578][ T6545] netlink: 'syz.0.9508': attribute type 21 has an invalid length. [ 725.479783][ T6544] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 725.491650][ T6544] bond2 (unregistering): Released all slaves [ 725.538620][ T6545] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 725.562125][ T6545] bond2 (unregistering): Released all slaves [ 725.597113][T29227] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.607743][T29227] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.624567][ T6529] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.680088][ T6547] bridge3: entered promiscuous mode [ 725.695581][ T6547] bridge3: entered allmulticast mode [ 725.792617][ T6529] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.850585][ T6559] tipc: Started in network mode [ 725.864102][ T6559] tipc: Node identity fec909bd003c, cluster identity 4711 [ 725.889888][ T6559] tipc: Enabled bearer , priority 0 [ 725.898456][ T6570] IPv6: NLM_F_CREATE should be specified when creating new route [ 725.908765][ T6570] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 725.916091][ T6570] IPv6: NLM_F_CREATE should be set when creating new route [ 725.994226][ T6557] tipc: Disabling bearer [ 726.011728][ T6569] syzkaller0: entered promiscuous mode [ 726.019632][ T6569] syzkaller0: entered allmulticast mode [ 726.098976][T21951] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 726.285712][ T50] Bluetooth: hci5: command tx timeout [ 726.326641][T29227] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.363967][T29227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.374871][T21950] net_ratelimit: 1 callbacks suppressed [ 726.374889][T21950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.417548][T29227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.489635][ T137] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.501236][ T137] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.596447][T21950] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.618945][T21950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.640200][T21950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.907599][ T6617] netlink: 'syz.3.9412': attribute type 4 has an invalid length. [ 726.929210][ T6615] vlan2: entered allmulticast mode [ 726.934726][ T6617] netlink: 'syz.3.9412': attribute type 3 has an invalid length. [ 726.951813][ T6617] netlink: 'syz.3.9412': attribute type 1 has an invalid length. [ 726.996809][ T6620] syzkaller0: entered promiscuous mode [ 727.015390][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 727.038376][ T6620] syzkaller0: entered allmulticast mode [ 727.166640][T30702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.215986][T21951] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 727.333328][ T6631] netlink: 'syz.0.9536': attribute type 15 has an invalid length. [ 727.698839][ T6658] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 727.834510][ T6669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 727.895068][ T6672] syzkaller0: entered promiscuous mode [ 727.907041][ T6672] syzkaller0: entered allmulticast mode [ 727.917005][ T6674] openvswitch: netlink: Missing valid actions attribute. [ 727.937543][ T6674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.191259][ T6690] __nla_validate_parse: 12 callbacks suppressed [ 728.191280][ T6690] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9555'. [ 728.211525][T30705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.295349][T30708] IPVS: starting estimator thread 0... [ 728.329830][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9555'. [ 728.342403][ T6693] netlink: 'syz.4.9555': attribute type 29 has an invalid length. [ 728.354826][T29227] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 728.393375][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9555'. [ 728.416604][ T6698] IPVS: using max 42 ests per chain, 100800 per kthread [ 728.432758][ T6699] macvlan0: entered promiscuous mode [ 728.893673][ T6718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9561'. [ 728.928092][T29227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.044522][ T6723] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9564'. [ 729.308787][ T6732] veth0: entered promiscuous mode [ 729.350761][T30703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.478365][ T6730] veth0: left promiscuous mode [ 729.517832][T21949] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 729.978486][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9570'. [ 730.206916][T21950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.257038][ T6744] syzkaller0: entered promiscuous mode [ 730.300803][ T6744] syzkaller0: entered allmulticast mode [ 730.665967][T20809] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 730.781245][ T6768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9574'. [ 731.092882][ T6778] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9577'. [ 731.163983][ T6778] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 731.164057][ T6778] block (null): Could not allocate knbd recv work queue. [ 731.285298][ T6778] nbd: failed to add new device [ 731.775417][T31026] net_ratelimit: 2 callbacks suppressed [ 731.775474][T31026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.856968][T20809] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 732.134168][T29230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.847989][T31026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.004243][ T137] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 733.128002][ T6820] ipip0: entered promiscuous mode [ 733.466368][ T6826] sch_tbf: burst 1040 is lower than device syzkaller0 mtu (1514) ! [ 733.533570][ T6831] syzkaller0: entered promiscuous mode [ 733.587963][ T6831] syzkaller0: entered allmulticast mode [ 733.870085][ T6837] Cannot find add_set index 2 as target [ 733.949735][T31026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.127940][ T3370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.187720][ T3370] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 734.411383][ T6848] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9601'. [ 734.596383][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9604'. [ 734.673026][ T6857] netlink: 'syz.0.9604': attribute type 5 has an invalid length. [ 734.736691][ T6857] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9604'. [ 734.901882][ T6857] geneve2: entered promiscuous mode [ 734.909350][ T6874] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9607'. [ 734.931789][ T6877] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9608'. [ 734.948933][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9608'. [ 734.960954][ T6857] geneve2: entered allmulticast mode [ 734.968828][ T6877] netlink: 31 bytes leftover after parsing attributes in process `syz.2.9608'. [ 735.000008][ T6877] netlink: 'syz.2.9608': attribute type 3 has an invalid length. [ 735.008537][T30705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.035183][ T6877] netlink: 'syz.2.9608': attribute type 2 has an invalid length. [ 735.055344][ T6877] netlink: 31 bytes leftover after parsing attributes in process `syz.2.9608'. [ 735.143860][ T3370] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 735.181417][ T3370] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 735.245105][ T3370] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 735.341991][ T3370] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 735.370083][T29230] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 735.532992][ T6888] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9613'. [ 735.549402][ T6889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9612'. [ 736.226952][T30705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.548573][T29227] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 736.794335][ T6927] IPVS: set_ctl: invalid protocol: 135 172.20.20.59:20004 [ 736.902499][ T6930] veth1_macvtap: left promiscuous mode [ 736.922389][ T6930] macsec0: entered promiscuous mode [ 736.940027][ T6933] x_tables: duplicate underflow at hook 1 [ 737.205312][ T6939] syzkaller0: entered promiscuous mode [ 737.251155][T30703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.293139][ T6939] syzkaller0: entered allmulticast mode [ 737.598700][ T6951] IPVS: set_ctl: invalid protocol: 1 172.30.0.3:20001 [ 737.767931][T12133] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 737.888605][T29227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.349696][T31026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.841140][ T6955] aoe: error packet from 24442.111@lo; ecode=101 'no such error' [ 738.849038][ T6955] aoe: error packet from 24442.111@lo; ecode=101 'no such error' [ 738.856889][ T6955] aoe: error packet from 24442.111@lo; ecode=101 'no such error' [ 738.864693][ T6955] aoe: error packet from 24442.111@lo; ecode=101 'no such error' [ 738.872587][ T6955] aoe: error packet from 24442.111@lo; ecode=101 'no such error' [ 738.880401][ T6955] aoe: error packet from 24442.111@lo; ecode=101 'no such error' [ 738.888313][ T6955] aoe: error packet from 24442.111@lo; ecode=101 'no such error' [ 739.132726][T29233] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 739.506808][ T6994] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 740.307638][T29233] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 740.387463][ T7034] __nla_validate_parse: 3 callbacks suppressed [ 740.387483][ T7034] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9648'. [ 740.464588][ T7034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9648'. [ 740.494463][ T7038] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9650'. [ 740.589291][ T7034] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9648'. [ 740.871127][ T7050] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.9654'. [ 741.113983][ T7054] lo: entered allmulticast mode [ 741.149284][ T7054] tunl0: entered allmulticast mode [ 741.233753][ T7054] gre0: entered allmulticast mode [ 741.387421][ T7054] gretap0: entered allmulticast mode [ 741.475642][T20809] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 741.554314][ T7054] erspan0: entered allmulticast mode [ 741.639239][ T7054] ip_vti0: entered allmulticast mode [ 741.703858][ T7054] ip6_vti0: entered allmulticast mode [ 741.754830][ T7054] sit0: entered allmulticast mode [ 741.827835][ T7054] ip6tnl0: entered allmulticast mode [ 741.907691][ T7054] ip6gre0: entered allmulticast mode [ 742.009800][ T7054] syz_tun: entered allmulticast mode [ 742.106630][ T7057] tipc: Started in network mode [ 742.123342][ T7057] tipc: Node identity ac14140f, cluster identity 4711 [ 742.150548][ T7057] tipc: New replicast peer: 255.255.255.255 [ 742.158953][ T7057] tipc: Enabled bearer , priority 10 [ 742.521422][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9662'. [ 742.647641][T12133] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 742.840282][T30703] net_ratelimit: 831 callbacks suppressed [ 742.840305][T30703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.012219][ T3370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.324096][ T7093] syzkaller0: entered promiscuous mode [ 743.373513][ T7093] syzkaller0: entered allmulticast mode [ 743.636118][T30703] tipc: Node number set to 2886997007 [ 743.648254][ T7103] syzkaller0: entered promiscuous mode [ 743.692925][ T7103] syzkaller0: entered allmulticast mode [ 743.796917][ T3370] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 743.885825][T30703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.943342][T30705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.957191][ T3370] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 745.369457][ T7109] xfrm0 speed is unknown, defaulting to 1000 [ 745.399073][ T7109] xfrm0 speed is unknown, defaulting to 1000 [ 745.452662][ T7109] lo speed is unknown, defaulting to 1000 [ 745.532079][ T7151] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.9677'. [ 745.571835][T20809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.626497][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9676'. [ 745.932504][ T7161] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9681'. [ 745.965851][T30703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.087354][ T3370] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 746.457961][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9685'. [ 746.592833][ T7174] netlink: 'syz.1.9685': attribute type 29 has an invalid length. [ 746.636200][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9685'. [ 746.679264][ T7190] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:23869 [ 746.707717][ T7189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 746.763437][ T7189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9690'. [ 747.029448][T30703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.193493][ T7205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9694'. [ 747.268206][T21951] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 747.297559][ T7203] netlink: 412 bytes leftover after parsing attributes in process `syz.3.9693'. [ 747.489322][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 747.507108][ T7203] netlink: 'syz.3.9693': attribute type 1 has an invalid length. [ 747.843852][ T7226] netlink: 'syz.0.9698': attribute type 1 has an invalid length. [ 747.880495][ T7203] 8021q: adding VLAN 0 to HW filter on device bond2 [ 747.930632][ T7233] netlink: 'syz.3.9693': attribute type 1 has an invalid length. [ 747.999533][ T7233] netlink: 'syz.3.9693': attribute type 2 has an invalid length. [ 748.023508][ T7222] bond2: (slave veth0_to_bond): making interface the new active one [ 748.048421][T30703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.087943][ T7222] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 748.104390][ T7226] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 748.114262][ T7232] netlink: 'syz.4.9699': attribute type 1 has an invalid length. [ 748.258759][ T7232] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9699'. [ 748.313175][ T7242] syzkaller0: entered promiscuous mode [ 748.339954][ T7242] syzkaller0: entered allmulticast mode [ 748.501058][T21949] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 748.601376][ T7257] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9705'. [ 748.770699][T21951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.278646][T31026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.295950][ T7270] xt_hashlimit: size too large, truncated to 1048576 [ 749.369153][T30708] IPVS: starting estimator thread 0... [ 750.552212][ T7271] IPVS: using max 34 ests per chain, 81600 per kthread [ 752.198221][T30703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.279162][ T4989] udevd[4989]: worker [23386] /devices/virtual/block/nbd0 timeout; kill it [ 752.312958][ T4989] udevd[4989]: seq 32572 '/devices/virtual/block/nbd0' killed [ 754.344483][ C1] sched: DL replenish lagged too much [ 776.871862][T21951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.210944][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.219243][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.696179][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 807.499018][ T4658] Bluetooth: hci0: command 0x0c1a tx timeout [ 811.603790][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.422359][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 842.687269][T21947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.215406][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 855.222848][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7270/1:b..l [ 855.230822][ C1] rcu: (detected by 1, t=10503 jiffies, g=168277, q=1077267 ncpus=2) [ 855.239750][ C1] task:syz.2.9707 state:R running task stack:25656 pid:7270 tgid:7265 ppid:4227 task_flags:0x400140 flags:0x00080000 [ 855.253303][ C1] Call Trace: [ 855.256634][ C1] [ 855.259605][ C1] __schedule+0x17d9/0x56c0 [ 855.264463][ C1] ? lock_release+0x4b/0x3c0 [ 855.270181][ C1] ? unwind_next_frame+0x8f/0x2550 [ 855.275399][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 855.282047][ C1] ? __pfx___schedule+0x10/0x10 [ 855.286955][ C1] ? rawv6_setsockopt+0x276/0x5e0 [ 855.292033][ C1] ? rcu_is_watching+0x15/0xb0 [ 855.296847][ C1] preempt_schedule_irq+0x4d/0xa0 [ 855.301925][ C1] irqentry_exit+0x14f/0x8f0 [ 855.306656][ C1] ? trace_irq_disable+0x3b/0x140 [ 855.312187][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 855.318418][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x90 [ 855.325614][ C1] Code: 11 10 48 89 74 11 18 48 89 44 11 20 e9 59 da e4 09 cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 15 98 45 74 11 65 8b 0d b9 45 74 [ 855.346077][ C1] RSP: 0018:ffffc9000796ef00 EFLAGS: 00000246 [ 855.352201][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000080000001 [ 855.360294][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 855.368310][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 855.376499][ C1] R10: 0000000000000010 R11: ffffffff81b10630 R12: ffffea0000a656c0 [ 855.384860][ C1] R13: 1ffffd400014cad9 R14: ffffffff823b091e R15: 000000aeaa87c688 [ 855.393149][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 855.399456][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 855.405678][ C1] __update_page_owner_free_handle+0x5f/0x470 [ 855.412446][ C1] __reset_page_owner+0x85/0x1f0 [ 855.418494][ C1] __free_frozen_pages+0xc0d/0xd20 [ 855.424166][ C1] ? __free_slab+0x172/0x280 [ 855.429010][ C1] __slab_free+0x274/0x2c0 [ 855.434277][ C1] ? qlist_free_all+0x8e/0x100 [ 855.439417][ C1] qlist_free_all+0x99/0x100 [ 855.444928][ C1] kasan_quarantine_reduce+0x148/0x160 [ 855.451417][ C1] __kasan_kmalloc+0x22/0xb0 [ 855.456072][ C1] __kmalloc_node_noprof+0x4dc/0x7b0 [ 855.461875][ C1] ? __vmalloc_node_range_noprof+0x5d9/0x1730 [ 855.469773][ C1] ? __kmalloc_node_noprof+0x34b/0x7b0 [ 855.475741][ C1] __vmalloc_node_range_noprof+0x5d9/0x1730 [ 855.482260][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 855.488823][ C1] ? __get_vm_area_node+0x136/0x300 [ 855.494449][ C1] ? __kmalloc_cache_node_noprof+0x236/0x690 [ 855.501101][ C1] ? __get_vm_area_node+0x1f2/0x300 [ 855.506371][ C1] ? __get_vm_area_node+0x289/0x300 [ 855.511622][ C1] ? htable_create+0x100/0x7a0 [ 855.516531][ C1] __vmalloc_node_range_noprof+0x5b1/0x1730 [ 855.522569][ C1] ? htable_create+0x100/0x7a0 [ 855.527524][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 855.533911][ C1] ? alloc_pages_mpol+0x24a/0x380 [ 855.539016][ C1] ? rcu_is_watching+0x15/0xb0 [ 855.543917][ C1] ? rcu_is_watching+0x15/0xb0 [ 855.548912][ C1] __kvmalloc_node_noprof+0x5b2/0x890 [ 855.554881][ C1] ? htable_create+0x100/0x7a0 [ 855.559704][ C1] ? htable_create+0x100/0x7a0 [ 855.564809][ C1] ? hashlimit_pernet+0x23/0x240 [ 855.569906][ C1] ? hashlimit_pernet+0x23/0x240 [ 855.575452][ C1] htable_create+0x100/0x7a0 [ 855.580199][ C1] hashlimit_mt_check_common+0x713/0xa00 [ 855.586088][ C1] xt_check_match+0x602/0xce0 [ 855.590841][ C1] ? __pfx_xt_check_match+0x10/0x10 [ 855.596140][ C1] ? pcpu_alloc_noprof+0x1036/0x1900 [ 855.601759][ C1] ? xt_find_match+0x213/0x260 [ 855.607294][ C1] translate_table+0x1524/0x2040 [ 855.612470][ C1] ? __pfx_translate_table+0x10/0x10 [ 855.617800][ C1] ? __might_fault+0xaf/0x130 [ 855.623104][ C1] ? rcu_is_watching+0x15/0xb0 [ 855.628452][ C1] ? lock_acquire+0x5f/0x350 [ 855.633119][ C1] ? rcu_is_watching+0x15/0xb0 [ 855.638650][ C1] ? __might_fault+0xcb/0x130 [ 855.644003][ C1] ? _copy_from_user+0x94/0xb0 [ 855.649996][ C1] do_ip6t_set_ctl+0xa5c/0xe30 [ 855.655356][ C1] ? rcu_is_watching+0x15/0xb0 [ 855.660633][ C1] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 855.666424][ C1] ? rcu_is_watching+0x15/0xb0 [ 855.672004][ C1] ? __mutex_unlock_slowpath+0x724/0x8e0 [ 855.678338][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 855.684479][ C1] nf_setsockopt+0x26f/0x290 [ 855.689655][ C1] rawv6_setsockopt+0x276/0x5e0 [ 855.694681][ C1] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 855.700990][ C1] ? aa_sock_opt_perm+0xff/0x1a0 [ 855.706519][ C1] ? sock_common_setsockopt+0x36/0xc0 [ 855.712691][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 855.718939][ C1] do_sock_setsockopt+0x17c/0x1b0 [ 855.724508][ C1] __x64_sys_setsockopt+0x13d/0x1b0 [ 855.730317][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.737360][ C1] do_syscall_64+0x174/0x580 [ 855.743320][ C1] ? trace_irq_disable+0x3b/0x140 [ 855.749233][ C1] ? clear_bhb_loop+0x40/0x90 [ 855.754060][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.760172][ C1] RIP: 0033:0x7f84bed9ce59 [ 855.764730][ C1] RSP: 002b:00007f84bfbd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 855.773364][ C1] RAX: ffffffffffffffda RBX: 00007f84bf015fa0 RCX: 00007f84bed9ce59 [ 855.781760][ C1] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 855.790265][ C1] RBP: 00007f84bee32e6f R08: 00000000000005c0 R09: 0000000000000000 [ 855.799198][ C1] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 855.807780][ C1] R13: 00007f84bf016038 R14: 00007f84bf015fa0 R15: 00007ffd83d37628 [ 855.815909][ C1] [ 855.818974][ C1] rcu: rcu_preempt kthread starved for 405 jiffies! g168277 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 855.831255][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 855.842167][ C1] rcu: RCU grace-period kthread stack dump: [ 855.848948][ C1] task:rcu_preempt state:R running task stack:28056 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 855.863385][ C1] Call Trace: [ 855.867381][ C1] [ 855.871419][ C1] __schedule+0x17d9/0x56c0 [ 855.875981][ C1] ? rcu_is_watching+0x15/0xb0 [ 855.881171][ C1] ? rcu_is_watching+0x15/0xb0 [ 855.886166][ C1] ? __pfx___schedule+0x10/0x10 [ 855.891071][ C1] ? schedule+0x90/0x360 [ 855.895492][ C1] ? rcu_is_watching+0x15/0xb0 [ 855.900485][ C1] ? lock_release+0x4b/0x3c0 [ 855.905429][ C1] schedule+0x164/0x360 [ 855.910253][ C1] schedule_timeout+0x152/0x2c0 [ 855.915437][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 855.921080][ C1] ? __pfx_process_timeout+0x10/0x10 [ 855.926691][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 855.932569][ C1] ? prepare_to_swait_event+0x322/0x350 [ 855.938193][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 855.943496][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 855.950271][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 855.955613][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 855.960968][ C1] ? trace_irq_enable+0x3b/0x140 [ 855.966150][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 855.971061][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 855.976409][ C1] ? __kthread_parkme+0x71/0x1f0 [ 855.981537][ C1] ? __kthread_parkme+0x196/0x1f0 [ 855.986630][ C1] kthread+0x388/0x470 [ 855.990765][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 855.996021][ C1] ? __pfx_kthread+0x10/0x10 [ 856.000670][ C1] ret_from_fork+0x514/0xb70 [ 856.005688][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 856.010846][ C1] ? __switch_to+0xc89/0x1420 [ 856.015801][ C1] ? __pfx_kthread+0x10/0x10 [ 856.021586][ C1] ret_from_fork_asm+0x1a/0x30 [ 856.026431][ C1] [ 856.029535][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 856.036069][ C1] CPU: 1 UID: 0 PID: 456 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 856.045651][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 856.055843][ C1] Workqueue: krds_cp_wq#32/3 rds_connect_worker [ 856.062231][ C1] RIP: 0010:l3mdev_update_flow+0x70/0x610 [ 856.068007][ C1] Code: 08 e8 64 5c 1d 00 89 c5 31 ff 89 c6 e8 39 7c 3b f6 85 ed 74 10 e8 b0 6b 20 f6 84 c0 74 0e e8 e7 77 3b f6 eb 56 e8 e0 77 3b f6 4f e8 39 5c 1d 00 89 c5 31 ff 89 c6 e8 0e 7c 3b f6 85 ed 74 10 [ 856.087915][ C1] RSP: 0018:ffffc90000a07dc0 EFLAGS: 00000246 [ 856.094129][ C1] RAX: ffffffff8b8a7e40 RBX: ffffc90000a08180 RCX: ffff888024abbe00 [ 856.102230][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 856.110249][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 856.118545][ C1] R10: ffffc90000a07e40 R11: fffff52000140fca R12: ffff88807ce4ce80 [ 856.126746][ C1] R13: ffffffff8b8a7df6 R14: ffffc90000a08180 R15: ffff88807ce4ce80 [ 856.134788][ C1] FS: 0000000000000000(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 [ 856.144193][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 856.150912][ C1] CR2: 00007f84bfbb3ff8 CR3: 0000000057020000 CR4: 00000000003526f0 [ 856.158942][ C1] Call Trace: [ 856.162270][ C1] [ 856.165169][ C1] __fib_lookup+0xd3/0x210 [ 856.169730][ C1] ? __pfx___fib_lookup+0x10/0x10 [ 856.174803][ C1] ? trace_fib_table_lookup+0x85/0x210 [ 856.180401][ C1] ? fib_table_lookup+0x11e1/0x16e0 [ 856.185653][ C1] ? fib_lookup+0x49/0x440 [ 856.190416][ C1] ? ip_route_output_key_hash_rcu+0x274/0x2720 [ 856.197069][ C1] ip_route_output_key_hash_rcu+0x294/0x2720 [ 856.203110][ C1] ? ip_route_output_key_hash+0xd8/0x2a0 [ 856.208968][ C1] ? ip_route_output_key_hash+0xd8/0x2a0 [ 856.214663][ C1] ip_route_output_key_hash+0x18d/0x2a0 [ 856.220347][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 856.226468][ C1] ? ip_route_me_harder+0x52e/0xfe0 [ 856.231861][ C1] ? rcu_is_watching+0x15/0xb0 [ 856.236927][ C1] ? rcu_is_watching+0x15/0xb0 [ 856.241776][ C1] ip_route_output_flow+0x2a/0x150 [ 856.247963][ C1] ip_route_me_harder+0x762/0xfe0 [ 856.253079][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 856.258694][ C1] ? __cookie_v4_init_sequence+0x273/0x510 [ 856.265301][ C1] ? __pfx___cookie_v4_init_sequence+0x10/0x10 [ 856.271624][ C1] synproxy_send_tcp+0x347/0x670 [ 856.276884][ C1] synproxy_send_client_synack+0x89b/0xde0 [ 856.283022][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 856.289925][ C1] ? synproxy_pernet+0x45/0x270 [ 856.295104][ C1] nft_synproxy_eval_v4+0x37b/0x530 [ 856.300389][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 856.306524][ C1] ? __ip_vs_conn_in_get+0x2db/0x10f0 [ 856.311998][ C1] ? nf_ip_checksum+0x13c/0x510 [ 856.316916][ C1] nft_synproxy_do_eval+0x335/0x550 [ 856.322176][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 856.328554][ C1] ? nft_trace_init+0x280/0x4d0 [ 856.334531][ C1] ? __ip_vs_conn_in_get+0xa6/0x10f0 [ 856.339977][ C1] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 856.345851][ C1] nft_do_chain+0x48d/0x1b10 [ 856.351273][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 856.356570][ C1] ? __pfx_ip_vs_fill_iph_skb_off+0x10/0x10 [ 856.363164][ C1] nft_do_chain_inet+0x360/0x4b0 [ 856.368957][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 856.375367][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 856.382513][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 856.389001][ C1] nf_hook_slow+0xc5/0x220 [ 856.393786][ C1] NF_HOOK+0x21f/0x3c0 [ 856.398703][ C1] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 856.404402][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 856.410556][ C1] ? NF_HOOK+0x9e/0x3c0 [ 856.415045][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 856.419894][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 856.426254][ C1] ? ip_local_deliver+0x113/0x190 [ 856.431504][ C1] NF_HOOK+0x336/0x3c0 [ 856.435633][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 856.440894][ C1] ? NF_HOOK+0x9e/0x3c0 [ 856.445092][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 856.449828][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 856.455083][ C1] ? ip_rcv_core+0x88d/0xd50 [ 856.459732][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 856.464281][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 856.468946][ C1] process_backlog+0xa34/0x1860 [ 856.474198][ C1] ? process_backlog+0x3c3/0x1860 [ 856.479279][ C1] __napi_poll+0xaa/0x330 [ 856.483743][ C1] net_rx_action+0x61d/0xf50 [ 856.488395][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 856.493753][ C1] handle_softirqs+0x225/0x840 [ 856.498570][ C1] ? do_softirq+0x76/0xd0 [ 856.502947][ C1] ? __inet6_bind+0x301/0xf30 [ 856.507670][ C1] do_softirq+0x76/0xd0 [ 856.511895][ C1] [ 856.514858][ C1] [ 856.517823][ C1] __local_bh_enable_ip+0xf8/0x130 [ 856.522986][ C1] __inet6_bind+0x301/0xf30 [ 856.527555][ C1] kernel_bind+0x13e/0x1c0 [ 856.532021][ C1] ? __pfx_kernel_bind+0x10/0x10 [ 856.537110][ C1] ? rds_tcp_conn_path_connect+0x336/0x920 [ 856.543057][ C1] rds_tcp_conn_path_connect+0x53b/0x920 [ 856.549018][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 856.555220][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 856.560386][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 856.566163][ C1] ? rcu_is_watching+0x15/0xb0 [ 856.571014][ C1] ? lock_acquire+0x5f/0x350 [ 856.575687][ C1] rds_connect_worker+0x1d8/0x290 [ 856.580819][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 856.586621][ C1] process_scheduled_works+0xa8e/0x14e0 [ 856.592402][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 856.598538][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 856.603699][ C1] ? assign_work+0x3cf/0x5d0 [ 856.608461][ C1] worker_thread+0xa47/0xfb0 [ 856.613163][ C1] ? __kthread_parkme+0x71/0x1f0 [ 856.618202][ C1] kthread+0x388/0x470 [ 856.622346][ C1] ? __pfx_worker_thread+0x10/0x10 [ 856.627551][ C1] ? __pfx_kthread+0x10/0x10 [ 856.632399][ C1] ret_from_fork+0x514/0xb70 [ 856.637100][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 856.642507][ C1] ? __switch_to+0xc89/0x1420 [ 856.647254][ C1] ? __pfx_kthread+0x10/0x10 [ 856.651888][ C1] ret_from_fork_asm+0x1a/0x30 [ 856.656887][ C1]